last executing test programs: 2m53.173000219s ago: executing program 4 (id=1017): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x2, r1, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, 0xffffffffffffffff, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x1c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000010"], 0x18}, 0x0) 2m52.92260432s ago: executing program 4 (id=1022): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80ad}, 0x1c) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xce20, 0xfffffffe, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r10 = socket(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000040)={0x2, 0xe20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) 2m52.024234747s ago: executing program 4 (id=1026): socket$netlink(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x31) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0xdd) write$P9_RVERSION(r0, &(0x7f00000001c0)=ANY=[@ANYRES64=0x0, @ANYRES32=r0], 0x15) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 2m51.872519737s ago: executing program 4 (id=1029): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1833d, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r1, 0x5}, &(0x7f0000000140)=0x8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x74, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x0, 0x10}, {0xffe0, 0x1}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x40, 0x0, 0x40, 0x0, 0x0, 0x8, 0x6}}, {0x10, 0x2, [0x6, 0x7fff, 0xfffe, 0x0, 0x5, 0x3]}}, {{0x1c, 0x1, {0x9, 0x6, 0xc, 0x1ff, 0x1, 0x0, 0xfffffffc}}, {0x4}}]}]}, 0x74}}, 0x24008000) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$bpf(0x0, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380), 0xb8002, &(0x7f0000003b00)={[{@mode={'mode', 0x3d, 0x7ff}}, {}, {}, {@mode={'mode', 0x3d, 0x209}}, {@mode}], [{@context={'context', 0x3d, 'user_u'}}]}) 2m51.649548124s ago: executing program 4 (id=1034): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000039c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f00000005c0)={&(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x28, 0x3e, 0xb235333, 0x1, 0x4, 0x4000001, 0x0, 0x0, 0x0, 0xe, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m51.218723415s ago: executing program 4 (id=1039): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="10000500420005003c0012800b00010067656e65766500002c000280140012"], 0x5c}}, 0x40) 2m50.880121568s ago: executing program 32 (id=1039): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="10000500420005003c0012800b00010067656e65766500002c000280140012"], 0x5c}}, 0x40) 2m45.833319172s ago: executing program 2 (id=1078): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8821}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x4, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x808d4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m45.225061843s ago: executing program 2 (id=1083): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000140)='1\x00', 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000040)={0x4, {"0dbad96fff01000008ff00200800", "3dfab043e15fad27a639f905b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40010, 0x6}) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0x5) 2m44.880444646s ago: executing program 2 (id=1086): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m44.721977246s ago: executing program 2 (id=1089): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1833d, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r1, 0x5}, &(0x7f0000000140)=0x8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x74, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x0, 0x10}, {0xffe0, 0x1}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x40, 0x0, 0x40, 0x0, 0x0, 0x8, 0x6}}, {0x10, 0x2, [0x6, 0x7fff, 0xfffe, 0x0, 0x5, 0x3]}}, {{0x1c, 0x1, {0x9, 0x6, 0xc, 0x1ff, 0x1, 0x0, 0xfffffffc}}, {0x4}}]}]}, 0x74}}, 0x24008000) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x0, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380), 0xb8002, &(0x7f0000003b00)={[{@mode={'mode', 0x3d, 0x7ff}}, {}, {}, {@mode={'mode', 0x3d, 0x209}}, {@mode}], [{@context={'context', 0x3d, 'user_u'}}]}) 2m44.486924085s ago: executing program 2 (id=1092): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x144, 0x10, 0x1, 0x70bc2b, 0x4000000, {{@in6=@dev={0xfe, 0x80, '\x00', 0x22}, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x8, 0x3, 0x5, 0xa, 0x60}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in=@multicast2, {0xfffffffffffffffe, 0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x89}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x70bd26, 0x0, 0x2, 0x4, 0x0, 0x6c}, [@algo_crypt={0x54, 0x2, {{'cbc(twofish)\x00'}, 0x60, "72f01afe02000000366a6a84"}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) 2m44.025272027s ago: executing program 0 (id=1094): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)) syz_open_dev$vbi(0x0, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u32=0x0}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x100140a, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2m43.889992117s ago: executing program 2 (id=1095): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff0100000000000000000000000000010000000000000000050000000000000000000000000000000000000000000000000000000000000004"], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m43.887309546s ago: executing program 0 (id=1096): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000140)='1\x00', 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000f, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000040)={0x4, {"0dbad96fff01000008ff00200800", "3dfab043e15fad27a639f905b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40010, 0x6}) preadv(r2, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0x5) 2m43.534453929s ago: executing program 33 (id=1095): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff0100000000000000000000000000010000000000000000050000000000000000000000000000000000000000000000000000000000000004"], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2m42.901411464s ago: executing program 0 (id=1101): r0 = openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r0, 0xc0086442, &(0x7f0000000980)) 2m42.714624129s ago: executing program 0 (id=1102): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1833d, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r1, 0x5}, &(0x7f0000000140)=0x8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x74, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x0, 0x10}, {0xffe0, 0x1}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x40, 0x0, 0x40, 0x0, 0x0, 0x8, 0x6}}, {0x10, 0x2, [0x6, 0x7fff, 0xfffe, 0x0, 0x5, 0x3]}}, {{0x1c, 0x1, {0x9, 0x6, 0xc, 0x1ff, 0x1, 0x0, 0xfffffffc}}, {0x4}}]}]}, 0x74}}, 0x24008000) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380), 0xb8002, &(0x7f0000003b00)={[{@mode={'mode', 0x3d, 0x7ff}}, {}, {}, {@mode={'mode', 0x3d, 0x209}}, {@mode}], [{@context={'context', 0x3d, 'user_u'}}]}) 2m42.510347345s ago: executing program 0 (id=1104): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1c8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x100000001, {0x0, 0x2, 0x1, 0x4, 0x6, 0xf0, {0x405, 0x10001, 0x1ffffffffffd, 0xd, 0x0, 0x4, 0x10000, 0x2, 0x6, 0x4000, 0xb7a, r2, r3, 0x7, 0xa}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x56c7, 0x0, 0x0, 0x6, 0x400, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r4}, 0x10) 2m42.11063737s ago: executing program 0 (id=1107): syz_emit_ethernet(0x36, &(0x7f0000000280)={@random="a24858ca13d1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x7, 0x28, 0x68, 0x0, 0x7, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@ra={0x94, 0x4}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0x2d, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a3000000000"], 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 2m41.80674795s ago: executing program 34 (id=1107): syz_emit_ethernet(0x36, &(0x7f0000000280)={@random="a24858ca13d1", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x1, 0x7, 0x28, 0x68, 0x0, 0x7, 0x21, 0x0, @rand_addr=0x64010100, @local, {[@ra={0x94, 0x4}]}}, {{0x4e21, 0x4e21, 0x4, 0x1, 0xb, 0x0, 0x0, 0x0, 0x2, "740e23", 0x2d, '1\x00'}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000700180a050000000000000000000a0000000900010073797a3000000000"], 0x54}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) 2m40.895034942s ago: executing program 1 (id=1111): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x1c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000010"], 0x18}, 0x0) 2m40.61461299s ago: executing program 1 (id=1112): r0 = openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r0, 0xc0086442, &(0x7f0000000980)) 2m40.536808213s ago: executing program 1 (id=1113): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80ad}, 0x1c) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xce20, 0xfffffffe, @empty}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r9 = socket(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0xe20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) 2m40.358511754s ago: executing program 1 (id=1114): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1833d, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r1, 0x5}, &(0x7f0000000140)=0x8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x74, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x0, 0x10}, {0xffe0, 0x1}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x40, 0x0, 0x40, 0x0, 0x0, 0x8, 0x6}}, {0x10, 0x2, [0x6, 0x7fff, 0xfffe, 0x0, 0x5, 0x3]}}, {{0x1c, 0x1, {0x9, 0x6, 0xc, 0x1ff, 0x1, 0x0, 0xfffffffc}}, {0x4}}]}]}, 0x74}}, 0x24008000) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380), 0xb8002, &(0x7f0000003b00)={[{@mode={'mode', 0x3d, 0x7ff}}, {}, {}, {@mode={'mode', 0x3d, 0x209}}, {@mode}], [{@context={'context', 0x3d, 'user_u'}}]}) 2m40.201937722s ago: executing program 1 (id=1116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x3, 0xfb9, 0x10008, 0x10, 0x20000cea, 0x4, 0x9, 0x10, 0x7, 0x8000008000000000, 0x77, 0x1, 0x0, 0x2da, 0xffffffffffffffff, 0x6], 0x1, 0x4092}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f0000000340)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m39.563489157s ago: executing program 1 (id=1119): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x1c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000010"], 0x18}, 0x0) 2m39.303955031s ago: executing program 35 (id=1119): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8153, 0x2000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x1c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000010"], 0x18}, 0x0) 1m3.657535437s ago: executing program 6 (id=1706): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8821}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x4, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x808d4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m3.312588091s ago: executing program 6 (id=1708): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x0, 0x2}}, &(0x7f0000000bc0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x1000000000000, &(0x7f0000000340)}) 1m3.213200828s ago: executing program 6 (id=1710): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0xc, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)) syz_open_dev$vbi(0x0, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u32=0x0}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) socket$kcm(0x29, 0x2, 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x100140a, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) 1m2.336464312s ago: executing program 6 (id=1712): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1833d, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r1, 0x5}, &(0x7f0000000140)=0x8) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r2 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x74, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x0, 0x10}, {0xffe0, 0x1}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x40, 0x0, 0x40, 0x0, 0x0, 0x8, 0x6}}, {0x10, 0x2, [0x6, 0x7fff, 0xfffe, 0x0, 0x5, 0x3]}}, {{0x1c, 0x1, {0x9, 0x6, 0xc, 0x1ff, 0x1, 0x0, 0xfffffffc}}, {0x4}}]}]}, 0x74}}, 0x24008000) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000480)=0x0) read$FUSE(r3, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$bpf(0x0, &(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380), 0xb8002, &(0x7f0000003b00)={[{@mode={'mode', 0x3d, 0x7ff}}, {@uid={'uid', 0x3d, r5}}, {@uid={'uid', 0x3d, r6}}, {@mode={'mode', 0x3d, 0x209}}, {@mode}], [{@context={'context', 0x3d, 'user_u'}}]}) fallocate(r3, 0x10, 0x0, 0x10000000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000140)={{0x7, 0x1e}, {0xc, 0x8}, 0x2}) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7840, 0x0) mount$9p_fd(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000540), 0x1000804, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_client}, {@debug={'debug', 0x3d, 0x7}}, {@aname}, {@fscache}, {@uname={'uname', 0x3d, '*-'}}, {@noxattr}, {@cachetag={'cachetag', 0x3d, 'context'}}, {@directio}], [{@smackfstransmute={'smackfstransmute', 0x3d, '*\xea)))'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/vhost-net\x00'}}, {@fsname={'fsname', 0x3d, '/dev/vhost-net\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x35, 0x62, 0x65, 0x31, 0x63, 0x62, 0x64], 0x2d, [0x63, 0x36, 0x36, 0x6], 0x2d, [0x65, 0x31, 0x61, 0x65], 0x2d, [0x34, 0x63, 0x61, 0x66], 0x2d, [0x61, 0x64, 0x38, 0x35, 0x64, 0x37, 0x61, 0x32]}}}, {@smackfsroot}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/vhost-net\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x30, 0x31, 0x37, 0x63, 0x39, 0x38, 0x34], 0x2d, [0x39, 0x33, 0x66, 0x64], 0x2d, [0x63, 0x32, 0x63, 0x35], 0x2d, [0x36, 0x62, 0x65, 0x32], 0x2d, [0x0, 0x31, 0x0, 0x39, 0x30, 0x33, 0x30, 0x37]}}}, {@appraise}, {@measure}]}}) r7 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_DESTROY(r7, 0xc0086442, &(0x7f0000000980)) 1m2.141675551s ago: executing program 6 (id=1724): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x100140a, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m1.034578282s ago: executing program 6 (id=1721): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m0.649295127s ago: executing program 36 (id=1721): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.174656198s ago: executing program 8 (id=1968): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000000c0)={0x9, {0xafd, 0x300, 0x2, 0x5}}) 13.08504683s ago: executing program 8 (id=1969): r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x1000000000000010, 0x3, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000140), 0xfff7fffffffffffe, 0x483c1) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0xc0085666, &(0x7f0000000080)={0x2, 0x4}) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0xc0085666, &(0x7f0000000080)={0x2, 0x4}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000040)={0x0, {0xfd, 0x8}}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000380), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x6, 0x20, 0x1, 0x1}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x7fff}, &(0x7f0000000200)=0x8) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x7fff}, &(0x7f0000000200)=0x8) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="d800000019007b29e00208ba0d8105040a601100fe02040b067c55a1bc001400030006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277c7f6bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a14c11ce1b14d6d930dfe1d1d322fe04fb95cae8c9fad95667e04adcdf634c1fdf48000000000000e1cace81ed0b7fece0b42a9ecbeeef7d93458c69e0cdf106a159031e9f05e9f16e9cb500020000000000000000000000009ae42a97718952ab98b6768e7a5f", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x8000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce", 0xe) (async) write(r5, &(0x7f0000000080)="1400000052004f030e789e7ee2ce", 0xe) recvmmsg(r5, &(0x7f0000005c80), 0x0, 0x10122, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) write$sndseq(r6, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r8, @ANYBLOB="83040500000000002800128008000100677265001c00028008000600ac1414bb06000e000100000006000f00b7"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r8, @ANYBLOB="83040500000000002800128008000100677265001c00028008000600ac1414bb06000e000100000006000f00b7"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) (async) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 11.917639767s ago: executing program 8 (id=1972): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x18d00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000002300000002001200ff19010005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000080), &(0x7f0000000340)}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x5c, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0xe, 0x8}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xbc}, {0x5, 0x100000, 0x3, 0x4, 0x0, 0x1, 0x1}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000ac0)={'sit0\x00', &(0x7f00000006c0)={'sit0\x00', r4, 0x8000, 0x4001, 0x1, 0x5, {{0x34, 0x4, 0x1, 0x6, 0xd0, 0x64, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}, {[@ssrr={0x89, 0x23, 0xc0, [@multicast2, @local, @broadcast, @rand_addr=0x64010100, @multicast2, @private=0xa010101, @multicast1, @remote]}, @ssrr={0x89, 0x1b, 0x98, [@broadcast, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote, @multicast1]}, @timestamp_prespec={0x44, 0x1c, 0xc5, 0x3, 0x6, [{@empty, 0x4}, {@remote, 0x4}, {@remote, 0x2}]}, @ssrr={0x89, 0xb, 0x98, [@loopback, @dev={0xac, 0x14, 0x14, 0x25}]}, @timestamp={0x44, 0x18, 0xf, 0x0, 0xb, [0x161e, 0x8, 0x6, 0x5e, 0x7]}, @timestamp={0x44, 0xc, 0x4d, 0x0, 0x8, [0x80, 0x1000]}, @end, @cipso={0x86, 0x6, 0x3}, @timestamp_addr={0x44, 0x14, 0x28, 0x1, 0x3, [{@local, 0x95}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}]}, @ssrr={0x89, 0x17, 0x64, [@dev={0xac, 0x14, 0x14, 0x30}, @multicast1, @local, @loopback, @multicast1]}]}}}}}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="d29940"], 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={r2, &(0x7f0000000300), &(0x7f0000000600)=""/86}, 0x20) close(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000300)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100), 0x4000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) mmap(&(0x7f000000e000/0x2000)=nil, 0x2000, 0x2, 0xc3072, 0xffffffffffffffff, 0x19232000) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r8 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) 11.478612124s ago: executing program 3 (id=1975): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="41f4460f01b387000000c441792830c4a1765a89f800000048b84a9cba64c2083f570f23c80f21f8350c00d0000f23f82e420f01c566b8bd000f00d026360f38f1a10a000000c4a1dd6ce40f0175d1", 0x4f}], 0x1, 0x6d, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.383780442s ago: executing program 9 (id=1977): r0 = epoll_create1(0x0) (async) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80900, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) (async) ioctl$TIOCGICOUNT(r1, 0x5409, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) (async) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) r2 = open$dir(&(0x7f0000000000)='./mnt_trace/trace_pipe\x00', 0x200000, 0x10) r3 = openat(r2, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000040)={0x20000014}) 11.042477865s ago: executing program 9 (id=1979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x67c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0xffe0}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040894}, 0x4000000) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) epoll_create1(0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 11.033651427s ago: executing program 3 (id=1980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd29, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbb4, 0x5, 0x5, 0x6e0, 0x5}, 0x43}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r5, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000001125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 11.01081979s ago: executing program 5 (id=1981): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071106900000000001d400500000000004704000001ed00000f030000000000002c440000000000006b0a00fe000000007303000000000000b500fdff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a107464ffffff7f00000000617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce963b0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa36"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x240, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, &(0x7f00000011c0)={0x1, [0x0]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r8, 0x0, 0x33, 0x0, &(0x7f0000000580)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00004, 0x8, 0x0, 0x4, 0x0, 0x6], 0x1, 0x3c4210}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000340)={0x2, 0x0, [{0x8c4, 0x0, 0x8}, {0x80a, 0x0, 0x1}]}) r10 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r10, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xae2358b324e6ed1}}, &(0x7f0000000180)={0x0, 0xf, 0x58, {0x5, 0xf, 0x58, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x40, 0x3, 0x81}, @ss_container_id={0x14, 0x10, 0x4, 0xf4, "21288f435b8ae6de28378cb6b1dab4d4"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0xc6, 0x5, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "0691d8fe7ead2b44db073b70ffa103b8"}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x0, 0xf0f, 0x3, [0x0, 0x3f00]}, @ptm_cap={0x3}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0xff, 0x6, "5b1b1617", "2e6f8374"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x99, 0x5, 0x9, 0x5, 0xd0e}}}, &(0x7f0000001200)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="210a470000007797d88e24e06483bb555b5d66d1678c21f7da751b8516e1ef38b117e837f469526be16f4d33ad26a43b79c0ae8f73b090b8406d08fb172cb219ed4040002e355cde9dc5647ca9"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x10}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x67}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x1c00, 0x20, [0xf0f0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x101}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000500)={0x40, 0xb, 0x2, "68f8"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000580)={0x40, 0x13, 0x6, @multicast}, 0x0, &(0x7f0000000600)={0x40, 0x19, 0x2, "a685"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xc9}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x41}}) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000000000)={0x1, 0x200, 0x3}) 9.087784406s ago: executing program 9 (id=1984): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='mtd0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) listxattr(&(0x7f0000000200)='./mnt\x00', 0x0, 0x0) 8.965692608s ago: executing program 9 (id=1985): syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000ac46b740e1092151c140010203010902120001000000000904"], 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc64}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)='./file0\x00') write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="3000000009000000000000000000000002"], 0x30) r2 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x4, 0x6, 0x0, 0x1}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x4, r4, 0x4}, 0x38) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000180)=0x15) ioctl(r5, 0x40204706, &(0x7f0000000200)="01") ioctl(r5, 0x404c4701, &(0x7f00000001c0)="0100000000000000000000000100000001000000010000000000000020000000200000000100000001") r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) readv(r6, &(0x7f0000000900)=[{&(0x7f0000000740)=""/196, 0xc4}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r8 = gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x2, 0x4, 0x3, r8}) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, 0x0, 0x0) sendmmsg(r3, &(0x7f0000002480), 0x0, 0x400c011) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x200, 0x3, 0xaf4}) 6.915607138s ago: executing program 5 (id=1986): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x8080) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x54) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x64b13e, 0x0, 0x4, 0x18e}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) accept(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 6.778098444s ago: executing program 5 (id=1987): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e000000100"/32, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001"], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.619778818s ago: executing program 8 (id=1988): setns(0xc9, 0x0) r0 = socket(0x2a, 0x2, 0x9) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) bind$inet(r0, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) (fail_nth: 1) 6.496762588s ago: executing program 7 (id=1989): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r5) renameat(r5, &(0x7f00000000c0)='./file1\x00', r5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @link_local}) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000040)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) 6.480527103s ago: executing program 3 (id=1990): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000080)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 5.351868604s ago: executing program 3 (id=1991): syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x17) 5.272479354s ago: executing program 7 (id=1992): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000040)=0x7) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x2) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000100)={0x1, 'tunl0\x00', 0x1}, 0x18) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$PTP_ENABLE_PPS(r1, 0x40043d04, 0x1) fsetxattr$security_evm(r0, &(0x7f0000000180), &(0x7f00000001c0)=@ng={0x4, 0xf, "326c6c48c739061dc41be15ce6e752ac"}, 0x12, 0x2) r2 = syz_usb_connect$cdc_ncm(0x6, 0x81, &(0x7f0000000200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x2, 0x1, 0x9, 0x10, 0x81, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "d6d0"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x6d, 0x2, 0x28}, {0x6, 0x24, 0x1a, 0x7, 0x10}, [@network_terminal={0x7, 0x24, 0xa, 0x40, 0x8, 0xfd}, @country_functional={0xa, 0x24, 0x7, 0x8, 0x0, [0x8, 0x3]}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xe, 0xd2, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x7c, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0x5, 0x5}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x8, 0x0, 0x4, 0x5f, 0x8}, 0xe3, &(0x7f0000000300)={0x5, 0xf, 0xe3, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0xff, 0x4, 0x9, 0x66}, @generic={0xbf, 0x10, 0x2, "2aef2bb3664d2189300b09c9ac2d1acb118f65632889968f95f699ae90ce924fd2e4f9f553e295ee279412a6a277366a3be0da22abf267f72e93f2a38ac51d003fa351e41daadf44bb2856401bf24a70e2baeb3d9f17bbe2c6ee8aa1ab3a1d753f24edeb1c689f7f58e7601050880fc23438bbf06221d6d2befe2b706a1c7a7e6bd5d155454bd5671a81ea8a40ea4a129afcaa1831c811ba5d5094aae1c28e6ee24e579e4b49773ba56aedc2a357acd1e77418055d65cd2ddcec1ab6"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0xf6, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xb, 0x7, 0x7fff}]}, 0x3, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f00000005c0)={0x14, &(0x7f0000000500)={0x20, 0xd, 0x6f, {0x6f, 0x21, "750af36804ee8604be7e81f557f6091aa6b81333eb56529d9b1dbb13ebde4ac4c9660d1be0dcd234ce98092e63f23d3fcc4e7a64c4af76fb1899f4938139a402b4ad3b026ef1c2dca2a32238396bc6543e84e474cd261fdd5faeaefe7c4b2ce364b68fcfac58b8eb08a6b154ba"}}, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000800)={0x44, &(0x7f0000000600)={0x40, 0x17, 0x17, "a6325b008b0637f791f41c2a1ca98c5a4a260e5b490ed3"}, &(0x7f0000000640)={0x0, 0xa, 0x1}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000006c0)={0x20, 0x80, 0x1c, {0x7f, 0x9, 0x6, 0x8000, 0xbe71, 0xc545, 0x5, 0x2, 0x1, 0x6, 0x8, 0x2}}, &(0x7f0000000700)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000740)={0x20, 0x83, 0x2}, &(0x7f0000000780)={0x20, 0x87, 0x2, 0x6}, &(0x7f00000007c0)={0x20, 0x89, 0x2, 0x1}}) syz_open_dev$evdev(&(0x7f0000000880), 0x5, 0x200) r3 = ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f00000008c0)={0xb, r0, 0x37, {0x8000000000000000, 0x2}, 0x9}, 0x1) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000900), 0x109280, 0x0) ioctl$TIOCCBRK(r4, 0x5428) fcntl$getflags(0xffffffffffffffff, 0x401) mount$9p_unix(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0), 0x800000, &(0x7f0000000a00)={'trans=unix,', {[{@access_client}], [{@pcr={'pcr', 0x3d, 0x25}}, {@appraise_type}, {@measure}]}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000a80), 0x30000, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/key-users\x00', 0x0, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000b00), 0x9, 0x80000) ioctl$LOOP_SET_STATUS(r6, 0x4c02, &(0x7f0000000b40)={0x0, {}, 0x0, {}, 0x4, 0x2, 0x13, 0xe, "12639e8acd883d284413b3f834a11c8959cf77653531550e5dfe5e864d87edac06f099971e822210fd57bfeb18c6d56155cb0ab65e8f49a9d30ffc40c21f4de5", "95951f563b4f5a04592d78034f7a6c05a8db0e085a320e51927dd7bb24886b5c", [0x5, 0x462515b9]}) ioctl(r5, 0xff, &(0x7f0000000c00)="00ac0a2e3338e001267bd6b68d7a52edfe5e40") r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000c40)={{0x1d, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x4, 'lc\x00', 0x0, 0x4, 0x3a}, {@local, 0x4e21, 0x0, 0xf165e700, 0x9, 0x5}}, 0x44) syz_80211_inject_frame(&(0x7f0000000cc0)=@device_b, &(0x7f0000000d00)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x9}, @initial, @broadcast, @device_a, {0x2, 0xa}, "", @void, @value=@ver_80211n={0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @random="0d91498a16f851d270cf397b49dd42fbd28b22511869e2c050c41ab8f30305387b68d87aaaa69606ffe872f93deb3e1383a75fd9ac571e1886894fa5fccc1027c8b00ce7746467248045f0f2adf2225cfae8dc33a5a55c9fae9e909eb1a9431240689f4dab6254d9af8047073bca0fea9d88af506db6322b946231c58d119aab7b8da71d4ce0393caca6b44b973a012115f87728cd01935dd5c834473821de2a6fb269b1da31190a964bfdd1a6cb2111dfd79070c11a8838b8438ed360838106da9150a3aa3182e1fa6df1f73c80272809e38d1b487200dbbce12352d2e4a44df135449514a5df95a4b6c042caf6ce2ef1844e98d6416cf88bfbad6611e01f3117f645d12124062d1af1b4807362d7f43e3a57937a62cad947bbd39bc2601f18498c0faf2543e8aabe1ffea882357c3f9ca7725233df4d9762124c11830b737b3bc8ba12d1e0f93aa2df58c60a31fd663525ae6a6dc1eb55d187368a89cc75456df7409b1fbd6c310003699a5510388dbc14789c8d6e81a2bed94ffb9cd0ea6625ede3b4aa9b2e367b0fcf366d6920a206ad9bf8b0cab7f46034111065999d50c882cdee33b9578a9139ef14531b3c5ab6342efd3255a82c0a42562b04dfab22385bae47fe3b6d7636178359bd0297de10f85de5a1bc41004d894f1dcf3f3baeba47f1a732daffd4ede831a8b45e3b0a2ef424d4c3daeecfb2d39ab6571e5fbe8ed88995b505f264c58e61d59d40863b3f5a2a8592aa7b713d00f3e12f240f893a76c0d5c873554fb578ceb05594131543abf304933039f519ef4a39c254afee0af5f0a6e797a14ee3e6330bf91cac5da029c0365ded9234ee5705c57a87e30bf87eb0c562be945b240a037f67cbc748d090495804027ebcf51abc5c9d5b48b3f5958e22422374808b30d28ce7dbe46d0d84c68f0bc9b3b4bfcab4cb027e90e85312950f5c18ee383a5127be0388f69739a5b673938f58052821d8a1bd972e7dc35682da5f872e57ad524991f614c949abe8ac1cfd306702d867dc116a58ad136bb816a9c5dbf8eda601d5e758d06150a63170bfa8c537d49d22306aca9289aabc98a6ff05dce5851bb0a5418278303f961e484ab03d3daba75461c2581e4661cd8ffed4b7158b76df2ef82f62574d186dc8920847c94e1130d9caa195f9e1044b874007aa73c6ddabda3114309082a173598ec6e7538f2c4a904c45eb194dc353e5fbe15b641aad25a2d87927517b21464f122b272d98dc17f8a6c6df87e411d4e03f6f9cecac3cdcf4c23e921a9ae55a68e7c2028fbbd793d74156985a571f36c897976f040356931891bffd00e5c60e017c02d1486dbfbf70dbb08b79cd648f7a40d63100c1580992bc2db1f624ea913bf20f49e02aec31fc4de662e17bee368e9c57b72b67e311a89e497a8afbb3c107b0c6737dd05922b8123a80f5212ad37420a378ff50c80e8c36838606ed3fdfeb96d954ad08efc771dcaa202e9b699a446646851db374c22bad1fc4effd575a2a74a090f816d8002e4cc76f9d0507605f6fc4e2479e3cf962817f00d00310f96f5b03e2994278b1469189338f4f1079fcee43ccdab855bbab65e98572558d1e7d6b8e8cd6d658ad1984089e36dbb6980624db9e7c7c4d54e5a8fb5af29d27bcc8e4d3a0d5e1c62b262e84924209a4db4b0ecf59a4dd9ebdc6e23a7245b7f749f6fef5840239f2ae99dd0b47e00bdd45bec7dfc065a391cac2ef437b52c19df4d9d344d8afbcb772c5ef5989faa91a80205e3533bd61b51d038934c1464f8973fd1da8206bdf26adc673a1c80a734ec656170dde62b50baa497715c2778d5bcf89e7b433d10579e9e72df31ab484b09661c6f5608205b6411102d2beea78465147616377ed208cdc9e3c18777203680f70d43a7b89e6bddad516a498d1edab39d0"}, 0x56e) r8 = socket$rds(0x15, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001280)={{0x1, 0x1, 0x18, r8, {0xd2f}}, './file1\x00'}) ioctl$EVIOCGSW(r6, 0x8040451b, &(0x7f00000012c0)=""/93) r10 = fcntl$getown(r6, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x2, r10, 0x2, &(0x7f0000001340)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001440)={r9, &(0x7f0000001380)="967d34486f3184ec98ab3504817423e0048267e361c4ee95f48d5e5a218f186585510b948dad24c2723f3e8670a1add181504258e9554b22757b86fa028f90db1dd5105f19b4f52a0f0ba615dfea3f9f15ec89710fd68a6e37b38ff764b439d9afd4ed", &(0x7f0000001400)=@udp6=r5, 0x4}, 0x20) 4.868106943s ago: executing program 8 (id=1993): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000000240)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x1f, &(0x7f0000000080)={0x1000d, 0x23, 0x2}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1) truncate(&(0x7f0000000100)='./file0\x00', 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.865857164s ago: executing program 9 (id=1994): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_crash_size', 0x5f9aaf05fcd530b6, 0x40) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16, @ANYRES16], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r0, 0x0, 0x90, 0x0) write$FUSE_ENTRY(r2, &(0x7f0000000000)={0x90, 0xfffffffffffffffe, 0x0, {0x7, 0x2, 0x5, 0x5, 0xfffffffa, 0x3, {0x4, 0x80f, 0x7fff, 0x7, 0xa, 0x1, 0x8, 0x800, 0x6, 0xa000, 0x80002, 0x0, 0x0, 0x6704, 0x4919}}}, 0x90) r3 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000000)=[0x10000, 0x2]) r4 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000004e40)={0xfb, 0x13, 0x0, 0x0, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fff29c"}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x200}}, './file0\x00'}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) 4.686377492s ago: executing program 3 (id=1995): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1b9) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/mtrr\x00', 0x80001, 0x41) unshare(0x22020400) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x11c, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf930, 0x0, 0x0, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x4000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) getsockopt$WPAN_WANTLQI(r2, 0x4000000, 0x3, 0x0, 0x0) ioctl(r1, 0x400c4d09, &(0x7f0000002480)) r11 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) readv(r11, &(0x7f00000005c0)=[{&(0x7f0000000080)=""/59, 0x3b}, {0x0}], 0x2) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r11, 0x110, 0x5, &(0x7f0000000240)=[0x3, 0x1], 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) io_setup(0x3, &(0x7f0000000140)) 4.672567251s ago: executing program 5 (id=1996): open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)}], 0x1}, 0x2080) socket$kcm(0x10, 0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000001c0)={r5, 0x1, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.078447204s ago: executing program 3 (id=1997): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x240, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(0xffffffffffffffff, 0xc004ae0a, &(0x7f00000011c0)={0x1, [0x0]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mreqn(r8, 0x0, 0x33, 0x0, &(0x7f0000000580)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00004, 0x8, 0x0, 0x4, 0x0, 0x6], 0x1, 0x3c4210}) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000340)={0x2, 0x0, [{0x8c4, 0x0, 0x8}, {0x80a, 0x0, 0x1}]}) r10 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_control_io(r10, &(0x7f0000000280)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xae2358b324e6ed1}}, &(0x7f0000000180)={0x0, 0xf, 0x58, {0x5, 0xf, 0x58, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x40, 0x3, 0x81}, @ss_container_id={0x14, 0x10, 0x4, 0xf4, "21288f435b8ae6de28378cb6b1dab4d4"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0xc6, 0x5, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "0691d8fe7ead2b44db073b70ffa103b8"}, @ssp_cap={0x14, 0x10, 0xa, 0x9, 0x2, 0x0, 0xf0f, 0x3, [0x0, 0x3f00]}, @ptm_cap={0x3}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0xff, 0x6, "5b1b1617", "2e6f8374"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x0, 0x99, 0x5, 0x9, 0x5, 0xd0e}}}, &(0x7f0000001200)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="210a470000007797d88e24e06483bb555b5d66d1678c21f7da751b8516e1ef38b117e837f469526be16f4d33ad26a43b79c0ae8f73b090b8406d08fb172cb219ed4040002e355cde9dc5647ca9"], &(0x7f0000000380)={0x0, 0xa, 0x1, 0x10}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x67}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x8, {0x1c00, 0x20, [0xf0f0]}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x101}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000500)={0x40, 0xb, 0x2, "68f8"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000580)={0x40, 0x13, 0x6, @multicast}, 0x0, &(0x7f0000000600)={0x40, 0x19, 0x2, "a685"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0xc9}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x41}}) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000000000)={0x1, 0x200, 0x3}) 2.846412872s ago: executing program 5 (id=1998): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x8080) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x54) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x64b13e, 0x0, 0x4, 0x18e}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0xe0, 0x0, 0x0) accept(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.561112534s ago: executing program 7 (id=1999): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280"], 0x38}, 0x1, 0x0, 0x0, 0x4040011}, 0xc000) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) (fail_nth: 1) 2.14480125s ago: executing program 7 (id=2000): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280"], 0x38}, 0x1, 0x0, 0x0, 0x4040011}, 0xc000) socket$kcm(0x2b, 0x1, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0001c24e7d5917b729bd7000fcdbdf25150000000c00990001000000210000000a001a00ffffffffffff00000a0006000802110000010000"], 0x38}}, 0x4) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x90, 0x10, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x10, 0x5}}, @IFLA_VLAN_EGRESS_QOS={0x37}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_IFNAME={0x14, 0x3, 'rose0\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x4}]}, 0x90}}, 0x400c090) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e21, @broadcast}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="dc000000", @ANYRES16, @ANYBLOB="000829bd7000fddbdf2504000000040006801c00098008000200f10b00000800020005000000080001002700000020000280040004000800010001"], 0xdc}}, 0x24000840) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r7 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r8 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) 2.144163028s ago: executing program 5 (id=2001): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f021}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x1}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0}) r4 = dup3(r3, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x15, 0x301, 0x70bd28, 0x25dfdbfd, {0xc}, [@typed={0xd, 0x4, 0x0, 0x0, @str='\x00\x00\x00\x00\x00\x00\x00\x00\xfb'}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x80000, 0x0, 0xf0, 0x1, 0x31}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) r6 = socket$kcm(0x10, 0x2, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=interleave=relative:,0']) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="13000000320081084e81f782db44b904021d08", 0x13}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffff00000001}}, './file0\x00'}) socket$kcm(0x29, 0x2, 0x0) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f000000a9c0)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x6, '\x00', 0x0, r7, 0x0, 0x1, 0x2}, 0x50) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f000000aa40)={{{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f000000ab40)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f000000ab80)={0x0, 0x0, 0x0}, &(0x7f000000abc0)=0xc) r12 = memfd_secret(0x0) sendmmsg$unix(r7, &(0x7f000000acc0)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000004c0)="8f51f5705fce72d4999becba121f1e75e82658ba7dc5d3ae2368527f0f1ab3e713e2d4ccea8d63d1c549067139be8112b8435313053dfe68010d0aba3d21c765d57665b1779a9e0b195f071e", 0x4c}, {&(0x7f0000000640)="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", 0xff}, {&(0x7f0000000740)="3de69af8a61727a4b4c2d4e593293f0cd20495c1ecfc1c33a0ab03c8a9c9", 0x1e}, {&(0x7f0000000780)="999fb47ab9be8745cc621d7875614b95b098d2d16af5e367bf26bb3abbed0ee262ea148cf44d3441ee5746", 0x2b}, {&(0x7f00000007c0)="e59d3141fb39eb", 0x7}, {&(0x7f0000000800)="597fada69f22d6bfd1c5dfbe560f5e62df7ae58891ab3000a5d7ffab9b78968feecd2c7b1362c6d290fc9d3c8110febc5fdfb173e3c1756e04c03bbe54eb4d7093e7949701b31afdc51c445a7b852d21280040f9bf3811b2ff02b682c7db6b104da687533280eb940ac6c493f058efae7624890e0b956ff392c3c423e0601045ff72f5c7226424d6ad3fb9a3f81ee05abf58307dc4686d4f3b95f140c9412a8fa7f2586cc8a20c62a822b5f1910bdba14cbc3c3980a32c13ad46696b7bb1c3906fd5f304081165648c825b959b20858520bb1d7b91dd7a59f7832d184c7e07", 0xdf}, {&(0x7f0000000940)="209e8a2ea4", 0x5}], 0x7, &(0x7f0000002000)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @rights={{0x2c, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, r1, r7, r2, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r7, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x2c, 0x1, 0x1, [r0, r4, r3, r7, r5, 0xffffffffffffffff, r3]}}], 0xc0, 0x4000000}}, {{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f00000020c0)="cf2274b8400ed6a6ca0562b461d4ab52725ce3343a9467df9d5bf3f6560a7519fbb0c6e160d1758f86e761ca77fb3320d89310", 0x33}, {&(0x7f0000002100)="ffdc6bf2ce2d5c2362b988244953c0d7e13ef4b81802926a4f8db9c9ba33cfaa8e7bb5032e2dccf6c52bcf115bceff392893248746ead1023101d2be707771190f027f8b895b9f21295be7000a2454adfe3ac40e6f858e763d488bd1826d5cdc5364e804e27811ea063a49f830297ef71a0d293e665689e113906f955b83c263474ff7b4b37ee41dc1220fe3f0d272ff9f2f8db55caf73", 0x97}, {&(0x7f00000021c0)="4211c50f1a063aec0cd2c3c009ed665cc37f193d1abb4e07f7958a8a1db3eba4f7586b16c06aed5eb236fc3eefcaa5b91f3f79b33d02e9d6b83d426b2a704d89ceb4c067d0d1d3736e4f33b54e0813d8860c0527df9a8747941de1d40861b44f8fbefa836ce1636f4c658bc7d60fb1b0f25adf3b8ad3af413294b8819711de8a13e286f9d230d210ff7dc23eac813468592debb301e947fd74991d9aa128a985e625f8b2c4b9ee07a15f22cfddca7d510d4d", 0xb2}], 0x3, &(0x7f0000008700)=[@rights={{0x18, 0x1, 0x1, [r5, r6]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r3, r1, r5, r5]}}], 0xd8, 0x4050480}}, {{&(0x7f0000008800)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000008900)=[{&(0x7f0000008880)="51fee5b7d2f6d72b6615646f27cd68707fdb4a8a42796203ad89cc6b4682f6f08b2d9f1d36f3c7466ce4e141866f71bb4feef1152908a1a75a84357185659c078c9b0bd85d73db091d96b68e4601ebdc480fb711a79d578b2a9bbdb12531fd92beb62aa1cc73c7e0", 0x68}], 0x1, &(0x7f000000ac00)=[@rights={{0x1c, 0x1, 0x1, [r0, r7, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x18, 0x1, 0x1, [r8, r2]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x90, 0x4048804}}], 0x3, 0x400c855) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@generic={0x1, 0x6, "11b712", 0x0, 0x11, 0xff, @loopback={0x60}, @mcast2}}}, 0xfdef) r13 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100363863510f30c101087360102030109021200017f0450000904"], &(0x7f0000000480)={0x0, 0x0, 0x5, 0x0}) syz_usb_disconnect(r13) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000500)=ANY=[], &(0x7f0000000340)={0x0, 0x0, 0x5, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 1.806568299s ago: executing program 7 (id=2002): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x64, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_TUPLE={0x4}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000001c0)={r5, 0x1, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.721533333s ago: executing program 8 (id=2003): socketpair(0x18, 0x1, 0x0, &(0x7f0000000000)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) 1.231665635s ago: executing program 7 (id=2004): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, &(0x7f0000000140)='compr=none\x00') close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) gettid() r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$panthor(0xffffff9c, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000003c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1b00", 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe25, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "1983426a97e3503bbbc12ef01ae488918c1ea89a08a25f78de9f802d2628cc4b", "b6af91bfb69252b136c8f50eaee89ebe", {"26e39726e261b1997fe90de7841c2e1f", "8def4140df2b9c11e876f120f5f7bfc5"}}}}}}}}, 0x0) creat(0x0, 0xa) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000280)='./file0/file0\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0xfffffffffffffff9}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r7, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000140)={&(0x7f0000000440)={0x1d, r7, 0x2, {0x0, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x4, 0x0, 0x0, 0x24004045}, 0x1) 0s ago: executing program 9 (id=2005): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x6e1cefbe638898ac, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x801, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000003240), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x300}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): attribute in nvmet_addr_trtype_store [ 201.722582][ T9830] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 201.733547][ T30] audit: type=1800 audit(1787254966.593:1206): pid=9834 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.1330" name="addr_trsvcid" dev="configfs" ino=49346 res=0 errno=0 [ 201.835119][ T30] audit: type=1400 audit(1787254966.663:1207): avc: denied { write } for pid=9828 comm="syz.6.1330" name="subsystems" dev="configfs" ino=10586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 202.269306][ T9077] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 202.426638][ T9077] usb 7-1: Using ep0 maxpacket: 8 [ 202.436991][ T9836] syzkaller0: entered promiscuous mode [ 202.450985][ T9077] usb 7-1: unable to get BOS descriptor or descriptor too short [ 202.467107][ T9836] syzkaller0: entered allmulticast mode [ 202.483217][ T9077] usb 7-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 2.a8 [ 202.511717][ T9077] usb 7-1: config 3 has an invalid interface number: 4 but max is 0 [ 202.538917][ T9077] usb 7-1: config 3 has no interface number 0 [ 202.563889][ T9077] usb 7-1: config 3 interface 4 has no altsetting 0 [ 202.590830][ T9077] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.612957][ T9077] usb 7-1: Product: syz [ 202.627731][ T9077] usb 7-1: Manufacturer: syz [ 202.641762][ T9077] usb 7-1: SerialNumber: syz [ 202.695891][ T9078] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 202.722443][ T9078] ath9k_htc: Failed to initialize the device [ 202.767298][ T9078] usb 8-1: ath9k_htc: USB layer deinitialized [ 203.133281][ T9852] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1334'. [ 203.317701][ T9856] fuse: Unknown parameter 'user_id00000000000000000000' [ 203.439330][ T30] audit: type=1400 audit(1787254968.313:1208): avc: denied { ioctl } for pid=9857 comm="syz.8.1336" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 203.504905][ T30] audit: type=1400 audit(1787254968.363:1209): avc: denied { mount } for pid=9857 comm="syz.8.1336" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 204.076851][ T9] usb 8-1: USB disconnect, device number 6 [ 204.808198][ T9874] fuse: Bad value for 'fd' [ 205.864939][ T9840] ipvlan0: entered promiscuous mode [ 205.909412][ T30] audit: type=1400 audit(1787254970.783:1210): avc: denied { read } for pid=5262 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 206.098194][ T30] audit: type=1400 audit(1787254970.973:1211): avc: denied { write } for pid=9893 comm="syz.6.1344" name="fib_triestat" dev="proc" ino=4026533267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 206.159974][ T9077] apple-mfi-fastcharge 7-1: USB disconnect, device number 7 [ 206.543974][ T30] audit: type=1400 audit(1787254971.413:1212): avc: denied { unmount } for pid=8831 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 207.031906][ T30] audit: type=1400 audit(1787254971.903:1213): avc: denied { write } for pid=9892 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.115573][ T9077] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 207.228450][ T9924] SET target dimension over the limit! [ 207.261907][ T30] audit: type=1400 audit(1787254972.133:1214): avc: denied { write } for pid=9920 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.339028][ T9077] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 207.359678][ T9928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1352'. [ 207.399626][ T9077] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.433780][ T9077] usb 8-1: Product: syz [ 207.456404][ T9077] usb 8-1: Manufacturer: syz [ 207.509414][ T9077] usb 8-1: SerialNumber: syz [ 207.550907][ T10] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 207.608090][ T9933] syzkaller0: entered promiscuous mode [ 207.635542][ T30] audit: type=1400 audit(1787254972.503:1215): avc: denied { map } for pid=9939 comm="syz.6.1356" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=50040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 207.783333][ T9933] syzkaller0: entered allmulticast mode [ 208.707651][ T10] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 208.765114][ T10] ath9k_htc: Failed to initialize the device [ 208.788649][ T30] audit: type=1400 audit(1787254972.503:1216): avc: denied { read write } for pid=9939 comm="syz.6.1356" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=50040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 208.920933][ T10] usb 8-1: ath9k_htc: USB layer deinitialized [ 209.853283][ T9078] usb 8-1: USB disconnect, device number 7 [ 209.894633][ T30] audit: type=1400 audit(1787254972.543:1217): avc: denied { cmd } for pid=9939 comm="iou-wrk-9941" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 210.071564][ T30] audit: type=1400 audit(1787254973.563:1218): avc: denied { create } for pid=9939 comm="syz.6.1356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 210.177056][ T30] audit: type=1400 audit(1787254973.573:1219): avc: denied { create } for pid=9939 comm="syz.6.1356" name="#4f" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 210.291190][ T9977] fuse: Bad value for 'fd' [ 210.309185][ T30] audit: type=1400 audit(1787254973.573:1220): avc: denied { link } for pid=9939 comm="syz.6.1356" name="#4f" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 210.430976][ T30] audit: type=1400 audit(1787254973.573:1221): avc: denied { rename } for pid=9939 comm="syz.6.1356" name="#50" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 210.560993][ T30] audit: type=1400 audit(1787254975.143:1222): avc: denied { write } for pid=9936 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.690839][ T30] audit: type=1400 audit(1787254975.333:1223): avc: denied { write } for pid=9981 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.227156][ T9078] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 211.390159][ T9078] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 211.402602][ T30] audit: type=1400 audit(1787254976.273:1224): avc: denied { ioctl } for pid=9985 comm="syz.3.1364" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 211.449842][ T9078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.472685][ T9078] usb 4-1: Product: syz [ 211.484383][ T9078] usb 4-1: Manufacturer: syz [ 211.494582][ T30] audit: type=1400 audit(1787254976.343:1225): avc: denied { create } for pid=10000 comm="syz.6.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 211.515099][ T9078] usb 4-1: SerialNumber: syz [ 211.545483][ T9077] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 212.476817][T10001] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.484112][T10001] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.618296][ T9077] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 212.672241][ T9077] ath9k_htc: Failed to initialize the device [ 212.776227][ T9077] usb 4-1: ath9k_htc: USB layer deinitialized [ 212.823716][T10011] syzkaller0: entered promiscuous mode [ 212.916524][T10011] syzkaller0: entered allmulticast mode [ 212.991004][T10025] SET target dimension over the limit! [ 213.974513][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 213.974525][ T30] audit: type=1400 audit(1787254978.843:1280): avc: denied { execmem } for pid=10022 comm="syz.7.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 214.079782][ T9077] usb 4-1: USB disconnect, device number 6 [ 214.205090][ T30] audit: type=1400 audit(1787254978.903:1281): avc: denied { create } for pid=10029 comm="syz.6.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 214.320756][T10040] overlayfs: overlapping lowerdir path [ 214.330264][ T30] audit: type=1400 audit(1787254978.903:1282): avc: denied { mounton } for pid=10029 comm="syz.6.1376" path="/52/file1/file0" dev="tmpfs" ino=327 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 214.500621][ T30] audit: type=1400 audit(1787254978.903:1283): avc: denied { unlink } for pid=10029 comm="syz.6.1376" name="#57" dev="tmpfs" ino=331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 214.634363][ T30] audit: type=1400 audit(1787254978.903:1284): avc: denied { mount } for pid=10029 comm="syz.6.1376" name="/" dev="overlay" ino=325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 214.794061][ T30] audit: type=1400 audit(1787254978.913:1285): avc: denied { create } for pid=10029 comm="syz.6.1376" name="#59" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 214.959876][ T30] audit: type=1400 audit(1787254978.913:1286): avc: denied { link } for pid=10029 comm="syz.6.1376" name="#59" dev="tmpfs" ino=333 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 215.037387][T10065] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1382'. [ 215.080129][ T30] audit: type=1400 audit(1787254978.913:1287): avc: denied { rename } for pid=10029 comm="syz.6.1376" name="#5a" dev="tmpfs" ino=333 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 215.180919][ T30] audit: type=1400 audit(1787254978.973:1288): avc: denied { write } for pid=10022 comm="syz.7.1374" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 215.322104][ T30] audit: type=1400 audit(1787254978.983:1289): avc: denied { create } for pid=10022 comm="syz.7.1374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 216.195855][ T9078] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 216.360363][ T9078] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 216.400493][ T9078] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.409049][ T9078] usb 8-1: Product: syz [ 216.417981][ T9078] usb 8-1: Manufacturer: syz [ 216.430585][ T9078] usb 8-1: SerialNumber: syz [ 216.463116][ T9077] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 216.839423][T10073] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.846770][T10073] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.945588][T10072] syzkaller0: entered promiscuous mode [ 216.969584][T10072] syzkaller0: entered allmulticast mode [ 217.495525][ T9077] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 217.979154][ T9077] ath9k_htc: Failed to initialize the device [ 218.051306][ T9077] usb 8-1: ath9k_htc: USB layer deinitialized [ 218.952168][T10101] SET target dimension over the limit! [ 219.090465][T10108] fuse: Unknown parameter '00000000000000000003' [ 219.117085][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 219.117095][ T30] audit: type=1400 audit(1787254983.993:1374): avc: denied { mount } for pid=10109 comm="syz.5.1394" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 219.243469][ T30] audit: type=1400 audit(1787254984.073:1375): avc: denied { unmount } for pid=8512 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 219.335200][ T9077] usb 8-1: USB disconnect, device number 8 [ 219.613847][ T30] audit: type=1400 audit(1787254984.493:1376): avc: denied { read } for pid=10121 comm="syz.5.1399" dev="nsfs" ino=4026533542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 219.811603][T10127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1400'. [ 219.841225][ T30] audit: type=1400 audit(1787254984.493:1377): avc: denied { open } for pid=10121 comm="syz.5.1399" path="net:[4026533542]" dev="nsfs" ino=4026533542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 219.942962][ T30] audit: type=1400 audit(1787254984.493:1378): avc: denied { create } for pid=10121 comm="syz.5.1399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 220.025470][ T5604] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 220.042578][ T30] audit: type=1400 audit(1787254984.663:1379): avc: denied { write } for pid=10121 comm="syz.5.1399" path="socket:[51592]" dev="sockfs" ino=51592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 220.164896][ T30] audit: type=1400 audit(1787254984.773:1380): avc: denied { create } for pid=10124 comm="syz.3.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.213857][T10137] fuse: Unknown parameter 'fd0x0000000000000003' [ 220.221280][ T5604] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 220.250037][ T5604] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.284138][ T30] audit: type=1400 audit(1787254984.783:1381): avc: denied { bind } for pid=10124 comm="syz.3.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.316175][ T5604] usb 9-1: Product: syz [ 220.332584][ T5604] usb 9-1: Manufacturer: syz [ 220.346710][ T5604] usb 9-1: SerialNumber: syz [ 220.396433][ T9062] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 220.406249][ T30] audit: type=1400 audit(1787254984.783:1382): avc: denied { name_bind } for pid=10124 comm="syz.3.1400" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 221.391219][ T30] audit: type=1400 audit(1787254984.783:1383): avc: denied { node_bind } for pid=10124 comm="syz.3.1400" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 221.414921][T10141] SET target dimension over the limit! [ 221.444149][T10148] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 221.513242][T10148] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 221.740067][ T9062] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 221.773431][ T9062] ath9k_htc: Failed to initialize the device [ 221.850425][ T9062] usb 9-1: ath9k_htc: USB layer deinitialized [ 223.115868][ T5716] usb 9-1: USB disconnect, device number 5 [ 224.113000][T10182] SET target dimension over the limit! [ 224.142453][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 224.142465][ T30] audit: type=1400 audit(1787254989.013:1442): avc: denied { mounton } for pid=10185 comm="syz.8.1419" path="/31/config" dev="tmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 224.189213][T10186] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 224.242553][T10186] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 224.271001][ T30] audit: type=1400 audit(1787254989.053:1443): avc: denied { mount } for pid=10185 comm="syz.8.1419" name="/" dev="configfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 224.342890][ T30] audit: type=1400 audit(1787254989.053:1444): avc: denied { search } for pid=10185 comm="syz.8.1419" name="/" dev="configfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 224.376371][T10191] fuse: Unknown parameter 'fd0x0000000000000003' [ 224.424944][ T30] audit: type=1400 audit(1787254989.053:1445): avc: denied { search } for pid=10185 comm="syz.8.1419" name="nvmet" dev="configfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 224.543320][ T30] audit: type=1400 audit(1787254989.053:1446): avc: denied { search } for pid=10185 comm="syz.8.1419" name="ports" dev="configfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 224.607038][ T30] audit: type=1400 audit(1787254989.053:1447): avc: denied { search } for pid=10185 comm="syz.8.1419" name="/" dev="configfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 224.705206][ T9062] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 224.728882][ T30] audit: type=1400 audit(1787254989.053:1448): avc: denied { search } for pid=10185 comm="syz.8.1419" name="nvmet" dev="configfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 224.801017][ T30] audit: type=1400 audit(1787254989.053:1449): avc: denied { search } for pid=10185 comm="syz.8.1419" name="ports" dev="configfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 224.873743][ T30] audit: type=1400 audit(1787254989.053:1450): avc: denied { search } for pid=10185 comm="syz.8.1419" name="1" dev="configfs" ino=10585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 224.904248][ T9062] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 224.918423][ T9062] usb 8-1: no configurations [ 224.932972][ T9062] usb 8-1: can't read configurations, error -22 [ 224.977537][ T30] audit: type=1400 audit(1787254989.053:1451): avc: denied { read append } for pid=10185 comm="syz.8.1419" name="addr_trtype" dev="configfs" ino=52152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 225.126259][ T9062] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 225.166792][T10211] binder: 10210:10211 ioctl c0306201 200000000680 returned -14 [ 225.301939][ T9062] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 225.339864][ T9062] usb 8-1: no configurations [ 225.364530][ T9062] usb 8-1: can't read configurations, error -22 [ 225.385861][ T9062] usb usb8-port1: attempt power cycle [ 225.636118][T10227] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 225.666918][T10227] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 225.736277][ T9062] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 225.794357][ T9062] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 225.816755][ T9062] usb 8-1: no configurations [ 225.832694][ T9062] usb 8-1: can't read configurations, error -22 [ 225.987906][ T9062] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 226.033688][ T9062] usb 8-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 226.078000][ T9062] usb 8-1: no configurations [ 226.094613][ T9062] usb 8-1: can't read configurations, error -22 [ 226.121293][ T9062] usb usb8-port1: unable to enumerate USB device [ 226.145689][T10237] fuse: Bad value for 'fd' [ 226.854706][T10261] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 226.942034][T10261] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 227.253596][T10283] fuse: Unknown parameter 'fd00000000000000000003' [ 227.792638][T10299] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.799991][T10299] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.130027][ T5603] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 228.394554][T10340] fuse: Unknown parameter 'fd00000000000000000003' [ 228.575271][ T9078] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 228.779819][ T9078] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 228.837672][ T9078] usb 9-1: no configurations [ 228.858008][ T9078] usb 9-1: can't read configurations, error -22 [ 228.909701][T10368] tipc: Enabling of bearer rejected, failed to enable media [ 229.005324][ T9078] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 229.265673][ T9078] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 229.949172][T10374] SET target dimension over the limit! [ 229.964931][ T9078] usb 9-1: no configurations [ 230.002104][ T9078] usb 9-1: can't read configurations, error -22 [ 230.041821][ T5603] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 230.064548][ T9078] usb usb9-port1: attempt power cycle [ 230.154712][ T30] kauditd_printk_skb: 131 callbacks suppressed [ 230.154724][ T30] audit: type=1400 audit(1787254995.023:1583): avc: denied { write } for pid=10355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.465240][ T9078] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 231.070302][T10395] overlayfs: failed to resolve './file1': -2 [ 231.079321][ T9078] usb 9-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 231.110807][ T30] audit: type=1400 audit(1787254995.093:1584): avc: denied { map } for pid=10387 comm="syz.6.1475" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=54278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 231.150169][ T9078] usb 9-1: no configurations [ 231.169512][ T9078] usb 9-1: can't read configurations, error -22 [ 231.299725][ T30] audit: type=1400 audit(1787254995.093:1585): avc: denied { read write } for pid=10387 comm="syz.6.1475" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=54278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 231.448247][ T30] audit: type=1400 audit(1787254995.093:1586): avc: denied { cmd } for pid=10387 comm="iou-wrk-10389" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 231.579160][T10420] tipc: Enabling of bearer rejected, failed to enable media [ 231.594765][ T30] audit: type=1400 audit(1787254995.103:1587): avc: denied { write } for pid=10387 comm="syz.6.1475" name="radio5" dev="devtmpfs" ino=983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 231.737215][ T30] audit: type=1400 audit(1787254995.913:1588): avc: denied { mount } for pid=10392 comm="syz.7.1476" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 231.898447][ T30] audit: type=1400 audit(1787254995.933:1589): avc: denied { create } for pid=10387 comm="syz.6.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 232.000368][ T5603] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 232.034697][ T30] audit: type=1400 audit(1787254995.933:1590): avc: denied { create } for pid=10387 comm="syz.6.1475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 232.219077][ T30] audit: type=1400 audit(1787254996.013:1591): avc: denied { write } for pid=10399 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.301321][T10450] overlayfs: failed to resolve './file1': -2 [ 232.360254][ T30] audit: type=1400 audit(1787254996.083:1592): avc: denied { unmount } for pid=8720 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 232.783170][T10473] tipc: Enabling of bearer rejected, failed to enable media [ 232.900846][ T5603] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 232.929884][T10486] fuse: Unknown parameter 'grou00000000000000000000' [ 233.262132][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1504'. [ 234.093004][T10506] SET target dimension over the limit! [ 234.571575][T10534] tipc: Enabling of bearer rejected, failed to enable media [ 234.611043][ T5603] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 234.791401][T10542] fuse: Unknown parameter 'grou00000000000000000000' [ 236.634922][T10563] SET target dimension over the limit! [ 236.797750][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 236.797761][ T30] audit: type=1400 audit(1787255001.673:1605): avc: denied { mount } for pid=10570 comm="syz.7.1522" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 236.944404][ T5603] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 236.988352][ T30] audit: type=1400 audit(1787255001.813:1606): avc: denied { write } for pid=10539 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.169985][ T30] audit: type=1400 audit(1787255001.903:1607): avc: denied { unmount } for pid=8766 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 237.229109][T10591] fuse: Unknown parameter 'grou00000000000000000000' [ 237.263299][T10593] tipc: Enabling of bearer rejected, failed to enable media [ 237.288633][ T30] audit: type=1400 audit(1787255002.093:1608): avc: denied { write } for pid=10588 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.650200][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1533'. [ 238.744803][ T5603] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 238.931573][ T30] audit: type=1400 audit(1787255003.803:1609): avc: denied { read } for pid=10645 comm="syz.8.1541" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 239.059130][T10651] overlayfs: missing 'lowerdir' [ 239.079358][ T30] audit: type=1400 audit(1787255003.803:1610): avc: denied { open } for pid=10645 comm="syz.8.1541" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 239.196435][ T30] audit: type=1400 audit(1787255003.843:1611): avc: denied { write } for pid=10602 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 239.361742][ T30] audit: type=1400 audit(1787255003.883:1612): avc: denied { create } for pid=10645 comm="syz.8.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 239.481312][ T30] audit: type=1400 audit(1787255003.913:1613): avc: denied { write } for pid=10645 comm="syz.8.1541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 239.592685][ T30] audit: type=1400 audit(1787255004.063:1614): avc: denied { write } for pid=10657 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 240.681419][ T5603] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 240.892070][T10705] fuse: Unknown parameter 'group_i00000000000000000000' [ 241.107298][T10715] overlayfs: missing 'lowerdir' [ 241.606939][ T5603] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 242.663050][ T5603] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 242.885973][T10765] overlayfs: missing 'lowerdir' [ 243.023852][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 243.023864][ T30] audit: type=1400 audit(1787255007.893:1618): avc: denied { write } for pid=10739 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.143108][T10769] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 243.279861][ T30] audit: type=1400 audit(1787255008.153:1619): avc: denied { write } for pid=10778 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.628079][ T30] audit: type=1400 audit(1787255008.503:1620): avc: denied { create } for pid=10793 comm="syz.7.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 243.788065][ T30] audit: type=1400 audit(1787255008.663:1621): avc: denied { write } for pid=10793 comm="syz.7.1576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 243.958524][ T30] audit: type=1400 audit(1787255008.693:1622): avc: denied { sys_module } for pid=10793 comm="syz.7.1576" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 244.001679][ T5603] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 244.189250][T10818] overlayfs: missing 'lowerdir' [ 244.385474][ T5716] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 244.578858][ T5716] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 244.633695][ T5716] usb 7-1: no configurations [ 244.661964][ T5716] usb 7-1: can't read configurations, error -22 [ 244.806884][ T30] audit: type=1400 audit(1787255009.673:1623): avc: denied { write } for pid=10816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.845103][ T5716] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 244.950917][T10849] binder: 10847:10849 ioctl c0306201 200000000680 returned -14 [ 244.962790][ T30] audit: type=1400 audit(1787255009.743:1624): avc: denied { read } for pid=10847 comm="syz.7.1589" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 245.077243][ T5716] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 245.103993][ T30] audit: type=1400 audit(1787255009.743:1625): avc: denied { open } for pid=10847 comm="syz.7.1589" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 245.160136][ T5716] usb 7-1: no configurations [ 245.192616][ T5716] usb 7-1: can't read configurations, error -22 [ 245.214974][ T5716] usb usb7-port1: attempt power cycle [ 245.239105][ T5603] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 245.280496][ T30] audit: type=1400 audit(1787255009.773:1626): avc: denied { ioctl } for pid=10847 comm="syz.7.1589" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 245.444690][ T30] audit: type=1400 audit(1787255009.783:1627): avc: denied { set_context_mgr } for pid=10847 comm="syz.7.1589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 245.595818][ T5716] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 245.658796][ T5716] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 245.711013][ T5716] usb 7-1: no configurations [ 245.747664][ T5716] usb 7-1: can't read configurations, error -22 [ 245.925225][ T5716] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 245.979278][ T5716] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 246.041341][ T5716] usb 7-1: no configurations [ 246.076530][ T5716] usb 7-1: can't read configurations, error -22 [ 246.120468][ T5716] usb usb7-port1: unable to enumerate USB device [ 246.243620][T10911] fuse: Unknown parameter 'group_id00000000000000000000' [ 246.352296][T10916] binder: 10915:10916 ioctl c0306201 0 returned -14 [ 247.220040][T10962] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.227428][T10962] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.274641][ T5603] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 247.348747][T10970] binder: 10969:10970 ioctl c0306201 0 returned -14 [ 247.965004][T11001] ima: policy update failed [ 248.048422][ T5603] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 248.065857][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 248.171015][ T5603] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 248.267435][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 248.311780][ T9] usb 4-1: no configurations [ 248.335041][ T9] usb 4-1: can't read configurations, error -22 [ 248.392913][T11023] binder: 11022:11023 ioctl c0306201 0 returned -14 [ 248.496140][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 248.561981][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 248.561992][ T30] audit: type=1400 audit(1787255013.433:1644): avc: denied { setopt } for pid=11018 comm="syz.5.1629" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 248.766971][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 248.803253][ T9] usb 4-1: no configurations [ 248.827770][ T30] audit: type=1400 audit(1787255013.703:1645): avc: denied { mount } for pid=11042 comm="syz.5.1634" name="/" dev="configfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 248.850570][ T9] usb 4-1: can't read configurations, error -22 [ 248.871526][ T9] usb usb4-port1: attempt power cycle [ 248.884471][T11044] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 248.921204][ T30] audit: type=1400 audit(1787255013.763:1646): avc: denied { search } for pid=11042 comm="syz.5.1634" name="/" dev="configfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 249.017101][ T30] audit: type=1400 audit(1787255013.763:1647): avc: denied { search } for pid=11042 comm="syz.5.1634" name="nvmet" dev="configfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 249.245206][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 249.718457][ T30] audit: type=1400 audit(1787255013.763:1648): avc: denied { search } for pid=11042 comm="syz.5.1634" name="ports" dev="configfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 249.955521][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 250.013279][ T9] usb 4-1: no configurations [ 250.042759][ T9] usb 4-1: can't read configurations, error -22 [ 250.061041][ T30] audit: type=1400 audit(1787255013.763:1649): avc: denied { search } for pid=11042 comm="syz.5.1634" name="/" dev="configfs" ino=62 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 250.165815][ T5603] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 250.177090][ T30] audit: type=1400 audit(1787255013.763:1650): avc: denied { search } for pid=11042 comm="syz.5.1634" name="nvmet" dev="configfs" ino=698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 250.215753][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 250.263286][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 250.313423][ T9] usb 4-1: no configurations [ 250.334510][ T30] audit: type=1400 audit(1787255013.763:1651): avc: denied { search } for pid=11042 comm="syz.5.1634" name="ports" dev="configfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 250.371791][ T9] usb 4-1: can't read configurations, error -22 [ 250.399466][ T9] usb usb4-port1: unable to enumerate USB device [ 250.484230][ T30] audit: type=1400 audit(1787255013.763:1652): avc: denied { search } for pid=11042 comm="syz.5.1634" name="1" dev="configfs" ino=10585 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 250.608675][ T30] audit: type=1400 audit(1787255013.763:1653): avc: denied { read append } for pid=11042 comm="syz.5.1634" name="addr_trtype" dev="configfs" ino=60325 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 250.692849][T11083] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 250.793159][T11089] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 252.046917][ T5603] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 252.579545][T11136] syzkaller0: entered promiscuous mode [ 252.634819][T11136] syzkaller0: entered allmulticast mode [ 252.861613][T11147] ima: policy update failed [ 253.070914][T11156] overlayfs: missing 'lowerdir' [ 253.335042][T11170] overlayfs: missing 'lowerdir' [ 253.649086][T11181] ima: policy update failed [ 253.685731][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 253.685741][ T30] audit: type=1802 audit(1787255018.563:1680): pid=11181 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.1677" res=0 errno=0 [ 253.998977][T11197] overlayfs: missing 'lowerdir' [ 254.261095][T11209] overlayfs: missing 'lowerdir' [ 254.451690][ T30] audit: type=1400 audit(1787255019.323:1681): avc: denied { connect } for pid=11218 comm="syz.6.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 254.537473][ T30] audit: type=1400 audit(1787255019.323:1682): avc: denied { name_connect } for pid=11218 comm="syz.6.1689" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 254.640037][ T30] audit: type=1400 audit(1787255019.363:1683): avc: denied { listen } for pid=11218 comm="syz.6.1689" lport=36791 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 254.717316][ T30] audit: type=1400 audit(1787255019.363:1684): avc: denied { accept } for pid=11218 comm="syz.6.1689" lport=36791 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 254.851274][ T30] audit: type=1400 audit(1787255019.383:1685): avc: denied { setopt } for pid=11218 comm="syz.6.1689" lport=36791 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 255.257755][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.267422][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.277701][ T1303] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 255.359521][T11247] netlink: 'syz.3.1696': attribute type 2 has an invalid length. [ 255.434078][T11247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1696'. [ 255.486534][ T30] audit: type=1400 audit(1787255020.363:1686): avc: denied { bind } for pid=11246 comm="syz.3.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 255.558629][ T30] audit: type=1400 audit(1787255020.363:1687): avc: denied { name_bind } for pid=11246 comm="syz.3.1696" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 255.633795][ T30] audit: type=1400 audit(1787255020.363:1688): avc: denied { node_bind } for pid=11246 comm="syz.3.1696" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 255.722392][ T30] audit: type=1400 audit(1787255020.393:1689): avc: denied { name_connect } for pid=11246 comm="syz.3.1696" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 255.824167][T11257] overlayfs: missing 'workdir' [ 257.565193][ T9078] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 258.183123][T11287] overlayfs: failed to resolve './file1/file0': -2 [ 258.325513][ T9078] usb 4-1: device descriptor read/64, error -71 [ 258.354644][T11293] 9p: Bad value for 'rfdno' [ 258.372975][T11295] overlayfs: missing 'workdir' [ 258.594821][ T9078] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 258.745349][ T9078] usb 4-1: device descriptor read/64, error -71 [ 258.879306][ T9078] usb usb4-port1: attempt power cycle [ 258.891347][T11303] netlink: 'syz.5.1716': attribute type 2 has an invalid length. [ 258.909662][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1716'. [ 259.227641][ T9078] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 259.268105][ T9078] usb 4-1: device descriptor read/8, error -71 [ 259.515603][ T9078] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 259.556874][ T5603] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 259.602395][ T9078] usb 4-1: device descriptor read/8, error -71 [ 259.731242][ T48] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.759623][ T9078] usb usb4-port1: unable to enumerate USB device [ 259.943607][ T48] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.094052][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 260.094063][ T30] audit: type=1400 audit(1787255024.963:1696): avc: denied { write } for pid=11312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.204470][ T48] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.278914][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 260.290364][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 260.303077][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 260.313758][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 260.322014][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 260.342534][ T30] audit: type=1400 audit(1787255025.153:1697): avc: denied { ioctl } for pid=11345 comm="syz-executor" path="socket:[62923]" dev="sockfs" ino=62923 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 260.529757][ T30] audit: type=1400 audit(1787255025.253:1698): avc: denied { mounton } for pid=11345 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 260.574784][ T48] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.696099][ T30] audit: type=1400 audit(1787255025.283:1699): avc: denied { write } for pid=11343 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.065858][ T48] bridge_slave_1: left allmulticast mode [ 261.104677][ T48] bridge_slave_1: left promiscuous mode [ 261.150622][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.202269][ T48] bridge_slave_0: left allmulticast mode [ 261.232768][ T48] bridge_slave_0: left promiscuous mode [ 261.280699][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.404973][ T30] audit: type=1400 audit(1787255026.273:1700): avc: denied { write } for pid=11360 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.588477][ T30] audit: type=1400 audit(1787255026.453:1701): avc: denied { write } for pid=11389 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.696594][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.797521][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.838623][ T30] audit: type=1400 audit(1787255026.713:1702): avc: denied { read } for pid=5262 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 261.870512][ T48] bond0 (unregistering): Released all slaves [ 261.950485][ T5603] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 262.088814][T11396] syzkaller0: entered promiscuous mode [ 262.147869][T11396] syzkaller0: entered allmulticast mode [ 262.376116][ T5603] Bluetooth: hci2: command tx timeout [ 262.565199][ T5716] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 263.437053][ T5716] usb 4-1: device descriptor read/64, error -71 [ 263.686373][ T5716] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 263.803692][ T5603] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 263.855655][ T5716] usb 4-1: device descriptor read/64, error -71 [ 263.977766][ T5716] usb usb4-port1: attempt power cycle [ 264.417345][ T5716] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 264.456460][ T5603] Bluetooth: hci2: command tx timeout [ 264.467196][ T5716] usb 4-1: device descriptor read/8, error -71 [ 264.565332][ T9] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 264.694295][T11461] fuse: Bad value for 'fd' [ 264.718971][ T5716] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 264.728661][ T9] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 264.769621][ T5716] usb 4-1: device descriptor read/8, error -71 [ 264.790027][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.803099][ T9] usb 9-1: Product: syz [ 264.812249][ T9] usb 9-1: Manufacturer: syz [ 264.821742][ T9] usb 9-1: SerialNumber: syz [ 264.843482][ T30] audit: type=1400 audit(1787255029.713:1703): avc: denied { firmware_load } for pid=9077 comm="kworker/0:8" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 264.894351][ T9077] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 264.905000][ T5716] usb usb4-port1: unable to enumerate USB device [ 265.688516][T11471] fuse: Invalid rootmode [ 265.978161][ T9077] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 266.000251][ T9077] ath9k_htc: Failed to initialize the device [ 266.061728][ T9077] usb 9-1: ath9k_htc: USB layer deinitialized [ 266.123881][ T5603] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 266.214698][ T48] hsr_slave_0: left promiscuous mode [ 266.251189][ T48] hsr_slave_1: left promiscuous mode [ 266.277136][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.307451][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.337618][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.381120][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.433680][ T48] veth1_macvtap: left promiscuous mode [ 266.453010][ T48] veth0_macvtap: left promiscuous mode [ 266.495586][ T48] veth1_vlan: left promiscuous mode [ 266.500912][ T48] veth0_vlan: left promiscuous mode [ 266.556561][ T5603] Bluetooth: hci2: command tx timeout [ 266.824483][ T30] audit: type=1807 audit(1787255031.693:1704): action=measure func=FILE_CHECK UNKNOWN=ob res=0 [ 266.850537][T11499] ima: policy update failed [ 266.884913][ T30] audit: type=1802 audit(1787255031.713:1705): pid=11502 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.5.1762" res=0 errno=0 [ 266.993675][ T30] audit: type=1802 audit(1787255031.743:1706): pid=11499 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.1762" res=0 errno=0 [ 267.067161][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 267.094515][ T30] audit: type=1400 audit(1787255031.743:1707): avc: denied { write } for pid=11483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.230937][T11514] fuse: Invalid rootmode [ 267.243336][ T30] audit: type=1400 audit(1787255031.963:1708): avc: denied { write } for pid=11510 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 267.270021][ T9] usb 4-1: device descriptor read/64, error -71 [ 267.304967][T11515] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1766'. [ 267.335798][ T5716] usb 9-1: USB disconnect, device number 10 [ 267.414945][ T48] team0 (unregistering): Port device team_slave_1 removed [ 267.519156][ T5603] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 267.526268][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 267.545890][ T48] team0 (unregistering): Port device team_slave_0 removed [ 267.659647][ T9] usb 4-1: device descriptor read/64, error -71 [ 267.807678][ T9] usb usb4-port1: attempt power cycle [ 267.872370][ T5262] 8021q: adding VLAN 0 to HW filter on device eth17 [ 268.176719][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 268.240578][ T9] usb 4-1: device descriptor read/8, error -71 [ 268.377924][ T30] audit: type=1807 audit(1787255033.253:1709): action=measure func=FILE_CHECK UNKNOWN=obj_ty res=0 [ 268.391882][T11551] ima: policy update failed [ 268.431416][ T30] audit: type=1802 audit(1787255033.253:1710): pid=11553 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.5.1775" res=0 errno=0 [ 268.525390][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 268.547091][ T30] audit: type=1802 audit(1787255033.283:1711): pid=11551 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.1775" res=0 errno=0 [ 268.588731][T11345] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.597728][ T9] usb 4-1: device descriptor read/8, error -71 [ 268.623097][ T5603] Bluetooth: hci2: command tx timeout [ 268.629335][T11345] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.676833][T11345] bridge_slave_0: entered allmulticast mode [ 268.702326][T11345] bridge_slave_0: entered promiscuous mode [ 268.716073][ T9] usb usb4-port1: unable to enumerate USB device [ 268.743463][ T30] audit: type=1400 audit(1787255033.613:1712): avc: denied { write } for pid=11542 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.769708][T11345] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.791666][T11345] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.823786][T11569] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1778'. [ 268.843710][T11345] bridge_slave_1: entered allmulticast mode [ 268.878993][T11345] bridge_slave_1: entered promiscuous mode [ 268.965197][ T30] audit: type=1400 audit(1787255033.833:1713): avc: denied { write } for pid=11572 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 268.999787][T11345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.023129][ T5603] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 269.057812][T11345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.161626][ T5262] 8021q: adding VLAN 0 to HW filter on device eth18 [ 269.201877][T11345] team0: Port device team_slave_0 added [ 269.253779][T11345] team0: Port device team_slave_1 added [ 269.362868][T11345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.402452][T11345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.513616][T11345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.561224][T11345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.616738][T11345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.724266][T11345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.013637][T11604] ima: policy update failed [ 270.153850][T11345] hsr_slave_0: entered promiscuous mode [ 270.177342][T11617] fuse: Bad value for 'fd' [ 270.183836][T11345] hsr_slave_1: entered promiscuous mode [ 270.255392][ T9078] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 270.446655][ T9078] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 270.494901][ T9078] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.523063][ T5262] 8021q: adding VLAN 0 to HW filter on device eth19 [ 270.543081][ T9078] usb 6-1: Product: syz [ 270.565728][ T9078] usb 6-1: Manufacturer: syz [ 270.590840][ T9078] usb 6-1: SerialNumber: syz [ 270.640368][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 270.904673][T11345] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 270.949075][T11345] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 271.013572][T11345] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 271.105298][T11345] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 271.132243][T11645] fuse: Unknown parameter 'user_i00000000000000000000' [ 271.142411][T11345] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 271.171680][T11345] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 271.216198][T11345] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 271.286137][T11345] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 271.626397][ T5730] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 271.636547][T11345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.703381][T11345] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.743015][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 271.769348][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.776484][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 271.790381][ T9] ath9k_htc: Failed to initialize the device [ 271.815351][ T5730] usb 4-1: Using ep0 maxpacket: 8 [ 271.840912][ T5730] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 271.850204][ T5716] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 271.867850][ T9] usb 6-1: ath9k_htc: USB layer deinitialized [ 271.888395][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.895524][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 271.927062][ T5730] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 271.939112][ T5262] 8021q: adding VLAN 0 to HW filter on device eth20 [ 271.946431][ T5730] usb 4-1: config 179 has no interface number 0 [ 271.976849][ T5730] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 272.036297][ T5716] usb 9-1: device descriptor read/64, error -71 [ 272.045749][ T5730] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 272.109633][ T5730] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 272.151913][ T5730] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 272.196888][ T5730] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 272.273078][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.298240][ T5716] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 272.352464][T11654] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 272.401246][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 272.401257][ T30] audit: type=1804 audit(1787255037.273:1722): pid=11687 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.7.1801" name="ima_policy_written" res=0 errno=-17 [ 272.455548][T11686] ima: policy update failed [ 272.497436][ T5716] usb 9-1: device descriptor read/64, error -71 [ 272.561715][ T30] audit: type=1807 audit(1787255037.313:1723): action=measure func=FILE_CHECK UNKNOWN=obj_ty res=0 [ 272.621097][ T30] audit: type=1802 audit(1787255037.313:1724): pid=11687 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.7.1801" res=0 errno=0 [ 272.645704][ T5716] usb usb9-port1: attempt power cycle [ 272.700573][ T5603] Bluetooth: hci1: command 0x0406 tx timeout [ 272.793620][ T30] audit: type=1802 audit(1787255037.343:1725): pid=11686 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.7.1801" res=0 errno=0 [ 272.912361][ T30] audit: type=1400 audit(1787255037.593:1726): avc: denied { write } for pid=11671 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.947568][ T9077] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input11 [ 273.035231][ T5716] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 273.079485][ T30] audit: type=1400 audit(1787255037.883:1727): avc: denied { write } for pid=11702 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.121255][ T5716] usb 9-1: device descriptor read/8, error -71 [ 273.163183][T11345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.264445][ T9077] usb 6-1: USB disconnect, device number 3 [ 273.360877][ T30] audit: type=1400 audit(1787255037.923:1728): avc: denied { read } for pid=4952 comm="acpid" name="js0" dev="devtmpfs" ino=2941 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.418159][ T5716] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 273.478179][ T5716] usb 9-1: device descriptor read/8, error -71 [ 273.511098][ T30] audit: type=1400 audit(1787255037.923:1729): avc: denied { open } for pid=4952 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2941 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.651581][ T30] audit: type=1400 audit(1787255037.923:1730): avc: denied { ioctl } for pid=4952 comm="acpid" path="/dev/input/js0" dev="devtmpfs" ino=2941 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.681305][ T5716] usb usb9-port1: unable to enumerate USB device [ 274.158474][T11345] veth0_vlan: entered promiscuous mode [ 274.194966][ T30] audit: type=1400 audit(1787255039.063:1731): avc: denied { write } for pid=11709 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.243484][T11345] veth1_vlan: entered promiscuous mode [ 274.352109][T11345] veth0_macvtap: entered promiscuous mode [ 274.403941][T11345] veth1_macvtap: entered promiscuous mode [ 274.499769][T11654] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 274.519451][T11345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.586856][T11345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.672043][ T48] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.722602][ T5716] usb 4-1: USB disconnect, device number 23 [ 274.728572][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 274.728610][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 274.845737][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.904001][ T36] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.096395][ T1111] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.163572][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.193532][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.315988][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.371264][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.432187][T11762] tipc: Enabling of bearer rejected, failed to enable media [ 275.949249][T11770] syzkaller0: entered promiscuous mode [ 275.998228][T11770] syzkaller0: entered allmulticast mode [ 276.225287][ T9078] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 276.259819][T11791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1818'. [ 276.385330][ T9078] usb 8-1: device descriptor read/64, error -71 [ 276.645314][ T9078] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 276.828691][ T9078] usb 8-1: device descriptor read/64, error -71 [ 276.956529][ T9078] usb usb8-port1: attempt power cycle [ 277.321956][ T9078] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 277.386379][ T9078] usb 8-1: device descriptor read/8, error -71 [ 277.421153][T11841] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1829'. [ 277.505594][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 277.505604][ T30] audit: type=1400 audit(1787255042.383:1758): avc: denied { write } for pid=11820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.687694][ T9078] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 277.721507][ T30] audit: type=1400 audit(1787255042.593:1759): avc: denied { write } for pid=11848 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.750487][ T9078] usb 8-1: device descriptor read/8, error -71 [ 277.868531][ T9078] usb usb8-port1: unable to enumerate USB device [ 278.338404][ T30] audit: type=1400 audit(1787255043.213:1760): avc: denied { write } for pid=11857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.460161][ T30] audit: type=1400 audit(1787255043.343:1761): avc: denied { write } for pid=11885 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 279.226213][ T5730] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 279.411456][ T5730] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 279.457991][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.478838][ T5730] usb 4-1: Product: syz [ 279.493462][ T5730] usb 4-1: Manufacturer: syz [ 279.506748][ T5730] usb 4-1: SerialNumber: syz [ 279.546671][ T5716] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 280.444154][T11873] syzkaller0: entered promiscuous mode [ 280.463254][T11873] syzkaller0: entered allmulticast mode [ 280.695293][ T5716] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 280.752201][ T5716] ath9k_htc: Failed to initialize the device [ 280.823420][ T5716] usb 4-1: ath9k_htc: USB layer deinitialized [ 281.325199][ T9078] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 281.486241][ T9078] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 281.532502][ T9078] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.557752][ T9078] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 281.578379][ T9078] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.706770][ T9078] usb 6-1: config 0 descriptor?? [ 281.934396][ T5730] usb 6-1: USB disconnect, device number 4 [ 282.081362][ T5716] usb 4-1: USB disconnect, device number 24 [ 282.145899][ T9078] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 282.327058][ T9078] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 282.362843][ T9078] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.381284][ T9078] usb 8-1: Product: syz [ 282.391062][ T9078] usb 8-1: Manufacturer: syz [ 282.403912][ T9078] usb 8-1: SerialNumber: syz [ 282.428847][ T5730] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 282.464118][ T9078] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 282.599472][ T5730] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 282.626308][ T5730] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.651696][ T5730] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 282.681275][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.713949][ T5730] usb 6-1: config 0 descriptor?? [ 282.931033][ T5730] usb 6-1: USB disconnect, device number 5 [ 282.941460][ T5603] Bluetooth: hci3: command 0x0406 tx timeout [ 283.338512][T11957] syzkaller0: entered promiscuous mode [ 283.362709][T11957] syzkaller0: entered allmulticast mode [ 283.497179][ T9078] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 283.533993][ T9078] ath9k_htc: Failed to initialize the device [ 283.599296][ T9078] usb 8-1: ath9k_htc: USB layer deinitialized [ 283.665605][ T5716] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 283.850052][ T5716] usb 9-1: Using ep0 maxpacket: 8 [ 283.874327][ T5716] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 283.902750][ T5716] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 283.928598][ T5716] usb 9-1: config 179 has no interface number 0 [ 283.970929][ T5716] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 284.029950][ T5716] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 284.051591][ T30] audit: type=1807 audit(1787255048.923:1762): action=measure func=FILE_CHECK UNKNOWN=obj_type= res=0 [ 284.064044][T11981] ima: policy update failed [ 284.069794][ T5716] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 284.109511][ T30] audit: type=1802 audit(1787255048.943:1763): pid=11983 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.3.1860" res=0 errno=0 [ 284.131172][ T5716] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 284.178884][ T5716] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 284.203151][ T30] audit: type=1802 audit(1787255048.973:1764): pid=11981 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.3.1860" res=0 errno=0 [ 284.236235][ T5716] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.277286][T11967] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 284.661217][ T9078] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:179.65/input/input12 [ 284.865117][ T5730] usb 8-1: USB disconnect, device number 17 [ 285.787647][ T5716] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 285.815493][ T30] audit: type=1400 audit(1787255050.693:1765): avc: denied { create } for pid=11966 comm="syz.8.1855" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 285.852499][T11967] overlay: ./file0 is not a directory [ 285.878889][ T30] audit: type=1400 audit(1787255050.733:1766): avc: denied { mounton } for pid=11966 comm="syz.8.1855" path="/syzcgroup/unified/syz8/file0" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 285.911268][ T5730] usb 9-1: USB disconnect, device number 15 [ 285.917220][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 285.917246][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 285.969725][ T5716] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 286.027302][ T5716] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.093728][ T5716] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 286.139178][ T5716] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.180262][ T5716] usb 6-1: config 0 descriptor?? [ 286.201396][T12026] binder: 12024:12026 ioctl c0306201 200000000680 returned -14 [ 286.419768][ T5730] usb 6-1: USB disconnect, device number 6 [ 287.050594][ T5730] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 287.208580][T12040] fuse: Unknown parameter 'use00000000000000000000' [ 287.220342][ T5730] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 287.242687][ T5730] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.253450][ T5730] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 287.282253][ T5730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.305085][ T5730] usb 6-1: config 0 descriptor?? [ 287.310317][ T5604] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 287.490753][ T5604] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 287.537569][ T5604] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.564293][ T5604] usb 9-1: Product: syz [ 287.570755][ T5730] usb 6-1: USB disconnect, device number 7 [ 287.582886][ T5604] usb 9-1: Manufacturer: syz [ 287.601279][ T5604] usb 9-1: SerialNumber: syz [ 287.634872][ T5716] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 288.062504][ T5615] Bluetooth: hci0: command 0x0406 tx timeout [ 288.430837][ T30] audit: type=1804 audit(1787255053.303:1767): pid=12057 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=measuring_policy cause=store_entry comm="syz.5.1884" name="ima_policy_written" res=0 errno=-17 [ 288.474499][T12056] ima: policy update failed [ 288.517363][T12023] syzkaller0: entered promiscuous mode [ 288.536257][ T5604] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 288.561267][ T30] audit: type=1807 audit(1787255053.333:1768): action=measure func=FILE_CHECK UNKNOWN=obj_type= res=0 [ 288.573377][T12023] syzkaller0: entered allmulticast mode [ 288.635542][ T30] audit: type=1802 audit(1787255053.333:1769): pid=12057 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=update_policy cause=invalid-policy comm="syz.5.1884" res=0 errno=0 [ 288.697617][ T5716] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 288.720106][ T30] audit: type=1802 audit(1787255053.373:1770): pid=12056 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.5.1884" res=0 errno=0 [ 288.739142][ T5604] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 288.753615][ T5716] ath9k_htc: Failed to initialize the device [ 288.778043][ T5604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.797072][ T5604] usb 4-1: Product: syz [ 288.809378][ T5604] usb 4-1: Manufacturer: syz [ 288.821558][ T5604] usb 4-1: SerialNumber: syz [ 288.829756][ T5716] usb 9-1: ath9k_htc: USB layer deinitialized [ 288.880281][ T5730] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 289.895390][ T5604] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 289.982451][ T5730] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 289.999172][ T5730] ath9k_htc: Failed to initialize the device [ 290.077021][ T5604] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 290.089728][ T5716] usb 9-1: USB disconnect, device number 16 [ 290.148571][ T5730] usb 4-1: ath9k_htc: USB layer deinitialized [ 290.179380][ T5604] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.221809][ T5604] usb 6-1: Product: syz [ 290.238372][ T5604] usb 6-1: Manufacturer: syz [ 290.267204][ T5604] usb 6-1: SerialNumber: syz [ 290.304597][ T5730] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 290.606313][ T5604] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 290.789515][ T5604] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 290.816917][ T5604] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.833448][ T5604] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 290.853576][ T5604] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.878330][ T5604] usb 10-1: config 0 descriptor?? [ 291.110937][ T5604] usb 10-1: USB disconnect, device number 2 [ 291.437532][ T5716] usb 4-1: USB disconnect, device number 25 [ 291.496665][ T5730] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 291.528651][ T5730] ath9k_htc: Failed to initialize the device [ 291.566216][ T5604] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 291.619575][ T5730] usb 6-1: ath9k_htc: USB layer deinitialized [ 291.636081][ T30] audit: type=1400 audit(1787255056.503:1771): avc: denied { ioctl } for pid=12103 comm="syz.3.1896" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=71733 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 291.729997][ T30] audit: type=1400 audit(1787255056.613:1772): avc: denied { execute } for pid=12103 comm="syz.3.1896" path="/364/file0" dev="tmpfs" ino=2085 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 291.768630][ T5604] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 291.796583][ T5604] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.810429][ T30] audit: type=1400 audit(1787255056.693:1773): avc: denied { write } for pid=12103 comm="syz.3.1896" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 291.844965][ T5604] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 291.873872][ T5604] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.887534][T12105] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 291.917511][ T5604] usb 10-1: config 0 descriptor?? [ 292.057802][T12104] event trace: Could not enable event p [ 292.144359][ T5604] usb 10-1: USB disconnect, device number 3 [ 292.395852][T12122] FAULT_INJECTION: forcing a failure. [ 292.395852][T12122] name failslab, interval 1, probability 0, space 0, times 1 [ 292.433967][T12122] CPU: 0 UID: 0 PID: 12122 Comm: syz.8.1903 Not tainted syzkaller #0 PREEMPT(full) [ 292.433983][T12122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 292.433989][T12122] Call Trace: [ 292.433993][T12122] [ 292.433997][T12122] dump_stack_lvl+0x100/0x190 [ 292.434015][T12122] should_fail_ex.cold+0x5/0xa [ 292.434030][T12122] should_failslab+0xc2/0x120 [ 292.434047][T12122] __kmalloc_noprof+0xfc/0x820 [ 292.434062][T12122] ? rcu_is_watching+0x13/0xc0 [ 292.434074][T12122] ? tomoyo_realpath_from_path+0xb6/0x690 [ 292.434090][T12122] tomoyo_realpath_from_path+0xb6/0x690 [ 292.434104][T12122] tomoyo_path_number_perm+0x23c/0x580 [ 292.434120][T12122] ? tomoyo_path_number_perm+0x22e/0x580 [ 292.434138][T12122] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 292.434167][T12122] ? find_held_lock+0x2b/0x80 [ 292.434179][T12122] ? hook_file_ioctl_common+0x140/0x440 [ 292.434195][T12122] ? __fget_files+0x21f/0x3d0 [ 292.434212][T12122] security_file_ioctl+0xd3/0x230 [ 292.434224][T12122] __x64_sys_ioctl+0xb7/0x210 [ 292.434237][T12122] do_syscall_64+0x123/0x790 [ 292.434254][T12122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.434265][T12122] RIP: 0033:0x7f2fe279e0d9 [ 292.434275][T12122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.434285][T12122] RSP: 002b:00007f2fe3594028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.434297][T12122] RAX: ffffffffffffffda RBX: 00007f2fe2a25fa0 RCX: 00007f2fe279e0d9 [ 292.434303][T12122] RDX: 0000200000000040 RSI: 00000000c0205647 RDI: 0000000000000003 [ 292.434310][T12122] RBP: 00007f2fe3594090 R08: 0000000000000000 R09: 0000000000000000 [ 292.434316][T12122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.434322][T12122] R13: 00007f2fe2a26038 R14: 00007f2fe2a25fa0 R15: 00007ffffd71ca48 [ 292.434335][T12122] [ 292.434340][T12122] ERROR: Out of memory at tomoyo_realpath_from_path. [ 292.654940][T12123] syzkaller0: entered promiscuous mode [ 292.661884][T12123] syzkaller0: entered allmulticast mode [ 292.802783][ T30] audit: type=1400 audit(1787255057.673:1774): avc: denied { create } for pid=12126 comm="syz.3.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 292.878385][ T5716] usb 6-1: USB disconnect, device number 8 [ 292.967160][ T30] audit: type=1400 audit(1787255057.673:1775): avc: denied { setopt } for pid=12126 comm="syz.3.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 293.066640][ T30] audit: type=1400 audit(1787255057.723:1776): avc: denied { bind } for pid=12126 comm="syz.3.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 293.212945][ T30] audit: type=1400 audit(1787255058.013:1777): avc: denied { append } for pid=12133 comm="syz.3.1907" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 293.288208][T12134] FAULT_INJECTION: forcing a failure. [ 293.288208][T12134] name failslab, interval 1, probability 0, space 0, times 0 [ 293.404367][T12134] CPU: 0 UID: 0 PID: 12134 Comm: syz.3.1907 Not tainted syzkaller #0 PREEMPT(full) [ 293.404385][T12134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 293.404391][T12134] Call Trace: [ 293.404395][T12134] [ 293.404399][T12134] dump_stack_lvl+0x100/0x190 [ 293.404417][T12134] should_fail_ex.cold+0x5/0xa [ 293.404432][T12134] should_failslab+0xc2/0x120 [ 293.404449][T12134] __kmalloc_noprof+0xfc/0x820 [ 293.404463][T12134] ? rcu_is_watching+0x13/0xc0 [ 293.404474][T12134] ? tomoyo_realpath_from_path+0xb6/0x690 [ 293.404490][T12134] tomoyo_realpath_from_path+0xb6/0x690 [ 293.404505][T12134] tomoyo_path_number_perm+0x23c/0x580 [ 293.404521][T12134] ? tomoyo_path_number_perm+0x22e/0x580 [ 293.404538][T12134] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 293.404568][T12134] ? find_held_lock+0x2b/0x80 [ 293.404579][T12134] ? hook_file_ioctl_common+0x140/0x440 [ 293.404596][T12134] ? __fget_files+0x21f/0x3d0 [ 293.404613][T12134] security_file_ioctl+0xd3/0x230 [ 293.404625][T12134] __x64_sys_ioctl+0xb7/0x210 [ 293.404638][T12134] do_syscall_64+0x123/0x790 [ 293.404655][T12134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.404666][T12134] RIP: 0033:0x7f032a19e0d9 [ 293.404676][T12134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.404686][T12134] RSP: 002b:00007f032b11f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.404698][T12134] RAX: ffffffffffffffda RBX: 00007f032a425fa0 RCX: 00007f032a19e0d9 [ 293.404704][T12134] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 293.404710][T12134] RBP: 00007f032b11f090 R08: 0000000000000000 R09: 0000000000000000 [ 293.404716][T12134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.404722][T12134] R13: 00007f032a426038 R14: 00007f032a425fa0 R15: 00007ffd648fea68 [ 293.404736][T12134] [ 293.404740][T12134] ERROR: Out of memory at tomoyo_realpath_from_path. [ 293.987860][T12163] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 294.033546][ T30] audit: type=1400 audit(1787255058.883:1778): avc: denied { name_bind } for pid=12161 comm="syz.8.1911" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 294.082688][T12163] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1911'. [ 294.099082][ T30] audit: type=1400 audit(1787255058.903:1779): avc: denied { bind } for pid=12161 comm="syz.8.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 294.154334][ T30] audit: type=1400 audit(1787255058.953:1780): avc: denied { setopt } for pid=12161 comm="syz.8.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 294.362352][T12170] jffs2: notice: (12170) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 294.417217][T12172] FAULT_INJECTION: forcing a failure. [ 294.417217][T12172] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 294.483630][T12172] CPU: 0 UID: 0 PID: 12172 Comm: syz.5.1914 Not tainted syzkaller #0 PREEMPT(full) [ 294.483647][T12172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 294.483653][T12172] Call Trace: [ 294.483658][T12172] [ 294.483663][T12172] dump_stack_lvl+0x100/0x190 [ 294.483681][T12172] should_fail_ex.cold+0x5/0xa [ 294.483693][T12172] ? prepare_alloc_pages+0x16d/0x5f0 [ 294.483712][T12172] should_fail_alloc_page+0xeb/0x140 [ 294.483730][T12172] prepare_alloc_pages+0x1f0/0x5f0 [ 294.483748][T12172] ? ima_match_policy+0x8b8/0x23e0 [ 294.483765][T12172] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 294.483788][T12172] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 294.483802][T12172] ? __pfx___might_resched+0x10/0x10 [ 294.483818][T12172] ? find_held_lock+0x2b/0x80 [ 294.483829][T12172] ? process_measurement+0x4c8/0x2350 [ 294.483841][T12172] ? process_measurement+0x4c8/0x2350 [ 294.483854][T12172] ? down_write+0x146/0x1f0 [ 294.483872][T12172] ? up_write+0x2dc/0x5b0 [ 294.483889][T12172] ? process_measurement+0x1f4/0x2350 [ 294.483905][T12172] ? __lock_acquire+0x4c5/0x1ec0 [ 294.483918][T12172] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 294.483934][T12172] ? policy_nodemask+0xed/0x4f0 [ 294.483952][T12172] alloc_pages_mpol+0x1fb/0x540 [ 294.483970][T12172] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 294.483991][T12172] folio_alloc_mpol_noprof+0x36/0x260 [ 294.484004][T12172] shmem_alloc_folio+0x135/0x160 [ 294.484023][T12172] shmem_alloc_and_add_folio+0x371/0xd40 [ 294.484040][T12172] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 294.484054][T12172] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 294.484069][T12172] ? find_held_lock+0x2b/0x80 [ 294.484081][T12172] shmem_get_folio_gfp+0x6ad/0x1910 [ 294.484098][T12172] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 294.484115][T12172] shmem_write_begin+0x1a4/0x420 [ 294.484131][T12172] ? __pfx_shmem_write_begin+0x10/0x10 [ 294.484145][T12172] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 294.484164][T12172] generic_perform_write+0x292/0xa40 [ 294.484179][T12172] ? __pfx_generic_perform_write+0x10/0x10 [ 294.484192][T12172] ? file_update_time_flags+0x38c/0x520 [ 294.484205][T12172] shmem_file_write_iter+0x10e/0x140 [ 294.484222][T12172] vfs_write+0x6af/0x1050 [ 294.484235][T12172] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 294.484252][T12172] ? __pfx_vfs_write+0x10/0x10 [ 294.484263][T12172] ? find_held_lock+0x2b/0x80 [ 294.484286][T12172] ksys_write+0x12a/0x250 [ 294.484298][T12172] ? __pfx_ksys_write+0x10/0x10 [ 294.484314][T12172] do_syscall_64+0x123/0x790 [ 294.484331][T12172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.484342][T12172] RIP: 0033:0x7fd887b9e0d9 [ 294.484352][T12172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.484362][T12172] RSP: 002b:00007fd888a8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 294.484373][T12172] RAX: ffffffffffffffda RBX: 00007fd887e26090 RCX: 00007fd887b9e0d9 [ 294.484380][T12172] RDX: 0000000000000011 RSI: 0000200000000700 RDI: 0000000000000003 [ 294.484386][T12172] RBP: 00007fd888a8c090 R08: 0000000000000000 R09: 0000000000000000 [ 294.484392][T12172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.484398][T12172] R13: 00007fd887e26128 R14: 00007fd887e26090 R15: 00007ffe041506d8 [ 294.484412][T12172] [ 295.508411][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 295.537040][ T5604] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 295.670342][ T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 295.698670][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.710280][ T9] usb 6-1: Product: syz [ 295.714869][ T9] usb 6-1: Manufacturer: syz [ 295.719795][ T5604] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 295.729156][ T9] usb 6-1: SerialNumber: syz [ 295.734927][ T5604] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.754506][ T5604] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.769884][ T5730] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 295.799759][ T5604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.829862][ T5604] usb 4-1: config 0 descriptor?? [ 295.847202][ T5604] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 296.054238][ T5604] usb 4-1: USB disconnect, device number 26 [ 296.429482][T12195] fuse: Unknown parameter 'user_i00000000000000000000' [ 296.485390][ T5604] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 296.661014][ T5604] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 296.694038][ T5604] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.748092][ T5604] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 296.836233][ T5604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.855528][ T5730] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 296.878998][ T5730] ath9k_htc: Failed to initialize the device [ 296.892554][ T5604] usb 4-1: config 0 descriptor?? [ 296.898417][T12207] jffs2: notice: (12207) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 296.933681][ T5604] aiptek 4-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 296.958703][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 296.958714][ T30] audit: type=1400 audit(1787255061.833:1782): avc: denied { bind } for pid=12208 comm="syz.9.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 296.990415][ T5604] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 297.004354][ T5730] usb 6-1: ath9k_htc: USB layer deinitialized [ 297.083468][T12209] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1927'. [ 297.101377][ T30] audit: type=1400 audit(1787255061.953:1783): avc: denied { write } for pid=12208 comm="syz.9.1927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 297.124279][T12211] syzkaller0: entered promiscuous mode [ 297.133869][T12211] syzkaller0: entered allmulticast mode [ 297.166708][ T5604] usb 4-1: USB disconnect, device number 27 [ 297.912124][T12247] fuse: Unknown parameter 'user_i00000000000000000000' [ 298.264596][ T9] usb 6-1: USB disconnect, device number 9 [ 298.356601][ T5604] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 298.507653][T12263] FAULT_INJECTION: forcing a failure. [ 298.507653][T12263] name failslab, interval 1, probability 0, space 0, times 0 [ 298.551787][ T5604] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 298.564081][T12263] CPU: 0 UID: 0 PID: 12263 Comm: syz.5.1939 Not tainted syzkaller #0 PREEMPT(full) [ 298.564098][T12263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 298.564105][T12263] Call Trace: [ 298.564109][T12263] [ 298.564113][T12263] dump_stack_lvl+0x100/0x190 [ 298.564132][T12263] should_fail_ex.cold+0x5/0xa [ 298.564147][T12263] should_failslab+0xc2/0x120 [ 298.564164][T12263] __kmalloc_noprof+0xfc/0x820 [ 298.564178][T12263] ? rcu_is_watching+0x13/0xc0 [ 298.564190][T12263] ? tomoyo_realpath_from_path+0xb6/0x690 [ 298.564205][T12263] tomoyo_realpath_from_path+0xb6/0x690 [ 298.564220][T12263] tomoyo_path_number_perm+0x23c/0x580 [ 298.564237][T12263] ? tomoyo_path_number_perm+0x22e/0x580 [ 298.564254][T12263] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 298.564284][T12263] ? find_held_lock+0x2b/0x80 [ 298.564295][T12263] ? hook_file_ioctl_common+0x140/0x440 [ 298.564312][T12263] ? __fget_files+0x21f/0x3d0 [ 298.564329][T12263] security_file_ioctl+0xd3/0x230 [ 298.564340][T12263] __x64_sys_ioctl+0xb7/0x210 [ 298.564354][T12263] do_syscall_64+0x123/0x790 [ 298.564371][T12263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.564382][T12263] RIP: 0033:0x7fd887b9e0d9 [ 298.564392][T12263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.564402][T12263] RSP: 002b:00007fd888aad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.564413][T12263] RAX: ffffffffffffffda RBX: 00007fd887e25fa0 RCX: 00007fd887b9e0d9 [ 298.564420][T12263] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 298.564426][T12263] RBP: 00007fd888aad090 R08: 0000000000000000 R09: 0000000000000000 [ 298.564432][T12263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.564438][T12263] R13: 00007fd887e26038 R14: 00007fd887e25fa0 R15: 00007ffe041506d8 [ 298.564451][T12263] [ 298.564456][T12263] ERROR: Out of memory at tomoyo_realpath_from_path. [ 298.791761][ T5604] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 298.805362][ T5604] usb 4-1: config 0 has no interface number 0 [ 298.811788][ T5604] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.878073][ T5604] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.893125][ T5604] usb 4-1: Product: syz [ 298.898088][ T5604] usb 4-1: Manufacturer: syz [ 298.907653][ T5604] usb 4-1: SerialNumber: syz [ 298.915995][ T5604] usb 4-1: config 0 descriptor?? [ 298.951431][ T5604] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 299.667117][ T5604] usb 8-1: new full-speed USB device number 18 using dummy_hcd [ 299.714402][T12279] FAULT_INJECTION: forcing a failure. [ 299.714402][T12279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.802067][T12279] CPU: 0 UID: 0 PID: 12279 Comm: syz.3.1937 Not tainted syzkaller #0 PREEMPT(full) [ 299.802087][T12279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 299.802094][T12279] Call Trace: [ 299.802098][T12279] [ 299.802103][T12279] dump_stack_lvl+0x100/0x190 [ 299.802121][T12279] should_fail_ex.cold+0x5/0xa [ 299.802136][T12279] _copy_from_user+0x2e/0xd0 [ 299.802149][T12279] yurex_write+0x20b/0x910 [ 299.802163][T12279] ? find_held_lock+0x2b/0x80 [ 299.802175][T12279] ? get_pid_task+0xfc/0x250 [ 299.802185][T12279] ? __pfx_yurex_write+0x10/0x10 [ 299.802199][T12279] ? __pfx_autoremove_wake_function+0x10/0x10 [ 299.802214][T12279] ? avc_policy_seqno+0x9/0x20 [ 299.802227][T12279] ? selinux_file_permission+0x8f/0x6d0 [ 299.802240][T12279] ? bpf_lsm_file_permission+0x9/0x10 [ 299.802252][T12279] ? security_file_permission+0x76/0x210 [ 299.802264][T12279] ? rw_verify_area+0xce/0x6d0 [ 299.802276][T12279] vfs_write+0x2aa/0x1050 [ 299.802288][T12279] ? __pfx_yurex_write+0x10/0x10 [ 299.802303][T12279] ? __pfx_vfs_write+0x10/0x10 [ 299.802314][T12279] ? find_held_lock+0x2b/0x80 [ 299.802324][T12279] ? __fget_files+0x215/0x3d0 [ 299.802339][T12279] ? __fget_files+0x215/0x3d0 [ 299.802355][T12279] ? __fget_files+0x21f/0x3d0 [ 299.802373][T12279] ksys_write+0x12a/0x250 [ 299.802384][T12279] ? __pfx_ksys_write+0x10/0x10 [ 299.802400][T12279] do_syscall_64+0x123/0x790 [ 299.802417][T12279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.802429][T12279] RIP: 0033:0x7f032a19e0d9 [ 299.802438][T12279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.802448][T12279] RSP: 002b:00007f032b0fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 299.802459][T12279] RAX: ffffffffffffffda RBX: 00007f032a426090 RCX: 00007f032a19e0d9 [ 299.802466][T12279] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000004 [ 299.802472][T12279] RBP: 00007f032b0fe090 R08: 0000000000000000 R09: 0000000000000000 [ 299.802478][T12279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.802484][T12279] R13: 00007f032a426128 R14: 00007f032a426090 R15: 00007ffd648fea68 [ 299.802498][T12279] [ 300.063111][ T5604] usb 8-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 300.081400][ T5604] usb 8-1: config 1 has an invalid interface number: 133 but max is 2 [ 300.090047][ T5604] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.101225][ T5604] usb 8-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 300.110243][ T5604] usb 8-1: config 1 has no interface number 3 [ 300.117229][ T5604] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 300.130293][ T5604] usb 8-1: config 1 interface 133 has no altsetting 0 [ 300.137711][ T5604] usb 8-1: config 1 interface 2 has no altsetting 0 [ 300.150693][ T5604] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.158888][ T5604] usb 8-1: Product: syz [ 300.164041][ T5604] usb 8-1: Manufacturer: syz [ 300.168667][ T5604] usb 8-1: SerialNumber: syz [ 300.434603][ T30] audit: type=1400 audit(1787255065.313:1784): avc: denied { read } for pid=12274 comm="syz.7.1943" name="event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 300.482259][ T30] audit: type=1400 audit(1787255065.313:1785): avc: denied { open } for pid=12274 comm="syz.7.1943" path="/dev/input/event2" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 300.534279][ T30] audit: type=1400 audit(1787255065.343:1786): avc: denied { ioctl } for pid=12274 comm="syz.7.1943" path="/dev/input/event2" dev="devtmpfs" ino=921 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 300.594408][ T30] audit: type=1400 audit(1787255065.343:1787): avc: denied { create } for pid=12274 comm="syz.7.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 300.792128][T12225] syzkaller0: entered promiscuous mode [ 300.802786][T12225] syzkaller0: entered allmulticast mode [ 300.851728][T12291] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1943'. [ 300.925731][ T5604] usb 8-1: 1:1 : format type 0 is detected, processed as PCM [ 300.943005][ T5604] usb 8-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 301.133653][ T9] usb 4-1: USB disconnect, device number 28 [ 301.815517][ T5604] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 301.828471][ T9] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 301.874589][ T30] audit: type=1400 audit(1787255066.743:1788): avc: denied { append } for pid=12300 comm="syz.3.1948" name="comedi3" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 301.902841][ T5604] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 301.955093][T12296] overlayfs: overlapping lowerdir path [ 301.978618][ T5604] usb 8-1: 1:1 : format type 0 is detected, processed as PCM [ 302.029918][ T5604] usb 8-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 302.088732][ T5604] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 302.101360][ T30] audit: type=1400 audit(1787255066.973:1789): avc: denied { name_bind } for pid=12298 comm="syz.5.1947" src=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 302.153583][ T5604] snd-usb-audio 8-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 302.197992][ T5604] usb 8-1: 1:1 : format type 0 is detected, processed as PCM [ 302.245864][ T5604] usb 8-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 303.226952][ T5604] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 303.240274][ T30] audit: type=1400 audit(1787255068.113:1790): avc: denied { create } for pid=12317 comm="syz.7.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 303.993890][ T5604] snd-usb-audio 8-1:1.133: probe with driver snd-usb-audio failed with error -2 [ 304.041009][ T5604] usb 8-1: 1:1 : format type 0 is detected, processed as PCM [ 304.057915][T12318] jffs2: notice: (12318) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 304.079399][ T5604] usb 8-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 304.085932][ T30] audit: type=1400 audit(1787255068.903:1791): avc: denied { write } for pid=12317 comm="syz.7.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 304.118741][ T5604] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 304.139277][ T5603] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 304.145807][ T5615] Bluetooth: hci5: command 0x1003 tx timeout [ 304.201606][ T30] audit: type=1400 audit(1787255068.903:1792): avc: denied { nlmsg_write } for pid=12317 comm="syz.7.1952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 304.250348][T12318] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 304.290967][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 304.380265][ T30] audit: type=1400 audit(1787255069.243:1793): avc: denied { mount } for pid=12323 comm="syz.5.1953" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 304.497798][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 304.518022][ T5604] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 304.528937][ T30] audit: type=1400 audit(1787255069.243:1794): avc: denied { mounton } for pid=12323 comm="syz.5.1953" path="/162/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 304.564648][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.598836][ T5604] usb 8-1: USB disconnect, device number 18 [ 304.617333][ T9] usb 4-1: Product: syz [ 304.646454][ T9542] udevd[9542]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.662507][ T9] usb 4-1: Manufacturer: syz [ 304.680319][ T9] usb 4-1: SerialNumber: syz [ 304.728064][ T187] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 305.130737][T12333] FAULT_INJECTION: forcing a failure. [ 305.130737][T12333] name failslab, interval 1, probability 0, space 0, times 0 [ 305.191282][T12333] CPU: 0 UID: 0 PID: 12333 Comm: syz.7.1957 Not tainted syzkaller #0 PREEMPT(full) [ 305.191299][T12333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 305.191306][T12333] Call Trace: [ 305.191311][T12333] [ 305.191316][T12333] dump_stack_lvl+0x100/0x190 [ 305.191334][T12333] should_fail_ex.cold+0x5/0xa [ 305.191349][T12333] should_failslab+0xc2/0x120 [ 305.191366][T12333] __kmalloc_noprof+0xfc/0x820 [ 305.191382][T12333] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 305.191399][T12333] kernfs_fop_write_iter+0x26a/0x5f0 [ 305.191414][T12333] vfs_write+0x6af/0x1050 [ 305.191427][T12333] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 305.191441][T12333] ? __pfx_vfs_write+0x10/0x10 [ 305.191452][T12333] ? find_held_lock+0x2b/0x80 [ 305.191473][T12333] ksys_write+0x12a/0x250 [ 305.191485][T12333] ? __pfx_ksys_write+0x10/0x10 [ 305.191501][T12333] do_syscall_64+0x123/0x790 [ 305.191518][T12333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.191529][T12333] RIP: 0033:0x7f629419e0d9 [ 305.191539][T12333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.191549][T12333] RSP: 002b:00007f629511f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 305.191560][T12333] RAX: ffffffffffffffda RBX: 00007f6294425fa0 RCX: 00007f629419e0d9 [ 305.191567][T12333] RDX: 000000000000000b RSI: 0000200000000400 RDI: 0000000000000003 [ 305.191573][T12333] RBP: 00007f629511f090 R08: 0000000000000000 R09: 0000000000000000 [ 305.191579][T12333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.191585][T12333] R13: 00007f6294426038 R14: 00007f6294425fa0 R15: 00007ffe9afec638 [ 305.191599][T12333] [ 305.432420][ T30] audit: type=1400 audit(1787255070.303:1795): avc: denied { unmount } for pid=8512 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 305.761162][ T30] audit: type=1400 audit(1787255070.633:1796): avc: denied { mmap_zero } for pid=12343 comm="syz.8.1961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 305.824490][ T187] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 305.840555][ T187] ath9k_htc: Failed to initialize the device [ 305.923758][ T187] usb 4-1: ath9k_htc: USB layer deinitialized [ 305.953820][ T30] audit: type=1400 audit(1787255070.833:1797): avc: denied { create } for pid=12346 comm="syz.5.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 306.068635][ T30] audit: type=1400 audit(1787255070.883:1798): avc: denied { getopt } for pid=12346 comm="syz.5.1958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 306.982490][T12357] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1963'. [ 307.128001][ T5730] usb 4-1: USB disconnect, device number 29 [ 307.253593][T12368] overlay: ./file2 is not a directory [ 307.542621][T12380] netlink: 'syz.8.1969': attribute type 20 has an invalid length. [ 308.414165][T12359] warning: `syz.7.1964' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 308.517656][T12377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1966'. [ 308.847364][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 308.847376][ T30] audit: type=1400 audit(1787255073.723:1805): avc: denied { read } for pid=12394 comm="syz.3.1971" name="rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 309.007661][ T30] audit: type=1400 audit(1787255073.723:1806): avc: denied { open } for pid=12394 comm="syz.3.1971" path="/dev/rtc0" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 309.165311][ T5730] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 309.198803][ T30] audit: type=1400 audit(1787255073.763:1807): avc: denied { ioctl } for pid=12394 comm="syz.3.1971" path="/dev/rtc0" dev="devtmpfs" ino=920 ioctlcmd=0x582b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 309.349760][ T30] audit: type=1400 audit(1787255073.793:1808): avc: denied { mount } for pid=12394 comm="syz.3.1971" name="/" dev="ramfs" ino=74949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 309.396852][ T5730] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 309.435590][ T5730] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 309.504510][ T30] audit: type=1400 audit(1787255073.853:1809): avc: denied { write } for pid=12385 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.543540][ T5730] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 309.623837][ T5730] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.851881][ T30] audit: type=1400 audit(1787255074.153:1810): avc: denied { write } for pid=12419 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 309.875063][ T5730] usb 9-1: config 0 descriptor?? [ 309.947255][T12445] syzkaller0: entered promiscuous mode [ 309.952743][T12445] syzkaller0: entered allmulticast mode [ 310.268751][ T30] audit: type=1400 audit(1787255074.493:1811): avc: denied { write } for pid=12418 comm="syz.7.1976" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 310.396965][T12438] syzkaller0: entered promiscuous mode [ 310.432487][ T5615] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 310.447344][ T30] audit: type=1326 audit(1787255075.323:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12395 comm="syz.8.1972" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe279e0d9 code=0x7ffc0000 [ 310.511474][ T187] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 310.538347][T12438] syzkaller0: entered allmulticast mode [ 310.594112][T12407] tipc: Enabling of bearer rejected, failed to enable media [ 310.666546][ T30] audit: type=1326 audit(1787255075.323:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12395 comm="syz.8.1972" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe279e0d9 code=0x7ffc0000 [ 310.719422][ T187] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 310.817919][ T187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.840206][ T5730] ath6kl: Failed to submit usb control message: -71 [ 310.877152][ T187] usb 6-1: Product: syz [ 310.884371][ T5730] ath6kl: unable to send the bmi data to the device: -71 [ 310.900701][ T30] audit: type=1326 audit(1787255075.323:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12395 comm="syz.8.1972" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fe279e0d9 code=0x7ffc0000 [ 310.937642][ T187] usb 6-1: Manufacturer: syz [ 310.946748][ T5730] ath6kl: Unable to send get target info: -71 [ 310.956346][ T187] usb 6-1: SerialNumber: syz [ 310.996025][ T5730] ath6kl: Failed to init ath6kl core: -71 [ 311.033523][ T5730] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 311.043592][ T9078] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 311.143447][ T5730] usb 9-1: USB disconnect, device number 17 [ 311.538985][T12466] jffs2: notice: (12466) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 311.917271][ T187] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 312.086690][ T187] usb 10-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 312.137120][ T187] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.146998][ T187] usb 10-1: Product: syz [ 312.151330][ T9078] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 312.158461][ T187] usb 10-1: Manufacturer: syz [ 312.169234][ T187] usb 10-1: SerialNumber: syz [ 312.174103][ T9078] ath9k_htc: Failed to initialize the device [ 312.192918][ T187] usb 10-1: config 0 descriptor?? [ 312.350037][ T9078] usb 6-1: ath9k_htc: USB layer deinitialized [ 312.605990][T12471] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 312.705343][T12471] CPU: 0 UID: 0 PID: 12471 Comm: syz.9.1985 Not tainted syzkaller #0 PREEMPT(full) [ 312.705360][T12471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 312.705368][T12471] Call Trace: [ 312.705372][T12471] [ 312.705377][T12471] dump_stack_lvl+0x100/0x190 [ 312.705396][T12471] sysfs_warn_dup.cold+0x1c/0x28 [ 312.705414][T12471] sysfs_create_dir_ns+0x24b/0x2b0 [ 312.705434][T12471] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 312.705451][T12471] ? find_held_lock+0x2b/0x80 [ 312.705463][T12471] ? kobject_add_internal+0x25f/0x930 [ 312.705475][T12471] ? kobject_add_internal+0x25f/0x930 [ 312.705489][T12471] ? class_dir_child_ns_type+0xd/0x60 [ 312.705505][T12471] kobject_add_internal+0x2c8/0x930 [ 312.705519][T12471] kobject_add+0x16a/0x1e0 [ 312.705530][T12471] ? __pfx_kobject_add+0x10/0x10 [ 312.705542][T12471] ? get_device_parent+0x1b3/0x4c0 [ 312.705556][T12471] ? kobject_put+0xb9/0x640 [ 312.705572][T12471] device_add+0x294/0x1970 [ 312.705588][T12471] ? lockdep_init_map_type+0x5c/0x250 [ 312.705603][T12471] ? __pfx_device_add+0x10/0x10 [ 312.705616][T12471] ? lockdep_init_map_type+0x5c/0x250 [ 312.705631][T12471] ? __init_waitqueue_head+0xca/0x150 [ 312.705652][T12471] tty_register_device_attr+0x388/0x7f0 [ 312.705665][T12471] ? lockdep_init_map_type+0x5c/0x250 [ 312.705680][T12471] ? __pfx_tty_register_device_attr+0x10/0x10 [ 312.705695][T12471] ? tty_port_init+0x156/0x1c0 [ 312.705709][T12471] gsm_activate_mux+0x155/0x2a0 [ 312.705729][T12471] gsmld_ioctl+0xbbc/0x15c0 [ 312.705747][T12471] ? kasan_quarantine_put+0x104/0x240 [ 312.705762][T12471] ? __pfx_gsmld_ioctl+0x10/0x10 [ 312.705791][T12471] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 312.705807][T12471] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 312.705827][T12471] ? __pfx_gsmld_ioctl+0x10/0x10 [ 312.705840][T12471] tty_ioctl+0x11b4/0x1640 [ 312.705853][T12471] ? __pfx_tty_ioctl+0x10/0x10 [ 312.705865][T12471] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 312.705879][T12471] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 312.705899][T12471] ? selinux_file_ioctl+0x13b/0x290 [ 312.705910][T12471] ? selinux_file_ioctl+0xb6/0x290 [ 312.705921][T12471] ? __pfx_tty_ioctl+0x10/0x10 [ 312.705933][T12471] __x64_sys_ioctl+0x18e/0x210 [ 312.705946][T12471] do_syscall_64+0x123/0x790 [ 312.705963][T12471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.705975][T12471] RIP: 0033:0x7f2b28d9e0d9 [ 312.705985][T12471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.705997][T12471] RSP: 002b:00007f2b29c26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.706008][T12471] RAX: ffffffffffffffda RBX: 00007f2b29026180 RCX: 00007f2b28d9e0d9 [ 312.706015][T12471] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000009 [ 312.706021][T12471] RBP: 00007f2b28e35024 R08: 0000000000000000 R09: 0000000000000000 [ 312.706027][T12471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.706033][T12471] R13: 00007f2b29026218 R14: 00007f2b29026180 R15: 00007ffe387eebc8 [ 312.706047][T12471] [ 312.706247][T12471] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 313.607705][ T5716] usb 6-1: USB disconnect, device number 10 [ 314.050263][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 314.050275][ T30] audit: type=1400 audit(1787255078.923:1877): avc: denied { create } for pid=12484 comm="syz.8.1988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 314.116396][T12488] FAULT_INJECTION: forcing a failure. [ 314.116396][T12488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 315.075564][T12495] jffs2: notice: (12495) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 315.093353][ T30] audit: type=1400 audit(1787255079.753:1878): avc: denied { connect } for pid=12489 comm="syz.7.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 315.187500][ T30] audit: type=1400 audit(1787255079.993:1879): avc: denied { write } for pid=12489 comm="syz.7.1989" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 315.308689][T12488] CPU: 0 UID: 0 PID: 12488 Comm: syz.8.1988 Not tainted syzkaller #0 PREEMPT(full) [ 315.308705][T12488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 315.308712][T12488] Call Trace: [ 315.308716][T12488] [ 315.308720][T12488] dump_stack_lvl+0x100/0x190 [ 315.308738][T12488] should_fail_ex.cold+0x5/0xa [ 315.308753][T12488] _copy_from_user+0x2e/0xd0 [ 315.308766][T12488] move_addr_to_kernel+0x65/0x170 [ 315.308783][T12488] __sys_bind+0x11d/0x260 [ 315.308798][T12488] ? __pfx___sys_bind+0x10/0x10 [ 315.308811][T12488] ? __fget_files+0x21f/0x3d0 [ 315.308830][T12488] ? __pfx_ksys_write+0x10/0x10 [ 315.308845][T12488] __x64_sys_bind+0x72/0xb0 [ 315.308864][T12488] ? lockdep_hardirqs_on+0x7d/0x110 [ 315.308879][T12488] do_syscall_64+0x123/0x790 [ 315.308896][T12488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.308907][T12488] RIP: 0033:0x7f2fe279e0d9 [ 315.308917][T12488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.308928][T12488] RSP: 002b:00007f2fe3594028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 315.308939][T12488] RAX: ffffffffffffffda RBX: 00007f2fe2a25fa0 RCX: 00007f2fe279e0d9 [ 315.308945][T12488] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 315.308952][T12488] RBP: 00007f2fe3594090 R08: 0000000000000000 R09: 0000000000000000 [ 315.308958][T12488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.308964][T12488] R13: 00007f2fe2a26038 R14: 00007f2fe2a25fa0 R15: 00007ffffd71ca48 [ 315.308977][T12488] [ 315.717053][ T187] int51x1 10-1:0.0: probe with driver int51x1 failed with error -71 [ 315.757845][ T30] audit: type=1400 audit(1787255079.993:1880): avc: denied { add_name } for pid=12489 comm="syz.7.1989" name="test2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 315.797246][ T187] usb 10-1: USB disconnect, device number 4 [ 315.909933][ T30] audit: type=1400 audit(1787255079.993:1881): avc: denied { create } for pid=12489 comm="syz.7.1989" name="test2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 315.961732][T12507] IPVS: set_ctl: invalid protocol: 29 172.30.0.8:20000 [ 316.125277][ T5730] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 316.155224][ T187] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 316.701032][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.797719][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.814287][ T30] audit: type=1400 audit(1787255079.993:1882): avc: denied { read write open } for pid=12489 comm="syz.7.1989" path="/222/mnt/test2" dev="jffs2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 316.841567][T12516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.237851][ T5730] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 317.272777][ T30] audit: type=1400 audit(1787255080.733:1883): avc: denied { setattr } for pid=12503 comm="syz.7.1992" name="video2" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 317.316305][ T187] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 317.348588][ T5730] usb 9-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 317.358217][ T5730] usb 9-1: Product: syz [ 317.365625][ T187] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 317.380044][ T5730] usb 9-1: SerialNumber: syz [ 317.392324][T12511] MTRR 1 not used [ 317.396849][ T30] audit: type=1400 audit(1787255080.753:1884): avc: denied { write } for pid=12503 comm="syz.7.1992" name="event5" dev="devtmpfs" ino=2874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 317.429779][ T187] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 317.447346][ T5730] usb 9-1: config 0 descriptor?? [ 317.477439][ T187] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 317.543007][ T30] audit: type=1400 audit(1787255080.813:1885): avc: denied { write } for pid=12510 comm="syz.3.1995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 317.581045][ T187] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.604221][ T187] usb 10-1: Product: syz [ 317.618300][ T187] usb 10-1: Manufacturer: syz [ 317.633544][ T187] usb 10-1: SerialNumber: syz [ 317.648645][ T30] audit: type=1400 audit(1787255080.833:1886): avc: denied { setopt } for pid=12503 comm="syz.7.1992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 317.690360][ T187] usb 10-1: config 0 descriptor?? [ 317.811605][T12509] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 318.066735][T12537] FAULT_INJECTION: forcing a failure. [ 318.066735][T12537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.084432][ T187] rc_core: IR keymap rc-streamzap not found [ 318.093181][ T187] Registered IR keymap rc-empty [ 318.100855][ T187] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 318.131245][ T187] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input14 [ 318.151979][T12537] CPU: 0 UID: 0 PID: 12537 Comm: syz.7.1999 Not tainted syzkaller #0 PREEMPT(full) [ 318.151994][T12537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 318.152000][T12537] Call Trace: [ 318.152004][T12537] [ 318.152008][T12537] dump_stack_lvl+0x100/0x190 [ 318.152027][T12537] should_fail_ex.cold+0x5/0xa [ 318.152041][T12537] _copy_from_user+0x2e/0xd0 [ 318.152054][T12537] do_arpt_set_ctl+0xcbf/0x10a0 [ 318.152071][T12537] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 318.152085][T12537] ? __mutex_lock+0x26c/0x1bc0 [ 318.152102][T12537] ? nf_sockopt_find.isra.0+0x2a/0x290 [ 318.152118][T12537] ? find_held_lock+0x2b/0x80 [ 318.152130][T12537] ? nf_sockopt_find.isra.0+0x222/0x290 [ 318.152146][T12537] ? nf_sockopt_find.isra.0+0x222/0x290 [ 318.152164][T12537] ? __mutex_unlock_slowpath+0x35d/0x930 [ 318.152181][T12537] ? sockopt_release_sock+0x5c/0x70 [ 318.152192][T12537] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 318.152212][T12537] ? nf_sockopt_find.isra.0+0x222/0x290 [ 318.152230][T12537] nf_setsockopt+0x8d/0xf0 [ 318.152248][T12537] ip_setsockopt+0xcb/0xf0 [ 318.152261][T12537] udp_setsockopt+0x64/0xb0 [ 318.152278][T12537] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 318.152292][T12537] do_sock_setsockopt+0xf3/0x1d0 [ 318.152305][T12537] __sys_setsockopt+0x195/0x220 [ 318.152324][T12537] __x64_sys_setsockopt+0xbd/0x160 [ 318.152339][T12537] ? do_syscall_64+0xae/0x790 [ 318.152354][T12537] ? lockdep_hardirqs_on+0x7d/0x110 [ 318.152369][T12537] do_syscall_64+0x123/0x790 [ 318.152385][T12537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.152396][T12537] RIP: 0033:0x7f629419e0d9 [ 318.152405][T12537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.152416][T12537] RSP: 002b:00007f629511f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 318.152426][T12537] RAX: ffffffffffffffda RBX: 00007f6294425fa0 RCX: 00007f629419e0d9 [ 318.152433][T12537] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 318.152439][T12537] RBP: 00007f629511f090 R08: 0000000000000068 R09: 0000000000000000 [ 318.152445][T12537] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 318.152452][T12537] R13: 00007f6294426038 R14: 00007f6294425fa0 R15: 00007ffe9afec638 [ 318.152464][T12537] [ 318.500401][ T5730] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 318.685681][ T5730] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 318.791732][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.823685][ T5730] usb 4-1: Product: syz [ 318.833202][ T9062] usb 9-1: USB disconnect, device number 18 [ 318.866399][ T5716] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 318.905713][ T5730] usb 4-1: Manufacturer: syz [ 318.921541][ T5730] usb 4-1: SerialNumber: syz [ 318.949317][ T187] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 319.035403][ T5716] usb 6-1: Using ep0 maxpacket: 16 [ 319.064772][ T5716] usb 6-1: unable to get BOS descriptor or descriptor too short [ 319.099471][ T5716] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 319.200669][ T5716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.248771][ T5716] usb 6-1: Product: syz [ 319.280737][ T5716] usb 6-1: Manufacturer: syz [ 319.286018][ T9062] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 319.326929][ T5716] usb 6-1: SerialNumber: syz [ 319.414830][T12577] jffs2: notice: (12577) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 319.452782][ T9062] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 319.464847][ T9062] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.483999][ T5604] usb 10-1: USB disconnect, device number 5 [ 319.522400][ T9062] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.975205][ T187] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 320.540753][ T187] ath9k_htc: Failed to initialize the device [ 320.553504][ T9062] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.938625][ C0] sched: DL replenish lagged too much [ 342.898590][ C0] nvme nvme5: long keepalive RTT (1550 ms) [ 342.904488][ C0] nvme nvme2: long keepalive RTT (1550 ms) [ 342.910385][ C0] nvme nvme1: long keepalive RTT (1560 ms) [ 342.916218][ C0] nvme nvme3: long keepalive RTT (1570 ms) [ 342.922030][ C0] nvme nvme4: long keepalive RTT (1570 ms) [ 342.927854][ C0] nvme nvme0: long keepalive RTT (1580 ms) [ 380.303380][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.566273][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 447.235494][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 447.242426][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9/1:b..l P5594/1:b..l [ 447.251482][ C0] rcu: (detected by 0, t=10502 jiffies, g=133005, q=809 ncpus=1) [ 447.259250][ C0] task:syz-executor state:R running task stack:25976 pid:5594 tgid:5594 ppid:5585 task_flags:0x40050c flags:0x00080002 [ 447.273026][ C0] Call Trace: [ 447.276288][ C0] [ 447.279199][ C0] __schedule+0x125c/0x6740 [ 447.283687][ C0] ? __nr_to_section+0x3e/0x100 [ 447.288521][ C0] ? find_held_lock+0x2b/0x80 [ 447.293174][ C0] ? __pfx___schedule+0x10/0x10 [ 447.298012][ C0] ? find_held_lock+0x2b/0x80 [ 447.302663][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 447.308006][ C0] preempt_schedule_common+0x3c/0xb0 [ 447.313264][ C0] preempt_schedule_thunk+0x16/0x40 [ 447.318442][ C0] _raw_spin_unlock+0x3e/0x50 [ 447.323090][ C0] __zap_vma_range+0x16f5/0x4a40 [ 447.328014][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 447.333275][ C0] ? find_held_lock+0x2b/0x80 [ 447.337922][ C0] unmap_vmas+0x299/0x5f0 [ 447.342225][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 447.347049][ C0] ? mas_next_slot+0x10a3/0x1960 [ 447.351970][ C0] exit_mmap+0x1ef/0xa00 [ 447.356180][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 447.360918][ C0] ? rcu_is_watching+0x13/0xc0 [ 447.365654][ C0] ? find_held_lock+0x2b/0x80 [ 447.370309][ C0] ? uprobe_clear_state+0x5f/0x250 [ 447.375406][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 447.381026][ C0] __mmput+0x12a/0x410 [ 447.385078][ C0] mmput+0x67/0x80 [ 447.388784][ C0] do_exit+0x8b1/0x2ae0 [ 447.392925][ C0] ? __pfx_do_exit+0x10/0x10 [ 447.397489][ C0] ? do_raw_spin_lock+0x128/0x260 [ 447.402484][ C0] ? find_held_lock+0x2b/0x80 [ 447.407128][ C0] ? get_signal+0x7e0/0x21e0 [ 447.411701][ C0] do_group_exit+0xd5/0x2a0 [ 447.416176][ C0] get_signal+0x1ec7/0x21e0 [ 447.420744][ C0] ? __pfx_get_signal+0x10/0x10 [ 447.425569][ C0] arch_do_signal_or_restart+0x91/0x7e0 [ 447.431085][ C0] ? __pfx___do_sys_wait4+0x10/0x10 [ 447.436255][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 447.442384][ C0] exit_to_user_mode_loop+0x139/0x700 [ 447.447730][ C0] ? rcu_is_watching+0x13/0xc0 [ 447.452467][ C0] do_syscall_64+0x661/0x790 [ 447.457040][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.462903][ C0] RIP: 0033:0x7f032a159257 [ 447.467290][ C0] RSP: 002b:00007ffd648fef50 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 447.475694][ C0] RAX: fffffffffffffe00 RBX: 000055555d91d500 RCX: 00007f032a159257 [ 447.483655][ C0] RDX: 0000000040000000 RSI: 00007ffd648fefac RDI: ffffffffffffffff [ 447.491613][ C0] RBP: 00007ffd648fefac R08: 0000000000000000 R09: 0000000000000000 [ 447.499564][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 447.507510][ C0] R13: 0000000000000003 R14: 00007ffd648ff208 R15: 0000000000000000 [ 447.515462][ C0] [ 447.518455][ C0] task:kworker/0:0 state:R running task stack:23416 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 447.532068][ C0] Workqueue: usb_hub_wq hub_event [ 447.537070][ C0] Call Trace: [ 447.540318][ C0] [ 447.543222][ C0] __schedule+0x125c/0x6740 [ 447.547705][ C0] ? __pfx___schedule+0x10/0x10 [ 447.552527][ C0] ? mark_held_locks+0x40/0x70 [ 447.557263][ C0] preempt_schedule_irq+0x4e/0x90 [ 447.562266][ C0] irqentry_exit+0x205/0xa10 [ 447.566832][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 447.572779][ C0] RIP: 0010:its_return_thunk+0x0/0x10 [ 447.578120][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 e9 8b 56 b2 f5 cc [ 447.597695][ C0] RSP: 0018:ffffc900000e7490 EFLAGS: 00000282 [ 447.603730][ C0] RAX: 0000000000000000 RBX: ffffc900000e7830 RCX: ffffc900000e745c [ 447.611668][ C0] RDX: 0000000000000000 RSI: ffffffff8e38aca9 RDI: ffffffff8c603480 [ 447.619608][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000007 [ 447.627547][ C0] R10: 0000000000000200 R11: 0000000000017b7f R12: ffffc900000e7558 [ 447.635493][ C0] R13: ffffc900000e7508 R14: ffffc900000e7830 R15: ffffc900000e753c [ 447.643439][ C0] unwind_next_frame+0x3c3/0x2090 [ 447.648443][ C0] ? qlist_free_all+0x47/0xf0 [ 447.653103][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 447.659231][ C0] arch_stack_walk+0x94/0xf0 [ 447.663794][ C0] ? kasan_quarantine_reduce+0x1a0/0x1f0 [ 447.669403][ C0] stack_trace_save+0x8e/0xc0 [ 447.674058][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 447.679399][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 447.684306][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 447.689216][ C0] save_stack+0x162/0x1e0 [ 447.693518][ C0] ? __pfx_save_stack+0x10/0x10 [ 447.698341][ C0] ? __free_frozen_pages+0x79f/0x1090 [ 447.703680][ C0] ? qlist_free_all+0x47/0xf0 [ 447.708330][ C0] ? page_ext_put+0x3e/0xd0 [ 447.712807][ C0] __reset_page_owner+0x84/0x190 [ 447.717717][ C0] __free_frozen_pages+0x79f/0x1090 [ 447.722886][ C0] qlist_free_all+0x47/0xf0 [ 447.727360][ C0] kasan_quarantine_reduce+0x1a0/0x1f0 [ 447.732793][ C0] __kasan_kmalloc+0x8a/0xb0 [ 447.737356][ C0] __kmalloc_noprof+0x324/0x820 [ 447.742178][ C0] ? usb_alloc_urb+0x66/0xa0 [ 447.746744][ C0] usb_alloc_urb+0x66/0xa0 [ 447.751133][ C0] usb_control_msg+0x1d3/0x4b0 [ 447.755867][ C0] ? __pfx_usb_control_msg+0x10/0x10 [ 447.761127][ C0] ? hub_ext_port_status+0x3e4/0x600 [ 447.766393][ C0] hub_event+0x1294/0x4420 [ 447.770798][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 447.775809][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 447.780973][ C0] ? __pfx_hub_event+0x10/0x10 [ 447.785705][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 447.791312][ C0] ? rcu_is_watching+0x13/0xc0 [ 447.796046][ C0] process_one_work+0xa23/0x1940 [ 447.800960][ C0] ? __pfx_process_one_work+0x10/0x10 [ 447.806312][ C0] ? __pfx_hub_event+0x10/0x10 [ 447.811055][ C0] worker_thread+0x5ef/0xe50 [ 447.815628][ C0] ? kthread+0x13a/0x450 [ 447.819839][ C0] ? __pfx_worker_thread+0x10/0x10 [ 447.824919][ C0] kthread+0x373/0x450 [ 447.828964][ C0] ? __pfx_kthread+0x10/0x10 [ 447.833525][ C0] ret_from_fork+0x730/0xd60 [ 447.838090][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 447.843173][ C0] ? __switch_to+0x800/0x10f0 [ 447.847826][ C0] ? __pfx_kthread+0x10/0x10 [ 447.852386][ C0] ret_from_fork_asm+0x1a/0x30 [ 447.857129][ C0] [ 447.863026][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.100585][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 448.112522][ T1303] ieee802154 phy1 wpan1: encryption failed: -22