last executing test programs: 6m10.569970176s ago: executing program 3 (id=13): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='\x00', 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r3) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2006c00030100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendto$packet(0xffffffffffffffff, &(0x7f0000000640)="ffffffffffff0011223344554305000f3200000000010011221f445500112233445500ff0000", 0x26, 0x4c004, &(0x7f0000000800)={0x11, 0x1a, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@dellink={0x34, 0x11, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv0\x00'}]}, 0x34}}, 0x0) 6m6.629778204s ago: executing program 3 (id=27): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, 0x0, 0x4004800) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000500)=""/68, 0x0, 0x60000}) sendmsg$nl_route_sched(r0, 0x0, 0xc805) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000001c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) fsopen(&(0x7f0000000100)='adfs\x00', 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 6m6.226858762s ago: executing program 3 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_CQ_RING(0x7fffffffb000, 0x7, 0x3000001, 0xbd4c341840b03bf2, 0xffffffffffffffff, 0x8000000) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="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", 0xfc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x20, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r5, 0x0, 0x29, 0x0, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000240)={'pcl818\x00', [0x6, 0x2c, 0x1, 0xfffffffe, 0x81, 0x1000, 0x889a, 0x20000004, 0x6, 0x1000a, 0x4, 0xb059, 0x100, 0xb6ac, 0x9, 0x54, 0x20000006, 0x10008, 0x40000fe9, 0x401, 0x3, 0x9, 0x4, 0x9, 0x48, 0x3, 0x80, 0x10, 0x83, 0x4000007, 0xff]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) 6m4.682528481s ago: executing program 3 (id=31): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_usb_connect$uac1(0xde68d1dc03bb88cc, 0x84, &(0x7f0000000340)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r0], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x5) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200008c4}, 0x4804) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x4, 0x0, 0x7fffffff}]}) fchdir(0xffffffffffffffff) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x985, 0x12) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x3, 0xb, 0x4}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) close(0x3) setns(r1, 0x8020000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x101000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 5m58.428678683s ago: executing program 3 (id=43): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000080), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000204)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000208)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000214)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000220)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000224)={0x2, 0xfa}, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio2/drvctl\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='psmouse\x00', 0x8) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setopts(0x4200, r3, 0x0, 0x1) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0x4212, r3, 0x58, &(0x7f0000000080)) 5m57.250057972s ago: executing program 3 (id=48): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) listen(r0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x9e8, 0x21, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x4, 0x90, 0xb, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x89, 0x4, 0x3, {0x7, 0x25, 0x1, 0x8, 0x7, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0xb, 0x45, {0x7, 0x25, 0x1, 0xc, 0xf1}}}}}}}}]}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@gettaction={0x14, 0x32, 0x605, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x24000800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/vs/svc_lfactor\x00', 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0xc6, 0x47, 0x7ffcffff}]}) fstat(r4, &(0x7f0000000140)) write$tcp_congestion(r3, 0x0, 0x0) syz_usb_connect$uac3(0x1, 0xb1, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x80000000000003) 5m41.953412659s ago: executing program 32 (id=48): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040), 0x8) listen(r0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x9e8, 0x21, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x4, 0x90, 0xb, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x89, 0x4, 0x3, {0x7, 0x25, 0x1, 0x8, 0x7, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0xb, 0x45, {0x7, 0x25, 0x1, 0xc, 0xf1}}}}}}}}]}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@gettaction={0x14, 0x32, 0x605, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x850}, 0x24000800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./proc_mnt\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc_mnt/sys/net/ipv4/vs/svc_lfactor\x00', 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0xc6, 0x47, 0x7ffcffff}]}) fstat(r4, &(0x7f0000000140)) write$tcp_congestion(r3, 0x0, 0x0) syz_usb_connect$uac3(0x1, 0xb1, &(0x7f0000000080)=ANY=[@ANYRESHEX], 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x80000000000003) 5m5.603211465s ago: executing program 1 (id=151): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, 0x0, 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r6 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex, 0xffffffffffffffff, 0xa, 0x18}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x200002, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 5m2.47030606s ago: executing program 1 (id=159): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) r5 = fcntl$dupfd(r3, 0x406, r3) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r5, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) 5m1.515360337s ago: executing program 1 (id=164): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) ioctl(0xffffffffffffffff, 0x2, 0x0) close(r1) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040001, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0xd}, 0x1c) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='reno', 0x4) shutdown(0xffffffffffffffff, 0x1) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, 0x0) pwritev(r2, &(0x7f0000004700)=[{&(0x7f0000000340)="f65a61c77bca944b5eb731661cab6b5e4f1d4a174437fa89b9dece22e33617a31af0138e", 0x24}], 0x1, 0x1, 0x0) 4m59.748559406s ago: executing program 1 (id=168): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x24, 0x80801, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x11, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000bc0)=[{{&(0x7f0000000400)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100", 0xe}], 0x1}}], 0x1, 0x24044015) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000080)=0x2, 0x4) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2002, 0x0) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a80016002000034004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d400d000000e006dcdf73951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de692954b43370e9703920723f9a94100"/216, 0xd8}], 0x1}, 0x0) socket$pptp(0x18, 0x1, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x1, &(0x7f00000001c0)=@raw=[@alu={0x7, 0x1, 0xa, 0x4, 0x1, 0x5d7a202e63400190}], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000240)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000280)=[{0x0, 0x1, 0x8, 0xa}, {0x3, 0x1, 0x4, 0x5}, {0x0, 0x3, 0x7, 0x5}, {0x3, 0x5, 0xd, 0x9}], 0x10, 0x2e3aced3}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={r5, 0xffffffffffffffff, 0x25, 0x0, @void}, 0x10) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) 4m58.41667835s ago: executing program 1 (id=170): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0xe, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x80402, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/248, 0xf8}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = open(&(0x7f0000000600)='./file0\x00', 0x1e1142, 0xfb) r6 = socket$alg(0x26, 0x5, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80000) sendfile(r7, r5, &(0x7f0000000280)=0x3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 4m54.372894795s ago: executing program 1 (id=173): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r3 = socket(0x10, 0x3, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10122, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, r4, 0x0) setresgid(0x0, 0xee01, 0x0) ftruncate(r4, 0x0) 4m38.98286555s ago: executing program 33 (id=173): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x8}, 0xc) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) r3 = socket(0x10, 0x3, 0x0) recvmmsg(r3, 0x0, 0x0, 0x10122, 0x0) r4 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x24011, r4, 0x0) setresgid(0x0, 0xee01, 0x0) ftruncate(r4, 0x0) 3m34.402674628s ago: executing program 4 (id=271): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x24, 0x2c, 0x800, 0x70bd25, 0x6, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xc, 0xc}, {0x8, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x4008000) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x10000001}) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x40810) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000600)={0x1, 'lo\x00'}, 0x18) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(0xffffffffffffffff, &(0x7f0000000400)='PI', 0x2) 3m34.153605726s ago: executing program 4 (id=273): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0xb9d8, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x20) 3m32.969867986s ago: executing program 4 (id=274): syz_emit_ethernet(0x56, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xffffffff, 0x4) r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x9c}}, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f00000000c0)={0x74, 0x0, 0x13}) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bff000/0x400000)=nil) syz_kvm_add_vcpu$x86(r4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) setsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000000000), 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x80) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e26, 0x8, @mcast1, 0x5}, 0x1c) write(r0, &(0x7f0000000000)="01000000", 0x4) 3m32.570724764s ago: executing program 4 (id=276): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100134512a20c016df05bd7d010203010902360001030590800904a003040300000809050f861000f6030809050503100002890809050603100003998c09058f6f"], 0x0) r1 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x20, 0x23, 0x30, {0x30, 0x21, "b0ccf3113258109cfc48b9040647805eb84fa1d82a5534a6cdd78fa3f6cd946b7474c505294ac19237dfc11fafe0"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x401}}, &(0x7f00000001c0)={0x0, 0xf, 0x3a, {0x5, 0xf, 0x3a, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x7, 0xff}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0xfb, 0x7, 0x8000, 0xc1}, @ssp_cap={0x20, 0x10, 0xa, 0x14, 0x5, 0x0, 0xff0f, 0x7, [0xff0000, 0xc0, 0xcf, 0x30, 0x1fb0]}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x24, 0x88, 0x10, 0xd, "580646e1", "f6e11531"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x0, 0xd, 0x9, 0x1, 0x40, 0x100}}}, &(0x7f0000000900)={0x84, &(0x7f0000000480)={0x40, 0x14, 0x7f, "c3c8b9542422ef2246ed204300e73ecd251adcdf182d8dabd3fb26c5901a41fc833f0f8d286955891a9b0a61c381dcc9b0330363aef5d8b379728566c90344c4cde52a7412fbdadd44d9fd737f21c9b705521182e9ba52d1d655fb2b3f256c8bbf84e088292988da95f7952faa0eb0a636dc7f77c523685b8eb86eac0b84e2"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000005c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1c00, 0x8}}, &(0x7f0000000640)={0x40, 0x7, 0x2}, &(0x7f0000000680)={0x40, 0x9, 0x1, 0x40}, &(0x7f00000006c0)={0x40, 0xb, 0x2, "d270"}, &(0x7f0000000700)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000740)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000780)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "6c91"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x5e0}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0xf5}, &(0x7f0000000880)={0x40, 0x1e, 0x1, 0x81}, &(0x7f00000008c0)={0x40, 0x21, 0x1, 0x2}}) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x28, r1, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000c1}, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'vxcan0\x00'}) socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r6, &(0x7f0000003440)={0x2020}, 0x2020) pwritev2(r6, &(0x7f0000000040)=[{&(0x7f0000000100)="6ade", 0x2}], 0x1, 0x6, 0x9, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10007}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_DST={0x8, 0x1, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) 3m29.337653762s ago: executing program 4 (id=278): r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r0, 0x0, 0x3b) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x80383, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) ioctl$SNDCTL_SEQ_RESET(r1, 0x5100) 3m25.462956363s ago: executing program 4 (id=284): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = io_uring_setup(0x6618, &(0x7f0000000000)={0x0, 0x0, 0x200}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000080)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000100)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x3, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) io_uring_enter(r1, 0x0, 0x1, 0x9, &(0x7f0000000180), 0x18) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000001fc0)={0x2, @sliced={0x9, [0x9, 0x100, 0x7, 0x1, 0x200, 0x0, 0xfff9, 0xc0b0, 0x4, 0x1000, 0x7ff, 0x7, 0x2, 0x7, 0x9, 0x7, 0xb9, 0x5, 0x9, 0xb, 0xffff, 0xce, 0x7ff, 0x47b, 0x7f, 0x101, 0x8, 0x3, 0x9, 0x3, 0x5a, 0x7ffe, 0xd6e6, 0x7, 0x7, 0x7, 0x8, 0xfeff, 0xff, 0x8, 0x4b45, 0x34, 0x0, 0x7d94, 0x1, 0x2, 0x7, 0x658], 0x1}}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000000)={0x18, 0x1, 0x0, 0x0, r7, 0x9}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) 3m10.067051807s ago: executing program 34 (id=284): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = io_uring_setup(0x6618, &(0x7f0000000000)={0x0, 0x0, 0x200}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1279000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000080)={0x3e8, 0x1, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r1, 0x1b, &(0x7f0000000100)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x3, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) io_uring_enter(r1, 0x0, 0x1, 0x9, &(0x7f0000000180), 0x18) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000001fc0)={0x2, @sliced={0x9, [0x9, 0x100, 0x7, 0x1, 0x200, 0x0, 0xfff9, 0xc0b0, 0x4, 0x1000, 0x7ff, 0x7, 0x2, 0x7, 0x9, 0x7, 0xb9, 0x5, 0x9, 0xb, 0xffff, 0xce, 0x7ff, 0x47b, 0x7f, 0x101, 0x8, 0x3, 0x9, 0x3, 0x5a, 0x7ffe, 0xd6e6, 0x7, 0x7, 0x7, 0x8, 0xfeff, 0xff, 0x8, 0x4b45, 0x34, 0x0, 0x7d94, 0x1, 0x2, 0x7, 0x658], 0x1}}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000000)={0x18, 0x1, 0x0, 0x0, r7, 0x9}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) 2m50.909701533s ago: executing program 2 (id=322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x81c}]}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0xf, [0x1, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29a, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0xd, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x400000, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x18c, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x100, 0x0, 0x0, 0x204, 0x0, 0x0, 0x4000, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x402, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0xc9, 0x0, 0x8, 0x9, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x5cb9, 0xcaa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) r3 = eventfd2(0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000200)={0xfffffff8, 0x0, 0x10001, 0x1, 0x4f, "0d41810700943aaa91e15b1b6f6ff88c6b00", 0x9, 0x2}) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r3, &(0x7f0000000340), 0x8) io_submit(r5, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r3, 0x0, 0x0, 0x0, 0x0, 0x1, r3}]) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r8, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c}) ioctl$UI_DEV_CREATE(r2, 0x5501) pwritev(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="4a3471253e2ebc73e9dddfc516ebb4dbe6222144057eb0866ccdd13b80d2b7ef483f0e7a8a4d7ee1116048c7fa3498b026f622c3af764b3dbcd342a5fd94e035512feffdad59ba0d39648ed62664dd4bb31cb3742a07e31399e477c6adb2b68baf4ffd2bb3d2414ab5998a0a9768d9756f0a89652c1e4e0192fda8c3d000cc056862c6f7bbed317ebbff832e8bffc7c47bbb12419e52045ce8d9d9eb3664d213a3f4daedad40552d4312dc1e65144d498046c980d941fb03ff873f2f3107e5acdeceb3e8213cbeb32e98798423674ec50c9d9748ba12d2dd71e44971eb1f0aa49be9ebdf4792acb1754a338751", 0xed}, {&(0x7f0000000180)="e237c426b4bf360996b9a1489aa01b0233adabc02ca2fa260c9058d8c501315fe353e130af97adaa4218d925922c5368a8df2244cc55b4", 0x37}], 0x2, 0x1, 0x5) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000240)) syz_usb_connect$uac1(0x5, 0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000008d118042d4000010203010902700003010920060904000000010100000a240116000a0002"], 0x0) 2m46.654493285s ago: executing program 2 (id=330): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1, 0x0, 0x0, 0x400000) fcntl$setpipe(r4, 0x407, 0x2) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0xfffffff4, 0x4) 2m41.673873266s ago: executing program 2 (id=334): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000e40)=0x61, &(0x7f0000000e80)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$loop(&(0x7f0000000000), 0xb, 0x402) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) 2m35.664588236s ago: executing program 2 (id=339): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) lseek(r2, 0x1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, 0x0, 0x20004056) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x7056}}, &(0x7f00000000c0)='GPL\x00', 0x6, 0x92, &(0x7f0000000300)=""/146}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000006800)=[{{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000003d00)=""/4096, 0x1000}], 0x1}, 0x5}], 0x1, 0x141, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 2m28.6831203s ago: executing program 2 (id=348): r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000040)="64e45993541f4a27be32de40b4db8b1439621df1b1206d90854d404a60dcbdb62ff21e7d14ab983d09e0ed47e76c7e0f88b945d9d3176e85b11e07284362790f91b10827a6ce143942b0659f6133a5b60cd984f780b5db848afd6883acb5cbfb8a1a1f454c8737b3c325", 0x6a, 0x20000840, &(0x7f0000000140)={0x11, 0xf7, 0x0, 0x1, 0x79, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) socket(0x10, 0x803, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000340)={0x2c, 0x0, r5}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r3, 0x180000000) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) r7 = socket$vsock_stream(0x28, 0x1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x0) sendto$packet(r7, &(0x7f0000000600)="5f0e", 0x2, 0x0, 0x0, 0x0) 2m26.925856582s ago: executing program 2 (id=352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000003e40)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00\x00x', 0x8, 0x0, 0x0, @local, @local, {[@routing={0x84, 0x0, 0x0, 0x0, 0x3100}]}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000029c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x168, 0x10, 0x290, 0xb, 0x358, 0x250, 0x250, 0x358, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a, 0x0, 0x0, 0xffffff00], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x1, 0xb6, 0x0, 0x20}, 0x6000000, 0x228, 0x290, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xffffff00, 0xffffffff, 0xffffffff], @ipv4=@multicast1, [0xffffffff, 0xffff00, 0xffffff00], 0x4d2, 0x0, 0x1, 0x1, 0x0, 0x5}, {@ipv6=@loopback, [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], @ipv4=@local, [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 0x4d6, 0x3507, 0x29, 0x1, 0x4, 0x16}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff000000, 0xffffff00, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1}, [0xff000000, 0x0, 0xffffffff, 0xffffffff], 0x4d5, 0x3507, 0x0, 0x0, 0x4, 0x4}, {@ipv4=@multicast1, [0xffffffff, 0x0, 0xff, 0xff], @ipv6=@loopback, [0xff000000, 0x0, 0x0, 0xffffffff], 0x4d5, 0x3502, 0x3a, 0x1, 0x11, 0x14}], 0x1, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0xffff) getdents(r2, &(0x7f0000000040)=""/2, 0x2) read$FUSE(r2, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r0, 0xe515a000) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) close(r1) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev/dlm-control\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000200)={0x7fffffff, 0xa, {r4}, {r3}, 0xffffffffffffffff, 0x3}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r6, 0x0, 0x4004) write(r5, &(0x7f0000000100)="060000000000000002000000040100000000000000000000646c6d3100"/104, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES64=0x0, @ANYRES8=r7, @ANYRES8=r0, @ANYRESHEX=r0], 0xa0}, 0x1, 0x0, 0x0, 0x2402c085}, 0x8041) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 2m11.462843613s ago: executing program 35 (id=352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000003e40)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00\x00x', 0x8, 0x0, 0x0, @local, @local, {[@routing={0x84, 0x0, 0x0, 0x0, 0x3100}]}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000029c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x0, 0x168, 0x10, 0x290, 0xb, 0x358, 0x250, 0x250, 0x358, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a, 0x0, 0x0, 0xffffff00], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x1, 0xb6, 0x0, 0x20}, 0x6000000, 0x228, 0x290, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xffffff00, 0xffffffff, 0xffffffff], @ipv4=@multicast1, [0xffffffff, 0xffff00, 0xffffff00], 0x4d2, 0x0, 0x1, 0x1, 0x0, 0x5}, {@ipv6=@loopback, [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], @ipv4=@local, [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 0x4d6, 0x3507, 0x29, 0x1, 0x4, 0x16}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xff000000, 0xffffff00, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1}, [0xff000000, 0x0, 0xffffffff, 0xffffffff], 0x4d5, 0x3507, 0x0, 0x0, 0x4, 0x4}, {@ipv4=@multicast1, [0xffffffff, 0x0, 0xff, 0xff], @ipv6=@loopback, [0xff000000, 0x0, 0x0, 0xffffffff], 0x4d5, 0x3502, 0x3a, 0x1, 0x11, 0x14}], 0x1, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00') exit(0xffff) getdents(r2, &(0x7f0000000040)=""/2, 0x2) read$FUSE(r2, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r0, 0xe515a000) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/224, 0xe0}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) close(r1) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./dev/dlm-control\x00', 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000200)={0x7fffffff, 0xa, {r4}, {r3}, 0xffffffffffffffff, 0x3}) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r6, 0x0, 0x4004) write(r5, &(0x7f0000000100)="060000000000000002000000040100000000000000000000646c6d3100"/104, 0x68) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r1, @ANYRES64=0x0, @ANYRES8=r7, @ANYRES8=r0, @ANYRESHEX=r0], 0xa0}, 0x1, 0x0, 0x0, 0x2402c085}, 0x8041) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x40, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 23.530076348s ago: executing program 5 (id=590): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) time(0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0x1, 0xfa14, 0xffffffff}, 0x0) madvise(&(0x7f0000c38000/0x3000)=nil, 0x3000, 0x1) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r2 = userfaultfd(0x801) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x86) fchdir(r4) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r5, 0x0, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x41555856, 0x3b770135f6ed5c90, 0x2) 19.488512238s ago: executing program 0 (id=601): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x4, 0xbb32, 0xf, 0x8000, 0x7, 0x0}) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='task\x00') ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005d}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e20, 0x26b, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}, 0x1c) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x88fe) fchdir(r2) write$cgroup_int(r0, &(0x7f0000000040)=0x900, 0x12) syz_open_dev$loop(&(0x7f0000000000), 0x8000000000000000, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}], 0x1c) sendto$inet6(r4, &(0x7f0000000040)="b0523df72687df88f2947d761ca195076b5bd27f5aeaaad562008a0fa91e04e0fc870680d8eb015a99cab7c5acda30093760470024bb336fe82d6ddd5ec1e5f15f077177e7ea7461edb6a614a8a59902bf2e9df7c65b", 0x56, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r4, &(0x7f0000000680)="a9", 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x1e, 0x0, 0x29) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000000)={@broadcast, @private=0xa010102, 0x1, "103ddea1080ccd149bc203201089001e0a96a2acf04e42a64ad6ec6528956adb", 0xf, 0x1c00000, 0xfffffff8, 0x6}, 0x3c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x28, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ipvlan0\x00'}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000001840)={&(0x7f0000000280), 0xc, &(0x7f0000001800)={&(0x7f00000006c0)=ANY=[@ANYBLOB="970000", @ANYRES16=r7, @ANYBLOB="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"], 0x1110}, 0x1, 0x0, 0x0, 0x4}, 0x40) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010102, @in=@remote, 0x4e20, 0x0, 0x4e22, 0x10c, 0x2, 0x0, 0x0, 0x89, 0x0, 0xee01}, {0x2e6, 0x0, 0x1ff, 0x0, 0x0, 0x800, 0x0, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x20, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xfffffc01, 0x4001, 0x6}}, 0xe8) listen(r5, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 19.330095214s ago: executing program 7 (id=602): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x2}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r4, &(0x7f0000001300)=ANY=[@ANYBLOB="10000000f1000000", @ANYRES8=r4], 0x4000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x14) socket(0x1, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETVAL(0x0, 0x2, 0x10, 0x0) 18.842308745s ago: executing program 0 (id=603): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x7, 0x8, 0x1, 0x2020, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1000}, 0x50) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) landlock_restrict_self(r3, 0x0) r5 = open$dir(&(0x7f0000000100)='./file0\x00', 0x90100, 0x100) fspick(r5, &(0x7f0000000140)='./file0\x00', 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x17) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$hidraw(&(0x7f0000000000), 0x9, 0xd038c0) 18.431461289s ago: executing program 7 (id=605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x50, r3, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_TYPE={0x8}]}]}, 0x50}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000002c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) unshare(0x2c020400) getuid() open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x801) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110c23004a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@jmp={0x5, 0x0, 0x3, 0xa, 0x5, 0x80, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x0, 0x12, 0x8, 0x80}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @generic={0x37, 0xa, 0xb, 0x76, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r7}, 0x38) 15.148430334s ago: executing program 6 (id=607): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) rseq(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, 0x0) fsopen(0x0, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100100005000000050000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000100), 0x20000402, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000340), &(0x7f0000000f00)=""/20}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 15.115768328s ago: executing program 7 (id=608): syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file1\x00'}) openat$incfs(0xffffffffffffffff, &(0x7f0000000b80)='.pending_reads\x00', 0x1090c1, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000bc0)={{{@in6=@dev, @in6=@private1}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000cc0)=0xe8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r3, 0x0, 0x0, 0x1000f4) sendfile(r3, r3, 0x0, 0x40000000800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r4, 0x100000000000011, 0x2000, 0x2f93) 15.078709979s ago: executing program 0 (id=609): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) capset(0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000200)={0x0, 0xd, 0xbb, {0xbb, 0xae8c418f1ab794d1, "d69b6807f410ec699038f51942555e2e956a4467bda7fc98d1bcfc50fc4182d0a0e58d700ea3075c595210e2031ab1ffa195b69a9b12ef7b72f90e0632e3cab4cc8f064fd7d508236a60df0f9b630944374d7c96517f5e8aeafd07b104254cea77348101b5fdbf2d419f15db711ccc3c785d337aa8321144c4d034a1410a5fe99889068db72028c5825909143e07ed13fb3e4e8b486dbb0efc50b09486ebcb9740178edcc022cf1492f14b07a3b9a8db28ad284ce62d9b57a6"}}, 0x0}, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x110, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x0, 0x5}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 14.99820786s ago: executing program 5 (id=610): socket$inet_mptcp(0x2, 0x1, 0x106) io_cancel(0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x18, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(r6, 0xfffffffc) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) 14.167344014s ago: executing program 5 (id=611): socket$kcm(0xa, 0x5, 0x73) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x8, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0xbfff8000}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xe}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x1, 0x31a, 0x3, 0x88a, 0x2, 0x8b, 0x1b, 0x5, 0x0, {0x0, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r5, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) ioperm(0x0, 0x80, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e2b02010301ffff64b029601f1e"], 0x2e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) socket(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008e00)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {&(0x7f00000003c0)="da", 0x1}], 0x2}}], 0x1, 0x0) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000440)={0xaa, 0x8}) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x2, 0x7, 0x7f, 0x27, 0x31, {0x0, 0x6fd8e86b}, 0x3, 0xed}}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150200000000000010001280080001de76899daf59ddcd80"], 0x30}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) 13.058606624s ago: executing program 7 (id=612): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) link(&(0x7f00000001c0)='./file1\x00', 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x3c, &(0x7f00000000c0)=[@in={0x2, 0x1000, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e24, 0x7, @private2, 0x767c}]}, &(0x7f0000000080)=0x10) socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, &(0x7f0000000000)={0x0, 0x8dd3, 0x10000, 0x42, 0x235}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="2000000012005f0214f9f4070000fbe414019ff5526ac553f0ff49a1fc8bf60a1e00", 0xfffffffffffffcde) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRESOCT], 0xa4}}, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401"], 0x18}}, 0x2000481c) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') 12.916212176s ago: executing program 6 (id=613): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000300)) r6 = syz_open_procfs(0x0, &(0x7f0000002500)='net/wireless\x00') read$FUSE(r6, &(0x7f00000046c0)={0x2020}, 0x2021) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000040)=0x8) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, 0x0, &(0x7f0000020000), 0x0}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000600)={0x1, r5}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 10.827398708s ago: executing program 0 (id=614): r0 = socket$inet6(0xa, 0x3, 0x3) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) unshare(0x400) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7d, &(0x7f0000000140)={0x0, 0x4}, 0x8) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x5, 0x4, 0x1007, 0x7, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4000004, 0x9, 0x800008, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x2, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x38, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0xcc, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) r5 = socket$kcm(0x29, 0x5, 0x0) sendmmsg(r5, &(0x7f000000bac0)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="de20", 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYRES16=r5, @ANYBLOB="f25baa7ab4b10ba8066023a074d6b165bd156302025e7f3440fe78ed1242f04284186aa5f426d37ab133b9ab97e5e45a6054e4cdbd8c531b34491fb2ac6994538881a35d87d49247c6168f45e68139a8435b59c22ce3a952ec543e4d8dc5fff7df3f47af09763a882c05d84cf74af25f6a48e23b3fd33a84400da4410d02f44ee3b34623b2c16f88051fba6c1526af074b86764f0ece904d1ddfc15fc9b0d2ccfeb26bfa72a456cf4e2c948a2369bfb24f985969e26885f2c79eda7517e0afd5cf56107e0ff713876f0c0c43f4594b4c14376447980754d951c5d0d3ff7014ff"], 0x80}}], 0x1, 0x40044) 10.685379608s ago: executing program 8 (id=615): syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5f, 0x2, 0x7}}}, 0xc) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e24, 0x80000b, @mcast2}, 0x1c) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x4, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000037000701f3fffffffedbd72501"], 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x8050) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="13a5c0fca33faa77270a88845a103dcc38f239fadefe5a612f720ceaaf50bea95d43998acf39c73a897cc0edc702fe84bf12622bda161a6708751784a340b109c0f05849bdc28056dfdbc027c92b11cfbdd20dc959f261eb25016cedffcbc21b5e2aa7f997e379e38e421c4322c0e1a1889bf1266eae9be4b6cb4c6dd4b9f76b6a26bd95da6907a88409f0e8052bf3716862a14e50935a1f5f9a6a2bf5326dbf31c5f641c9818a09202b6d9cf9906338f1f407b3451e710ba5a5000000000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf252100000009001f0070687930000000000c0005000200aaaaaaaaaaaa0500200000000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0xea6, '.\x00'}}) r6 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) 10.601180966s ago: executing program 6 (id=616): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x47, &(0x7f0000000200)=0x7) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) unshare(0x20000400) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) ioctl$TCFLSH(r1, 0x541b, 0x8000000000000002) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0x1) 7.401958793s ago: executing program 6 (id=617): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8e, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb3209000) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a0000070800024000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(r1, 0x0, 0x40) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r4, 0xc028583e, &(0x7f0000000480)={{[0x1, 0xa82, 0x1, 0x200]}, 0x0, 0x0, 0x7, 0x0, &(0x7f00000003c0)=[{{@align=0x9, {0x7, 0x5, 0x4, 0x74f}}, 0x1, 0x0, '!\x00'}, {{@align=0x3, {0x6, 0x6, 0x1, 0x7fff}}, 0x6, 0x0, '$({\\\\%+\x00'}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2800009) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 7.126817364s ago: executing program 7 (id=618): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="000000002c9b66c6bd45af6d3a7169deb871fdc83ed494dbc5989fe968f90a9cdcb5f55e344084ec09bf", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf25020202000900010073797a3200000000140002006970365f767469300000000000000000"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x4000000}, 0x80) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100), 0x1000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0xc0045543, &(0x7f0000000080)=0xfdfdfffd) msgsnd(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x107, 0x800) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8) r5 = syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x8003) tkill(r5, 0x10810038) pread64(r4, &(0x7f0000000480)=""/2, 0x2, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x580, 0xffffffff, 0x160, 0x290, 0x0, 0xffffffff, 0xffffffff, 0x4b0, 0x4b0, 0x4b0, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @empty}, [0xff, 0xffffff00, 0xff, 0xff], [0x0, 0xff, 0xffffffff, 0xff], 'veth1_to_bridge\x00', 'syz_tun\x00', {}, {0xff}, 0x11, 0x4, 0x2, 0x2}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x3b, 0x4, 0xb2, 0x7, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @mcast2, [0xffffff00, 0x0, 0xff], [0xffffffff, 0x0, 0xff000000, 0xff000000], [0xff000000, 0xffffff00, 0xff], 0x4}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@empty, @mcast1, [0xffffffff, 0xff, 0xff000000, 0xff000000], [0xffffffff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x8, 0x1, 0x8}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x1, 0x3}}, @common=@ah={{0x30}, {[0x4d4, 0x4d3], 0x0, 0xcb}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@frag={{0x30}, {[0x7f, 0x3], 0x3, 0x10, 0x3}}, @common=@unspec=@comment={{0x120}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 7.038153766s ago: executing program 0 (id=619): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000d584000002000000ffff000005"], 0x48) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x38) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write$binfmt_script(r6, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) r7 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r7, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r7, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 6.115689381s ago: executing program 0 (id=620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x4, 0x0, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40012000, 0x0) syz_clone(0x18280100, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) 6.027999209s ago: executing program 8 (id=621): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x70bd2a, 0x0, {0x2, 0x78, 0x0, 0xff, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000001) r7 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil) shmat(r7, &(0x7f0000ffd000/0x2000)=nil, 0x4000) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) mkdir(&(0x7f0000000080)='./file0\x00', 0x100) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) listen(r8, 0x3) syz_open_dev$tty20(0xc, 0x4, 0x0) 5.011540782s ago: executing program 8 (id=622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xe, 0x492f, 0x7f, 0x1, 0x1}, 0x50) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@loopback, {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2}, {}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@mcast2, 0x4d4, 0x2, 0x6c}}, 0x28}, 0x1, 0x0, 0x0, 0x8801}, 0xfc01000000000000) socket$inet(0x2, 0xa, 0xffffffff) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_AIE_ON(r5, 0x7001) 3.781929019s ago: executing program 8 (id=623): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x44, 0x2000, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unshare(0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1a) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = syz_open_dev$mtd(0x0, 0x48a99fbe, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$MEMGETREGIONCOUNT(r5, 0x80044d07, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) 3.682784106s ago: executing program 5 (id=624): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) capset(0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) keyctl$restrict_keyring(0xa, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000000)={0x14, &(0x7f0000000200)={0x0, 0xd, 0xbb, {0xbb, 0xae8c418f1ab794d1, "d69b6807f410ec699038f51942555e2e956a4467bda7fc98d1bcfc50fc4182d0a0e58d700ea3075c595210e2031ab1ffa195b69a9b12ef7b72f90e0632e3cab4cc8f064fd7d508236a60df0f9b630944374d7c96517f5e8aeafd07b104254cea77348101b5fdbf2d419f15db711ccc3c785d337aa8321144c4d034a1410a5fe99889068db72028c5825909143e07ed13fb3e4e8b486dbb0efc50b09486ebcb9740178edcc022cf1492f14b07a3b9a8db28ad284ce62d9b57a6"}}, 0x0}, &(0x7f0000000380)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000010000000000"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x110, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x0, 0x5}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 3.467461203s ago: executing program 6 (id=625): timerfd_create(0x4, 0x800) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() prlimit64(r1, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x3}, &(0x7f0000000100)) sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$set_reqkey_keyring(0xe, 0x2) request_key(&(0x7f0000000280)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socket$inet6(0xa, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000380)={0x2020}, 0x2020) pread64(r4, &(0x7f0000000280)=""/207, 0xcf, 0x1) read$msr(r4, &(0x7f00000000c0)=""/180, 0xb4) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r6, 0x0, 0xffffff6a) tee(r5, 0xffffffffffffffff, 0x60000000000, 0x8) 3.462526744s ago: executing program 7 (id=626): r0 = io_uring_setup(0x136b, &(0x7f0000000080)={0x0, 0xd7e7, 0x0, 0x1, 0xef}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x34000, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='trac', 0x4) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x169e41, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000003e00)={0x1, [{0x3, 0x0, 0x4, 0x0}, {0x3, 0x80, 0x4, &(0x7f0000000580)="ef6df63709cadd4775c22e8da8659996"}, {0x3, 0x0, 0x8001, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0xdd, 0x0}, {0x1, 0x0, 0x10001, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x400, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x80000001, 0x0}, {0x1, 0x0, 0x2a358830, 0x0}, {0x1, 0x0, 0x200, 0x0}, {0x1, 0x0, 0x70, 0x0}]}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$P9_RSTATu(r7, 0x0, 0x62) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.67401484s ago: executing program 6 (id=627): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mmap$IORING_OFF_SQ_RING(0xfffff000, 0x2000, 0x2000003, 0x12, r0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0x1c3001, 0x11) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000640)={&(0x7f0000000680)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x801) gettid() fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, &(0x7f00000005c0)=""/147, 0x93) r3 = dup(r2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x2, 0x900, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044004}, 0x4000090) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002ebd7000000000001400040018000180140002006e657464657673696d3000"], 0x4c}}, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000280)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e21, @multicast1}}}, 0xa0) set_mempolicy(0x4005, &(0x7f0000000080)=0x10000000004, 0xd) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x100005, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, 0x0, &(0x7f00000003c0)}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) write$tcp_mem(r1, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) 2.546268831s ago: executing program 8 (id=628): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dffff3b7ba14d7971910b559623af82", 0x13b}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400)="14", 0x2, 0x0, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000300)) r6 = syz_open_procfs(0x0, &(0x7f0000002500)='net/wireless\x00') read$FUSE(r6, &(0x7f00000046c0)={0x2020}, 0x2021) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f0000000040)=0x8) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000600)={0x1, r5}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 1.536524639s ago: executing program 5 (id=629): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x20000002, 0x141302) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000700)=@ethtool_flash={0x33, 0x7, '.\x00'}}) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') openat(r5, &(0x7f0000000340)='rpc/nfsd.fh/channel\x00', 0x121041, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_create(0x5, &(0x7f00000011c0)={0x0, 0x2, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000001200)) 100.958394ms ago: executing program 8 (id=630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) fremovexattr(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000380)=0x6) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r3, &(0x7f0000000440)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0xb, 0x0, 0x4, {0xa, 0x4e24, 0x2f2, @rand_addr=' \x01\x00', 0x6}}}, 0x80) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, &(0x7f0000000780)) setns(0xc9, 0x0) r4 = socket$kcm(0x2, 0x3, 0x106) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendmsg$inet(r4, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(0xffffffffffffffff, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x102, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000540)={0x0, &(0x7f0000000400)}) connect$vsock_stream(r6, 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40e8048968000101"], 0x0) 0s ago: executing program 5 (id=631): syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) setreuid(0xffffffffffffffff, 0x0) mount$binderfs(0x0, 0x0, &(0x7f0000000080), 0x40, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000000)=0x0) io_getevents(r1, 0x3, 0x7, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000500)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000000240)="b6", 0x1, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000003c0)='\x00!E\x00', 0x4}], 0x1, 0x0, 0x0) shutdown(r4, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) kernel console output (not intermixed with test programs): block will not be printed [ 260.314563][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0x32f7 instead [ 260.314573][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0xa8a2 instead [ 260.314582][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012008: 0x6cb9 instead [ 260.314591][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001200c: 0xe850 instead [ 260.314600][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012010: 0xa95d instead [ 260.314609][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012014: 0xd4b4 instead [ 260.314618][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012018: 0x8a7d instead [ 260.314627][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001201c: 0x91d1 instead [ 260.314636][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012020: 0xf6b4 instead [ 260.314645][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012024: 0x4635 instead [ 260.314653][ T7308] jffs2: Further such events for this erase block will not be printed [ 260.314896][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0x344c instead [ 260.314906][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0x6b4d instead [ 260.314915][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013008: 0x5c7e instead [ 260.314924][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001300c: 0x9571 instead [ 260.314932][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013010: 0xccab instead [ 260.314941][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013014: 0xf48e instead [ 260.314950][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013018: 0x248f instead [ 260.314959][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001301c: 0x582b instead [ 260.314968][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013020: 0x7dee instead [ 260.314977][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013024: 0x31fd instead [ 260.314986][ T7308] jffs2: Further such events for this erase block will not be printed [ 260.315227][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0x4963 instead [ 260.315236][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0xfc8a instead [ 260.315245][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014008: 0x454f instead [ 260.315254][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001400c: 0x77be instead [ 260.315263][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014010: 0xcabb instead [ 260.315272][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014014: 0xc168 instead [ 260.315303][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014018: 0x795b instead [ 260.315313][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001401c: 0xe1ea instead [ 260.315322][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014020: 0x704b instead [ 260.315331][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014024: 0x5a49 instead [ 260.315339][ T7308] jffs2: Further such events for this erase block will not be printed [ 260.315590][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0xe624 instead [ 260.315600][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0x64a9 instead [ 260.315609][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015008: 0xd2e6 instead [ 260.315618][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001500c: 0xe618 instead [ 260.315627][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015010: 0x7479 instead [ 260.315636][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015014: 0x8667 instead [ 260.315645][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015018: 0xe7aa instead [ 260.315671][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001501c: 0x1017 instead [ 260.315681][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015020: 0x50e9 instead [ 260.315690][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015024: 0x1cf7 instead [ 260.315698][ T7308] jffs2: Further such events for this erase block will not be printed [ 260.315957][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0x63c4 instead [ 260.315966][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0x5e5f instead [ 260.315975][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016008: 0x58c8 instead [ 260.315984][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001600c: 0x46b1 instead [ 260.315993][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016010: 0x7b4f instead [ 260.316002][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016014: 0x4564 instead [ 260.316012][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016018: 0x1195 instead [ 260.316020][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001601c: 0x0d7a instead [ 260.316030][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016020: 0xd5ba instead [ 260.316039][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016024: 0x5409 instead [ 260.316048][ T7308] jffs2: Further such events for this erase block will not be printed [ 260.316289][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0x0fdf instead [ 260.316322][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0x032b instead [ 260.316332][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017008: 0x46b6 instead [ 260.316341][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001700c: 0x56cc instead [ 260.316350][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017010: 0x8674 instead [ 260.316359][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017014: 0x147b instead [ 260.316368][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017018: 0x6f19 instead [ 260.316377][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001701c: 0xccbc instead [ 260.316386][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017020: 0xa51e instead [ 260.316395][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017024: 0x2139 instead [ 260.316404][ T7308] jffs2: Further such events for this erase block will not be printed [ 260.316685][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0x5c9a instead [ 260.316695][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0x8df3 instead [ 260.316704][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018008: 0xdfff instead [ 260.316713][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001800c: 0x0ec5 instead [ 260.316722][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018010: 0x42f5 instead [ 260.316731][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018014: 0x1e73 instead [ 260.316740][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018018: 0x58aa instead [ 260.316749][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001801c: 0xae79 instead [ 260.316758][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018020: 0xc54f instead [ 260.316767][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018024: 0x19e8 instead [ 260.316776][ T7308] jffs2: Further such events for this erase block will not be printed [ 260.317019][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0x5577 instead [ 260.317028][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0xa408 instead [ 260.317037][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019008: 0x9564 instead [ 260.317046][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001900c: 0xef6b instead [ 260.317055][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019010: 0x4c10 instead [ 260.317064][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019014: 0x615c instead [ 260.317073][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019018: 0x5635 instead [ 260.317082][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001901c: 0x5c85 instead [ 260.317091][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019020: 0xe0e6 instead [ 260.317100][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019024: 0xb9dc instead [ 260.317109][ T7308] jffs2: Further such events for this erase block will not be printed [ 260.317376][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0x1dfe instead [ 260.317386][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0xcf9d instead [ 260.317395][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a008: 0xe23e instead [ 260.317404][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a00c: 0x4595 instead [ 260.317413][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a010: 0xd763 instead [ 260.317422][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a014: 0xe3ce instead [ 260.317431][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a018: 0xf2e4 instead [ 260.317440][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a01c: 0x776f instead [ 260.317449][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a020: 0xf6a2 instead [ 260.317458][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a024: 0x42e0 instead [ 260.317467][ T7308] jffs2: Further such events for this erase block will not be printed [ 260.317712][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0x2648 instead [ 260.317722][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0xac70 instead [ 260.317731][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b008: 0x46bb instead [ 260.317740][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b00c: 0x2969 instead [ 260.317749][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b010: 0xa41e instead [ 260.317758][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b014: 0x9658 instead [ 260.317767][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b018: 0xae3e instead [ 260.317776][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b01c: 0x5b84 instead [ 260.317785][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b020: 0xfc2c instead [ 260.317794][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b024: 0x7f4c instead [ 260.317803][ T7308] jffs2: Further such events for this erase block will not be printed [ 260.318044][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0xfb55 instead [ 260.318054][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0xef1e instead [ 260.318063][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c008: 0x4cca instead [ 260.318072][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c00c: 0x7235 instead [ 260.318081][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c010: 0x4495 instead [ 260.318090][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c014: 0x4009 instead [ 260.318099][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c018: 0x8c4c instead [ 260.318108][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c01c: 0x0186 instead [ 260.318117][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c020: 0x7de5 instead [ 260.318126][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c024: 0x604f instead [ 260.318134][ T7308] jffs2: Further such events for this erase block will not be printed [ 260.318399][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0x611b instead [ 260.318409][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0x5b4f instead [ 260.318418][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d008: 0x5120 instead [ 260.318427][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d00c: 0x905d instead [ 260.318436][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d010: 0xae42 instead [ 260.318445][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d014: 0xcf7f instead [ 260.318454][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d018: 0x93fd instead [ 260.318463][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d01c: 0xc427 instead [ 260.318472][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d020: 0xf087 instead [ 260.318481][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d024: 0x8ee0 instead [ 260.318490][ T7308] jffs2: Further such events for this erase block will not be printed [ 260.318735][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0x1b35 instead [ 260.318744][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0xb1f8 instead [ 260.318753][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0xb57b instead [ 260.318762][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0x64c0 instead [ 260.318771][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0x06e3 instead [ 260.318780][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0x8ceb instead [ 260.318789][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0x749f instead [ 260.318798][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e01c: 0x76e4 instead [ 260.318807][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e020: 0x0a25 instead [ 260.318816][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0x5402 instead [ 260.318825][ T7308] jffs2: Further such events for this erase block will not be printed [ 260.319067][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f000: 0xc5d9 instead [ 260.319076][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f004: 0x5be7 instead [ 260.319086][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f008: 0xef8d instead [ 260.319094][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f00c: 0x2aa6 instead [ 260.319103][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f010: 0x5d16 instead [ 260.319112][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f014: 0x11be instead [ 260.319122][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f018: 0x858b instead [ 260.319131][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f01c: 0x2392 instead [ 260.319139][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f020: 0xb359 instead [ 260.319148][ T7308] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001f024: 0x9898 instead [ 260.319157][ T7308] jffs2: Further such events for this erase block will not be printed [ 260.319416][ T7308] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 260.319422][ T7308] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 260.923615][ T7316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.923632][ T7316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.000975][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 262.048908][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 262.049741][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 262.060887][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 262.061167][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 263.398820][ T7316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.398835][ T7316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.879898][ T7316] batman_adv: batadv0: Interface deactivated: veth0 [ 263.879913][ T7316] batman_adv: batadv0: Removing interface: veth0 [ 264.159583][ T52] Bluetooth: hci1: command tx timeout [ 264.883531][ T50] bridge_slave_1: left allmulticast mode [ 264.883552][ T50] bridge_slave_1: left promiscuous mode [ 264.883667][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.889627][ T50] bridge_slave_0: left allmulticast mode [ 264.889644][ T50] bridge_slave_0: left promiscuous mode [ 264.889749][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.891443][ T52] Bluetooth: hci1: command tx timeout [ 267.943947][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'. [ 268.429168][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.430459][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.431248][ T50] bond0 (unregistering): Released all slaves [ 268.698832][ T30] audit: type=1400 audit(1789862827.168:802): avc: denied { setopt } for pid=7348 comm="syz.6.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 268.769558][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 268.798682][ T50] tipc: Left network mode [ 268.849153][ T50] IPVS: stopping master sync thread 5882 ... [ 268.958314][ T52] Bluetooth: hci1: command tx timeout [ 269.035551][ T7354] syzkaller0: entered promiscuous mode [ 269.035567][ T7354] syzkaller0: entered allmulticast mode [ 270.209576][ T30] audit: type=1400 audit(1789862828.698:803): avc: denied { write } for pid=7353 comm="syz.2.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 271.206325][ T52] Bluetooth: hci1: command tx timeout [ 272.374762][ T50] hsr_slave_0: left promiscuous mode [ 272.375148][ T50] hsr_slave_1: left promiscuous mode [ 272.383488][ T50] veth1_macvtap: left promiscuous mode [ 272.383520][ T50] veth0_macvtap: left promiscuous mode [ 272.383569][ T50] veth1_vlan: left promiscuous mode [ 272.383603][ T50] veth0_vlan: left promiscuous mode [ 272.716739][ T50] team0 (unregistering): Port device team_slave_1 removed [ 272.741164][ T50] team0 (unregistering): Port device team_slave_0 removed [ 272.978842][ T50] IPVS: stop unused estimator thread 0... [ 274.840568][ T30] audit: type=1400 audit(1789862833.328:804): avc: denied { ioctl } for pid=7369 comm="syz.5.317" path="socket:[16276]" dev="sockfs" ino=16276 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 274.872705][ T30] audit: type=1400 audit(1789862833.368:805): avc: denied { wake_alarm } for pid=7368 comm="syz.6.316" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 275.297341][ T30] audit: type=1400 audit(1789862833.788:806): avc: denied { watch } for pid=7372 comm="syz.0.319" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 275.441581][ T30] audit: type=1400 audit(1789862833.928:807): avc: denied { execute } for pid=7369 comm="syz.5.317" path="/dev/audio1" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 275.588847][ T30] audit: type=1400 audit(1789862834.078:808): avc: denied { checkpoint_restore } for pid=7372 comm="syz.0.319" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 275.918985][ T30] audit: type=1400 audit(1789862834.408:809): avc: denied { write } for pid=7367 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.075424][ T7405] Set syz1 is full, maxelem 2076 reached [ 276.131471][ T30] audit: type=1400 audit(1789862834.618:810): avc: denied { getopt } for pid=7407 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 276.176260][ T30] audit: type=1400 audit(1789862834.668:811): avc: denied { setopt } for pid=7407 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 276.236052][ T7410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.323'. [ 276.238695][ T30] audit: type=1400 audit(1789862834.728:812): avc: denied { write } for pid=7412 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.278436][ T7410] bond0: (slave bond_slave_0): Releasing backup interface [ 276.353285][ T7410] bond_slave_0: entered promiscuous mode [ 276.353298][ T7410] bond_slave_0: entered allmulticast mode [ 276.438841][ T7409] input: syz0 as /devices/virtual/input/input13 [ 276.520248][ T5264] 8021q: adding VLAN 0 to HW filter on device eth9 [ 276.556418][ T7421] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 276.609951][ T7319] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.610548][ T7319] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.610614][ T7319] bridge_slave_0: entered allmulticast mode [ 276.639052][ T7319] bridge_slave_0: entered promiscuous mode [ 276.650691][ T7319] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.654569][ T7319] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.654637][ T7319] bridge_slave_1: entered allmulticast mode [ 276.657143][ T7319] bridge_slave_1: entered promiscuous mode [ 276.713269][ T5796] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 276.751645][ T7319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.768489][ T7319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.872434][ T5796] usb 3-1: Using ep0 maxpacket: 8 [ 276.916753][ T5796] usb 3-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 277.092164][ T5796] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.092180][ T5796] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.382751][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.382769][ T5796] usb 3-1: Product: syz [ 277.382778][ T5796] usb 3-1: Manufacturer: syz [ 277.382787][ T5796] usb 3-1: SerialNumber: syz [ 280.072908][ T5796] usb 3-1: USB disconnect, device number 6 [ 282.263190][ T7319] team0: Port device team_slave_0 added [ 282.280079][ T7319] team0: Port device team_slave_1 added [ 282.913238][ T7300] udevd[7300]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.248550][ T7319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.248563][ T7319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.248577][ T7319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.299637][ T7319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.299648][ T7319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.299662][ T7319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.414596][ T7440] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 284.430738][ T7440] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 284.512045][ T30] audit: type=1400 audit(1789862842.998:813): avc: denied { create } for pid=7450 comm="syz.0.331" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 284.692315][ T7319] hsr_slave_0: entered promiscuous mode [ 284.710190][ T7319] hsr_slave_1: entered promiscuous mode [ 284.710524][ T7319] debugfs: 'hsr0' already exists in 'hsr' [ 284.710536][ T7319] Cannot create hsr debugfs directory [ 284.768677][ T30] audit: type=1400 audit(1789862843.258:814): avc: denied { write } for pid=7450 comm="syz.0.331" name="file0" dev="tmpfs" ino=404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 284.768721][ T30] audit: type=1400 audit(1789862843.258:815): avc: denied { open } for pid=7450 comm="syz.0.331" path="/72/file0" dev="tmpfs" ino=404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 284.777283][ T7454] block device autoloading is deprecated and will be removed. [ 284.785970][ T30] audit: type=1400 audit(1789862843.268:816): avc: denied { ioctl } for pid=7450 comm="syz.0.331" path="/72/file0" dev="tmpfs" ino=404 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 287.714281][ T30] audit: type=1400 audit(1789862846.208:817): avc: denied { unlink } for pid=5597 comm="syz-executor" name="file0" dev="tmpfs" ino=404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 289.796258][ T30] audit: type=1400 audit(1789862848.288:818): avc: denied { write } for pid=7429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.921116][ T30] audit: type=1400 audit(1789862848.408:819): avc: denied { getopt } for pid=7468 comm="syz.2.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 291.060152][ T30] audit: type=1400 audit(1789862849.508:820): avc: denied { append } for pid=7468 comm="syz.2.334" name="loop1" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 291.810078][ T7479] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 291.869037][ T30] audit: type=1400 audit(1789862850.358:821): avc: denied { write } for pid=7477 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.950382][ T7478] bridge0: port 3(syz_tun) entered blocking state [ 291.950437][ T7478] bridge0: port 3(syz_tun) entered disabled state [ 291.950530][ T7478] syz_tun: entered allmulticast mode [ 291.951427][ T7478] syz_tun: entered promiscuous mode [ 291.983965][ T7478] bridge0: port 3(syz_tun) entered blocking state [ 291.984073][ T7478] bridge0: port 3(syz_tun) entered listening state [ 292.063331][ C0] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 292.063739][ C0] bridge0: topology change detected, propagating [ 293.356795][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 294.228046][ T5264] 8021q: adding VLAN 0 to HW filter on device eth10 [ 294.402152][ T50] bridge0: port 3(syz_tun) entered disabled state [ 294.654277][ T7319] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 294.661871][ T7319] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 294.678315][ T7319] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 294.703556][ T7319] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 294.706550][ T7319] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 294.731118][ T7319] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 294.742945][ T7319] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 294.771463][ T7319] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 296.123340][ T7319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.195126][ T7319] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.212947][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.213001][ T5841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.259668][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.259722][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.441973][ T7513] FAULT_INJECTION: forcing a failure. [ 296.441973][ T7513] name failslab, interval 1, probability 0, space 0, times 0 [ 296.441997][ T7513] CPU: 0 UID: 0 PID: 7513 Comm: syz.0.345 Not tainted syzkaller #0 PREEMPT(full) [ 296.442013][ T7513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 296.442022][ T7513] Call Trace: [ 296.442026][ T7513] [ 296.442032][ T7513] dump_stack_lvl+0x100/0x190 [ 296.442054][ T7513] should_fail_ex.cold+0x5/0xa [ 296.442073][ T7513] should_failslab+0xc2/0x120 [ 296.442090][ T7513] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 296.442113][ T7513] ? vidtv_psi_service_desc_init+0x27c/0x4c0 [ 296.442134][ T7513] kstrdup+0x51/0xe0 [ 296.442154][ T7513] vidtv_psi_service_desc_init+0x27c/0x4c0 [ 296.442173][ T7513] vidtv_channel_s302m_init+0x15b/0x9b0 [ 296.442192][ T7513] ? __kasan_kmalloc+0xaa/0xb0 [ 296.442208][ T7513] ? __pfx_vidtv_channel_s302m_init+0x10/0x10 [ 296.442225][ T7513] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 296.442243][ T7513] ? __asan_memcpy+0x3c/0x60 [ 296.442257][ T7513] vidtv_channels_init+0x4c/0xb0 [ 296.442274][ T7513] vidtv_mux_init+0x9d9/0xbf0 [ 296.442294][ T7513] vidtv_start_feed+0x34e/0x500 [ 296.442308][ T7513] ? __pfx_vidtv_start_feed+0x10/0x10 [ 296.442321][ T7513] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 296.442337][ T7513] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 296.442356][ T7513] ? mark_held_locks+0x40/0x70 [ 296.442372][ T7513] ? __pfx_vidtv_start_feed+0x10/0x10 [ 296.442385][ T7513] dmx_ts_feed_start_filtering+0xf6/0x220 [ 296.442403][ T7513] dvb_dmxdev_start_feed+0x273/0x3f0 [ 296.442424][ T7513] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 296.442438][ T7513] ? dvb_dmxdev_add_pid+0x2a4/0x4f0 [ 296.442453][ T7513] dvb_demux_do_ioctl+0xe64/0x1200 [ 296.442471][ T7513] dvb_usercopy+0x167/0x340 [ 296.442489][ T7513] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 296.442503][ T7513] ? __pfx_dvb_usercopy+0x10/0x10 [ 296.442520][ T7513] ? __fget_files+0x34/0x3d0 [ 296.442543][ T7513] ? selinux_file_ioctl+0x13b/0x290 [ 296.442556][ T7513] ? selinux_file_ioctl+0xb6/0x290 [ 296.442572][ T7513] dvb_demux_ioctl+0x29/0x40 [ 296.442582][ T7513] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 296.442594][ T7513] __x64_sys_ioctl+0x18e/0x210 [ 296.442608][ T7513] do_syscall_64+0x123/0x790 [ 296.442627][ T7513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.442641][ T7513] RIP: 0033:0x7ff808f9e159 [ 296.442653][ T7513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.442664][ T7513] RSP: 002b:00007ff8071d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 296.442677][ T7513] RAX: ffffffffffffffda RBX: 00007ff809226090 RCX: 00007ff808f9e159 [ 296.442685][ T7513] RDX: 00002000000000c0 RSI: 0000000040146f2c RDI: 0000000000000006 [ 296.442693][ T7513] RBP: 00007ff80903506b R08: 0000000000000000 R09: 0000000000000000 [ 296.442700][ T7513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.442708][ T7513] R13: 00007ff809226128 R14: 00007ff809226090 R15: 00007ffcb997f2b8 [ 296.442726][ T7513] [ 296.824489][ T30] audit: type=1400 audit(1789862855.318:822): avc: denied { ioctl } for pid=7521 comm="syz.2.339" path="socket:[17240]" dev="sockfs" ino=17240 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 297.788994][ T7492] netlink: 'syz.6.343': attribute type 10 has an invalid length. [ 297.844882][ T7492] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 297.881539][ T30] audit: type=1400 audit(1789862856.368:823): avc: denied { write } for pid=7496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.044818][ T7492] team0: Port device netdevsim1 added [ 298.195130][ T7534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.278435][ T30] audit: type=1400 audit(1789862856.768:824): avc: denied { write } for pid=7535 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.566923][ T30] audit: type=1400 audit(1789862857.058:825): avc: denied { ioctl } for pid=7536 comm="syz.2.348" path="socket:[17280]" dev="sockfs" ino=17280 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 298.623601][ T7541] netlink: 14 bytes leftover after parsing attributes in process `syz.2.348'. [ 298.631573][ T5264] 8021q: adding VLAN 0 to HW filter on device eth11 [ 298.693567][ T30] audit: type=1400 audit(1789862857.188:826): avc: denied { map } for pid=7536 comm="syz.2.348" path="socket:[17270]" dev="sockfs" ino=17270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 298.693601][ T30] audit: type=1400 audit(1789862857.188:827): avc: denied { read } for pid=7536 comm="syz.2.348" path="socket:[17270]" dev="sockfs" ino=17270 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 298.766399][ T30] audit: type=1400 audit(1789862857.258:828): avc: denied { bind } for pid=7536 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 298.767062][ T30] audit: type=1400 audit(1789862857.258:829): avc: denied { accept } for pid=7536 comm="syz.2.348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 299.535824][ T30] audit: type=1400 audit(1789862858.028:830): avc: denied { connect } for pid=7545 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 299.535859][ T30] audit: type=1400 audit(1789862858.028:831): avc: denied { write } for pid=7545 comm="syz.0.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 300.086254][ T7555] No such timeout policy "syz1" [ 300.877467][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.351'. [ 301.215662][ T7319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.437245][ T7563] dlm: Using TCP for communications [ 301.489985][ T7563] dlm: dlm1: joining the lockspace group... [ 302.676840][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 302.676854][ T30] audit: type=1400 audit(1789862861.168:835): avc: denied { connect } for pid=7566 comm="syz.6.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 303.075841][ T30] audit: type=1400 audit(1789862861.528:836): avc: denied { write } for pid=7566 comm="syz.6.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 304.114441][ T30] audit: type=1400 audit(1789862862.598:837): avc: denied { write } for pid=7554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 304.192869][ T7319] veth0_vlan: entered promiscuous mode [ 304.436117][ T7319] veth1_vlan: entered promiscuous mode [ 305.179208][ T7319] veth0_macvtap: entered promiscuous mode [ 305.209296][ T7319] veth1_macvtap: entered promiscuous mode [ 305.263456][ T7319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.295697][ T7319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.310447][ T30] audit: type=1400 audit(1789862863.798:838): avc: denied { write } for pid=7591 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.397357][ T204] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.397387][ T204] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.397407][ T204] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.397427][ T204] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.600556][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.600572][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.753714][ T5264] 8021q: adding VLAN 0 to HW filter on device eth12 [ 305.985517][ T7124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.985532][ T7124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.667153][ T30] audit: type=1400 audit(1789862865.158:839): avc: denied { write } for pid=7604 comm="syz.7.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 306.667185][ T30] audit: type=1400 audit(1789862865.158:840): avc: denied { connect } for pid=7604 comm="syz.7.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 306.667207][ T30] audit: type=1400 audit(1789862865.158:841): avc: denied { name_connect } for pid=7604 comm="syz.7.302" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 306.781134][ T30] audit: type=1400 audit(1789862865.268:842): avc: denied { create } for pid=7607 comm="syz.0.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 306.782702][ T30] audit: type=1400 audit(1789862865.268:843): avc: denied { write } for pid=7607 comm="syz.0.359" path="socket:[17839]" dev="sockfs" ino=17839 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 307.047551][ T30] audit: type=1400 audit(1789862865.538:844): avc: denied { write } for pid=7606 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.886278][ T30] audit: type=1400 audit(1789862866.378:845): avc: denied { write } for pid=7632 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.172002][ T30] audit: type=1400 audit(1789862866.658:846): avc: denied { create } for pid=7633 comm="syz.6.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 308.172032][ T30] audit: type=1400 audit(1789862866.658:847): avc: denied { write } for pid=7633 comm="syz.6.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 308.172054][ T30] audit: type=1400 audit(1789862866.658:848): avc: denied { read } for pid=7633 comm="syz.6.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 308.217958][ T30] audit: type=1400 audit(1789862866.708:849): avc: denied { read } for pid=7633 comm="syz.6.362" dev="nsfs" ino=4026532783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 308.294529][ T30] audit: type=1400 audit(1789862866.788:850): avc: denied { open } for pid=7633 comm="syz.6.362" path="net:[4026532783]" dev="nsfs" ino=4026532783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 308.330838][ T30] audit: type=1400 audit(1789862866.818:851): avc: denied { ioctl } for pid=7633 comm="syz.6.362" path="socket:[17890]" dev="sockfs" ino=17890 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 308.330870][ T30] audit: type=1400 audit(1789862866.818:852): avc: denied { module_request } for pid=7633 comm="syz.6.362" kmod="netdev-wpan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 308.471583][ T30] audit: type=1400 audit(1789862866.958:853): avc: denied { search } for pid=7638 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.500546][ T30] audit: type=1400 audit(1789862866.988:854): avc: denied { search } for pid=7638 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.537609][ T7640] netlink: 216 bytes leftover after parsing attributes in process `syz.6.362'. [ 308.537630][ T7640] tc_dump_action: action bad kind [ 310.178637][ T7657] kvm [7652]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x1 [ 310.194920][ T7657] kvm [7652]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x100000000 [ 310.194951][ T7657] kvm [7652]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x100000001 [ 310.195610][ T7657] kvm [7652]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x1 [ 310.202234][ T7657] kvm [7652]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 310.262241][ T7657] kvm [7652]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x187) = 0x1 [ 310.288351][ T7657] kvm [7652]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 310.288381][ T7657] kvm [7652]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x1 [ 313.252810][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 313.252822][ T30] audit: type=1400 audit(1789862871.748:919): avc: denied { create } for pid=7692 comm="syz.6.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 313.307037][ T30] audit: type=1400 audit(1789862871.798:920): avc: denied { write } for pid=7692 comm="syz.6.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 313.341483][ T30] audit: type=1400 audit(1789862871.828:921): avc: denied { write } for pid=7666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.386753][ T30] audit: type=1326 audit(1789862871.878:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.5.371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0279e159 code=0x7ffc0000 [ 313.386787][ T30] audit: type=1326 audit(1789862871.878:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.5.371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0279e159 code=0x7ffc0000 [ 313.390791][ T7693] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 313.468497][ T30] audit: type=1326 audit(1789862871.958:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.5.371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5c02797ed7 code=0x7ffc0000 [ 313.468530][ T30] audit: type=1326 audit(1789862871.958:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.5.371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5c0273f4d9 code=0x7ffc0000 [ 313.468554][ T30] audit: type=1326 audit(1789862871.958:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.5.371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f5c0279e159 code=0x7ffc0000 [ 313.468580][ T30] audit: type=1326 audit(1789862871.958:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.5.371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0279e159 code=0x7ffc0000 [ 313.468605][ T30] audit: type=1326 audit(1789862871.958:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7688 comm="syz.5.371" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c0279e159 code=0x7ffc0000 [ 313.626832][ T7693] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 313.626862][ T7693] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 313.781652][ T7678] SELinux: failed to load policy [ 313.871879][ T7693] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 315.230628][ T7696] nvmet_rdma: malformed ip/port passed: :4420 [ 315.623357][ T7712] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 315.623374][ T7712] block device autoloading is deprecated and will be removed. [ 316.878883][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.737435][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.741358][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.741931][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.767859][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.768232][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.856666][ T7729] netlink: 'syz.0.379': attribute type 9 has an invalid length. [ 318.370764][ T30] kauditd_printk_skb: 176 callbacks suppressed [ 318.370777][ T30] audit: type=1400 audit(1789862876.858:1105): avc: denied { unmount } for pid=6126 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 318.847229][ T30] audit: type=1400 audit(1789862877.338:1106): avc: denied { connect } for pid=7727 comm="syz.6.380" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 318.947892][ T30] audit: type=1400 audit(1789862877.438:1107): avc: denied { mmap_zero } for pid=7727 comm="syz.6.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 318.950258][ T30] audit: type=1400 audit(1789862877.438:1108): avc: denied { map } for pid=7727 comm="syz.6.380" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 318.972990][ T30] audit: type=1400 audit(1789862877.468:1109): avc: denied { read write } for pid=7727 comm="syz.6.380" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=18197 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 319.111216][ T30] audit: type=1400 audit(1789862877.598:1110): avc: denied { mount } for pid=7727 comm="syz.6.380" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 319.223804][ T30] audit: type=1400 audit(1789862877.718:1111): avc: denied { bind } for pid=7741 comm="syz.7.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 320.030832][ T52] Bluetooth: hci3: command tx timeout [ 320.031413][ T30] audit: type=1400 audit(1789862878.468:1112): avc: denied { create } for pid=7741 comm="syz.7.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 320.031444][ T30] audit: type=1400 audit(1789862878.468:1113): avc: denied { setopt } for pid=7741 comm="syz.7.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 320.031466][ T30] audit: type=1400 audit(1789862878.468:1114): avc: denied { write } for pid=7741 comm="syz.7.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 320.439015][ T7753] loop5: detected capacity change from 0 to 7 [ 320.489442][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 320.504048][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.504165][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 320.540753][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.540798][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 320.541184][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.541225][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 320.585100][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.585141][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 320.586689][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.586726][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 320.588154][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.588192][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 320.589804][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.589841][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 320.660148][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.660190][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 320.668319][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 320.668364][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 320.678929][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 320.724547][ T7753] ldm_validate_partition_table(): Disk read failed. [ 320.762068][ T7753] Dev loop5: unable to read RDB block 0 [ 320.769496][ T7753] loop5: unable to read partition table [ 320.769600][ T7753] loop5: partition table beyond EOD, truncated [ 320.769627][ T7753] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 321.294315][ T7762] io-wq is not configured for unbound workers [ 321.302710][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.6.385'. [ 322.072462][ T52] Bluetooth: hci3: command tx timeout [ 323.305908][ T7725] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.305960][ T7725] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.306137][ T7725] bridge_slave_0: entered allmulticast mode [ 323.310357][ T7725] bridge_slave_0: entered promiscuous mode [ 323.355314][ T7725] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.355362][ T7725] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.355428][ T7725] bridge_slave_1: entered allmulticast mode [ 323.358452][ T7725] bridge_slave_1: entered promiscuous mode [ 323.397364][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 323.397374][ T30] audit: type=1400 audit(1789862881.888:1141): avc: denied { ioctl } for pid=7778 comm="syz.5.387" path="/dev/input/event0" dev="devtmpfs" ino=915 ioctlcmd=0x5507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 323.510888][ T7725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.529053][ T7725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.610188][ T7725] team0: Port device team_slave_0 added [ 323.625853][ T7725] team0: Port device team_slave_1 added [ 323.708584][ T7725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.708594][ T7725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.708608][ T7725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.770935][ T7725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.770945][ T7725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 323.770959][ T7725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.869372][ T7725] hsr_slave_0: entered promiscuous mode [ 323.870553][ T7725] hsr_slave_1: entered promiscuous mode [ 323.871769][ T7725] debugfs: 'hsr0' already exists in 'hsr' [ 323.871796][ T7725] Cannot create hsr debugfs directory [ 324.058170][ T30] audit: type=1400 audit(1789862882.548:1142): avc: denied { write } for pid=7792 comm="syz.5.391" name="netlink" dev="proc" ino=4026533310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 324.153754][ T52] Bluetooth: hci3: command tx timeout [ 325.136907][ T30] audit: type=1400 audit(1789862883.608:1143): avc: denied { connect } for pid=7794 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 325.136940][ T30] audit: type=1400 audit(1789862883.628:1144): avc: denied { shutdown } for pid=7794 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 325.136963][ T30] audit: type=1400 audit(1789862883.628:1145): avc: denied { create } for pid=7794 comm="syz.0.392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 325.136984][ T30] audit: type=1400 audit(1789862883.628:1146): avc: denied { ioctl } for pid=7794 comm="syz.0.392" path="/dev/rtc0" dev="devtmpfs" ino=919 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 325.355421][ T30] audit: type=1400 audit(1789862883.838:1147): avc: denied { create } for pid=7792 comm="syz.5.391" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 325.466522][ T30] audit: type=1400 audit(1789862883.958:1148): avc: denied { mount } for pid=7802 comm="syz.0.394" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 325.469235][ T30] audit: type=1400 audit(1789862883.958:1149): avc: denied { search } for pid=7802 comm="syz.0.394" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 325.469413][ T30] audit: type=1400 audit(1789862883.958:1150): avc: denied { write } for pid=7802 comm="syz.0.394" name="buffer_size_kb" dev="tracefs" ino=3965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 325.558268][ T7725] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 325.572920][ T7725] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 325.573454][ T7725] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 325.577262][ T7725] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 325.578775][ T7725] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 325.613022][ T7725] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 325.613577][ T7725] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 325.618440][ T7725] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 325.651142][ T7803] fuse: Bad value for 'fd' [ 325.811352][ T7725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.852180][ T7725] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.887128][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.887183][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.889776][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.889827][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.232512][ T52] Bluetooth: hci3: command tx timeout [ 327.059998][ T7815] lo speed is unknown, defaulting to 1000 [ 327.060034][ T7815] lo speed is unknown, defaulting to 1000 [ 327.061136][ T7815] lo speed is unknown, defaulting to 1000 [ 327.061671][ T7815] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 327.061691][ T7815] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 327.061715][ T7815] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 327.066981][ T7815] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 327.077499][ T7815] lo speed is unknown, defaulting to 1000 [ 327.078375][ T7815] lo speed is unknown, defaulting to 1000 [ 327.079172][ T7815] lo speed is unknown, defaulting to 1000 [ 327.080638][ T7815] lo speed is unknown, defaulting to 1000 [ 327.081735][ T7815] lo speed is unknown, defaulting to 1000 [ 327.082643][ T7815] lo speed is unknown, defaulting to 1000 [ 327.289816][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'. [ 327.291794][ T7815] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.291851][ T7815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.292006][ T7815] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.292061][ T7815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.316044][ T5796] lo speed is unknown, defaulting to 1000 [ 327.404493][ T7822] geneve2: entered promiscuous mode [ 327.404515][ T7822] geneve2: entered allmulticast mode [ 328.432683][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 328.432698][ T30] audit: type=1400 audit(1789862886.908:1157): avc: denied { map } for pid=7828 comm="syz.6.399" path="socket:[18988]" dev="sockfs" ino=18988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 328.744595][ T30] audit: type=1400 audit(1789862887.238:1158): avc: denied { map } for pid=7816 comm="syz.7.397" path="socket:[19011]" dev="sockfs" ino=19011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 329.009806][ T30] audit: type=1400 audit(1789862887.498:1159): avc: denied { search } for pid=7846 comm="sed" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.038801][ T30] audit: type=1400 audit(1789862887.528:1160): avc: denied { read } for pid=7846 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 329.038831][ T30] audit: type=1400 audit(1789862887.528:1161): avc: denied { open } for pid=7846 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 329.038856][ T30] audit: type=1400 audit(1789862887.528:1162): avc: denied { getattr } for pid=7846 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1808 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 329.130232][ T7844] lo speed is unknown, defaulting to 1000 [ 329.180169][ T30] audit: type=1400 audit(1789862887.668:1163): avc: denied { sys_module } for pid=7725 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 329.180202][ T30] audit: type=1400 audit(1789862887.668:1164): avc: denied { module_request } for pid=7725 comm="syz-executor" kmod="caif0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 330.054536][ T30] audit: type=1400 audit(1789862887.808:1165): avc: denied { execmem } for pid=7852 comm="syz.7.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 330.054569][ T30] audit: type=1400 audit(1789862888.478:1166): avc: denied { read } for pid=7852 comm="syz.7.403" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 330.120856][ T7853] lo speed is unknown, defaulting to 1000 [ 331.051816][ T7725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.461973][ T30] kauditd_printk_skb: 44 callbacks suppressed [ 333.461986][ T30] audit: type=1400 audit(1789862891.948:1211): avc: denied { read write } for pid=7899 comm="syz.0.411" name="udmabuf" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 333.462014][ T30] audit: type=1400 audit(1789862891.948:1212): avc: denied { open } for pid=7899 comm="syz.0.411" path="/dev/udmabuf" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 333.554508][ T30] audit: type=1400 audit(1789862892.048:1213): avc: denied { ioctl } for pid=7899 comm="syz.0.411" path="/dev/udmabuf" dev="devtmpfs" ino=700 ioctlcmd=0x7542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 333.681639][ T30] audit: type=1400 audit(1789862892.168:1214): avc: denied { ioctl } for pid=7902 comm="syz.6.412" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=19213 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 333.861999][ T30] audit: type=1400 audit(1789862892.338:1215): avc: denied { map } for pid=7899 comm="syz.0.411" path="socket:[19219]" dev="sockfs" ino=19219 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 335.129453][ T30] audit: type=1400 audit(1789862893.618:1216): avc: denied { write } for pid=7880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.191758][ T30] audit: type=1400 audit(1789862893.678:1217): avc: denied { read write } for pid=7912 comm="syz.0.413" name="vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 335.191791][ T30] audit: type=1400 audit(1789862893.678:1218): avc: denied { open } for pid=7912 comm="syz.0.413" path="/dev/vhost-net" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 335.254760][ T30] audit: type=1400 audit(1789862893.748:1219): avc: denied { read write } for pid=7915 comm="syz.7.405" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 335.254793][ T30] audit: type=1400 audit(1789862893.748:1220): avc: denied { open } for pid=7915 comm="syz.7.405" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 335.256195][ T7725] veth0_vlan: entered promiscuous mode [ 335.374628][ T7725] veth1_vlan: entered promiscuous mode [ 335.491789][ T7725] veth0_macvtap: entered promiscuous mode [ 335.525410][ T7725] veth1_macvtap: entered promiscuous mode [ 335.580938][ T7725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.617325][ T7725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.635137][ T7119] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.635279][ T7119] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.635309][ T7119] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.635328][ T7119] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.811406][ T7917] kvm [7915]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x1 [ 335.872057][ T7917] kvm [7915]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x1 [ 335.914361][ T7917] kvm_intel: kvm [7915]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 336.076391][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.076406][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.286537][ T204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.286552][ T204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.615485][ T7944] netlink: 24 bytes leftover after parsing attributes in process `syz.6.418'. [ 337.615559][ T7944] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.857418][ T7952] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=7952 comm=syz.8.375 [ 338.739290][ T7960] binder: 7956:7960 ioctl 4018620d 0 returned -22 [ 338.743338][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 338.743349][ T30] audit: type=1400 audit(1789862897.228:1259): avc: denied { read } for pid=7956 comm="syz.5.421" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 338.743377][ T30] audit: type=1400 audit(1789862897.228:1260): avc: denied { open } for pid=7956 comm="syz.5.421" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 338.743401][ T30] audit: type=1400 audit(1789862897.228:1261): avc: denied { ioctl } for pid=7956 comm="syz.5.421" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 339.219437][ T30] audit: type=1400 audit(1789862897.708:1262): avc: denied { write } for pid=7966 comm="syz.6.424" name="event1" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 340.131581][ T30] audit: type=1400 audit(1789862898.618:1263): avc: denied { setopt } for pid=7976 comm="syz.6.426" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 340.178634][ T7977] netlink: 'syz.6.426': attribute type 39 has an invalid length. [ 340.179126][ T30] audit: type=1400 audit(1789862898.668:1264): avc: denied { audit_write } for pid=7962 comm="syz.0.422" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 340.181294][ T30] audit: type=1400 audit(1789862898.668:1265): avc: denied { watch watch_reads } for pid=7962 comm="syz.0.422" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 340.441907][ T30] audit: type=1400 audit(1789862898.928:1266): avc: denied { mount } for pid=7979 comm="syz.8.427" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 340.528862][ T30] audit: type=1400 audit(1789862899.018:1267): avc: denied { mount } for pid=7979 comm="syz.8.427" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 340.627531][ T30] audit: type=1400 audit(1789862899.118:1268): avc: denied { write } for pid=7961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.570625][ T8013] geneve2: left promiscuous mode [ 343.570640][ T8013] geneve2: left allmulticast mode [ 344.662720][ T8019] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 344.717843][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 344.717855][ T30] audit: type=1400 audit(1789862903.158:1277): avc: denied { mac_admin } for pid=8018 comm="syz.5.437" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 344.717883][ T30] audit: type=1400 audit(1789862903.158:1278): avc: denied { relabelto } for pid=8018 comm="syz.5.437" name="73" dev="tmpfs" ino=411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 344.717909][ T30] audit: type=1400 audit(1789862903.158:1279): avc: denied { associate } for pid=8018 comm="syz.5.437" name="73" dev="tmpfs" ino=411 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 344.942607][ T10] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 345.081993][ T30] audit: type=1400 audit(1789862903.568:1280): avc: denied { create } for pid=8023 comm="syz.6.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 345.131788][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 345.142687][ T10] usb 9-1: not running at top speed; connect to a high speed hub [ 345.142708][ T10] usb 9-1: New USB device found, idVendor=2cb7, idProduct=0112, bcdDevice=3a.d1 [ 345.168301][ T10] usb 9-1: config 11 has an invalid interface number: 183 but max is 0 [ 345.168320][ T10] usb 9-1: config 11 has no interface number 0 [ 345.168343][ T10] usb 9-1: config 11 interface 183 altsetting 156 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 345.168359][ T10] usb 9-1: config 11 interface 183 has no altsetting 0 [ 345.208690][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.208706][ T10] usb 9-1: Product: syz [ 345.208715][ T10] usb 9-1: Manufacturer: syz [ 345.208724][ T10] usb 9-1: SerialNumber: syz [ 346.332987][ T30] audit: type=1400 audit(1789862904.828:1281): avc: denied { create } for pid=8014 comm="syz.8.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 346.378478][ T30] audit: type=1400 audit(1789862904.868:1282): avc: denied { create } for pid=8023 comm="syz.6.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 346.380375][ T30] audit: type=1400 audit(1789862904.868:1283): avc: denied { write } for pid=8023 comm="syz.6.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 346.477819][ T8032] UBLK_F_QUIESCE requires UBLK_F_USER_RECOVERY [ 346.479057][ T30] audit: type=1400 audit(1789862904.968:1284): avc: denied { cmd } for pid=8014 comm="iou-wrk-8029" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 346.594343][ T10] option 9-1:11.183: GSM modem (1-port) converter detected [ 346.653668][ T30] audit: type=1400 audit(1789862905.138:1285): avc: denied { write } for pid=8010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.699479][ T10] usb 9-1: USB disconnect, device number 2 [ 346.713226][ T10] option 9-1:11.183: device disconnected [ 347.033029][ T30] audit: type=1400 audit(1789862905.508:1286): avc: denied { write } for pid=8038 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.216602][ T8041] 0x000000000006-0x000000020000 : "" [ 347.228853][ T8041] ftl_cs: FTL header corrupt! [ 347.951601][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'. [ 348.645502][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.8.445'. [ 348.778115][ T8069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.785360][ T8069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.813621][ T8077] syzkaller0: entered promiscuous mode [ 348.813635][ T8077] syzkaller0: entered allmulticast mode [ 349.001122][ T8075] input: syz1 as /devices/virtual/input/input15 [ 350.139200][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 350.139212][ T30] audit: type=1400 audit(1789862908.628:1314): avc: denied { write } for pid=8097 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.251426][ T30] audit: type=1400 audit(1789862908.738:1315): avc: denied { kexec_image_load } for pid=8120 comm="syz.5.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 350.335763][ T5796] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 350.409094][ T30] audit: type=1400 audit(1789862908.898:1316): avc: denied { write } for pid=8123 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.482985][ T5796] usb 9-1: Using ep0 maxpacket: 8 [ 350.485244][ T5796] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 350.509953][ T5796] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.564798][ T30] audit: type=1400 audit(1789862909.058:1317): avc: denied { create } for pid=8111 comm="syz.7.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 350.570626][ T5796] pvrusb2: Hardware description: Terratec Grabster AV400 [ 350.570639][ T5796] pvrusb2: ********** [ 350.570643][ T5796] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 350.570649][ T5796] pvrusb2: Important functionality might not be entirely working. [ 350.570654][ T5796] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 350.570660][ T5796] pvrusb2: ********** [ 350.638802][ T30] audit: type=1400 audit(1789862909.128:1318): avc: denied { create } for pid=8111 comm="syz.7.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 350.685724][ T30] audit: type=1400 audit(1789862909.178:1319): avc: denied { write } for pid=8111 comm="syz.7.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 350.753102][ T2355] pvrusb2: Invalid write control endpoint [ 350.790210][ T30] audit: type=1400 audit(1789862909.278:1320): avc: denied { mount } for pid=8126 comm="syz.6.455" name="/" dev="configfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 350.864837][ T30] audit: type=1400 audit(1789862909.358:1321): avc: denied { search } for pid=8126 comm="syz.6.455" name="/" dev="configfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 350.864868][ T30] audit: type=1400 audit(1789862909.358:1322): avc: denied { search } for pid=8126 comm="syz.6.455" name="usb_gadget" dev="configfs" ino=3545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 350.866027][ T30] audit: type=1400 audit(1789862909.358:1323): avc: denied { search } for pid=8126 comm="syz.6.455" name="/" dev="configfs" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 351.010503][ T8116] pvrusb2: Invalid write control endpoint [ 351.084212][ T8116] ======================================================= [ 351.084212][ T8116] WARNING: The mand mount option has been deprecated and [ 351.084212][ T8116] and is ignored by this kernel. Remove the mand [ 351.084212][ T8116] option from the mount to silence this warning. [ 351.084212][ T8116] ======================================================= [ 351.209980][ T2355] pvrusb2: Invalid write control endpoint [ 351.210004][ T2355] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 351.210010][ T2355] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 351.210015][ T2355] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 351.210023][ T2355] pvrusb2: Device being rendered inoperable [ 351.270782][ T2355] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 351.270866][ T2355] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 351.446740][ T2355] pvrusb2: Attached sub-driver cx25840 [ 351.446752][ T2355] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 351.446757][ T2355] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 351.792217][ T5796] usb 9-1: USB disconnect, device number 3 [ 351.974356][ T8137] Bluetooth: MGMT ver 1.23 [ 351.989731][ T52] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 351.991295][ T52] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 352.227833][ T8141] syzkaller0: entered promiscuous mode [ 352.227848][ T8141] syzkaller0: entered allmulticast mode [ 352.410564][ T8144] siw: device registration error -23 [ 354.786186][ T8175] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 356.182421][ T5796] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 356.230628][ T8174] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'. [ 356.245906][ T8174] mmap: syz.0.467 (8174) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 356.392401][ T5796] usb 9-1: Using ep0 maxpacket: 32 [ 356.394374][ T5796] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 356.399112][ T5796] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.399126][ T5796] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 356.399149][ T5796] usb 9-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 356.399169][ T5796] usb 9-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 356.399190][ T5796] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 356.399203][ T5796] usb 9-1: config 1 interface 1 has no altsetting 0 [ 356.639359][ T5796] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.639378][ T5796] usb 9-1: Product: syz [ 356.639386][ T5796] usb 9-1: Manufacturer: syz [ 356.639395][ T5796] usb 9-1: SerialNumber: syz [ 357.029994][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 357.030007][ T30] audit: type=1400 audit(1789862915.518:1359): avc: denied { append } for pid=8177 comm="syz.8.468" name="sg0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 357.066282][ T30] audit: type=1400 audit(1789862915.558:1360): avc: denied { map } for pid=8177 comm="syz.8.468" path="/dev/sg0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 357.066314][ T30] audit: type=1400 audit(1789862915.558:1361): avc: denied { execute } for pid=8177 comm="syz.8.468" path="/dev/sg0" dev="devtmpfs" ino=912 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 358.301901][ T8205] siw: device registration error -23 [ 358.354222][ T30] audit: type=1400 audit(1789862916.848:1362): avc: denied { bind } for pid=8210 comm="syz.0.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 358.411489][ T5796] usb 9-1: selecting invalid altsetting 0 [ 358.436370][ T5796] usb 9-1: 1:1: cannot get freq (v2/v3): err -71 [ 358.440887][ T5796] usb 9-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 358.539539][ T30] audit: type=1400 audit(1789862917.028:1363): avc: denied { write } for pid=8152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 358.582322][ T8226] syzkaller0: entered promiscuous mode [ 358.582509][ T8226] syzkaller0: entered allmulticast mode [ 358.965846][ T30] audit: type=1400 audit(1789862917.458:1364): avc: denied { create } for pid=8225 comm="syz.7.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 360.336408][ T8233] comedi comedi1: dt2811-pgh: a I/O base address must be specified [ 360.591767][ T30] audit: type=1400 audit(1789862919.078:1365): avc: denied { connect } for pid=8225 comm="syz.7.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 360.683480][ T30] audit: type=1400 audit(1789862919.178:1366): avc: denied { write } for pid=8239 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.686162][ T5796] usb 9-1: USB disconnect, device number 4 [ 361.622508][ T7311] udevd[7311]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.491554][ T30] audit: type=1400 audit(1789862920.938:1367): avc: denied { mount } for pid=8244 comm="syz.5.479" name="/" dev="rpc_pipefs" ino=20680 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 362.515618][ T30] audit: type=1400 audit(1789862920.988:1368): avc: denied { unmount } for pid=6126 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 363.076678][ T8256] ubi0: attaching mtd0 [ 363.100030][ T8256] ubi0: scanning is finished [ 363.100067][ T8256] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 363.184809][ T8256] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 363.835842][ T30] audit: type=1400 audit(1789862922.328:1369): avc: denied { write } for pid=8249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.167019][ T30] audit: type=1400 audit(1789862922.658:1370): avc: denied { write } for pid=8271 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 364.205861][ T30] audit: type=1400 audit(1789862922.698:1371): avc: denied { append } for pid=8274 comm="syz.6.477" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 364.439266][ T52] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 364.439524][ T52] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 364.894769][ T30] audit: type=1400 audit(1789862923.378:1372): avc: denied { read write } for pid=8282 comm="syz.5.482" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 364.894805][ T30] audit: type=1400 audit(1789862923.378:1373): avc: denied { open } for pid=8282 comm="syz.5.482" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 365.131941][ T30] audit: type=1400 audit(1789862923.618:1374): avc: denied { ioctl } for pid=8284 comm="syz.7.486" path="cgroup:[4026532983]" dev="nsfs" ino=4026532983 ioctlcmd=0x9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 365.161601][ T8287] siw: device registration error -23 [ 365.170522][ T30] audit: type=1400 audit(1789862923.658:1375): avc: denied { write } for pid=8288 comm="syz.0.487" name="igmp6" dev="proc" ino=4026533315 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 365.477274][ T5762] usb 8-1: new low-speed USB device number 2 using dummy_hcd [ 365.493865][ T30] audit: type=1400 audit(1789862923.968:1376): avc: denied { unmount } for pid=6126 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 365.645160][ T5762] usb 8-1: unable to get BOS descriptor or descriptor too short [ 365.645189][ T5762] usb 8-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 365.646502][ T5762] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 365.646522][ T5762] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 365.646535][ T5762] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xC is Bulk; changing to Interrupt [ 365.646548][ T5762] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 365.721989][ T5762] usb 8-1: string descriptor 0 read error: -22 [ 365.722059][ T5762] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.742792][ T5762] usb 8-1: config 0 descriptor?? [ 365.743361][ T8287] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 365.767727][ T5762] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 366.169091][ T8303] syzkaller0: entered promiscuous mode [ 366.169107][ T8303] syzkaller0: entered allmulticast mode [ 366.419496][ T8290] Set syz1 is full, maxelem 6117 reached [ 366.485277][ T5762] usb 8-1: USB disconnect, device number 2 [ 369.266869][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 369.266882][ T30] audit: type=1400 audit(1789862927.758:1379): avc: denied { write } for pid=8309 comm="syz.7.494" name="functions" dev="configfs" ino=7388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 369.304673][ T8312] UDC core: g1: couldn't find an available UDC or it's busy [ 369.551237][ T8314] netlink: 20 bytes leftover after parsing attributes in process `syz.6.496'. [ 369.640524][ T8314] 8021q: adding VLAN 0 to HW filter on device bond1 [ 370.756009][ T8320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=8320 comm=syz.7.498 [ 373.425198][ T8346] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 373.425222][ T8346] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 373.425633][ T8346] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 373.473973][ T30] audit: type=1400 audit(1789862931.608:1380): avc: denied { ioctl } for pid=8341 comm="syz.5.492" path="socket:[21039]" dev="sockfs" ino=21039 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 373.474012][ T30] audit: type=1400 audit(1789862931.918:1381): avc: denied { firmware_load } for pid=8341 comm="syz.5.492" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 373.579920][ T30] audit: type=1400 audit(1789862932.068:1382): avc: denied { ioctl } for pid=8333 comm="syz.0.502" path="/dev/vhost-net" dev="devtmpfs" ino=1271 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 373.651210][ T30] audit: type=1400 audit(1789862932.138:1383): avc: denied { wake_alarm } for pid=8338 comm="syz.6.503" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 374.501512][ T5762] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 374.919333][ T5762] usb 9-1: unable to get BOS descriptor or descriptor too short [ 374.919362][ T5762] usb 9-1: New USB device found, idVendor=08ca, idProduct=2016, bcdDevice=f7.ed [ 374.941654][ T5762] usb 9-1: config 4 has an invalid interface number: 4 but max is 0 [ 374.941671][ T5762] usb 9-1: config 4 has no interface number 0 [ 374.941688][ T5762] usb 9-1: config 4 interface 4 has no altsetting 0 [ 374.972003][ T5762] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.972020][ T5762] usb 9-1: Product: syz [ 374.972029][ T5762] usb 9-1: Manufacturer: syz [ 374.972038][ T5762] usb 9-1: SerialNumber: syz [ 378.322428][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.553462][ T5762] gspca_main: sunplus-2.14.0 probing 08ca:2016 [ 378.558179][ T5762] gspca_sunplus: reg_w_riv err -71 [ 378.558220][ T5762] sunplus 9-1:4.4: probe with driver sunplus failed with error -71 [ 378.584286][ T5762] usb 9-1: USB disconnect, device number 5 [ 379.037749][ T5796] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 379.242054][ T30] audit: type=1400 audit(1789862937.728:1384): avc: denied { watch } for pid=8374 comm="syz.0.511" path="/113/net_prio.prioidx" dev="tmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 379.242089][ T30] audit: type=1400 audit(1789862937.728:1385): avc: denied { watch_sb watch_reads } for pid=8374 comm="syz.0.511" path="/113/net_prio.prioidx" dev="tmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 379.313296][ T5796] usb 8-1: Using ep0 maxpacket: 8 [ 379.314660][ T5796] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 379.315844][ T5796] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 379.315863][ T5796] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 379.315877][ T5796] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 379.315891][ T5796] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.315914][ T5796] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.779421][ T30] audit: type=1326 audit(1789862939.268:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8372 comm="syz.8.510" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9974d9e159 code=0x0 [ 380.834303][ T8384] batadv_slave_0: Caught tx_queue_len zero misconfig [ 380.972308][ T30] audit: type=1400 audit(1789862939.458:1387): avc: denied { read } for pid=8385 comm="syz.6.513" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 380.972434][ T30] audit: type=1400 audit(1789862939.458:1388): avc: denied { open } for pid=8385 comm="syz.6.513" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 381.062838][ T30] audit: type=1400 audit(1789862939.558:1389): avc: denied { ioctl } for pid=8385 comm="syz.6.513" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 381.185674][ T30] audit: type=1400 audit(1789862939.678:1390): avc: denied { unmount } for pid=6678 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 381.233626][ T5796] usb 8-1: GET_CAPABILITIES returned 0 [ 381.233653][ T5796] usbtmc 8-1:16.0: can't read capabilities [ 381.396706][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 381.423749][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 381.424058][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 381.424782][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 381.424905][ T8391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.515'. [ 381.429422][ T8391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=8391 comm=syz.0.515 [ 381.538007][ T30] audit: type=1400 audit(1789862940.028:1391): avc: denied { write } for pid=8370 comm="syz.7.508" name="usbtmc0" dev="devtmpfs" ino=3055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 381.542222][ T8390] FAULT_INJECTION: forcing a failure. [ 381.542222][ T8390] name (null), interval 1, probability 0, space 0, times 1 [ 381.542251][ T8390] CPU: 0 UID: 0 PID: 8390 Comm: syz.6.514 Not tainted syzkaller #0 PREEMPT(full) [ 381.542268][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 381.542279][ T8390] Call Trace: [ 381.542283][ T8390] [ 381.542289][ T8390] dump_stack_lvl+0x100/0x190 [ 381.542315][ T8390] should_fail_ex.cold+0x5/0xa [ 381.542336][ T8390] null_queue_rq+0x24d/0xfb0 [ 381.542355][ T8390] ? blk_account_io_start+0x6bc/0xa90 [ 381.542371][ T8390] __blk_mq_issue_directly+0xe2/0x200 [ 381.542391][ T8390] ? __pfx___blk_mq_issue_directly+0x10/0x10 [ 381.542411][ T8390] ? blk_mq_submit_bio+0x21b2/0x3000 [ 381.542430][ T8390] blk_mq_try_issue_directly+0x21b/0x420 [ 381.542448][ T8390] blk_mq_submit_bio+0x21ec/0x3000 [ 381.542466][ T8390] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 381.542485][ T8390] ? percpu_ref_put_many.constprop.0+0xc4/0x2a0 [ 381.542500][ T8390] ? __pfx_blk_cgroup_bio_start+0x10/0x10 [ 381.542517][ T8390] __submit_bio+0x90/0x3d0 [ 381.542530][ T8390] submit_bio_noacct_nocheck+0x549/0xc00 [ 381.542546][ T8390] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 381.542562][ T8390] ? __pfx___might_resched+0x10/0x10 [ 381.542574][ T8390] ? fscrypt_set_bio_crypt_ctx+0x11c/0x2c0 [ 381.542594][ T8390] submit_bio_noacct+0xc93/0x2130 [ 381.542610][ T8390] __bh_submit+0x7ce/0xaa0 [ 381.542623][ T8390] ? __pfx_bh_end_read+0x10/0x10 [ 381.542637][ T8390] __bread_gfp+0x157/0x380 [ 381.542652][ T8390] minix_fill_super+0x156/0x1b80 [ 381.542670][ T8390] ? setup_bdev_super+0x4b6/0x770 [ 381.542681][ T8390] ? set_blocksize+0x1cf/0x460 [ 381.542692][ T8390] ? setup_bdev_super+0x4b6/0x770 [ 381.542705][ T8390] ? sb_set_blocksize+0x1f6/0x290 [ 381.542718][ T8390] ? setup_bdev_super+0x4e8/0x770 [ 381.542731][ T8390] get_tree_bdev_flags+0x38c/0x620 [ 381.542743][ T8390] ? __pfx_minix_fill_super+0x10/0x10 [ 381.542761][ T8390] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 381.542780][ T8390] ? cap_capable+0x107/0x430 [ 381.542801][ T8390] ? bpf_lsm_capable+0x9/0x10 [ 381.542819][ T8390] ? security_capable+0x80/0x260 [ 381.542840][ T8390] vfs_get_tree+0x92/0x320 [ 381.542860][ T8390] path_mount+0x7d0/0x24c0 [ 381.542880][ T8390] ? __pfx_path_mount+0x10/0x10 [ 381.542897][ T8390] ? lockdep_hardirqs_on+0x7d/0x110 [ 381.542917][ T8390] ? putname+0xb1/0x110 [ 381.542932][ T8390] ? kmem_cache_free+0x127/0x6c0 [ 381.542956][ T8390] ? __x64_sys_mount+0x293/0x310 [ 381.542974][ T8390] __x64_sys_mount+0x293/0x310 [ 381.542993][ T8390] ? __pfx___x64_sys_mount+0x10/0x10 [ 381.543015][ T8390] do_syscall_64+0x123/0x790 [ 381.543034][ T8390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.543047][ T8390] RIP: 0033:0x7f43d159e159 [ 381.543057][ T8390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.543069][ T8390] RSP: 002b:00007f43d2538028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 381.543086][ T8390] RAX: ffffffffffffffda RBX: 00007f43d1825fa0 RCX: 00007f43d159e159 [ 381.543094][ T8390] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 00002000000000c0 [ 381.543104][ T8390] RBP: 00007f43d163506b R08: 0000000000000000 R09: 0000000000000000 [ 381.543112][ T8390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.543120][ T8390] R13: 00007f43d1826038 R14: 00007f43d1825fa0 R15: 00007fffa2bef258 [ 381.543137][ T8390] [ 381.969458][ T30] audit: type=1400 audit(1789862940.458:1392): avc: denied { ioctl } for pid=8389 comm="syz.0.515" path="socket:[21270]" dev="sockfs" ino=21270 ioctlcmd=0x48e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 382.202087][ T30] audit: type=1400 audit(1789862940.688:1393): avc: denied { read write } for pid=8395 comm="syz.0.516" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 383.388988][ T8401] block nbd0: NBD_DISCONNECT [ 383.485256][ T5762] usb 8-1: USB disconnect, device number 3 [ 383.840513][ T8410] /dev/nullb0: Can't open blockdev [ 385.133104][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 385.133132][ T30] audit: type=1400 audit(1789862943.618:1398): avc: denied { mounton } for pid=8424 comm="syz.8.522" path="/syzcgroup/unified/syz8" dev="cgroup2" ino=348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 385.208914][ T8425] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 385.209051][ T8425] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 385.209067][ T8425] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 385.209075][ T8425] UDF-fs: Scanning with blocksize 512 failed [ 385.209829][ T8425] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 385.209906][ T8425] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 385.209918][ T8425] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 385.209926][ T8425] UDF-fs: Scanning with blocksize 1024 failed [ 385.210246][ T8425] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 385.232831][ T8425] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 385.232847][ T8425] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 385.232855][ T8425] UDF-fs: Scanning with blocksize 2048 failed [ 385.233127][ T8425] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 385.233180][ T8425] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 385.233191][ T8425] UDF-fs: warning (device nbd8): udf_load_vrs: No anchor found [ 385.233199][ T8425] UDF-fs: Scanning with blocksize 4096 failed [ 385.233205][ T8425] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 385.376135][ T30] audit: type=1400 audit(1789862943.868:1399): avc: denied { execute } for pid=8424 comm="syz.8.522" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 385.515010][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 385.685293][ T30] audit: type=1400 audit(1789862944.168:1400): avc: denied { read } for pid=8430 comm="syz.0.524" name="rtc0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 385.685328][ T30] audit: type=1400 audit(1789862944.168:1401): avc: denied { open } for pid=8430 comm="syz.0.524" path="/dev/rtc0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 385.685353][ T30] audit: type=1400 audit(1789862944.168:1402): avc: denied { ioctl } for pid=8430 comm="syz.0.524" path="/dev/rtc0" dev="devtmpfs" ino=919 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 385.685377][ T30] audit: type=1400 audit(1789862944.168:1403): avc: denied { create } for pid=8430 comm="syz.0.524" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=udp_socket permissive=1 [ 385.685399][ T30] audit: type=1400 audit(1789862944.168:1404): avc: denied { create } for pid=8430 comm="syz.0.524" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_tcpdiag_socket permissive=1 [ 386.538306][ T8434] netlink: 9 bytes leftover after parsing attributes in process `syz.5.525'. [ 386.565047][ T8434] netlink: 9 bytes leftover after parsing attributes in process `syz.5.525'. [ 386.624878][ T30] audit: type=1400 audit(1789862945.068:1405): avc: denied { write } for pid=8432 comm="syz.5.525" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 386.624912][ T30] audit: type=1400 audit(1789862945.068:1406): avc: denied { map } for pid=8432 comm="syz.5.525" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 386.821597][ T8435] 9pnet_fd: Insufficient options for proto=fd [ 387.960653][ T8441] syz.0.528 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 389.076337][ T30] audit: type=1400 audit(1789862947.528:1407): avc: denied { create } for pid=8444 comm="syz.5.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 389.158540][ T2258] null_blk: rq ffff88802873cb00 timed out [ 389.158556][ T2258] blk_print_req_error: 11 callbacks suppressed [ 389.158565][ T2258] timeout error, dev nullb0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 389.161588][ T8390] MINIX-fs: unable to read superblock [ 389.677017][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.531'. [ 389.677032][ T8453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.531'. [ 389.677048][ T8453] netlink: 'syz.0.531': attribute type 14 has an invalid length. [ 389.677055][ T8453] netlink: 'syz.0.531': attribute type 12 has an invalid length. [ 390.827796][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 390.827812][ T30] audit: type=1400 audit(1789862949.098:1409): avc: denied { read write } for pid=8451 comm="syz.8.533" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 390.827846][ T30] audit: type=1400 audit(1789862949.098:1410): avc: denied { open } for pid=8451 comm="syz.8.533" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 390.827870][ T30] audit: type=1400 audit(1789862949.098:1411): avc: denied { bind } for pid=8451 comm="syz.8.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 392.805675][ T8463] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 392.807294][ T8463] CIFS: Attempting to mount //127.0.0.1/share [ 392.809550][ T8463] CIFS: VFS: \\127.0.0.1 Error -2 creating socket [ 392.809755][ T8463] CIFS: VFS: \\127.0.0.1 Error -2 creating socket [ 392.809810][ T8463] CIFS: VFS: Error connecting to socket. Aborting operation. [ 392.809883][ T8463] CIFS: VFS: cifs_mount failed w/return code = -2 [ 392.858358][ T30] audit: type=1400 audit(1789862951.348:1412): avc: denied { mount } for pid=8462 comm="syz.0.534" name="/" dev="cgroup" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 392.912074][ T30] audit: type=1400 audit(1789862951.398:1413): avc: denied { mount } for pid=8462 comm="syz.0.534" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 392.986543][ T30] audit: type=1400 audit(1789862951.478:1414): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 393.016857][ T30] audit: type=1400 audit(1789862951.508:1415): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 394.298491][ T8478] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 394.337050][ T30] audit: type=1400 audit(1789862952.828:1416): avc: denied { create } for pid=8477 comm="syz.6.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 394.367239][ T30] audit: type=1400 audit(1789862952.858:1417): avc: denied { write } for pid=8477 comm="syz.6.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 394.411905][ T30] audit: type=1400 audit(1789862952.898:1418): avc: denied { listen } for pid=8477 comm="syz.6.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 394.541185][ T8470] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 395.697316][ T2262] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 396.122809][ T2262] usb 6-1: Using ep0 maxpacket: 16 [ 396.125743][ T2262] usb 6-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 396.127572][ T2262] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.127612][ T2262] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 396.175170][ T2262] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.175186][ T2262] usb 6-1: Product: syz [ 396.175194][ T2262] usb 6-1: Manufacturer: syz [ 396.175203][ T2262] usb 6-1: SerialNumber: syz [ 396.495130][ T8497] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 396.495148][ T8497] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 396.495182][ T8497] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 397.770376][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 397.770390][ T30] audit: type=1400 audit(1789862956.258:1420): avc: denied { connect } for pid=8499 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 398.680582][ T8506] binder: 8504:8506 ioctl 4018620d 0 returned -22 [ 398.799163][ T2262] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 399.667839][ T30] audit: type=1326 audit(1789862958.158:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8508 comm="syz.7.547" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2deed9e159 code=0x0 [ 399.983417][ T2262] usb 6-1: USB disconnect, device number 7 [ 401.058867][ T52] Bluetooth: hci3: command 0x0405 tx timeout [ 401.097611][ T7314] udevd[7314]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.147550][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 402.241844][ T30] audit: type=1400 audit(1789862960.728:1422): avc: denied { getopt } for pid=8545 comm="syz.5.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 402.542490][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 403.480189][ T30] audit: type=1400 audit(1789862961.788:1423): avc: denied { mounton } for pid=8547 comm="syz.6.555" path="/67/file0" dev="tmpfs" ino=389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 403.522522][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 403.532166][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 403.532193][ T9] usb 6-1: New USB device found, idVendor=0763, idProduct=1033, bcdDevice= 0.40 [ 403.557106][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.557120][ T9] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 403.587413][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.587429][ T9] usb 6-1: Product: syz [ 403.587438][ T9] usb 6-1: Manufacturer: syz [ 403.587446][ T9] usb 6-1: SerialNumber: syz [ 403.667131][ T8553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 403.933763][ T8555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.934034][ T8555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.060678][ T30] audit: type=1400 audit(1789862962.548:1424): avc: denied { create } for pid=8545 comm="syz.5.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 404.095160][ T30] audit: type=1400 audit(1789862962.588:1425): avc: denied { bind } for pid=8545 comm="syz.5.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 404.097248][ T30] audit: type=1400 audit(1789862962.588:1426): avc: denied { setopt } for pid=8545 comm="syz.5.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 404.148281][ T30] audit: type=1400 audit(1789862962.638:1427): avc: denied { create } for pid=8556 comm="syz.7.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 404.150944][ T30] audit: type=1400 audit(1789862962.638:1428): avc: denied { bind } for pid=8556 comm="syz.7.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 404.152217][ T30] audit: type=1400 audit(1789862962.638:1429): avc: denied { setopt } for pid=8556 comm="syz.7.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 404.172282][ T30] audit: type=1400 audit(1789862962.668:1430): avc: denied { accept } for pid=8556 comm="syz.7.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 404.284266][ T30] audit: type=1400 audit(1789862962.738:1431): avc: denied { read } for pid=8556 comm="syz.7.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 405.411877][ T9] usb 6-1: unit 2 not found! [ 405.411894][ T9] usb 6-1: unit 0 not found! [ 405.630673][ T9] usb 6-1: USB disconnect, device number 8 [ 405.781311][ T30] audit: type=1400 audit(1789862964.268:1432): avc: denied { write } for pid=8561 comm="syz.6.558" name="functions" dev="configfs" ino=7388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 405.935576][ T8563] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 410.372501][ T9] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 410.443958][ T2262] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 410.522925][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 410.523922][ T9] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 410.523947][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.523970][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.600332][ T9] usbtmc 8-1:16.0: bulk endpoints not found [ 410.611809][ T2262] usb 9-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 410.623799][ T2262] usb 9-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.623820][ T2262] usb 9-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 410.623836][ T2262] usb 9-1: config 0 interface 0 has no altsetting 0 [ 410.623854][ T2262] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.628662][ T2262] usb 9-1: config 0 descriptor?? [ 412.806697][ T2262] playstation 0003:054C:09CC.0001: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.8-1/input0 [ 412.927170][ T2262] playstation 0003:054C:09CC.0001: Failed to retrieve feature with reportID 18: -32 [ 412.927202][ T2262] playstation 0003:054C:09CC.0001: Failed to retrieve DualShock4 pairing info: -32 [ 412.927232][ T2262] playstation 0003:054C:09CC.0001: Failed to get MAC address from DualShock4 [ 412.927241][ T2262] playstation 0003:054C:09CC.0001: Failed to create dualshock4. [ 412.929135][ T8605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.929621][ T8605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.819991][ T8616] Config c1/1 of g1 needs at least one function. [ 413.820056][ T8616] udc dummy_udc.0: failed to start g1: -22 [ 413.820068][ T8616] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 413.820459][ T8616] UDC core: g1: couldn't find an available UDC or it's busy [ 413.823372][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 413.823383][ T30] audit: type=1400 audit(1789862972.308:1435): avc: denied { write } for pid=8614 comm="syz.5.572" name="configs" dev="configfs" ino=7389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 413.823412][ T30] audit: type=1400 audit(1789862972.308:1436): avc: denied { write } for pid=8614 comm="syz.5.572" name="functions" dev="configfs" ino=7388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 414.133676][ T2262] playstation 0003:054C:09CC.0001: probe with driver playstation failed with error -32 [ 415.145370][ T8617] ima: policy update failed [ 415.145690][ T30] audit: type=1802 audit(1789862973.638:1437): pid=8617 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=failed comm="syz.6.571" res=0 errno=0 [ 415.807241][ T5707] usb 8-1: USB disconnect, device number 4 [ 416.923412][ T30] audit: type=1400 audit(1789862975.368:1438): avc: denied { create } for pid=8630 comm="syz.7.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 416.923446][ T30] audit: type=1400 audit(1789862975.368:1439): avc: denied { listen } for pid=8630 comm="syz.7.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 416.923476][ T30] audit: type=1400 audit(1789862975.368:1440): avc: denied { shutdown } for pid=8630 comm="syz.7.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 416.923499][ T30] audit: type=1800 audit(1789862975.368:1441): pid=8632 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.576" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 416.932701][ T8623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 417.778914][ T2262] usb 9-1: USB disconnect, device number 6 [ 418.091534][ T30] audit: type=1400 audit(1789862976.578:1442): avc: denied { read } for pid=8636 comm="syz.0.578" name="idVendor" dev="configfs" ino=22373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 418.129209][ T30] audit: type=1400 audit(1789862976.618:1443): avc: denied { write } for pid=8636 comm="syz.0.578" name="configs" dev="configfs" ino=7389 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 418.130096][ T30] audit: type=1400 audit(1789862976.618:1444): avc: denied { write } for pid=8636 comm="syz.0.578" name="functions" dev="configfs" ino=7388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 418.204118][ T8641] netlink: zone id is out of range [ 418.204128][ T8641] netlink: zone id is out of range [ 418.204139][ T8641] netlink: zone id is out of range [ 418.204143][ T8641] netlink: zone id is out of range [ 418.204259][ T8641] netlink: zone id is out of range [ 419.370492][ T8647] capability: warning: `syz.5.581' uses 32-bit capabilities (legacy support in use) [ 421.625310][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 421.625323][ T30] audit: type=1400 audit(1789862980.118:1446): avc: denied { unlink } for pid=8648 comm="syz.0.583" name="#8" dev="tmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 422.297347][ T30] audit: type=1400 audit(1789862980.588:1447): avc: denied { write } for pid=8660 comm="syz.8.586" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 422.298286][ T30] audit: type=1400 audit(1789862980.588:1448): avc: denied { open } for pid=8660 comm="syz.8.586" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 422.376226][ T8663] random: crng reseeded on system resumption [ 422.394455][ T30] audit: type=1400 audit(1789862980.888:1449): avc: denied { ioctl } for pid=8662 comm="syz.0.587" path="socket:[22462]" dev="sockfs" ino=22462 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 423.316657][ T8675] file system registered [ 423.316792][ T30] audit: type=1400 audit(1789862981.808:1450): avc: denied { write } for pid=8674 comm="syz.0.591" name="functions" dev="configfs" ino=7388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 423.390870][ T30] audit: type=1400 audit(1789862981.878:1451): avc: denied { read write } for pid=8674 comm="syz.0.591" name="loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 423.390903][ T30] audit: type=1400 audit(1789862981.878:1452): avc: denied { open } for pid=8674 comm="syz.0.591" path="/dev/loop-control" dev="devtmpfs" ino=644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 423.476908][ T30] audit: type=1400 audit(1789862981.968:1453): avc: denied { mount } for pid=8674 comm="syz.0.591" name="/" dev="functionfs" ino=22504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 423.546575][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'. [ 423.546600][ T8679] netlink: 'syz.0.591': attribute type 5 has an invalid length. [ 423.546609][ T8679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.591'. [ 423.672987][ T8679] geneve2: entered promiscuous mode [ 423.673004][ T8679] geneve2: entered allmulticast mode [ 423.887695][ T8663] hwrng_fill thread creation failed [ 423.961078][ T30] audit: type=1400 audit(1789862982.448:1454): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 423.988437][ T8690] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 423.988461][ T8690] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 423.988474][ T8690] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 424.021269][ T5597] ffs_data_put(): freeing [ 424.365637][ T30] audit: type=1400 audit(1789862982.858:1455): avc: denied { set_context_mgr } for pid=8698 comm="syz.0.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 425.549085][ T8699] geneve2: entered promiscuous mode [ 425.549101][ T8699] geneve2: entered allmulticast mode [ 427.330154][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 427.330167][ T30] audit: type=1400 audit(1789862985.818:1457): avc: denied { append } for pid=8712 comm="syz.5.590" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 427.388904][ T30] audit: type=1400 audit(1789862985.878:1458): avc: denied { create } for pid=8726 comm="syz.8.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 427.530197][ T30] audit: type=1400 audit(1789862986.018:1459): avc: denied { bind } for pid=8726 comm="syz.8.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 427.531112][ T30] audit: type=1400 audit(1789862986.018:1460): avc: denied { write } for pid=8726 comm="syz.8.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 427.609033][ T8728] tipc: Failed to obtain node identity [ 427.609055][ T8728] tipc: Enabling of bearer rejected, failed to enable media [ 427.951508][ T30] audit: type=1400 audit(1789862986.438:1461): avc: denied { execute } for pid=8721 comm="syz.6.599" path=2F6D656D66643A0241BBCCEB1416E86D146F536157202864656C6574656429 dev="tmpfs" ino=292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 431.360035][ T8754] netlink: 44 bytes leftover after parsing attributes in process `syz.6.606'. [ 431.360051][ T8754] netlink: 59 bytes leftover after parsing attributes in process `syz.6.606'. [ 431.360060][ T8754] netlink: 59 bytes leftover after parsing attributes in process `syz.6.606'. [ 433.458750][ T30] audit: type=1800 audit(1789862991.948:1462): pid=8766 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.608" name=08 dev="sda1" ino=2049 res=0 errno=0 [ 436.169367][ T30] audit: type=1400 audit(1789862994.658:1463): avc: denied { create } for pid=8777 comm="syz.8.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 436.201771][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.7.612'. [ 436.245568][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.8.615'. [ 439.313575][ T8778] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 439.313599][ T8778] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 439.313612][ T8778] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 439.551275][ T30] audit: type=1400 audit(1789862998.038:1464): avc: denied { mount } for pid=8777 comm="syz.8.615" name="/" dev="hugetlbfs" ino=22924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 439.764245][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.726287][ T30] audit: type=1400 audit(1789862999.218:1465): avc: denied { ioctl } for pid=8794 comm="syz.5.611" path="socket:[22963]" dev="sockfs" ino=22963 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 440.799732][ T30] audit: type=1400 audit(1789862999.288:1466): avc: denied { write } for pid=8794 comm="syz.5.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 440.864540][ T8801] veth1_to_bond: entered promiscuous mode [ 441.001861][ T8801] veth1_to_bond: entered allmulticast mode [ 441.216700][ T30] audit: type=1400 audit(1789862999.688:1467): avc: denied { listen } for pid=8798 comm="syz.8.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 441.319669][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.5.611'. [ 441.523732][ T8794] veth1_to_bond: left allmulticast mode [ 441.523775][ T8794] veth1_to_bond: left promiscuous mode [ 442.746232][ T8809] netlink: 36 bytes leftover after parsing attributes in process `syz.8.622'. [ 442.749094][ T30] audit: type=1400 audit(1789863001.238:1468): avc: denied { shutdown } for pid=8807 comm="syz.8.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 443.045267][ T8812] netlink: 12 bytes leftover after parsing attributes in process `syz.6.617'. [ 446.481273][ T8834] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 446.481298][ T8834] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 446.481310][ T8834] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 446.534157][ T30] audit: type=1400 audit(1789863005.028:1469): avc: denied { append } for pid=8828 comm="syz.5.629" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 447.708453][ T30] audit: type=1400 audit(1789863006.198:1470): avc: denied { connect } for pid=8836 comm="syz.8.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 448.002388][ T5762] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 448.164226][ T5762] usb 9-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 448.164261][ T5762] usb 9-1: no configurations [ 448.164271][ T5762] usb 9-1: can't read configurations, error -22 [ 448.302643][ T5762] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 449.067498][ T32] INFO: task syz.2.352:7563 blocked for more than 143 seconds. [ 449.067515][ T32] Not tainted syzkaller #0 [ 449.067522][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 449.067527][ T32] task:syz.2.352 state:D stack:25688 pid:7563 tgid:7553 ppid:5599 task_flags:0x400140 flags:0x00080002 [ 449.067565][ T32] Call Trace: [ 449.067569][ T32] [ 449.067576][ T32] __schedule+0x1259/0x6920 [ 449.067596][ T32] ? __lock_acquire+0x5c0/0x1f40 [ 449.067617][ T32] ? lock_acquire+0x1d1/0x380 [ 449.067630][ T32] ? __pfx___schedule+0x10/0x10 [ 449.067644][ T32] ? find_held_lock+0x2b/0x80 [ 449.067668][ T32] ? schedule+0x225/0x2c0 [ 449.067686][ T32] schedule+0xdd/0x2c0 [ 449.067701][ T32] do_uevent+0x427/0x530 [ 449.067714][ T32] ? __pfx_do_uevent+0x10/0x10 [ 449.067724][ T32] ? __dlm_new_lockspace+0x1689/0x1fa0 [ 449.067735][ T32] ? dlm_new_user_lockspace+0x60/0x90 [ 449.067747][ T32] ? device_write+0x930/0x1c90 [ 449.067759][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 449.067811][ T32] __dlm_new_lockspace+0x1698/0x1fa0 [ 449.067827][ T32] ? __pfx___dlm_new_lockspace+0x10/0x10 [ 449.067839][ T32] ? __might_fault+0xc5/0x140 [ 449.067856][ T32] ? __pfx_autoremove_wake_function+0x10/0x10 [ 449.067876][ T32] ? rcu_is_watching+0x13/0xc0 [ 449.067894][ T32] dlm_new_user_lockspace+0x60/0x90 [ 449.067909][ T32] device_write+0x930/0x1c90 [ 449.067922][ T32] ? avc_policy_seqno+0x9/0x20 [ 449.067938][ T32] ? __pfx_device_write+0x10/0x10 [ 449.067952][ T32] ? bpf_lsm_file_permission+0x9/0x10 [ 449.067967][ T32] ? security_file_permission+0x76/0x210 [ 449.067982][ T32] ? rw_verify_area+0xce/0x6d0 [ 449.068001][ T32] vfs_write+0x2aa/0x1050 [ 449.068014][ T32] ? __pfx_device_write+0x10/0x10 [ 449.068025][ T32] ? lock_acquire+0x1d1/0x380 [ 449.068037][ T32] ? __fget_files+0x34/0x3d0 [ 449.068052][ T32] ? __pfx_vfs_write+0x10/0x10 [ 449.068063][ T32] ? find_held_lock+0x2b/0x80 [ 449.068078][ T32] ? __fget_files+0x215/0x3d0 [ 449.068092][ T32] ? __fget_files+0x215/0x3d0 [ 449.068109][ T32] ? __fget_files+0x21f/0x3d0 [ 449.068127][ T32] ksys_write+0x12a/0x250 [ 449.068139][ T32] ? __pfx_ksys_write+0x10/0x10 [ 449.068156][ T32] do_syscall_64+0x123/0x790 [ 449.068175][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.068188][ T32] RIP: 0033:0x7ff11479e159 [ 449.068198][ T32] RSP: 002b:00007ff1129d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 449.068210][ T32] RAX: ffffffffffffffda RBX: 00007ff114a26090 RCX: 00007ff11479e159 [ 449.068218][ T32] RDX: 0000000000000068 RSI: 0000200000000100 RDI: 0000000000000004 [ 449.068225][ T32] RBP: 00007ff11483506b R08: 0000000000000000 R09: 0000000000000000 [ 449.068232][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.068239][ T32] R13: 00007ff114a26128 R14: 00007ff114a26090 R15: 00007ffe6ec99d58 [ 449.068256][ T32] [ 449.068285][ T32] [ 449.068285][ T32] Showing all locks held in the system: [ 449.068295][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 449.068304][ T32] #0: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 449.068359][ T32] locks held by getty/5355: 2, on CPU#0: [ 449.068367][ T32] #0: ffff88801d7300a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 449.068395][ T32] #1: ffffc900032262e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 449.068431][ T32] locks held by kworker/0:6/5762: 5, last CPU#0: [ 449.068439][ T32] #0: ffff888024290d40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 [ 449.068473][ T32] #1: ffffc90003fdfd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 [ 449.068506][ T32] #2: ffff88802aff41d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1bb/0x4420 [ 449.068536][ T32] #3: ffff88802b438568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x2b3e/0x4420 [ 449.068567][ T32] #4: ffff88802af95660 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x2b67/0x4420 [ 449.068603][ T32] locks held by syz.2.352/7563: 1, on CPU#0: [ 449.068611][ T32] #0: ffffffff9ba31900 (&ls_lock){+.+.}-{4:4}, at: __dlm_new_lockspace+0xb8/0x1fa0 [ 449.068638][ T32] locks held by dlm_recoverd/7568: 1, on CPU#0: [ 449.068646][ T32] #0: ffff888036caaa18 (&ls->ls_in_recovery){+.+.}-{4:4}, at: dlm_recoverd+0xbd/0x1f90 [ 449.068678][ T32] locks held by syz.0.597/8715: 2, last CPU#0: [ 449.068686][ T32] #0: ffff88807e61a460 (sb_writers#6){.+.+}-{0:0}, at: get_signal+0x1f2a/0x21e0 [ 449.068717][ T32] #1: ffffffff8edec4a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x2090 [ 449.068750][ T32] locks held by syz.7.626/8827: 1, last CPU#0: [ 449.068758][ T32] #0: ffff88802ee8d270 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x255/0xc30 [ 449.106080][ T5762] usb 9-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 449.106106][ T5762] usb 9-1: no configurations [ 449.106114][ T5762] usb 9-1: can't read configurations, error -22 [ 449.106988][ T5762] usb usb9-port1: attempt power cycle [ 449.111388][ T32] locks held by syz.5.631/8841: 1, last CPU#0: [ 449.111399][ T32] #0: ffff8880272fb070 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x255/0xc30 [ 449.111439][ T32] [ 449.111441][ T32] ============================================= [ 449.111441][ T32] [ 449.111463][ T32] NMI backtrace for cpu 0 [ 449.111472][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 449.111485][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 449.111493][ T32] Call Trace: [ 449.111497][ T32] [ 449.111502][ T32] dump_stack_lvl+0x100/0x190 [ 449.111521][ T32] nmi_cpu_backtrace.cold+0x12d/0x151 [ 449.111539][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 449.111554][ T32] nmi_trigger_cpumask_backtrace+0x21f/0x2a0 [ 449.111570][ T32] sys_info+0x141/0x190 [ 449.111582][ T32] watchdog+0xcb1/0x1030 [ 449.111599][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 449.111614][ T32] ? __pfx_watchdog+0x10/0x10 [ 449.111627][ T32] ? __kthread_parkme+0x18f/0x230 [ 449.111648][ T32] ? kthread+0x13a/0x450 [ 449.111663][ T32] ? __pfx_watchdog+0x10/0x10 [ 449.111675][ T32] kthread+0x373/0x450 [ 449.111690][ T32] ? __pfx_kthread+0x10/0x10 [ 449.111705][ T32] ret_from_fork+0x730/0xd60 [ 449.111720][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 449.111733][ T32] ? __switch_to+0x800/0x10f0 [ 449.111749][ T32] ? __pfx_kthread+0x10/0x10 [ 449.111766][ T32] ret_from_fork_asm+0x1a/0x30 [ 449.111785][ T32] [ 449.111795][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 449.708529][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 449.717608][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 449.727642][ T32] Call Trace: [ 449.730895][ T32] [ 449.733799][ T32] dump_stack_lvl+0x100/0x190 [ 449.738459][ T32] vpanic+0x553/0x970 [ 449.742411][ T32] ? __pfx_vpanic+0x10/0x10 [ 449.746886][ T32] panic+0xd1/0xe0 [ 449.750577][ T32] ? __pfx_panic+0x10/0x10 [ 449.754963][ T32] ? nmi_cpu_backtrace+0x79/0x200 [ 449.759960][ T32] ? nmi_trigger_cpumask_backtrace+0x206/0x2a0 [ 449.766084][ T32] ? watchdog.cold+0x1ec/0x234 [ 449.770817][ T32] watchdog.cold+0x1fd/0x234 [ 449.775383][ T32] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 449.781161][ T32] ? __pfx_watchdog+0x10/0x10 [ 449.785824][ T32] ? __kthread_parkme+0x18f/0x230 [ 449.790821][ T32] ? kthread+0x13a/0x450 [ 449.795037][ T32] ? __pfx_watchdog+0x10/0x10 [ 449.799685][ T32] kthread+0x373/0x450 [ 449.803727][ T32] ? __pfx_kthread+0x10/0x10 [ 449.808292][ T32] ret_from_fork+0x730/0xd60 [ 449.812857][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 449.817939][ T32] ? __switch_to+0x800/0x10f0 [ 449.822590][ T32] ? __pfx_kthread+0x10/0x10 [ 449.827155][ T32] ret_from_fork_asm+0x1a/0x30 [ 449.831908][ T32] [ 449.834957][ T32] Kernel Offset: disabled [ 449.839259][ T32] Rebooting in 86400 seconds..