last executing test programs: 7m45.70707903s ago: executing program 32 (id=59): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4, 0xfa00, {r1}}, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000080)={0x1, 0x1}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) io_setup(0x10000, &(0x7f00000014c0)) 4m16.860309992s ago: executing program 33 (id=774): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000240)={r1, &(0x7f0000000100)='\x00', 0x501000, &(0x7f0000000140)={@_ha_fsid={[0x12000000, 0x1000]}, {0x2, 0x210, 0x9de}}, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000010c0)={&(0x7f0000000340), &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x7, 0x6, 0x4000000000000189}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000480)={&(0x7f0000000300)=[0x0, 0x0], 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001000)=@getqdisc={0x2c, 0x26, 0x300, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff1, 0x10}, {0x2, 0xa}, {0x7, 0xfff3}}, [{0xfffffffffffffee4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) symlinkat(&(0x7f00000016c0)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5, &(0x7f0000000140)='./file0\x00') unlinkat(r5, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x0) close(0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r6) r7 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, 0x0, 0x0, 0x0, 0x4d}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xc042, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001180)=@newtaction={0x240, 0x30, 0x53b, 0x0, 0x25dfdbfb, {}, [{0x22c, 0x1, [@m_simple={0x228, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x1fc, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x20068054}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFNETMASK(r8, 0x891b, &(0x7f0000000040)={'ipvlan1\x00', {0x2, 0x0, @dev}}) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1a3806, 0x1, 0x0, 0x7ffffffc, 0x0, 0x0, 0x0, 0x6, 0xfe}) 3m55.341520361s ago: executing program 34 (id=797): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x38}}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2140, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/62, 0x0, 0x1800, 0x9}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fff, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfffffffe}, 0x0) r5 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000000100)=[{{&(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x4, 0x0, {0x0, 0x3}}, 0x80, 0x0}}], 0x1, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r7, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc045}, 0x20004) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) 3m5.934853635s ago: executing program 35 (id=969): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open_tree(0xffffffffffffffff, 0x0, 0x3) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001200)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0xff00000000000000}}, @IFLA_GRE_LOCAL={0x14, 0x6, @loopback={0x300}}]}}}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r3, 0x741, 0x0, 0x7}, 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)={r3, 0x15, "b304b4e4abdcdd5fdaa41625b9f65ef058a8531c95"}, &(0x7f0000000140)=0x1d) syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x318, 0xffffffff, 0x1e8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x17}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ah={{0x30}, {[0x8001, 0x1ff], 0x1}}, @common=@icmp={{0x28}, {0xb, "b22f"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'vlan1\x00', 'dvmrp0\x00', {}, {}, 0x24, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x378) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) capset(&(0x7f0000000400)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x8000000, 0x0, 0x0, 0x1003}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x601, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 3m3.685486411s ago: executing program 36 (id=979): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_newrule={0x30, 0x20, 0xf4db158ec847dc81, 0x70bd2d, 0x25dfdbfe, {0x2, 0x0, 0x10, 0x0, 0x55, 0x0, 0x0, 0x3, 0x1f}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0xd5}, 0x44004) r1 = socket$inet_smc(0x2b, 0x1, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x80000000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300030c00000000070000fedbdf250200090040000000000000000000000002000100000000000000050200000000030005000000000002000100ac1414000000000000000000030006000000000002"], 0x60}, 0x1, 0x7}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f023}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="000000000cb384"], 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r6 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r8, 0x5411, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) 2m57.597880981s ago: executing program 7 (id=994): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r3, @ANYBLOB="080032000502000005003300f25f4e1d7b572e76c089c2592afe00b5d3cef76001bee8878b46f838c359a245dd85a991d2df6ac5e203bacca035556c5972c1ea932dcb8cd1a953111d"], 0x2c}}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x6, 0x2, @thr={0x0, 0x0}}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@remote, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x900, 0x0, 0x40000026}) bind$unix(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) accept4$unix(r4, 0x0, 0x0, 0x80000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x9224}) r5 = io_uring_setup(0x4a89, &(0x7f0000000300)={0x0, 0xf118, 0x40, 0x3, 0x135}) socket$kcm(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000000040)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x4) close_range(r5, 0xffffffffffffffff, 0x0) 2m56.928623368s ago: executing program 7 (id=996): r0 = socket$kcm(0x11, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x400000000010, 0x3, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) setpriority(0x2, 0x0, 0x5) unshare(0x24060400) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000200)={0x1d, r6}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r6, @ANYRES64=r5, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000980)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000a40)={'ip_vti0\x00', &(0x7f00000009c0)={'ip_vti0\x00', 0x0, 0x7, 0x8000, 0xffffffff, 0x8, {{0x18, 0x4, 0x1, 0x7, 0x60, 0x68, 0x0, 0x9, 0x0, 0x0, @private=0xa010101, @broadcast, {[@ssrr={0x89, 0x7, 0x9a, [@multicast1]}, @ssrr={0x89, 0x1f, 0xd, [@rand_addr=0x64010101, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x28}, @rand_addr=0x64010102, @private=0xa010101, @local]}, @lsrr={0x83, 0x1b, 0xe9, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x40}, @empty, @empty]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000c80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000000a80)={0x1b4, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x40}, 0x2200c045) semtimedop(0x0, &(0x7f00000000c0)=[{0x0, 0xffff, 0x2000}, {0x4, 0x0, 0x1800}], 0x2, 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) syz_usb_connect$uac2(0x2, 0x8c, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) 2m53.727157221s ago: executing program 7 (id=1003): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x4, 0xe4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r2, @ANYBLOB="080032000502000005003300f25f4e1d7b572e76c089c2592afe00b5d3cef76001bee8878b46f838c359a245dd85a991d2df6ac5e203bacca035556c5972c1ea932dcb8cd1a953111d"], 0x2c}}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x6, 0x2, @thr={0x0, 0x0}}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000540)={@remote, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x900, 0x0, 0x40000026}) bind$unix(r3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) accept4$unix(r3, 0x0, 0x0, 0x80000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x9224}) r4 = io_uring_setup(0x4a89, &(0x7f0000000300)={0x0, 0xf118, 0x40, 0x3, 0x135}) socket$kcm(0xa, 0x2, 0x73) sendmsg$sock(r0, &(0x7f0000000040)={&(0x7f00000001c0)=@nl=@unspec={0x0, 0x0, 0x0, 0xd8ff}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}], 0x18}, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) 2m52.304384774s ago: executing program 7 (id=1006): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = fsopen(&(0x7f0000000080)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_stall_count', 0x0, 0x10c) preadv2(r2, &(0x7f0000002740)=[{&(0x7f0000002540)=""/186, 0xba}], 0x1, 0x1, 0x80000001, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0xb83657cdd7a2e214, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x4010800) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0x3a0af83a) listen(r4, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) 2m44.776346484s ago: executing program 7 (id=1030): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x4, &(0x7f00000014c0)=ANY=[@ANYBLOB="18e7a44290441bfd079fd18e22caf931fc6f892f775fab0215572afcf57a70fd6c18f5b34720c48c2232443c5539019382e57afe17550bc6b3682a097cf4720c5cd82966014c6ecb3aaf816f6bd3e8e5dec7556cf67d1e0779275f8b99350b4b35bf7c69276b9bd3cf626ceb35fffdf20ed4a7cb99cb8dd8a63a22af32d0fc174bfe38a18c2bf45fab4525422dfdfc0c744fe2ece623754157dac34b4d443025694f569f2f91"], 0x0, 0x20, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c002e"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=ANY=[@ANYBLOB="2c0000001e000100020000000002000002000000010000000000000008000100e0000002080006000001000009f0c71fd78d3ba6b2308935a206aaa56688e5562129edb197ffe3f0b540acb9e9d13f74dea1b45e9a4096f77fa1c349e8a5a8455d292e"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x0) socket$kcm(0xa, 0x3, 0x0) (async) r3 = socket$kcm(0xa, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xfc0fb18e28970b78}, 0xc, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x20000081}, 0x805) socket(0x2, 0x80805, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r5, &(0x7f0000000500)=""/198, 0xc6) (async) getdents(r5, &(0x7f0000000500)=""/198, 0xc6) ioctl$SG_GET_ACCESS_COUNT(r5, 0x2289, &(0x7f0000001040)) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000010c0)={0xfffd, 0x478, 0x1ff, 0xce}, 0x8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x42, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r4, 0x84, 0x1, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) sendmsg$kcm(r3, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @empty}, 0x3, 0x43, 0x1, 0x4}}, 0x80, 0x0}, 0x2000f765) (async) sendmsg$kcm(r3, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @empty}, 0x3, 0x43, 0x1, 0x4}}, 0x80, 0x0}, 0x2000f765) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r2) r8 = socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="24005a802000018014000a"], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r11, @ANYBLOB="24005a802000018014000a"], 0x40}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r6, &(0x7f0000001440)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001400)={&(0x7f00000012c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r7, @ANYBLOB="000129bd7000fedbdf25680000000c0099000900000073000000200005580900020300070400100203060807040100030705bc8f90a663501cf71400c7000401a60703010702e4008fb82ee66cb62800c70014070e04040385070005100607060504010605010004070000007900538210511ae03bae1c00c7000002fb0302070202fa0107020b070405763148aa4546028b0c00c7000712fe80d1894e022600c700065b810040010006000601057f0308070f06ab06060407040904040493f886b896f017c500001000c7005f0702039a9e240547e2e5c82200c7000c0503041c0502050f000a040c00070007050601ff02d9"], 0x100}, 0x1, 0x0, 0x0, 0x2}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f00000000c0)={'ipvlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea199800", @ANYRES32], 0x0) 2m43.464010638s ago: executing program 7 (id=1035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20002) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@dellinkprop={0x60, 0x6c, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20, 0x2800}, [@IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dvmrp0\x00'}, {0xffffffffffffffd9, 0x35, 'wlan0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x101000) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x22c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000000)=0x3) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) setresuid(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_settime(r4, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000002c0)) lseek(0xffffffffffffffff, 0x2, 0x0) sync() sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 2m39.066368343s ago: executing program 37 (id=1044): syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000040)={0x30}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x8000, 0x6) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x1000}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}]}]}]}}]}, 0x54}}, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0), 0x0, 0x4001c00) read$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x0, &(0x7f0000000180), &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x0, 0x5, 0x6, 0x9}, {0x3, 0x2, 0xf, 0x4}, {0x4, 0x1, 0xb, 0x8}, {0x5, 0x3, 0x6, 0x8}, {0x0, 0x5, 0x0, 0x4}, {0x4, 0x4, 0xc, 0x4}], 0x10, 0x4}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) 2m39.053865637s ago: executing program 5 (id=1047): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x56, &(0x7f0000002ec0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460020060100000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8010"], 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000002ec0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460020060100000000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8010"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xb3, 0xc0, 0xe1, 0x40, 0x5fc9, 0x63, 0xd0db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0xfb, 0x10, 0x6, "", [{{0x9, 0x4, 0x0, 0x7, 0x0, 0xb, 0x51, 0x11}}]}}]}}, 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xb3, 0xc0, 0xe1, 0x40, 0x5fc9, 0x63, 0xd0db, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0xfb, 0x10, 0x6, "", [{{0x9, 0x4, 0x0, 0x7, 0x0, 0xb, 0x51, 0x11}}]}}]}}, 0x0) 2m35.953876948s ago: executing program 5 (id=1057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1400f5ff1000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2m35.903953186s ago: executing program 5 (id=1058): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x2000100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='children\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x4734}}, 0x10) close_range(r3, r3, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m33.694368506s ago: executing program 8 (id=1064): r0 = socket$unix(0x1, 0x3, 0x0) getsockname$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0x2, 0xa}}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x2, 0xad, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001d7338f085723080162e70102030109029b000122ff40040904850304ffffff63090500002000078dcf0905061008000009ff072501040804004923f6de6ccb0acf73af6bf5e9a8cdae8ea0aae2487d5a0a65cd712ab96f3bab4e28f1f3e667b2f99ff67a37805d1f8e9bbc59c0c5e76cdc25ac0498831c1d76bb96871bebf7b2acb0efd171df0304070907250104790002072501080d9baa0905020ce01c0409010725010c020900"], 0x0) 2m33.596796059s ago: executing program 5 (id=1065): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0x799a, 0x4001) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000380)={&(0x7f00000002c0), &(0x7f0000000300)=""/104, 0x68}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) 2m33.402118986s ago: executing program 5 (id=1066): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002e80)={{0xffffffffffffffff, &(0x7f0000000300)='/dev/iommu\x00', 0x2000, &(0x7f0000000380)={@align=0x6, {0x8, 0x8, 0x2}}, 0x2, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000440)=0x5}, 0x8, &(0x7f0000002d80)=[{0x2, 0x0, &(0x7f0000000480)='/dev/fuse\x00', &(0x7f00000004c0)='u', 0x1, 0x22}, {0x1, 0x0, &(0x7f0000000500)='\x00', &(0x7f0000002640)="2a13572026e2737e9960798146ccb1a326aec3518844bdeeb3162b7a0d0c875d30c3dd50c03dacad3b27eb774ecd9f0d34401234b74b9066cbf9ea7126905e2fa34c059ac80efdcac738dc168ecbc78aa1cdc2111523067a7428cee13da46dd142e15da347722b7c21566866f53b549dd1930412635e0f16d0cb7a0df8654d508a7833227302b4e7a31ce6349e017938cb107dcc4faafcf0f480e45b43a2dd9229db2a50f36d91930f417e81fcab006762d6dc5e821637530e97088fa68a25e36ab5f1bedfbdd49455387474ee63726f3a94d0721987", 0xd6, 0x28}, {0x3, 0x100001, &(0x7f0000002740)='/dev/fuse\x00', &(0x7f0000002780)="bcc922164efd67398d68df716c649c15e331a9db68fef478441b5526561f1daaf725f534355a40f7450b95caebb51efc32396c4d716275dfae711e16424b7fdb3248746adf37c8a0c1b7d0296e4b0227c3e057f23f813af09102f2dbccc567c6b689520dd7dd1b7857914cb20cef4c477b2ba52179fe1e424063", 0x7a, 0x2}, {0x3, 0x8, &(0x7f0000002800)='/dev/fuse\x00', &(0x7f0000002840)="63c65bcbf3be573e82da24c5495c1e694c76a65116f3334a68ee350dae01c61bde3649b68201606ef433634307766d7c9532b06ca5e867bdcec543fbff771c3cf283d423682eef6e4ca824f58ae11c9d7e6b4c3821a0a5ba98520ed6a17479872b14fb719474237d636657da4a338dfefa51ac240eab6ebee12119d32752c96d83431a649d12e87c259d4955f1413fca8cc9d35266a074fd511069353886f5ccf9a6d725e8075f00f81d17e9ed45416e5f5fe96dd85449eac5eb45216c9cb7c072ea3c46fdda617aa2fb1f8683141a62792e3d0d7ef37f2938ea353c9e3904cb4b6c68ce8d47dd484828c16fcb8520f8fe00", 0xf2, 0x28}, {0x3, 0x3, &(0x7f0000002940)='/dev/fuse\x00', &(0x7f0000002980)="8e28765b39b5774315bd5db1cdf1841d86e2cfdfbe8d585ae9308452bddfe1babeec35b04623d108409006042af3276e32b0d591068b79a2ea9eec9a1661e13d048e61c9565f5e86320cbdfee11cce7c3ff8c4db46698d9604419b5181d6221ade85a8d0db254b716a7cabf956b4", 0x6e, 0x12}, {0x3, 0xfffffff8, &(0x7f0000002a00)='\"\xf3', &(0x7f0000002a40)="1d7c1b4caa0a2738cbe7db8f0734ae16d41fc53d4840c912e438e6e0dc4ebf61a04e8cda1d261eb60a169783b5b4f4af4024addaa537fa6a97e72c24d38a4c0e23250e002077a6b5c979977464a2d93b708297d934327427b48378e17a483403f0806a699b07fa944eaabd076fe1ea9c62437ddc98f369b079c80c227635c63b031656027310efa5ae0f", 0x8a, 0x20}, {0x3, 0x0, &(0x7f0000002b00)='/dev/fuse\x00', &(0x7f0000002b40)="cde8840334bc0a78f1aa2d1cf27ac0ed3d3d273a2c0add0b65eea99155ae583680e5e3d4734c945ff6080f50e9f96889f1a0730dfe191c8925a388f6e27ae7ed68740a6c82cdbbb67edcec664fa0c5617c5815a547e90982981f3c345b53bda8741788777b9a64b2fdee727a7ca0503eb5d9fa9584740bd11ae8504c953f6cfd5ee9e684ab3746bc8150c8478db54afd6f92499b19716e72cde841f2aa91d1d2e951a5b84cb800004c2553b992673f739d336022db67c2ec66a5e2a3c83a56e93fd5a77279c4edad19003d01", 0xcc}, {0x1, 0x1a, &(0x7f0000002c40)='/dev/fuse\x00', &(0x7f0000002c80)="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", 0xfc, 0x2a}]}) sendmsg$nl_route_sched(r0, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4) fallocate(r1, 0x0, 0x0, 0x8ffff) 2m33.09772016s ago: executing program 5 (id=1067): bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18081800000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000004000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x5, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) 2m32.762736943s ago: executing program 38 (id=1067): bind$alg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18081800000400000000000000fd0020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000004000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x5, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) 2m31.910592723s ago: executing program 8 (id=1070): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r3, 0x3df27}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000000) sendto$packet(r0, &(0x7f0000000240)="280320000a0014000000fbf719143baa111f43c80500ab286e16195ecf3d77cc32b6d78839980700e6663c86c77a29e6d3791a4f5c6b96e840", 0x39, 0x840, &(0x7f00000000c0)={0x11, 0x86dd, r3, 0x1, 0x2}, 0x14) 2m31.733011636s ago: executing program 8 (id=1071): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.idle_time\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x9, 0xb4da, 0x1, 0x81, 0x80000000, 0xd82, 0x6, 0x5794, 0x100fff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 2m31.563086472s ago: executing program 8 (id=1072): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0x799a, 0x4001) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000380)={&(0x7f00000002c0), &(0x7f0000000300)=""/104, 0x68}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 2m31.1486701s ago: executing program 8 (id=1075): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0) r4 = fanotify_init(0x0, 0x0) writev(r4, &(0x7f0000000500)=[{&(0x7f0000000080)="88", 0x8}, {0x0}], 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a03000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a30000000005c000000060a010400000000000000000500004208000b4000000000340004803000018008000100636d7000240002801000038009000100d3060d2def000000080002400000000008000140000000160900010073797a3000"], 0xd0}}, 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES64=r1, @ANYRES16=r2, @ANYRESHEX=r1, @ANYRES64=r3, @ANYRESHEX=r3], 0x0) syz_usb_control_io(r6, 0x0, 0x0) unshare(0x20000400) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001240)={r7, r8, 0x5, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x40}}, 0x30) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000900)={r9, r7, 0x4, r7}, 0x8) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, &(0x7f0000001080)={0x1c, &(0x7f0000000380)={0x40, 0x3c, 0x1, 'd'}, 0x0, 0x0}) syz_usb_control_io$printer(r6, 0x0, 0x0) 2m30.58048156s ago: executing program 8 (id=1076): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002e80)={{0xffffffffffffffff, &(0x7f0000000300)='/dev/iommu\x00', 0x2000, &(0x7f0000000380)={@align=0x6, {0x8, 0x8, 0x2}}, 0x2, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000440)=0x5}, 0x8, &(0x7f0000002d80)=[{0x2, 0x0, &(0x7f0000000480)='/dev/fuse\x00', &(0x7f00000004c0)='u', 0x1, 0x22}, {0x1, 0x0, &(0x7f0000000500)='\x00', &(0x7f0000002640)="2a13572026e2737e9960798146ccb1a326aec3518844bdeeb3162b7a0d0c875d30c3dd50c03dacad3b27eb774ecd9f0d34401234b74b9066cbf9ea7126905e2fa34c059ac80efdcac738dc168ecbc78aa1cdc2111523067a7428cee13da46dd142e15da347722b7c21566866f53b549dd1930412635e0f16d0cb7a0df8654d508a7833227302b4e7a31ce6349e017938cb107dcc4faafcf0f480e45b43a2dd9229db2a50f36d91930f417e81fcab006762d6dc5e821637530e97088fa68a25e36ab5f1bedfbdd49455387474ee63726f3a94d0721987", 0xd6, 0x28}, {0x3, 0x100001, &(0x7f0000002740)='/dev/fuse\x00', &(0x7f0000002780)="bcc922164efd67398d68df716c649c15e331a9db68fef478441b5526561f1daaf725f534355a40f7450b95caebb51efc32396c4d716275dfae711e16424b7fdb3248746adf37c8a0c1b7d0296e4b0227c3e057f23f813af09102f2dbccc567c6b689520dd7dd1b7857914cb20cef4c477b2ba52179fe1e424063", 0x7a, 0x2}, {0x3, 0x8, &(0x7f0000002800)='/dev/fuse\x00', &(0x7f0000002840)="63c65bcbf3be573e82da24c5495c1e694c76a65116f3334a68ee350dae01c61bde3649b68201606ef433634307766d7c9532b06ca5e867bdcec543fbff771c3cf283d423682eef6e4ca824f58ae11c9d7e6b4c3821a0a5ba98520ed6a17479872b14fb719474237d636657da4a338dfefa51ac240eab6ebee12119d32752c96d83431a649d12e87c259d4955f1413fca8cc9d35266a074fd511069353886f5ccf9a6d725e8075f00f81d17e9ed45416e5f5fe96dd85449eac5eb45216c9cb7c072ea3c46fdda617aa2fb1f8683141a62792e3d0d7ef37f2938ea353c9e3904cb4b6c68ce8d47dd484828c16fcb8520f8fe00", 0xf2, 0x28}, {0x3, 0x3, &(0x7f0000002940)='/dev/fuse\x00', &(0x7f0000002980)="8e28765b39b5774315bd5db1cdf1841d86e2cfdfbe8d585ae9308452bddfe1babeec35b04623d108409006042af3276e32b0d591068b79a2ea9eec9a1661e13d048e61c9565f5e86320cbdfee11cce7c3ff8c4db46698d9604419b5181d6221ade85a8d0db254b716a7cabf956b4", 0x6e, 0x12}, {0x3, 0xfffffff8, &(0x7f0000002a00)='\"\xf3', &(0x7f0000002a40)="1d7c1b4caa0a2738cbe7db8f0734ae16d41fc53d4840c912e438e6e0dc4ebf61a04e8cda1d261eb60a169783b5b4f4af4024addaa537fa6a97e72c24d38a4c0e23250e002077a6b5c979977464a2d93b708297d934327427b48378e17a483403f0806a699b07fa944eaabd076fe1ea9c62437ddc98f369b079c80c227635c63b031656027310efa5ae0f", 0x8a, 0x20}, {0x3, 0x0, &(0x7f0000002b00)='/dev/fuse\x00', &(0x7f0000002b40)="cde8840334bc0a78f1aa2d1cf27ac0ed3d3d273a2c0add0b65eea99155ae583680e5e3d4734c945ff6080f50e9f96889f1a0730dfe191c8925a388f6e27ae7ed68740a6c82cdbbb67edcec664fa0c5617c5815a547e90982981f3c345b53bda8741788777b9a64b2fdee727a7ca0503eb5d9fa9584740bd11ae8504c953f6cfd5ee9e684ab3746bc8150c8478db54afd6f92499b19716e72cde841f2aa91d1d2e951a5b84cb800004c2553b992673f739d336022db67c2ec66a5e2a3c83a56e93fd5a77279c4edad19003d01", 0xcc}, {0x1, 0x1a, &(0x7f0000002c40)='/dev/fuse\x00', &(0x7f0000002c80)="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", 0xfc, 0x2a}]}) sendmsg$nl_route_sched(r0, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4) fallocate(r1, 0x0, 0x0, 0x8ffff) 2m30.318277378s ago: executing program 39 (id=1076): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000002e80)={{0xffffffffffffffff, &(0x7f0000000300)='/dev/iommu\x00', 0x2000, &(0x7f0000000380)={@align=0x6, {0x8, 0x8, 0x2}}, 0x2, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000440)=0x5}, 0x8, &(0x7f0000002d80)=[{0x2, 0x0, &(0x7f0000000480)='/dev/fuse\x00', &(0x7f00000004c0)='u', 0x1, 0x22}, {0x1, 0x0, &(0x7f0000000500)='\x00', &(0x7f0000002640)="2a13572026e2737e9960798146ccb1a326aec3518844bdeeb3162b7a0d0c875d30c3dd50c03dacad3b27eb774ecd9f0d34401234b74b9066cbf9ea7126905e2fa34c059ac80efdcac738dc168ecbc78aa1cdc2111523067a7428cee13da46dd142e15da347722b7c21566866f53b549dd1930412635e0f16d0cb7a0df8654d508a7833227302b4e7a31ce6349e017938cb107dcc4faafcf0f480e45b43a2dd9229db2a50f36d91930f417e81fcab006762d6dc5e821637530e97088fa68a25e36ab5f1bedfbdd49455387474ee63726f3a94d0721987", 0xd6, 0x28}, {0x3, 0x100001, &(0x7f0000002740)='/dev/fuse\x00', &(0x7f0000002780)="bcc922164efd67398d68df716c649c15e331a9db68fef478441b5526561f1daaf725f534355a40f7450b95caebb51efc32396c4d716275dfae711e16424b7fdb3248746adf37c8a0c1b7d0296e4b0227c3e057f23f813af09102f2dbccc567c6b689520dd7dd1b7857914cb20cef4c477b2ba52179fe1e424063", 0x7a, 0x2}, {0x3, 0x8, &(0x7f0000002800)='/dev/fuse\x00', &(0x7f0000002840)="63c65bcbf3be573e82da24c5495c1e694c76a65116f3334a68ee350dae01c61bde3649b68201606ef433634307766d7c9532b06ca5e867bdcec543fbff771c3cf283d423682eef6e4ca824f58ae11c9d7e6b4c3821a0a5ba98520ed6a17479872b14fb719474237d636657da4a338dfefa51ac240eab6ebee12119d32752c96d83431a649d12e87c259d4955f1413fca8cc9d35266a074fd511069353886f5ccf9a6d725e8075f00f81d17e9ed45416e5f5fe96dd85449eac5eb45216c9cb7c072ea3c46fdda617aa2fb1f8683141a62792e3d0d7ef37f2938ea353c9e3904cb4b6c68ce8d47dd484828c16fcb8520f8fe00", 0xf2, 0x28}, {0x3, 0x3, &(0x7f0000002940)='/dev/fuse\x00', &(0x7f0000002980)="8e28765b39b5774315bd5db1cdf1841d86e2cfdfbe8d585ae9308452bddfe1babeec35b04623d108409006042af3276e32b0d591068b79a2ea9eec9a1661e13d048e61c9565f5e86320cbdfee11cce7c3ff8c4db46698d9604419b5181d6221ade85a8d0db254b716a7cabf956b4", 0x6e, 0x12}, {0x3, 0xfffffff8, &(0x7f0000002a00)='\"\xf3', &(0x7f0000002a40)="1d7c1b4caa0a2738cbe7db8f0734ae16d41fc53d4840c912e438e6e0dc4ebf61a04e8cda1d261eb60a169783b5b4f4af4024addaa537fa6a97e72c24d38a4c0e23250e002077a6b5c979977464a2d93b708297d934327427b48378e17a483403f0806a699b07fa944eaabd076fe1ea9c62437ddc98f369b079c80c227635c63b031656027310efa5ae0f", 0x8a, 0x20}, {0x3, 0x0, &(0x7f0000002b00)='/dev/fuse\x00', &(0x7f0000002b40)="cde8840334bc0a78f1aa2d1cf27ac0ed3d3d273a2c0add0b65eea99155ae583680e5e3d4734c945ff6080f50e9f96889f1a0730dfe191c8925a388f6e27ae7ed68740a6c82cdbbb67edcec664fa0c5617c5815a547e90982981f3c345b53bda8741788777b9a64b2fdee727a7ca0503eb5d9fa9584740bd11ae8504c953f6cfd5ee9e684ab3746bc8150c8478db54afd6f92499b19716e72cde841f2aa91d1d2e951a5b84cb800004c2553b992673f739d336022db67c2ec66a5e2a3c83a56e93fd5a77279c4edad19003d01", 0xcc}, {0x1, 0x1a, &(0x7f0000002c40)='/dev/fuse\x00', &(0x7f0000002c80)="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", 0xfc, 0x2a}]}) sendmsg$nl_route_sched(r0, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4) fallocate(r1, 0x0, 0x0, 0x8ffff) 2m28.00126286s ago: executing program 40 (id=1035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20002) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@dellinkprop={0x60, 0x6c, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20, 0x2800}, [@IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'dvmrp0\x00'}, {0xffffffffffffffd9, 0x35, 'wlan0\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x101000) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x22c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000000)=0x3) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) setresuid(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timer_settime(r4, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000002c0)) lseek(0xffffffffffffffff, 0x2, 0x0) sync() sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 2m23.039493687s ago: executing program 9 (id=1086): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000048f5b50785000000820000009500000000000000f8c1943fc79f3c3e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x56, &(0x7f0000001c40)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@mpls_uc={0x8847, {[], @ipv6=@tipc_packet={0x4, 0x6, "28f448", 0x20, 0x6, 0x0, @loopback, @loopback, {[], @payload_direct={{{{0x20, 0x0, 0x1, 0x0, 0x1, 0x8, 0x1, 0x2, 0x40, 0x0, 0x2, 0x7, 0x1, 0x3, 0x0, 0xad28, 0x4, 0x4e22, 0x4e22}, 0x0, 0x4}}}}}}}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 2m19.558584959s ago: executing program 9 (id=1088): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = fcntl$getown(r1, 0x9) sched_setscheduler(r2, 0x0, &(0x7f00000000c0)=0x10000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r3, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000002400)=[{&(0x7f0000000d00)="27050200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9d9bf1174bbf47ef74d55a99ad39d207cb572bb63dfc8f6098e3251eb181ebb55a0e82b5aa114e78f51a1e0eec04a10c2897204a66afab94dd8de001923467692f87653809bdac2ecd596160bec5c8869a08ecc5bf1561bb7ebf3468a2a212c7107d3c03418321ff77586b723dbfb3f03212aaf9150914bb989ef324957cea1707943a287afd6aa759a30e50f215292e54eba", 0xca}, {&(0x7f0000001240)="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", 0x18f}, {&(0x7f00000005c0)="0875a5af2b1a78403017900cd651c16e174fb0b901a36164c75b9be64b7d9c8cda031eb74ee700", 0x27}], 0x3}, 0x9cdc2384056b48b8) 2m18.779006659s ago: executing program 9 (id=1090): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000700)=0x8, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000000000a05000300010000000900010073797a300001000000000240dada00000c00104b9397167c95e4008a8814c91bc1730fd8a53565085aba8f606f6db5487c8c38cd40532ff0700df11c393427487031b3a2384b1721f464d95f379f9177a785bb22477eead96f8fac0a9a61aefbae6fdd5a6820181ff2f22b0fcf6a311c519cf17b60bc4120cfc6035e31759d7727cc9f2e25d3304759b4b18003657ebb6a22effe12fc1422"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0x4c800) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = eventfd(0x5ef) ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xd000, 0x0, r4}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xf10, 0x30, 0x25, 0x0, 0x0, {}, [{0xefc, 0x1, [@m_pedit={0xef8, 0x1, 0x0, 0x0, {{0xa}, {0xecc, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{}, 0x2, 0x0, [{0x8000, 0x10, 0x7fff, 0x5, 0x1, 0x6}, {0xd00, 0x101, 0x9, 0x3, 0x2, 0x4}, {0x8, 0x6, 0x2, 0x6, 0x1, 0x5}, {0x2, 0x33f, 0xffffffc0, 0x2c, 0xf, 0x8000}, {0x7fffffff, 0x1d, 0x81, 0x7, 0xfff, 0x4}]}, [{}, {}, {0x0, 0x0, 0xee}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x400}, {}, {}, {}, {}, {0x0, 0x40000000}, {}, {}, {}, {0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6c2b}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf10}}, 0x0) 2m18.290991788s ago: executing program 9 (id=1091): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0x799a, 0x4001) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000380)={&(0x7f00000002c0), &(0x7f0000000300)=""/104, 0x68}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f00000034c0)={0x2020}, 0xcac) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 2m18.179138789s ago: executing program 9 (id=1092): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) userfaultfd(0x801) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xbbe21a6a6c087afd}, 0xc000) syz_emit_vhci(&(0x7f0000000940)=ANY=[@ANYBLOB="040e01000000fd"], 0x7) openat$ppp(0xffffffffffffff9c, 0x0, 0x40100, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x13) socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x6a4, 0x2002) r5 = fsmount(0xffffffffffffffff, 0x1, 0x6) ioctl$EVIOCSKEYCODE_V2(r5, 0x40284504, &(0x7f0000000040)={0x0, 0x4, 0x9, 0x5, "7d2fe763523b7b43af6b8a3bd1c31a3d2825ef8654330114cac0207e5446e266"}) mkdirat(r5, &(0x7f00000000c0)='./file0\x00', 0x40) ioctl$NBD_PRINT_DEBUG(r4, 0xab06) socket(0x40000000015, 0x805, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f00000002c0), &(0x7f0000000340)=r4}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2000c000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) 2m17.90407136s ago: executing program 9 (id=1093): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) syz_clone3(&(0x7f0000000440)={0x4090000, &(0x7f0000000040), &(0x7f0000000280), &(0x7f00000002c0)=0x0, {0x3}, &(0x7f0000000300)=""/61, 0x3d, &(0x7f0000000340)=""/51, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000003c0)=0x0) sched_setscheduler(r3, 0x2, &(0x7f00000004c0)=0x3) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0xc004) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"f26f499d", 0x2, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpriority(0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace(0x10, r3) read$msr(r4, &(0x7f000001aa40)=""/102392, 0x18ff8) r5 = socket$xdp(0x2c, 0x3, 0x0) remap_file_pages(&(0x7f0000930000/0x4000)=nil, 0x4000, 0xf500, 0x2, 0x10) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, 0x0, 0x0) lsm_get_self_attr(0x69, 0x0, &(0x7f00000002c0), 0xcb6912dfb143e2d7) r6 = fsopen(&(0x7f0000002280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x82) fchdir(r7) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) lseek(r4, 0x4, 0x0) 2m17.768216616s ago: executing program 41 (id=1093): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) syz_clone3(&(0x7f0000000440)={0x4090000, &(0x7f0000000040), &(0x7f0000000280), &(0x7f00000002c0)=0x0, {0x3}, &(0x7f0000000300)=""/61, 0x3d, &(0x7f0000000340)=""/51, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5}, 0x58) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='omfs\x00', 0x200000, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000003c0)=0x0) sched_setscheduler(r3, 0x2, &(0x7f00000004c0)=0x3) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0xc004) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000004180)={"f26f499d", 0x2, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpriority(0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) ptrace(0x10, r3) read$msr(r4, &(0x7f000001aa40)=""/102392, 0x18ff8) r5 = socket$xdp(0x2c, 0x3, 0x0) remap_file_pages(&(0x7f0000930000/0x4000)=nil, 0x4000, 0xf500, 0x2, 0x10) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, 0x0, 0x0) lsm_get_self_attr(0x69, 0x0, &(0x7f00000002c0), 0xcb6912dfb143e2d7) r6 = fsopen(&(0x7f0000002280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x82) fchdir(r7) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) lseek(r4, 0x4, 0x0) 1m35.286064683s ago: executing program 0 (id=1222): r0 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x20c000) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x2, 0x1000, @remote}, 0x1c) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x7}, 0x4, 0x3, 0x8, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000040)}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f00000000c0)={0x18, r5, 0x2, 0xb}) add_key(&(0x7f0000000000)='blacklist\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb634000fd9c1981fe9f095cfe9d2fe1e1e34da096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) 1m35.129841179s ago: executing program 0 (id=1223): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x20008000) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) read$FUSE(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x2000, 0x0, 0xff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000100)='mqueue\x00', 0x1) symlinkat(&(0x7f0000000280)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020027bd7000fcdbdf25f5000000d5b49924d9ca86300400287ad49b8c14c8e2bf2a442eead17987d21b60"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4001) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$inet6(0xa, 0x2, 0x0) 1m32.873622738s ago: executing program 0 (id=1225): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0x67a5327a566b2ca5, &(0x7f00000001c0)={0x8, 0x4}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000080) sched_setscheduler(0x0, 0x2, 0x0) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x741143) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = fcntl$dupfd(r3, 0x406, r3) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f0000000200)={&(0x7f0000002b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0xd}, 0x8, 0x1c0, &(0x7f0000001040)="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", 0x1000, 0x9, 0xfffffff8, 0x0, 0x7, 0x1ff, &(0x7f0000002040)="a07cbdd2de46c87e24f83d9bf9e25a310d637bb56bf9b67782b8142e632fac8df894fac61d5b8e008f3e2727687c2bdad9278b6a6a30cdcc4e76c949e2a32820e0c497b1362e8a1b070db5e871a5c9db0e8cd5db9c166318d474b66f3d099f84eb6c2447fc85a7b4c646e31afda0e5be064e74ed942fe9adad23b7b8fda837a9046399137d7d1bb1f4057822bf2b73da6441951e357226a99e108ebee1eb25e0d51e8a06e035b9423c9466fbd519fe2ca76dbbffa9f0b7e6b82108a4d1a2cc51d2613bbabe"}) ioctl$PTP_PEROUT_REQUEST2(r2, 0xc0403d11, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x80000100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x7, 0x4, 0x8, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x10042}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280), 0x82403, 0x0) 1m30.566108518s ago: executing program 0 (id=1234): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0x799a, 0x4001) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000380)={&(0x7f00000002c0), &(0x7f0000000300)=""/104, 0x68}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 1m30.272652021s ago: executing program 0 (id=1237): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000800)=""/250, 0xfa}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(r5, 0x1, 0x0, &(0x7f0000000040)=0x6, 0x4) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r4, 0x540b, 0x2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) 1m27.544992084s ago: executing program 0 (id=1240): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100000000114010000bd70f1529639258bf71bc5ad83323d34112e7a58e5c99a42c59f9fb688060000000000000058fe31ecbabdb4b7d150d4822680eca7b3551a0d392521fca48678b2bfba305b67e7792b6a4eaea3099d7d30fea7ab120fcadd3b9d86d9c61ed7799ec49c5edf7cc8f46514c0a3b37e2f9110b276e08a3eb7"], 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000380)=""/71, 0x47, 0x0, 0x2, 0x2}}, 0x48) r2 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000340)=[@ioring_restriction_sqe_flags_required={0x3, 0xd}, @ioring_restriction_sqe_op], 0x2) write$vhost_msg(r0, &(0x7f00000007c0)={0x1, {&(0x7f0000000080)=""/158, 0x9e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001d40)={0x2, 0x0, {&(0x7f0000000840)=""/178, 0xb2, 0x0, 0x3, 0x2}}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000000000000000000008008001e0001000000080008"], 0x2c}}, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000a80)={0x2, 0x0, {&(0x7f0000000900)=""/145, 0x91, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000002dc0)={0x1, {&(0x7f0000000640)=""/144, 0x90, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 1m27.10246784s ago: executing program 42 (id=1240): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100000000114010000bd70f1529639258bf71bc5ad83323d34112e7a58e5c99a42c59f9fb688060000000000000058fe31ecbabdb4b7d150d4822680eca7b3551a0d392521fca48678b2bfba305b67e7792b6a4eaea3099d7d30fea7ab120fcadd3b9d86d9c61ed7799ec49c5edf7cc8f46514c0a3b37e2f9110b276e08a3eb7"], 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000380)=""/71, 0x47, 0x0, 0x2, 0x2}}, 0x48) r2 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000340)=[@ioring_restriction_sqe_flags_required={0x3, 0xd}, @ioring_restriction_sqe_op], 0x2) write$vhost_msg(r0, &(0x7f00000007c0)={0x1, {&(0x7f0000000080)=""/158, 0x9e, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000001d40)={0x2, 0x0, {&(0x7f0000000840)=""/178, 0xb2, 0x0, 0x3, 0x2}}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000000000000000000008008001e0001000000080008"], 0x2c}}, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000a80)={0x2, 0x0, {&(0x7f0000000900)=""/145, 0x91, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000002dc0)={0x1, {&(0x7f0000000640)=""/144, 0x90, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 33.058244567s ago: executing program 2 (id=1374): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, 0x0) 31.098716924s ago: executing program 2 (id=1379): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$netlink(0x10, 0x3, 0x12) write$P9_RLERROR(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c7300000702000300237b27"], 0xc) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x75, 0xcd, 0x6f, 0x10, 0xc72, 0x13, 0xbda1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xae, 0x5, 0x40, 0x98, "", [{{0x9, 0x4, 0xc5, 0xc, 0x2, 0x61, 0xb9, 0x2, 0x4, [], [{{0x9, 0x5, 0x3, 0x4, 0x8, 0x3, 0x5, 0x7}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x5, 0xe2, 0x9}}]}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) 28.97581414s ago: executing program 2 (id=1390): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000800)=""/250, 0xfa}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(r5, 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r4, 0x540b, 0x2) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) 27.970341506s ago: executing program 2 (id=1392): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0x799a, 0x4001) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000380)={&(0x7f00000002c0), &(0x7f0000000300)=""/104, 0x68}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 27.810179221s ago: executing program 2 (id=1394): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, 0x0, 0x4000000) ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f00000002c0)={0x1, "b6ed2c0fcbe914ae31452f501847e645ef20dcede387a42dc4e502d6f70fe166", 0x1, 0x2, 0x3, 0xb000, 0x2000022, 0x4}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) poll(0x0, 0x0, 0x3ff) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0xffffffff, [{0x0, 0x2, 0x4}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0xfffffffffffffffe}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 25.934301682s ago: executing program 2 (id=1398): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x2140) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000d00)=[{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1e8}, {0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)="f49a5859132d4c1c6f4b067a3048750dc626fa7976d58ae76cdd430d78fb29c4049f4204bc61075c67dc26e83a33d0a7b6eccc72e557a07fea468e9c66e73c5d070152971641b1580ca61a6d484a8ad09d5d8a", 0x53}, {&(0x7f0000000800)="1a542832b5713ee7ac7e27c8543110f6158c4832593952394bbae94ab21f5f4eee81e6aa07425f85c291ad8fd45167dfc7997c99cfb3cda7e840db8b67d3ba58ed39f1be63925929d90cb08615573015c1674dda8d1cb3a16e47c74c9ba8d654a1ee413647802bf1e77eb0f5bb8f660b0b692d92e8acafc03e77e392bdee4e2c21ec9082fa33f15e68f3754a1c433cc7e30cda675322b21381e21715fc56f1c7f77dc8048a2cb4e38594eab79527f430f8d43af21d569ff8bce67f74f66a16a157da35fd24e07d15d7f54a", 0xcb}, {&(0x7f0000000900)="f80d77c4ebbe696d28c310499a265f8c3073fd063ea6b4d882f2a40fa0559609606f572dd2a387667b25464c3555763d8ce6dd86a6a8da754eb29d1c5205db8c5bc955b4591fc772a3490fc92cc0318f218e46deedd1e940a1d0b9bca2f2495d0b61fa59c9ceced7a5d2d5ca0ed9", 0x6e}], 0x3, &(0x7f00000009c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xfd04}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}], 0xd8, 0x4800}, {0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="e9e68270876aaeeba23d77b5beb28916ea6e8346ca92a11d2df9cf46c4bb3623914204e4faffaef5cdf1bcec5891cb0c445070307ebb241e391135f90d11f5ea5ca5ca49adfe1b63e84bd8194d62d37e80a2a4e0c8e90657228bcf6a11f3d212162ccba3de5908cf42ea8ad4918ad2894e62783a", 0x74}], 0x1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x178, 0x20000001}], 0x3, 0x880) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0xc40, 0x0) r2 = io_uring_setup(0x5881, &(0x7f0000000040)={0x0, 0xa172, 0x1f280, 0x0, 0x399}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) io_uring_enter(r2, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x18) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000480)={0x3, 0x1, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/57, 0x39}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000340)=""/129, 0x81}], &(0x7f0000000440)=[0x51a, 0x9, 0xa2d1, 0x4, 0x1]}, 0x20) r3 = socket$kcm(0x1e, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe800000002000000000000000000042fe8000000000000000000000000000aa4e200e22"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x916d, 0x0, 0x0, 0x54}, 0x9c) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) 25.60518816s ago: executing program 43 (id=1398): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x2140) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000d00)=[{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1e8}, {0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000780)="f49a5859132d4c1c6f4b067a3048750dc626fa7976d58ae76cdd430d78fb29c4049f4204bc61075c67dc26e83a33d0a7b6eccc72e557a07fea468e9c66e73c5d070152971641b1580ca61a6d484a8ad09d5d8a", 0x53}, {&(0x7f0000000800)="1a542832b5713ee7ac7e27c8543110f6158c4832593952394bbae94ab21f5f4eee81e6aa07425f85c291ad8fd45167dfc7997c99cfb3cda7e840db8b67d3ba58ed39f1be63925929d90cb08615573015c1674dda8d1cb3a16e47c74c9ba8d654a1ee413647802bf1e77eb0f5bb8f660b0b692d92e8acafc03e77e392bdee4e2c21ec9082fa33f15e68f3754a1c433cc7e30cda675322b21381e21715fc56f1c7f77dc8048a2cb4e38594eab79527f430f8d43af21d569ff8bce67f74f66a16a157da35fd24e07d15d7f54a", 0xcb}, {&(0x7f0000000900)="f80d77c4ebbe696d28c310499a265f8c3073fd063ea6b4d882f2a40fa0559609606f572dd2a387667b25464c3555763d8ce6dd86a6a8da754eb29d1c5205db8c5bc955b4591fc772a3490fc92cc0318f218e46deedd1e940a1d0b9bca2f2495d0b61fa59c9ceced7a5d2d5ca0ed9", 0x6e}], 0x3, &(0x7f00000009c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xfd04}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x8}, @assoc={0x18, 0x117, 0x4, 0x5}, @op={0x18, 0x117, 0x3, 0x1}], 0xd8, 0x4800}, {0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="e9e68270876aaeeba23d77b5beb28916ea6e8346ca92a11d2df9cf46c4bb3623914204e4faffaef5cdf1bcec5891cb0c445070307ebb241e391135f90d11f5ea5ca5ca49adfe1b63e84bd8194d62d37e80a2a4e0c8e90657228bcf6a11f3d212162ccba3de5908cf42ea8ad4918ad2894e62783a", 0x74}], 0x1, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x178, 0x20000001}], 0x3, 0x880) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0xc40, 0x0) r2 = io_uring_setup(0x5881, &(0x7f0000000040)={0x0, 0xa172, 0x1f280, 0x0, 0x399}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) io_uring_enter(r2, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x18) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000480)={0x3, 0x1, 0x0, &(0x7f0000000400)=[{&(0x7f0000000180)=""/57, 0x39}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000340)=""/129, 0x81}], &(0x7f0000000440)=[0x51a, 0x9, 0xa2d1, 0x4, 0x1]}, 0x20) r3 = socket$kcm(0x1e, 0x5, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe800000002000000000000000000042fe8000000000000000000000000000aa4e200e22"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x916d, 0x0, 0x0, 0x54}, 0x9c) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) 21.933076933s ago: executing program 6 (id=1409): socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) add_key$user(0x0, &(0x7f00000005c0), 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRESDEC], 0x0) 18.132892449s ago: executing program 6 (id=1416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x6, 0x0, 0x1, 0x5, 0x7, 0xa001}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket(0x2c, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000126bd7000ffdbdf2514000000080001007063690011000200303030303a30303a31302e3000000000080003000300000000d56a830600000006001100bc6400000800150009000000"], 0x50}, 0x1, 0x0, 0x0, 0x40801}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r6, @ANYBLOB="003000000000000014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x50882}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="74010000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf250900000028020070697d367265673100000000000100000908014cfed1c7f0000000000000", @ANYRES32=0x0, @ANYBLOB="500001800800030000000000140002007465616d5f736c6176655f300000000008000300020000001400020076657468305f766c616e0000000000001400020074756e6c300000000000000000000000200001801400020076657468305f766972745f776966690008000100", @ANYRES32=r2, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="04000180180001801400020076657468305f746f5f626f6e640000004400018008000300030000000800030004000000140002006d6163766c616e3100000000000000001400020064756d6d79300000000000000000000008000300020000004800018008000100", @ANYRES32=r2, @ANYBLOB="140002006272696467655f736c6176655f31000008000300030000000800030003000000080003000300000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400018008000300010000000800030001000000"], 0x174}, 0x1, 0x0, 0x0, 0x24040004}, 0x74) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r7, 0x8b27, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="5a000100", @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r11) r12 = socket$unix(0x1, 0x5, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001500)=@newqdisc={0x44, 0x24, 0x400, 0x800000, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfffffbff, 0x6, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@getchain={0x0, 0x66, 0x200, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {0x10, 0x7}, {0x7, 0xa}}, [{0x0, 0xb, 0x5}, {0x0, 0xb, 0x7}, {0x0, 0xb, 0x2}]}, 0xfe0b}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000010) ioctl$SIOCSIFHWADDR(r11, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.224354414s ago: executing program 6 (id=1423): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@security={'security\x00', 0x64, 0x4, 0x2a0, 0x100000c, 0x0, 0xe0, 0x178, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x0, 0x1000000000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x2}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x42}}}, {{@ip={@multicast2, @private=0xa010101, 0xff000000, 0xff, 'veth0_macvtap\x00', 'vcan0\x00', {0xff}, {0xff}, 0x21}, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x7}, {0x2, 0x0, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000206050000000000000000000000000014000780080011408000000005001500030000000500010006000000050005000200000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x64}, 0x1, 0x0, 0x0, 0x40c4040}, 0x4040000) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gretap0\x00'}, @IFLA_TXQLEN={0x8, 0xd, 0xfffffffa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r4 = fsopen(&(0x7f00000000c0)='minix\x00', 0x1) ioctl$TCSETA(0xffffffffffffffff, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_open_dev$sndctrl(&(0x7f0000000140), 0x4, 0x10103) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x2a0, 0x1398, 0x1398, 0x2a0, 0x1398, 0x3, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x13}, @loopback, [0x0, 0xff000000], [0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x18}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@addrtype1={{0x28}, {0x94, 0x804, 0x9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'geneve1\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x3}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000004, 0x40010, r5, 0x1abee000) socket(0x2, 0x80805, 0x0) close(r4) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/21, 0xfffffe0d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x8) 13.730170556s ago: executing program 6 (id=1427): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000280), 0x799a, 0x4001) ioctl$MON_IOCX_GET(r1, 0x40189206, &(0x7f0000000380)={&(0x7f00000002c0), &(0x7f0000000300)=""/104, 0x68}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 12.699000819s ago: executing program 6 (id=1430): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0xffff, 0x0) close(0x3) io_setup(0x4101, &(0x7f0000000000)=0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000440)=[&(0x7f00000001c0)={0x1000000, 0x5000000, 0x0, 0x1, 0xff42, r1, &(0x7f0000000340)="17", 0x1, 0x100000001, 0x0, 0x0, r0}]) sendmmsg$unix(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="b7", 0x1}], 0x1, 0x0, 0x0, 0x20000080}}], 0x1, 0x0) 12.600388975s ago: executing program 3 (id=1431): r0 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x22d4, 0x1503, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xe0, 0x0, "", [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x4, 0xfe, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x24}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xff, 0x8, 0xc5}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xa, 0x0, 0xf}}]}}}]}}]}}, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000100), 0x2, 0x181) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x400454da, &(0x7f0000000000)) r3 = syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x8, 0x90, 0x4a, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5f467d72, 0x5, 0x9, 0x5}, {0x6, 0x24, 0x1a, 0x8, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x9, 0x81, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x7f, 0x6, 0xde}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x7f, 0xd}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac3(0x5, 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000010b519210040000102030109027a0003010e0002080b0102010030400904000000010130000a24010e1600050000000c240b0002010000000d06000904010000010230000904010101010220000905"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x310, 0xf3, 0x6b, 0xb2, 0x20, 0x12d1, 0xebed, 0x36f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x3, 0x90, 0x5, "", [{{0x9, 0x4, 0xad, 0x4, 0x0, 0xff, 0x6, 0x75, 0x91}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000740)={0x14, 0x0, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f00000014c0)={0x44, &(0x7f0000001200)={0x0, 0xf, 0x2, "7d8d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') close(0x3) write$tcp_congestion(0xffffffffffffffff, &(0x7f0000000080)='dctcp\x00', 0x6) syz_usb_control_io(r0, 0x0, 0x0) signalfd(r1, &(0x7f0000000180)={[0x7ff]}, 0x8) syz_usb_control_io(r0, &(0x7f0000000e00)={0x2c, &(0x7f0000000ac0)=ANY=[@ANYBLOB="400624"], 0x0, 0x0, 0x0, 0x0}, 0x0) 12.220190807s ago: executing program 6 (id=1434): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x7fff}, 0x1c) ftruncate(r0, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @mcast2, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 11.957349951s ago: executing program 44 (id=1434): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x7fff}, 0x1c) ftruncate(r0, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @mcast2, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e210e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 9.517696117s ago: executing program 3 (id=1442): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) pwritev2(r3, &(0x7f00000008c0)=[{&(0x7f0000000100)="d01786c638f1d371da", 0x9}], 0x1, 0x800, 0x186, 0x12) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000280)) syz_emit_ethernet(0x155e, &(0x7f0000000900)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "12c951", 0x1528, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, {[@srh={0x12f, 0x10, 0x4, 0x8, 0x4, 0x8, 0x5, [@loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x21}, @private0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @fragment={0x2b, 0x0, 0x7, 0x0, 0x0, 0x5, 0x65}, @hopopts={0x84, 0xc, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x2, 0x4, 0xa, 0x10, [0x7, 0x6]}}, @pad1, @ra={0x5, 0x2, 0x800}, @calipso={0x7, 0x18, {0x3, 0x4, 0xe1, 0x3ff, [0x100000001, 0x9]}}, @ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x25}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x5c, 0x4, 0x4, 0x2, 0x8, 0xa0, 0x7fff, [@remote, @mcast1]}, @fragment={0x3b, 0x0, 0x0, 0x0, 0x0, 0x5, 0x68}, @srh={0xffca5a867b631f65, 0x4, 0x4, 0x2, 0xd1, 0x10, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @local]}, @fragment={0x16, 0x0, 0x6, 0x0, 0x0, 0x8, 0x66}, @hopopts={0xff, 0xf, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x0, 0x2, 0x8, 0x3, [0x3]}}, @generic={0x6, 0x40, "3ee14661c63a421288e46d4aa8bf136623aca5e749820289bc9d1c0e17f5ef86f721cb97b5cc2506aa822746fe707df80528e43e2828a78dddd1cca0cdd29fd9"}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x18, {0x1, 0x4, 0xc, 0x1, [0xfffffffffffffffe, 0x7fff]}}]}, @dstopts={0x3c, 0xc, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x4, 0x3ff, [0x8, 0xffffffffffffffff, 0x7ff, 0xf3a]}}, @ra={0x5, 0x2, 0x558d}, @calipso={0x7, 0x20, {0x3, 0x6, 0x2, 0x7, [0x3, 0xffff, 0x8000000000000000]}}, @enc_lim={0x4, 0x1, 0x40}, @ra={0x5, 0x2, 0xf}, @jumbo={0xc2, 0x4, 0xffffffff}, @jumbo]}], @param_prob={0x4, 0x0, 0x0, 0xc4, {0x9, 0x6, "4abef4", 0x7, 0x21, 0x0, @loopback, @empty, [@hopopts={0x3a, 0x1c, '\x00', [@generic={0x81, 0x9b, "c2fa058919df68670b399ffcd791bff00dd75ebb6a9fb29622effdd9c65df537151a0784738ff60264214e9644824e68afc5ac88d148424c287404972299b877f2b058af6484d907c10d3ba046aa59d519e3082dcdc301aea2bdf03a4eae2002ab84886585cd1e76150c7709791b919072e57a34b3aebf1b8d87d839d8cb9e5153df2cbbc42d457140c08ef02e1118e00f4e3ceb6dab2bacb998e9"}, @calipso={0x7, 0x30, {0x1, 0xa, 0xf8, 0x6, [0x9, 0x7, 0x8, 0x1, 0x7]}}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0xb}]}, @srh={0x4, 0x10, 0x4, 0x8, 0x9, 0x20, 0x4, [@private0, @mcast1, @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @dev={0xfe, 0x80, '\x00', 0x1a}, @empty, @mcast2, @empty]}, @routing={0x21, 0x4, 0x1, 0x1, 0x0, [@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x33, 0xc, 0x4, 0x6, 0x0, 0x40, 0x4, [@ipv4={'\x00', '\xff\xff', @multicast1}, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, @loopback, @empty, @mcast2]}, @fragment={0x0, 0x0, 0x95, 0x1, 0x0, 0x7, 0x64}, @hopopts={0x6c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x6}]}, @srh={0x89, 0x4, 0x4, 0x2, 0xdf, 0x18, 0xa, [@private2, @local]}, @srh={0x87, 0x2, 0x4, 0x1, 0x8c, 0x30, 0x0, [@private1]}, @dstopts={0x0, 0x6, '\x00', [@hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x18, {0x2, 0x4, 0x5, 0x7, [0x2, 0x9]}}, @ra={0x5, 0x2, 0xa}]}], "f0369d191e09a7d62763bd979f2e4e33be29bba96b8158b72b943eaf0bedea1d1ff1f13d834245d836f1ca882aadc43a12c12c79938826e4781dce9361c1cc2e60d3cbcc8302ec31a90403239e86cfa7dd2f54555aec264924fac1037856aed6746df728e0e81b257bdc94610e03108bd7f5fe85d8ec22e04a2124e79e54a8fdd77a7876000364f19e3b6b35bb7c28bb72474d51ffcf208bef78d5e28ae79d0b34188d0c2388161a368b1795080c25c70aa07a295f86645ba43a19ea5ed760d96801e3c97556641fdccf0f05de504d1bf790cb3deb749c90ccb609a32433480f9a0cc8c6d3e72ab4990a58db0206d6ab9e02e6b9ff1c3cb2bacc1da81542ec3a8e951988ef04140606262fb3e08cb80e4ce2471d75c15fde4ef5a13a0916ead3c54a517500f1be2898d18c2acbbb5b08b85335122d67ca7648d50fcfadbd2d0659d389631b158dd1d05eb4b8ab9a2d2ee5dd852cd14a1122cb10c74b564b45b930b0b30143cb6e83f1b321a8d8c6a29e1aee1df2a7b71033ebfd3527f0207c26f63b3ec7b8bf0bd93e9186001479b3b334c4a6111aff4a4e3c235df63c7754c539441d8edb86f915c3d911c42955226b078566b6373b2c94f32dfa670f71f41decca1a71152ab67efb18497690f78d8dbb998097c5b72ef4023f424ae1714f90d025f6e1e683b2bbb64abc18386e5a24fc6086f707d43aad9e61506452275486ea7ab24c1baf3cee661f5ed692da9f7714dfefde5d9cfb69e15856bfe56ffb709fb1011d67b2aee92c2dec8f11d8ef68ab5c0c1fbfa43c8c9506296754bcc1745156869caa1af1e49cda41306070dc6dc6a0422dd42f6191033112f28be97c1d6582f7a3367921388689a8667aa57e04e3eb591f829c82991730632d96c3e4c1900b2ba034ed904725b6865fd4b55a8ee823b5d250dfa483f70c25e8c2e1a71386ff912a140630f4523f46fc7d0b1e32f48d99777a01d01d1085dd891bd72b97d9fead479e5261a770878f086b1ffccb13ea50f25d380a00a01f00e7cb39f564073410819a2aa9cd2f6d74fdc60a2cc1d81e76f6b1070ea2338b2d46ffd67a8e3c8a6ca9801eee7039b5f7597078ef5f2665a411d3800be1297f0abdadf3b30779f7a96434c1bbd738f15e3510328af2006beeec9103437a9f36d010c25ae88a757322e006e959d697eee22c6e2b676076371085b9e6ccacb1b98257734cab6b03e0293231e93667b833e5f37f44f7c800ad9f6c659657702e28c3b27d6478444f3460591041c51a6ba45a2ee9f1cc9c15c61e5908ff64d81c3485341d02bcb4627186d0e7ddb174e2abc5d082ef108df10b2c63752529fb051a8b9c48c3c54fe2a88edd42e884c1d1322db650bd764685f6f155ffae854ca5a5af7f28e746f20752b209b268114991272014617eec2929ae462a80e579e5f08d64b0751bd06605f5ac527cab1cd27b4550569b22418114a340a3e5acb3e19e331d06cb6596db2940d6b93b89ff06fa73f59ab43b806fa1f98e6f1c63b6bd167a3b40a65fc35b18f74dd47044bff9c45b4e097f1c7fe4ebfb6b2ab44197f737e8523554c2b152da29842b35f6d533cc0f90153112c4bf4bf2be86ce2c5318c00ff3cb627bb5977901ca071f137f849d1bb7d58a6dcd24a15b5420fe4cce5a21950baeeaab661df39b63c873f9e400b35e65e5a5fa708355a49f5bff486fb5a6f49e51b9ff0d750fe8af63dc965eaf85ad810541c7c7a93a3cc7117ac5829cf1355fc47a347e0652b09725438ff5ab022b05833583762e16bc2402e856ec0856b710e2f609927329bbd95a31b1d9cb24368ae1bc934dc4f39f6d27534dc92d5759ce6b2dc7b91a80c2ebdff6465423692d3b8825c730aac57a3333f146899f26fa5ac0d4aa9f88a4b17a2899c530e52b8b78024ad3219b7a8fedfedb7fe6f385f2a14edff9abbc6f58a5eb49a2b2d1ad2e42c3ad4321d7b77e3b57ac41d7ffb2d6cc3e08e51a3db6f457f34889048b091e4403fded6eb60268ee5b0b628d1ebb6e2b792f72f74297c33c5a095723654903c279d9520bdd5504211daf40a695ba36b5d832506673637ed7d04535b028e88be81d96b1c70d22af5515f934078cd7485ffe6aba0b16dd9b96d8523fe0ee404c6349b646d194cd700a9f24a76812df885f2385f237d9a09c8c0ce09acaceb41b8893d10696837e561e4e805aaddee6b0d2d3a482e2306d827db010d80f9a5f850f1f28a30d3e117118ea8d7c93fac918ad64706bba38fc7783e59c038f1bc7470fbc3fc1d4c937eadcfb0d12ab20738f3ced1d1a39279126e26aa9f8516238d5483d70207abf5faffc8a98fc845004ca340d28441f4a188d3876e0ab47d272a87181798954bc3645637456fe461a06455eeb62c04987ad4f3d5f9fca5c527a0a77ab96ae57e23e03eef09ba14f5a4e9b39163b8ba4e607d92f5713857372a54a4be6ebf610b1662105a5fd984d7037db564a984b48410fecb6752879b8a5a78f1eea6b37deac7231bb9525209a02834bfa4ef41d63c42f31397d9908a71c70446d041ef5758c7e3ff88c554f4f70c3526c4292df7ba66b2eb9fae5de0a328b67b6149a6c2b1d6c3593f875937400d0bf498953a6aa5fefa9975b7a83279525cf9ce3e7e69ad0f4217a6c3b880be5d2d72905c5d134fd8410440eace7ded057fd71f8816adf2dc7fe4e35b77226a9bb074075042a3bfa824b8ef2d1ed20ee7e40535ad459eee4c54cc129bd6a4b6ecccd69452c1811f96eb16efd3987e472a67f48a9be845cc3169b4e18de86bee1441c5856a4416ac73be3ef38934d72fc89905ee75a5d625c654230dc98eb842549728854cc0633c6a5bd144d2e0124578f7cdf543806024baafe48c1d8b6987413d3094d5d627a7670ae8cc5ed4886e30546c5d4a000fab8c8514ee9bd409e6152261da0558469d80b55103dc2057838fcab6f02f35aec9e55c143b32eec6be27beb6520cea68208b9030de6385681b54c330900cf243b77d0f949bb02e296061d85f321d51ebf3a6d812d5a060657bf015b6bfb0c5c55b354a25ec46859c5c5802ad1157a649b4daf45ae5e0ec60d862ecb26681912684d6c9a351c6e64e7ea072ca4c3c68f91eb5c48315d2c4c8613b5dc89a80700e148e34aac7c0fe4a85702e26d66c4f8abedeaf905f71130e8f6b68d59c9771f01ca76376e8735189e77c7be9d872b79a87be99db91187dfbdf6cdbaf401dd21c26a0c09316b4c751c2a9dee674215828daf9be75de88c3408127e8a7f9ffcb545b8795f9f28673ca2d47f3e5c015f45e60292f8a8626e31b344ac9d0d09966535cff910fa0dd51076af1353f5074e3c9bfb8b0c366c2de792137199d5d158ad53f53a75983206d35805014781fe1d33e96aa90977e2c4aafe064b8b8a11174bab3d79650d83aa56771a116e9dfdda8802c0e10d9c44a3738b512c363e6c82a5820782433e24f283c7dd4578547a0fc37258f603f5afa096fa0db9a30f8ba9605f850cd6b46de5383259eadfe24f7a3bfe655928595863eeb4005573dbefd1a42672ec392fbd6a37d9a4fef7035ef3b2198315052a3f7555071cb71a1972e0195e6dc7aac6767cd34e8ac43700211aef1a301b7a066bf330e8c3aae59826c67146a44be9ff3b6e4a154d2ed6e023e0677c819b68983276da392c65de25b75ec2a14c44c3d4404df356fcb734f1d90fca2cdb8d0e5e290ff967062cf3a72e0e508745f9d3ce0e22c55ba5e67be73233d223c4a3c73b857a8db75e4bc61b22fe18ecb1bbf7f33523630b512d682be0958023b6928aa2cf89228e73c581719057c726578225c1cb310e55073c92570d1204ae3b0a9029767b733814114f78249e4a3b425240bff892369d1893acc5e5aa699acc063a31ba733cf733b455dbeeabcfee5208b8edc1b228b3352a268956536cf1d5b79b973d8478bd086f255f1c705c00861d4b2298a45d400e485bdddf017105bab5f907f2c202e603674ddf0721fc37fd7bc8f616509c88eaa6174b5c1f715f309d51e1116c5641ccda88a05742e231f2b809f0cd4b145100eb02655130063e8be9fdd55c200bea24b6ab36cffad23438e4be7aab9f2c2405f59435bcb19c00222c56bc5a422bd8d92f651ae3e7798a9d2442efa2c11d62369da8c87b67e51a7eaa64596166d6a7b7ee3a71c246cb4f1dc78d9777df00d2a2c6bb89bfccf2c2b164b891efb3c321c7a01263afbb66fae9b0a2c3304ad379395c924d965887b5e44cc92284a2913de8a41ebedd3056a7143214bddb11eb5609a15153b676ad90d060a5fc90353e79e06b68920bfcd5737419f5c08ac04c550381c49f6fe0e2b4f78913fbc22f9f6bf9b258e6873f60f611916a66ed2bf55bd1e3499d5a431f629126d4215904059cdd5e81061c0045e44b69cc0e4b4946fa3fc3dde7930a5c6547f8e24966235231081a0474456b8f740536af73512f6e96ae5bb7cc51be140250b2ea2a6ddb87efceea8dbafb2ef7404c0c2c922aa5587807b01089fb4b64fb2606bc75657cfa4ac714c35f263e09315e427fa4a754bdd25fece013818c73a6dd2c25b7a7714706ff956ee997105438bc8532c6b4b40e68084287459782df2b9db0ec283dbe0132c5ff78b54cae453971dc3ffe45e7aee26a51cffe535d530c3a9ed4e446fe9f5f1c8b12e1aa7d9d0512f622702d9f8b45b672c276a510ab117e04436c3bfef8616652fae93dba1c250637480b8ef9ccb8fea6773e91f1d92dfd4cc325da2a23280f27be38482932726a491396d382b83ac604e7d85a89f21b9ce7010a93c3074f6a6423fa57ef0ae283931a7beec363607a63f8e376b7704929ff3ea236541672fdfb3bbfee4df6127d19a9007a09647295e536ead96c8d28de9ded3dff81e724538f5168ccdd7d56b330f68ac07acefb35ca7a14902d7c941b5c17dcc4b23fe1890a23af0e53c1ab8b9ca6d056d3954cfb93ca2b9a3311776513418d09df8de8986e5d6b2d110c7c50e09f8ee95b2037cf6ec7f31c31c8c4e3d536a1651b8f66d1a4c291451ead71d4c7364cc446d14226d714d2ae9d404f69ca881123f0c052e5c9d671310c0a94c221c773b60f7731bdf9a09041c46f0171d05accad2036b45c1d64546ee798ee60120a9f36c6802cca607a75aff6b902d20f45a4cb11fc98a52f96f3d430fc663492a78bcadf190bd12e0492db3aa4026b968fddaa8e2e5d12d34a8023d7ad82db93662bcd2cb0e755479995020eaf8738523a02057fa542d017ec53eb1e51d991aaac3887457b27e73176e5722843c44f96795cad12abd616393fc07f1fa182cbcad0680b3349ed3d40d7746d2356125e76c614acdec26337894dc65992745d8391a66c3361589499a8f758b6910c33820c55050be4a5e74c92cdee31266327066279ddf522eeee53b1b8441eb8c58a9dfa7fddbd0b4dd0d794c1ace302d6fdd49c913cc63259c8956d0f6df31037a844ae490531b7413d3135aeec3f87fee1ddb1ce9fb45c02a1052b1cb8b2c2f4d28c34f6509dd5259db8dd4224f24dfbccf9f48073435656b20b68a53c0480417b6b77fee289c340805ecb17414cf760aa39b4a11dd677462d038a11dc71fd04abce9fb84155f054bf0e1480e1bf34801ad04ce80d84beba6c46b8ef46dcdd39edc193b43ffc8e95e68c0a2bced57d0bc658691168201172253a0e1db577ef69cb81096d07bd22a546e979ffc5c16435d42b0777411d115058496e732733e7ba52fa71cfa5ed1a86ab24eb10c33634e8c0637997167fd9dfdab1c6a65d1caeba7e83"}}}}}}}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet(r0, &(0x7f0000002580)="c5", 0x1, 0x840, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) 8.650520245s ago: executing program 4 (id=1443): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00001502000000000000000000000d000000000000"], 0x0, 0x26}, 0x28) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0xff00) socket$unix(0x1, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, 0x0, 0x0) chmod(0x0, 0x57eeb83c9526c7ac) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1747], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 7.254708613s ago: executing program 3 (id=1444): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f0000000800)=""/250, 0xfa}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, 0x0, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(r5, 0x1, 0x0, &(0x7f0000000040)=0x6, 0x4) ioctl$TIOCSETD(r4, 0x5423, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x2) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) 6.91520414s ago: executing program 4 (id=1445): ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000000)={&(0x7f0000000040)=[0x0], 0x1}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="090000001f0000000800000010"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r0}, 0x38) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, 0x0, &(0x7f0000000380)) r2 = open_tree(r0, &(0x7f00000000c0)='./file0\x00', 0x1000) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x3, 0x5}, {0xfff2}}}, 0x24}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="02002abd7000fddbdf2515000000200001801400020076657468315f6d6163787461f000000008000100", @ANYRES32=r5, @ANYBLOB="2c00018008000300030000000800030003000000080003000000000008000100", @ANYRES32=r8, @ANYBLOB="0800030000000000"], 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000002feffff720af0fff8ffffff71a4f0ff000000007110000000000000e5000500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0f00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000ecadd2d24ca300000100100000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 6.235573387s ago: executing program 3 (id=1446): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)={0xe000200c}) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="ac00"]) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000040)={0x20, 0xf, 0x4, "a0e778e4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000001c0)={0x0, 0xc, 0x4, "9a3d0c05"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, &(0x7f00000003c0)={0x14, &(0x7f0000000280)={0x0, 0xc, 0xcd, {0xcd, 0x3, "4419890b9cd87a9b8b4c8a0c81fd4df8754e52b7b5379e4a6963f07b82ab24ef8e89c077690d99a8df58ebb14b33fd65c72bbe070a68c1e0ace28be6054463fea55e389d001b741a9230c4b2978695824cc5cb797d90771138a4ddaf37af9c18750277dfabd2484ff2ce0425157c69afbdf2575960aa01f9c44408fc7542870193af1055a9389e1839254a14b5f703a73064177acdd40b9257dfff454b20b43ae566b4b28024ccc3bf3f0d8c1cd4085b84aa4558b01b1c685c37008835c8a7df7800015e766f35ef6e00ba"}}, &(0x7f0000000380)={0x0, 0x3, 0x14, @string={0x14, 0x3, "b1a8577e74e4bdfb313134edc0ddaf3e8900"}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000400)={0x0, 0x31, 0xe6, "32b202916b06c97099808bc85a770127d2c5de9e3db63bbd050acd3be63385344f704b933219d6a9f34aae779537ab0c3128e621908fde21d491032c3baf1c8448495371ec8dc37e8244414e735f3678f1193f412d7b6f0e055bf57b2ae1e0b88908a57d1250e444ae3425ff8f8396fb08c59fe807cac496511097cb328dcdab983db59c6b5e0cb483fff1eca41baae6b3e58618e283df6fda7ca13cb0f2d53469d12486b244dbaf27c88e5754cb01f5088e580751949469a678d683048bd87835f48ee0e87442e0628bfabc785f7799245853a087fb661cb0eccc88ec6740091cc1dc5dd6b6"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000580)={0x20, 0x81, 0x3, "8441e7"}, &(0x7f00000005c0)={0x20, 0x82, 0x1, '\n'}, &(0x7f0000000600)={0x20, 0x83, 0x3, "abe35a"}, &(0x7f0000000640)={0x20, 0x84, 0x1, "db"}, &(0x7f0000000680)={0x20, 0x85, 0x3, "9aea04"}}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) sched_setscheduler(r3, 0x5, &(0x7f00000007c0)=0xe) socket$nl_netfilter(0x10, 0x3, 0xc) 6.034512708s ago: executing program 4 (id=1447): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) fsopen(0x0, 0x1) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write(r1, &(0x7f0000000740)="65c7", 0x2) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r2) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x24000010}, 0x48010) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001e580)=""/102400, 0x19000) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES32=r0, @ANYRESHEX], 0x50) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0000a510000082a008512fd5abeb381c962aff96d74da45911cbae737dd99e09464e0811c56be2d0190fc9f6e120a85f655ec208009dd85b5708b8ee74fa02e64e836a6c18c4a5229aa54a8d817fd4828d4d05cf4bc60d7b6819657eb4f3621827c1de67a4374d67963f7efc686c8058adde514e0689f283d24a80"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0xfffffffffffffec7) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) 5.439734193s ago: executing program 1 (id=1448): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000080)) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') read$FUSE(r5, 0x0, 0x0) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000680)={0x0, &(0x7f0000000280)=[@nested_vmlaunch={0x12f, 0x18, 0x2}, @wrmsr={0x65, 0x20, {0xb86, 0xed1}}, @nested_amd_stgi={0x17e, 0x10}, @uexit={0x0, 0x18, 0x1}, @code={0xa, 0x7e, {"f04080720b15c7442400b4430000c7442402bb000000c7442406000000000f011c24f345de543b5b3667450f01c566470f38809f0000000066baa100ecc7442400ba000000c7442402fb73513fff1c2466460f3a41ad00000100000f20c035040000000f22c066b8ac000f00d8"}}, @wr_crn={0x67, 0x20, {0x0, 0x7}}, @nested_load_syzos={0x136, 0x135, {0x2, 0x4, [@nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @cpuid={0x64, 0x18, {0x7, 0xfdb}}, @enable_nested={0x12c, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest16=0x812, 0x2, 0x0, 0xe}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @code={0xa, 0x45, {"2e410f01c5470f01595a0f00d505b2ffffff66ba4100ed3e2e36f3470f5fe1c48125fdf1c4a241a63ec4e2b909cfc4a1f5eb7507"}}, @cpuid={0x64, 0x18, {0x2, 0x1}}, @nested_vmresume={0x130, 0x18, 0x1}]}}, @nested_load_syzos={0x136, 0x50, {0x3, 0x6, [@nested_create_vm={0x12d, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x1}}]}}, @cpuid={0x64, 0x18, {0x4d, 0x9}}, @nested_load_code={0x12e, 0x62, {0x1, "0f3809a26ce2ab0e66b875008ed0420f3800e966420f01dad08279b441743e9ff30f1efc66baf80cb8782d8980ef66bafc0c66b8550066efc4e3d1214c22000066baa10066b8120066ef"}}, @set_irq_handler={0xc8, 0x20, {0x54, 0x1}}, @nested_amd_invlpga={0x17d, 0x20, {0x100000, 0x1766}}, @rdmsr={0x66, 0x18, {0x86b}}, @cpuid={0x64, 0x18, {0x10001, 0x6}}, @wrmsr={0x65, 0x20, {0x26d, 0x1000}}, @in_dx={0x69, 0x20, {0xf2f7, 0x4}}, @nested_create_vm={0x12d, 0x18, 0x3}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}], 0x3ed}) r7 = ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece) read$msr(r7, &(0x7f0000000880)=""/246, 0xf6) read$FUSE(r7, &(0x7f0000001300)={0x2020}, 0x2020) 5.133157192s ago: executing program 1 (id=1449): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\x96\xa7f\x9ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\x15n\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x00\x00\x00\x00\x00\x00\x00\x02\x00\x00\x9b\x01\xf9t\xbb\x1er\x04\xdb\xd3\xcd\xfd\xbdnC\xec#]\xbf\xa2\xa2H\x86\x86[8\x058\xdc\x11\x04\xa1u\x81M\x1e\xd5\xb5\x96\x11\xa4\x17\xf6\\\xf8\xa9\xcf\x8a\x18\xae\xcf\xfe!\x16a\xa0q\xc6MgL\xadu\xc8\x1e\xb4\"y4\\\xdfm\xeb\xc0\x9e#\xe7\xec\xb0\xb7\x19\xebm\xd9\xde\xaed\xf9a\xfb;\xa1^\x83\xe1\xadI@e\x7fy#2q\x96\xa4R\x1f\x84\xc5l\x9b4\x01qM\x97\xfe\xeb\xf4\xa9\v\xe5sm^\x81L\x88\xb9\'\x93\"dzZ\xb4-\x10+\r\xb3}\x8bJ\x9a\xbf\xd1\xaa\x88\xcc\x8a\x13\xa3*\x986\xb2Fs<\x89\xfa,\xb4\x18\x04R\xc3;\xb8\xca\x04\x96\xa5', 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r5, r4) fsetxattr(r4, &(0x7f0000000100)=@known='user.incfs.size\x00', 0x0, 0x0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fsetxattr$security_capability(r4, &(0x7f0000000100), 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) sendmsg$nl_route(r0, 0x0, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3fe, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r7 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0xa, r7, &(0x7f0000000100)='asymmetric\x00', &(0x7f0000000180)='i~\x81\xb0-\x99\xae\x8d/_\xa4\x93Q\x19\xaa\xfbd\x05\xda\x00\x00\x00') sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) close_range(r6, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb0008000300030000000a000400aaaaaaaab1aa000008000500007575bda8bdbfd5b847ca95dd662a9954637eee8711ccbe1a8a80adfc12656b58fad8aa83b6677d62694f697c3536c614265ba0ca75f336", @ANYRES32=r10], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x488c4) r11 = socket(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={'veth0_macvtap\x00', {0x2, 0x4e23, @broadcast}}) 4.964280259s ago: executing program 4 (id=1450): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = io_uring_setup(0x458c, &(0x7f00000001c0)={0x0, 0xbd25, 0x40, 0x2, 0x30b}) io_uring_register$IORING_REGISTER_MEM_REGION(r1, 0x22, &(0x7f0000000240)={&(0x7f0000000040)={0x0, 0x0, 0x1, 0x9, 0xfffffffffffffffb}}, 0x1) r2 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r2) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r3 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x300, 0x0) 4.479278766s ago: executing program 4 (id=1451): fchdir(0xffffffffffffffff) timer_create(0x2, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000a80)=ANY=[@ANYBLOB="12011001000000408c0d030140000102030109026e000301831006080b0002012030230904000000010130000a2401000a0009002000090401000001023000b50904010101010230000905010960004203060a252500200000050900090402000001023000090402010101"], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 3.135352906s ago: executing program 3 (id=1452): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = mq_open(0x0, 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x4, 0x5b, &(0x7f0000000440)=ANY=[@ANYRES64=r1, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000037580)=""/102400, 0x19000) socket$rds(0x15, 0x5, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5, 0x22}, 0x10) r6 = semget$private(0x0, 0x4000000009, 0x0) semop(r6, &(0x7f0000000080)=[{0x0, 0xec7b, 0x1000}], 0x1) semctl$GETPID(r6, 0x1, 0xb, &(0x7f0000000080)) 3.092050966s ago: executing program 4 (id=1453): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) writev(r1, &(0x7f0000001600)=[{&(0x7f0000000440)="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", 0xdc4}], 0x1) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x48016, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) sendto$inet(r5, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r6 = socket(0x10, 0x803, 0x0) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x27, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) fchdir(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[], 0x24, 0x3) syz_usb_connect(0x0, 0x36, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.92020122s ago: executing program 1 (id=1454): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56749, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xc, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) syz_emit_ethernet(0x3c, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x0, 0x0, 0x1a, 0x0, @wg=@data={0x4, 0x2, 0x8, "165e"}}}}}}, 0x0) 1.722702186s ago: executing program 1 (id=1455): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r0 = open(&(0x7f0000000040)='./bus\x00', 0x220400, 0xc3) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x400, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mknod$loop(0x0, 0x2010, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x1, 0x84) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x80000) ioctl$XFS_IOC_FSGETXATTRA(0xffffffffffffffff, 0x801c582d, 0x0) close(0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) tkill(0x0, 0x19) chdir(&(0x7f0000000000)='./bus\x00') unlink(&(0x7f00000004c0)='./file1\x00') 693.672833ms ago: executing program 1 (id=1456): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000280)={0x3, 0x1, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, 0x0, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) userfaultfd(0x1) syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r5, 0xfffffffd) r6 = socket$inet(0xa, 0x801, 0x84) listen(r6, 0x8) r7 = socket$inet(0xa, 0x2, 0x87) listen(r7, 0x8) listen(0xffffffffffffffff, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x20, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}}, 0x0) 152.166483ms ago: executing program 1 (id=1457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ipvlan1\x00', 0x4000}) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x28, &(0x7f0000000500)=0x6, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@getqdisc={0x24, 0x26, 0x100, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0xfff3, 0x2}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x1d, 0x1e76cd410a4a9bad, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0xfff1}, {0xa}, {0x8, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x80}}]}, 0x2c}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtclass={0x2c, 0x28, 0x10, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc, 0x5}, {0x3, 0x9}, {0xffff, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x20001851) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0c0001"], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x404c815) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x1, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f00000000c0), 0x0, 0xf10) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x4, 0x0, 0x0) r10 = syz_open_dev$radio(&(0x7f0000000340), 0x3, 0x2) ioctl$VIDIOC_QUERYMENU(r10, 0xc02c5625, &(0x7f0000000000)={0x98f908, 0x3, @value=0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r11 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r11, &(0x7f0000019680)=""/102392, 0x18ff8) 0s ago: executing program 3 (id=1458): mremap(&(0x7f000087f000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='nfsd\x00', 0x1000016, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) write$FUSE_INIT(r3, &(0x7f00000003c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x1002001, 0xde60fe10fea4447b, 0x3ff, 0x7fff, 0x0, 0x40000006, 0x0, 0x0, 0x10, 0x2}}, 0x50) keyctl$get_security(0x11, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x20, r6, 0x6a98047402e98331, 0x70bd29, 0xff9f, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004041}, 0x4008000) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000180)=0xad) bpf$PROG_LOAD_XDP(0x5, 0x0, 0xf) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="80000000", @ANYRES16=0x0, @ANYBLOB="000229bdff030000df25040000004000078008000100a40f00000c00040001000000000000000c00030002080000000000000c000400000c0000800000000800010074000000080000002c000580140002800800020004000000080001000100000014"], 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4008c50) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf25"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) shutdown(r9, 0x2) kernel console output (not intermixed with test programs): ptor, different from the interface descriptor's value: 5 [ 472.833711][ T5732] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 472.853337][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.890539][ T5732] usb 4-1: config 0 descriptor?? [ 473.004983][ T5713] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 473.156928][ T5713] usb 5-1: config index 0 descriptor too short (expected 65230, got 72) [ 473.172741][ T5713] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 473.182606][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.191170][ T5713] usb 5-1: Product: syz [ 473.201589][ T5713] usb 5-1: Manufacturer: syz [ 473.208115][ T5713] usb 5-1: SerialNumber: syz [ 473.215929][ T802] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 473.220131][ T5713] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 473.244519][ T5613] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 473.370702][ T5732] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000C/input/input37 [ 473.391551][ T802] usb 2-1: config 2 has an invalid interface number: 3 but max is 0 [ 473.412049][ T802] usb 2-1: config 2 has no interface number 0 [ 473.427977][ T802] usb 2-1: config 2 interface 3 has no altsetting 0 [ 473.446281][ T802] usb 2-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice= d.a2 [ 473.459713][T11883] overlayfs: overlapping lowerdir path [ 473.469062][T11883] ieee802154 phy0 wpan0: encryption failed: -22 [ 473.499791][ T5732] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.000C/input/input38 [ 473.543799][ T802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.578444][ T802] usb 2-1: Product: syz [ 473.602965][ T802] usb 2-1: Manufacturer: syz [ 473.615777][ T802] usb 2-1: SerialNumber: syz [ 473.762173][T11851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.785531][T11851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.794547][ T5732] kye 0003:0458:5011.000C: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 473.949063][ T5712] usb 5-1: USB disconnect, device number 39 [ 474.127965][T11898] comedi comedi1: pcl818: I/O base address or length out of range [ 474.164251][T11898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.174842][T11898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.412762][ T5613] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 474.447253][ T5613] ath9k_htc: Failed to initialize the device [ 474.469563][ T5712] usb 5-1: ath9k_htc: USB layer deinitialized [ 474.814620][ T30] kauditd_printk_skb: 555 callbacks suppressed [ 474.814655][ T30] audit: type=1400 audit(1777863394.769:2187): avc: denied { write } for pid=11901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.880522][ T30] audit: type=1400 audit(1777863394.839:2188): avc: denied { write } for pid=11919 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 474.910129][T11916] x_tables: duplicate underflow at hook 3 [ 475.225434][ T30] audit: type=1400 audit(1777863395.189:2189): avc: denied { write } for pid=11929 comm="syz.3.1209" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 475.410362][ T5734] usb 4-1: USB disconnect, device number 34 [ 475.417570][ T30] audit: type=1400 audit(1777863395.359:2190): avc: denied { create } for pid=11932 comm="syz.4.1211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 475.990060][ T30] audit: type=1400 audit(1777863395.939:2191): avc: denied { create } for pid=11931 comm="syz.0.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 476.022591][ T802] usb 2-1: No union descriptors [ 476.130770][ T802] usb 2-1: USB disconnect, device number 16 [ 476.146802][ T30] audit: type=1400 audit(1777863395.949:2192): avc: denied { setopt } for pid=11931 comm="syz.0.1210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 476.220182][ T30] audit: type=1400 audit(1777863395.949:2193): avc: denied { write } for pid=11931 comm="syz.0.1210" path="socket:[41157]" dev="sockfs" ino=41157 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 476.383568][ T30] audit: type=1400 audit(1777863396.339:2194): avc: denied { create } for pid=11954 comm="syz.3.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 476.488457][ T30] audit: type=1400 audit(1777863396.379:2195): avc: denied { write } for pid=11923 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.488510][ T30] audit: type=1400 audit(1777863396.389:2196): avc: denied { setopt } for pid=11954 comm="syz.3.1213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 477.799567][T11990] usb usb8: usbfs: process 11990 (syz.3.1220) did not claim interface 0 before use [ 477.889522][T11990] usb usb8: selecting invalid altsetting 1 [ 478.349599][ T5618] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 478.364266][ T5618] Bluetooth: hci2: Injecting HCI hardware error event [ 478.378474][ T5618] Bluetooth: hci2: hardware error 0x00 [ 480.151731][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 480.151746][ T30] audit: type=1400 audit(1777863400.109:2206): avc: denied { write } for pid=11974 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 480.274874][ T5613] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 480.434439][ T30] audit: type=1400 audit(1777863400.389:2207): avc: denied { write } for pid=12010 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 480.454914][ T5613] usb 5-1: Using ep0 maxpacket: 16 [ 480.487991][ T5613] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.551499][ T5613] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 480.573439][ T30] audit: type=1400 audit(1777863400.529:2208): avc: denied { ioctl } for pid=12012 comm="syz.3.1227" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=41228 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 480.620668][ T5613] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 480.695894][ T5613] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 480.704022][T12020] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1228'. [ 480.706440][ T5613] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 480.720299][ T30] audit: type=1400 audit(1777863400.659:2209): avc: denied { write } for pid=12019 comm="syz.1.1228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 480.751931][ T5613] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 480.762295][ T5613] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 480.778923][ T5613] usb 5-1: Manufacturer: syz [ 480.830927][ T5613] usb 5-1: config 0 descriptor?? [ 481.064647][ T30] audit: type=1326 audit(1777863401.019:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11999 comm="syz.4.1224" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a719cdd9 code=0x7ffc0000 [ 481.155945][ T30] audit: type=1326 audit(1777863401.019:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11999 comm="syz.4.1224" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a719cdd9 code=0x7ffc0000 [ 481.205014][ T5613] rc_core: IR keymap rc-hauppauge not found [ 481.220679][ T30] audit: type=1326 audit(1777863401.019:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11999 comm="syz.4.1224" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a719cdd9 code=0x7ffc0000 [ 481.247571][ T30] audit: type=1326 audit(1777863401.019:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11999 comm="syz.4.1224" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f66a719cdd9 code=0x7ffc0000 [ 481.274559][ T30] audit: type=1326 audit(1777863401.019:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11999 comm="syz.4.1224" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a719cdd9 code=0x7ffc0000 [ 481.276547][ T5613] Registered IR keymap rc-empty [ 481.302132][ T30] audit: type=1326 audit(1777863401.019:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11999 comm="syz.4.1224" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a719cdd9 code=0x7ffc0000 [ 481.346154][ T5613] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.372271][ T5613] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.400835][ T5613] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 481.421217][ T5613] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input39 [ 481.454017][ T5613] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.494933][ T5613] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.524898][ T5613] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.555796][ T5613] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.599241][ T5613] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.644599][ T5613] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.675345][ T5613] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.725680][ T5613] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.767594][ T5613] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 481.795011][ T5613] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 482.024789][T12053] overlay: Unknown parameter 'subj_type' [ 482.134904][ T5610] Bluetooth: hci5: Invalid connection link type handle 0x00c8 [ 482.148527][ T5610] Bluetooth: hci5: SCO packet for unknown connection handle 0 [ 482.346931][ T5618] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 482.381348][T12049] Bluetooth: MGMT ver 1.23 [ 482.402365][ T5746] IPVS: starting estimator thread 0... [ 482.430977][ T5613] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 482.518914][ T5613] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 482.527002][T12054] IPVS: using max 45 ests per chain, 108000 per kthread [ 482.561706][T12058] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 482.597550][T12058] SELinux: failed to load policy [ 482.764730][ T5613] usb 5-1: USB disconnect, device number 40 [ 485.731797][ T30] kauditd_printk_skb: 114 callbacks suppressed [ 485.731812][ T30] audit: type=1400 audit(1777863405.689:2330): avc: denied { write } for pid=12059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.142146][ T30] audit: type=1400 audit(1777863406.099:2331): avc: denied { ioctl } for pid=12076 comm="syz.1.1238" path="socket:[40599]" dev="sockfs" ino=40599 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 486.243780][ T30] audit: type=1400 audit(1777863406.139:2332): avc: denied { write } for pid=12097 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.351251][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 486.371655][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 486.382023][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 486.392618][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 486.405649][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 486.418752][ T30] audit: type=1400 audit(1777863406.379:2333): avc: denied { mounton } for pid=12099 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 486.465509][ T5746] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 486.562791][ T3385] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.678038][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 72, changing to 10 [ 486.711165][ T5746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9105, setting to 1024 [ 486.749271][ T5613] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 486.759577][ T5746] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 486.830730][ T5746] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 486.858248][ T5746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.937014][ T5746] usb 2-1: config 0 descriptor?? [ 486.968914][ T5613] usb 4-1: unable to get BOS descriptor or descriptor too short [ 487.010826][ T5613] usb 4-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 487.032470][ T5613] usb 4-1: config 66 interface 0 has no altsetting 0 [ 487.044337][ T5613] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 487.053651][ T5613] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.061966][ T5613] usb 4-1: Product: syz [ 487.068585][ T5613] usb 4-1: Manufacturer: syz [ 487.073258][ T5613] usb 4-1: SerialNumber: syz [ 487.084970][T12102] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 487.165706][ T3385] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.255536][T12118] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1244'. [ 487.525102][ T5712] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 487.740985][ T5613] ati_remote2 4-1:66.0: ati_remote2_probe(): interface 1 must have an endpoint [ 487.757138][ T5712] usb 3-1: Using ep0 maxpacket: 32 [ 487.795221][ T5746] plantronics 0003:047F:FFFF.000D: reserved main item tag 0xd [ 487.820104][ T5712] usb 3-1: unable to get BOS descriptor or descriptor too short [ 487.826265][ T5613] usb 4-1: USB disconnect, device number 35 [ 487.860857][ T5746] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 487.887023][ T5712] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.904283][ T3385] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.921216][ T5746] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 487.940401][ T5712] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 487.954384][ T5746] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 487.968695][ T5712] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 487.980716][ T5746] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x2 [ 488.035614][ T5712] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 488.126863][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.173594][ T5746] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 488.195143][ T5712] usb 3-1: Product: syz [ 488.220272][ T5712] usb 3-1: Manufacturer: syz [ 488.220277][ T30] audit: type=1400 audit(1777863408.169:2334): avc: denied { read write } for pid=12126 comm="syz.4.1245" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 488.232581][ T5712] usb 3-1: SerialNumber: syz [ 488.263127][ T5746] usb 2-1: USB disconnect, device number 17 [ 488.353525][ T30] audit: type=1400 audit(1777863408.169:2335): avc: denied { open } for pid=12126 comm="syz.4.1245" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 488.411097][T12128] fido_id[12128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 488.461713][ T3385] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.495670][ T30] audit: type=1400 audit(1777863408.169:2336): avc: denied { ioctl } for pid=12126 comm="syz.4.1245" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 488.520608][ T5613] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 488.525976][ T5610] Bluetooth: hci3: command tx timeout [ 488.547468][ T30] audit: type=1400 audit(1777863408.269:2337): avc: denied { write } for pid=12106 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.572993][T12115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.582172][T12115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.304783][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 489.734785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 489.874779][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 490.506606][ T30] audit: type=1400 audit(1777863408.629:2338): avc: denied { map } for pid=12132 comm="syz.3.1246" path="pipe:[34460]" dev="pipefs" ino=34460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 490.603345][ T5610] Bluetooth: hci3: command tx timeout [ 490.624592][ T5712] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 490.638068][ T5613] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 490.639162][ T5712] usb 3-1: MIDIStreaming interface descriptor not found [ 490.679518][ T5613] usb 5-1: config 0 has no interface number 0 [ 490.716807][ T5613] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.745642][ T30] audit: type=1400 audit(1777863410.499:2339): avc: denied { write } for pid=12133 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.777832][ T5613] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.805976][ T5613] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 491.353993][T12127] random: crng reseeded on system resumption [ 491.409751][ T30] audit: type=1400 audit(1777863410.769:2340): avc: denied { create } for pid=12143 comm="syz.3.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 491.447177][ T5613] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 491.518800][ T5613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.619096][ T30] audit: type=1400 audit(1777863411.309:2341): avc: denied { write } for pid=12126 comm="syz.4.1245" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 491.621283][ T5613] usb 5-1: config 0 descriptor?? [ 491.730423][ T30] audit: type=1400 audit(1777863411.309:2342): avc: denied { open } for pid=12126 comm="syz.4.1245" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 491.792548][ T1974] block nbd6: Possible stuck request ffff888027ebe000: control (read@0,1024B). Runtime 90 seconds [ 491.811054][ T1974] block nbd6: Possible stuck request ffff888027ebe1c0: control (read@1024,1024B). Runtime 90 seconds [ 491.816974][T12151] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1248'. [ 491.847871][ T5712] usb 3-1: USB disconnect, device number 43 [ 491.999119][T12153] bond0: entered promiscuous mode [ 492.023824][T12153] bond_slave_0: entered promiscuous mode [ 492.123824][T12153] bond_slave_1: entered promiscuous mode [ 492.157636][T12153] batadv_slave_0: entered promiscuous mode [ 492.173939][T12153] batadv_slave_0: left promiscuous mode [ 492.207964][T12153] bond0: left promiscuous mode [ 492.214692][T12153] bond_slave_0: left promiscuous mode [ 492.226754][T12153] bond_slave_1: left promiscuous mode [ 492.240969][ T6338] udevd[6338]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 492.359754][ T5613] usbhid 5-1:0.1: can't add hid device: -71 [ 492.365882][ T5613] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 492.409668][ T5613] usb 5-1: USB disconnect, device number 41 [ 492.560665][ T30] audit: type=1400 audit(1777863412.519:2343): avc: denied { map } for pid=12142 comm="syz.2.1248" path="socket:[41516]" dev="sockfs" ino=41516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 492.665167][ T5610] Bluetooth: hci3: command tx timeout [ 492.881401][ T5746] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 493.055115][ T5746] usb 4-1: Using ep0 maxpacket: 32 [ 493.111390][ T30] audit: type=1400 audit(1777863413.039:2344): avc: denied { write } for pid=12155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 493.180915][ T5746] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 493.193612][ T5746] usb 4-1: config 0 has no interface number 0 [ 493.203765][ T5746] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 493.249359][ T5746] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 493.327887][T12189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1254'. [ 494.201551][ T5746] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 494.214680][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.223602][ T5746] usb 4-1: Product: syz [ 494.256980][ T5746] usb 4-1: Manufacturer: syz [ 494.283164][ T5746] usb 4-1: SerialNumber: syz [ 494.299779][ T30] audit: type=1400 audit(1777863414.249:2345): avc: denied { write } for pid=12186 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.328010][ T5712] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 494.341942][T12193] usb usb8: usbfs: process 12193 (syz.4.1256) did not claim interface 0 before use [ 494.365528][ T5746] usb 4-1: config 0 descriptor?? [ 494.398057][T12193] usb usb8: selecting invalid altsetting 1 [ 494.411473][ T5746] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 494.425897][T12099] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.443568][T12099] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.470758][T12099] bridge_slave_0: entered allmulticast mode [ 494.503282][T12099] bridge_slave_0: entered promiscuous mode [ 494.534900][ T5712] usb 2-1: Using ep0 maxpacket: 16 [ 494.554247][ T5712] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.589095][ T3385] bridge_slave_1: left allmulticast mode [ 494.599368][ T3385] bridge_slave_1: left promiscuous mode [ 494.616546][ T30] audit: type=1400 audit(1777863414.579:2346): avc: denied { read } for pid=5273 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 494.655867][ T5712] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 494.704785][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 494.729405][ T5746] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 494.738112][ T3385] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.759268][ T5610] Bluetooth: hci3: command tx timeout [ 494.772662][ T5712] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.780942][ T5746] quatech2 4-1:0.51: probe with driver quatech2 failed with error -90 [ 494.799914][ T3385] bridge_slave_0: left allmulticast mode [ 494.809405][ T30] audit: type=1400 audit(1777863414.769:2347): avc: denied { accept } for pid=12195 comm="syz.4.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 494.810207][ T5712] usb 2-1: config 0 descriptor?? [ 494.843758][ T3385] bridge_slave_0: left promiscuous mode [ 494.854566][ T3385] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.889855][ T30] audit: type=1400 audit(1777863414.829:2348): avc: denied { shutdown } for pid=12198 comm="syz.2.1258" laddr=fe80::a lport=44116 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 494.935792][ T5746] usb 4-1: USB disconnect, device number 36 [ 495.176356][T12206] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1260'. [ 495.302462][T12182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.363363][T12182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.535487][ T5712] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 495.791180][ T3385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.828418][ T3385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.841690][ T3385] bond0 (unregistering): Released all slaves [ 495.862237][ T5712] usb 2-1: USB disconnect, device number 18 [ 495.883877][T12099] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.894717][T12099] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.934088][T12099] bridge_slave_1: entered allmulticast mode [ 495.952091][T12099] bridge_slave_1: entered promiscuous mode [ 495.994334][T12099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.007344][T12099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.054192][T12099] team0: Port device team_slave_0 added [ 496.085106][T12099] team0: Port device team_slave_1 added [ 496.249926][T12222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1264'. [ 496.375451][ T5811] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 497.336246][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 497.336586][ T30] audit: type=1400 audit(1777863417.299:2353): avc: denied { bind } for pid=12224 comm="syz.1.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 497.363330][T12226] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1265'. [ 497.501164][ T30] audit: type=1400 audit(1777863417.379:2354): avc: denied { write } for pid=12224 comm="syz.1.1265" name="file0" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 497.597953][ T5811] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 497.608673][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.619149][ T5811] usb 4-1: Product: syz [ 497.623487][ T5811] usb 4-1: Manufacturer: syz [ 497.649130][ T5811] usb 4-1: SerialNumber: syz [ 497.710534][ T30] audit: type=1400 audit(1777863417.379:2355): avc: denied { open } for pid=12224 comm="syz.1.1265" path="/36/file0" dev="tmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 497.716990][ T5811] usb 4-1: config 0 descriptor?? [ 497.798046][T12099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.825465][T12099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 497.939702][T12099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.954632][ T30] audit: type=1400 audit(1777863417.909:2356): avc: denied { getopt } for pid=12231 comm="syz.4.1266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 498.050306][T12099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.096593][T12099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.148000][ T30] audit: type=1400 audit(1777863418.089:2357): avc: denied { write } for pid=12215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.178903][T12099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.247022][ T30] audit: type=1400 audit(1777863418.209:2358): avc: denied { watch } for pid=12233 comm="syz.2.1267" path="/37/file0" dev="fuse" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 498.297531][ T29] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 498.321384][ T30] audit: type=1400 audit(1777863418.279:2359): avc: denied { write } for pid=12245 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.749048][ T29] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 498.931328][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.075900][ T29] usb 5-1: config 0 has no interface number 0 [ 499.092493][ T29] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 499.123002][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.141423][ T29] usb 5-1: Product: syz [ 499.150613][ T3385] hsr_slave_0: left promiscuous mode [ 499.185116][ T29] usb 5-1: Manufacturer: syz [ 499.194020][ T3385] hsr_slave_1: left promiscuous mode [ 499.201799][ T29] usb 5-1: SerialNumber: syz [ 499.212972][ T3385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.232577][ T3385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.248979][ T3385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.257366][ T29] usb 5-1: config 0 descriptor?? [ 499.278522][ T3385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.289370][ T29] hub 5-1:0.31: bad descriptor, ignoring hub [ 499.302497][ T29] hub 5-1:0.31: probe with driver hub failed with error -5 [ 499.307860][ T30] audit: type=1400 audit(1777863418.309:2360): avc: denied { write } for pid=12233 comm="syz.2.1267" name="protocols" dev="proc" ino=4026533021 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 499.322943][ T29] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 499.335087][ T5811] usb 4-1: Firmware version (0.0) predates our first public release. [ 499.348422][ T5811] usb 4-1: Please update to version 0.2 or newer [ 499.354966][ T30] audit: type=1800 audit(1777863418.669:2361): pid=12250 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1268" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=41903 res=0 errno=0 [ 499.357409][ T3385] veth1_macvtap: left promiscuous mode [ 499.407872][ T29] uvcvideo 5-1:0.31: Entity type for entity Output 32774 was not initialized! [ 499.427247][ T29] uvcvideo 5-1:0.31: Failed to create links for entity 32774 [ 499.450760][ T29] uvcvideo 5-1:0.31: Failed to register entities (-22). [ 499.469635][ T3385] veth0_macvtap: left promiscuous mode [ 499.485085][ T3385] veth1_vlan: left promiscuous mode [ 499.515356][ T3385] veth0_vlan: left promiscuous mode [ 499.687936][ T5811] usb 4-1: Firmware: build  [ 500.216263][ T30] audit: type=1400 audit(1777863420.169:2362): avc: denied { write } for pid=12255 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.256666][ T29] usb 5-1: USB disconnect, device number 42 [ 500.491620][ T3385] team0 (unregistering): Port device team_slave_1 removed [ 500.554560][ T3385] team0 (unregistering): Port device team_slave_0 removed [ 501.044467][T12099] hsr_slave_0: entered promiscuous mode [ 501.065897][T12099] hsr_slave_1: entered promiscuous mode [ 501.114848][ T5732] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 501.168049][ T5811] usb 4-1: USB disconnect, device number 37 [ 501.240008][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.247796][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.287291][ T5732] usb 5-1: Using ep0 maxpacket: 32 [ 501.316020][ T5732] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 501.342214][ T5732] usb 5-1: config 0 has no interface number 0 [ 501.373105][ T5732] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 501.435764][ T5732] usb 5-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 501.494155][ T5732] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 501.637290][ T5732] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.645802][ T5732] usb 5-1: Product: syz [ 501.649983][ T5732] usb 5-1: Manufacturer: syz [ 501.654688][ T5732] usb 5-1: SerialNumber: syz [ 501.662793][ T5732] usb 5-1: config 0 descriptor?? [ 501.670327][ T5732] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 501.727148][T12315] 9p: Bad value for 'wfdno' [ 501.966434][ T5732] usb 5-1: qt2_setup_urbs - submit read urb failed -90 [ 502.043185][ T5732] quatech2 5-1:0.51: probe with driver quatech2 failed with error -90 [ 502.222413][ T5732] usb 5-1: USB disconnect, device number 43 [ 502.500291][T12099] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.517118][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 502.517136][ T30] audit: type=1400 audit(1777863422.479:2373): avc: denied { read write } for pid=12327 comm="syz.1.1276" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 502.565113][ T30] audit: type=1400 audit(1777863422.479:2374): avc: denied { open } for pid=12327 comm="syz.1.1276" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 502.642079][ T30] audit: type=1400 audit(1777863422.589:2375): avc: denied { write } for pid=12309 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.726460][T12099] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.733029][ T30] audit: type=1400 audit(1777863422.689:2376): avc: denied { write } for pid=12338 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.094090][ T30] audit: type=1400 audit(1777863423.049:2377): avc: denied { bind } for pid=12343 comm="syz.3.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 503.405029][ T30] audit: type=1400 audit(1777863423.109:2378): avc: denied { setopt } for pid=12343 comm="syz.3.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 503.557972][T12099] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.625152][ T5734] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 503.662078][ T30] audit: type=1400 audit(1777863423.619:2379): avc: denied { bind } for pid=12332 comm="syz.2.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 503.713080][ T30] audit: type=1400 audit(1777863423.649:2380): avc: denied { setopt } for pid=12332 comm="syz.2.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 503.860075][T12099] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.868291][ T5734] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 503.881998][ T5734] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.891282][ T5734] usb 2-1: Product: syz [ 503.895785][ T5734] usb 2-1: Manufacturer: syz [ 503.900397][ T5734] usb 2-1: SerialNumber: syz [ 503.968962][ T5734] usb 2-1: config 0 descriptor?? [ 504.296574][ T29] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 504.298887][T12373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1282'. [ 504.309080][ T30] audit: type=1400 audit(1777863424.269:2381): avc: denied { write } for pid=12357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.376706][ T30] audit: type=1400 audit(1777863424.309:2382): avc: denied { append } for pid=12372 comm="syz.2.1282" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 504.408738][T12099] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 504.420766][T12099] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 504.430194][T12099] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 504.456248][T12099] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 504.466275][T12099] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 504.478650][T12099] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 504.498301][ T29] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 504.508612][T12099] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 504.517457][ T29] usb 4-1: config 0 has no interface number 0 [ 504.531070][ T29] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 504.548724][T12099] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 504.555464][ T29] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 504.587539][ T29] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 504.598638][ T29] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 504.619038][ T5734] usb 2-1: Firmware version (0.0) predates our first public release. [ 504.634062][ T5734] usb 2-1: Please update to version 0.2 or newer [ 504.642209][ T29] usb 4-1: Product: syz [ 504.655167][ T29] usb 4-1: SerialNumber: syz [ 504.666432][ T29] usb 4-1: config 0 descriptor?? [ 504.676264][ T29] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 504.686746][ T29] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input41 [ 504.759906][T12099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.785433][T12099] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.797361][ T3385] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.804518][ T3385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.833619][ T5734] usb 2-1: Firmware: build  [ 504.878532][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 504.932210][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.939339][ T3324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.260320][T12367] ubi: mtd0 is already attached to ubi31 [ 505.269807][ T5734] usb 2-1: USB disconnect, device number 19 [ 505.359412][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 505.359611][ T5613] usb 4-1: USB disconnect, device number 38 [ 505.366424][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 505.626138][ T5613] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 505.951185][T12399] 9p: Bad value for 'wfdno' [ 506.508297][T12432] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1290'. [ 507.053292][T12432] could not allocate digest TFM handle md5 [ 507.085469][T12449] syzkaller0: entered promiscuous mode [ 507.110965][T12449] syzkaller0: entered allmulticast mode [ 507.263886][T12099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.683223][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 507.683238][ T30] audit: type=1400 audit(1777863427.639:2389): avc: denied { write } for pid=12448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.942005][ T30] audit: type=1400 audit(1777863427.899:2390): avc: denied { write } for pid=12470 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 508.152414][T12438] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 508.186888][T12438] block device autoloading is deprecated and will be removed. [ 508.207130][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 508.232196][ T30] audit: type=1326 audit(1777863428.169:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12474 comm="syz.2.1295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0679cdd9 code=0x7ffc0000 [ 508.298439][ T30] audit: type=1326 audit(1777863428.169:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12474 comm="syz.2.1295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0679cdd9 code=0x7ffc0000 [ 508.441453][T12099] veth0_vlan: entered promiscuous mode [ 508.568901][T12099] veth1_vlan: entered promiscuous mode [ 508.582709][ T30] audit: type=1326 audit(1777863428.179:2393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12474 comm="syz.2.1295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f1d0679cdd9 code=0x7ffc0000 [ 508.622565][ T5613] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 509.099565][T12099] veth0_macvtap: entered promiscuous mode [ 509.111099][ T5610] Bluetooth: hci1: hcon ffff88805fa48000 sent 1 < count 5 [ 509.119478][ T5610] Bluetooth: hci1: hcon ffff88805fa4c000 sent 1 < count 9 [ 509.127110][ T5610] Bluetooth: hci1: hcon ffff88805fa4c000 sent 0 < count 32774 [ 509.156994][ T30] audit: type=1326 audit(1777863428.179:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12474 comm="syz.2.1295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0679cdd9 code=0x7ffc0000 [ 509.184732][ T30] audit: type=1326 audit(1777863428.179:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12474 comm="syz.2.1295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0679cdd9 code=0x7ffc0000 [ 509.212316][ T30] audit: type=1326 audit(1777863428.179:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12474 comm="syz.2.1295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d0679cdd9 code=0x7ffc0000 [ 509.243236][ T30] audit: type=1326 audit(1777863428.179:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12474 comm="syz.2.1295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0679cdd9 code=0x7ffc0000 [ 509.283902][ T30] audit: type=1326 audit(1777863428.179:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12474 comm="syz.2.1295" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d0679cdd9 code=0x7ffc0000 [ 509.284017][ T5613] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 509.326459][T12099] veth1_macvtap: entered promiscuous mode [ 509.421914][T12099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.457381][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 509.466827][ T5613] usb 3-1: Product: syz [ 509.471076][ T5613] usb 3-1: Manufacturer: syz [ 509.473721][T12099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.475984][ T5613] usb 3-1: SerialNumber: syz [ 509.507693][ T5613] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 509.599590][ T139] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.623491][ T139] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.682831][ T139] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.734477][ T139] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.917575][ T5613] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 509.937928][ T5613] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 510.840203][ T5613] usb 3-1: USB disconnect, device number 44 [ 510.861837][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.908761][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.336541][ T5713] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 511.518753][ T5713] usb 5-1: Using ep0 maxpacket: 16 [ 511.548938][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 511.562156][ T5713] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 511.584258][ T5713] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 511.687401][ T5713] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 511.718694][ T5713] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 511.748612][ T5713] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 511.795528][ T5713] usb 5-1: config 1 interface 0 has no altsetting 0 [ 511.826519][T12529] 9pnet_fd: Insufficient options for proto=fd [ 512.495103][ T5713] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 512.514821][ T5713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.587079][ T5713] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 512.716350][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.794833][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.886170][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 512.886188][ T30] audit: type=1400 audit(1777863432.849:2466): avc: denied { mounton } for pid=12099 comm="syz-executor" path="/root/syzkaller.HcLQKe/syz-tmp" dev="sda1" ino=2070 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 513.048671][ T30] audit: type=1400 audit(1777863432.909:2467): avc: denied { mounton } for pid=12099 comm="syz-executor" path="/root/syzkaller.HcLQKe/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 513.185378][T12509] __vm_enough_memory: pid: 12509, comm: syz.4.1301, bytes: 4503599627366400 not enough memory for the allocation [ 513.239066][ T30] audit: type=1400 audit(1777863432.909:2468): avc: denied { mounton } for pid=12099 comm="syz-executor" path="/root/syzkaller.HcLQKe/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=42698 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 513.325705][T12509] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1301'. [ 513.430645][T12553] Cannot find add_set index 0 as target [ 513.573145][T12554] sctp: [Deprecated]: syz.6.1242 (pid 12554) Use of int in max_burst socket option deprecated. [ 513.573145][T12554] Use struct sctp_assoc_value instead [ 513.721151][ T30] audit: type=1400 audit(1777863432.939:2469): avc: denied { mounton } for pid=12099 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 513.855252][ T30] audit: type=1400 audit(1777863432.939:2470): avc: denied { mount } for pid=12099 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 513.996845][ T30] audit: type=1400 audit(1777863432.939:2471): avc: denied { mounton } for pid=12099 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 514.062174][ T30] audit: type=1400 audit(1777863433.109:2472): avc: denied { write } for pid=12543 comm="syz.2.1308" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 514.162799][ T30] audit: type=1400 audit(1777863433.919:2473): avc: denied { bind } for pid=12559 comm="syz.2.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 514.263372][ T30] audit: type=1400 audit(1777863433.939:2474): avc: denied { listen } for pid=12559 comm="syz.2.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 514.342093][ T5713] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 514.380233][ T5746] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 514.391862][ T30] audit: type=1400 audit(1777863433.959:2475): avc: denied { create } for pid=12559 comm="syz.2.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 514.444612][ T5713] usb 5-1: USB disconnect, device number 44 [ 514.567828][ T5746] usb 7-1: Using ep0 maxpacket: 32 [ 514.643234][T12577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1313'. [ 515.416752][ T5746] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 515.427863][ T5746] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.461834][ T5746] usb 7-1: config 0 descriptor?? [ 515.492243][ T5746] gspca_main: sunplus-2.14.0 probing 041e:400b [ 515.499245][ T5734] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 515.721508][T12583] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1314'. [ 515.818594][ T5734] usb 2-1: Using ep0 maxpacket: 32 [ 515.850585][ T5734] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 515.899654][ T5734] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 515.935618][ T5734] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 515.955367][ T5734] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 515.965611][ T5734] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 515.982388][ T5734] usb 2-1: config 0 interface 0 has no altsetting 0 [ 515.998948][ T5734] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 516.008317][ T5734] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 516.017239][ T5734] usb 2-1: Product: syz [ 516.022004][ T5734] usb 2-1: Manufacturer: syz [ 516.027084][ T5734] usb 2-1: SerialNumber: syz [ 516.088243][ T5734] usb 2-1: config 0 descriptor?? [ 516.185561][ T802] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 516.202114][ T5734] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 516.288039][ T5734] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 516.299677][ T5746] gspca_sunplus: reg_w_riv err -110 [ 516.329879][ T5746] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 516.384959][ T802] usb 3-1: Using ep0 maxpacket: 32 [ 516.476210][ T802] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 516.554139][ T802] usb 3-1: config 0 has no interface number 0 [ 516.651959][ T802] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 516.710192][ T29] usb 2-1: USB disconnect, device number 20 [ 516.790294][ T802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.893831][ T802] usb 3-1: Product: syz [ 516.915361][ T29] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 516.969104][ T802] usb 3-1: Manufacturer: syz [ 517.030588][ T802] usb 3-1: SerialNumber: syz [ 517.133055][ T802] usb 3-1: config 0 descriptor?? [ 517.208879][ T5746] usb 7-1: USB disconnect, device number 26 [ 517.231390][ T802] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 517.441745][T12602] sctp: [Deprecated]: syz.4.1317 (pid 12602) Use of struct sctp_assoc_value in delayed_ack socket option. [ 517.441745][T12602] Use struct sctp_sack_info instead [ 517.455865][ T802] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 517.563189][ T802] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 517.611416][T12602] o2cb: This node has not been configured. [ 517.617799][T12602] o2cb: Cluster check failed. Fix errors before retrying. [ 517.625094][T12602] (syz.4.1317,12602,0):user_dlm_register:674 ERROR: status = -22 [ 517.634776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 517.643473][T12602] (syz.4.1317,12602,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 517.844817][ T5713] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 517.889330][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 517.939680][ T802] usb 3-1: USB disconnect, device number 45 [ 517.986336][ T802] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 518.015061][ T5811] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 518.059432][ T802] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 518.088679][ T802] quatech2 3-1:0.51: device disconnected [ 518.135348][ T5713] usb 2-1: Using ep0 maxpacket: 32 [ 518.158980][ T5713] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 518.198648][ T5713] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 518.209803][ T5811] usb 7-1: Using ep0 maxpacket: 8 [ 518.229401][ T5811] usb 7-1: config 1 has an invalid interface number: 163 but max is 0 [ 518.247157][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 518.247174][ T30] audit: type=1400 audit(1777863438.209:2484): avc: denied { write } for pid=12616 comm="syz.4.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 518.276370][ T5713] usb 2-1: config 0 interface 0 has no altsetting 0 [ 518.283246][ T5811] usb 7-1: config 1 has no interface number 0 [ 518.305278][ T5811] usb 7-1: config 1 interface 163 altsetting 248 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 518.318546][ T5713] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 518.338200][ T30] audit: type=1400 audit(1777863438.279:2485): avc: denied { write } for pid=12585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.376200][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.392683][ T5811] usb 7-1: config 1 interface 163 has no altsetting 0 [ 518.401149][ T5713] usb 2-1: Product: syz [ 518.414922][ T5713] usb 2-1: Manufacturer: syz [ 518.425584][ T5811] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=2f.87 [ 518.444969][ T5713] usb 2-1: SerialNumber: syz [ 518.456251][ T5811] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.466787][ T5713] usb 2-1: config 0 descriptor?? [ 518.479891][ T5811] usb 7-1: Product: syz [ 518.491356][ T5811] usb 7-1: Manufacturer: syz [ 518.514783][ T5811] usb 7-1: SerialNumber: syz [ 518.538753][ T30] audit: type=1400 audit(1777863438.499:2486): avc: denied { write } for pid=12625 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 518.775254][T12604] binder: 12601:12604 ioctl c0385869 200000000180 returned -22 [ 518.887352][ T5713] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 518.989901][ T5811] usb 7-1: Firmware version (0.0) predates our first public release. [ 519.012398][ T5811] usb 7-1: Please update to version 0.2 or newer [ 519.093133][ T5811] usb 7-1: USB disconnect, device number 27 [ 519.245621][ T5613] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 519.297616][ T30] audit: type=1400 audit(1777863439.259:2487): avc: denied { create } for pid=12605 comm="syz.1.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 519.376288][ T30] audit: type=1400 audit(1777863439.319:2488): avc: denied { bind } for pid=12605 comm="syz.1.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 519.434816][T12649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.438684][ T5613] usb 5-1: config 1 has an invalid interface number: 82 but max is 0 [ 519.453199][T12649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.472289][ T5613] usb 5-1: config 1 has no interface number 0 [ 519.505915][ T5613] usb 5-1: config 1 interface 82 has no altsetting 0 [ 519.518014][ T5713] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 519.539447][ T5613] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 519.563277][ T5613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.588296][ T5613] usb 5-1: Product: syz [ 519.604788][ T5613] usb 5-1: Manufacturer: syz [ 519.626259][ T5713] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 519.659611][ T5613] usb 5-1: SerialNumber: syz [ 519.742460][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1325'. [ 520.162866][ T5713] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 520.288820][T12637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.524269][T12637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.798321][ T5713] usb 2-1: USB disconnect, device number 21 [ 521.809600][ T30] audit: type=1400 audit(1777863441.749:2489): avc: denied { write } for pid=12632 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 521.993345][ T30] audit: type=1400 audit(1777863441.829:2490): avc: denied { write } for pid=12662 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 522.053844][ T5610] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 522.063572][ T5610] CPU: 0 UID: 0 PID: 5610 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 522.063601][ T5610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 522.063616][ T5610] Workqueue: hci5 hci_rx_work [ 522.063643][ T5610] Call Trace: [ 522.063650][ T5610] [ 522.063658][ T5610] dump_stack_lvl+0x100/0x190 [ 522.063689][ T5610] sysfs_warn_dup.cold+0x1c/0x28 [ 522.063719][ T5610] sysfs_create_dir_ns+0x24b/0x2b0 [ 522.063746][ T5610] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 522.063767][ T5610] ? find_held_lock+0x2b/0x80 [ 522.063785][ T5610] ? kobject_add_internal+0x25f/0x930 [ 522.063812][ T5610] ? kobject_add_internal+0x25f/0x930 [ 522.063841][ T5610] ? do_raw_spin_unlock+0x145/0x1e0 [ 522.063869][ T5610] kobject_add_internal+0x2c8/0x930 [ 522.063900][ T5610] kobject_add+0x16a/0x1e0 [ 522.063924][ T5610] ? __pfx_kobject_add+0x10/0x10 [ 522.063949][ T5610] ? class_to_subsys+0x10f/0x150 [ 522.063976][ T5610] ? kobject_put+0xb9/0x640 [ 522.064000][ T5610] ? _raw_spin_unlock+0x28/0x50 [ 522.064027][ T5610] device_add+0x294/0x1950 [ 522.064049][ T5610] ? __pfx_dev_set_name+0x10/0x10 [ 522.064074][ T5610] ? __pfx_device_add+0x10/0x10 [ 522.064095][ T5610] ? mgmt_send_event_skb+0x2fb/0x460 [ 522.064125][ T5610] hci_conn_add_sysfs+0x1a3/0x260 [ 522.064152][ T5610] le_conn_complete_evt+0x11eb/0x1f60 [ 522.064185][ T5610] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 522.064212][ T5610] hci_le_conn_complete_evt+0x23c/0x3a0 [ 522.064235][ T5610] ? skb_pull_data+0x15f/0x1e0 [ 522.064261][ T5610] hci_le_meta_evt+0x34a/0x5f0 [ 522.064283][ T5610] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 522.064307][ T5610] hci_event_packet+0x51c/0xcd0 [ 522.064329][ T5610] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 522.064352][ T5610] ? __pfx_hci_event_packet+0x10/0x10 [ 522.064375][ T5610] ? kcov_remote_start+0x374/0x660 [ 522.064396][ T5610] ? lockdep_hardirqs_on+0x78/0x100 [ 522.064426][ T5610] hci_rx_work+0x451/0xfc0 [ 522.064451][ T5610] process_one_work+0xa0e/0x1980 [ 522.064489][ T5610] ? __pfx_process_one_work+0x10/0x10 [ 522.064522][ T5610] ? __pfx_hci_rx_work+0x10/0x10 [ 522.064544][ T5610] worker_thread+0x5ef/0xe50 [ 522.064578][ T5610] ? kthread+0x13a/0x450 [ 522.064598][ T5610] ? __pfx_worker_thread+0x10/0x10 [ 522.064622][ T5610] kthread+0x370/0x450 [ 522.064643][ T5610] ? __pfx_kthread+0x10/0x10 [ 522.064667][ T5610] ret_from_fork+0x72b/0xd50 [ 522.064693][ T5610] ? __pfx_ret_from_fork+0x10/0x10 [ 522.064718][ T5610] ? rcu_is_watching+0x12/0xc0 [ 522.064743][ T5610] ? __switch_to+0x800/0x1100 [ 522.064769][ T5610] ? __pfx_kthread+0x10/0x10 [ 522.064790][ T5610] ret_from_fork_asm+0x1a/0x30 [ 522.064831][ T5610] [ 522.328948][ T5610] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 522.343470][ T5610] Bluetooth: hci5: failed to register connection device [ 522.353200][ T30] audit: type=1400 audit(1777863441.929:2491): avc: denied { listen } for pid=12656 comm="syz.2.1326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 522.355457][ T5613] hub 5-1:1.82: bad descriptor, ignoring hub [ 522.381114][ T5613] hub 5-1:1.82: probe with driver hub failed with error -5 [ 522.389240][ T5613] sierra 5-1:1.82: Sierra USB modem converter detected [ 522.402089][ T5613] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 522.442514][ T5613] usb 5-1: USB disconnect, device number 45 [ 522.467738][ T5613] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 522.477729][ T5613] sierra 5-1:1.82: device disconnected [ 522.512995][ T1974] block nbd6: Possible stuck request ffff888027ebe000: control (read@0,1024B). Runtime 120 seconds [ 522.523980][ T1974] block nbd6: Possible stuck request ffff888027ebe1c0: control (read@1024,1024B). Runtime 120 seconds [ 522.560513][ T30] audit: type=1400 audit(1777863442.509:2492): avc: denied { accept } for pid=12673 comm="syz.3.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 522.645725][ T5713] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 522.675899][T12687] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 522.814982][ T5713] usb 2-1: Using ep0 maxpacket: 32 [ 522.823360][T12688] overlayfs: failed lookup in lower (newroot/5, name='file2', err=-40): overlapping layers [ 522.837153][ T5713] usb 2-1: config 0 interface 0 has no altsetting 0 [ 522.846615][ T5713] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 522.859403][ T5713] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.894845][ T29] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 522.898472][T12694] ALSA: seq fatal error: cannot create timer (-22) [ 522.918152][ T5713] usb 2-1: config 0 descriptor?? [ 522.988070][T12695] dummy0: entered promiscuous mode [ 523.001574][T12695] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 523.046190][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 523.057046][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.064825][T12695] hsr1: entered allmulticast mode [ 523.072663][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.080851][T12695] dummy0: entered allmulticast mode [ 523.118380][ T29] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 523.131867][ T29] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 523.151961][ T30] audit: type=1400 audit(1777863443.109:2493): avc: denied { write } for pid=12672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 523.213737][T12695] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 523.459515][ T5713] hid (null): bogus close delimiter [ 523.480521][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.523552][ T5713] waterforce 0003:1044:7A4D.000F: bogus close delimiter [ 523.549521][ T5713] waterforce 0003:1044:7A4D.000F: item 0 2 2 10 parsing failed [ 523.553402][ T29] usb 3-1: config 0 descriptor?? [ 523.995785][T12666] 9p: Bad value for 'rfdno' [ 524.346160][ T30] audit: type=1400 audit(1777863444.239:2494): avc: denied { write } for pid=12705 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 524.412699][ T5713] waterforce 0003:1044:7A4D.000F: hid parse failed with -22 [ 524.714923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 524.736617][ T30] audit: type=1400 audit(1777863444.689:2495): avc: denied { setopt } for pid=12678 comm="syz.2.1331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 525.378309][ T5713] waterforce 0003:1044:7A4D.000F: probe with driver waterforce failed with error -22 [ 525.451451][ T5713] usb 2-1: USB disconnect, device number 22 [ 525.808418][T12726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1338'. [ 525.835372][ T5613] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 526.385453][ T29] usbhid 3-1:0.0: can't add hid device: -71 [ 526.391433][ T29] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 526.534901][ T5613] usb 5-1: Using ep0 maxpacket: 8 [ 526.542799][ T5613] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 526.551313][ T5613] usb 5-1: config 0 has no interface number 0 [ 526.563992][ T5613] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 526.584251][ T5613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.650258][ T5613] usb 5-1: config 0 descriptor?? [ 526.807207][ T5613] viperboard 5-1:0.143: version 0.00 found at bus 005 address 046 [ 527.415148][ T29] usb 3-1: USB disconnect, device number 46 [ 527.653574][ T5613] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 528.188705][ T5613] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 528.375775][ T30] audit: type=1400 audit(1777863448.339:2496): avc: denied { write } for pid=12742 comm="syz.6.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 528.439716][ T30] audit: type=1400 audit(1777863448.399:2497): avc: denied { write } for pid=12721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.291025][ T802] usb 5-1: USB disconnect, device number 46 [ 529.391452][ T30] audit: type=1400 audit(1777863449.339:2498): avc: denied { write } for pid=12757 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 529.483082][T12760] netlink: 'syz.3.1344': attribute type 1 has an invalid length. [ 529.535880][ T5273] 8021q: adding VLAN 0 to HW filter on device eth21 [ 529.536030][T12760] netlink: 'syz.3.1344': attribute type 4 has an invalid length. [ 529.562638][T12765] binder: 12756:12765 ioctl c0306201 200000000080 returned -14 [ 529.596884][T12765] binder: BINDER_SET_CONTEXT_MGR already set [ 529.604495][T12760] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.1344'. [ 530.129577][ T30] audit: type=1400 audit(1777863450.089:2499): avc: denied { create } for pid=12762 comm="syz.2.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 530.135275][T12765] binder: 12756:12765 ioctl 4018620d 200000000040 returned -16 [ 530.161124][T12771] binder: 12756:12771 ioctl c0306201 2000000003c0 returned -14 [ 530.190807][T12770] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 530.553704][T12787] trusted_key: encrypted_key: hex blob is missing [ 530.596466][T12785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 531.009228][T12797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 531.083122][T12797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1349'. [ 531.092289][ T36] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.101617][ T8928] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.110851][ T8928] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.144175][ T8928] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.611387][ T30] audit: type=1400 audit(1777863451.569:2500): avc: denied { write } for pid=12772 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.637826][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1352'. [ 532.797459][T12823] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 532.804014][T12823] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 532.823793][T12823] vhci_hcd vhci_hcd.0: Device attached [ 532.882954][ T30] audit: type=1400 audit(1777863452.839:2501): avc: denied { write } for pid=12825 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.943286][T12833] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1359'. [ 532.965437][ T30] audit: type=1400 audit(1777863452.869:2502): avc: denied { ioctl } for pid=12831 comm="syz.2.1358" path="socket:[45083]" dev="sockfs" ino=45083 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 533.058442][ T5734] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 533.066867][ T802] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 533.075375][ T5273] 8021q: adding VLAN 0 to HW filter on device eth22 [ 533.088367][T10619] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 533.285862][ T802] usb 4-1: device descriptor read/64, error -71 [ 533.381419][T10619] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 23, changing to 4 [ 533.444276][ T30] audit: type=1400 audit(1777863453.189:2503): avc: denied { bind } for pid=12830 comm="syz.4.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 533.610604][T10619] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 533.739464][ T802] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 533.780194][T10619] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 253, changing to 4 [ 533.860403][T10619] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 533.890118][ T30] audit: type=1400 audit(1777863453.849:2504): avc: denied { ioctl } for pid=12848 comm="syz.2.1360" path="socket:[45087]" dev="sockfs" ino=45087 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 533.922924][ T5610] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 533.957560][T10619] usb 2-1: config 1 interface 1 has no altsetting 0 [ 533.976251][ T802] usb 4-1: device descriptor read/64, error -71 [ 534.013522][T10619] usb 2-1: string descriptor 0 read error: -22 [ 534.033531][T10619] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 534.068503][T10619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.106248][ T802] usb usb4-port1: attempt power cycle [ 534.366260][T10619] usb 2-1: low speed audio streaming not supported [ 534.442091][T10619] usb 2-1: low speed audio streaming not supported [ 534.542388][T10619] usb 2-1: unit 3 not found! [ 534.615573][ T802] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 534.728045][ T30] audit: type=1400 audit(1777863454.639:2505): avc: denied { map } for pid=12815 comm="syz.1.1355" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 534.787791][ T802] usb 4-1: device descriptor read/8, error -71 [ 535.166106][ T802] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 535.711529][ T802] usb 4-1: device descriptor read/8, error -71 [ 535.916472][T12826] vhci_hcd: connection reset by peer [ 535.936221][ T802] usb usb4-port1: unable to enumerate USB device [ 536.184416][ T9732] vhci_hcd vhci_hcd.3: stop threads [ 536.272881][ T9732] vhci_hcd vhci_hcd.3: release socket [ 536.323335][ T9732] vhci_hcd vhci_hcd.3: disconnect device [ 536.361706][T10619] usb 2-1: USB disconnect, device number 23 [ 536.547597][T12875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1365'. [ 536.774882][T10619] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 537.024932][T10619] usb 2-1: Using ep0 maxpacket: 16 [ 537.093398][T10619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.218969][T10619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.289601][T10619] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 537.370355][ T30] audit: type=1400 audit(1777863457.329:2506): avc: denied { write } for pid=12847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.400992][T10619] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 537.442662][T10619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.501434][T12887] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 537.507983][T12887] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 537.516097][T12887] vhci_hcd vhci_hcd.0: Device attached [ 537.548881][T10619] usb 2-1: config 0 descriptor?? [ 537.785146][ T29] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 537.912976][ T30] audit: type=1400 audit(1777863457.869:2507): avc: denied { write } for pid=12884 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 538.376001][T12888] vhci_hcd: connection reset by peer [ 538.405691][ T5734] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 538.481894][ T30] audit: type=1400 audit(1777863458.169:2508): avc: denied { create } for pid=12886 comm="syz.4.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 538.535175][ T139] vhci_hcd vhci_hcd.6: stop threads [ 538.614694][ T139] vhci_hcd vhci_hcd.6: release socket [ 538.651776][T12872] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1364'. [ 538.709155][T10619] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 538.791031][ T139] vhci_hcd vhci_hcd.6: disconnect device [ 538.838477][T10619] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 538.924915][T10619] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 539.044649][T10619] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 539.084826][T10619] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 539.180344][ T5613] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 539.669745][T10619] input: HID 0955:7214 Haptics as /devices/virtual/input/input42 [ 539.725043][ T5613] usb 5-1: Using ep0 maxpacket: 32 [ 539.771371][ T5613] usb 5-1: unable to get BOS descriptor or descriptor too short [ 539.779149][ T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 539.823403][ T5613] usb 5-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 539.844259][ T5613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.862616][ T5613] usb 5-1: Product: syz [ 539.877916][ T5613] usb 5-1: Manufacturer: syz [ 539.891462][ T5613] usb 5-1: SerialNumber: syz [ 539.990414][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 540.000626][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.026841][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 540.041555][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 540.056769][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 540.066655][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.083276][ T10] usb 4-1: config 0 descriptor?? [ 540.136481][ T5613] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 540.154185][ T5613] usb 5-1: MIDIStreaming interface descriptor not found [ 540.262091][T10619] shield 0003:0955:7214.0010: Registered Thunderstrike controller [ 540.299836][ T5613] usb 5-1: USB disconnect, device number 47 [ 540.303185][T10619] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 540.388147][ T6338] udevd[6338]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 540.460999][T10619] usb 2-1: USB disconnect, device number 24 [ 540.471475][ T5746] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 540.484855][ T5732] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 540.506731][ T5746] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 540.515056][ T10] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max [ 540.552908][ T5746] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 540.553079][ T10] microsoft 0003:045E:07DA.0011: ignoring exceeding usage max [ 540.622938][ T30] audit: type=1400 audit(1777863460.579:2509): avc: denied { write } for pid=12915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.669954][ T5746] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 540.692665][ T5732] usb 3-1: Using ep0 maxpacket: 32 [ 540.723533][ T5732] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 540.750175][ T5732] usb 3-1: config 0 has no interface number 0 [ 540.777300][ T5732] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 540.799997][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.821104][ T5732] usb 3-1: Product: syz [ 540.834701][ T5732] usb 3-1: Manufacturer: syz [ 540.843133][ T30] audit: type=1400 audit(1777863460.799:2510): avc: denied { write } for pid=12931 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 540.846741][ T5732] usb 3-1: SerialNumber: syz [ 540.941060][ T5732] usb 3-1: config 0 descriptor?? [ 540.948974][ T5732] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 540.998879][T12935] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1376'. [ 541.011674][ T30] audit: type=1400 audit(1777863460.969:2511): avc: denied { getopt } for pid=12934 comm="syz.4.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 541.033010][T10619] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 541.054502][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 541.158013][ T5732] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 541.191480][ T5732] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 541.196480][T10619] usb 2-1: unable to get BOS descriptor or descriptor too short [ 541.232855][T10619] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.262085][T10619] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 541.273355][T10619] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 541.286958][T10619] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 541.296273][T10619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.306352][T10619] usb 2-1: Product: syz [ 541.310654][T10619] usb 2-1: Manufacturer: 졂冽ꓐ淒䕔둉먵뙓鄵捧뭏䜡૗汃栋ￏӖ蛋䲘串ᮚ퇄舣隞ᗓ䗀缾傐Ϝᴁཫ᭪ⲵथﵭ諡녢솇̅魇팟ꛭ騟ラ幤僠铭⬌犩螑ꬱௐ됗獇죳檝汻ᣣ삁詿啨پ剖处弊당ᢀꔾ⦨ﾸ͞猻묿꯫퉍꧹솧喦㤡譓사䓮叐䂧﻽ໟ啸ꕋడ쮗錵ͭ钬堼プ㚁渽褔 [ 541.362163][T10619] usb 2-1: SerialNumber: syz [ 541.390932][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 541.400014][ T5732] usb 3-1: USB disconnect, device number 47 [ 541.426644][ T5732] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 541.468089][ T5732] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 541.502294][ T5732] quatech2 3-1:0.51: device disconnected [ 541.673608][ T30] audit: type=1400 audit(1777863461.629:2512): avc: denied { write } for pid=12938 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 541.727528][T10619] usb 2-1: USB disconnect, device number 25 [ 541.891134][ T30] audit: type=1400 audit(1777863461.849:2513): avc: denied { write } for pid=12951 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.053419][ T10] microsoft 0003:045E:07DA.0011: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 542.113333][ T30] audit: type=1400 audit(1777863462.069:2514): avc: denied { create } for pid=12959 comm="syz.2.1379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 542.117655][ T10] microsoft 0003:045E:07DA.0011: no inputs found [ 542.174181][ T10] microsoft 0003:045E:07DA.0011: could not initialize ff, continuing anyway [ 542.194513][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 542.240840][ T10] usb 4-1: USB disconnect, device number 43 [ 542.300492][T12961] fido_id[12961]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 542.394883][T10619] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 542.445014][ T5344] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 542.576051][T10619] usb 3-1: Using ep0 maxpacket: 16 [ 542.597556][T10619] usb 3-1: unable to get BOS descriptor or descriptor too short [ 542.617799][ T5344] usb 5-1: unable to get BOS descriptor or descriptor too short [ 542.625990][ T5734] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 542.641242][T10619] usb 3-1: config 174 has an invalid interface number: 197 but max is 0 [ 542.705179][T10619] usb 3-1: config 174 has no interface number 0 [ 542.905690][ T30] audit: type=1400 audit(1777863462.839:2515): avc: denied { write } for pid=12964 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.959530][ T5344] usb 5-1: not running at top speed; connect to a high speed hub [ 542.969408][T10619] usb 3-1: config 174 interface 197 altsetting 12 bulk endpoint 0xF has invalid maxpacket 1023 [ 542.985183][ T5344] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.997247][T10619] usb 3-1: config 174 interface 197 has no altsetting 0 [ 543.018707][ T5344] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 543.036658][T10619] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=bd.a1 [ 543.048160][ T5344] usb 5-1: New USB device found, idVendor=1235, idProduct=821c, bcdDevice= 0.40 [ 543.065397][ T29] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 543.072113][T10619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.081707][ T5344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.096115][T10619] usb 3-1: Product: syz [ 543.101817][ T5344] usb 5-1: Product: syz [ 543.108394][T10619] usb 3-1: Manufacturer: syz [ 543.123902][ T5344] usb 5-1: Manufacturer: syz [ 543.133064][T10619] usb 3-1: SerialNumber: syz [ 543.147044][ T5344] usb 5-1: SerialNumber: syz [ 543.170828][T12960] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 543.180131][T12994] xt_hashlimit: size too large, truncated to 1048576 [ 543.210193][ T30] audit: type=1400 audit(1777863463.169:2516): avc: denied { write } for pid=12992 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.402595][T13001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.411544][T13001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.436214][T10619] usb 3-1: USB disconnect, device number 48 [ 543.536123][ T30] audit: type=1400 audit(1777863463.469:2517): avc: denied { mounton } for pid=12993 comm="syz.3.1386" path="/proc/227/task" dev="proc" ino=44711 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 544.038281][ T5344] usb 5-1: USB disconnect, device number 48 [ 544.165808][ T6328] udevd[6328]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.437938][ T5344] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 544.554350][ T30] audit: type=1400 audit(1777863464.509:2518): avc: denied { write } for pid=12998 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 544.674816][ T5344] usb 5-1: Using ep0 maxpacket: 32 [ 544.696511][ T5344] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 544.715239][ T5344] usb 5-1: config 0 has no interface number 0 [ 544.731414][ T5344] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 544.748922][ T5344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.760406][ T5344] usb 5-1: Product: syz [ 544.781011][ T5344] usb 5-1: Manufacturer: syz [ 544.898964][ T5344] usb 5-1: SerialNumber: syz [ 545.124247][ T5344] usb 5-1: config 0 descriptor?? [ 545.141477][ T5344] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 546.556460][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 546.556504][ T30] audit: type=1400 audit(1777863465.269:2534): avc: denied { execmem } for pid=13034 comm="syz.1.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 546.588924][ T30] audit: type=1400 audit(1777863465.599:2535): avc: denied { read } for pid=13034 comm="syz.1.1393" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 546.614367][ T5344] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 546.632350][ T5344] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 546.642124][ T30] audit: type=1400 audit(1777863465.599:2536): avc: denied { open } for pid=13034 comm="syz.1.1393" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 546.673042][ T30] audit: type=1400 audit(1777863465.749:2537): avc: denied { create } for pid=13034 comm="syz.1.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 546.693135][ T30] audit: type=1400 audit(1777863465.759:2538): avc: denied { setopt } for pid=13034 comm="syz.1.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 546.738890][ T30] audit: type=1400 audit(1777863465.759:2539): avc: denied { bind } for pid=13034 comm="syz.1.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 546.785009][ T30] audit: type=1400 audit(1777863465.759:2540): avc: denied { name_bind } for pid=13034 comm="syz.1.1393" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 546.832966][T13040] 9p: Bad value for 'wfdno' [ 546.853155][ T30] audit: type=1400 audit(1777863465.759:2541): avc: denied { node_bind } for pid=13034 comm="syz.1.1393" saddr=::ffff:0.0.0.0 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 546.879909][ T30] audit: type=1400 audit(1777863465.769:2542): avc: denied { write } for pid=13034 comm="syz.1.1393" laddr=::ffff:0.0.0.0 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 546.904573][ T30] audit: type=1400 audit(1777863465.769:2543): avc: denied { connect } for pid=13034 comm="syz.1.1393" laddr=::ffff:0.0.0.0 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 547.047821][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 547.059661][ T5734] usb 5-1: USB disconnect, device number 49 [ 547.070339][ T5734] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 547.106839][ T5734] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 547.126061][ T5344] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 547.148983][ T5734] quatech2 5-1:0.51: device disconnected [ 547.295870][ T5344] usb 4-1: Using ep0 maxpacket: 32 [ 547.320384][ T5344] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 547.343729][ T5344] usb 4-1: config 0 has no interface number 0 [ 547.360469][ T5344] usb 4-1: config 0 interface 184 has no altsetting 0 [ 547.378696][ T5344] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 547.394815][ T5344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.413332][ T5344] usb 4-1: Product: syz [ 547.423270][ T5344] usb 4-1: Manufacturer: syz [ 547.433402][ T5344] usb 4-1: SerialNumber: syz [ 547.445827][ T5344] usb 4-1: config 0 descriptor?? [ 547.701967][T13064] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 547.756575][T13064] vlan0: entered promiscuous mode [ 547.808211][T10665] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 547.823773][T10665] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 547.832489][T10665] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 547.840295][T10665] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 547.847851][T10665] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 547.857877][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 548.444683][ T5344] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 548.502323][ T5344] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 548.794928][ T5713] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 548.975673][ T5713] usb 5-1: Using ep0 maxpacket: 32 [ 548.994145][ T5713] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 549.005329][ T5713] usb 5-1: config 0 has no interface number 0 [ 549.019925][ T5713] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 549.037482][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.054847][ T10] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 549.064511][ T5713] usb 5-1: Product: syz [ 549.075437][ T5713] usb 5-1: Manufacturer: syz [ 549.088285][ T5713] usb 5-1: SerialNumber: syz [ 549.097631][ T5713] usb 5-1: config 0 descriptor?? [ 549.111631][ T5713] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 549.157668][ T5344] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 549.200055][ T5344] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 549.212475][ T5344] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 549.226212][ T5344] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 549.226632][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 549.275427][ T10] usb 7-1: config 0 has an invalid interface number: 153 but max is 0 [ 549.284233][ T10] usb 7-1: config 0 has an invalid descriptor of length 53, skipping remainder of the config [ 549.307206][ T10] usb 7-1: config 0 has no interface number 0 [ 549.315760][ T10] usb 7-1: too many endpoints for config 0 interface 153 altsetting 68: 166, using maximum allowed: 30 [ 549.319778][ T5344] usb 4-1: USB disconnect, device number 44 [ 549.327524][ T10] usb 7-1: config 0 interface 153 altsetting 68 has 0 endpoint descriptors, different from the interface descriptor's value: 166 [ 549.358763][ T10] usb 7-1: config 0 interface 153 has no altsetting 0 [ 549.382893][ T5713] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 549.405265][T10665] Bluetooth: hci0: command 0x0406 tx timeout [ 549.422375][ T10] usb 7-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 549.432692][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.441198][ T10] usb 7-1: Product: syz [ 549.452690][ T10] usb 7-1: Manufacturer: syz [ 549.468453][ T10] usb 7-1: SerialNumber: syz [ 549.478287][ T5713] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 549.501871][ T10] usb 7-1: config 0 descriptor?? [ 549.835938][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 549.845172][ T5713] usb 5-1: USB disconnect, device number 50 [ 549.963596][ T5713] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 550.011027][ T5713] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 550.045352][ T5618] Bluetooth: hci5: command tx timeout [ 550.113828][ T10] usb 7-1: USB disconnect, device number 28 [ 550.128765][ T5713] quatech2 5-1:0.51: device disconnected [ 550.290967][T13065] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.298852][T13065] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.318191][T13065] bridge_slave_0: entered allmulticast mode [ 550.350600][T13065] bridge_slave_0: entered promiscuous mode [ 550.378955][T13065] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.419926][T13065] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.452353][T13065] bridge_slave_1: entered allmulticast mode [ 550.565578][T13065] bridge_slave_1: entered promiscuous mode [ 551.172039][T13065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.221354][T13065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.377682][T13138] SET target dimension over the limit! [ 551.502202][T13065] team0: Port device team_slave_0 added [ 551.523897][T13065] team0: Port device team_slave_1 added [ 551.626314][T13065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 551.640834][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 551.640849][ T30] audit: type=1400 audit(1777863471.599:2617): avc: denied { create } for pid=13141 comm="syz.3.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 552.173585][ T5713] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 552.245094][ T5618] Bluetooth: hci5: command tx timeout [ 552.393053][T13065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.399767][ T5713] usb 7-1: Using ep0 maxpacket: 8 [ 552.444300][ T30] audit: type=1400 audit(1777863471.839:2618): avc: denied { perfmon } for pid=13139 comm="syz.4.1410" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 552.487024][ T5713] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 552.499922][ T5713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 552.515603][ T30] audit: type=1400 audit(1777863471.839:2619): avc: denied { map_read map_write } for pid=13139 comm="syz.4.1410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 552.541816][T13065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.569788][T13065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.592358][T13065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.657789][ T30] audit: type=1400 audit(1777863472.309:2620): avc: denied { write } for pid=13141 comm="syz.3.1411" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 552.682775][ T30] audit: type=1400 audit(1777863472.519:2621): avc: denied { bind } for pid=13148 comm="syz.1.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 552.683210][ T5713] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 552.702882][T13065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.729284][ T30] audit: type=1400 audit(1777863472.519:2622): avc: denied { write } for pid=13148 comm="syz.1.1412" path="socket:[44957]" dev="sockfs" ino=44957 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 552.746047][ T5713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.766875][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8 [ 552.775392][T13144] kthread_run failed with err -4 [ 552.881136][ T5713] usb 7-1: Product: syz [ 552.890010][T13065] hsr_slave_0: entered promiscuous mode [ 552.891537][ T5713] usb 7-1: Manufacturer: syz [ 552.896983][T13065] hsr_slave_1: entered promiscuous mode [ 552.907514][T13065] debugfs: 'hsr0' already exists in 'hsr' [ 552.913414][T13065] Cannot create hsr debugfs directory [ 552.913542][ T5713] usb 7-1: SerialNumber: syz [ 552.985617][ T5713] usb 7-1: config 0 descriptor?? [ 553.017882][T13153] can0: slcan on ttyS3. [ 553.019750][ T5713] streamzap 7-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 553.081462][T10819] block nbd6: Possible stuck request ffff888027ebe000: control (read@0,1024B). Runtime 150 seconds [ 553.092231][T10819] block nbd6: Possible stuck request ffff888027ebe1c0: control (read@1024,1024B). Runtime 150 seconds [ 553.115470][ T30] audit: type=1400 audit(1777863473.069:2623): avc: denied { unlink } for pid=13155 comm="syz.3.1414" name="#67" dev="tmpfs" ino=417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 553.155240][T13154] can0 (unregistered): slcan off ttyS3. [ 553.298875][ T30] audit: type=1400 audit(1777863473.139:2624): avc: denied { ioctl } for pid=13148 comm="syz.1.1412" path="socket:[45008]" dev="sockfs" ino=45008 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 553.384650][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1414'. [ 554.277420][T10665] Bluetooth: hci5: command tx timeout [ 554.437962][ T30] audit: type=1400 audit(1777863473.139:2625): avc: denied { setopt } for pid=13148 comm="syz.1.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 554.760692][ T30] audit: type=1400 audit(1777863473.139:2626): avc: denied { write } for pid=13148 comm="syz.1.1412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 554.833753][ T5734] usb 7-1: USB disconnect, device number 29 [ 556.509776][T10665] Bluetooth: hci5: command tx timeout [ 556.670529][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 556.670560][ T30] audit: type=1400 audit(1777863476.629:2637): avc: denied { ioctl } for pid=13168 comm="syz.6.1416" path="socket:[46143]" dev="sockfs" ino=46143 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 556.952461][ T30] audit: type=1400 audit(1777863476.909:2638): avc: denied { bind } for pid=13194 comm="syz.1.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 557.000691][ T30] audit: type=1400 audit(1777863476.949:2639): avc: denied { setopt } for pid=13194 comm="syz.1.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 557.364684][ T30] audit: type=1400 audit(1777863477.319:2640): avc: denied { write } for pid=13161 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.517253][T13190] syzkaller0: entered promiscuous mode [ 557.523167][T13190] syzkaller0: entered allmulticast mode [ 557.563264][ T30] audit: type=1400 audit(1777863477.519:2641): avc: denied { write } for pid=13206 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 557.616822][ T30] audit: type=1400 audit(1777863477.579:2642): avc: denied { connect } for pid=13207 comm="syz.1.1419" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 557.823432][ T30] audit: type=1400 audit(1777863477.789:2643): avc: denied { create } for pid=13211 comm="syz.1.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 557.909677][ T30] audit: type=1400 audit(1777863477.809:2644): avc: denied { ioctl } for pid=13211 comm="syz.1.1420" path="/dev/vhost-vsock" dev="devtmpfs" ino=1274 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 557.962978][T13217] [U] #fmQP4}RDN"mx>)Na׽y߇g~"ý`U=0b [ 557.989958][T13217] [U] YE"ٌv07W8tfC#PuD#CΥhQ\/ [ 558.050526][ T30] audit: type=1400 audit(1777863477.809:2645): avc: denied { create } for pid=13211 comm="syz.1.1420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 558.054598][T13220] ip6gretap0: refused to change device tx_queue_len [ 558.164648][T13217] [U] ]D\)= [ 558.169587][ T30] audit: type=1400 audit(1777863477.809:2646): avc: denied { create } for pid=13210 comm="syz.3.1422" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 558.205039][ T5734] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 558.632884][T13230] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[10817] was attempted by " \x07   [ 558.667157][ T5734] usb 5-1: Using ep0 maxpacket: 32 [ 559.298539][ T5734] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 559.349338][ T5734] usb 5-1: config 0 has no interface number 0 [ 559.390708][ T5734] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 559.481022][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 559.625409][T10665] Bluetooth: hci1: command 0x0406 tx timeout [ 560.224275][ T5734] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.232527][ T5734] usb 5-1: Product: syz [ 560.236795][ T5734] usb 5-1: Manufacturer: syz [ 560.241403][ T5734] usb 5-1: SerialNumber: syz [ 560.249334][ T5734] usb 5-1: config 0 descriptor?? [ 560.258858][ T5734] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 560.547249][ T5734] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 560.647989][ T5734] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 560.774916][ T24] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 560.808268][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 560.808565][ T10] usb 5-1: USB disconnect, device number 51 [ 560.903355][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 560.934825][ T24] usb 4-1: Invalid ep0 maxpacket: 64 [ 560.960436][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 560.990300][ T10] quatech2 5-1:0.51: device disconnected [ 561.013566][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1433'. [ 561.074895][ T24] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 561.096954][ T48] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.237014][ T24] usb 4-1: Invalid ep0 maxpacket: 64 [ 561.260871][ T24] usb usb4-port1: attempt power cycle [ 561.340486][T10665] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 561.352414][T10665] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 561.361997][ T48] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.378069][T10665] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 561.397525][T10665] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 561.406404][T10665] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 561.494465][T13065] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 561.540690][T13065] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 561.636245][ T24] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 561.674410][ T48] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.692060][ T24] usb 4-1: Invalid ep0 maxpacket: 64 [ 561.746373][T13065] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 561.784269][T13065] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 561.827330][ T24] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 561.828485][T13296] veth3: entered promiscuous mode [ 561.842366][T13296] veth3: entered allmulticast mode [ 561.878936][ T24] usb 4-1: Invalid ep0 maxpacket: 64 [ 561.896683][ T24] usb usb4-port1: unable to enumerate USB device [ 562.132586][ T48] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.555839][T13065] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 562.669344][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.724125][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 562.724145][ T30] audit: type=1400 audit(1777863482.679:2665): avc: denied { name_bind } for pid=13282 comm="syz.4.1436" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 562.739809][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.811733][T13065] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 562.849058][ T30] audit: type=1400 audit(1777863482.799:2666): avc: denied { write } for pid=13287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 562.898509][T13065] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 562.979673][T13065] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 563.257246][ T30] audit: type=1400 audit(1777863483.219:2667): avc: denied { write } for pid=13320 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 563.352139][T13065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.393668][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 563.434808][ T5732] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 563.464856][ T5618] Bluetooth: hci3: command tx timeout [ 563.480788][T13065] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.722876][ T5732] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 564.451398][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.534536][ T5732] usb 2-1: config 0 descriptor?? [ 565.096178][T13336] random: crng reseeded on system resumption [ 565.581828][ T5732] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 565.587723][ T5618] Bluetooth: hci3: command tx timeout [ 565.650475][ T30] audit: type=1400 audit(1777863485.059:2668): avc: denied { write } for pid=13333 comm="syz.4.1443" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 565.719420][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.726570][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.751043][ T30] audit: type=1400 audit(1777863485.059:2669): avc: denied { open } for pid=13333 comm="syz.4.1443" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 565.850903][ T48] bridge_slave_1: left allmulticast mode [ 565.861453][ T48] bridge_slave_1: left promiscuous mode [ 565.875564][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.910287][ T48] bridge_slave_0: left allmulticast mode [ 565.917551][ T48] bridge_slave_0: left promiscuous mode [ 565.932322][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.073848][ T5732] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 566.086280][ T5732] [drm] Initialized udl on minor 2 [ 566.098202][ T5732] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 566.339765][ T5732] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 566.403075][T13347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1445'. [ 566.612106][ T30] audit: type=1400 audit(1777863486.569:2670): avc: denied { write } for pid=13338 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.673712][ T30] audit: type=1400 audit(1777863486.629:2671): avc: denied { write } for pid=13360 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 566.705885][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.723303][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.744484][ T48] bond0 (unregistering): Released all slaves [ 566.772153][ T9732] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.779281][ T9732] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.800947][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 566.907756][ T5613] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 566.907891][ T5344] usb 2-1: USB disconnect, device number 27 [ 566.921521][T13364] 9p: Bad value for 'wfdno' [ 566.927815][ T5613] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 567.234884][ T5732] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 567.474443][T13369] batman_adv: batadv0: Adding interface: dummy0 [ 567.481420][T13369] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.509435][T13369] batman_adv: batadv0: Interface activated: dummy0 [ 567.524798][ T5732] usb 4-1: Using ep0 maxpacket: 32 [ 567.543658][ T5732] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 567.578204][ T5732] usb 4-1: config 0 has no interface number 0 [ 567.591593][ T5732] usb 4-1: config 0 interface 184 has no altsetting 0 [ 567.617302][ T5732] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 567.624953][ T5618] Bluetooth: hci3: command tx timeout [ 567.637412][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.645756][ T5732] usb 4-1: Product: syz [ 567.650008][ T5732] usb 4-1: Manufacturer: syz [ 567.654617][ T48] hsr_slave_0: left promiscuous mode [ 567.666587][ T48] hsr_slave_1: left promiscuous mode [ 567.679981][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.697002][ T5732] usb 4-1: SerialNumber: syz [ 567.707020][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 567.737896][ T5732] usb 4-1: config 0 descriptor?? [ 567.747757][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.755764][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.814548][ T30] audit: type=1400 audit(1777863487.759:2672): avc: denied { write } for pid=13371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 567.858606][ T48] veth1_macvtap: left promiscuous mode [ 567.864150][ T48] veth0_macvtap: left promiscuous mode [ 567.870804][ T48] veth1_vlan: left promiscuous mode [ 567.877020][ T48] veth0_vlan: left promiscuous mode [ 567.886552][ T30] audit: type=1400 audit(1777863487.839:2673): avc: denied { write } for pid=13386 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 568.043084][ T30] audit: type=1400 audit(1777863487.999:2674): avc: denied { setattr } for pid=13388 comm="syz.1.1449" name="SCTPv6" dev="sockfs" ino=46822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 568.094408][ T30] audit: type=1400 audit(1777863488.019:2675): avc: denied { wake_alarm } for pid=13388 comm="syz.1.1449" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 568.405147][ T29] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 568.406370][ T5732] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 568.477606][ T5732] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 568.544828][ T29] usb 2-1: device descriptor read/64, error -71 [ 568.606852][T13396] futex_wake_op: syz.4.1451 tries to shift op by -1; fix this program [ 568.650312][ T48] team0 (unregistering): Port device team_slave_1 removed [ 568.670673][ T48] team0 (unregistering): Port device team_slave_0 removed [ 568.759281][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 568.796010][ T29] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 568.882342][ T5344] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 568.954850][ T29] usb 2-1: device descriptor read/64, error -71 [ 568.987843][T13280] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.010664][T13280] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.042848][T13280] bridge_slave_0: entered allmulticast mode [ 569.056452][T13280] bridge_slave_0: entered promiscuous mode [ 569.062661][ T5344] usb 5-1: config 1 has an invalid descriptor of length 181, skipping remainder of the config [ 569.078413][ T29] usb usb2-port1: attempt power cycle [ 569.085544][ T5344] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 569.086829][T13280] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.107602][T13280] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.107611][ T5344] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 569.125412][T13280] bridge_slave_1: entered allmulticast mode [ 569.139190][ T5344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.158780][T13280] bridge_slave_1: entered promiscuous mode [ 569.160406][ T5344] usb 5-1: Product: syz [ 569.182611][ T5344] usb 5-1: Manufacturer: syz [ 569.199727][ T5344] usb 5-1: SerialNumber: syz [ 569.262960][ T30] audit: type=1400 audit(1777863489.189:2676): avc: denied { write } for pid=13398 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.297188][T13280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.311358][T13280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 569.355876][ T5732] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 569.371561][ T5732] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 569.408526][ T5732] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 569.426336][ T29] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 569.430794][T13280] team0: Port device team_slave_0 added [ 569.450936][ T5732] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 569.469192][T13280] team0: Port device team_slave_1 added [ 569.478402][ T29] usb 2-1: device descriptor read/8, error -71 [ 569.486662][ T5732] usb 4-1: USB disconnect, device number 49 [ 569.493139][ T30] audit: type=1400 audit(1777863489.449:2677): avc: denied { write } for pid=13417 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 569.562859][ T5344] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 569.595673][ T5344] usb 5-1: USB disconnect, device number 52 [ 569.636825][T13280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 569.647401][ T6328] udevd[6328]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 569.663978][T13280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.694610][T13280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.704975][ T5618] Bluetooth: hci3: command tx timeout [ 569.710871][T13280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.718216][T13280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.724927][ T29] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 569.744462][T13280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 569.766223][ T29] usb 2-1: device descriptor read/8, error -71 [ 569.877404][T13280] hsr_slave_0: entered promiscuous mode [ 569.891940][T13280] hsr_slave_1: entered promiscuous mode [ 569.895013][ T29] usb usb2-port1: unable to enumerate USB device [ 569.949530][T13065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.273316][ T30] audit: type=1400 audit(1777863490.149:2678): avc: denied { create } for pid=13434 comm="syz.3.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 570.451389][ T30] audit: type=1400 audit(1777863490.409:2679): avc: denied { write } for pid=13422 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 570.946832][ T30] audit: type=1400 audit(1777863490.909:2680): avc: denied { setopt } for pid=13434 comm="syz.3.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 570.994570][ T30] audit: type=1400 audit(1777863490.909:2681): avc: denied { write } for pid=13447 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.430235][T13065] veth0_vlan: entered promiscuous mode [ 572.506730][T13065] veth1_vlan: entered promiscuous mode [ 572.983362][T13065] veth0_macvtap: entered promiscuous mode [ 573.015433][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 573.015452][ T30] audit: type=1400 audit(1777863492.969:2689): avc: denied { relabelfrom } for pid=13480 comm="syz.1.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 573.080307][T13065] veth1_macvtap: entered promiscuous mode [ 573.099978][ T30] audit: type=1400 audit(1777863493.009:2690): avc: denied { relabelto } for pid=13480 comm="syz.1.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 573.146008][T13065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.405686][ T30] audit: type=1400 audit(1777863493.329:2691): avc: denied { read write } for pid=13486 comm="syz.3.1458" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 573.601953][ T31] INFO: task syz.7.1035:10603 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 573.687883][ T30] audit: type=1400 audit(1777863493.329:2692): avc: denied { open } for pid=13486 comm="syz.3.1458" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 573.740426][ T31] Tainted: G L syzkaller #0 [ 573.824544][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.856291][ T31] task:syz.7.1035 state:D stack:27520 pid:10603 tgid:10597 ppid:9437 task_flags:0x400040 flags:0x00080002 [ 573.893272][ T30] audit: type=1400 audit(1777863493.349:2693): avc: denied { mount } for pid=13486 comm="syz.3.1458" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 573.938229][ T31] Call Trace: [ 573.953827][ T31] [ 573.969074][ T31] __schedule+0x10e9/0x6820 [ 573.991811][ T31] ? __pfx___schedule+0x10/0x10 [ 574.071019][ T31] ? find_held_lock+0x2b/0x80 [ 574.076224][ T30] audit: type=1400 audit(1777863493.549:2694): avc: denied { shutdown } for pid=13486 comm="syz.3.1458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 574.102112][ T31] ? schedule+0x2bf/0x390 [ 574.113429][ T31] schedule+0xdd/0x390 [ 574.125275][ T31] schedule_preempt_disabled+0x13/0x30 [ 574.137577][ T31] __mutex_lock+0xced/0x1b10 [ 574.150669][ T30] audit: type=1400 audit(1777863493.619:2695): avc: denied { mount } for pid=13486 comm="syz.3.1458" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 574.173223][ T31] ? sync_bdevs+0x153/0x480 [ 574.184032][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 574.199660][ T31] ? irqentry_exit+0x246/0x790 [ 574.210079][ T31] ? iput.part.0+0x1a0/0xf50 [ 574.227304][ T31] ? sync_bdevs+0x153/0x480 [ 574.237068][ T30] audit: type=1400 audit(1777863493.629:2696): avc: denied { write } for pid=5596 comm="syz-executor" path="pipe:[4683]" dev="pipefs" ino=4683 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 574.261621][ T31] sync_bdevs+0x153/0x480 [ 574.314361][ T31] ksys_sync+0xb0/0xf0 [ 574.318634][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 574.323535][ T31] ? rcu_is_watching+0x12/0xc0 [ 574.328451][ T31] ? do_syscall_64+0x90/0xf80 [ 574.333394][ T30] audit: type=1400 audit(1777863494.269:2697): avc: denied { write } for pid=13481 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 574.356746][ T31] __do_sys_sync+0xe/0x20 [ 574.361154][ T31] do_syscall_64+0x10b/0xf80 [ 574.365876][ T31] ? clear_bhb_loop+0x40/0x90 [ 574.370664][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.376733][ T31] RIP: 0033:0x7f943499cdd9 [ 574.381663][ T30] audit: type=1400 audit(1777863494.339:2698): avc: denied { write } for pid=13500 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 574.403807][ T31] RSP: 002b:00007f9435864028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 574.412334][ T31] RAX: ffffffffffffffda RBX: 00007f9434c16090 RCX: 00007f943499cdd9 [ 574.421599][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 574.430399][ T31] RBP: 00007f9434c16090 R08: 0000000000000000 R09: 0000000000000000 [ 574.438475][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 574.446546][ T31] R13: 00007f9434c16128 R14: 00007f9434c16090 R15: 00007ffed9eb5a38 [ 574.454569][ T31] [ 574.501174][ T31] [ 574.501174][ T31] Showing all locks held in the system: [ 574.524985][ T31] 3 locks held by kworker/0:1/10: [ 574.544064][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 574.564292][ T31] 3 locks held by kworker/1:1/29: [ 574.588064][ T31] #0: ffff88813fe5b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 574.605312][ T5273] 8021q: adding VLAN 0 to HW filter on device eth10 [ 574.608212][ T31] #1: ffffc90000a47d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x973/0x1980 [ 574.622213][ T31] #2: ffffffff8e7f1028 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 574.690524][ T31] 1 lock held by khungtaskd/31: [ 574.695808][ T31] #0: ffffffff8e7e54e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 574.706118][ T31] 2 locks held by getty/5370: [ 574.710834][ T31] #0: ffff88803352c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 574.721039][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 574.736610][ T31] 3 locks held by kworker/1:6/5734: [ 574.741969][ T31] #0: ffff88813fe5b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12d6/0x1980 [ 574.753054][ T31] #1: ffff8880b8524648 (psi_seq){-.-.}-{0:0}, at: __schedule+0x2d69/0x6820 [ 574.763438][ T31] #2: ffff88805d48b250 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1b8/0x63b0 [ 574.777920][ T31] 1 lock held by udevd/6347: [ 574.782566][ T31] #0: ffff888027e12350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 574.801117][ T31] 1 lock held by syz.7.1035/10603: [ 574.811455][ T31] #0: ffff888027e12350 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x153/0x480 [ 574.821307][ T31] 2 locks held by syz-executor/11131: [ 574.827569][ T31] #0: ffff8880841d0ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 574.837685][ T31] #1: ffff8880841d00b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 574.850233][ T31] 4 locks held by syz-executor/13065: [ 574.856089][ T31] #0: ffff88802b150ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0xb0 [ 574.867265][ T31] #1: ffff88802b1500b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x35c/0x1240 [ 574.878095][ T31] #2: ffffffff90891800 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x280 [ 574.892527][ T31] #3: ffff8880299712f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x95/0x710 [ 574.902573][ T31] 1 lock held by syz.3.1458/13493: [ 574.908202][ T31] #0: ffffffff8e7f1028 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 574.918548][ T31] 1 lock held by cmp/13512: [ 574.923156][ T31] [ 575.115379][ T31] ============================================= [ 575.115379][ T31] [ 575.134849][ T31] NMI backtrace for cpu 1 [ 575.134871][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 575.134896][ T31] Tainted: [L]=SOFTLOCKUP [ 575.134902][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 575.134912][ T31] Call Trace: [ 575.134918][ T31] [ 575.134925][ T31] dump_stack_lvl+0x100/0x190 [ 575.134951][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 575.134976][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 575.135000][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 575.135032][ T31] sys_info+0x141/0x190 [ 575.135055][ T31] watchdog+0xcb1/0x1030 [ 575.135083][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 575.135103][ T31] ? __pfx_watchdog+0x10/0x10 [ 575.135124][ T31] ? __kthread_parkme+0x18c/0x230 [ 575.135147][ T31] ? kthread+0x13a/0x450 [ 575.135166][ T31] ? __pfx_watchdog+0x10/0x10 [ 575.135185][ T31] kthread+0x370/0x450 [ 575.135205][ T31] ? __pfx_kthread+0x10/0x10 [ 575.135227][ T31] ret_from_fork+0x72b/0xd50 [ 575.135251][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 575.135274][ T31] ? __switch_to+0x800/0x1100 [ 575.135301][ T31] ? __pfx_kthread+0x10/0x10 [ 575.135324][ T31] ret_from_fork_asm+0x1a/0x30 [ 575.135359][ T31] [ 575.135366][ T31] Sending NMI from CPU 1 to CPUs 0: [ 575.268872][ C0] NMI backtrace for cpu 0 [ 575.268892][ C0] CPU: 0 UID: 0 PID: 13441 Comm: vhost-13440 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.268913][ C0] Tainted: [L]=SOFTLOCKUP [ 575.268919][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 575.268927][ C0] RIP: 0010:debug_check_no_obj_freed+0x210/0x630 [ 575.268951][ C0] Code: 00 00 48 89 c2 31 f6 49 89 df 4c 89 74 24 28 48 c1 ea 03 89 f3 42 80 3c 22 00 0f 85 dd 00 00 00 48 8d 78 18 83 c3 01 4c 8b 30 <48> 89 fa 48 c1 ea 03 42 80 3c 22 00 0f 85 27 03 00 00 48 8b 50 18 [ 575.268965][ C0] RSP: 0018:ffffc90003d77980 EFLAGS: 00000006 [ 575.268978][ C0] RAX: ffff888021375118 RBX: 0000000000000005 RCX: ffffffff81e4c478 [ 575.268988][ C0] RDX: 1ffff1100426ea23 RSI: 0000000000000000 RDI: ffff888021375130 [ 575.268997][ C0] RBP: ffffc90003d77ab0 R08: 0000000000000001 R09: fffff520007aef1e [ 575.269006][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: dffffc0000000000 [ 575.269014][ C0] R13: ffffc90005699000 R14: 0000000000000000 R15: ffffc90005a99000 [ 575.269024][ C0] FS: 0000000000000000(0000) GS:ffff888124376000(0000) knlGS:0000000000000000 [ 575.269039][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 575.269051][ C0] CR2: 00007ffe00f25368 CR3: 000000007a0c3000 CR4: 00000000003526f0 [ 575.269061][ C0] Call Trace: [ 575.269067][ C0] [ 575.269076][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 575.269094][ C0] ? find_unlink_vmap_area+0x301/0x3f0 [ 575.269111][ C0] ? _raw_spin_unlock+0x28/0x50 [ 575.269126][ C0] ? find_unlink_vmap_area+0x306/0x3f0 [ 575.269140][ C0] remove_vm_area+0x1b0/0x390 [ 575.269156][ C0] ? __pfx_kcov_close+0x10/0x10 [ 575.269173][ C0] vfree+0x6f/0x8d0 [ 575.269188][ C0] ? kcov_close+0x2b/0x60 [ 575.269202][ C0] ? __pfx_kcov_close+0x10/0x10 [ 575.269215][ C0] ? rcu_is_watching+0x12/0xc0 [ 575.269253][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 575.269267][ C0] ? __pfx_kcov_close+0x10/0x10 [ 575.269282][ C0] ? __pfx_kcov_close+0x10/0x10 [ 575.269296][ C0] kcov_close+0x34/0x60 [ 575.269311][ C0] __fput+0x3ff/0xb50 [ 575.269333][ C0] task_work_run+0x150/0x240 [ 575.269351][ C0] ? __pfx_task_work_run+0x10/0x10 [ 575.269377][ C0] do_exit+0x8d2/0x2a60 [ 575.269393][ C0] ? __pfx_do_exit+0x10/0x10 [ 575.269406][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 575.269422][ C0] ? __pfx_vhost_worker_killed+0x10/0x10 [ 575.269442][ C0] vhost_task_fn+0x31a/0x430 [ 575.269461][ C0] ? __pfx_vhost_task_fn+0x10/0x10 [ 575.269480][ C0] ? ret_from_fork+0x79/0xd50 [ 575.269499][ C0] ? rcu_is_watching+0x12/0xc0 [ 575.269519][ C0] ? __pfx_vhost_task_fn+0x10/0x10 [ 575.269537][ C0] ret_from_fork+0x72b/0xd50 [ 575.269553][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 575.269571][ C0] ? __switch_to+0x800/0x1100 [ 575.269591][ C0] ? __pfx_vhost_task_fn+0x10/0x10 [ 575.269609][ C0] ret_from_fork_asm+0x1a/0x30 [ 575.269632][ C0] [ 575.805853][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 575.812746][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 575.823439][ T31] Tainted: [L]=SOFTLOCKUP [ 575.827774][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 575.837840][ T31] Call Trace: [ 575.841138][ T31] [ 575.844076][ T31] dump_stack_lvl+0x100/0x190 [ 575.848772][ T31] vpanic+0x552/0x970 [ 575.852766][ T31] ? __pfx_vpanic+0x10/0x10 [ 575.857284][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 575.863465][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 575.869638][ T31] panic+0xd1/0xe0 [ 575.873375][ T31] ? __pfx_panic+0x10/0x10 [ 575.877777][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 575.883919][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 575.890059][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 575.896203][ T31] ? watchdog.cold+0x1ec/0x234 [ 575.900949][ T31] ? watchdog+0xcc1/0x1030 [ 575.905353][ T31] watchdog.cold+0x1fd/0x234 [ 575.909930][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 575.915723][ T31] ? __pfx_watchdog+0x10/0x10 [ 575.920390][ T31] ? __kthread_parkme+0x18c/0x230 [ 575.925401][ T31] ? kthread+0x13a/0x450 [ 575.929634][ T31] ? __pfx_watchdog+0x10/0x10 [ 575.934293][ T31] kthread+0x370/0x450 [ 575.938350][ T31] ? __pfx_kthread+0x10/0x10 [ 575.942924][ T31] ret_from_fork+0x72b/0xd50 [ 575.947502][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 575.952602][ T31] ? __switch_to+0x800/0x1100 [ 575.957268][ T31] ? __pfx_kthread+0x10/0x10 [ 575.961843][ T31] ret_from_fork_asm+0x1a/0x30 [ 575.966606][ T31] [ 575.970070][ T31] Kernel Offset: disabled [ 575.974373][ T31] Rebooting in 86400 seconds..