last executing test programs: 14m17.055843149s ago: executing program 32 (id=2582): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r3 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0xa8) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0xffffffffffffffff) 10m9.780577587s ago: executing program 0 (id=3200): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x205f, 0x1, 0x0, 0x851}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddbdf25080000000b0001006175746f"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_XRUN(r8, 0x4148, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x0, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r1, 0x7c65, 0x95f7, 0x1, 0x0, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) fchdir(r10) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 10m9.731331298s ago: executing program 0 (id=3201): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000020) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ptrace(0x10, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0xff}, 0x18, &(0x7f0000000340)={&(0x7f0000000280)="e2f9f47938d473cb857b1be39978cc1db64371b2f834b236828acb6e15ba29fef2c717736797952b6052a4f1312dfc62cef0f249be1b45d8b63ce71e093a7b7d36a062c6bc3eccecf4c9c163f97da659b0", 0x51}, 0x1, 0x0, 0x0, 0x800}, 0xe330984c9d8178f2) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000001840), 0x3b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="180008"], 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0) 10m9.00560884s ago: executing program 0 (id=3203): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002480), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000024c0)={0x2f, {0x7, 0x80000001, 0xffcb, 0xffffffff, 0x6, 0x7}}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000580)=ANY=[@ANYRES8=r0, @ANYBLOB="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", @ANYRESDEC=r0], 0x2a, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x4cb0b75bff2949f, 0x22}, 0x18) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000400)=0x1) r5 = socket$kcm(0x2b, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r8, 0x16, 0x0, @void}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0x17, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r5, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r5) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) request_key(&(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)='(.#$-@\x00', r1) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r11, 0xffffffffffffffff}) close(0x3) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f00000000c0)=0x402) ioctl$SYNC_IOC_FILE_INFO(r12, 0xc0383e04, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) add_key$user(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)="09c67c60c138be389f8614c9179974dd3e3e31a6442cb8f2e4a85adb3e7152df80b7e6b296e8c6640c045d97442fed57b668a72b7a21e231882e2b9bc907e197afb117483d8bb59270e6218ddcb8c5c28b99b5cf12a167f2981eb6d3a0264180c195cb4adbe987e86073b8d22c2478541654ce8eb89062f86c0e310d0620df7c956c1675b9f89197b8ccfa05f9e20645c6f8e41aba8e8cd217df764e44738b48320bc7d0d75f8ca47a35f4b3c9c5aee00d4e40abb98042a0867976bd283999ce7e3edc3ee6555914dd6b8241e9", 0xcd, r1) 10m7.850128338s ago: executing program 0 (id=3209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000514e5b8000000002000000008000100000000000800030001"], 0x20}, 0x1, 0x0, 0x0, 0xd0ff3f28}, 0x40) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x9901) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) 10m6.031788182s ago: executing program 0 (id=3214): mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x10001}}) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="01265f"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, 0x0, 0x0) setitimer(0x2, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) setrlimit(0x0, &(0x7f0000000040)={0x27, 0xfffffffffffffffc}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x2e, 0xf, [0xf68f, 0x6, 0x9, 0x1ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0x102, 0x101, 0x7, 0x200, 0x3d, 0x5e, 0x1000, 0xffff, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x7ffffffa, 0xd, 0xe9c4, 0xcd8, 0x6e, 0x6, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x3, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x401, 0xeffff801, 0x2b, 0xa, 0x0, 0x7, 0x8, 0x5, 0x0, 0x6, 0x8, 0x1, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x5fffffd, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x400, 0x80000000, 0x8000, 0xc, 0x5, 0x2, 0x0, 0x2, 0x1, 0x80, 0x4, 0x1, 0x0, 0xd, 0x2000006, 0x7, 0x1, 0x10, 0x1, 0xfffffffc, 0x12, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x3, 0x4, 0x1, 0xa, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x6, 0x5, 0x7fff, 0x38, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x44b3, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x800, 0x3, 0x1, 0xfffffffa]}}) r5 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) readv(r5, &(0x7f0000000840)=[{&(0x7f0000000480)=""/149, 0x95}, {&(0x7f00000005c0)=""/155, 0x9b}, {&(0x7f0000000680)=""/30, 0x1e}, {&(0x7f00000006c0)=""/239, 0xef}, {&(0x7f00000007c0)=""/116, 0x74}], 0x5) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x2400c0c4) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 10m4.911714207s ago: executing program 0 (id=3219): r0 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000011c0)={0x8000101c}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) r1 = getpid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = userfaultfd(0x1) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = dup2(r6, r6) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) r8 = syz_pidfd_open(r1, 0x0) setns(r8, 0x24020000) r9 = syz_pidfd_open(0x0, 0x0) setns(r9, 0x24020000) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)) 9m48.068761373s ago: executing program 33 (id=3219): r0 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000011c0)={0x8000101c}) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) r1 = getpid() r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r5 = userfaultfd(0x1) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) r7 = dup2(r6, r6) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r7, &(0x7f00000063c0)={0x2020}, 0x2020) r8 = syz_pidfd_open(r1, 0x0) setns(r8, 0x24020000) r9 = syz_pidfd_open(0x0, 0x0) setns(r9, 0x24020000) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080)) 8m26.34366633s ago: executing program 3 (id=3456): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0xffffffff}, 0x10) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r1, 0xc0305710, &(0x7f00000001c0)={0x1, 0x7e, 0x22, 0x0, 0x407}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xe8902, 0x0) read$midi(r1, 0x0, 0x3b) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000500)=@generic={0x0}, 0x18) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) r3 = fsmount(r1, 0x0, 0xf3) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0xd8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, &(0x7f0000000380), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1f}, @local, 0xffffffff, 0x71eca90076704270, 'nr0\x00', 'caif0\x00', {0xff}, {0xff}, 0x33, 0x2, 0x18}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x7, 0x670a, 0xd, 'snmp\x00', 'syz0\x00', {0x7}}}}, {{@uncond, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0xa}}, @common=@set={{0x40}, {{0x2, [0x3, 0x4], 0x0, 0x5}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x7, 0x0, 0x200, '\x00', 'syz1\x00', {0x3ba}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x4180, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000300)=0x6e) 8m24.172689634s ago: executing program 3 (id=3460): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x6000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0xb2, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xd, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xe2, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x9, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0x1, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x6, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x4, 0x0, 0x1]}) close(0x5) close(0x4) r3 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) socket$nl_route(0x10, 0x3, 0x0) 8m20.815524432s ago: executing program 3 (id=3467): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x200000000000002, 0x300) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x4014783a, 0x4006}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0xf) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000100)=0x30) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f00000003c0), &(0x7f0000000400)=0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000480)=0x8, 0x4) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 8m10.550266763s ago: executing program 3 (id=3481): r0 = socket$unix(0x1, 0x5, 0x0) symlink(&(0x7f0000000280)='.\x02\x00', &(0x7f00000002c0)='.\x02\x00') socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6d71b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600}, 0x94) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000075c0)={@local, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd432, 0x40, 0x409, 0x0, 0xa, 0x1}) unshare(0x62020600) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x17f) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x14, r5, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', 0x0}) 8m8.356071995s ago: executing program 3 (id=3484): mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, 0x10001}}) syz_usb_connect(0x3, 0x36, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="01265f"], 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, 0x0, 0x0) setitimer(0x2, &(0x7f0000000580)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) setrlimit(0x0, &(0x7f0000000040)={0x27, 0xfffffffffffffffc}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x2e, 0xf, [0xf68f, 0x6, 0x9, 0x1ff, 0x0, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0x102, 0x101, 0x7, 0x200, 0x3d, 0x5e, 0x1000, 0xffff, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x7ffffffa, 0xd, 0xe9c4, 0xcd8, 0x6e, 0x6, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x3, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x401, 0xeffff801, 0x2b, 0xa, 0x0, 0x7, 0x8, 0x5, 0x0, 0x6, 0x8, 0x1, 0xff, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x5fffffd, 0xd1, 0xf, 0x4, 0xa, 0x0, 0x400, 0x80000000, 0x8000, 0xc, 0x5, 0x2, 0x0, 0x2, 0x1, 0x80, 0x4, 0x1, 0x0, 0xd, 0x2000006, 0x7, 0x1, 0x10, 0x1, 0xfffffffc, 0x12, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x3, 0x4, 0x1, 0xa, 0x6, 0x7fff, 0x1, 0x704, 0x33e4, 0x6, 0x5, 0x7fff, 0x38, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x44b3, 0x9, 0xe, 0x81, 0x0, 0x4, 0x5, 0x5, 0x800, 0x3, 0x1, 0xfffffffa]}}) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r4, &(0x7f0000000840)=[{&(0x7f0000000480)=""/149, 0x95}, {&(0x7f00000005c0)=""/155, 0x9b}, {&(0x7f0000000680)=""/30, 0x1e}, {&(0x7f00000006c0)=""/239, 0xef}, {&(0x7f00000007c0)=""/116, 0x74}], 0x5) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x2400c0c4) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 8m7.270082584s ago: executing program 3 (id=3489): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x38, 0x48, 0xe4945d2eb074039d, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast2={0xff, 0x5}}]}, 0x38}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000002c0)={0x1, 0x0, [{0xd, 0xffffffff, 0x4, 0x8003}]}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x3) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x80\x00') r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_emit_ethernet(0xbe, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) write$binfmt_script(r6, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86"}, 0x68) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) unshare(0xa000080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 7m50.654546023s ago: executing program 34 (id=3489): syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newaddrlabel={0x38, 0x48, 0xe4945d2eb074039d, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast2={0xff, 0x5}}]}, 0x38}}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000002c0)={0x1, 0x0, [{0xd, 0xffffffff, 0x4, 0x8003}]}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x3) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x80\x00') r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) syz_emit_ethernet(0xbe, &(0x7f0000001a40)={@random="0f539af21094", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x48, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8}]}]}}}}}}}, 0x0) write$binfmt_script(r6, &(0x7f00000002c0)={'#! ', './file0', [], 0xa, "1f410e2852ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bd030000005a3c7c04055f1f70e4064d46b2bb9e5100d446bb6afb2c0fc07b58f4a9c1006a0b6c05639e23ec12979ff9b48ca61e6dec58682449c75d86"}, 0x68) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) unshare(0xa000080) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 6m38.669007264s ago: executing program 7 (id=3653): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x1f, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa2b0011424203"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) unshare(0x2c020400) r2 = semget(0x1, 0x1, 0x39c) semop(r2, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1) syz_usb_connect$uac3(0x0, 0xa0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) futex(0x0, 0xb, 0x1, 0x0, 0x0, 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000140)=[0x6]) unshare(0x40400) r3 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(r3, 0x10c, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x28, r5, 0x921, 0x0, 0x4, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_TTL={0x5, 0x6, 0xc4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000841}, 0x4000) 6m35.049715936s ago: executing program 7 (id=3661): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0xfffff000, 0x2000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f040, 0x2000}) get_mempolicy(&(0x7f00000001c0), 0x0, 0x481, &(0x7f000000d000/0x4000)=nil, 0x3) r2 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) r3 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000080)={0x1, 0x6, 0x7, &(0x7f0000000040)={0x17, "81054084c89ea7f77d040b0000000000000000000000000000f000"}}) capset(&(0x7f0000000040)={0x19980330}, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000600)={0x0, 0x35c3, 0x4000, 0x3, 0x11b}, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x16ab, 0x40, 0x0, 0x203}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3782, 0x0, 0x1, 0x35c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd86d, 0x400, 0x3, 0x2fb}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x18d7, 0x80404, 0x3, 0x118}}], 0x4, &(0x7f0000001b80)={0x2e, 0x4, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, 0x0, '\x00', {0x4, 0x2188, 0x0, &(0x7f0000004200)=@buf_1k="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"}}, &(0x7f0000001c00)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000001c40)=[0xffffffff, 0xe1], 0x2) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280), 0x101280, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r6, 0xc0040d07, &(0x7f0000000040)=0x121) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x64) ioctl$MEDIA_REQUEST_IOC_REINIT(0xffffffffffffffff, 0x7c81, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r8, 0x18000000000002a0, 0x3d, 0x0, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da192", 0x0, 0x100, 0x60000000, 0x0, 0x91, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110"}, 0x50) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getpid() 6m32.609139397s ago: executing program 7 (id=3664): rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000480)={{r0}, "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"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0xffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_usbip_server_init(0x5) writev(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x68, {0x2, 0x4e20, @rand_addr=0x64010101}}) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffffc38c5162, 0x0, 0x40, 0x8, 0x3, 0x0, 0x0, 0x4, 0x8}}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r3, @ANYBLOB="000000e6ffffff", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x400c800}, 0x200480c4) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x2000000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) 6m27.929861823s ago: executing program 7 (id=3672): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x4001, 0x3, 0x380, 0x1e8, 0xb, 0x148, 0x0, 0x148, 0x2e8, 0x240, 0x240, 0x2e8, 0x215, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x180, 0x1e8, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x2, 0xb, [0x4e20, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e23], [0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "d40b98e613e5c0d53fa5668bfbd8659b9ba9affcbed065733d0012e401764f592fc2c2bfb0e657e39980dd3655cfdfebceab664ab18605949120401237b982613cbdde69fbfbd40e9505ea3909a03f93f0be8cd9870b50e1d8a655f0a2cc7dba129d9af19184e11feeab1ddd11aa07abfef2f0ace242261fac91893e25989bb2", 0x4, 0x8a119efdab096be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x3, 0x8, 0x1, '\x00', 'syz0\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffff}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x8}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044004}, 0x40010) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r10, 0x4601, &(0x7f0000000040)={0x191, 0x240, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB], 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) 6m25.394162467s ago: executing program 7 (id=3674): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi4\x00', 0x200, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000080)=[0x0, 0x8, 0x5, 0x4, 0x4, 0xffffdffc, 0x809, 0x40000003, 0x42, 0x7, 0xfffffffa, 0x8, 0x6, 0x0, 0x1], 0x1, 0x20000001}) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsetxattr(r2, &(0x7f0000000200)=@known='user.incfs.id\x00', &(0x7f0000000280)='+.%+\x00', 0x5, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000180)=0x6f) r6 = dup2(r5, r5) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r6, &(0x7f0000002780)={0x2020}, 0x2020) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x0, 0xe}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80) 6m19.739679451s ago: executing program 7 (id=3685): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) read$msr(r0, &(0x7f0000000180)=""/90, 0x5a) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r2, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) dup3(r4, r3, 0x80000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4006, r5, 0x0}]) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) socket(0x10, 0x3, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') symlinkat(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f0000000100)='./control\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4, 0x70bd26, 0x40000, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x71, "99103b7a409ae415b78edf343aaa4fbf"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6m3.157324236s ago: executing program 35 (id=3685): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) read$msr(r0, &(0x7f0000000180)=""/90, 0x5a) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r2, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) dup3(r4, r3, 0x80000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r6, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x4006, r5, 0x0}]) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) socket(0x10, 0x3, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') symlinkat(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r7, &(0x7f0000000100)='./control\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4, 0x70bd26, 0x40000, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x71, "99103b7a409ae415b78edf343aaa4fbf"}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m48.734859274s ago: executing program 5 (id=4054): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0x0, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x80) r0 = fsopen(&(0x7f0000002380)='ecryptfs\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x20) ioctl$BLKPG(r1, 0xc0184d16, &(0x7f0000000580)={0x2, 0x300, 0x0, 0x0}) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000240)) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbM:', 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000180)={&(0x7f0000000980)={{@my=0x0}, {@hyper, 0x1}, 0x400, "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"}, 0x418, 0x2001}) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0xc, 0x4e}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0x3, 0x1}}, 0x44) syz_open_procfs(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000001b340)={0x2020}, 0x2020) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) chdir(0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) 2m47.842285463s ago: executing program 5 (id=4056): sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="f400005d", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf250f000000080001"], 0xf4}, 0x1, 0x0, 0x0, 0x94cd6bcfe2ea64a9}, 0x40010) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, 0x0, 0xa10, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff7}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'nl80211\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r3, 0x1, 0x0) r6 = userfaultfd(0x80801) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, r6, 0x0) setfsuid(0xee00) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$UFFDIO_COPY(r6, 0xc028aa03, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf252000000004002d8008000300", @ANYBLOB="24002d8005000400010000000500010007000000080003000400000008000200020000000c000600010000"], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 2m46.745171699s ago: executing program 5 (id=4058): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfffdffe}, {0x80000006, 0x9, 0xd, 0x7fff}]}, 0x10) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x58010}, 0x800) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r3, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2572], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r7 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r7, 0x0, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r5, r4}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000300)={r8}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000090}, 0x2004400d) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001240)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb68b, 0x70bd2a, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x34}}, 0x0) 2m46.222391357s ago: executing program 5 (id=4061): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') lseek(r0, 0x4, 0x1) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, &(0x7f00000003c0)={{}, "1b54d5a551a797ef1f53139137b5fa52c2d4b5d163590ebb22ec8ad922bab7cc068deb3414bdb270b1ea539538bf402cbc5bbc0f00a15a2b00a33eaf6fc3f0e6b905222260965a295b71ec09e72b10f3753636850835e8e606f9ae43756d035b8f7e0b585a33c5d2ba8c08cf6563b7908f74470aa1cada11a6b34fbc9235f5163dbb0465090f24551f9580edfb65e0a9c7127c58c08a8ac488bc9c49dbbf29a82bc295a6b900ab841813f8021bf7c98d1fe12dc1298ef3ac20c615309c2566ce484e682faf990a13b5c4e037fc551c9b801cde50f7070674aad679c73dba510456500caa5bad424e598b52acec114ab774e3ca3502dbd587851636d1194a853bc89701cd7aeb5b610e121d4290deddf98c58d9d0431c8c502a1be180881a5d8c8fb2143fc066da8c587523f4ee2f9d2659994d5384b9ad80bf0d40f7437041436b5bc9784ceaf22d8e2df3f568fe3e05df3da1945b834c3e2a03abd018dbdbc411b1f5c860f421599de90bbe958c4aae7d1d68df37e19b0063cb481e7e6409ad85b089034dfb9ec104f82352367e1ed24d064573bc011e2f28368afb46a1b20efe3dee88f9ba07f00121915b43fa93b883dce1d0f43a96f553398324607c9be1aec056a2e945f3eb6308e9c0140702e4d6157dedee6bc3650fb472767a2edf4e51c1095ab435af42c9da0cc295de628ca6d94099c119a909bac2edc1a8da1311efab3b5bf118fe8c37e2ed4f0a228d18a5bf22437aabc7010bf91bd210bf942039ede31690346f2d1726f09610ad0fd504f2f57a0af105f7aaf3f3da1fc61b17fcc4970d5e3925bc54d3e96f4c66c9a428a73de1f46f68eb19ce2027cde59c5a5ab5e3f23bf3736b913d94e385132d9d98c78258226fb0434527c22d794c59503b69517c9cea514debb66081debe91c50842bf89a4a7279e6442a793152764d8d77029a609162b7aa1144072265694274434c3f7bde1a10deaaf6406c9475522368f353b03b90c50815b09e987180c2b55f6cbf86cc356999fb3c57cf60a1d409fdb7b87fc13c1e3fa8fa16ddc5bd7a760cd1acae53ffa37ff6523e782be868e4f3c7ff9996c9ec21cb2c408b8716732f21d6d64eae5c41f534d138a7570f0d6660eefd1dd84be7dc6ec3117282c5b153c183ddb1e97a9190391ee2d5161b26525109d50274d3f5f83fc9fe0ec697d8ffac7f999e833c1abd38ba403bad2a1913c2975b7cd4fd077fd3711b105aade28b23385270fc8449d8673bd1cfde29fbd4fad0642bffcfb08b9691cb05c1773b2e988bcd6364a6b115a2bada4f21f01fd21d2bb0c7396d5b5cc58381092542c44167804842a5655557d4ce5584d011ba6d839fd24ecde3a3ef7f56ef99313f5d33f9e6e6d1c9eba6f1cca7a874e91c592dcdef919f30b845a92c206fcfa14dc6a46e54e37891a42e91a858be80e8e69d5e54e551385ed2ffb5890c167e21576096b300c74343062f1fca0d62485545316f349bf56aaded028283d0d27917754c7ece4fbdd3da1e9cd323862ac45087aacd74673f210cdda72f40f53830bb4ee593f65aa5e6ad056f92170be48baff7b6d3b3623ebb2e7c0f88ec0dbaf2547ea47515e6def629550dc70190a21719acb1815954a165c7ff55bc47709ceca0cb8a4af45271033c4f3a6fcac433b77772e707680961a0f5c07bfe4439bfa0abcc429a55eb3af7bdc82ef84ec7f05f62eae87f9f96b40789ec1e692122f6a6b7b9eb46d5b921f939c228066b922e746ec63303c911b0b576eeba5267c4c5945df57ced59b689dc11ba9e99d3a561c235fecb4db6f8b584eb495e3fe5af7b13fa3b5ae0aa84613f426fa19abbd978bae3838ad99a06c102e4080e34d05895e3d927fa80cbe412c1a017870dceeb90331afb8f4a2676cf7f0fe84e45dd4a63f071dafdb7af11058310a04dad817f7d64192423d95bf5f43cb099373ace57976ba22316d8ba89a0dd176071346a14b501f151e515540304a73211216c8a131324eccb00830537068ad0599f8edb2a45a307d72deb54c964e5d732376a39c8d2fa5f4072837701a7e4ed008da4b894656cdac4d00531a1581fe4c538026959e84b0d55761ba7f217b08bc3b4859502e2d4d0b38ee61739e511c8ea5dbe9836a7fffba9e4db9f9675255c27f46d1d3213f7847dd78a090a8db3497d07641d54ae8704fa4022ddff4b6aea30a1230e3b345b35a498ee807cc32f22f65f20e19b62a9ea30b784c070d88aee8b09caec78cd7ef02245c8705d835379f5c0a32e2eab4180e1afed9f09ff51232e89f6ae8bcb4cd71f29429d005954660065c6a997edaebb89cad6da23393732dfa8f13830afeca0d3925b64bff45eca19e2f5153c8ddc874dd0a35501d6eeb5def454f2b4d773bc979874ea345813588778d084136b00f1ed6b1435fab011fb36d44e761e4482f2062435f5a5ccc660ec9969b26386b9db7f39e5fc10978164f28c39930b70f1f7bed6df705967dfafd1800bf621ff93a05afe8348884d2161035a1882cbfe1f72d2a15cd4f1377ae5c8263896cce2bfb3d7082d6544024b7b6865563c0db40171fd79efc99206c546f899c245f4d1fc0520eb7ea7b275fcf15afccac3101fd1702d4480a671264f79a8dd619fb21d2b747d1f9f8efa29950e188f94488ff0d1405c2f56e6549edaaa716e6f9619afc588320fd3d70e3f9bc417ab11902242d122465354dd9b261d3f41147949ce147914ab645e4f878194664117a1e0a57fa8c80687f72a1480e6c70414c19f56a5594eaa4f4795ffc778c3a624fa4ff177742515b6b70a3a2760ab226192960d79e6b618eeeecf9682d436d220f37e7765881bc0849de900c7d992966f165cb6306dccf831ec1686d448294f605b364bd5076ade36435cad7e1453987d83e165c64d6fe566185e8ce6147b737cdecd0c29bd7493ec49debd53e700b37acea01458b156f80921e1d14292890b8e3ed538d9b2af941702b88cd44ee74f0984f16b000b7b5508d4172ba682776e15eaa3a3a991994bf718aa0cbd7312157cacf8e716f5db907f0d5621bf791b4b946c9ada64d56a212080509a2d629213388cad02dc3d01e9cb23d5b62614a8490bf0f2174d14ab5a63d4bbc2dafb9a26e445d08bf7009a77e417011975a405410ac35d6aa37c7877fcec47ef442d79296cde923d90330dffec90ea43616a304423a9d345fa1aca4864539ec3f54cfe29d736300c43ecd5ec73e99fcfef8da886eb51cb3429ecf5656d2c207e9a3ccfa21fe47e915cc6e4d5f27c3e1cbf695b27d6e39225e8c853942b5bbe2b53470104dd2f3253c6053cbe79d85a764eb8e98cfd0dda211640703dc7797b59b0f27409177450d4dc7a0dae275f9af5ae354231679c50ef8a72de1ca1edc55e969c5aada6bcb786536d78a1795c6cac4828db776ba8baacf888e34570489f5cf70671a50dea617cc679f6559fc842c6972ebd9eddfbacbce45c6a466a61950c059fcd75aaabb30f32b191baf9e2ded567e91419bb2cd5c16d375cc9ceda6baff4101573a0a0ecfd202bbe784bc3fa878b0835143b0d00e51ec2796144ca2c0060a0ab54cd7d67f7cf0ec62e96a3db10685b8e15dbb7ebafb51be35de39dfe10a6b681cd587ab8608d689744ad031be7e75dd2e4ac5fe5e61581ecab9d0ca6657d5a9bccca7ce10c1c9ed14272eaf240ff8a1921f84b96a7dbd1d5b14c62e9124fd14f489349b40a8ee348b219de004f91ea31d4644dc035dc375843e173fd090a01ddbfb548f2273cfa684435006aab73020fc78c73b8e133d7f154eb4819b09348ec46461bcd136e5f70fc676229e1ff8011ffd3e3233b2f760e0d58485517057e6dc723df66acc85fa1632a818d4b9e8d0dd3604e4f5ca0cbfd88d3a3ff8c5879fe80c6b413fcc738d7dbc7150c2b190f5bb9d04b7b51d29a5cdf089c6e27ea1d2b6da0e81fdd2210ac44852a80421508e9b755cf84a51c6a693a034276a61bf272726bac43d2b04f83d774f4b763c4bc079c90a5d56becf5d09430e4e2601560874fc34e9d86191371c94c774007dfbdaebf669dc2db26d6d7359611bee78dfdb3e0583857ea84a1ce49aaec32c89ff8682aaa6e8dede78448b5de4a5c9a8c619c51b8d2df1d0cc10d4ab02f80bc725539a4a3476eeaff908e939ff32bcde27416dcf6cec77ef670867b3d45be58797cd5d954104ce353de8d4875e2bbdae46389297434b7ffb52d14256ce33df35c57bfc55384bee12fa67c5340ffd023d7e92aa48027c4a2ba197d76e5304047b523e16a3971511c85ba8e58145671f3319aa469a431b841cbc8efec974b62f54697ac09694da504298c6716b62a2685e1e28e845308deb766ae25632cd227de8f200c3daf417da11a0d0952a1e094ab83da2fb83d7da2f5879b7e2c682b7c6d685a84b25cc423bc489274c6936877b0b87b027c3cde8581e9ecf57de9613217331c138f9833e80cf6780fb1d7990cd97f21c5c0a562cf1b468ed8e5b8fa3233f85f5638b1aec8f49ee97c9a4766950e170e21f42184537b79c0d3018e92342b480b961f289d66a350cc21d2de1667fe39b8c57923181acbc6ac90a72676225db52647fd77447a94270d7105a969fc48052a17751e55bbfbeb97eaa153bb9b4325e7b0a7283919088abb6e68bf0ef0e380917a37860684cf6c06b6f5ba4e386173538a884cc77cd7b7d9d64834fc627873a45ecfd8cffa6d63daff91984365b502efb5fec2a2658f835426f9071c5e70588db0d2e1c33e34d9e1e8c077ae1bbdaadf940ff3a8cf758fd46a76b8c653567a93b8359a7c9145dce4d6f9e113ba9cb99232684bb17391fc4316f8c060174e09b59e7f3bdc16984c8a4f84b69f0cc19576be56768acebc11271319da9b5a47a47faf19774f24e20800b2b901977e64cbc5cd8891f46f7a42510679233d79c2190bebfe477077fb552f15dcbf00df07f6a1e36fd7a0f602500f527ee17310becf517800d056518755344831253a166ead3edebabc8d30ab8c7a2b7aa48f798db73cb4b765efb80f791126abbe7d576a50667ade47c2e9e8ade94f2cd876191cd50c7d0ecd04b72204cc0f433b62efbec03379b25497a12a03d03e408168674dae3d94461697551fa900db1c39575413a449e7fa5442dfb3ff683a0d26e9914d485f393831abfa9b4e7fc101c22bcb99fe269d21833f70cad2340b9d2417a99c7f382695611a78da4011a633caf83e966e05e33db0a98d20a555dcf1654b3a90abb53efbc4197056478f437b4546f8c2922931fbddaafb6d748cd75621894826efde31fa572776496747deefda5544bcee2c8b84222f8d7e6354d0fd65bbea5e39bc7298d2a6bc4c8128f50b6913b7091e158a29af994af070d1de9f97ba483d7ccf32f03f0ff8ba6c6f7baa0cd8aac1895d4bed44dc9318dbaae3f4b2167b912325df9df6529ea0853e9075a30ad3de331cf9f44347a8ee3f75d1a8ad27baf4d8d7a8881800838cb1ee81920c2cab9d256ee4bc8f2fafdfdb17698a1b2a3ae4b52e716df0e9023bbaa65df44b5f5b1490d2e785ffbe73a26524b7f5fe24a44f3e4cf675e17dacd4a5d1d593d089dcbc8c2536e947c699fc3e671aad50297897242ee8d500eeee67028e26449f8108e5603fb52294838f003ab2060c4198ad73565a5ecc687ee0c8525b86b869dc15f1c912367dbbdac9729c8e309f4fe1934e628cabb76038b7da08b2d9878c727d7fd4e802e9139152cd63a442df96c36b5b78bd3f0168c47b5301338ae027161f03f33a57c4e4a"}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0xfce1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x488, 0x4) sendto$inet(r1, 0x0, 0x0, 0x44800, &(0x7f00000002c0)={0x2, 0x4e21, @broadcast}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x8}}, 0x20) accept4(r4, &(0x7f0000003480)=@nfc_llcp, &(0x7f0000000280)=0x80, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x9, 0x0) getdents64(r0, 0xffffffffffffffff, 0x43) mount(0x0, 0x0, 0x0, 0x810004, 0x0) 2m44.718142024s ago: executing program 5 (id=4064): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom$inet6(r0, 0x0, 0x0, 0x2000, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000440)={0x7, 0x10001, 0x9}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={r1, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x84800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)) r4 = add_key(0x0, &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000e00)=@newtaction={0x18, 0x30, 0x12f, 0x3c, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4044840}, 0x44004) keyctl$get_persistent(0x16, 0x0, r4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40186f40, 0x0) 2m43.89493359s ago: executing program 5 (id=4067): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x61c7c039d0921a4e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000380)={0x0, 0x1}, 0x8}, 0x94) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1808c00, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526d", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000', @ANYRESDEC=0x0, @ANYBLOB=',grou']) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) epoll_pwait2(r6, &(0x7f0000000100)=[{}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44c", 0x7b}, {&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade90200e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689d85963bc5d8b114670c00f76cbdd72a662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9", 0xba}, {&(0x7f0000000e00)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71ab0700000091ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a3731968100b5b9c225ee76d73662a10af59f93b7f50c5a005378d810dac3ac9312da26cb4c44ebf7bb4b098bc4d0584c5c741a9943751d11d91fbe0e305cecfd39b655890f5dcef593cff8ff685f024ac3ee095b086b9fe6d8cd3c5864965b0f1a94317e1f17f688e19899f960556607116c67bfee", 0x121}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 2m26.406755931s ago: executing program 36 (id=4067): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x61c7c039d0921a4e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x3, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000380)={0x0, 0x1}, 0x8}, 0x94) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1808c00, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526d", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000', @ANYRESDEC=0x0, @ANYBLOB=',grou']) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) epoll_pwait2(r6, &(0x7f0000000100)=[{}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f00e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44c", 0x7b}, {&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade90200e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15", 0xad}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689d85963bc5d8b114670c00f76cbdd72a662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9", 0xba}, {&(0x7f0000000e00)="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", 0x121}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x1, {0x4e21}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) 1m2.328298849s ago: executing program 8 (id=4283): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) setsockopt(r0, 0x1, 0x4, &(0x7f0000000440)="d4aefde56a9e31d9289753bb70f128219a4acf18d08c9431373ac9da1a0d293b788be707c231902cb79ec7477e761a9343ca46e141ae66b37ba2fda4dbe25945f849aff6a20190f5b1798a2afbe872b1c1ae2849d6cae2e3cb032ef849ecd6cbe40cf5e13405234d872ee3f6bbbd227155428178211849e384faa7a79eec6e9d71370ac3b127ad90dd519a73a870b56eb919d384896c0c252b4a44d0b3b1aaae195ae1bbc21fd9c9dc12953bba1f6533f5a1af022ceef8b0e7050e9a8409a2cce8e1131a84449077ca7d6f625afc1c36c3fea0f19062360953baa89d01b89ddc6be2997faf9b882428a9d1b15d4c6eee9de8", 0xf2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 54.179655176s ago: executing program 8 (id=4312): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000018140118"], 0x20}, 0x1, 0x0, 0x0, 0x4000814}, 0x44810) 53.340232164s ago: executing program 8 (id=4315): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0xf5, @val=@uprobe_multi={0x0, 0x0}}, 0x40) 51.966832073s ago: executing program 8 (id=4316): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x140, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x33}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x10, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_thresh={0x8, 0xb, 0x23}]}, 0x140}}, 0x0) 51.497350847s ago: executing program 8 (id=4320): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000400)={{0x2, 0x4e21, @multicast2}, {0x6}, 0x8, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'rose0\x00'}) 51.330987358s ago: executing program 8 (id=4322): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) setsockopt(r0, 0x1, 0x4, &(0x7f0000000440)="d4aefde56a9e31d9289753bb70f128219a4acf18d08c9431373ac9da1a0d293b788be707c231902cb79ec7477e761a9343ca46e141ae66b37ba2fda4dbe25945f849aff6a20190f5b1798a2afbe872b1c1ae2849d6cae2e3cb032ef849ecd6cbe40cf5e13405234d872ee3f6bbbd227155428178211849e384faa7a79eec6e9d71370ac3b127ad90dd519a73a870b56eb919d384896c0c252b4a44d0b3b1aaae195ae1bbc21fd9c9dc12953bba1f6533f5a1af022ceef8b0e7050e9a8409a2cce8e1131a84449077ca7d6f625afc1c36c3fea0f19062360953baa89d01b89ddc6be2997faf9b882428a9d1b15d4c6eee9de8", 0xf2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 34.900731546s ago: executing program 37 (id=4322): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) setsockopt(r0, 0x1, 0x4, &(0x7f0000000440)="d4aefde56a9e31d9289753bb70f128219a4acf18d08c9431373ac9da1a0d293b788be707c231902cb79ec7477e761a9343ca46e141ae66b37ba2fda4dbe25945f849aff6a20190f5b1798a2afbe872b1c1ae2849d6cae2e3cb032ef849ecd6cbe40cf5e13405234d872ee3f6bbbd227155428178211849e384faa7a79eec6e9d71370ac3b127ad90dd519a73a870b56eb919d384896c0c252b4a44d0b3b1aaae195ae1bbc21fd9c9dc12953bba1f6533f5a1af022ceef8b0e7050e9a8409a2cce8e1131a84449077ca7d6f625afc1c36c3fea0f19062360953baa89d01b89ddc6be2997faf9b882428a9d1b15d4c6eee9de8", 0xf2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x8c, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 5.233268486s ago: executing program 9 (id=4565): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x4241, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7d, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x22, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x77, 0x6, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.890626314s ago: executing program 6 (id=4572): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x109000, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) 4.751209756s ago: executing program 6 (id=4574): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f00000194c0)={0x0, 0x0, &(0x7f0000019480)={&(0x7f0000019300)={0x38, 0x2, 0x9, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040080}, 0x400c0c0) 4.702999241s ago: executing program 6 (id=4577): r0 = syz_io_uring_setup(0xc4a, &(0x7f0000000500)={0x0, 0x63f4, 0x8, 0x0, 0x12}, &(0x7f00000000c0), &(0x7f00000002c0), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f0000001080), 0x1) 4.570197949s ago: executing program 6 (id=4579): r0 = socket(0x2, 0x2, 0x1) recvmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0xb, 0x0}, 0x120a2) 4.517194724s ago: executing program 6 (id=4581): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000080)={0x5, {0x0, 0x1, 0x8, 0x80000001}}) 4.439187729s ago: executing program 6 (id=4583): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x1, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x60) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f0000000100)="fbffffff", 0x4) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000000480)=""/4096, 0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_route(0x10, 0x3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@delchain={0x2c, 0x65, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0xf, 0x2}, {0xfff3, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 3.206845264s ago: executing program 2 (id=4592): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f00000000c0)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=0x0}}) 2.963483645s ago: executing program 2 (id=4594): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000010000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000080000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x205f, 0x1, 0x0, 0x851}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddb"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_XRUN(r8, 0x4148, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x0, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r1, 0x7c65, 0x95f7, 0x1, 0x0, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) fchdir(r10) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 2.949428615s ago: executing program 4 (id=4596): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x20, 0x18, 0x107, 0x70bd25, 0x25dfdbff, {0x13, 0x7c, 0x3f}, [@typed={0xc, 0xb8, 0x0, 0x0, @u64=0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040895}, 0x4) 2.821420582s ago: executing program 9 (id=4597): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0x50}}, 0x0) 2.670636817s ago: executing program 4 (id=4598): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x114, 0x2d, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@private0}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d16080600000000000000f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2.154409064s ago: executing program 9 (id=4599): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) 2.014309463s ago: executing program 2 (id=4601): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x24, 0x26, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x5, 0x3d, 0x0, 0x1, [@generic="ca"]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 2.001457114s ago: executing program 4 (id=4602): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000000008500000018000000850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.871036188s ago: executing program 9 (id=4603): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@hyper}) 1.787093465s ago: executing program 1 (id=4604): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x61, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x8}}, 0x14}}, 0x4000080) 1.748060397s ago: executing program 2 (id=4605): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e980d78ad62cee000000e5a73f1ab50787ff", 0x0, 0x78, 0x0, 0x2, 0x0, &(0x7f0000000740)="020c", 0x0}, 0x50) 1.70173625s ago: executing program 4 (id=4606): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 1.649083829s ago: executing program 9 (id=4607): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffb000/0x5000)=nil, 0x5000, 0x2) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x320, 0x18c, 0x203, 0x320, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x1, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000025c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x60) setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f0000000100)="fbffffff", 0x4) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000000480)=""/4096, 0x1000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$nl_route(0x10, 0x3, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=@delchain={0x2c, 0x65, 0x100, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0xf, 0x2}, {0xfff3, 0xfff2}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) 1.630228826s ago: executing program 1 (id=4608): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, 0x0) 1.456058592s ago: executing program 1 (id=4609): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x2fbc3ba3}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x200007e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) 1.432745531s ago: executing program 2 (id=4610): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e22, @empty}], 0x20) 1.379594851s ago: executing program 4 (id=4611): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="e0b9547ed387dbe9abc89b6f5bff", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.269067726s ago: executing program 9 (id=4612): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000010000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000080000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000180)={0x0, 0x205f, 0x1, 0x0, 0x851}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0, &(0x7f00000000c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002700090026bd7000fddb"], 0x20}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)) r8 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_XRUN(r8, 0x4148, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, 0x1403, 0xc23, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x40, 0x0, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r1, 0x7c65, 0x95f7, 0x1, 0x0, 0x0) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) fchdir(r10) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') 1.219017316s ago: executing program 1 (id=4613): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) 1.12130006s ago: executing program 2 (id=4614): shutdown(0xffffffffffffffff, 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x8d0) socket$nl_netfilter(0x10, 0x3, 0xc) flistxattr(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0xa, 0x28102) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0x1001, 0x8000000000004}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x0, 0xa000000, 0x0, 0x0, 0xfcff, 0x0}) 1.087122275s ago: executing program 1 (id=4615): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x3ff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$inet(0x2, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="0413"], 0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20000080) pipe(&(0x7f0000000080)) socket(0x10, 0x3, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000346000/0x2000)=nil, 0x2000, &(0x7f0000000240)='syz') socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') accept4(r2, 0x0, 0x0, 0x80000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@gettaction={0x20, 0x32, 0x6dd711a25f4cb68b, 0x70bd27, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x20}}, 0x4010) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRES16=r3, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESHEX=r4]) 762.972215ms ago: executing program 4 (id=4616): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x2000002, 0x2000) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000340)={0x0, 0x400000c, 0x1016}) 0s ago: executing program 1 (id=4617): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xa8}}, 0x20050800) kernel console output (not intermixed with test programs): adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1653.949297][T21959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1653.957983][T22174] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1653.994014][T22174] overlayfs: failed to set xattr on upper [ 1654.007953][T22174] overlayfs: ...falling back to redirect_dir=nofollow. [ 1654.021124][T22174] overlayfs: ...falling back to index=off. [ 1654.034447][T22174] overlayfs: ...falling back to uuid=null. [ 1654.049213][T22174] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1654.253237][ T29] audit: type=1400 audit(1782887897.835:2157): avc: denied { write } for pid=22167 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1654.273561][T21959] hsr_slave_0: entered promiscuous mode [ 1654.331688][T21959] hsr_slave_1: entered promiscuous mode [ 1654.377871][T21959] debugfs: 'hsr0' already exists in 'hsr' [ 1654.405834][T21959] Cannot create hsr debugfs directory [ 1654.413334][ T29] audit: type=1400 audit(1782887897.982:2158): avc: denied { write } for pid=22185 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1655.944504][ T29] audit: type=1326 audit(1782887898.748:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22186 comm="syz.5.3742" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f949e79de59 code=0x0 [ 1658.445503][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1658.473997][T22198] overlayfs: failed to clone upperpath [ 1658.621886][T22211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3743'. [ 1658.779690][T19842] bridge_slave_1: left allmulticast mode [ 1658.785626][T19842] bridge_slave_1: left promiscuous mode [ 1658.797749][T19842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1658.837245][T19842] bridge_slave_0: left allmulticast mode [ 1658.842891][T19842] bridge_slave_0: left promiscuous mode [ 1658.850315][T19842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1658.906114][T19842] vlan0: left allmulticast mode [ 1658.913050][T19842] geneve0: left allmulticast mode [ 1658.921513][T19842] bridge0: port 2(vlan0) entered disabled state [ 1658.944453][T19842] pimreg: left allmulticast mode [ 1659.257351][T19842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1659.277325][T19842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1659.299299][T19842] bond0 (unregistering): Released all slaves [ 1659.396807][T19842] smc: removing net device xfrm0 with user defined pnetid SYZ0 [ 1659.700950][T19842] team0: Port device geneve1 removed [ 1660.163161][T19842] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1660.181177][ T5778] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1660.240375][T19842] bond0 (unregistering): Released all slaves [ 1660.284805][T19842] bond1 (unregistering): (slave veth5): Releasing active interface [ 1660.296715][T19842] bond1 (unregistering): Released all slaves [ 1660.327521][T19842] bond2 (unregistering): Released all slaves [ 1660.365172][ T5778] usb 7-1: Using ep0 maxpacket: 32 [ 1660.380087][ T5778] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1660.402790][T22228] tc_dump_action: action bad kind [ 1660.424990][ T5778] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1660.479292][ T5778] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1662.424010][ T5778] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1662.435237][ T5778] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1662.443947][ T5778] usb 7-1: Product: syz [ 1662.449261][ T5778] usb 7-1: Manufacturer: syz [ 1662.454277][ T5778] usb 7-1: SerialNumber: syz [ 1662.469792][ T5778] usb 7-1: config 0 descriptor?? [ 1662.619618][ T5778] gs_usb 7-1:0.0: Couldn't send data format (err=-71) [ 1662.627217][ T5778] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -71 [ 1662.645335][ T5778] usb 7-1: USB disconnect, device number 11 [ 1663.009165][T22248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3753'. [ 1663.210198][T22248] hsr_slave_1 (unregistering): left promiscuous mode [ 1663.616340][ T189] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1663.822442][ T189] usb 7-1: Using ep0 maxpacket: 16 [ 1663.837088][ T189] usb 7-1: config 0 has an invalid interface number: 246 but max is 0 [ 1663.859788][ T189] usb 7-1: config 0 has no interface number 0 [ 1663.879252][ T189] usb 7-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 1663.916764][ T189] usb 7-1: config 0 interface 246 has no altsetting 0 [ 1664.083127][ T189] usb 7-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 1664.514530][T22266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3755'. [ 1664.552766][T22270] kAFS: unable to lookup cell '' [ 1664.584922][ T189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.615317][T22270] netlink: 'syz.4.3756': attribute type 10 has an invalid length. [ 1664.655743][ T189] usb 7-1: Product: syz [ 1664.678700][ T189] usb 7-1: Manufacturer: syz [ 1664.707053][T22271] netlink: 'syz.4.3756': attribute type 10 has an invalid length. [ 1664.748643][ T189] usb 7-1: SerialNumber: syz [ 1664.774820][ T189] usb 7-1: config 0 descriptor?? [ 1664.807266][T22270] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1664.890182][ T29] audit: type=1400 audit(1782887907.652:2160): avc: denied { write } for pid=22244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1664.916256][T22270] team0: Port device netdevsim1 added [ 1665.131479][T22271] team0: Port device netdevsim1 removed [ 1665.233553][ T189] usb 7-1: USB disconnect, device number 12 [ 1665.288131][ T29] audit: type=1400 audit(1782887908.012:2161): avc: denied { write } for pid=22275 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1665.415742][T21959] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1665.465226][T21959] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1665.488679][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1665.508399][T21959] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1665.544099][T21959] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1665.572470][T21959] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1665.619318][T21959] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1665.652977][T21959] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1665.698337][T21959] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1665.809731][T19842] hsr_slave_0: left promiscuous mode [ 1665.838661][T19842] hsr_slave_1: left promiscuous mode [ 1665.852689][T19842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1665.861824][T19842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1665.876252][T19842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1665.897726][T19842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1665.973385][T19842] hsr_slave_0: left promiscuous mode [ 1665.997272][T19842] hsr_slave_1: left promiscuous mode [ 1666.070011][T19842] veth1_macvtap: left promiscuous mode [ 1666.084079][T19842] veth0_macvtap: left promiscuous mode [ 1666.099460][T19842] veth1_vlan: left promiscuous mode [ 1666.119945][T19842] veth0_vlan: left promiscuous mode [ 1666.572610][T22292] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1669.194478][ T29] audit: type=1400 audit(1782887911.620:2162): avc: denied { write } for pid=22291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1669.414935][T19842] team0 (unregistering): Port device team_slave_1 removed [ 1669.470578][ T29] audit: type=1400 audit(1782887911.878:2163): avc: denied { write } for pid=22317 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1669.497799][T19842] team0 (unregistering): Port device team_slave_0 removed [ 1670.192490][T22286] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3757'. [ 1670.201369][T22286] tipc: Enabling of bearer rejected, media not registered [ 1670.272365][T22310] tc_dump_action: action bad kind [ 1670.278612][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1670.370694][ T136] smbdirect: ib_dev[syz2] removed [ 1670.592472][T21959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1670.701781][T22330] netlink: 'syz.1.3761': attribute type 10 has an invalid length. [ 1670.731357][T22331] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1670.829281][T22333] tc_dump_action: action bad kind [ 1671.129697][T22330] netlink: 'syz.1.3761': attribute type 10 has an invalid length. [ 1671.130648][T22331] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1671.145589][T21959] 8021q: adding VLAN 0 to HW filter on device team0 [ 1671.272320][T20612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.280091][T20612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1671.313514][T20612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1671.320607][T20612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1671.587441][T21959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1671.652049][T21959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1671.965464][T19842] IPVS: stop unused estimator thread 0... [ 1672.562364][ T29] audit: type=1400 audit(1782887914.729:2164): avc: denied { write } for pid=22332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1672.874823][ T29] audit: type=1400 audit(1782887914.997:2165): avc: denied { write } for pid=22355 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1672.999443][T21959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1674.681920][ T5273] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1675.249114][ T29] audit: type=1326 audit(1782887917.202:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22395 comm="syz.1.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa761f9de59 code=0x7ffc0000 [ 1675.326282][T21959] veth0_vlan: entered promiscuous mode [ 1675.351832][ T29] audit: type=1326 audit(1782887917.202:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22395 comm="syz.1.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa761f9de59 code=0x7ffc0000 [ 1675.378391][ T29] audit: type=1326 audit(1782887917.202:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22395 comm="syz.1.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa761f9de59 code=0x7ffc0000 [ 1675.466505][T21959] veth1_vlan: entered promiscuous mode [ 1675.493807][T21959] veth0_macvtap: entered promiscuous mode [ 1675.503775][T21959] veth1_macvtap: entered promiscuous mode [ 1675.536616][ T29] audit: type=1326 audit(1782887917.202:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22395 comm="syz.1.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa761f9de59 code=0x7ffc0000 [ 1675.671672][T21959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1675.687789][ T29] audit: type=1326 audit(1782887917.202:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22395 comm="syz.1.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa761f9de59 code=0x7ffc0000 [ 1675.725628][T21959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1675.812100][T20612] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.825518][T20612] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1675.836387][ T29] audit: type=1326 audit(1782887917.202:2171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22395 comm="syz.1.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa761f9de59 code=0x7ffc0000 [ 1676.005092][T20612] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.045536][T20612] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1676.078858][T22404] xt_hashlimit: size too large, truncated to 1048576 [ 1676.096813][ T29] audit: type=1326 audit(1782887917.202:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22395 comm="syz.1.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa761f9de59 code=0x7ffc0000 [ 1676.301623][ T29] audit: type=1326 audit(1782887917.202:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22395 comm="syz.1.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa761f9de59 code=0x7ffc0000 [ 1676.524877][T22410] SELinux: Context system_u:object_r:mtrr_device_t:s0 is not valid (left unmapped). [ 1678.031504][T22409] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3769'. [ 1678.216948][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 1678.216966][ T29] audit: type=1326 audit(1782887919.214:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22395 comm="syz.1.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa761f9de59 code=0x7ffc0000 [ 1678.283309][T22410] lo speed is unknown, defaulting to 1000 [ 1678.431591][ T189] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1678.507328][T22416] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1678.541629][ T29] audit: type=1326 audit(1782887919.269:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22395 comm="syz.1.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa761f9de59 code=0x7ffc0000 [ 1678.572787][T22416] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1678.585158][T22416] audit: backlog limit exceeded [ 1678.634863][ T189] usb 7-1: Using ep0 maxpacket: 8 [ 1678.660160][ T189] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1678.680595][ T29] audit: type=1326 audit(1782887919.444:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22395 comm="syz.1.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fa761f5a2ac code=0x7ffc0000 [ 1678.705300][ T189] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 153, changing to 7 [ 1678.745925][ T29] audit: type=1326 audit(1782887919.444:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22395 comm="syz.1.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa761f5a30e code=0x7ffc0000 [ 1678.784659][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1678.806509][ T29] audit: type=1326 audit(1782887919.444:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22395 comm="syz.1.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa761f9daeb code=0x7ffc0000 [ 1678.868987][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1678.885678][ T29] audit: type=1326 audit(1782887919.444:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22395 comm="syz.1.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa761f9de59 code=0x7ffc0000 [ 1678.912188][ T29] audit: type=1326 audit(1782887919.444:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22395 comm="syz.1.3768" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa761f9de59 code=0x7ffc0000 [ 1678.992231][ T189] usb 7-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 1679.003918][ T189] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.016711][ T189] usb 7-1: Product: syz [ 1679.037220][ T189] usb 7-1: Manufacturer: syz [ 1679.045447][ T189] usb 7-1: SerialNumber: syz [ 1679.121667][T20612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1679.160717][T22428] kAFS: unable to lookup cell '({^@' [ 1679.168168][T20612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1679.199009][T22427] netlink: 'syz.1.3774': attribute type 1 has an invalid length. [ 1679.238543][T22427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1679.550976][T22435] jfs: Unknown parameter 'd NGrdg.`8k0-6m7 rejected, failed to enable media [ 1762.204557][ T29] audit: type=1400 audit(1782887997.440:2392): avc: denied { write } for pid=23245 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1762.329930][T23249] netlink: 'syz.8.3920': attribute type 3 has an invalid length. [ 1762.367060][T23249] netlink: 3 bytes leftover after parsing attributes in process `syz.8.3920'. [ 1762.370448][T23251] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1762.388024][T23235] orangefs_mount: mount request failed with -4 [ 1762.918449][T23259] NILFS (nullb0): couldn't find nilfs on the device [ 1764.707940][T23283] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1764.716137][T23283] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1766.338720][ T29] audit: type=1400 audit(1782888001.251:2393): avc: denied { write } for pid=23257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1767.218998][ T29] audit: type=1400 audit(1782888002.072:2394): avc: denied { write } for pid=23305 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1768.709424][T23319] orangefs_mount: mount request failed with -4 [ 1768.901047][T23334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1768.924822][T23334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1768.939800][T23334] batman_adv: batadv0: Removing interface: ipvlan2 [ 1769.238844][T23342] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1769.325906][ T29] audit: type=1400 audit(1782888003.945:2395): avc: denied { map } for pid=23331 comm="syz.6.3936" path="socket:[67497]" dev="sockfs" ino=67497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1769.327579][T23342] bond0: (slave lo): Enslaving as an active interface with an up link [ 1769.357529][T23342] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1769.539886][T23348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3940'. [ 1769.548840][T23348] tipc: Enabling of bearer rejected, media not registered [ 1769.573437][ T29] audit: type=1400 audit(1782888004.121:2396): avc: denied { write } for pid=23317 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1769.664082][T14094] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1770.502736][ T189] kernel read not supported for file /dsp1 (pid: 189 comm: kworker/0:2) [ 1770.612102][T23353] tipc: Resetting bearer [ 1770.618255][T23353] tipc: Resetting bearer [ 1770.668329][T23353] A link change request failed with some changes committed already. Interface syztnl2 may have been left with an inconsistent configuration, please check. [ 1770.695239][T14094] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1770.758704][T14094] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1770.826751][T14094] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1770.914392][T14094] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1770.964601][T14094] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1771.005010][ T29] audit: type=1800 audit(1782888005.560:2397): pid=23355 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.3937" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 1771.028440][T14094] usb 6-1: Product: syz [ 1771.048317][T14094] usb 6-1: Manufacturer: syz [ 1771.073005][T14094] usb 6-1: SerialNumber: syz [ 1771.109426][T14094] usb 6-1: config 0 descriptor?? [ 1771.146087][ T29] audit: type=1400 audit(1782888005.615:2398): avc: denied { write } for pid=23354 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1771.224519][T13019] Bluetooth: hci0: command 0x0406 tx timeout [ 1771.260213][T23360] binder: 23358:23360 ioctl c0306201 0 returned -14 [ 1771.455168][T14094] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 1771.563813][ T29] audit: type=1326 audit(1782888006.077:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23329 comm="syz.4.3937" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd3ae99de59 code=0x0 [ 1771.838700][T17921] usb 6-1: USB disconnect, device number 36 [ 1772.511222][ T29] audit: type=1400 audit(1782888006.944:2400): avc: denied { write } for pid=23369 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1772.652444][T23388] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3944'. [ 1773.308515][ T29] audit: type=1400 audit(1782888007.692:2401): avc: denied { write } for pid=23390 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1774.482979][T23410] /dev/nullb0: Can't lookup blockdev [ 1776.154095][T23420] orangefs_mount: mount request failed with -4 [ 1776.734316][ T29] audit: type=1400 audit(1782888010.847:2402): avc: denied { write } for pid=23400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1777.939290][T23435] binder: 23428:23435 ioctl c0306201 0 returned -14 [ 1778.564718][ T29] audit: type=1400 audit(1782888012.407:2403): avc: denied { write } for pid=23431 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1778.662155][T23452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3955'. [ 1778.696875][T23452] fuse: fd is not a fuse device [ 1778.718380][T14094] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1778.796323][ T29] audit: type=1400 audit(1782888012.739:2404): avc: denied { setopt } for pid=23439 comm="syz.8.3954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1779.044425][T14094] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1779.073071][T14094] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1779.126915][T14094] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.224836][T14094] usb 7-1: config 0 descriptor?? [ 1779.630039][T14094] ath6kl: Failed to submit usb control message: -71 [ 1779.656382][T14094] ath6kl: unable to send the bmi data to the device: -71 [ 1779.664463][T14094] ath6kl: Unable to send get target info: -71 [ 1779.681211][T14094] ath6kl: Failed to init ath6kl core: -71 [ 1779.713416][T14094] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1779.740519][T14094] usb 7-1: USB disconnect, device number 15 [ 1785.375790][ T29] audit: type=1326 audit(1782888018.819:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23511 comm="syz.6.3970" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd45bf9de59 code=0x0 [ 1785.411634][ T5778] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1785.576455][ T5778] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1785.605444][ T5778] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1785.618867][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1785.643772][ T5778] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1785.676014][ T5778] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1785.718474][ T5778] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1785.749135][ T5778] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.777332][ T5778] usb 6-1: config 0 descriptor?? [ 1785.800955][T23510] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1785.833877][ T29] audit: type=1800 audit(1782888019.234:2406): pid=23515 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.3968" name="/newroot/892/bus" dev="tmpfs" ino=4702 res=0 errno=0 [ 1785.914302][T23521] overlayfs: missing 'lowerdir' [ 1786.320169][ T5778] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1786.354891][ T5778] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1786.508573][ T5778] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1786.527680][ T5778] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1786.547730][ T5778] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1787.331568][ T5778] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1787.339662][ T5778] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1787.347837][ T5778] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1787.356075][ T5778] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1787.364214][ T5778] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 1787.457544][ T5778] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 1787.492293][T23534] overlayfs: failed to resolve './file0': -2 [ 1787.804381][T14094] usb 6-1: USB disconnect, device number 37 [ 1787.950415][T23537] fido_id[23537]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1788.670260][T23544] orangefs_mount: mount request failed with -4 [ 1789.106754][ T189] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 1789.834644][ T189] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 1789.843262][ T189] usb 7-1: config 0 has no interface number 0 [ 1789.849869][ T189] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1789.871293][ T189] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1789.880920][ T189] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1789.916484][ T189] usb 7-1: Manufacturer: syz [ 1789.921816][ T189] usb 7-1: SerialNumber: syz [ 1789.929823][ T189] usb 7-1: config 0 descriptor?? [ 1790.201271][T23563] overlayfs: failed to resolve './file1': -2 [ 1790.925912][T23566] lo speed is unknown, defaulting to 1000 [ 1792.158544][T23567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1792.178018][T23567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1792.804013][T23567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1792.827085][T23567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1793.278136][T23576] nbd5: detected capacity change from 0 to 63 [ 1793.299720][T23578] nbd: must specify a size in bytes for the device [ 1793.968685][ T5618] block nbd5: Receive control failed (result -104) [ 1794.008591][T14073] usb 7-1: USB disconnect, device number 16 [ 1794.685771][T23586] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3984'. [ 1794.831362][T23587] siw: device registration error -23 [ 1796.496552][T23604] orangefs_mount: mount request failed with -4 [ 1797.491772][T23613] netlink: 'syz.1.3990': attribute type 1 has an invalid length. [ 1797.596288][T23613] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1798.217284][T23615] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1798.700687][T23615] NILFS (nullb0): couldn't find nilfs on the device [ 1799.111745][T23600] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3986'. [ 1799.157589][T23621] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3992'. [ 1799.409532][T23621] siw: device registration error -23 [ 1800.258021][T23631] fuse: fd is not a fuse device [ 1801.052590][T23633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3995'. [ 1801.807927][T23651] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1801.830376][ T5778] libceph: connect (1)[c::]:6789 error -22 [ 1801.875049][ T5778] libceph: mon0 (1)[c::]:6789 connect error [ 1801.886201][T23655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3999'. [ 1801.947898][T23649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3999'. [ 1802.043753][T23652] ceph: No mds server is up or the cluster is laggy [ 1803.088212][T23660] orangefs_mount: mount request failed with -4 [ 1804.637983][T23667] orangefs_mount: mount request failed with -4 [ 1805.590611][T23672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4002'. [ 1805.600417][T23672] netlink: 'syz.1.4002': attribute type 30 has an invalid length. [ 1805.673400][T23674] tc_dump_action: action bad kind [ 1806.451682][T23675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4002'. [ 1806.510446][T23675] netlink: 'syz.1.4002': attribute type 30 has an invalid length. [ 1806.618876][T23679] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4004'. [ 1806.946760][ T189] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1807.816856][ T189] usb 7-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1807.887992][ T189] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1807.950862][ T189] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1807.971174][ T189] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.013869][ T189] usb 7-1: config 0 descriptor?? [ 1808.472694][ T189] ath6kl: Failed to submit usb control message: -71 [ 1808.500098][ T189] ath6kl: unable to send the bmi data to the device: -71 [ 1808.538657][ T189] ath6kl: Unable to send get target info: -71 [ 1808.586540][ T189] ath6kl: Failed to init ath6kl core: -71 [ 1808.601028][ T189] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1808.670812][ T189] usb 7-1: USB disconnect, device number 17 [ 1808.792907][T14073] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 1808.974462][T14073] usb 6-1: device descriptor read/64, error -71 [ 1808.984444][T23696] can0: slcan on ttyS3. [ 1809.255227][T14073] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1809.525222][T14073] usb 6-1: device descriptor read/64, error -71 [ 1809.579253][ T5720] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1809.677343][T14073] usb usb6-port1: attempt power cycle [ 1809.738679][T23689] can0 (unregistered): slcan off ttyS3. [ 1809.777820][ T5720] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1809.822634][ T5720] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1809.854851][ T5720] usb 7-1: Product: syz [ 1809.870510][ T5720] usb 7-1: Manufacturer: syz [ 1809.884081][ T5720] usb 7-1: SerialNumber: syz [ 1809.926673][ T5720] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1810.005677][ T29] audit: type=1400 audit(1782888041.518:2407): avc: denied { write } for pid=23704 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1810.109802][T23719] netlink: 'syz.1.4011': attribute type 10 has an invalid length. [ 1810.170969][T23719] tipc: Resetting bearer [ 1810.175415][T14073] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1810.183722][ T189] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1810.209282][T14073] usb 6-1: device descriptor read/8, error -71 [ 1810.360135][T23719] tipc: Disabling bearer [ 1810.431013][ T29] audit: type=1400 audit(1782888041.942:2408): avc: denied { write } for pid=23726 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1810.478630][ T5720] usb 7-1: USB disconnect, device number 18 [ 1810.489741][T14073] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1810.517082][T14073] usb 6-1: device descriptor read/8, error -71 [ 1810.663407][T14073] usb usb6-port1: unable to enumerate USB device [ 1811.367714][ T189] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 1811.436320][T23745] tc_dump_action: action bad kind [ 1811.467686][ T189] ath9k_htc: Failed to initialize the device [ 1812.193269][ T5720] usb 7-1: ath9k_htc: USB layer deinitialized [ 1812.203460][ T29] audit: type=1400 audit(1782888043.557:2409): avc: denied { write } for pid=23731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1812.353868][T23749] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4016'. [ 1813.175321][ T29] audit: type=1400 audit(1782888044.470:2410): avc: denied { write } for pid=23750 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1813.517047][ T29] audit: type=1400 audit(1782888044.600:2411): avc: denied { execute } for pid=23755 comm="syz.5.4018" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B642006202864656C6574656429 dev="hugetlbfs" ino=68265 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1814.004730][T23771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1814.017366][T23771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1814.087366][T23771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1814.160827][T23771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1814.445331][T23786] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4021'. [ 1814.584373][T23787] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4021'. [ 1815.166093][T23777] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1815.214037][T23777] bond1: (slave lo): Enslaving as an active interface with an up link [ 1815.243496][T23777] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1815.340127][T23790] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4022'. [ 1815.727672][T23810] xt_hashlimit: size too large, truncated to 1048576 [ 1816.030200][T23809] ip6erspan0: entered allmulticast mode [ 1816.249273][T23817] overlayfs: overlapping lowerdir path [ 1816.573953][T23821] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1816.639996][T23823] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4027'. [ 1816.805424][T23829] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4029'. [ 1817.983530][T14073] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1818.136745][T23839] tc_dump_action: action bad kind [ 1818.154441][T14073] usb 6-1: device descriptor read/64, error -71 [ 1818.661336][T14073] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1818.914003][T14073] usb 6-1: device descriptor read/64, error -71 [ 1819.198557][T14073] usb usb6-port1: attempt power cycle [ 1819.855711][T23853] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1819.998791][T14073] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1820.028263][T14073] usb 6-1: device descriptor read/8, error -71 [ 1820.377558][T23858] NILFS (nullb0): couldn't find nilfs on the device [ 1820.463347][T14073] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1820.775707][T23863] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4039'. [ 1820.853292][T14073] usb 6-1: device not accepting address 45, error -71 [ 1821.016874][T14073] usb usb6-port1: unable to enumerate USB device [ 1821.174089][T23872] overlayfs: failed to clone upperpath [ 1822.708645][T23866] siw: device registration error -23 [ 1823.210159][T23875] orangefs_mount: mount request failed with -4 [ 1824.668849][T23887] tc_dump_action: action bad kind [ 1825.177255][T23891] tc_dump_action: action bad kind [ 1825.662545][T14094] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1825.833578][T14094] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1825.857017][T14094] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.866636][T14094] usb 6-1: Product: syz [ 1825.871318][T14094] usb 6-1: Manufacturer: syz [ 1825.876038][T14094] usb 6-1: SerialNumber: syz [ 1825.897008][T14094] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1825.916366][ T189] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1825.943326][T23901] binder: BINDER_SET_CONTEXT_MGR already set [ 1825.966946][T23901] binder: 23896:23901 ioctl 4018620d 200000000040 returned -16 [ 1826.165431][T23906] xt_NFQUEUE: number of queues (1025) out of range (got 66559) [ 1826.245445][T14094] usb 6-1: USB disconnect, device number 46 [ 1826.452128][T23910] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 1827.456796][ T189] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1827.475853][ T189] ath9k_htc: Failed to initialize the device [ 1827.495211][T17703] block nbd5: Possible stuck request ffff888028a1e000: control (read@0,1024B). Runtime 30 seconds [ 1827.495338][T14094] usb 6-1: ath9k_htc: USB layer deinitialized [ 1827.510700][T17703] block nbd5: Possible stuck request ffff888028a1e1c0: control (read@1024,3072B). Runtime 30 seconds [ 1828.675912][T23918] 8021q: adding VLAN 0 to HW filter on device team0 [ 1828.742760][T23918] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1828.757785][T23918] veth1_vlan: left promiscuous mode [ 1828.764068][T23918] veth0_vlan: left promiscuous mode [ 1828.770845][T23918] veth0_vlan: entered promiscuous mode [ 1828.778350][T23918] veth1_vlan: entered promiscuous mode [ 1828.788385][T23918] veth1_macvtap: left promiscuous mode [ 1828.795142][T23918] veth0_macvtap: left promiscuous mode [ 1828.801606][T23918] veth0_macvtap: entered promiscuous mode [ 1828.818747][T23918] veth1_macvtap: entered promiscuous mode [ 1828.830007][T23918] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1828.838971][T23918] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1828.847160][T23918] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1828.855363][T23918] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1828.864810][T23918] ipvlan2: left allmulticast mode [ 1828.869839][T23918] batadv_slave_1: left allmulticast mode [ 1828.879837][T23918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1828.932815][T19849] bridge0: port 1(bridge_slave_0) entered blocking state [ 1828.939959][T19849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1829.571670][T19849] bridge0: port 2(bridge_slave_1) entered blocking state [ 1829.579553][T19849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1829.662362][ T7092] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.721884][ T7092] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.743803][ T7092] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.773342][ T7092] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.696380][T23937] overlayfs: failed to resolve './file0': -2 [ 1831.954169][T23947] tc_dump_action: action bad kind [ 1832.381200][T23954] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4060'. [ 1832.429903][T23953] Process accounting resumed [ 1833.420265][T23961] siw: device registration error -23 [ 1835.570623][T23987] Invalid ELF header type: 3 != 1 [ 1835.667436][T23987] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4068'. [ 1836.746255][T23994] lo speed is unknown, defaulting to 1000 [ 1839.713545][T24007] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4073'. [ 1840.810156][ T29] audit: type=1326 audit(1782888069.965:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24011 comm="syz.6.4072" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45bf9de59 code=0x7ffc0000 [ 1841.100773][ T29] audit: type=1326 audit(1782888070.195:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24011 comm="syz.6.4072" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fd45bf9de59 code=0x7ffc0000 [ 1841.131782][ T29] audit: type=1326 audit(1782888070.204:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24011 comm="syz.6.4072" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45bf9de59 code=0x7ffc0000 [ 1841.160869][ T29] audit: type=1326 audit(1782888070.204:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24011 comm="syz.6.4072" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45bf9de59 code=0x7ffc0000 [ 1841.187939][ T29] audit: type=1326 audit(1782888070.204:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24011 comm="syz.6.4072" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fd45bf9de59 code=0x7ffc0000 [ 1841.220923][ T29] audit: type=1326 audit(1782888070.204:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24011 comm="syz.6.4072" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45bf9de59 code=0x7ffc0000 [ 1841.248449][ T29] audit: type=1326 audit(1782888070.204:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24011 comm="syz.6.4072" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45bf9de59 code=0x7ffc0000 [ 1841.275911][ T29] audit: type=1326 audit(1782888070.204:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24011 comm="syz.6.4072" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd45bf9de59 code=0x7ffc0000 [ 1841.303020][ T29] audit: type=1326 audit(1782888070.204:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24011 comm="syz.6.4072" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45bf9de59 code=0x7ffc0000 [ 1841.330043][ T29] audit: type=1326 audit(1782888070.204:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24011 comm="syz.6.4072" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd45bf9de59 code=0x7ffc0000 [ 1841.962612][T24034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4079'. [ 1841.972808][T24034] netlink: 'syz.4.4079': attribute type 30 has an invalid length. [ 1841.989857][T19842] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 1842.014973][T19842] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1842.036267][T19842] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1842.056399][T19842] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1842.074099][T24034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4079'. [ 1842.083363][T24034] netlink: 'syz.4.4079': attribute type 30 has an invalid length. [ 1842.372315][T24043] netlink: 'syz.4.4081': attribute type 10 has an invalid length. [ 1842.612102][T24046] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4082'. [ 1843.569646][T24053] tc_dump_action: action bad kind [ 1843.841490][T24054] netlink: 'syz.1.4084': attribute type 2 has an invalid length. [ 1843.860721][T24054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4084'. [ 1843.972217][T24054] : entered promiscuous mode [ 1844.742813][T24060] tc_dump_action: action bad kind [ 1847.975031][T24073] lo speed is unknown, defaulting to 1000 [ 1848.595414][T24084] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4093'. [ 1848.823529][T24088] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4092'. [ 1848.832567][T24088] netlink: 'syz.6.4092': attribute type 30 has an invalid length. [ 1848.884815][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1848.884881][ T29] audit: type=1400 audit(1782888077.291:2423): avc: denied { create } for pid=24085 comm="syz.6.4092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1848.903309][T24088] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4092'. [ 1848.920778][T24088] netlink: 'syz.6.4092': attribute type 30 has an invalid length. [ 1849.109074][T19842] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1849.120713][T19842] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1849.156199][T19842] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1849.194089][T19842] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1849.201679][ T29] audit: type=1400 audit(1782888077.291:2424): avc: denied { write } for pid=24085 comm="syz.6.4092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1849.306973][ T29] audit: type=1400 audit(1782888077.291:2425): avc: denied { nlmsg_write } for pid=24085 comm="syz.6.4092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1849.635355][T24092] tc_dump_action: action bad kind [ 1852.206353][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1852.680135][T24115] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4101'. [ 1852.762043][T13019] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1852.780684][T13019] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1852.791708][T13019] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1852.799605][T13019] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1852.808020][T13019] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1852.940629][T24117] lo speed is unknown, defaulting to 1000 [ 1853.302848][T24124] netlink: 'syz.8.4103': attribute type 28 has an invalid length. [ 1853.311006][T24124] netlink: 'syz.8.4103': attribute type 29 has an invalid length. [ 1853.318846][T24124] netlink: 132 bytes leftover after parsing attributes in process `syz.8.4103'. [ 1853.931623][T24129] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1854.079446][T24134] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4106'. [ 1854.678078][T24123] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1854.713440][T24134] lo speed is unknown, defaulting to 1000 [ 1854.773809][T24133] tc_dump_action: action bad kind [ 1855.067274][T13019] Bluetooth: hci1: command tx timeout [ 1855.944551][T24155] tc_dump_action: action bad kind [ 1856.351633][ T29] audit: type=1400 audit(1782888084.202:2426): avc: denied { create } for pid=24149 comm="syz.1.4111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1856.796677][T24118] lo speed is unknown, defaulting to 1000 [ 1857.151999][T24168] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4115'. [ 1857.240037][T24175] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1857.473247][T13019] Bluetooth: hci1: command tx timeout [ 1857.502446][T24175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4116'. [ 1857.839315][T24181] tc_dump_action: action bad kind [ 1858.406197][T24192] netlink: 'syz.4.4119': attribute type 4 has an invalid length. [ 1858.424672][T24118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1858.443278][T24191] netlink: 'syz.4.4119': attribute type 4 has an invalid length. [ 1858.472341][T24118] bridge0: port 1(bridge_slave_0) entered disabled state [ 1858.566463][T24118] bridge_slave_0: entered allmulticast mode [ 1858.791012][T24118] bridge_slave_0: entered promiscuous mode [ 1858.813800][T24118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1859.583947][T24118] bridge0: port 2(bridge_slave_1) entered disabled state [ 1859.593846][T24118] bridge_slave_1: entered allmulticast mode [ 1859.779404][T13019] Bluetooth: hci1: command tx timeout [ 1859.823831][T24118] bridge_slave_1: entered promiscuous mode [ 1859.832911][T24205] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4121'. [ 1860.444682][T24209] siw: device registration error -23 [ 1860.839826][T17703] block nbd5: Possible stuck request ffff888028a1e000: control (read@0,1024B). Runtime 60 seconds [ 1860.854646][T17703] block nbd5: Possible stuck request ffff888028a1e1c0: control (read@1024,3072B). Runtime 60 seconds [ 1860.932309][T14094] lo speed is unknown, defaulting to 1000 [ 1860.932338][T24215] tc_dump_action: action bad kind [ 1860.963080][T24118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1860.988703][T14094] syz0: Port: 1 Link ACTIVE [ 1861.039730][T24118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1861.343744][T24118] team0: Port device team_slave_0 added [ 1861.436053][T24118] team0: Port device team_slave_1 added [ 1861.527907][T24219] siw: device registration error -23 [ 1862.001582][T13019] Bluetooth: hci1: command tx timeout [ 1862.085688][T24118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1862.123272][T24118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1862.170524][T24223] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4125'. [ 1862.181844][T24118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1862.273678][T24118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1862.293728][T24225] siw: device registration error -23 [ 1862.712662][T24118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1862.749357][T24118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1863.073564][T24118] hsr_slave_0: entered promiscuous mode [ 1863.080580][T24118] hsr_slave_1: entered promiscuous mode [ 1863.088742][T24118] debugfs: 'hsr0' already exists in 'hsr' [ 1863.094593][T24118] Cannot create hsr debugfs directory [ 1865.884171][T24245] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1865.898086][T24118] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1865.907697][T24245] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1865.917739][T24245] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1865.978172][T24118] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1866.012048][T24244] lo speed is unknown, defaulting to 1000 [ 1866.070688][T24118] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1866.292954][T24118] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1867.220677][T24118] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1867.242601][T24118] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1867.251241][T24118] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1867.278338][T24118] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1868.981469][T24267] SELinux: ebitmap: truncated map [ 1868.997666][T24267] SELinux: invalid class [ 1869.805472][T24118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1870.427944][T24118] 8021q: adding VLAN 0 to HW filter on device team0 [ 1870.916114][T20619] bridge0: port 1(bridge_slave_0) entered blocking state [ 1870.923944][T20619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1871.009016][T24267] SELinux: failed to load policy [ 1871.031524][T19842] bridge0: port 2(bridge_slave_1) entered blocking state [ 1871.038651][T19842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1871.374518][T14094] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 1871.385698][T24118] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1871.522760][T24289] Invalid ELF header type: 3 != 1 [ 1871.830397][T24289] netlink: 64 bytes leftover after parsing attributes in process `syz.8.4137'. [ 1871.877207][T14094] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 1871.909602][T14094] usb 7-1: config 0 has no interface number 0 [ 1871.934453][T14094] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1871.965501][T14094] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1871.984540][T14094] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1872.005213][T14094] usb 7-1: Manufacturer: syz [ 1872.014373][T14094] usb 7-1: SerialNumber: syz [ 1872.046182][T14094] usb 7-1: config 0 descriptor?? [ 1873.614579][T24319] IPVS: Error connecting to the multicast addr [ 1873.677018][T24322] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4141'. [ 1874.077131][T24313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4141'. [ 1874.181867][T24118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1874.657118][T24118] veth0_vlan: entered promiscuous mode [ 1874.766101][T24118] veth1_vlan: entered promiscuous mode [ 1875.870739][T24340] lo speed is unknown, defaulting to 1000 [ 1875.945355][T24341] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1875.955573][T24341] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1875.966341][T24341] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1876.168157][T24118] veth0_macvtap: entered promiscuous mode [ 1876.198032][T24345] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4145'. [ 1876.221433][T24118] veth1_macvtap: entered promiscuous mode [ 1876.425225][T24118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1876.475159][ T5778] usb 7-1: USB disconnect, device number 19 [ 1876.492881][T24118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1876.549623][T20619] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.586623][ T29] audit: type=1326 audit(1782888102.979:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24317 comm="syz.4.4143" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ae99de59 code=0x7ffc0000 [ 1876.629256][T19842] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1876.661170][ T29] audit: type=1326 audit(1782888103.016:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24317 comm="syz.4.4143" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ae99de59 code=0x7ffc0000 [ 1876.747542][ T29] audit: type=1326 audit(1782888103.025:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24317 comm="syz.4.4143" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ae99de59 code=0x7ffc0000 [ 1876.778937][T19842] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.811845][ T29] audit: type=1326 audit(1782888103.025:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24317 comm="syz.4.4143" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ae99de59 code=0x7ffc0000 [ 1877.931763][T19845] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1877.990728][ T29] audit: type=1326 audit(1782888103.034:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24317 comm="syz.4.4143" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd3ae99de59 code=0x7ffc0000 [ 1878.006848][T24358] lo speed is unknown, defaulting to 1000 [ 1878.035433][ T29] audit: type=1326 audit(1782888103.034:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24317 comm="syz.4.4143" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ae99de59 code=0x7ffc0000 [ 1878.061947][ T29] audit: type=1326 audit(1782888103.034:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24317 comm="syz.4.4143" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ae99de59 code=0x7ffc0000 [ 1878.163221][ T29] audit: type=1326 audit(1782888103.034:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24317 comm="syz.4.4143" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ae99de59 code=0x7ffc0000 [ 1878.208407][T14899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1878.217294][ T29] audit: type=1326 audit(1782888103.034:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24317 comm="syz.4.4143" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3ae99de59 code=0x7ffc0000 [ 1878.223672][T20612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1878.245289][ T29] audit: type=1326 audit(1782888103.034:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24317 comm="syz.4.4143" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd3ae99de59 code=0x7ffc0000 [ 1878.299103][T14899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1878.481164][T20612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1878.605764][T24365] tc_dump_action: action bad kind [ 1880.595994][T20179] wlan0: Trigger new scan to find an IBSS to join [ 1882.352402][T24394] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4155'. [ 1883.094371][T24410] lo speed is unknown, defaulting to 1000 [ 1884.523877][T18679] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1884.981181][T24420] Invalid ELF header type: 3 != 1 [ 1885.355519][T18679] usb 10-1: config 0 has an invalid interface number: 214 but max is 0 [ 1885.368292][T19845] wlan0: Trigger new scan to find an IBSS to join [ 1885.420429][T18679] usb 10-1: config 0 has no interface number 0 [ 1885.452881][T18679] usb 10-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1885.544773][T24419] lo speed is unknown, defaulting to 1000 [ 1885.549746][T24420] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4162'. [ 1886.528083][T18679] usb 10-1: string descriptor 0 read error: -71 [ 1886.694359][T18679] usb 10-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1886.708042][T24438] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1887.065222][T24440] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4165'. [ 1887.620856][T24443] NILFS (nullb0): couldn't find nilfs on the device [ 1887.761502][T18679] usb 10-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1887.773398][ T136] wlan0: Creating new IBSS network, BSSID ee:13:ba:fb:f6:54 [ 1887.862904][T18679] usb 10-1: config 0 descriptor?? [ 1887.955024][T18679] usb 10-1: can't set config #0, error -71 [ 1887.982969][T18679] usb 10-1: USB disconnect, device number 2 [ 1889.063779][T24446] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 1890.556348][T24464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4172'. [ 1890.610289][T24464] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4172'. [ 1891.085428][T24466] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4172'. [ 1891.099491][T24464] bridge0: port 2(bridge_slave_1) entered disabled state [ 1891.107659][T24464] bridge0: port 1(bridge_slave_0) entered disabled state [ 1891.803568][T24471] lo speed is unknown, defaulting to 1000 [ 1892.540684][T20612] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1892.550688][T20612] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.064392][T20612] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1893.101344][T20612] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.147293][T20612] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1893.187642][T20612] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.229841][T20612] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1893.264510][T20612] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.808827][T17703] block nbd5: Possible stuck request ffff888028a1e000: control (read@0,1024B). Runtime 90 seconds [ 1895.829044][T17703] block nbd5: Possible stuck request ffff888028a1e1c0: control (read@1024,3072B). Runtime 90 seconds [ 1897.675347][T24505] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1897.695770][T24503] tc_dump_action: action bad kind [ 1898.123505][T24505] NILFS (nullb0): couldn't find nilfs on the device [ 1898.289225][T24502] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1899.297643][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 1899.297673][ T29] audit: type=1400 audit(1782888123.942:2491): avc: denied { create } for pid=24515 comm="syz.1.4184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1900.628758][T24537] Invalid ELF header type: 3 != 1 [ 1900.813249][T24537] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4188'. [ 1901.493097][T13019] Bluetooth: hci1: unexpected event 0x0f length: 287 > 4 [ 1904.743015][T24587] tmpfs: Bad value for 'mpol' [ 1904.764248][T24584] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4203'. [ 1906.790218][T17269] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1907.281601][T17269] usb 7-1: Using ep0 maxpacket: 16 [ 1907.295859][T17269] usb 7-1: config index 0 descriptor too short (expected 64312, got 56) [ 1907.323012][T17269] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1907.355029][T17269] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 55 [ 1907.377882][T17269] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1907.418138][T17269] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1907.451718][T17269] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1907.476678][T17269] usb 7-1: Manufacturer: syz [ 1907.499215][T17269] usb 7-1: config 0 descriptor?? [ 1907.521129][T24601] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1907.959826][T14073] usb 7-1: USB disconnect, device number 20 [ 1908.041153][T17269] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1908.358175][T17269] usb 10-1: Using ep0 maxpacket: 32 [ 1908.364216][T17269] usb 10-1: too many configurations: 17, using maximum allowed: 8 [ 1908.391542][T17269] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1908.419995][T17269] usb 10-1: config 0 has no interface number 0 [ 1909.216977][T17269] usb 10-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1909.266429][T17269] usb 10-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1909.311864][T17269] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1909.344576][T17269] usb 10-1: config 0 has no interface number 0 [ 1909.364025][T17269] usb 10-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1909.404875][T17269] usb 10-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1909.439674][T17269] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1909.632833][T17269] usb 10-1: config 0 has no interface number 0 [ 1909.652447][T17269] usb 10-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1909.883588][T10492] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 1909.974013][T17269] usb 10-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1909.990300][T17269] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1910.003989][T17269] usb 10-1: config 0 has no interface number 0 [ 1910.026909][T17269] usb 10-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1910.065705][T17269] usb 10-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1910.084854][T24631] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1910.144613][T10492] usb 7-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1910.239976][T17269] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1910.435224][T10492] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1910.643204][T17269] usb 10-1: config 0 has no interface number 0 [ 1910.665377][T17269] usb 10-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1910.678905][T10492] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1910.699717][T17269] usb 10-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1910.714586][T10492] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.728734][T17269] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1910.740168][T10492] usb 7-1: config 0 descriptor?? [ 1910.746103][T17269] usb 10-1: config 0 has no interface number 0 [ 1910.759548][T17269] usb 10-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1910.774255][T17269] usb 10-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1910.800207][T17269] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1910.822106][T17269] usb 10-1: config 0 has no interface number 0 [ 1910.835710][T17269] usb 10-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1910.857309][T17269] usb 10-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1910.879275][T17269] usb 10-1: config 0 has an invalid interface number: 2 but max is 0 [ 1910.888417][T17269] usb 10-1: config 0 has no interface number 0 [ 1910.894930][T17269] usb 10-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1910.905116][T17269] usb 10-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1910.919553][T17269] usb 10-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 1910.929063][T17269] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.937249][T17269] usb 10-1: Product: syz [ 1910.941729][T17269] usb 10-1: Manufacturer: syz [ 1910.946629][T17269] usb 10-1: SerialNumber: syz [ 1910.961037][T17269] usb 10-1: config 0 descriptor?? [ 1911.016366][T17269] etas_es58x 10-1:0.2: Starting syz syz (Serial Number syz) [ 1911.053486][T17269] etas_es58x 10-1:0.2: could not retrieve the product info string [ 1911.868978][T24642] orangefs_mount: mount request failed with -4 [ 1912.157699][T10492] ath6kl: Failed to submit usb control message: -110 [ 1912.171092][T10492] ath6kl: unable to send the bmi data to the device: -110 [ 1912.186465][T10492] ath6kl: Unable to send get target info: -110 [ 1912.195068][T10492] ath6kl: Failed to init ath6kl core: -110 [ 1912.201339][T10492] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1912.496453][ T5778] usb 7-1: USB disconnect, device number 21 [ 1912.571804][T17269] usb 10-1: USB disconnect, device number 3 [ 1913.003225][T17269] etas_es58x 10-1:0.2: Disconnecting syz syz [ 1914.844969][ T29] audit: type=1400 audit(1782888138.281:2492): avc: denied { write } for pid=24659 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1914.895515][ T29] audit: type=1400 audit(1782888138.327:2493): avc: denied { write } for pid=24686 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1914.922398][T10492] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1914.954772][T17269] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1915.086638][T10492] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1915.096658][T10492] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1915.167181][T10492] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1915.180422][T17269] usb 10-1: Using ep0 maxpacket: 8 [ 1915.211318][T10492] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1915.223450][T10492] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.238892][T17269] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1915.257451][ T29] audit: type=1400 audit(1782888138.660:2494): avc: denied { write } for pid=24688 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1915.275461][T24701] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1915.281027][T10492] usb 7-1: Product: syz [ 1915.302431][T10492] usb 7-1: Manufacturer: syz [ 1915.307201][T17269] usb 10-1: config 0 has an invalid interface number: 88 but max is 0 [ 1915.316616][T10492] usb 7-1: SerialNumber: syz [ 1915.321253][T17269] usb 10-1: config 0 has no interface number 0 [ 1915.333241][T17269] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1915.352709][T10492] hub 7-1:1.0: bad descriptor, ignoring hub [ 1915.359957][T17269] usb 10-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1915.370123][T10492] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1915.378403][T17269] usb 10-1: config 0 interface 88 has no altsetting 0 [ 1915.389020][T17269] usb 10-1: language id specifier not provided by device, defaulting to English [ 1915.406300][T17269] usb 10-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1915.417682][T17269] usb 10-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1915.427354][T17269] usb 10-1: Manufacturer: 奍ꕻﾡ䓬ϙㅾ䀳ᘶ﹇녚ؐ鐳똗⊇ͳ䭔妸䏑芑㝈⁨ꋏ횷풋ⷦၘ鑲쌯嘝玜帕⃢槴灅캟蹝ᓩﮠ蜝턷觙堆â [ 1915.447247][T17269] usb 10-1: config 0 descriptor?? [ 1915.753831][T10492] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1916.148709][T17269] input: 奍ꕻﾡ䓬ϙㅾ䀳ᘶ﹇녚ؐ鐳똗⊇ͳ䭔妸䏑芑㝈⁨ꋏ횷풋ⷦၘ鑲쌯嘝玜帕⃢槴灅캟蹝ᓩﮠ蜝턷觙 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.88/input/input28 [ 1916.332641][T10492] usb 7-1: USB disconnect, device number 22 [ 1916.485473][ T29] audit: type=1400 audit(1782888139.794:2495): avc: denied { write } for pid=24710 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1916.530471][T10492] usblp0: removed [ 1916.583110][T17269] usb 10-1: USB disconnect, device number 4 [ 1916.703608][T24716] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1916.809245][T22322] udevd[22322]: Error opening device "/dev/input/event4": No such file or directory [ 1916.818746][T22322] udevd[22322]: Unable to EVIOCGABS device "/dev/input/event4" [ 1916.826374][T22322] udevd[22322]: Unable to EVIOCGABS device "/dev/input/event4" [ 1917.460387][T24724] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4237'. [ 1917.740411][ T5778] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1917.907830][T24733] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4237'. [ 1917.918478][ T5778] usb 7-1: Using ep0 maxpacket: 16 [ 1917.927826][T24733] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4237'. [ 1917.942692][ T5778] usb 7-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1917.952456][ T5778] usb 7-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 1917.960849][ T5778] usb 7-1: Product: syz [ 1917.965671][ T5778] usb 7-1: Manufacturer: syz [ 1917.970797][T24733] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4237'. [ 1917.970852][ T5778] usb 7-1: SerialNumber: syz [ 1917.990404][ T5778] usb 7-1: config 0 descriptor?? [ 1917.999263][ T5778] ums-onetouch 7-1:0.0: USB Mass Storage device detected [ 1918.348444][ T5778] usb 7-1: USB disconnect, device number 23 [ 1919.171113][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1920.790682][T24751] lo speed is unknown, defaulting to 1000 [ 1921.885255][ T136] wlan0: Trigger new scan to find an IBSS to join [ 1922.302155][T24763] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4248'. [ 1923.696821][T24773] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4252'. [ 1924.535487][T24776] siw: device registration error -23 [ 1926.374302][ T29] audit: type=1800 audit(1782888148.219:2496): pid=24789 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.4254" name="file0" dev="overlay" ino=960 res=0 errno=0 [ 1926.423508][ T7092] wlan0: Trigger new scan to find an IBSS to join [ 1926.435854][ T29] audit: type=1400 audit(1782888148.902:2497): avc: denied { node_bind } for pid=24782 comm="syz.1.4253" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1928.549319][T17703] block nbd5: Possible stuck request ffff888028a1e000: control (read@0,1024B). Runtime 120 seconds [ 1928.563921][T17703] block nbd5: Possible stuck request ffff888028a1e1c0: control (read@1024,3072B). Runtime 120 seconds [ 1928.933066][T24810] siw: device registration error -23 [ 1929.475177][T24815] lo speed is unknown, defaulting to 1000 [ 1930.906831][T19845] wlan0: Creating new IBSS network, BSSID 72:dd:cc:52:10:39 [ 1931.138726][T24824] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4264'. [ 1931.352048][T24828] siw: device registration error -23 [ 1931.714054][T19849] wlan0: Trigger new scan to find an IBSS to join [ 1933.988399][T24845] overlayfs: failed to clone upperpath [ 1935.512586][T24865] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4279'. [ 1935.653614][T24869] siw: device registration error -23 [ 1936.670614][T24875] tc_dump_action: action bad kind [ 1936.913661][T14899] wlan0: Trigger new scan to find an IBSS to join [ 1937.233120][T24883] overlayfs: failed to clone upperpath [ 1937.845900][T24897] tc_dump_action: action bad kind [ 1938.616968][T14899] wlan0: Creating new IBSS network, BSSID 3a:3f:cb:d9:e0:68 [ 1938.944953][T24906] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4292'. [ 1939.057278][T24861] sctp: [Deprecated]: syz.6.4274 (pid 24861) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1939.057278][T24861] Use struct sctp_sack_info instead [ 1941.855846][T10492] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 1941.887315][T24934] tc_dump_action: action bad kind [ 1942.045931][T10492] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 1942.065289][T10492] usb 7-1: config 0 has no interface number 0 [ 1942.078166][T10492] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1942.099875][T10492] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1942.118486][T10492] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1942.135520][T10492] usb 7-1: Manufacturer: syz [ 1942.145642][T10492] usb 7-1: SerialNumber: syz [ 1942.160484][T10492] usb 7-1: config 0 descriptor?? [ 1944.088674][T24948] overlayfs: failed to clone upperpath [ 1944.765009][T24964] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4312'. [ 1945.251400][T24967] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4313'. [ 1947.089439][T17919] usb 7-1: USB disconnect, device number 24 [ 1947.396963][T24992] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4317'. [ 1948.137041][T24996] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4321'. [ 1948.146406][T24987] overlayfs: failed to clone upperpath [ 1948.651321][T25009] overlayfs: missing 'lowerdir' [ 1949.139528][ T29] audit: type=1800 audit(1782888169.930:2498): pid=25003 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.6.4325" name="/newroot/180/bus" dev="tmpfs" ino=1008 res=0 errno=0 [ 1949.770189][T25026] overlayfs: failed to clone upperpath [ 1951.784447][T25037] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4333'. [ 1952.771519][T25045] overlayfs: failed to clone upperpath [ 1952.782443][T25047] netlink: del zone limit has 4 unknown bytes [ 1953.455804][T25056] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1953.856552][T25056] NILFS (nullb0): couldn't find nilfs on the device [ 1954.182365][T25061] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 1957.212967][T25087] overlayfs: failed to clone upperpath [ 1958.016824][T25089] SELinux: ebitmap: truncated map [ 1958.135970][T25089] SELinux: invalid class [ 1958.844676][T25089] SELinux: failed to load policy [ 1959.365262][ T4978] udevd[4978]: worker [22319] /devices/virtual/block/nbd5 is taking a long time [ 1959.617853][T25114] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4359'. [ 1959.676775][T25114] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4359'. [ 1959.741092][T25114] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4359'. [ 1962.003103][T17703] block nbd5: Possible stuck request ffff888028a1e000: control (read@0,1024B). Runtime 150 seconds [ 1962.014351][T17703] block nbd5: Possible stuck request ffff888028a1e1c0: control (read@1024,3072B). Runtime 150 seconds [ 1962.245720][T25130] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4364'. [ 1962.497176][ T29] audit: type=1400 audit(1782888182.248:2499): avc: denied { connect } for pid=25127 comm="syz.4.4365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1962.677025][ T29] audit: type=1400 audit(1782888182.386:2500): avc: denied { nlmsg_read } for pid=25140 comm="syz.6.4368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1962.782053][T25147] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1962.789384][T25147] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1963.395856][T25156] tc_dump_action: action bad kind [ 1964.318012][T25172] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1964.328329][T25172] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1964.338683][T25172] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1964.346461][T25172] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1964.353906][T25172] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1964.531810][T25180] overlayfs: failed to clone upperpath [ 1964.830101][ T189] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 1964.984288][ T189] usb 10-1: device descriptor read/64, error -71 [ 1965.252831][ T189] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1965.375873][T25202] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1965.536431][ T189] usb 10-1: device descriptor read/64, error -71 [ 1965.789938][ T189] usb usb10-port1: attempt power cycle [ 1965.848977][T25202] NILFS (nullb0): couldn't find nilfs on the device [ 1966.231590][T25170] lo speed is unknown, defaulting to 1000 [ 1966.293388][ T189] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 1966.366706][T25218] tc_dump_action: action bad kind [ 1966.537558][ T189] usb 10-1: device descriptor read/8, error -71 [ 1966.586866][T25172] Bluetooth: hci6: command tx timeout [ 1966.699215][T25226] tc_dump_action: action bad kind [ 1966.878727][ T189] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1966.935664][ T189] usb 10-1: device descriptor read/8, error -71 [ 1967.066786][ T189] usb usb10-port1: unable to enumerate USB device [ 1967.272536][T20612] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.355802][T20619] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1967.382293][T25170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1967.396257][T25170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1967.403919][T25170] bridge_slave_0: entered allmulticast mode [ 1967.416122][T25170] bridge_slave_0: entered promiscuous mode [ 1967.431959][T25170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1967.461079][T25170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1967.470927][T25170] bridge_slave_1: entered allmulticast mode [ 1967.481929][T25170] bridge_slave_1: entered promiscuous mode [ 1967.524262][T25170] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1967.542698][T25170] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1967.644335][T25170] team0: Port device team_slave_0 added [ 1967.665497][T25170] team0: Port device team_slave_1 added [ 1967.803653][T25170] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1967.811067][T25248] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 1967.848391][T25170] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1967.893005][ T29] audit: type=1400 audit(1782888187.212:2501): avc: denied { create } for pid=25250 comm="syz.4.4405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1967.900924][T25170] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1967.913702][ T29] audit: type=1400 audit(1782888187.212:2502): avc: denied { ioctl } for pid=25250 comm="syz.4.4405" path="socket:[74516]" dev="sockfs" ino=74516 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1967.964597][T25254] netlink: 140 bytes leftover after parsing attributes in process `syz.6.4407'. [ 1968.072856][T25170] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1968.079816][T25170] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1968.170916][T25170] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1968.217951][T20612] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.382387][T25268] overlayfs: failed to clone upperpath [ 1968.591067][T17269] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 1968.726411][T20612] bond0: (slave netdevsim1): Releasing backup interface [ 1968.766672][T17269] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1968.794581][T17269] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1968.815651][T25279] ubi16: detaching mtd0 [ 1968.820755][T25172] Bluetooth: hci6: command tx timeout [ 1968.831262][T20612] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1968.858685][T17269] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1968.874548][T25279] ubi16: mtd0 is detached [ 1968.888470][T17269] usb 7-1: config 0 descriptor?? [ 1968.928342][T25274] tc_dump_action: action bad kind [ 1969.001890][T25170] hsr_slave_0: entered promiscuous mode [ 1969.011199][T25170] hsr_slave_1: entered promiscuous mode [ 1969.017614][T25170] debugfs: 'hsr0' already exists in 'hsr' [ 1969.023377][T25170] Cannot create hsr debugfs directory [ 1969.082106][T20612] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1969.294996][T17269] ath6kl: Failed to submit usb control message: -71 [ 1969.316080][T17269] ath6kl: unable to send the bmi data to the device: -71 [ 1969.334995][T17269] ath6kl: Unable to send get target info: -71 [ 1969.363741][T17269] ath6kl: Failed to init ath6kl core: -71 [ 1969.389604][T17269] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1969.416166][T17269] usb 7-1: USB disconnect, device number 25 [ 1970.333644][T20612] bridge_slave_1: left allmulticast mode [ 1970.355302][T20612] bridge_slave_1: left promiscuous mode [ 1970.377452][T20612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1970.439144][T20612] bridge_slave_0: left allmulticast mode [ 1970.477155][T20612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1971.129949][T25172] Bluetooth: hci6: command tx timeout [ 1971.143928][ T136] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1971.982173][T20612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1972.204449][T20612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1972.256149][T20612] bond0 (unregistering): Released all slaves [ 1972.352189][T20612] bond1 (unregistering): (slave lo): Releasing backup interface [ 1972.403390][T20612] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1972.539846][ T29] audit: type=1400 audit(1782888191.466:2503): avc: denied { write } for pid=25300 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1972.580521][T20612] bond1 (unregistering): Released all slaves [ 1972.660728][T25318] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1972.670095][T25318] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1972.675117][T25317] lo speed is unknown, defaulting to 1000 [ 1972.679674][T25318] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1972.933442][T25349] overlayfs: missing 'lowerdir' [ 1973.543662][T25172] Bluetooth: hci6: command tx timeout [ 1973.554911][ T29] audit: type=1800 audit(1782888192.435:2504): pid=25339 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.4.4435" name="/newroot/1017/bus" dev="tmpfs" ino=5358 res=0 errno=0 [ 1973.842211][ T29] audit: type=1400 audit(1782888192.711:2505): avc: denied { write } for pid=25342 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1973.927784][T25355] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1973.927784][T25355] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1973.961329][T20612] IPVS: stopping master sync thread 23188 ... [ 1974.890656][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1974.919636][T25362] tc_dump_action: action bad kind [ 1976.321635][T14073] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1976.372287][T20612] hsr_slave_0: left promiscuous mode [ 1976.445104][T20612] veth1_macvtap: left promiscuous mode [ 1976.457828][T25376] netlink: 'syz.9.4442': attribute type 10 has an invalid length. [ 1976.513991][T20612] veth0_macvtap: left promiscuous mode [ 1976.525243][T25384] comedi comedi0: bad chanlist[0]=0x0000000e chan=14 range length=4 [ 1976.538817][T20612] veth1_vlan: left promiscuous mode [ 1976.553213][T20612] veth0_vlan: left promiscuous mode [ 1976.732699][T14073] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1976.759278][T14073] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1976.806933][T14073] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1976.895254][T14073] usb 7-1: config 220 has no interface number 2 [ 1976.918736][T14073] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1976.966703][T14073] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1977.184867][T14073] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1977.193466][T14073] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1977.890688][T14073] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1977.902872][T14073] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.929217][T14073] usb 7-1: Product: syz [ 1977.965344][T14073] usb 7-1: Manufacturer: syz [ 1977.976339][T14073] usb 7-1: SerialNumber: syz [ 1978.029423][ T29] audit: type=1400 audit(1782888196.568:2506): avc: denied { write } for pid=25383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1978.200336][ T29] audit: type=1400 audit(1782888196.725:2507): avc: denied { write } for pid=25413 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1978.391751][T20612] team0 (unregistering): Port device team_slave_1 removed [ 1978.408153][T20612] team0 (unregistering): Port device team_slave_0 removed [ 1978.678241][T14073] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1978.696150][T14073] uvcvideo 7-1:220.0: No valid video chain found. [ 1978.709355][T14073] usb 7-1: selecting invalid altsetting 0 [ 1978.753684][T25376] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1978.843006][T25376] team0: Port device netdevsim1 added [ 1978.849371][T25408] tc_dump_action: action bad kind [ 1978.960699][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1979.248184][T14073] usb 7-1: selecting invalid altsetting 0 [ 1979.253966][T14073] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1979.302851][T25170] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1979.312628][T14073] usb 7-1: USB disconnect, device number 26 [ 1979.362638][T25436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4462'. [ 1979.412453][T25170] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1979.433804][T25170] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1979.558935][T25170] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1979.615046][T25170] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1979.729040][T25170] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1980.137008][T25449] tc_dump_action: action bad kind [ 1980.144681][T25170] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1980.254635][T25170] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1981.157355][T25170] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1981.186620][T25170] 8021q: adding VLAN 0 to HW filter on device team0 [ 1981.199277][T20618] bridge0: port 1(bridge_slave_0) entered blocking state [ 1981.206359][T20618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1981.255012][T20179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1981.262125][T20179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1981.391762][T25485] tc_dump_action: action bad kind [ 1981.795644][T25170] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1981.848478][ T29] audit: type=1400 audit(1782888200.074:2508): avc: denied { write } for pid=25433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1981.956951][T25170] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1982.074896][ T29] audit: type=1400 audit(1782888200.287:2509): avc: denied { write } for pid=25493 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1982.285028][ T5273] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1982.525664][T25516] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1982.801929][T25511] tc_dump_action: action bad kind [ 1983.474606][T25535] netlink: 'syz.1.4490': attribute type 1 has an invalid length. [ 1983.537033][T25536] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4491'. [ 1983.646805][T25536] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4491'. [ 1983.917013][ T29] audit: type=1400 audit(1782888201.966:2510): avc: denied { write } for pid=25521 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1984.192682][T25558] overlayfs: missing 'lowerdir' [ 1984.712130][ T29] audit: type=1800 audit(1782888202.612:2511): pid=25549 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.6.4493" name="/newroot/208/bus" dev="tmpfs" ino=1155 res=0 errno=0 [ 1984.929515][ T29] audit: type=1400 audit(1782888202.935:2512): avc: denied { write } for pid=25564 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1985.066587][T25170] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1985.202596][ T5273] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1985.279158][T25170] veth0_vlan: entered promiscuous mode [ 1985.298229][T25581] afs: Unknown parameter 'dy' [ 1985.386644][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1985.479547][T25578] overlayfs: failed to clone upperpath [ 1985.487464][T25170] veth1_vlan: entered promiscuous mode [ 1986.399516][T25170] veth0_macvtap: entered promiscuous mode [ 1986.420889][T25170] veth1_macvtap: entered promiscuous mode [ 1986.720456][T25170] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1987.136775][T25170] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1987.223371][T20179] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1987.248879][T20179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1987.280830][T20179] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1987.318036][T20179] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1987.674104][T13019] Bluetooth: hci1: command 0x0406 tx timeout [ 1987.765728][T20179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1987.773560][T20179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1987.784924][T10492] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1988.047005][T14899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1988.055515][T14899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1988.247545][T10492] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1988.366927][T25658] overlayfs: missing 'lowerdir' [ 1989.042339][ T29] audit: type=1800 audit(1782888206.524:2513): pid=25650 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.9.4525" name="/newroot/69/bus" dev="tmpfs" ino=397 res=0 errno=0 [ 1989.076839][T10492] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1989.216601][T10492] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1989.288575][T10492] usb 7-1: config 0 descriptor?? [ 1990.144122][T25682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1990.227568][T10492] ath6kl: Failed to submit usb control message: -71 [ 1990.260058][T10492] ath6kl: unable to send the bmi data to the device: -71 [ 1990.302747][T10492] ath6kl: Unable to send get target info: -71 [ 1990.329726][T10492] ath6kl: Failed to init ath6kl core: -71 [ 1990.348392][T25688] overlayfs: failed to clone upperpath [ 1990.357527][T10492] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1990.400814][T10492] usb 7-1: USB disconnect, device number 27 [ 1990.655004][T25697] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4541'. [ 1990.665120][T17919] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 1991.296713][T17919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 1991.312696][T17919] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1991.323767][T17919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1991.343851][T17919] usb 3-1: config 0 descriptor?? [ 1991.389665][T25719] nfs: Deprecated parameter 'nointr' [ 1991.471197][T25725] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4553'. [ 1991.529388][T25686] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1991.584934][T25729] netlink: 'syz.6.4555': attribute type 1 has an invalid length. [ 1992.017671][T25740] SELinux: ebitmap: truncated map [ 1992.024200][T25740] SELinux: invalid class [ 1992.184681][T25740] SELinux: failed to load policy [ 1992.661776][T17919] ath6kl: Failed to submit usb control message: -110 [ 1993.080620][T17919] ath6kl: unable to send the bmi data to the device: -110 [ 1993.103393][T17919] ath6kl: Unable to send get target info: -110 [ 1993.113972][T17919] ath6kl: Failed to init ath6kl core: -110 [ 1993.120761][T17919] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1993.246321][ T5778] usb 3-1: USB disconnect, device number 22 [ 1993.251769][ T29] audit: type=1400 audit(1782888210.612:2514): avc: denied { connect } for pid=25749 comm="syz.6.4561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1993.734614][T17919] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1993.813968][T25779] netlink: 'syz.6.4574': attribute type 1 has an invalid length. [ 1993.824861][T25779] netlink: 'syz.6.4574': attribute type 2 has an invalid length. [ 1993.916087][T17919] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1993.935001][T17919] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 1993.957221][T17919] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 1993.974990][T17919] usb 10-1: string descriptor 0 read error: -22 [ 1993.984960][T17919] usb 10-1: New USB device found, idVendor=0e41, idProduct=4241, bcdDevice= 0.40 [ 1994.010509][T17919] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.162318][T25799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4584'. [ 1994.377673][T25806] binder: 25805:25806 ioctl c0306201 0 returned -14 [ 1994.580062][T25812] rdma_rxe: rxe_newlink: failed to add syz_tun [ 1994.718533][T17919] usb 10-1: Can't set UAC3 power state to 1 for id 10 [ 1994.762818][T17919] usb 10-1: 2:0: failed to get current value for ch 0 (-71) [ 1994.787753][T17919] usb 10-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1994.796147][T17919] usb 10-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1994.809753][T17919] usb 10-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1995.198058][T17703] block nbd5: Possible stuck request ffff888028a1e000: control (read@0,1024B). Runtime 180 seconds [ 1995.209396][T17703] block nbd5: Possible stuck request ffff888028a1e1c0: control (read@1024,3072B). Runtime 180 seconds [ 1995.472217][T17919] usb 10-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1995.772640][T25823] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4594'. [ 1995.831842][T17919] usb 10-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1996.393310][T25823] siw: device registration error -23 [ 1996.440417][T17919] usb 10-1: USB disconnect, device number 9 [ 1997.534696][T25862] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4612'. [ 1997.830355][T25869] tc_dump_action: action bad kind [ 1998.581141][T25866] siw: device registration error -23 [ 1998.898363][T25879] kAFS: No cell specified [ 1999.779753][T25893] overlayfs: failed to clone upperpath [ 2000.350897][ T29] audit: type=1400 audit(1782888217.181:2515): avc: denied { write } for pid=25870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2000.522357][ T29] audit: type=1400 audit(1782888217.338:2516): avc: denied { write } for pid=25910 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2000.758082][T10492] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 2000.955519][T10492] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 2000.971635][T10492] usb 7-1: config 0 has no interface number 0 [ 2000.991047][T10492] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2001.008556][T10492] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 2001.018701][T10492] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 2001.026902][T10492] usb 7-1: Manufacturer: syz [ 2001.034996][T10492] usb 7-1: SerialNumber: syz [ 2001.052994][T10492] usb 7-1: config 0 descriptor?? [ 2001.185359][ T29] audit: type=1400 audit(1782888217.947:2517): avc: denied { write } for pid=25913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2001.275726][ T29] audit: type=1400 audit(1782888218.030:2518): avc: denied { write } for pid=25924 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2001.552819][ T29] audit: type=1400 audit(1782888218.289:2519): avc: denied { write } for pid=25927 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2001.637254][ T29] audit: type=1400 audit(1782888218.372:2520): avc: denied { write } for pid=25938 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2001.990471][ T29] audit: type=1400 audit(1782888218.685:2521): avc: denied { write } for pid=25941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2002.069397][ T29] audit: type=1400 audit(1782888218.722:2522): avc: denied { write } for pid=25955 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2002.083253][T20619] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2003.457013][T25623] usb 7-1: USB disconnect, device number 28 [ 2005.493917][ T30] INFO: task syz.5.4067:23977 blocked for more than 143 seconds. [ 2005.502055][ T30] Tainted: G L syzkaller #0 [ 2005.508609][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2005.517307][ T30] task:syz.5.4067 state:D stack:27352 pid:23977 tgid:23976 ppid:16997 task_flags:0x400040 flags:0x00080002 [ 2005.529612][ T30] Call Trace: [ 2005.533094][ T30] [ 2005.536031][ T30] __schedule+0x125c/0x6730 [ 2005.540739][ T30] ? __pfx___schedule+0x10/0x10 [ 2005.545626][ T30] ? find_held_lock+0x2b/0x80 [ 2005.550481][ T30] ? schedule+0x225/0x2c0 [ 2005.554826][ T30] schedule+0xdd/0x2c0 [ 2005.558981][ T30] schedule_preempt_disabled+0x13/0x30 [ 2005.564450][ T30] __mutex_lock+0xccc/0x1bd0 [ 2005.569052][ T30] ? bdev_open+0x41a/0xe40 [ 2005.573602][ T30] ? find_held_lock+0x2b/0x80 [ 2005.578302][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2005.584088][ T30] ? bdev_open+0x41a/0xe40 [ 2005.588526][ T30] bdev_open+0x41a/0xe40 [ 2005.592862][ T30] ? iput+0x3a/0x40 [ 2005.596681][ T30] blkdev_open+0x34e/0x4f0 [ 2005.601109][ T30] do_dentry_open+0x6ab/0x14d0 [ 2005.605907][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 2005.610859][ T30] vfs_open+0x82/0x3f0 [ 2005.615038][ T30] path_openat+0x2873/0x4280 [ 2005.619662][ T30] ? __pfx_path_openat+0x10/0x10 [ 2005.624659][ T30] do_file_open+0x20e/0x430 [ 2005.629168][ T30] ? __pfx_do_file_open+0x10/0x10 [ 2005.634257][ T30] ? alloc_fd+0x471/0x7a0 [ 2005.638607][ T30] ? do_getname+0x191/0x390 [ 2005.643117][ T30] do_sys_openat2+0x10f/0x1e0 [ 2005.647978][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 2005.653213][ T30] __x64_sys_openat+0x12d/0x210 [ 2005.658184][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 2005.663596][ T30] do_syscall_64+0x115/0x870 [ 2005.668569][ T30] ? clear_bhb_loop+0x40/0x90 [ 2005.673280][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2005.679429][ T30] RIP: 0033:0x7f949e75e68e [ 2005.683880][ T30] RSP: 002b:00007f949f74cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2005.692353][ T30] RAX: ffffffffffffffda RBX: 00007f949f74d6c0 RCX: 00007f949e75e68e [ 2005.701029][ T30] RDX: ffffffffd0921a0e RSI: 00007f949f74cc00 RDI: ffffffffffffff9c [ 2005.709027][ T30] RBP: 00007f949f74cc00 R08: 0000000000000000 R09: 0000000000000000 [ 2005.717045][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 2005.725039][ T30] R13: 00007f949ea26038 R14: 00007f949ea25fa0 R15: 00007fff664fe438 [ 2005.733044][ T30] [ 2005.736093][ T30] [ 2005.736093][ T30] Showing all locks held in the system: [ 2005.743913][ T30] 1 lock held by khungtaskd/30: [ 2005.748773][ T30] #0: ffffffff8e9e60c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 2005.758710][ T30] 2 locks held by getty/5363: [ 2005.763384][ T30] #0: ffff88823bf628a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2005.773284][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 2005.783465][ T30] 1 lock held by udevd/22319: [ 2005.788230][ T30] #0: ffff8880289a7350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 2005.797624][ T30] 1 lock held by syz.5.4067/23977: [ 2005.802727][ T30] #0: ffff8880289a7350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 2005.812718][ T30] [ 2005.815047][ T30] ============================================= [ 2005.815047][ T30] [ 2005.823513][ T30] NMI backtrace for cpu 0 [ 2005.823538][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2005.823567][ T30] Tainted: [L]=SOFTLOCKUP [ 2005.823574][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2005.823586][ T30] Call Trace: [ 2005.823593][ T30] [ 2005.823601][ T30] dump_stack_lvl+0x100/0x190 [ 2005.823630][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 2005.823661][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2005.823690][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 2005.823719][ T30] sys_info+0x141/0x190 [ 2005.823741][ T30] watchdog+0xcb1/0x1030 [ 2005.823771][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2005.823800][ T30] ? __pfx_watchdog+0x10/0x10 [ 2005.823825][ T30] ? __kthread_parkme+0x18c/0x230 [ 2005.823857][ T30] ? kthread+0x13a/0x450 [ 2005.823876][ T30] ? __pfx_watchdog+0x10/0x10 [ 2005.823900][ T30] kthread+0x370/0x450 [ 2005.823920][ T30] ? __pfx_kthread+0x10/0x10 [ 2005.823944][ T30] ret_from_fork+0x72b/0xd50 [ 2005.823974][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2005.824005][ T30] ? __switch_to+0x800/0x10f0 [ 2005.824028][ T30] ? __pfx_kthread+0x10/0x10 [ 2005.824052][ T30] ret_from_fork_asm+0x1a/0x30 [ 2005.824086][ T30] [ 2005.824095][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2005.956177][ C1] NMI backtrace for cpu 1 [ 2005.956196][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 2005.956223][ C1] Tainted: [L]=SOFTLOCKUP [ 2005.956230][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2005.956242][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 2005.956268][ C1] Code: 86 db 5e 00 48 89 df 5b e9 9d 56 64 00 be 03 00 00 00 5b e9 12 26 f8 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 05 80 2a 12 48 8b 34 24 65 48 8b 15 e1 7f 2a [ 2005.956287][ C1] RSP: 0018:ffffc90000a08e38 EFLAGS: 00000282 [ 2005.956302][ C1] RAX: ffffed100681da10 RBX: ffff8880340ed000 RCX: ffffffff89705064 [ 2005.956315][ C1] RDX: dffffc0000000000 RSI: ffff8880340ed080 RDI: ffff8880340ed000 [ 2005.956328][ C1] RBP: ffff8880340ed198 R08: 0000000000000001 R09: ffff8880340ed040 [ 2005.956340][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 2005.956352][ C1] R13: ffff8880340ed010 R14: ffff8880340ed000 R15: dffffc0000000000 [ 2005.956365][ C1] FS: 0000000000000000(0000) GS:ffff8881241e0000(0000) knlGS:0000000000000000 [ 2005.956383][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2005.956396][ C1] CR2: 00007fd45c1eb158 CR3: 000000000e792000 CR4: 00000000003526f0 [ 2005.956408][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 00000000ffffffff [ 2005.956420][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2005.956432][ C1] Call Trace: [ 2005.956439][ C1] [ 2005.956445][ C1] __qdisc_run+0x94/0x1b20 [ 2005.956471][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 2005.956496][ C1] net_tx_action+0x549/0xf50 [ 2005.956518][ C1] handle_softirqs+0x1ea/0x9b0 [ 2005.956546][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2005.956570][ C1] ? _raw_spin_unlock+0x28/0x50 [ 2005.956593][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 2005.956614][ C1] __irq_exit_rcu+0x162/0x210 [ 2005.956642][ C1] irq_exit_rcu+0x9/0x30 [ 2005.956665][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 2005.956692][ C1] [ 2005.956698][ C1] [ 2005.956706][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2005.956727][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 2005.956753][ C1] Code: b6 a4 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 b9 2e 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 2005.956771][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000242 [ 2005.956785][ C1] RAX: 000000000bb954c1 RBX: ffff88801ea9a540 RCX: ffffffff8b9ce2d5 [ 2005.956798][ C1] RDX: 0000000000000000 RSI: ffffffff8e15d8c3 RDI: ffffffff8c3e9b80 [ 2005.956810][ C1] RBP: ffffed1003d534a8 R08: 0000000000000001 R09: ffffed10170a678d [ 2005.956823][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 2005.956835][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 2005.956852][ C1] ? ct_kernel_exit+0x125/0x180 [ 2005.956881][ C1] default_idle+0x9/0x10 [ 2005.956897][ C1] default_idle_call+0x6c/0xb0 [ 2005.956915][ C1] do_idle+0x3a7/0x5b0 [ 2005.956941][ C1] ? __pfx_do_idle+0x10/0x10 [ 2005.956966][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 2005.956997][ C1] cpu_startup_entry+0x4f/0x60 [ 2005.957024][ C1] start_secondary+0x21d/0x2d0 [ 2005.957048][ C1] ? __pfx_start_secondary+0x10/0x10 [ 2005.957076][ C1] common_startup_64+0x13e/0x158 [ 2005.957102][ C1] [ 2006.289407][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2006.296256][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 2006.306903][ T30] Tainted: [L]=SOFTLOCKUP [ 2006.311199][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 2006.321239][ T30] Call Trace: [ 2006.324491][ T30] [ 2006.327397][ T30] dump_stack_lvl+0x100/0x190 [ 2006.332054][ T30] vpanic+0x552/0x970 [ 2006.336009][ T30] ? __pfx_vpanic+0x10/0x10 [ 2006.340501][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 2006.346630][ T30] panic+0xd1/0xe0 [ 2006.350324][ T30] ? __pfx_panic+0x10/0x10 [ 2006.354734][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 2006.360873][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 2006.367032][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 2006.373162][ T30] ? watchdog.cold+0x1ec/0x234 [ 2006.377900][ T30] ? watchdog+0xcc1/0x1030 [ 2006.382294][ T30] watchdog.cold+0x1fd/0x234 [ 2006.386862][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2006.392645][ T30] ? __pfx_watchdog+0x10/0x10 [ 2006.397300][ T30] ? __kthread_parkme+0x18c/0x230 [ 2006.402306][ T30] ? kthread+0x13a/0x450 [ 2006.406531][ T30] ? __pfx_watchdog+0x10/0x10 [ 2006.411182][ T30] kthread+0x370/0x450 [ 2006.415223][ T30] ? __pfx_kthread+0x10/0x10 [ 2006.419788][ T30] ret_from_fork+0x72b/0xd50 [ 2006.424356][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 2006.429444][ T30] ? __switch_to+0x800/0x10f0 [ 2006.434111][ T30] ? __pfx_kthread+0x10/0x10 [ 2006.438675][ T30] ret_from_fork_asm+0x1a/0x30 [ 2006.443442][ T30] [ 2006.446662][ T30] Kernel Offset: disabled [ 2006.450970][ T30] Rebooting in 86400 seconds..