last executing test programs: 8m44.662561829s ago: executing program 32 (id=3388): syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) link(&(0x7f00000001c0)='./file1\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000080)) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e", 0x21) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 7m47.772329581s ago: executing program 33 (id=3447): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd"], 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20004056) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20099ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 7m12.681982165s ago: executing program 34 (id=3472): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f00000000c0)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0xfffffffffffffffb) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x1}}, 0x14) write$P9_RGETATTR(r1, &(0x7f00000002c0)={0xa0, 0x19, 0x0, {0x1442, {0x1, 0x0, 0x20000000000}, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x800, 0x1000, 0x8, 0x0, 0xf, 0x0, 0x0, 0x8000000000000000, 0x0, 0x6, 0x0, 0x0, 0x10}}, 0xa0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000140), 0xc, &(0x7f0000000c00)={&(0x7f0000000c80)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7, 0x3f}}}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x8, 0x111, 0x0, 0x1, {0x4}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7ff}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7fffffff}, @NL80211_ATTR_PEER_MEASUREMENTS={0x10, 0x111, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200000c0}, 0x2000c000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x8001, 0x18}, 0x50) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) pipe(&(0x7f0000000080)) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) 7m0.584670241s ago: executing program 5 (id=3496): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) time(&(0x7f00000000c0)) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x24, 0x14, 0xf0b, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7, 0xa}, {0x1, 0xfff3}, {0xffe0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x10000000}, 0x8080) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r0, 0xcd2e8000) r4 = open(&(0x7f0000000040)='.\x00', 0x101480, 0x24) getdents64(r4, 0x0, 0x0) getdents64(r4, &(0x7f0000000fc0)=""/211, 0xd3) 6m59.050483039s ago: executing program 5 (id=3497): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) setresgid(0xee00, 0xee01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x709d2a, 0x25dfdbfc, 0x9, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) r7 = dup2(r5, r5) faccessat2(r7, &(0x7f0000000880)='\x00', 0x1, 0x1100) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x4, 0x6, 0x0, 0x4, 0x68c6, 0xd, 0x8001, 0x4, 0x4, 0x2, 0x1, 0x6, 0x6, 0x8, 0x10, 0x20, {0xa, 0x5}, 0x0, 0x8}}) 6m57.107757603s ago: executing program 5 (id=3498): r0 = openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) write$P9_RVERSION(r0, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0xee, 0x8, '9P2000.L'}, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffe05, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, 0x15, 0x301, 0x70bd25, 0x25dfdbfb, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r2 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001840)={0xc, 0x0, &(0x7f0000000080)=[@free_buffer], 0x0, 0x0, 0x0}) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000000c0), 0xf00) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f0000000080)={0x1d, r9}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x38, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000100ffff000000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000001842000003000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f00000085000000060000009500000000000000068207007f000000b7080000000000007b8af8ff00000000b708000066ea00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000000000085ec000000a50000001859000003000000000000000000000095000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x40, 0x0, 0x0, 0x41100, 0x0, '\x00', r9, 0x0, r0, 0x8, &(0x7f0000000340)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xf, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000400)=[{0x0, 0x2, 0x0, 0xa}, {0x0, 0x3, 0xb, 0x4}, {0x0, 0x2, 0x3, 0x4}, {0x5, 0x3, 0xc, 0xc}], 0x10, 0x476}, 0x94) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0}) r10 = add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) keyctl$revoke(0x3, r10) 6m39.158890682s ago: executing program 35 (id=3498): r0 = openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) write$P9_RVERSION(r0, &(0x7f00000000c0)={0x15, 0x65, 0xffff, 0xee, 0x8, '9P2000.L'}, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffe05, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, 0x15, 0x301, 0x70bd25, 0x25dfdbfb, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r2 = fsopen(&(0x7f0000000e00)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000800)='clientaddr\x00', &(0x7f0000000900)='127.0.0.1\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000001840)={0xc, 0x0, &(0x7f0000000080)=[@free_buffer], 0x0, 0x0, 0x0}) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, &(0x7f00000000c0), 0xf00) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_raw(r8, &(0x7f0000000080)={0x1d, r9}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x38, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000100ffff000000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000001842000003000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f00000085000000060000009500000000000000068207007f000000b7080000000000007b8af8ff00000000b708000066ea00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="000000000085ec000000a50000001859000003000000000000000000000095000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x40, 0x0, 0x0, 0x41100, 0x0, '\x00', r9, 0x0, r0, 0x8, &(0x7f0000000340)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xf, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000400)=[{0x0, 0x2, 0x0, 0xa}, {0x0, 0x3, 0xb, 0x4}, {0x0, 0x2, 0x3, 0x4}, {0x5, 0x3, 0xc, 0xc}], 0x10, 0x476}, 0x94) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0}) r10 = add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) keyctl$revoke(0x3, r10) 6m11.530626145s ago: executing program 36 (id=3521): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r6, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) dup(0xffffffffffffffff) syz_open_dev$video4linux(&(0x7f0000000080), 0xff, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000030100"/18, @ANYRES32, @ANYBLOB="210000002000000020001280080001006873720014", @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x0) 5m21.270116162s ago: executing program 4 (id=3566): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x2, 0x14, 0x6, 0x8, 0x4, 0x0, 0x0, 0x25dfdbff, [@sadb_x_sec_ctx={0x1, 0x18, 0x6, 0xa3}, @sadb_key={0x1, 0x8}]}, 0x20}}, 0x40080) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x400) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000440)=@usbdevfs_connect={0x6}) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$uinput_user_dev(r4, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a0, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x5, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0x6, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x7, 0x0, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x2, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x7, 0xb66, 0x2, 0x5, 0x80000001, 0x8000081, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x10001, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x7fff, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x16, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000180)={0x8, 0xffffffffffffffff, 0x1}) openat$cgroup_pressure(r5, &(0x7f00000001c0)='memory.pressure\x00', 0x2, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r7, 0x1, &(0x7f0000000140)={{0x0, 0x989680}, {r8, r9+10000000}}, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000080)=[{0x6, 0xc0, 0x0, 0x6}]}) socket(0x15, 0x5, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) 5m20.211674989s ago: executing program 6 (id=3579): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x2, 0x1, 0x80000000}) fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5m20.017724665s ago: executing program 4 (id=3569): r0 = gettid() migrate_pages(r0, 0x3, &(0x7f0000000100)=0x1, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r1, 0x8, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x802, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_dump={0x47, 0x1ff, 0x7}}) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) shmget(0x0, 0x2000, 0x300, &(0x7f0000001000/0x2000)=nil) shmget(0x0, 0x3000, 0x4, &(0x7f0000001000/0x3000)=nil) open_tree(0xffffffffffffffff, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800) sendmmsg$inet6(r4, &(0x7f0000001840), 0x3b, 0x0) 5m19.017068339s ago: executing program 6 (id=3570): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x460, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_open_dev$dvb_demux(0x0, 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5m18.445479824s ago: executing program 4 (id=3573): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timerfd_create(0x8, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000000)="13000000010203", 0x7}, {&(0x7f0000000140)}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0xfea000, 0x2000402) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) 5m15.699174622s ago: executing program 4 (id=3578): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(0x0, 0xd, 0x2, 0x0, 0x0, 0x400000) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x8, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x2}], 0x0, 0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007f9, &(0x7f0000000280)={0x2, 0x4e23, @empty}, 0x10) 5m12.504533394s ago: executing program 4 (id=3581): syz_usb_connect(0x0, 0x5d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000551b8920b822276080c2010203010902"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x840) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create(0x2) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000100)={0xfffffffc, [[0xffffffff, 0xfffffffc, 0xffffffff, 0xfffffffd, 0x3, 0x1, 0xffffffff, 0xffffffff], [0x1, 0xffffffff, 0x1, 0xffffffff, 0x6, 0x9, 0xffffffff, 0xfffffff0], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x4, 0x10, 0xffffffff]], '\x00', [{0x0, 0x989680}, {0x0, 0x989680}, {0x4, 0x989680}, {0x80, 0x989680}, {0x6, 0x989680}, {0x0, 0x989680}, {0x101, 0x989683}, {0x1, 0x989680}, {0x0, 0x800}, {0x0, 0x989680}, {0x0, 0x989680}, {0x9, 0x989680}], '\x00', 0xffffffff}) 5m2.830941574s ago: executing program 37 (id=3570): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2404a8f5}, 0x4008004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8f", 0x460, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_open_dev$dvb_demux(0x0, 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m59.834226091s ago: executing program 4 (id=3593): setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) unshare(0x6a060000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000100)=@rnullb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x0, &(0x7f0000000280)}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 4m43.020555332s ago: executing program 38 (id=3593): setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) unshare(0x6a060000) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000100)=@rnullb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000340)={0x0, &(0x7f0000000280)}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 3m30.54599204s ago: executing program 9 (id=3676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000280), 0x2000001, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x11, 0xfffffffffffffffa) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$HIDIOCGUCODE(r5, 0xc018480d, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 3m28.789717005s ago: executing program 9 (id=3677): syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) link(&(0x7f00000001c0)='./file1\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x58, &(0x7f00000000c0)=[@in={0x2, 0x1000, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x843}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x7, @private2, 0x767c}]}, &(0x7f0000000080)=0x10) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a", 0x20) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa4}}, 0x4) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r3, 0xa) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) 3m22.457027396s ago: executing program 9 (id=3683): socket(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r0 = socket(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) listns(&(0x7f00000010c0)={0x20, 0x0, 0x7}, &(0x7f0000000040)=[0x0], 0xf4240, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084ffffffff0000007f00000100000000"], 0x18, 0x40}, 0x20048844) syz_open_dev$evdev(&(0x7f0000000340), 0x6, 0x391083) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={0x0, 0x80000000}, &(0x7f0000000180)=0x8) 3m21.340618389s ago: executing program 9 (id=3684): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x101042, 0x33) fsetxattr(r0, &(0x7f0000000180)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000140)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x1}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="dc0000002a0001"], 0xdc}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys\x00', 0x152) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000920)='./sys/bus/usb/devices/usb1/bConfigurationValue\x00', 0x2, 0x15d) write(r3, &(0x7f0000000960)='1', 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x3}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r4, 0x40046208, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x40) 3m17.046664286s ago: executing program 9 (id=3688): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x40, @none, 0x0, 0x2}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r4, &(0x7f0000000180)='traceon', 0x7) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x169e41, 0x0) 3m16.424763431s ago: executing program 9 (id=3690): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0x1ff}}}, 0x6) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x20, 0x22, 0xe3, {0xe3, 0x7, "80210b7c9c417da7e8c414b95642f08e7377395a402c371e16e92a81bdff3dfd51c4a7eecd7aa728f90dcdc7a0b8b565bf28af1efc3f12b221a8975f8b17c8ed6becaf2d8ed15d33b95817f77e3ca11f410a02143ebc9b4696ef7426b0b568f03e7dcb4cc909c6c397b8501a379ce4c8bf42aedd955f7a4f0a256970177f34113b968a98ede57224d65d7a6160959b55c161338d499261e7c2b95361150ba46383acf27ca6dba7aae4f4f838661a6e27ed99620043d4a1a748d78489cc0170fe4abb2844dc339ed9376066d6c9b905be30e3917f76f96cb3605c0db5e872ef1231"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000240)={0x20, 0x17, 0x4c, "618c5c12228c4c0a98de798ded31f6d57d17ce6d49fac5cabd2d9b2af5cb005c0130af3f29eda1251910742060036f926e452e266dc792350923f2792e160c26aa093db806e5b52a2419f6f9"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) socket(0x2b, 0x5, 0x0) setns(0xc9, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000506030000000000000000000000000705000100"/40], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000300)=[0x0], 0x1, 0x0}) close(0x3) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r4, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4ecf, r2, 0x0, 0x0, 0x80000000600}]) pipe2$watch_queue(&(0x7f0000001180), 0x80) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0xc3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 3m16.231341531s ago: executing program 39 (id=3690): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0x1ff}}}, 0x6) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x20, 0x22, 0xe3, {0xe3, 0x7, "80210b7c9c417da7e8c414b95642f08e7377395a402c371e16e92a81bdff3dfd51c4a7eecd7aa728f90dcdc7a0b8b565bf28af1efc3f12b221a8975f8b17c8ed6becaf2d8ed15d33b95817f77e3ca11f410a02143ebc9b4696ef7426b0b568f03e7dcb4cc909c6c397b8501a379ce4c8bf42aedd955f7a4f0a256970177f34113b968a98ede57224d65d7a6160959b55c161338d499261e7c2b95361150ba46383acf27ca6dba7aae4f4f838661a6e27ed99620043d4a1a748d78489cc0170fe4abb2844dc339ed9376066d6c9b905be30e3917f76f96cb3605c0db5e872ef1231"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000240)={0x20, 0x17, 0x4c, "618c5c12228c4c0a98de798ded31f6d57d17ce6d49fac5cabd2d9b2af5cb005c0130af3f29eda1251910742060036f926e452e266dc792350923f2792e160c26aa093db806e5b52a2419f6f9"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) socket(0x2b, 0x5, 0x0) setns(0xc9, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000506030000000000000000000000000705000100"/40], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000300)=[0x0], 0x1, 0x0}) close(0x3) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r4, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4ecf, r2, 0x0, 0x0, 0x80000000600}]) pipe2$watch_queue(&(0x7f0000001180), 0x80) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0xc3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 3m3.791284838s ago: executing program 7 (id=3701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) socket$inet6_sctp(0xa, 0x1, 0x84) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f00000001c0), 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 3m0.497750231s ago: executing program 7 (id=3705): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) open(0x0, 0x80140, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001940)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0c70f5db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb06001b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f00000001c0)='asymmetric\x00', &(0x7f00000000c0)=@chain={'key_or_keyring:', r4}) keyctl$KEYCTL_MOVE(0x1e, r4, r3, r2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m59.744115403s ago: executing program 7 (id=3706): syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) link(&(0x7f00000001c0)='./file1\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000080)) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e", 0x21) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) recvmmsg(r2, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 2m57.805832328s ago: executing program 7 (id=3709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x28, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0}, 0x263b}], 0x1, 0x40004000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @fd=r3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x38, r2, 0xc4fc9e906872338b, 0x0, 0xf0ffff, {{0x5}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x6, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x4}]}]}]}, 0x38}}, 0x0) socket$unix(0x1, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000025bd7000fbdbdf25093b1486d03d4264b32c5d4b19de5fbb607e081338387d7c140000007fe292000800"/56], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(0xffffffffffffffff, 0xaea2, 0x9000000000000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@setlink={0x34, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 2m53.493778719s ago: executing program 7 (id=3713): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008d}, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x18, 0x3f9, 0x20, 0x70bd28, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x4000) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x258, 0x4c, 0x232, 0x258, 0x0, 0x370, 0x2e8, 0x2e8, 0x370, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @mcast2, [], [], 'veth1_to_bond\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x0, 0x230, 0x258, 0x0, {}, [@common=@unspec=@cluster={{0x30}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@dev={0xac, 0x14, 0x14, 0x8}, [], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@ipv4, [], @ipv4=@broadcast}, {@ipv4=@multicast2, [], @ipv4=@dev}, {@ipv6=@loopback, [], @ipv6=@private2}], 0x1}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @private1={0xfc, 0x1, '\x00', 0x2}, [0xffffffff], [], 'team_slave_0\x00', 'xfrm0\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) setsockopt$packet_fanout(r4, 0x107, 0x12, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/xfrm_stat\x00') 2m51.678190163s ago: executing program 7 (id=3715): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sync() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x4, 0x13}]}, 0x24}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x33b882) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, 0x0) 2m35.105068234s ago: executing program 40 (id=3715): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sync() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x4, 0x13}]}, 0x24}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x33b882) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, 0x0) 1m49.035041501s ago: executing program 5 (id=3731): mkdir(&(0x7f00000001c0)='./my_configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @random="42238e910adb", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x18, 0x67, 0x0, @dev, @local, {[@dstopts={0x0, 0x2, '\x00', [@generic={0x0, 0xe, "3e090e541b64f22a8982d3f5aaac"}]}]}}}}}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x40003) r4 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(r4, &(0x7f0000000140)="09000000e7001400000000803500008100000088a80000000000504e7c6a59e468", 0x21, 0x4044804, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_route(r5, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x2c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x4}]}, 0x2c}}, 0x0) set_mempolicy(0x1, &(0x7f0000000040)=0x7, 0x7) 1m46.648193013s ago: executing program 5 (id=3784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}]}) shutdown(0xffffffffffffffff, 0x1) r4 = syz_io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0xfffffffe}, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x442, 0x1ff) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001500)=""/4106, 0x100a}], 0x0}, 0x20) syz_io_uring_submit(0x0, r5, r6, &(0x7f0000000600)=@IORING_OP_READV_FIXED={0x3c, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) 1m34.314928048s ago: executing program 5 (id=3797): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x1) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000002f00090027ad700000000000040000004d621a9d77f5a710608bd6c8ec6b89af0b193675a64dbdce01259d42da7240488a7d4f8c638e99dcc5ff7ad67ba252ebe5ac2fe575f1914a03c86f08d7b0"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1m25.08329942s ago: executing program 0 (id=3805): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1m23.218955255s ago: executing program 0 (id=3808): unshare(0x60000600) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x0) unshare(0x20020a00) setns(0xc9, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/unix\x00') pread64(r1, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000002e40), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1fb;(\xb5\xe1jS\xd6\x91B\xb4\xe5=\xc1+\xb9\x12\xde0\x02\xcc\x18\xae%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa7^\xff\xf5\x95\xd2q#\xc6\xca\x97\b\x00\x00\x00\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdlC\xec\xe4\x9a\xc2\fX\x0e\xbc\xa4$\x9dU\xab\xbf\xbb\x12\xe6\x9f\x1d\xe4\x8a\x00\x00\x00\x00\x00\x00\x00\xa0W\xf1H\xb4~$\x05bIp+\x81Y\x9d\xd2!\"\x9d]zs\xb7\xfc,\b\xdd9\xc6\xe03t9\tT\n\xe8\x1f\x84\x1f\xf5\xc5\xf6}\xd7\xa3SL\xfa\xda\x97\x84\xa5Oj\x9by\xd3\x03 u(\x19\xd1\xc0\x8dG\xd8a\xad\x90jz\x12\xbc\xc3\xd7\x04~\xbe\xba\xccTO\xc1\xb2:\xdd\xc1M$\xbb\xe1{\x04\xb3\x13>\xf2n\xee\xab\x83%k\x92\x16\t\xe0\xe1\xa0\xa62\xef\x12\x96\x8b\x1es:\xfe&\x00'/318, 0x0) ftruncate(r4, 0x2022ad) fsetxattr$security_ima(r4, &(0x7f0000000080), &(0x7f0000000380)=ANY=[@ANYBLOB="0416"], 0x2, 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m17.728064471s ago: executing program 41 (id=3797): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) prctl$PR_SET_ENDIAN(0x14, 0x2) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r4, 0x40045569, 0x1) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_DEV_DESTROY(r4, 0x5502) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000002f00090027ad700000000000040000004d621a9d77f5a710608bd6c8ec6b89af0b193675a64dbdce01259d42da7240488a7d4f8c638e99dcc5ff7ad67ba252ebe5ac2fe575f1914a03c86f08d7b0"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 1m16.074339444s ago: executing program 0 (id=3815): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, 0x0, 0x0) unshare(0x22020600) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20000400) 1m9.63269555s ago: executing program 0 (id=3821): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24058041) r1 = io_uring_setup(0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000300)="7800000018002507c9409b14ffff00000204be04020512050e0204094300090700000c00100000000d0085a168d0bf46d32345653600648d0a0012000a000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250b6", 0x79, 0x800, 0x0, 0x0) syz_io_uring_setup(0x1dc7, &(0x7f00000002c0)={0x0, 0xd5a8, 0x2, 0x2, 0x382}, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m8.157906766s ago: executing program 0 (id=3823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setpriority(0x0, 0xffffffffffffffff, 0x800) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, &(0x7f0000000100)=0x9, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r4, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) 1m6.090716845s ago: executing program 0 (id=3824): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, 0x0) unshare(0x64000400) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_UNLOCK(r3, 0xc) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='usrquota') ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000040)={0x5, 0x13, 0x6, 0x3, 0x200007, 0x0, 0x3, 0x54, 0x2d22b85d880a5550}) 49.350951262s ago: executing program 42 (id=3824): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r1, 0x5403, 0x0) unshare(0x64000400) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r3, 0xb) shmctl$SHM_UNLOCK(r3, 0xc) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='usrquota') ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000040)={0x5, 0x13, 0x6, 0x3, 0x200007, 0x0, 0x3, 0x54, 0x2d22b85d880a5550}) 24.075636675s ago: executing program 8 (id=3857): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0x1ff}}}, 0x6) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x20, 0x22, 0xe3, {0xe3, 0x7, "80210b7c9c417da7e8c414b95642f08e7377395a402c371e16e92a81bdff3dfd51c4a7eecd7aa728f90dcdc7a0b8b565bf28af1efc3f12b221a8975f8b17c8ed6becaf2d8ed15d33b95817f77e3ca11f410a02143ebc9b4696ef7426b0b568f03e7dcb4cc909c6c397b8501a379ce4c8bf42aedd955f7a4f0a256970177f34113b968a98ede57224d65d7a6160959b55c161338d499261e7c2b95361150ba46383acf27ca6dba7aae4f4f838661a6e27ed99620043d4a1a748d78489cc0170fe4abb2844dc339ed9376066d6c9b905be30e3917f76f96cb3605c0db5e872ef1231"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000240)={0x20, 0x17, 0x4c, "618c5c12228c4c0a98de798ded31f6d57d17ce6d49fac5cabd2d9b2af5cb005c0130af3f29eda1251910742060036f926e452e266dc792350923f2792e160c26aa093db806e5b52a2419f6f9"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) socket(0x2b, 0x5, 0x0) setns(0xc9, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000506030000000000000000000000000705000100"/40], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000300)=[0x0], 0x1, 0x0}) close(0x3) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r4, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4ecf, r2, 0x0, 0x0, 0x80000000600}]) pipe2$watch_queue(&(0x7f0000001180), 0x80) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0xc3) pipe2$watch_queue(0x0, 0x80) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 20.289041045s ago: executing program 6 (id=3842): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) timerfd_create(0x4, 0x800) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$peek(0x3, r3, &(0x7f0000000180)) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt(r0, 0xffffc654, 0x4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f00000058c0)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0xfe}, 0xae00000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e23, 0xff, @private2, 0x3}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000980)='6', 0x1}], 0x1}}], 0x2, 0x5) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 18.900806877s ago: executing program 8 (id=3868): socket(0x10, 0x3, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500000400fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="61000100000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x0, 0x3}}) set_mempolicy(0x8006, &(0x7f0000000180)=0xfff, 0x5) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setns(0xc9, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44", 0x2b}], 0x1}, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_GUEST_MEMFD(r7, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r8, 0x78d4a000) 16.972984632s ago: executing program 6 (id=3870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000002600)=""/4113, 0x1011) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20080000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000280)=0x4) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8014}, 0x4004) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x4, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xfffffffffffffffb}, {0x0, 0xfffffffffffffffd, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}, 0x1, 0x0, 0x0, 0x24004811}, 0x2c000010) 13.60065579s ago: executing program 2 (id=3871): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24058041) r1 = io_uring_setup(0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000300), 0x0, 0x800, 0x0, 0x0) syz_io_uring_setup(0x1dc7, &(0x7f00000002c0)={0x0, 0xd5a8, 0x2, 0x2, 0x382}, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 13.448538572s ago: executing program 1 (id=3872): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000240)={0x13, 0x10, 0x8, {0x0, r2, 0x1}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x2f, 0xf, 0xf9, 0x5, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0x14}, 0x87, 0x40, 0xfffffffc, 0x5}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@getqdisc={0x28, 0x26, 0x200, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x1, 0xfff2}, {0xf, 0x7302c37d3782af2f}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x4c000) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet6(r0, &(0x7f0000000a80), 0x0, 0x4c040) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 12.025592132s ago: executing program 1 (id=3875): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x28003, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x168, 0x168, 0x0, 0x200, 0x168, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x3, 0x3}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'bond_slave_0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00', {}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) write(r3, &(0x7f0000001640)="8b", 0x11) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) 11.958768244s ago: executing program 8 (id=3876): syz_usb_connect(0x0, 0x5d, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000551b8920b822276080c2010203010902"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x840) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) epoll_create(0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000100)={0xfffffffc, [[0xffffffff, 0xfffffffc, 0xffffffff, 0xfffffffd, 0x3, 0x1, 0xffffffff, 0xffffffff], [0x1, 0xffffffff, 0x1, 0xffffffff, 0x6, 0x9, 0xffffffff, 0xfffffff0], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x4, 0x10, 0xffffffff]], '\x00', [{0x0, 0x989680}, {0x0, 0x989680}, {0x4, 0x989680}, {0x80, 0x989680}, {0x6, 0x989680}, {0x0, 0x989680}, {0x101, 0x989683}, {0x1, 0x989680}, {0x0, 0x800}, {0x0, 0x989680}, {0x0, 0x989680}, {0x9, 0x989680}], '\x00', 0xffffffff}) 10.220521529s ago: executing program 3 (id=3877): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000200)='./proc/asound/devices\x00', 0x0, 0x80) read(r3, &(0x7f0000000300)=""/100, 0x100) epoll_create1(0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x5, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r6, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e8, 0x2, 0x2000000, 0x20, 0xffffffff, 0x20, 0xffffffff, &(0x7f0000000600)=[0x7], 0x1, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000000000) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000100001060000000000000000000000000000000001000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100b5120000060002"], 0x60}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x1d, 0x2a, [@random={0x3b}, @rann={0x7e, 0x15, {{0x1, 0x6f}, 0xfe, 0x32, @device_a, 0xff, 0x80, 0x12000}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2008010}, 0x2400c804) 9.988965566s ago: executing program 1 (id=3878): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x42c01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x2, 0x1, 0x1000, 0x2000, &(0x7f0000ff2000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000001c0)=0x1fff) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount(0x0, &(0x7f0000002200)='.\x00', 0x0, 0x3209864, 0x0) r5 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mount$bind(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x101020, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) write(0xffffffffffffffff, &(0x7f0000000b00), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') 9.988071647s ago: executing program 2 (id=3879): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @disconn_logical_link={{0x43a, 0x2}, {0x1ff}}}, 0x6) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x20, 0x22, 0xe3, {0xe3, 0x7, "80210b7c9c417da7e8c414b95642f08e7377395a402c371e16e92a81bdff3dfd51c4a7eecd7aa728f90dcdc7a0b8b565bf28af1efc3f12b221a8975f8b17c8ed6becaf2d8ed15d33b95817f77e3ca11f410a02143ebc9b4696ef7426b0b568f03e7dcb4cc909c6c397b8501a379ce4c8bf42aedd955f7a4f0a256970177f34113b968a98ede57224d65d7a6160959b55c161338d499261e7c2b95361150ba46383acf27ca6dba7aae4f4f838661a6e27ed99620043d4a1a748d78489cc0170fe4abb2844dc339ed9376066d6c9b905be30e3917f76f96cb3605c0db5e872ef1231"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x1c, &(0x7f0000000240)={0x20, 0x17, 0x4c, "618c5c12228c4c0a98de798ded31f6d57d17ce6d49fac5cabd2d9b2af5cb005c0130af3f29eda1251910742060036f926e452e266dc792350923f2792e160c26aa093db806e5b52a2419f6f9"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) socket(0x2b, 0x5, 0x0) setns(0xc9, 0x0) sendmsg$IPSET_CMD_RENAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000000506030000000000000000000000000705000100"/40], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000300)=[0x0], 0x1, 0x0}) close(0x3) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r4, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4ecf, r2, 0x0, 0x0, 0x80000000600}]) pipe2$watch_queue(&(0x7f0000001180), 0x80) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r6, 0xc3) pipe2$watch_queue(0x0, 0x80) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) 7.447415616s ago: executing program 6 (id=3880): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xf811, 0xffffffff}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x4e20, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) accept4(r2, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$EVIOCGBITSW(0xffffffffffffffff, 0x80404525, &(0x7f0000000380)=""/207) sendmsg$inet(r3, &(0x7f0000000180)={&(0x7f0000000300), 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0x10, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}], 0x28}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000200)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$netlink(0x10, 0x3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2400, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) io_uring_setup(0x3f81, &(0x7f0000000140)={0x0, 0xd738, 0x4, 0x1, 0x4e, 0x0, r4}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) 7.383970106s ago: executing program 3 (id=3881): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x42c01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x2, 0x1, 0x1000, 0x2000, &(0x7f0000ff2000/0x2000)=nil}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000001c0)=0x1fff) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) mount(0x0, &(0x7f0000002200)='.\x00', 0x0, 0x3209864, 0x0) r5 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mount$bind(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x101020, 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') 6.627752785s ago: executing program 1 (id=3882): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) signalfd(r2, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@dev, @in6=@private1}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000cc0)=0xe8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) 6.146626175s ago: executing program 2 (id=3883): socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000080)={0xf0003e7, 0x1, 0x200006, 0xffffffffffffffff, 0xffe7, &(0x7f0000000000)={0x980912, 0xe43, '\x00', @value=0x5}}) dup(0xffffffffffffffff) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) syz_emit_ethernet(0xae, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8937, &(0x7f0000000640)={'tunl0\x00', 0x0}) 5.679079611s ago: executing program 3 (id=3884): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) listen(0xffffffffffffffff, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000080)={0xf0003e7, 0x1, 0x200006, 0xffffffffffffffff, 0xffe7, &(0x7f0000000000)={0x980912, 0xe43, '\x00', @value=0x5}}) close_range(r0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) syz_emit_ethernet(0xae, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8937, &(0x7f0000000640)={'tunl0\x00', 0x0}) 4.107016151s ago: executing program 2 (id=3885): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() process_vm_writev(r1, &(0x7f0000000280)=[{&(0x7f0000000180)=""/84, 0x54}], 0x1, &(0x7f0000000580)=[{&(0x7f0000000300)=""/172, 0xac}, {&(0x7f00000003c0)=""/250, 0xfa}, {&(0x7f00000004c0)=""/140, 0x8c}], 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xe503f000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @remote, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r6) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r7, 0x305, 0x70bd26, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x24044080) 3.93694025s ago: executing program 8 (id=3886): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) close(0xffffffffffffffff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xd, 0x200}, 0x1c) 3.756899042s ago: executing program 3 (id=3887): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='p:p1 ./file0:0', 0xe) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x3, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) socket(0x25, 0x1, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x5, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xffffff7d, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x7, 0x2}, {0xa, 0x10}, {0x6, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0x80000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r4) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r4, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 2.258020299s ago: executing program 2 (id=3888): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24058041) r1 = io_uring_setup(0x7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000300), 0x0, 0x800, 0x0, 0x0) syz_io_uring_setup(0x1dc7, &(0x7f00000002c0)={0x0, 0xd5a8, 0x2, 0x2, 0x382}, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.172591107s ago: executing program 8 (id=3889): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) signalfd(r2, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@dev, @in6=@private1}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000cc0)=0xe8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) 1.566311522s ago: executing program 6 (id=3890): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2080) close(0x3) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x200000000000000, 0x11, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000671000/0x3000)=nil) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c0800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b142bc00090ef83804919e1d9fb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfb0001000000000000b9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r1, 0x0, 0xd8, 0x6d, &(0x7f00000000c0)="39e12dad43a02436f94155eb6c8c809fec6eea41faf915a2cd7d70465a891d585e6e02a22240a874d19ba11e0ca5022040216b0ee9f3d1a5756682a30cb5536eaf31a32e5fcfe2c9c4a91c066c98ebfee9cdc4eddcbfe80a8d4acbe54fb21e69fc0766befbaf0beed609b770c27e16083e262c1d56326cf804d4a3277c8bbb93e0589da8ef74c40428895161b9923eec3b471f900cbc8d66667e6912706c821fde11df61c7ca53465771139e39b6f0efc9e19684aad08aac05ebe2fc4f8e1006f031eeef28054b2f4bad2d7463337b196e33ca575de0ca65", &(0x7f0000000540)=""/109, 0x80000001, 0x0, 0xfa, 0x45, &(0x7f0000000700)="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", &(0x7f0000000800)="e879aa4e4e8088f32e4bbd43d0cd075c95950d9a804444bae97a077348aa5cd4c571f800f928e96a284b8f9a46968aff7c9d229560b4c9ec88362d3bebea33178bf7d45232", 0x2, 0x0, 0x8}, 0x50) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtclass={0x6c, 0x28, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x40, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x11000}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x6}]}}]}, 0x6c}}, 0x0) syz_clone3(&(0x7f0000000680)={0x100a43080, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) 1.49612632s ago: executing program 3 (id=3891): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000840)=ANY=[@ANYRES64], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xab, &(0x7f0000000140)=""/171, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005a9000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0xffffffffffff3fd8, 0x8, 0x0) 1.444710999s ago: executing program 1 (id=3892): socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000500)=[@in6={0xa, 0x4e22, 0x3, @local, 0x2}], 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) close(r2) write(0xffffffffffffffff, &(0x7f00000001c0)='bi', 0x2) close(0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000500), 0x1000) 474.294873ms ago: executing program 2 (id=3893): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8242, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x4) creat(0x0, 0x66) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000000), 0x9, 0x600000) ioctl$HIDIOCGDEVINFO(r3, 0x801c4803, &(0x7f0000000640)=""/248) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x3]}}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) r6 = socket(0x400000000010, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x3, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setregid(0xee00, 0xee00) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@deltfilter={0x24, 0x2d, 0x0, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xf, 0x2}, {0xffff, 0x6}, {0x801f, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x8080) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000200)) 473.427878ms ago: executing program 8 (id=3894): socket$nl_route(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000003c0)={0x0, 0x30b5, 0x0, 0x2, 0x1000158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x40, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10, 0x200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x23, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) 291.107377ms ago: executing program 3 (id=3895): socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_set$pid(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000280)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x160105da339f3e7}, 0x20008080) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) r2 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x0, 0x4000010) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) unshare(0x2c020400) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) 0s ago: executing program 1 (id=3896): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}]}) shutdown(0xffffffffffffffff, 0x1) r4 = syz_io_uring_setup(0x24, &(0x7f0000000040)={0x0, 0x0, 0x800, 0x0, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = openat(0xffffffffffffff9c, 0x0, 0x442, 0x1ff) io_uring_register$IORING_REGISTER_BUFFERS2(r4, 0xf, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001500)=""/4106, 0x100a}], 0x0}, 0x20) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000600)=@IORING_OP_READV_FIXED={0x3c, 0x0, 0x0, @fd=r8, 0x0, &(0x7f0000000700)=[{0x0}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): ][T19657] nbd: must specify a device to reconfigure [ 1430.586800][T19238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1430.768396][T19238] 8021q: adding VLAN 0 to HW filter on device team0 [ 1432.149598][ T31] kauditd_printk_skb: 11 callbacks suppressed [ 1432.149618][ T31] audit: type=1800 audit(1790371631.587:3001): pid=19674 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.3666" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1432.585686][T17003] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.585799][T17003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.982707][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1436.589427][T17003] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.589536][T17003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1436.786998][T19547] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.787090][T19547] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.787213][T19547] bridge_slave_0: entered allmulticast mode [ 1436.862238][T17664] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1436.877662][T19547] bridge_slave_0: entered promiscuous mode [ 1436.898924][T19547] bridge0: port 2(bridge_slave_1) entered blocking state [ 1436.899136][T19547] bridge0: port 2(bridge_slave_1) entered disabled state [ 1436.899340][T19547] bridge_slave_1: entered allmulticast mode [ 1436.918469][T19547] bridge_slave_1: entered promiscuous mode [ 1437.045707][T17664] usb 9-1: Using ep0 maxpacket: 32 [ 1437.049153][T17664] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1437.050676][T17664] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1437.050735][T17664] usb 9-1: config 0 has no interface number 0 [ 1437.050787][T17664] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1437.051433][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1437.097172][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1437.215080][T19547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1437.217775][T19547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1437.237259][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1437.254705][ T31] audit: type=1400 audit(1790371636.367:3002): avc: denied { mount } for pid=19700 comm="syz.7.3671" name="/" dev="autofs" ino=76179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1437.254853][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1437.255377][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1437.471114][ T31] audit: type=1400 audit(1790371636.563:3003): avc: denied { write } for pid=19676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1437.576909][ T31] audit: type=1400 audit(1790371636.666:3004): avc: denied { mount } for pid=19704 comm="syz.9.3670" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1437.579564][T19707] FAULT_INJECTION: forcing a failure. [ 1437.579564][T19707] name failslab, interval 1, probability 0, space 0, times 0 [ 1437.579600][T19707] CPU: 0 UID: 0 PID: 19707 Comm: syz.9.3670 Tainted: G L syzkaller #0 PREEMPT(full) [ 1437.579633][T19707] Tainted: [L]=SOFTLOCKUP [ 1437.579642][T19707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1437.579658][T19707] Call Trace: [ 1437.579666][T19707] [ 1437.579676][T19707] dump_stack_lvl+0x100/0x190 [ 1437.579717][T19707] should_fail_ex.cold+0x5/0xa [ 1437.579751][T19707] should_failslab+0xc2/0x120 [ 1437.579782][T19707] __kmalloc_cache_noprof+0x91/0x6d0 [ 1437.579819][T19707] ? vidtv_channel_s302m_init+0xa8/0x9b0 [ 1437.579862][T19707] vidtv_channel_s302m_init+0xa8/0x9b0 [ 1437.579896][T19707] ? trace_kmalloc+0xeb/0x110 [ 1437.579925][T19707] ? __kasan_kmalloc+0xaa/0xb0 [ 1437.579953][T19707] ? __pfx_vidtv_channel_s302m_init+0x10/0x10 [ 1437.579987][T19707] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 1437.580023][T19707] ? __asan_memcpy+0x3c/0x60 [ 1437.580048][T19707] vidtv_channels_init+0x4c/0xb0 [ 1437.580083][T19707] vidtv_mux_init+0x9d9/0xbf0 [ 1437.580123][T19707] vidtv_start_feed+0x34e/0x500 [ 1437.580151][T19707] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1437.580176][T19707] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1437.580206][T19707] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1437.580244][T19707] ? mark_held_locks+0x40/0x70 [ 1437.580276][T19707] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1437.580303][T19707] dmx_ts_feed_start_filtering+0xf6/0x220 [ 1437.580337][T19707] dvb_dmxdev_start_feed+0x273/0x3f0 [ 1437.580367][T19707] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 1437.580397][T19707] ? dvb_dmxdev_add_pid+0x2a4/0x4f0 [ 1437.580434][T19707] dvb_demux_do_ioctl+0xe64/0x1200 [ 1437.580471][T19707] dvb_usercopy+0x167/0x340 [ 1437.580494][T19707] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1437.580524][T19707] ? __pfx_dvb_usercopy+0x10/0x10 [ 1437.580546][T19707] ? __fget_files+0x34/0x3d0 [ 1437.580591][T19707] ? selinux_file_ioctl+0x13b/0x290 [ 1437.580619][T19707] ? selinux_file_ioctl+0xb6/0x290 [ 1437.580650][T19707] dvb_demux_ioctl+0x29/0x40 [ 1437.580672][T19707] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1437.580696][T19707] __x64_sys_ioctl+0x18e/0x210 [ 1437.580725][T19707] do_syscall_64+0x123/0x790 [ 1437.580756][T19707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.580782][T19707] RIP: 0033:0x7ff6d719e159 [ 1437.580802][T19707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1437.580829][T19707] RSP: 002b:00007ff6d7ff8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1437.580854][T19707] RAX: ffffffffffffffda RBX: 00007ff6d7426090 RCX: 00007ff6d719e159 [ 1437.580870][T19707] RDX: 00002000000000c0 RSI: 0000000040146f2c RDI: 0000000000000004 [ 1437.580887][T19707] RBP: 00007ff6d723506b R08: 0000000000000000 R09: 0000000000000000 [ 1437.580902][T19707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1437.580915][T19707] R13: 00007ff6d7426128 R14: 00007ff6d7426090 R15: 00007ffd39a3ff58 [ 1437.580949][T19707] [ 1437.591499][T17664] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.591525][T17664] usb 9-1: Product: syz [ 1437.591542][T17664] usb 9-1: Manufacturer: syz [ 1437.591558][T17664] usb 9-1: SerialNumber: syz [ 1437.596263][T17664] usb 9-1: config 0 descriptor?? [ 1437.672827][T19547] team0: Port device team_slave_0 added [ 1437.675273][T19547] team0: Port device team_slave_1 added [ 1437.697245][T19547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1437.697263][T19547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1437.697287][T19547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1437.698507][T19547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1437.698521][T19547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1437.698545][T19547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1437.732522][T19547] hsr_slave_0: entered promiscuous mode [ 1437.733304][T19547] hsr_slave_1: entered promiscuous mode [ 1437.989243][ T31] audit: type=1400 audit(1790371637.031:3005): avc: denied { write } for pid=19715 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1438.467737][T17664] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1438.467810][T17664] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1438.467847][T17664] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1438.467947][T17664] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1438.488648][T17664] usb 9-1: USB disconnect, device number 6 [ 1438.651766][ T31] audit: type=1400 audit(1790371637.676:3006): avc: denied { unmount } for pid=18502 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1439.079026][ T31] audit: type=1400 audit(1790371638.069:3007): avc: denied { write } for pid=19721 comm="syz.7.3672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1439.549247][T14502] Bluetooth: hci5: command tx timeout [ 1439.709033][T19274] netdevsim netdevsim2 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1439.772150][ T31] audit: type=1400 audit(1790371638.715:3008): avc: denied { name_bind } for pid=19726 comm="syz.9.3673" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1439.813516][ T31] audit: type=1400 audit(1790371638.752:3009): avc: denied { mounton } for pid=19726 comm="syz.9.3673" path="/32/bus" dev="tmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1440.813865][ T31] audit: type=1400 audit(1790371639.697:3010): avc: denied { write } for pid=19717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1440.844277][T19739] Set syz1 is full, maxelem 2076 reached [ 1440.958845][ T31] audit: type=1400 audit(1790371639.828:3011): avc: denied { write } for pid=19745 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1441.011443][T19273] netdevsim netdevsim2 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.011537][T19273] netdevsim netdevsim2 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1441.031086][T17004] bridge_slave_1: left allmulticast mode [ 1441.031126][T17004] bridge_slave_1: left promiscuous mode [ 1441.031443][T17004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.545726][ T52] Bluetooth: hci5: command tx timeout [ 1442.595031][T17004] bridge_slave_0: left allmulticast mode [ 1442.595231][T17004] bridge_slave_0: left promiscuous mode [ 1442.598418][T17004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1443.021153][ T31] audit: type=1400 audit(1790371641.755:3012): avc: denied { ioctl } for pid=19736 comm="syz.7.3674" path="/dev/uinput" dev="devtmpfs" ino=918 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1443.076727][T19742] input: syz0 as /devices/virtual/input/input27 [ 1444.208069][ T5713] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1444.456869][ T31] audit: type=1400 audit(1790371643.102:3013): avc: denied { read } for pid=19760 comm="syz.8.3678" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1444.457112][ T31] audit: type=1400 audit(1790371643.102:3014): avc: denied { open } for pid=19760 comm="syz.8.3678" path="/dev/binderfs/binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1444.637965][ T5713] usb 8-1: Using ep0 maxpacket: 8 [ 1444.638937][ T5713] usb 8-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 1444.641463][ T5713] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.641503][ T5713] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1444.644477][ T5713] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.644533][ T5713] usb 8-1: Product: syz [ 1444.644565][ T5713] usb 8-1: Manufacturer: syz [ 1444.644582][ T5713] usb 8-1: SerialNumber: syz [ 1444.703790][T17004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1444.720178][T17004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1444.731248][T17004] bond0 (unregistering): Released all slaves [ 1444.829717][T14502] Bluetooth: hci5: command tx timeout [ 1444.905122][T17984] netdevsim netdevsim2 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1444.949709][ T31] audit: type=1400 audit(1790371643.570:3015): avc: denied { write } for pid=19756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1445.126734][ T31] audit: type=1400 audit(1790371643.729:3016): avc: denied { write } for pid=19771 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1445.219648][T19547] netdevsim netdevsim2 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.623705][ T5713] usb 8-1: USB disconnect, device number 3 [ 1445.647372][T17004] hsr_slave_0: left promiscuous mode [ 1445.677210][T17664] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1446.150463][ T31] audit: type=1800 audit(1790371644.487:3017): pid=19781 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.3680" name="file0" dev="overlay" ino=230 res=0 errno=0 [ 1446.153176][T17004] hsr_slave_1: left promiscuous mode [ 1446.195719][T17004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1446.196332][T17004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1446.454112][ T31] audit: type=1400 audit(1790371644.964:3018): avc: denied { bind } for pid=19777 comm="syz.9.3677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1446.463897][T17664] usb 9-1: Using ep0 maxpacket: 32 [ 1446.474193][T17664] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1446.572513][ T31] audit: type=1400 audit(1790371645.085:3019): avc: denied { listen } for pid=19777 comm="syz.9.3677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1446.695075][T17664] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1446.695142][T17664] usb 9-1: config 0 has no interface number 0 [ 1446.695340][T17664] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1446.995272][T19538] Bluetooth: hci5: command tx timeout [ 1447.017987][T18768] udevd[18768]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1447.046801][T17664] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.046857][T17664] usb 9-1: Product: syz [ 1447.046889][T17664] usb 9-1: Manufacturer: syz [ 1447.046924][T17664] usb 9-1: SerialNumber: syz [ 1447.081218][T17664] usb 9-1: config 0 descriptor?? [ 1447.224096][T17004] team0 (unregistering): Port device team_slave_1 removed [ 1447.249873][T17004] team0 (unregistering): Port device team_slave_0 removed [ 1447.374369][ T30] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1447.536733][ T30] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1447.537223][ T30] usb 8-1: not running at top speed; connect to a high speed hub [ 1447.537257][ T30] usb 8-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=e1.7b [ 1447.538195][ T30] usb 8-1: config 199 has an invalid interface number: 169 but max is 1 [ 1447.538225][ T30] usb 8-1: config 199 has an invalid interface number: 102 but max is 1 [ 1447.538250][ T30] usb 8-1: config 199 has no interface number 0 [ 1447.538268][ T30] usb 8-1: config 199 has no interface number 1 [ 1447.538314][ T30] usb 8-1: config 199 interface 169 has no altsetting 0 [ 1447.538337][ T30] usb 8-1: config 199 interface 102 has no altsetting 0 [ 1447.540252][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.540396][ T30] usb 8-1: Product: syz [ 1447.540424][ T30] usb 8-1: Manufacturer: syz [ 1447.540443][ T30] usb 8-1: SerialNumber: syz [ 1447.680664][T19547] netdevsim netdevsim2 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1447.871367][T17664] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1447.871469][T17664] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1447.871530][T17664] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1447.871649][T17664] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1447.908516][T17664] usb 9-1: USB disconnect, device number 7 [ 1448.226024][T19547] netdevsim netdevsim2 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1448.263481][T19786] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 1448.263525][T19786] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1448.263546][T19786] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1448.263569][T19786] page_type: f5(slab) [ 1448.263590][T19786] raw: 00fff00000000040 ffff88801c03a500 dead000000000100 dead000000000122 [ 1448.263633][T19786] raw: 0000000000000000 0000000200040004 00000000f5000000 0000000000000000 [ 1448.263651][T19786] head: 00fff00000000040 ffff88801c03a500 dead000000000100 dead000000000122 [ 1448.263669][T19786] head: 0000000000000000 0000000200040004 00000000f5000000 0000000000000000 [ 1448.263686][T19786] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1448.263702][T19786] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1448.263713][T19786] page dumped because: unmovable page [ 1448.263728][T19786] page_owner tracks the page as allocated [ 1448.263738][T19786] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5603, tgid 5603 (syz-executor), ts 68222567667 [ 1448.263794][T19786] post_alloc_hook+0xfd/0x120 [ 1448.263844][T19786] get_page_from_freelist+0x110d/0x35d0 [ 1448.263872][T19786] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1448.263895][T19786] new_slab+0xa9/0x6e0 [ 1448.263937][T19786] refill_objects+0xe3/0x410 [ 1448.263958][T19786] __pcs_replace_empty_main+0x35e/0x650 [ 1448.263990][T19786] __kmalloc_cache_noprof+0x4f4/0x6d0 [ 1448.264018][T19786] ipv6_add_dev+0x670/0x1520 [ 1448.264042][T19786] addrconf_notify+0x5db/0x1ba0 [ 1448.267554][T19786] notifier_call_chain+0x99/0x3f0 [ 1448.267623][T19786] call_netdevice_notifiers_info+0xbe/0x110 [ 1448.267662][T19786] register_netdevice+0x1998/0x25a0 [ 1448.267696][T19786] veth_newlink+0x44a/0xce0 [ 1448.267731][T19786] rtnl_newlink+0x1697/0x2620 [ 1448.267784][T19786] rtnetlink_rcv_msg+0x95e/0xe90 [ 1448.267824][T19786] netlink_rcv_skb+0x159/0x420 [ 1448.267856][T19786] page last free pid 5598 tgid 5598 ts 68210796659 stack trace: [ 1448.267875][T19786] __free_frozen_pages+0x79f/0x10f0 [ 1448.267930][T19786] qlist_free_all+0x47/0xf0 [ 1448.267957][T19786] kasan_quarantine_reduce+0x1a0/0x1f0 [ 1448.267984][T19786] __kasan_slab_alloc+0x69/0x90 [ 1448.268012][T19786] __kmalloc_cache_noprof+0x278/0x6d0 [ 1448.270007][T19786] __netdev_adjacent_dev_insert+0x22b/0xbf0 [ 1448.270050][T19786] __netdev_upper_dev_link+0x3d8/0x7e0 [ 1448.270102][T19786] netdev_upper_dev_link+0x91/0xc0 [ 1448.270123][T19786] register_vlan_dev+0x394/0x910 [ 1448.270147][T19786] vlan_newlink+0x48c/0x750 [ 1448.270176][T19786] rtnl_newlink+0x1697/0x2620 [ 1448.270204][T19786] rtnetlink_rcv_msg+0x95e/0xe90 [ 1448.270253][T19786] netlink_rcv_skb+0x159/0x420 [ 1448.270278][T19786] netlink_unicast+0x585/0x850 [ 1448.270301][T19786] netlink_sendmsg+0x8b0/0xda0 [ 1448.270325][T19786] __sys_sendto+0x48b/0x4e0 [ 1448.401220][ T31] audit: type=1400 audit(1790371646.788:3020): avc: denied { write } for pid=19789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1448.483596][T19698] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.534885][T19698] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.535054][T19698] bridge_slave_0: entered allmulticast mode [ 1448.536899][T19698] bridge_slave_0: entered promiscuous mode [ 1448.541617][T19698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.541713][T19698] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.541886][T19698] bridge_slave_1: entered allmulticast mode [ 1448.545309][T19698] bridge_slave_1: entered promiscuous mode [ 1448.579907][T19547] netdevsim netdevsim2 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1448.679894][T19698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1448.683564][T19698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1448.699579][ T31] audit: type=1400 audit(1790371647.068:3021): avc: denied { read } for pid=4952 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1448.699702][ T31] audit: type=1400 audit(1790371647.068:3022): avc: denied { search } for pid=4952 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1448.708869][ T31] audit: type=1400 audit(1790371647.078:3023): avc: denied { append } for pid=4952 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1448.708928][ T31] audit: type=1400 audit(1790371647.078:3024): avc: denied { open } for pid=4952 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1448.708972][ T31] audit: type=1400 audit(1790371647.078:3025): avc: denied { getattr } for pid=4952 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1448.821562][ T31] audit: type=1400 audit(1790371647.171:3026): avc: denied { write } for pid=19805 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1448.849885][ T30] usb_ehset_test 8-1:199.169: probe with driver usb_ehset_test failed with error -32 [ 1448.858467][ T30] usb_ehset_test 8-1:199.102: probe with driver usb_ehset_test failed with error -32 [ 1448.882703][ T30] usb 8-1: USB disconnect, device number 4 [ 1449.078214][T19698] team0: Port device team_slave_0 added [ 1449.126843][T19698] team0: Port device team_slave_1 added [ 1449.215015][T19538] Bluetooth: hci1: command 0x0406 tx timeout [ 1449.805743][T19698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1449.805757][T19698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.805779][T19698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.806696][T19698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.806709][T19698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.806725][T19698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1451.484088][ T31] audit: type=1400 audit(1790371649.678:3027): avc: denied { write } for pid=19810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1452.487292][ T31] audit: type=1400 audit(1790371650.614:3028): avc: denied { write } for pid=19827 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1453.542402][ T31] audit: type=1400 audit(1790371651.072:3029): avc: denied { mount } for pid=19830 comm="syz.7.3685" name="/" dev="ramfs" ino=77208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1453.546881][T19828] netlink: 200 bytes leftover after parsing attributes in process `syz.9.3684'. [ 1453.546920][T19828] ksmbd: Unknown IPC event: 0, ignore. [ 1453.655702][T19821] hub 1-0:1.0: USB hub found [ 1453.690770][T19821] hub 1-0:1.0: 1 port detected [ 1453.798851][T19821] binder: 19820:19821 ioctl c0306201 2000000003c0 returned -14 [ 1453.847104][ T31] audit: type=1400 audit(1790371651.839:3030): avc: denied { ioctl } for pid=19820 comm="syz.9.3684" path="/dev/binderfs/binder0" dev="binder" ino=19 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1453.847170][ T31] audit: type=1400 audit(1790371651.839:3031): avc: denied { set_context_mgr } for pid=19820 comm="syz.9.3684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1453.949102][T19698] hsr_slave_0: entered promiscuous mode [ 1453.949750][T19698] hsr_slave_1: entered promiscuous mode [ 1453.986539][T19698] debugfs: 'hsr0' already exists in 'hsr' [ 1453.986565][T19698] Cannot create hsr debugfs directory [ 1454.316075][T19850] netlink: 'syz.8.3686': attribute type 39 has an invalid length. [ 1454.396060][ T31] audit: type=1400 audit(1790371652.391:3032): avc: denied { write } for pid=19832 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1454.560322][ T31] audit: type=1400 audit(1790371652.550:3033): avc: denied { write } for pid=19857 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1454.670636][ T31] audit: type=1400 audit(1790371652.653:3034): avc: denied { write } for pid=19854 comm="syz.7.3689" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1454.800695][T18502] syz_tun (unregistering): left allmulticast mode [ 1454.800781][T18502] bridge0: port 3(syz_tun) entered disabled state [ 1454.821932][ T31] audit: type=1400 audit(1790371652.803:3035): avc: denied { ioctl } for pid=19854 comm="syz.7.3689" path="socket:[76613]" dev="sockfs" ino=76613 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1454.823394][T14502] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 1455.244319][T19547] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1455.260692][T19547] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1455.374474][T19547] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1455.497457][T19868] gadgetfs: bound to dummy_udc driver [ 1455.624015][T19547] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1455.641588][T19547] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1455.777970][ T30] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 1455.778969][ C1] gadgetfs: connected [ 1455.780354][ T30] gadgetfs: disconnected [ 1455.942123][ C1] gadgetfs: connected [ 1455.946115][ T30] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 1455.947254][ T30] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1455.947369][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.059236][ C1] gadgetfs: configuration #1 [ 1456.436928][T19866] gadgetfs: suspended from state 3 [ 1456.437183][T19866] gadgetfs: disconnected [ 1456.493916][ T30] usb 1-1: can't set config #1, error -71 [ 1456.626689][T19547] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1456.708963][T19547] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1456.860492][T19538] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1456.867808][T19538] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1456.871793][T19538] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1456.874550][T19538] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1456.874619][T19547] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1456.877218][T19538] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1456.987839][ T30] usb 1-1: USB disconnect, device number 4 [ 1457.478551][ T31] audit: type=1400 audit(1790371655.291:3036): avc: denied { write } for pid=19861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1457.644589][T19547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1457.694206][T19547] 8021q: adding VLAN 0 to HW filter on device team0 [ 1457.714933][ T3270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.715040][ T3270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1457.756474][ T3270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.756633][ T3270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1457.945882][ T31] audit: type=1400 audit(1790371655.712:3037): avc: denied { connect } for pid=19895 comm="syz.7.3695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1457.946009][ T31] audit: type=1400 audit(1790371655.712:3038): avc: denied { ioctl } for pid=19895 comm="syz.7.3695" path="socket:[76795]" dev="sockfs" ino=76795 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1458.018674][ T31] audit: type=1400 audit(1790371655.787:3039): avc: denied { write } for pid=19899 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1458.385330][T17984] netdevsim netdevsim0 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1458.494081][T17982] netdevsim netdevsim0 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1458.542328][T17984] netdevsim netdevsim0 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1458.544659][T17984] netdevsim netdevsim0 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1458.791713][T17983] bridge_slave_1: left allmulticast mode [ 1458.791745][T17983] bridge_slave_1: left promiscuous mode [ 1458.793621][T17983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.919712][T14502] Bluetooth: hci0: command tx timeout [ 1460.116971][T17983] bridge_slave_0: left allmulticast mode [ 1460.117007][T17983] bridge_slave_0: left promiscuous mode [ 1460.117248][T17983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1460.175457][ T31] audit: type=1400 audit(1790371657.798:3040): avc: denied { read write } for pid=19913 comm="syz.7.3703" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1460.175524][ T31] audit: type=1400 audit(1790371657.798:3041): avc: denied { open } for pid=19913 comm="syz.7.3703" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1461.233778][T17983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1461.236390][T17983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1461.238126][T17983] bond0 (unregistering): Released all slaves [ 1461.502375][T17983] hsr_slave_0: left promiscuous mode [ 1461.503051][T17983] hsr_slave_1: left promiscuous mode [ 1461.503822][T17983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1461.504463][T17983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1461.827142][ T31] audit: type=1400 audit(1790371659.323:3042): avc: denied { write } for pid=19905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1462.171379][T14502] Bluetooth: hci0: command tx timeout [ 1462.910933][ T31] audit: type=1400 audit(1790371660.361:3043): avc: denied { write } for pid=19932 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1463.035322][T17983] team0 (unregistering): Port device team_slave_1 removed [ 1463.068090][T17983] team0 (unregistering): Port device team_slave_0 removed [ 1463.083862][ T31] audit: type=1400 audit(1790371660.530:3044): avc: denied { create } for pid=19937 comm="syz.7.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1463.088545][ T31] audit: type=1400 audit(1790371660.530:3045): avc: denied { bind } for pid=19937 comm="syz.7.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1464.349875][T14502] Bluetooth: hci0: command tx timeout [ 1464.913467][ T31] audit: type=1400 audit(1790371662.232:3046): avc: denied { write } for pid=19935 comm="syz.8.3699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1465.032274][ T31] audit: type=1400 audit(1790371662.326:3047): avc: denied { setattr } for pid=19937 comm="syz.7.3697" name="IEEE-802.15.4-MAC" dev="sockfs" ino=77596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1465.189039][ T31] audit: type=1400 audit(1790371662.494:3048): avc: denied { create } for pid=19937 comm="syz.7.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1465.224401][ T31] audit: type=1400 audit(1790371662.531:3049): avc: denied { getopt } for pid=19937 comm="syz.7.3697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1465.784833][T19698] netdevsim netdevsim0 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1467.460993][ T31] audit: type=1400 audit(1790371663.804:3050): avc: denied { read } for pid=19952 comm="syz.7.3700" name="usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1467.461057][ T31] audit: type=1400 audit(1790371663.804:3051): avc: denied { open } for pid=19952 comm="syz.7.3700" path="/dev/usbmon0" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1467.511589][T14502] Bluetooth: hci0: command tx timeout [ 1468.068620][T19698] netdevsim netdevsim0 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1468.161416][ T31] audit: type=1400 audit(1790371665.235:3052): avc: denied { write } for pid=19939 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1468.239968][T19698] netdevsim netdevsim0 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1468.402198][T19547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1468.434501][T19547] veth0_vlan: entered promiscuous mode [ 1468.444405][T19547] veth1_vlan: entered promiscuous mode [ 1468.475552][ T31] audit: type=1400 audit(1790371665.544:3053): avc: denied { write } for pid=19968 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1468.716076][T19698] netdevsim netdevsim0 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1469.020188][T19547] veth0_macvtap: entered promiscuous mode [ 1469.027921][T19547] veth1_macvtap: entered promiscuous mode [ 1469.040422][T19547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1469.044780][T19547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1469.149619][T19869] bridge0: port 1(bridge_slave_0) entered blocking state [ 1469.149716][T19869] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.149840][T19869] bridge_slave_0: entered allmulticast mode [ 1469.151548][T19869] bridge_slave_0: entered promiscuous mode [ 1469.154377][T19869] bridge0: port 2(bridge_slave_1) entered blocking state [ 1469.154467][T19869] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.154590][T19869] bridge_slave_1: entered allmulticast mode [ 1469.156143][T19869] bridge_slave_1: entered promiscuous mode [ 1469.419742][T19869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1469.421641][ T31] audit: type=1400 audit(1790371666.460:3054): avc: denied { write } for pid=19972 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1469.680990][T19984] zram0: detected capacity change from 0 to 65536 [ 1469.698608][T19869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1469.898049][ T31] audit: type=1400 audit(1790371666.835:3055): avc: denied { write } for pid=19987 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1470.224678][ T31] audit: type=1400 audit(1790371667.125:3056): avc: denied { execute } for pid=19988 comm="syz.7.3701" name="file1" dev="tmpfs" ino=285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1470.224906][ T31] audit: type=1400 audit(1790371667.134:3057): avc: denied { execute_no_trans } for pid=19988 comm="syz.7.3701" path="/49/file1" dev="tmpfs" ino=285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1470.513058][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.648273][T19869] team0: Port device team_slave_0 added [ 1470.700246][T19869] team0: Port device team_slave_1 added [ 1470.755511][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.756096][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.756407][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.913940][ T31] audit: type=1800 audit(1790371667.854:3058): pid=19995 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.3704" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1472.802273][ T3270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1472.802299][ T3270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.063818][ T31] audit: type=1400 audit(1790371669.772:3059): avc: denied { mount } for pid=20006 comm="syz.8.3707" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1473.115172][T19869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1473.115192][T19869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1473.115227][T19869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1473.209549][T19869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1473.209568][T19869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1473.209591][T19869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1473.219136][ T31] audit: type=1400 audit(1790371670.006:3060): avc: denied { write } for pid=19993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1473.441463][T19698] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1473.446555][T19698] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1473.452615][T19698] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1473.463601][T19698] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1473.467404][ T31] audit: type=1400 audit(1790371670.240:3061): avc: denied { write } for pid=20019 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1473.467583][T19698] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1473.517305][T19698] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1473.579550][T17982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1473.579565][T17982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1473.596037][T19698] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1475.139360][T19698] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1475.177058][T19869] hsr_slave_0: entered promiscuous mode [ 1475.180555][T19869] hsr_slave_1: entered promiscuous mode [ 1475.181119][T19869] debugfs: 'hsr0' already exists in 'hsr' [ 1475.181137][T19869] Cannot create hsr debugfs directory [ 1475.191110][ T31] audit: type=1400 audit(1790371671.858:3062): avc: denied { mounton } for pid=19547 comm="syz-executor" path="/root/syzkaller.yu4lDB/syz-tmp" dev="sda1" ino=2078 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1475.197379][ T31] audit: type=1400 audit(1790371671.858:3063): avc: denied { mounton } for pid=19547 comm="syz-executor" path="/root/syzkaller.yu4lDB/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1475.197439][ T31] audit: type=1400 audit(1790371671.858:3064): avc: denied { mounton } for pid=19547 comm="syz-executor" path="/root/syzkaller.yu4lDB/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=78915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1475.308982][ T31] audit: type=1400 audit(1790371671.970:3065): avc: denied { mounton } for pid=19547 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1475.311156][ T31] audit: type=1400 audit(1790371671.970:3066): avc: denied { mounton } for pid=19547 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1475.311461][ T31] audit: type=1400 audit(1790371671.970:3067): avc: denied { mount } for pid=19547 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1475.480908][T20032] batman_adv: batadv0: Adding interface: veth0 [ 1475.480940][T20032] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1475.481000][T20032] batman_adv: batadv0: Interface activated: veth0 [ 1476.467271][T20026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1476.467312][T20026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1476.540016][T20026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1476.540041][T20026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1476.559062][T20026] batman_adv: batadv0: Interface deactivated: veth0 [ 1476.559090][T20026] batman_adv: batadv0: Removing interface: veth0 [ 1477.303528][T20050] CUSE: unknown device info "n¸Þ|’zQC*¯" [ 1477.303605][T20050] CUSE: unknown device info "G2¢“‰a"ëî V­Ä|ÿ#Úyï€S—ioåLåÎà”¢8†9ÔIÿèܥѮžÃ‡Å[¥<^ÎQÎÓ>”nHw Ý×'0KVÆ,†¹${\d+" [ 1477.303720][T20050] CUSE: unknown device info "Ýÿÿÿ" [ 1477.303885][T20050] CUSE: unknown device info "ÙLÐP§ô¿’t|%Í€IŸ¸èžOØÙäKu GìÂÏǪ|ÜQüUËœDv…F‰Ý,*pá(o9Ð{uáöº[§èµ¨‘²égIÁPÌÍYV" [ 1477.303950][T20050] CUSE: DEVNAME unspecified [ 1477.680449][ T31] audit: type=1326 audit(1790371674.122:3068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20048 comm="syz.8.3711" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f47ded9e159 code=0x0 [ 1479.942655][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 1479.942673][ T31] audit: type=1400 audit(1790371676.292:3070): avc: denied { write } for pid=20041 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1480.242625][T20080] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3715'. [ 1481.060161][T19869] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1481.060215][T19869] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.176867][ T31] audit: type=1400 audit(1790371677.452:3071): avc: denied { write } for pid=20084 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1481.324399][T19698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1481.604264][T19271] netdevsim netdevsim9 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 1481.605167][T19271] netdevsim netdevsim9 eth6: set [0, 0] type 1 family 0 port 8472 - 0 [ 1481.695131][T19698] 8021q: adding VLAN 0 to HW filter on device team0 [ 1481.718531][T19277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.718653][T19277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1481.732103][T19277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.732220][T19277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1481.768723][ T12] netdevsim netdevsim9 eth7: set [0, 0] type 1 family 0 port 8472 - 0 [ 1482.501059][T19869] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1482.554716][T20090] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3717'. [ 1482.567576][T19869] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.365899][ T31] audit: type=1400 audit(1790371679.491:3072): avc: denied { write } for pid=20089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1483.500923][ T31] audit: type=1400 audit(1790371679.622:3073): avc: denied { write } for pid=20109 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1483.561270][T17983] bridge_slave_1: left allmulticast mode [ 1483.561446][T17983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1483.563190][T17983] bridge_slave_0: left allmulticast mode [ 1483.563296][T17983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.288227][T18311] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1484.435145][T17983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1484.447148][T18311] usb 3-1: Using ep0 maxpacket: 32 [ 1484.448865][T18311] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1484.453221][T18311] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1484.453249][T18311] usb 3-1: config 0 has no interface number 0 [ 1484.453288][T18311] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1484.455316][T18311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.455343][T18311] usb 3-1: Product: syz [ 1484.455360][T18311] usb 3-1: Manufacturer: syz [ 1484.455377][T18311] usb 3-1: SerialNumber: syz [ 1484.469710][T18311] usb 3-1: config 0 descriptor?? [ 1484.605134][T17983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1484.606228][T17983] bond0 (unregistering): Released all slaves [ 1485.063460][T19869] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1485.063528][T19869] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1485.323795][ T31] audit: type=1400 audit(1790371681.222:3074): avc: denied { create } for pid=20123 comm="syz.8.3721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1485.800817][ T31] audit: type=1400 audit(1790371681.774:3075): avc: denied { write } for pid=20117 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1485.850554][T18311] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1485.850612][T18311] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1485.850633][T18311] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1485.850712][T18311] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1485.896570][T18311] usb 3-1: USB disconnect, device number 14 [ 1485.997820][T19273] netdevsim netdevsim9 eth8: set [0, 0] type 1 family 0 port 8472 - 0 [ 1486.188732][ T31] audit: type=1400 audit(1790371682.139:3076): avc: denied { write } for pid=20134 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1487.146557][T19869] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1487.163449][T19869] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1487.554397][T19698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1487.554425][T19698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1488.716733][ T31] audit: type=1400 audit(1790371684.505:3077): avc: denied { write } for pid=20141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1489.032631][T20162] zram: Cannot change disksize for initialized device [ 1489.924878][T17983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1489.994617][ T31] audit: type=1400 audit(1790371685.675:3078): avc: denied { write } for pid=20164 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1490.214062][ T31] audit: type=1400 audit(1790371685.909:3079): avc: denied { shutdown } for pid=20165 comm="syz.2.3726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1493.037377][ T31] audit: type=1800 audit(1790371688.547:3080): pid=20177 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.3729" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1493.046546][T17983] team0 (unregistering): Port device team_slave_1 removed [ 1493.123196][T17983] team0 (unregistering): Port device team_slave_0 removed [ 1494.080555][T19869] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1494.145572][T19869] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1494.162816][T19869] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1494.178398][T19869] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1494.179619][T19869] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1494.191802][T19869] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1494.193050][T19869] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1494.280211][T19869] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1494.677774][T19869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1494.719402][T19869] 8021q: adding VLAN 0 to HW filter on device team0 [ 1494.786231][T17004] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.786330][T17004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1494.796625][T19273] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.796722][T19273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1494.850410][T19698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1494.883565][T17983] IPVS: stop unused estimator thread 0... [ 1494.977147][T19869] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1495.198700][ T31] audit: type=1400 audit(1790371690.567:3081): avc: denied { write } for pid=20209 comm="syz.2.3730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1495.212179][T19698] veth0_vlan: entered promiscuous mode [ 1495.218090][T19698] veth1_vlan: entered promiscuous mode [ 1495.265677][T19698] veth0_macvtap: entered promiscuous mode [ 1495.293703][T19698] veth1_macvtap: entered promiscuous mode [ 1495.341430][T19698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1495.404877][T19698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1495.716529][T17983] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.716580][T17983] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.716617][T17983] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.716655][T17983] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1495.940648][T19273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1495.940674][T19273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.106844][T19273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1496.107671][T19273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1496.739922][T19869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1497.022081][T14502] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1497.045867][T14502] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1497.114956][T14502] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1497.138976][ T31] audit: type=1400 audit(1790371692.382:3082): avc: denied { mounton } for pid=20235 comm="syz.2.3733" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 1497.147840][ T31] audit: type=1400 audit(1790371692.401:3083): avc: denied { mount } for pid=20235 comm="syz.2.3733" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1497.580897][T14502] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1497.598271][T14502] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1498.438944][T19869] veth0_vlan: entered promiscuous mode [ 1498.523751][T19869] veth1_vlan: entered promiscuous mode [ 1498.806531][T19869] veth0_macvtap: entered promiscuous mode [ 1498.848988][T19869] veth1_macvtap: entered promiscuous mode [ 1498.989420][T19869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1499.126289][T19869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1499.197092][ T31] audit: type=1400 audit(1790371694.309:3084): avc: denied { write } for pid=20227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1499.392249][T17984] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.415623][T19277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.415725][T19277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1499.415794][T19277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1500.336484][ T31] audit: type=1400 audit(1790371695.375:3085): avc: denied { write } for pid=20264 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1500.373139][T19538] Bluetooth: hci6: command tx timeout [ 1500.476714][ T3309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1500.476729][ T3309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1500.602366][T20272] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1501.644765][T17986] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1501.644790][T17986] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1501.675162][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1501.913206][T20284] zram: Cannot change disksize for initialized device [ 1503.414328][T19538] Bluetooth: hci6: command tx timeout [ 1503.625418][ T3270] IPVS: starting estimator thread 0... [ 1503.818606][T20288] IPVS: using max 36 ests per chain, 86400 per kthread [ 1504.000243][ T31] audit: type=1400 audit(1790371698.799:3086): avc: denied { map } for pid=20275 comm="syz.8.3738" path="socket:[79712]" dev="sockfs" ino=79712 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1504.040454][ T31] audit: type=1400 audit(1790371698.799:3087): avc: denied { write } for pid=20277 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1504.079547][ T31] audit: type=1400 audit(1790371698.865:3088): avc: denied { watch } for pid=20297 comm="syz.1.3691" path="/0/file5" dev="tmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1504.080625][ T31] audit: type=1400 audit(1790371698.865:3089): avc: denied { watch_sb watch_reads } for pid=20297 comm="syz.1.3691" path="/0/file5" dev="tmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1506.061653][T14502] Bluetooth: hci6: command tx timeout [ 1506.604552][ T31] audit: type=1400 audit(1790371701.231:3090): avc: denied { write } for pid=20303 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1506.832671][ T5265] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1508.298846][T19538] Bluetooth: hci6: command tx timeout [ 1508.463960][ T31] audit: type=1800 audit(1790371702.953:3091): pid=20332 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.3747" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1508.510844][T16907] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1508.831807][ T31] audit: type=1800 audit(1790371703.308:3092): pid=20337 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3746" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1508.953413][ T31] audit: type=1400 audit(1790371703.383:3093): avc: denied { write } for pid=20310 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1508.984940][T20239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1508.985121][T20239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1508.985304][T20239] bridge_slave_0: entered allmulticast mode [ 1508.997746][T16907] usb 2-1: Using ep0 maxpacket: 32 [ 1508.999712][T20239] bridge_slave_0: entered promiscuous mode [ 1509.023206][T20239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1509.023375][T20239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.023577][T20239] bridge_slave_1: entered allmulticast mode [ 1509.041213][T20239] bridge_slave_1: entered promiscuous mode [ 1509.158454][T16907] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1509.214274][T20239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1509.244247][T20239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1509.310995][T16907] usb 2-1: config 0 has no interfaces? [ 1509.418614][T20239] team0: Port device team_slave_0 added [ 1509.435759][T20239] team0: Port device team_slave_1 added [ 1509.441423][ T31] audit: type=1400 audit(1790371703.851:3094): avc: denied { write } for pid=20345 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1509.573398][T20239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1509.573421][T20239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1509.573450][T20239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1509.577774][T20239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1509.577795][T20239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1509.577821][T20239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1509.746573][T20239] hsr_slave_0: entered promiscuous mode [ 1509.747565][T20239] hsr_slave_1: entered promiscuous mode [ 1509.748193][T20239] debugfs: 'hsr0' already exists in 'hsr' [ 1509.748214][T20239] Cannot create hsr debugfs directory [ 1509.908617][ T5265] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1509.961499][T16907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.961534][T16907] usb 2-1: Product: syz [ 1509.961552][T16907] usb 2-1: Manufacturer: syz [ 1509.961569][T16907] usb 2-1: SerialNumber: syz [ 1509.964578][T16907] usb 2-1: config 0 descriptor?? [ 1511.262697][ T31] audit: type=1400 audit(1790371704.739:3095): avc: denied { write } for pid=20351 comm="syz.2.3741" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1512.229901][ T31] audit: type=1400 audit(1790371706.479:3096): avc: denied { setopt } for pid=20348 comm="syz.0.3748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1512.377430][ T30] usb 2-1: USB disconnect, device number 34 [ 1513.905127][T20375] zram: Cannot change disksize for initialized device [ 1514.714471][T20239] netdevsim netdevsim5 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1516.254262][ T31] audit: type=1400 audit(1790371710.212:3097): avc: denied { write } for pid=20350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1517.729985][ T31] audit: type=1400 audit(1790371711.634:3098): avc: denied { write } for pid=20387 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1517.876050][T20239] netdevsim netdevsim5 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1518.034997][ T5265] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1518.737373][ T31] audit: type=1400 audit(1790371712.560:3099): avc: denied { write } for pid=20385 comm="syz.2.3752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1519.320484][T20239] netdevsim netdevsim5 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1519.350973][T20409] slcan: can't register candev [ 1519.828725][ T31] audit: type=1400 audit(1790371713.607:3100): avc: denied { write } for pid=20414 comm="syz.8.3759" name="001" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1519.908190][T20418] hub 8-0:1.0: USB hub found [ 1519.910929][T20418] hub 8-0:1.0: 1 port detected [ 1520.990333][T18311] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1521.200016][T18311] usb 3-1: Using ep0 maxpacket: 32 [ 1521.287522][T18311] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1521.318307][T18311] usb 3-1: config 0 has no interfaces? [ 1521.378402][T18311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.378435][T18311] usb 3-1: Product: syz [ 1521.378452][T18311] usb 3-1: Manufacturer: syz [ 1521.378470][T18311] usb 3-1: SerialNumber: syz [ 1521.452239][T18311] usb 3-1: config 0 descriptor?? [ 1521.692022][T20239] netdevsim netdevsim5 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1522.190935][T17666] usb 3-1: USB disconnect, device number 15 [ 1524.049763][ T31] audit: type=1400 audit(1790371716.760:3101): avc: denied { append } for pid=20432 comm="syz.0.3763" name="cec0" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1524.381237][T20441] netlink: 'syz.2.3764': attribute type 5 has an invalid length. [ 1524.688516][T20239] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1524.700458][T20239] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1524.701805][T20239] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1524.768435][T20239] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1524.769652][T20239] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1524.841781][T20239] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1524.843390][T20239] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1524.872893][T20239] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1525.355956][T20239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1525.481130][T20239] 8021q: adding VLAN 0 to HW filter on device team0 [ 1525.499884][ T3270] bridge0: port 1(bridge_slave_0) entered blocking state [ 1525.499945][ T3270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1525.545621][ T3270] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.545745][ T3270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1525.811138][T20457] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3766'. [ 1526.457253][ T31] audit: type=1400 audit(1790371719.809:3102): avc: denied { getopt } for pid=20459 comm="syz.0.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1526.625350][T20464] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3768'. [ 1526.702406][ T31] audit: type=1400 audit(1790371720.006:3103): avc: denied { create } for pid=20459 comm="syz.0.3765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1526.773279][T20466] loop5: detected capacity change from 0 to 7 [ 1526.785346][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1526.785525][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1526.838341][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1526.838463][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1526.915099][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1526.915194][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1526.941139][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1526.941271][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1526.943976][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1526.944119][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1526.944671][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1526.944802][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1526.945197][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1526.945363][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1526.945676][T20466] ldm_validate_partition_table(): Disk read failed. [ 1526.946100][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1526.946213][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1526.946745][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1526.946873][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1526.947259][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1526.947393][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 1526.947891][T20466] Dev loop5: unable to read RDB block 0 [ 1526.967855][T20466] loop5: unable to read partition table [ 1526.968273][T20466] loop5: partition table beyond EOD, truncated [ 1526.968353][T20466] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1527.466268][ T31] audit: type=1400 audit(1790371720.754:3104): avc: denied { block_suspend } for pid=20474 comm="syz.1.3770" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1527.584028][ T31] audit: type=1400 audit(1790371720.857:3105): avc: denied { write } for pid=20463 comm="syz.2.3769" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1527.584273][ T31] audit: type=1400 audit(1790371720.857:3106): avc: denied { open } for pid=20463 comm="syz.2.3769" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1531.182877][ T31] audit: type=1400 audit(1790371724.206:3107): avc: denied { read write } for pid=20487 comm="syz.8.3772" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1531.182938][ T31] audit: type=1400 audit(1790371724.206:3108): avc: denied { open } for pid=20487 comm="syz.8.3772" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1533.813535][T18313] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1533.818434][T20516] netlink: 'syz.2.3776': attribute type 5 has an invalid length. [ 1534.103360][T18313] usb 2-1: Using ep0 maxpacket: 32 [ 1534.228817][T18313] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1534.275350][T18313] usb 2-1: config 0 has no interfaces? [ 1534.388695][T18313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.388772][T18313] usb 2-1: Product: syz [ 1534.388823][T18313] usb 2-1: Manufacturer: syz [ 1534.388872][T18313] usb 2-1: SerialNumber: syz [ 1534.593729][T18313] usb 2-1: config 0 descriptor?? [ 1535.481604][ T31] audit: type=1400 audit(1790371728.229:3109): avc: denied { write } for pid=20469 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1536.131840][T20239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1538.687941][ T31] audit: type=1400 audit(1790371731.231:3110): avc: denied { write } for pid=20532 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1540.096637][T20239] veth0_vlan: entered promiscuous mode [ 1540.127971][T20239] veth1_vlan: entered promiscuous mode [ 1540.198420][ T30] usb 2-1: USB disconnect, device number 35 [ 1540.213199][T20239] veth0_macvtap: entered promiscuous mode [ 1540.241918][T20239] veth1_macvtap: entered promiscuous mode [ 1540.276835][T20239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1540.318476][T20239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1540.432830][ T31] audit: type=1400 audit(1790371732.878:3111): avc: denied { write } for pid=20538 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1540.578123][T19275] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.633650][T19275] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.673807][T19277] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.675128][T19277] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.764181][ T30] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1540.936498][ T30] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1540.939413][ T30] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1540.940281][ T30] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1540.942490][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.942520][ T30] usb 2-1: Product: syz [ 1540.942539][ T30] usb 2-1: Manufacturer: syz [ 1540.942558][ T30] usb 2-1: SerialNumber: syz [ 1541.009185][ T31] audit: type=1400 audit(1790371733.430:3112): avc: denied { write } for pid=20560 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1541.065841][ T30] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 1541.071585][ T30] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1541.096270][ T30] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1541.189475][T18311] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1541.339678][T19271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1541.339702][T19271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1541.375072][T18311] usb 9-1: New USB device found, idVendor=0e8d, idProduct=0608, bcdDevice= 1.00 [ 1541.399520][T18311] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1541.399557][T18311] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 1541.399602][T18311] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1541.500516][T20561] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1541.500655][T20561] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1541.888442][T17983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1541.888464][T17983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1542.238710][T19538] Bluetooth: hci7: Can't claim NULL iso interface [ 1542.327694][T20578] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[19869] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[20578] [ 1542.559812][ T31] audit: type=1400 audit(1790371734.870:3113): avc: denied { mount } for pid=20580 comm="syz.0.3783" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1544.745175][T18311] usb 2-1: USB disconnect, device number 36 [ 1544.889778][T19538] Bluetooth: hci7: Failed to get device id (-71) [ 1544.889802][T19538] Bluetooth: hci7: HCI Enhanced Setup Synchronous Connection command is advertised, but not supported. [ 1544.903466][T18311] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1544.910004][T18311] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1544.910867][T18311] ti_usb_3410_5052 2-1:2.0: device disconnected [ 1544.958823][ T5713] usb 9-1: USB disconnect, device number 8 [ 1545.010341][ T31] audit: type=1400 audit(1790371737.162:3114): avc: denied { write } for pid=20568 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1545.024311][ T31] audit: type=1400 audit(1790371737.172:3115): avc: denied { unmount } for pid=19698 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 1545.200644][ T31] audit: type=1400 audit(1790371737.340:3116): avc: denied { write } for pid=20593 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1546.343265][ T31] audit: type=1400 audit(1790371737.658:3117): avc: denied { getopt } for pid=20595 comm="syz.8.3785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1548.875566][ T31] audit: type=1400 audit(1790371740.754:3118): avc: denied { create } for pid=20609 comm="syz.1.3789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1548.876747][ T31] audit: type=1400 audit(1790371740.764:3119): avc: denied { setopt } for pid=20609 comm="syz.1.3789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1553.493360][ T31] audit: type=1400 audit(1790371745.085:3120): avc: denied { write } for pid=20625 comm="syz.8.3792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1554.439251][T19538] Bluetooth: hci2: command 0x0406 tx timeout [ 1554.599005][T18313] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1554.706982][ T31] audit: type=1400 audit(1790371746.217:3121): avc: denied { write } for pid=20603 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1554.830006][T18313] usb 3-1: Using ep0 maxpacket: 32 [ 1554.830751][T18313] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1554.831412][T18313] usb 3-1: config 0 has no interfaces? [ 1554.838791][T18313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.838825][T18313] usb 3-1: Product: syz [ 1554.838843][T18313] usb 3-1: Manufacturer: syz [ 1554.838862][T18313] usb 3-1: SerialNumber: syz [ 1554.896402][T18313] usb 3-1: config 0 descriptor?? [ 1555.072806][ T31] audit: type=1400 audit(1790371746.582:3122): avc: denied { write } for pid=20642 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1558.012359][T20659] geneve2: entered promiscuous mode [ 1558.012386][T20659] geneve2: entered allmulticast mode [ 1559.378149][ T31] audit: type=1400 audit(1790371750.586:3123): avc: denied { write } for pid=20649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1562.728864][ T31] audit: type=1400 audit(1790371753.738:3124): avc: denied { write } for pid=20683 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1564.495826][T20697] overlay: filesystem on ./file0 not supported as upperdir [ 1564.617414][T20698] overlayfs: failed lookup in lower (newroot/19, name='file2', err=-40): overlapping layers [ 1566.051913][ T4931] usb 3-1: USB disconnect, device number 16 [ 1566.803255][ T31] audit: type=1400 audit(1790371757.452:3125): avc: denied { name_bind } for pid=20701 comm="syz.1.3804" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1567.416633][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1568.251519][ T31] audit: type=1400 audit(1790371758.883:3126): avc: denied { write } for pid=20699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1569.754801][T19538] Bluetooth: hci5: command 0x0406 tx timeout [ 1572.903999][ T31] audit: type=1400 audit(1790371763.252:3127): avc: denied { write } for pid=20733 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1573.269144][ T31] audit: type=1400 audit(1790371763.598:3128): avc: denied { bind } for pid=20741 comm="syz.2.3810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1574.956273][ T31] audit: type=1400 audit(1790371765.179:3129): avc: denied { write } for pid=20749 comm="syz.8.3813" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1575.622065][T19538] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1575.629733][T19538] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1575.703651][T19538] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1575.704592][T19538] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1575.705262][T19538] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1575.856754][T20223] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1576.168657][T20223] usb 1-1: Using ep0 maxpacket: 8 [ 1576.169987][T20223] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1576.172150][T20223] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 1576.172225][T20223] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 1576.172293][T20223] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1576.172360][T20223] usb 1-1: config 250 has no interface number 0 [ 1576.172443][T20223] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1576.172514][T20223] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1576.172585][T20223] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1576.172646][T20223] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1576.172712][T20223] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1576.172790][T20223] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1576.176179][T20223] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1576.176254][T20223] usb 1-1: Product: syz [ 1576.176314][T20223] usb 1-1: SerialNumber: syz [ 1576.370872][T20223] hub 1-1:250.228: bad descriptor, ignoring hub [ 1576.370921][T20223] hub 1-1:250.228: probe with driver hub failed with error -5 [ 1576.642992][T20223] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1577.910871][T20784] netlink: 'syz.1.3818': attribute type 5 has an invalid length. [ 1577.921905][T19538] Bluetooth: hci7: command tx timeout [ 1578.131098][T18941] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1578.949002][T18941] usb 3-1: Using ep0 maxpacket: 32 [ 1578.953550][T18941] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1578.956316][T18941] usb 3-1: config 0 has no interfaces? [ 1578.969568][T18941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1578.969988][T18941] usb 3-1: Product: syz [ 1578.970044][T18941] usb 3-1: Manufacturer: syz [ 1578.970097][T18941] usb 3-1: SerialNumber: syz [ 1579.075027][T18941] usb 3-1: config 0 descriptor?? [ 1579.393617][ T31] audit: type=1400 audit(1790371769.286:3130): avc: denied { write } for pid=20751 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1581.045202][T19538] Bluetooth: hci7: command tx timeout [ 1581.801388][ T4931] usb 1-1: USB disconnect, device number 5 [ 1581.811645][ T4931] usblp0: removed [ 1581.927462][T19275] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.929861][ T31] audit: type=1400 audit(1790371771.643:3131): avc: denied { write } for pid=20805 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1582.510552][T20810] netlink: 'syz.0.3821': attribute type 5 has an invalid length. [ 1583.222995][T19538] Bluetooth: hci7: command tx timeout [ 1584.644252][ T31] audit: type=1400 audit(1790371774.225:3132): avc: denied { create } for pid=20827 comm="syz.0.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1584.703380][ T31] audit: type=1800 audit(1790371774.300:3133): pid=20826 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3822" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1585.081183][ T31] audit: type=1400 audit(1790371774.384:3134): avc: denied { setopt } for pid=20827 comm="syz.0.3823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1585.151185][T19275] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.448086][T19538] Bluetooth: hci7: command tx timeout [ 1585.597708][ T31] audit: type=1400 audit(1790371775.132:3135): avc: denied { write } for pid=20814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1585.684283][T18313] usb 3-1: USB disconnect, device number 17 [ 1585.796750][T20223] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 1585.984078][T19275] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.038887][ T31] audit: type=1400 audit(1790371775.544:3136): avc: denied { write } for pid=20840 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1586.099165][T20223] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1586.102481][T20223] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1586.102532][T20223] usb 9-1: config 0 has no interface number 0 [ 1586.102634][T20223] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1586.102700][T20223] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1586.102798][T20223] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1586.118766][T20223] usb 9-1: config 0 descriptor?? [ 1586.130552][T20836] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1586.465075][T20223] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1586.701701][T18313] usb 9-1: USB disconnect, device number 9 [ 1588.351615][T19275] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.638586][T20867] netlink: 'syz.8.3826': attribute type 5 has an invalid length. [ 1588.896023][T20764] bridge0: port 1(bridge_slave_0) entered blocking state [ 1588.896234][T20764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.896515][T20764] bridge_slave_0: entered allmulticast mode [ 1588.905975][T20764] bridge_slave_0: entered promiscuous mode [ 1588.926953][T20764] bridge0: port 2(bridge_slave_1) entered blocking state [ 1588.929309][T20764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.929575][T20764] bridge_slave_1: entered allmulticast mode [ 1588.942469][T20764] bridge_slave_1: entered promiscuous mode [ 1589.232967][T20764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1589.235801][T20764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1589.359267][T17982] netdevsim netdevsim5 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 1589.452466][T20872] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3827'. [ 1589.452607][T20872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1589.475102][T20764] team0: Port device team_slave_0 added [ 1589.477573][T20764] team0: Port device team_slave_1 added [ 1589.501585][T20764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1589.501604][T20764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1589.501631][T20764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1589.503048][T20764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1589.503065][T20764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1589.503092][T20764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1589.781914][T20764] hsr_slave_0: entered promiscuous mode [ 1589.797738][T20764] hsr_slave_1: entered promiscuous mode [ 1589.798410][T20764] debugfs: 'hsr0' already exists in 'hsr' [ 1589.798431][T20764] Cannot create hsr debugfs directory [ 1590.070787][ T31] audit: type=1400 audit(1790371779.314:3137): avc: denied { read } for pid=20884 comm="syz.2.3829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1591.071907][ T31] audit: type=1400 audit(1790371780.259:3138): avc: denied { read write } for pid=20880 comm="syz.0.3824" name="rtc0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1591.071961][ T31] audit: type=1400 audit(1790371780.259:3139): avc: denied { open } for pid=20880 comm="syz.0.3824" path="/dev/rtc0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1591.072005][ T31] audit: type=1400 audit(1790371780.259:3140): avc: denied { ioctl } for pid=20880 comm="syz.0.3824" path="/dev/rtc0" dev="devtmpfs" ino=919 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1591.571432][T14502] Bluetooth: hci0: command 0x0406 tx timeout [ 1594.162084][T17004] netdevsim netdevsim5 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 1594.170588][T17004] netdevsim netdevsim5 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 1594.664469][T20918] netlink: 'syz.1.3833': attribute type 5 has an invalid length. [ 1594.935887][ T31] audit: type=1400 audit(1790371783.795:3141): avc: denied { write } for pid=20916 comm="syz.8.3834" path="socket:[83323]" dev="sockfs" ino=83323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1594.935947][ T31] audit: type=1400 audit(1790371783.795:3142): avc: denied { mounton } for pid=20916 comm="syz.8.3834" path="/syzcgroup/unified/syz8" dev="cgroup2" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1595.170597][T20921] XFS (nullb0): Invalid superblock magic number [ 1595.274447][ T31] audit: type=1400 audit(1790371784.188:3143): avc: denied { firmware_load } for pid=20916 comm="syz.8.3834" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1595.622524][T19275] bridge_slave_1: left allmulticast mode [ 1595.622553][T19275] bridge_slave_1: left promiscuous mode [ 1595.622836][T19275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1595.697400][T19275] bridge_slave_0: left allmulticast mode [ 1595.707036][T19275] bridge_slave_0: left promiscuous mode [ 1595.707302][T19275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1595.836715][ T31] audit: type=1400 audit(1790371784.702:3144): avc: denied { create } for pid=20932 comm="syz.8.3835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1595.841184][ T31] audit: type=1400 audit(1790371784.702:3145): avc: denied { bind } for pid=20932 comm="syz.8.3835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1596.499930][ T31] audit: type=1400 audit(1790371785.142:3146): avc: denied { setopt } for pid=20932 comm="syz.8.3835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1596.499995][ T31] audit: type=1400 audit(1790371785.142:3147): avc: denied { accept } for pid=20932 comm="syz.8.3835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1596.500051][ T31] audit: type=1400 audit(1790371785.142:3148): avc: denied { write } for pid=20932 comm="syz.8.3835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1596.500113][ T31] audit: type=1400 audit(1790371785.142:3149): avc: denied { read } for pid=20932 comm="syz.8.3835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1598.540616][T20950] netlink: 'syz.1.3839': attribute type 1 has an invalid length. [ 1600.115807][ T31] audit: type=1400 audit(1790371788.715:3150): avc: denied { create } for pid=20944 comm="syz.1.3839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1600.117845][ T31] audit: type=1400 audit(1790371788.715:3151): avc: denied { write } for pid=20944 comm="syz.1.3839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 1601.671832][ T31] audit: type=1400 audit(1790371790.146:3152): avc: denied { unmount } for pid=19547 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1602.309314][T14502] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1602.339468][T14502] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1602.341246][T19275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1602.341737][T14502] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1602.346185][T14502] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1602.359240][T19275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1602.359441][T14502] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1602.420760][T19275] bond0 (unregistering): Released all slaves [ 1602.443131][ T5785] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1602.585484][T20950] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1602.659027][ T5785] usb 9-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 1602.700033][ T5785] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.700066][ T5785] usb 9-1: Product: syz [ 1602.700084][ T5785] usb 9-1: Manufacturer: syz [ 1602.700103][ T5785] usb 9-1: SerialNumber: syz [ 1602.741580][ T5785] qcserial 9-1:1.0: Qualcomm USB modem converter detected [ 1602.754221][ T5785] usb 9-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 1603.190025][T20973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1603.218054][T20973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1603.246824][T19267] netdevsim netdevsim5 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 1603.958779][T20764] netdevsim netdevsim3 eth17 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1604.357639][T20223] usb 9-1: USB disconnect, device number 10 [ 1604.438439][T20223] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 1604.439090][T20223] qcserial 9-1:1.0: device disconnected [ 1604.706833][T19538] Bluetooth: hci6: command tx timeout [ 1606.842841][T19538] Bluetooth: hci6: command tx timeout [ 1607.039854][T19275] hsr_slave_0: left promiscuous mode [ 1607.110344][T19275] hsr_slave_1: left promiscuous mode [ 1607.111254][T19275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1607.111280][T19275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1607.147656][T19275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1607.147683][T19275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1607.191929][T19275] veth1_macvtap: left promiscuous mode [ 1607.191974][T19275] veth0_macvtap: left promiscuous mode [ 1607.192103][T19275] veth1_vlan: left promiscuous mode [ 1607.192147][T19275] veth0_vlan: left promiscuous mode [ 1608.608316][T20994] block nbd1: not configured, cannot reconfigure [ 1608.694452][T21012] netlink: 'syz.2.3848': attribute type 1 has an invalid length. [ 1608.966730][ T31] audit: type=1400 audit(1790371796.957:3153): avc: denied { write } for pid=20998 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1609.074991][T19538] Bluetooth: hci6: command tx timeout [ 1609.077933][T19275] team0 (unregistering): Port device team_slave_1 removed [ 1609.142146][ T31] audit: type=1400 audit(1790371797.106:3154): avc: denied { write } for pid=21023 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1609.150084][T19275] team0 (unregistering): Port device team_slave_0 removed [ 1609.396571][T20764] netdevsim netdevsim3 eth16 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1610.645230][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1611.009342][T20764] netdevsim netdevsim3 eth15 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1611.305866][T19538] Bluetooth: hci6: command tx timeout [ 1611.323908][T20764] netdevsim netdevsim3 eth14 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1611.538667][ T31] audit: type=1400 audit(1790371799.398:3155): avc: denied { write } for pid=21029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1611.809375][ T31] audit: type=1400 audit(1790371799.660:3156): avc: denied { write } for pid=21044 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1611.983467][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1612.025757][T20964] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.025847][T20964] bridge0: port 1(bridge_slave_0) entered disabled state [ 1612.026012][T20964] bridge_slave_0: entered allmulticast mode [ 1612.027781][T20964] bridge_slave_0: entered promiscuous mode [ 1612.070730][T20964] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.070872][T20964] bridge0: port 2(bridge_slave_1) entered disabled state [ 1612.071029][T20964] bridge_slave_1: entered allmulticast mode [ 1612.072745][T20964] bridge_slave_1: entered promiscuous mode [ 1612.325468][T19275] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.348482][ T31] audit: type=1400 audit(1790371800.156:3157): avc: denied { write } for pid=21050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1612.348620][T20964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1612.366418][T20964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1612.434534][T20964] team0: Port device team_slave_0 added [ 1612.437761][T20964] team0: Port device team_slave_1 added [ 1612.524341][T19275] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.558191][ T31] audit: type=1400 audit(1790371800.352:3158): avc: denied { write } for pid=21061 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1612.563581][T20764] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1612.568282][T20764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1612.569088][T20764] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1612.572080][T20764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1612.573147][T20964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1612.573164][T20964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1612.573194][T20964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1612.575817][T20964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1612.575835][T20964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1612.575860][T20964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1612.575917][T20764] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1612.580039][T20764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1612.588132][T20764] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1612.591900][T20764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1612.681826][ T5265] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1612.815783][T19275] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1612.862849][T20964] hsr_slave_0: entered promiscuous mode [ 1612.863736][T20964] hsr_slave_1: entered promiscuous mode [ 1612.864465][T20964] debugfs: 'hsr0' already exists in 'hsr' [ 1612.864486][T20964] Cannot create hsr debugfs directory [ 1613.008328][T19275] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1613.271212][ T31] audit: type=1400 audit(1790371801.016:3159): avc: denied { write } for pid=21070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1613.406396][ T31] audit: type=1400 audit(1790371801.147:3160): avc: denied { write } for pid=21081 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1613.409567][T20764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1613.481421][T20764] 8021q: adding VLAN 0 to HW filter on device team0 [ 1613.609733][T20964] netdevsim netdevsim6 eth20 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1613.639700][T19268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1613.639850][T19268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1613.647402][T19268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1613.647477][T19268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1613.650504][ T5265] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1613.863900][T19275] bridge_slave_1: left allmulticast mode [ 1613.863930][T19275] bridge_slave_1: left promiscuous mode [ 1613.864153][T19275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.869271][T19275] bridge_slave_0: left allmulticast mode [ 1613.869300][T19275] bridge_slave_0: left promiscuous mode [ 1613.869524][T19275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1614.214216][ T31] audit: type=1400 audit(1790371801.905:3161): avc: denied { write } for pid=21084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1614.293902][T19275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1614.297103][T19275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1614.325887][T19275] bond0 (unregistering): Released all slaves [ 1614.365062][T19268] netdevsim netdevsim0 eth17: set [0, 0] type 1 family 0 port 8472 - 0 [ 1614.365150][T19268] netdevsim netdevsim0 eth16: set [0, 0] type 1 family 0 port 8472 - 0 [ 1614.365193][T19268] netdevsim netdevsim0 eth14: set [0, 0] type 1 family 0 port 8472 - 0 [ 1614.365234][T19268] netdevsim netdevsim0 eth15: set [0, 0] type 1 family 0 port 8472 - 0 [ 1614.536034][ T31] audit: type=1400 audit(1790371802.195:3162): avc: denied { write } for pid=21099 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1614.683934][ T5265] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1615.157857][ T31] audit: type=1400 audit(1790371802.784:3163): avc: denied { write } for pid=21106 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1615.214808][T20764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1615.302297][T19275] hsr_slave_0: left promiscuous mode [ 1615.308453][T19275] hsr_slave_1: left promiscuous mode [ 1615.309358][T19275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1615.309383][T19275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1615.310115][T19275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1615.310134][T19275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1615.317027][T19275] veth1_macvtap: left promiscuous mode [ 1615.317071][T19275] veth0_macvtap: left promiscuous mode [ 1615.317166][T19275] veth1_vlan: left promiscuous mode [ 1615.317290][T19275] veth0_vlan: left promiscuous mode [ 1615.317836][ T31] audit: type=1400 audit(1790371802.934:3164): avc: denied { write } for pid=21119 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1615.629974][T19275] team0 (unregistering): Port device team_slave_1 removed [ 1615.662584][T19275] team0 (unregistering): Port device team_slave_0 removed [ 1615.780144][ T5265] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1615.886495][T20964] netdevsim netdevsim6 eth19 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1615.991176][T20764] veth0_vlan: entered promiscuous mode [ 1615.997587][T20764] veth1_vlan: entered promiscuous mode [ 1616.025658][T20764] veth0_macvtap: entered promiscuous mode [ 1616.264705][T20964] netdevsim netdevsim6 eth18 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1616.344915][T20764] veth1_macvtap: entered promiscuous mode [ 1616.444458][ T31] audit: type=1400 audit(1790371803.991:3165): avc: denied { write } for pid=21122 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1616.533685][T20964] netdevsim netdevsim6 eth13 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1616.636320][ T31] audit: type=1400 audit(1790371804.169:3166): avc: denied { write } for pid=21133 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1616.707540][T20764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1616.712707][T20764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1616.791145][ T5265] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1616.882870][T17004] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.882929][T17004] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1616.882961][T17004] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.039556][T17982] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1617.039726][T19269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1617.039743][T19269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1617.166639][T17984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1617.166676][T17984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1617.537957][T21145] 9p: Bad value for 'rfdno' [ 1617.573959][T21150] netlink: 'syz.3.3812': attribute type 16 has an invalid length. [ 1617.573983][T21150] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3812'. [ 1618.339690][T21152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3858'. [ 1619.385693][ T31] audit: type=1400 audit(1790371806.732:3167): avc: denied { mount } for pid=21148 comm="syz.3.3812" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1619.434018][T21150] erspan1: entered allmulticast mode [ 1619.544950][ T31] audit: type=1400 audit(1790371806.882:3168): avc: denied { write } for pid=21136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1619.574994][T21152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1619.615285][T21152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1620.114530][ T31] audit: type=1400 audit(1790371807.406:3169): avc: denied { write } for pid=21165 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1620.445375][ T5265] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1620.480425][T20964] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1620.547279][T20964] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1620.550911][T20964] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1620.587643][T20964] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1620.604871][T20964] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1620.613300][T20964] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1620.614591][T20964] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1620.618146][T20964] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1620.857429][T20964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1620.892255][T20964] 8021q: adding VLAN 0 to HW filter on device team0 [ 1620.914953][T17982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1620.915062][T17982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1620.924989][T17984] bridge0: port 2(bridge_slave_1) entered blocking state [ 1620.925084][T17984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1621.065862][ T31] audit: type=1400 audit(1790371808.313:3170): avc: denied { unmount } for pid=20764 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1621.235634][ T31] audit: type=1400 audit(1790371808.463:3171): avc: denied { append } for pid=21181 comm="syz.2.3862" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1622.495154][ T31] audit: type=1400 audit(1790371809.641:3172): avc: denied { remount } for pid=21181 comm="syz.2.3862" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1622.708534][ T31] audit: type=1400 audit(1790371809.828:3173): avc: denied { create } for pid=21181 comm="syz.2.3862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1622.771852][ T31] audit: type=1400 audit(1790371809.903:3174): avc: denied { mount } for pid=21181 comm="syz.2.3862" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1622.856773][ T31] audit: type=1400 audit(1790371809.987:3175): avc: denied { search } for pid=21181 comm="syz.2.3862" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1622.857568][ T31] audit: type=1400 audit(1790371809.987:3176): avc: denied { search } for pid=21181 comm="syz.2.3862" name="usb_gadget" dev="configfs" ino=2791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1622.964604][ T31] audit: type=1400 audit(1790371810.090:3177): avc: denied { search } for pid=21181 comm="syz.2.3862" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1622.965477][ T31] audit: type=1400 audit(1790371810.090:3178): avc: denied { search } for pid=21181 comm="syz.2.3862" name="usb_gadget" dev="configfs" ino=2791 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1625.617126][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 1625.617150][ T31] audit: type=1400 audit(1790371812.569:3188): avc: denied { write } for pid=21220 comm="syz.2.3855" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1626.092518][ T31] audit: type=1400 audit(1790371812.943:3189): avc: denied { create } for pid=21220 comm="syz.2.3855" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1627.332651][T20964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1627.759098][T16907] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1628.215914][T16907] usb 9-1: Using ep0 maxpacket: 32 [ 1628.368285][T16907] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1628.634159][T20964] veth0_vlan: entered promiscuous mode [ 1628.677560][T16907] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1628.677630][T16907] usb 9-1: config 0 has no interface number 0 [ 1628.677841][T16907] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1628.806430][T20964] veth1_vlan: entered promiscuous mode [ 1629.277566][ T31] audit: type=1400 audit(1790371815.993:3190): avc: denied { connect } for pid=21248 comm="syz.1.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1629.292166][T16907] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.292195][T16907] usb 9-1: Product: syz [ 1629.292205][T16907] usb 9-1: Manufacturer: syz [ 1629.292214][T16907] usb 9-1: SerialNumber: syz [ 1629.294415][T16907] usb 9-1: config 0 descriptor?? [ 1629.418218][T20964] veth0_macvtap: entered promiscuous mode [ 1629.428663][T20964] veth1_macvtap: entered promiscuous mode [ 1629.472718][T20964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1629.484842][T20964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1629.532752][ T30] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1629.537523][T17004] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.560750][T19277] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.560798][T19277] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.578049][ T31] audit: type=1400 audit(1790371816.264:3191): avc: denied { write } for pid=21224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1629.619246][T17982] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1629.770508][ T30] usb 2-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice= 2.6d [ 1629.775139][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.775173][ T30] usb 2-1: Product: syz [ 1629.775196][ T30] usb 2-1: Manufacturer: syz [ 1629.775218][ T30] usb 2-1: SerialNumber: syz [ 1629.894251][ T31] audit: type=1400 audit(1790371816.564:3192): avc: denied { write } for pid=21256 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1629.956497][T19277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1629.956519][T19277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.200868][T19267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1630.200893][T19267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1630.210746][ T31] audit: type=1400 audit(1790371816.807:3193): avc: denied { write } for pid=21248 comm="syz.1.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1630.255052][ T30] gspca_main: mars-2.14.0 probing 093a:050f [ 1630.278264][ T30] usb 2-1: USB disconnect, device number 37 [ 1631.086132][T16907] f81534 9-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1631.086233][T16907] f81534 9-1:0.12: f81534_find_config_idx: read failed: -71 [ 1631.086270][T16907] f81534 9-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1631.086402][T16907] f81534 9-1:0.12: probe with driver f81534 failed with error -71 [ 1631.116332][T16907] usb 9-1: USB disconnect, device number 11 [ 1631.645001][ T31] audit: type=1400 audit(1790371818.191:3194): avc: denied { read } for pid=21275 comm="syz.1.3866" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1631.645198][ T31] audit: type=1400 audit(1790371818.191:3195): avc: denied { open } for pid=21275 comm="syz.1.3866" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1634.282051][ T31] audit: type=1400 audit(1790371819.726:3196): avc: denied { write } for pid=21278 comm="syz.6.3842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1634.284811][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1636.925193][ T31] audit: type=1800 audit(1790371823.018:3197): pid=21299 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3869" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1637.701255][T21294] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1637.767087][T21294] bridge0: port 4(bond1) entered blocking state [ 1637.767176][T21294] bridge0: port 4(bond1) entered disabled state [ 1637.767321][T21294] bond1: entered allmulticast mode [ 1637.799921][T21294] bond1: entered promiscuous mode [ 1637.819035][T21294] bridge0: port 4(bond1) entered blocking state [ 1637.821827][T21294] bridge0: port 4(bond1) entered forwarding state [ 1637.886236][T19269] bridge0: port 4(bond1) entered disabled state [ 1638.013999][ T31] audit: type=1400 audit(1790371824.169:3198): avc: denied { write } for pid=21273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1638.154935][ T31] audit: type=1400 audit(1790371824.300:3199): avc: denied { write } for pid=21308 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1641.061507][T16907] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1641.404597][T16907] usb 9-1: Using ep0 maxpacket: 32 [ 1641.482438][T16907] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1641.617636][T16907] usb 9-1: config 0 has no interfaces? [ 1641.697787][T21353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3877'. [ 1641.701270][ T31] audit: type=1400 audit(1790371827.602:3200): avc: denied { write } for pid=21319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1641.997784][ T5713] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1642.222605][T16907] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.222677][T16907] usb 9-1: Product: syz [ 1642.222724][T16907] usb 9-1: Manufacturer: syz [ 1642.222783][T16907] usb 9-1: SerialNumber: syz [ 1642.260989][T16907] usb 9-1: config 0 descriptor?? [ 1642.454725][ T5713] usb 3-1: Using ep0 maxpacket: 32 [ 1642.539802][ T5713] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1642.561198][ T5713] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1642.561219][ T5713] usb 3-1: config 0 has no interface number 0 [ 1642.561275][ T5713] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1642.599041][ T5713] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.599086][ T5713] usb 3-1: Product: syz [ 1642.599118][ T5713] usb 3-1: Manufacturer: syz [ 1642.599149][ T5713] usb 3-1: SerialNumber: syz [ 1642.633585][ T5713] usb 3-1: config 0 descriptor?? [ 1642.896758][T21362] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1642.953582][ T31] audit: type=1400 audit(1790371828.725:3201): avc: denied { mounton } for pid=21358 comm="syz.6.3870" path="/1/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1642.953639][ T31] audit: type=1400 audit(1790371828.790:3202): avc: denied { write } for pid=21358 comm="syz.6.3870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1642.953680][ T31] audit: type=1400 audit(1790371828.790:3203): avc: denied { nlmsg_write } for pid=21358 comm="syz.6.3870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1643.953399][ T31] audit: type=1400 audit(1790371829.716:3204): avc: denied { write } for pid=21357 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1644.314120][ T31] audit: type=1400 audit(1790371830.053:3205): avc: denied { write } for pid=21351 comm="syz.1.3878" name="ss" dev="configfs" ino=84808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1644.314557][ T31] audit: type=1400 audit(1790371830.053:3206): avc: denied { create } for pid=21351 comm="syz.1.3878" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1644.450206][ T5713] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1644.450309][ T5713] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1644.450345][ T5713] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1644.450477][ T5713] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1644.518203][ T5713] usb 3-1: USB disconnect, device number 18 [ 1645.286749][ T31] audit: type=1400 audit(1790371830.689:3207): avc: denied { write } for pid=21368 comm="syz.3.3881" name="ss" dev="configfs" ino=84808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1645.495486][ T31] audit: type=1800 audit(1790371831.166:3208): pid=21388 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.3882" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1646.949815][ T31] audit: type=1800 audit(1790371832.523:3209): pid=21392 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.3882" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1646.985601][ T5713] usb 9-1: USB disconnect, device number 12 [ 1647.313952][ T31] audit: type=1400 audit(1790371832.869:3210): avc: denied { write } for pid=21373 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1648.659699][ T31] audit: type=1400 audit(1790371833.673:3211): avc: denied { ioctl } for pid=21404 comm="syz.8.3886" path="/dev/loop-control" dev="devtmpfs" ino=644 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1649.183026][ T31] audit: type=1400 audit(1790371834.609:3212): avc: denied { create } for pid=21408 comm="syz.3.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1649.302934][ T31] audit: type=1400 audit(1790371834.730:3213): avc: denied { write } for pid=21407 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1649.565899][ T31] audit: type=1800 audit(1790371834.973:3214): pid=21427 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.8.3889" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1649.945811][ T31] audit: type=1400 audit(1790371835.329:3215): avc: denied { setopt } for pid=21433 comm="syz.3.3891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1650.276317][ T31] audit: type=1400 audit(1790371835.628:3216): avc: denied { map } for pid=21436 comm="syz.6.3890" path="socket:[85706]" dev="sockfs" ino=85706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1650.276372][ T31] audit: type=1400 audit(1790371835.628:3217): avc: denied { read } for pid=21436 comm="syz.6.3890" path="socket:[85706]" dev="sockfs" ino=85706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1650.528243][T21445] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1650.528341][T21445] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1650.535156][T21445] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1650.764194][ T31] audit: type=1400 audit(1790371835.769:3218): avc: denied { ioctl } for pid=21433 comm="syz.3.3891" path="socket:[86466]" dev="sockfs" ino=86466 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1650.764426][ T31] audit: type=1400 audit(1790371835.871:3219): avc: denied { firmware_load } for pid=21433 comm="syz.3.3891" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1651.874428][ T31] audit: type=1400 audit(1790371837.134:3220): avc: denied { write } for pid=21434 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1653.056467][ T32] INFO: task syz.7.3715:20079 blocked for more than 144 seconds. [ 1653.056558][ T32] Tainted: G L syzkaller #0 [ 1653.056597][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1653.056633][ T32] task:syz.7.3715 state:D stack:28728 pid:20079 tgid:20072 ppid:18541 task_flags:0x400040 flags:0x00080002 [ 1653.057027][ T32] Call Trace: [ 1653.057064][ T32] [ 1653.057127][ T32] __schedule+0x1259/0x6920 [ 1653.057236][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 1653.057396][ T32] ? lock_acquire+0x1d1/0x380 [ 1653.057480][ T32] ? __pfx___schedule+0x10/0x10 [ 1653.057541][ T32] ? find_held_lock+0x2b/0x80 [ 1653.057634][ T32] ? schedule+0x225/0x2c0 [ 1653.057747][ T32] schedule+0xdd/0x2c0 [ 1653.057833][ T32] super_lock+0x286/0x3f0 [ 1653.057926][ T32] ? __pfx_super_lock+0x10/0x10 [ 1653.057984][ T32] ? lock_acquire+0x1d1/0x380 [ 1653.058064][ T32] ? __pfx_var_wake_function+0x10/0x10 [ 1653.058147][ T32] ? __iterate_supers+0x247/0x4a0 [ 1653.058274][ T32] __iterate_supers+0x38b/0x4a0 [ 1653.058367][ T32] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 1653.058455][ T32] ? __pfx___iterate_supers+0x10/0x10 [ 1653.058589][ T32] ksys_sync+0x87/0xf0 [ 1653.058650][ T32] ? __pfx_ksys_sync+0x10/0x10 [ 1653.058710][ T32] ? kcov_ioctl+0x17a/0x760 [ 1653.058790][ T32] ? do_syscall_64+0xae/0x790 [ 1653.058881][ T32] __do_sys_sync+0xe/0x20 [ 1653.058942][ T32] do_syscall_64+0x123/0x790 [ 1653.059026][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1653.059076][ T32] RIP: 0033:0x7f134a39e159 [ 1653.059136][ T32] RSP: 002b:00007f134b303028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1653.059207][ T32] RAX: ffffffffffffffda RBX: 00007f134a626180 RCX: 00007f134a39e159 [ 1653.059269][ T32] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1653.059317][ T32] RBP: 00007f134a626180 R08: 0000000000000000 R09: 0000000000000000 [ 1653.059355][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1653.059392][ T32] R13: 00007f134a626218 R14: 00007f134a626180 R15: 00007fffd53d7f58 [ 1653.059535][ T32] [ 1653.243102][ T31] audit: type=1400 audit(1790371838.407:3221): avc: denied { write } for pid=5587 comm="syz-executor" path="pipe:[4083]" dev="pipefs" ino=4083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1653.272263][ T32] [ 1653.272263][ T32] Showing all locks held in the system: [ 1653.272292][ T32] locks held by pr/ttyS0/16: 2, last CPU#1: [ 1653.272323][ T32] #0: ffffffff8edd87f8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x49/0x60 [ 1653.272426][ T32] #1: ffffffff9bc72f38 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x64/0xc0 [ 1653.272531][ T32] locks held by kworker/1:1/30: 2, last CPU#1: [ 1653.272547][ T32] #0: ffff88801c059d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1653.272671][ T32] #1: ffffc90000a57d08 ((gc_work).work){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1653.272772][ T32] locks held by khungtaskd/32: 1, last CPU#0: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1653.272789][ T32] #0: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1653.272950][ T32] locks held by getty/5357: 2, on CPU#0: [ 1653.272965][ T32] #0: ffff88802938c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1653.273058][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1653.273159][ T32] locks held by syz-executor/5587: 2, last CPU#0: [ 1653.273176][ T32] #0: ffff88802a835cf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 1653.273272][ T32] #1: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1653.273353][ T32] locks held by kworker/0:5/5726: 2, last CPU#0: [ 1653.273382][ T32] #0: ffff888031787540 ((wq_completion)wg-crypt-wg1#12){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1653.273486][ T32] #1: ffffc9000438fd08 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1653.274033][ T32] locks held by kworker/u8:14/17004: 3, last CPU#0: [ 1653.274049][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1653.274154][ T32] #1: ffffc9000df6fd08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1653.274280][ T32] #2: ffff888060d00800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1653.274362][ T32] locks held by kworker/u8:15/17090: 4, last CPU#0: [ 1653.274391][ T32] #0: ffff88801c094140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1653.274491][ T32] #1: ffffc9000e3b7d08 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1653.274579][ T32] #2: ffff888060030800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0x92/0x550 [ 1653.274679][ T32] #3: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1653.274781][ T32] locks held by syz.1.3472/17955: 1, on CPU#0: [ 1653.274810][ T32] #0: ffff88803611a0e8 (&type->s_umount_key#92/1){+.+.}-{4:4}, at: sget_fc+0x3c6/0x1f70 [ 1653.274913][ T32] locks held by kworker/u8:20/17984: 2, last CPU#0: [ 1653.274928][ T32] #0: ffff888033c7c140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1653.275031][ T32] #1: ffffc90006ce7d08 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1653.275134][ T32] locks held by kworker/1:2/18311: 3, last CPU#1: [ 1653.275163][ T32] #0: ffff8880588bbd40 ((wq_completion)wg-crypt-wg0#12){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1653.275271][ T32] #1: ffffc90003f07d08 ((work_completion)(&({ do { const void __seg_gs *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __asm__ ("" : "=r"(__ptr) : "0"((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1653.275408][ T32] #2: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: __skb_flow_dissect+0x1fe/0x6c30 [ 1653.275510][ T32] locks held by kworker/u8:24/19269: 3, last CPU#0: [ 1653.275539][ T32] #0: ffff8880332be140 ((wq_completion)krds_cp_wq#2/0){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 1653.275648][ T32] #1: ffffc90004e07d08 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 1653.275750][ T32] #2: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 1653.275856][ T32] locks held by syz.3.3881/21379: 3, last CPU#0: [ 1653.275872][ T32] #0: ffff888055a1c460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 1653.275970][ T32] #1: ffff88807e566f18 (&sb->s_type->i_mutex_key#15){++++}-{4:4}, at: shmem_file_write_iter+0x86/0x140 [ 1653.276068][ T32] #2: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: rcu_lock_acquire.constprop.0+0x7/0x30 [ 1653.276146][ T32] locks held by syz.6.3890/21459: 2, last CPU#0: [ 1653.276175][ T32] #0: ffff88802a834378 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x124/0xa00 [ 1653.276256][ T32] #1: ffffffff8edec4e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x2f/0x310 [ 1653.276348][ T32] locks held by syz.2.3893/21450: 1, on CPU#0: [ 1653.276363][ T32] #0: ffffffff90cd49c0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x373/0x6c40 [ 1653.276464][ T32] locks held by syz.2.3893/21468: 1, on CPU#0: [ 1653.276494][ T32] #0: ffffffff90cd49c0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x331/0x10e0 [ 1653.276576][ T32] locks held by syz.3.3895/21460: 1, last CPU#0: [ 1653.276606][ T32] #0: ffffffff90cd49c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x371/0xe90 [ 1653.276710][ T32] locks held by rm/21471: 1, last CPU#0: [ 1653.276738][ T32] #0: ffffffff8f90ae78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x262/0x460 [ 1653.276821][ T32] [ 1653.276841][ T32] ============================================= [ 1653.276841][ T32] [ 1653.276889][ T32] NMI backtrace for cpu 0 [ 1653.276908][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1653.276938][ T32] Tainted: [L]=SOFTLOCKUP [ 1653.276946][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1653.276959][ T32] Call Trace: [ 1653.276968][ T32] [ 1653.276978][ T32] dump_stack_lvl+0x100/0x190 [ 1653.277011][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1653.277046][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1653.277071][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 1653.277104][ T32] sys_info+0x141/0x190 [ 1653.277128][ T32] watchdog+0xcb1/0x1030 [ 1653.277158][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1653.277191][ T32] ? __pfx_watchdog+0x10/0x10 [ 1653.277217][ T32] ? __kthread_parkme+0x18f/0x230 [ 1653.277246][ T32] ? kthread+0x13a/0x450 [ 1653.277274][ T32] ? __pfx_watchdog+0x10/0x10 [ 1653.277297][ T32] kthread+0x373/0x450 [ 1653.277326][ T32] ? __pfx_kthread+0x10/0x10 [ 1653.277357][ T32] ret_from_fork+0x730/0xd60 [ 1653.277382][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1653.277409][ T32] ? __switch_to+0x800/0x10f0 [ 1653.277439][ T32] ? __pfx_kthread+0x10/0x10 [ 1653.277471][ T32] ret_from_fork_asm+0x1a/0x30 [ 1653.277508][ T32] [ 1653.277578][ T32] Sending NMI from CPU 0 to CPUs 1: [ 1653.277632][ C1] NMI backtrace for cpu 1 [ 1653.277647][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1653.277676][ C1] Tainted: [L]=SOFTLOCKUP [ 1653.277683][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1653.277696][ C1] RIP: 0010:io_serial_in+0x87/0xb0 [ 1653.277722][ C1] Code: bd 5a fc 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 1a 66 03 5d 40 89 da ec <5b> 0f b6 c0 5d 41 5c c3 cc cc cc cc e8 68 27 ce fc eb a2 e8 f1 27 [ 1653.277742][ C1] RSP: 0018:ffffc90000157958 EFLAGS: 00000002 [ 1653.277758][ C1] RAX: dffffc0000000000 RBX: 00000000000003fd RCX: 0000000000000000 [ 1653.277772][ C1] RDX: 00000000000003fd RSI: ffffffff85b16510 RDI: ffffffff9bc72f60 [ 1653.277786][ C1] RBP: ffffffff9bc72f20 R08: 0000000000000001 R09: 000000000000001f [ 1653.277799][ C1] R10: 0000000000000000 R11: 205d323354202020 R12: 0000000000000000 [ 1653.277812][ C1] R13: 0000000000000020 R14: fffffbfff378e641 R15: dffffc0000000000 [ 1653.277827][ C1] FS: 0000000000000000(0000) GS:ffff888123c52000(0000) knlGS:0000000000000000 [ 1653.277847][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1653.277861][ C1] CR2: 00007fc83d387780 CR3: 000000002c130000 CR4: 00000000003526f0 [ 1653.277874][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 1653.277888][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1653.277901][ C1] Call Trace: [ 1653.277908][ C1] [ 1653.277917][ C1] wait_for_lsr+0x13a/0x210 [ 1653.277947][ C1] serial8250_fifo_wait_for_lsr_thre+0x5f/0xd0 [ 1653.277977][ C1] __serial8250_console_fifo_write+0xa5/0x290 [ 1653.278005][ C1] ? __pfx_io_serial_out+0x10/0x10 [ 1653.278031][ C1] serial8250_console_write+0xf46/0x1330 [ 1653.278065][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1653.278096][ C1] ? __nbcon_context_update_unsafe+0x1b6/0x220 [ 1653.278124][ C1] ? __pfx___nbcon_context_update_unsafe+0x10/0x10 [ 1653.278150][ C1] nbcon_emit_next_record+0x8f7/0xa70 [ 1653.278174][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1653.278195][ C1] ? nbcon_context_try_acquire+0x3a6/0xc60 [ 1653.278228][ C1] ? do_raw_spin_lock+0x130/0x260 [ 1653.278259][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 1653.278287][ C1] ? _raw_spin_lock_irqsave+0x42/0x60 [ 1653.278317][ C1] nbcon_emit_one+0x1a8/0x2b0 [ 1653.278336][ C1] ? __pfx_nbcon_emit_one+0x10/0x10 [ 1653.278360][ C1] nbcon_kthread_func+0x613/0x7d0 [ 1653.278383][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1653.278407][ C1] ? __kthread_parkme+0x18f/0x230 [ 1653.278434][ C1] ? kthread+0x13a/0x450 [ 1653.278460][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1653.278481][ C1] kthread+0x373/0x450 [ 1653.278508][ C1] ? __pfx_kthread+0x10/0x10 [ 1653.278537][ C1] ret_from_fork+0x730/0xd60 [ 1653.278560][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1653.278584][ C1] ? __switch_to+0x800/0x10f0 [ 1653.278612][ C1] ? __pfx_kthread+0x10/0x10 [ 1653.278641][ C1] ret_from_fork_asm+0x1a/0x30 [ 1653.278670][ C1] [ 1653.279648][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1654.377726][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1654.388479][ T32] Tainted: [L]=SOFTLOCKUP [ 1654.392785][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1654.403267][ T32] Call Trace: [ 1654.406540][ T32] [ 1654.409480][ T32] dump_stack_lvl+0x100/0x190 [ 1654.415756][ T32] vpanic+0x553/0x970 [ 1654.419741][ T32] ? __pfx_vpanic+0x10/0x10 [ 1654.424264][ T32] panic+0xd1/0xe0 [ 1654.429125][ T32] ? __pfx_panic+0x10/0x10 [ 1654.433585][ T32] ? nmi_trigger_cpumask_backtrace+0x1c2/0x2a0 [ 1654.439736][ T32] ? printk_trigger_flush+0x4/0x1a0 [ 1654.445574][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 1654.451762][ T32] ? watchdog.cold+0x1ec/0x234 [ 1654.456520][ T32] watchdog.cold+0x1fd/0x234 [ 1654.461131][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1654.468355][ T32] ? __pfx_watchdog+0x10/0x10 [ 1654.473072][ T32] ? __kthread_parkme+0x18f/0x230 [ 1654.478098][ T32] ? kthread+0x13a/0x450 [ 1654.483544][ T32] ? __pfx_watchdog+0x10/0x10 [ 1654.488218][ T32] kthread+0x373/0x450 [ 1654.492292][ T32] ? __pfx_kthread+0x10/0x10 [ 1654.496884][ T32] ret_from_fork+0x730/0xd60 [ 1654.502427][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1654.507558][ T32] ? __switch_to+0x800/0x10f0 [ 1654.512227][ T32] ? __pfx_kthread+0x10/0x10 [ 1654.516808][ T32] ret_from_fork_asm+0x1a/0x30 [ 1654.521566][ T32] [ 1654.524830][ T32] Kernel Offset: disabled [ 1654.529137][ T32] Rebooting in 86400 seconds..