last executing test programs: 20m31.895825121s ago: executing program 32 (id=150): openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001400)="7f", 0x1}], 0x1}, 0x0) ioctl$TIOCSLCKTRMIOS(r0, 0x80047437, &(0x7f00000010c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xb}, {0xfff2, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b928, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x4f62b68f6fa20884}, {0xc, 0xb}, {0xa, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c080) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)={0xc8, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x800}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x1400}]}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x81}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x2}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x21}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xc8}}, 0x0) io_setup(0x2, &(0x7f00000001c0)) openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x80081, 0x0) utime(&(0x7f0000000100)='./cgroup/../file0\x00', &(0x7f0000000200)={0x1000, 0x8000000000000000}) 19m29.858363173s ago: executing program 33 (id=330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8010, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES32=r6, @ANYBLOB="40004c060a0002ffffffffffffff7f000c000e800500010003000000fa3bbb0d8b0a70dbf3c79bf5f160e810a118208f919f200d9d480d8e1a87bf6260bb2f9a0e8239bbf8b2e3f5063c2c4533776dfbd2d8f95c78bfa3073127a8f8b33c6e1a757fe2b08cec3fe390d574c2eaade29f537d319ac86c7d1dec46f3926ac6151f0e289bbfe630965adcb2b002"], 0x34}, 0x1, 0x0, 0x0, 0x40000c0}, 0x840) r7 = openat(0xffffffffffffff9c, 0x0, 0x80940, 0xd2) close(r7) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) 18m14.896140437s ago: executing program 1 (id=486): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200200, 0x0, 0x4, 0xffffffff, 0x401}) r0 = socket$inet(0x2, 0x1, 0x6) unshare(0x20000400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x62001, 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x8000000, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r2, r1, 0x0, 0xfffa83) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x402, 0x12) sendfile(r1, r3, 0x0, 0x7fff) pselect6(0x9a, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f00000000c0)={0x0, 0x0}) ioctl$KVM_SET_ONE_REG(r7, 0x4010aeac, &(0x7f0000000180)=@other={0x20300002000006a7, 0x0}) madvise(&(0x7f0000da6000/0x4000)=nil, 0x4000, 0xc) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 18m12.061709028s ago: executing program 1 (id=492): r0 = userfaultfd(0x801) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, 0x0, 0xfffffffffffffffd, {0x0, 0x1, 0x3}, 0xff}, 0x18) close(0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0xa8, @private2={0xfc, 0x2, '\x00', 0x1}, 0xc1d}, 0x1c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) 18m9.280575162s ago: executing program 1 (id=498): fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000003c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 18m9.087046896s ago: executing program 1 (id=500): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) setfsgid(0xee00) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x24040844) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x14, r3, 0x705, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40003}, 0x4000800) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x20010, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x4c, 0x1a, 0x198, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) r5 = syz_open_dev$ublk_chdev(&(0x7f0000002e80), 0x0, 0x101100) pread64$ublk_ch(r5, 0x0, 0x0, 0x10001) 18m7.837674752s ago: executing program 1 (id=505): syz_open_dev$usbfs(0x0, 0x77, 0x3501) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x4000010, r1, 0xc36ff000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x70c0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r4, 0xc004ae0a, &(0x7f0000000240)) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x6}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)=""/105, 0x69}], 0x1}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r7, &(0x7f0000000080)='4', 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="03e275319d84d894a613a9da3cfc0d0000000400", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32, @ANYRES32=r7, @ANYBLOB="0200"/28], 0x50) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r7) 18m4.224656948s ago: executing program 1 (id=510): fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 18m3.169110968s ago: executing program 34 (id=510): fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) 16m21.902431202s ago: executing program 2 (id=814): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)={0x3, 0x0, [{0x5000, 0xb6, &(0x7f0000000040)=""/182}, {0x4000, 0xa8, &(0x7f0000000100)=""/168}, {0xd000, 0x5f, &(0x7f00000001c0)=""/95}]}) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000340)={0x0}) ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000380)={r1, 0x1}) r2 = add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @desc4}, &(0x7f0000000500)={0x0, "ac3c8b3c686ef15666b2a025c4c21e1b00e06b607c4d9c420277aad22c32b7e2f169887a776142af67adca0990abe4cbedf25ef544a7d67860385e2815c68e91", 0x15}, 0x48, 0x0) request_key(&(0x7f00000003c0)='.request_key_auth\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)='4((]2(-\x00', r2) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(0xffffffffffffffff, 0xc0106441, &(0x7f0000000580)={0x0, 0x0, 0x7}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x10}, 0xc) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000880)={&(0x7f0000000600)="e01883768f4e5f86395907b1d0e6906a76af4e01473096d53c6a0ad302e14d9b219c88bf84a4ccf96af628b10a89a43af9abc999df8a620262f337155064729b2a3a951f08caf8815f82e29b3d11c933eb44aa210d9f114bfa53354ee057ca4f662948741e63c3a2aff44c207319766aa5b9ecffa0ee94c49d1bc8b35c41e2fa7a8bc3307447e3a184df41efe4ae213cea209171a0adafb3052ded4fd50911e1dad65d05e505004676efac2c2dab1c8be8e2b265c700b9f818b54933dce45eea", &(0x7f00000006c0)=""/128, &(0x7f0000000740)="baa68a35827c2fecd4a425cf67b1c04a062ff1d637081e725cfceba43d6bac31957ab648cadb024130ece8978e7ce5a0f3fe43ddba7601a070b7538d92bbed36", &(0x7f0000000780)="39c3e35d15caa935ec9858cc8e7286e6686ae00c2e219a1fba2b326babf2c5ff899f2168419a8809b1bc961502ff3ca6abc3e2523424e5ea578a26a57cf27eca4e39e3f684b9f2bc0aa0d87983afa440d6e3d9567d63f65b9205a93a114831ecdbefaab4d35c3887ee2b84342bafcca77e14fd5474f17bb79d6fb0cc8649142a46aa1de8d4bc515a7e2dd6b86264e8bedb98e56d4f10c20ac6", 0x7, r4}, 0x38) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f00000008c0)={0x0, @reserved}) syz_clone3(&(0x7f0000000bc0)={0x20000, &(0x7f0000000980), &(0x7f00000009c0)=0x0, &(0x7f0000000a00), {0xf}, &(0x7f0000000a40)=""/167, 0xa7, &(0x7f0000000b00)=""/110, &(0x7f0000000b80)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) r6 = syz_open_procfs(r5, &(0x7f0000000c40)='net/raw6\x00') getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) ioctl$IOMMU_VFIO_GET_API_VERSION(r6, 0x3b64) fsync(r0) ioctl$DRM_IOCTL_MODE_SETGAMMA(r6, 0xc02064a5, &(0x7f0000000dc0)={0x0, 0x4, &(0x7f0000000d00)=[0xf5, 0x9, 0x3, 0x5], &(0x7f0000000d40)=[0x7, 0xbb40, 0x400, 0x4, 0x8, 0x9, 0x562, 0x2], &(0x7f0000000d80)=[0xf]}) ioctl$EVIOCSKEYCODE(r6, 0x40084504, &(0x7f0000000e00)=[0x101, 0x5]) preadv2(r3, &(0x7f0000000fc0)=[{&(0x7f0000000e40)=""/115, 0x73}, {&(0x7f0000000ec0)=""/224, 0xe0}], 0x2, 0x9, 0x6, 0x2) preadv(r0, &(0x7f0000001480)=[{&(0x7f0000001000)=""/141, 0x8d}, {&(0x7f00000010c0)=""/211, 0xd3}, {&(0x7f00000011c0)=""/207, 0xcf}, {&(0x7f00000012c0)=""/34, 0x22}, {&(0x7f0000001300)=""/113, 0x71}, {&(0x7f0000001380)=""/238, 0xee}], 0x6, 0x8, 0x77) ioctl$VIDIOC_QUERYSTD(r6, 0x8008563f, &(0x7f0000001500)) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001540), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r6, 0xc0585609, &(0x7f0000001600)={0xa05, 0x7, 0x4, 0x4000, 0x2, {0x77359400}, {0x5, 0x0, 0x9d, 0xf2, 0x7, 0xb7, "c870e45b"}, 0xfffffff3, 0x4, {}, 0x41, 0x0, r6}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(r6, 0x1f, &(0x7f0000001680)={0x28, 0x1, 0x0, r6, &(0x7f0000001580)="db9e19f79b8ec678a0a28d7aba9259ba2d5a964a1915db6774dd9b6cb4cd0c090fa5aaf509a6faf5a3a85f0e6e4ff07b86a3984dbd995ff050682893e1e1810693", 0x1, 0x8, 0x0, 0x1, {0x0, 0x0, r7, 0x3}}, 0x1) r8 = openat$cgroup(r6, &(0x7f00000016c0)='syz1\x00', 0x200002, 0x0) openat$cgroup(r8, &(0x7f0000001700)='syz1\x00', 0x200002, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r6, 0x4038564f, &(0x7f0000001740)={{0x0, @addr=0x4}, 0x8, 0x7fffffffffffffff}) rmdir(&(0x7f0000001780)='./file0\x00') 16m21.640543673s ago: executing program 2 (id=816): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x40, 0x107, 0x70bd30, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x4, 0x25}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0x20008014) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc4c85512, &(0x7f0000000280)={{0xb, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000001440)={0x17, 0x10, &(0x7f0000000f80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x8}, [@exit, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x40}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @alu={0x7, 0x1, 0x3, 0x6, 0x7, 0x30, 0xfffffffffffffffc}]}, 0x0, 0x7f, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8d}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r4}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r6, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8001}]}, 0x38}}, 0x20008800) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000100)={r7, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x20c00, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0xa, 0x0, 0x0, 0x8, 0x4}]}, {0x0, [0x61, 0x61, 0x114aa71c0e9a3703, 0x5f]}}, 0x0, 0x2a, 0x0, 0x1, 0x6}, 0x28) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r5, 0x7, 0x1, 0xbe, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r8, &(0x7f0000000b00)=[{&(0x7f0000000000)="c1", 0x1}, {&(0x7f00000001c0)="06000000", 0x4}, {&(0x7f00000006c0)}], 0x3) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x4c, r9, 0x1, 0x70bd25, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) 16m18.885345401s ago: executing program 2 (id=822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x2) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x1966, 0x4000, 0x3, 0x1df}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xba9c, 0x10, 0x3, 0x279}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x259, 0x400, 0x2, 0x388}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x23d7, 0x2000, 0x2, 0x19f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5a07, 0x100, 0x2, 0xb0}}], 0x4, &(0x7f0000001980)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x3, 0x9d7, 0x0, &(0x7f0000000980)=@buf_4k="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"}}, &(0x7f0000001a00)) r4 = io_uring_setup(0x577d, &(0x7f00000001c0)={0x0, 0x9c62, 0x1, 0xfffffffa, 0x2a5}) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x5}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) gettimeofday(0xfffffffffffffffe, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r6, &(0x7f0000000380)={0xc, 0x8, 0x144, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x1, @loopback, 0x100009}, {0xa, 0x4e22, 0xfffffffc, @mcast1}}}, 0x48) io_uring_enter(r4, 0x0, 0xcb, 0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 16m17.701075169s ago: executing program 2 (id=823): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) setfsgid(0xee00) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x24040844) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x14, r3, 0x705, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40003}, 0x4000800) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x20010, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x4c, 0x1a, 0x198, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) r5 = syz_open_dev$ublk_chdev(&(0x7f0000002e80), 0x0, 0x101100) pread64$ublk_ch(r5, 0x0, 0x0, 0x10001) socket$inet(0x2, 0x1, 0x4) 16m14.791845322s ago: executing program 5 (id=832): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r1, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7419189c2ac30927a2a05c2c1f"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x50}}, 0x20000010) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x2028000, &(0x7f0000000280)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_loose}, {@cache_fscache}, {@mmap}, {@cache_readahead}, {@cache_loose}, {@version_9p2000}, {@access_uid={'access', 0x3d, 0xee01}}, {@access_any}, {@aname={'aname', 0x3d, 'GPL\x00'}}], [{@obj_role={'obj_role', 0x3d, '\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x61, 0x32, 0x35, 0x64, 0x63, 0x31, 0x35], 0x2d, [0x64, 0x65, 0x36, 0x39], 0x2d, [0x62, 0x32, 0x33, 0xce0f0d18476c3be9], 0x2d, [0x5bdca4c131b00b05, 0x65, 0x31, 0x39], 0x2d, [0x65, 0x64, 0x61, 0x31, 0x37, 0x66, 0x63, 0x32]}}}, {@appraise_type}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x66, 0x62, 0x30, 0x64, 0x35, 0x38, 0x33], 0x2d, [0x63, 0x63, 0x32, 0x36], 0x2d, [0x62, 0x33, 0x66, 0x65], 0x2d, [0x34, 0x38, 0x37, 0x35], 0x2d, [0x2c, 0x5e, 0x39, 0x65, 0x37, 0x62, 0x31, 0x39]}}}, {@flag='sync'}]}}) r5 = fsmount(r4, 0x1, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r5, 0x16, 0x0, @void}, 0x10) r6 = socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000000)=0x6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x50, r1, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "7419189c2ac30927a2a05c2c1f"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x50}}, 0x20000010) (async) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) (async) mount$9p_tcp(&(0x7f0000000080), &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x2028000, &(0x7f0000000280)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_loose}, {@cache_fscache}, {@mmap}, {@cache_readahead}, {@cache_loose}, {@version_9p2000}, {@access_uid={'access', 0x3d, 0xee01}}, {@access_any}, {@aname={'aname', 0x3d, 'GPL\x00'}}], [{@obj_role={'obj_role', 0x3d, '\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x61, 0x32, 0x35, 0x64, 0x63, 0x31, 0x35], 0x2d, [0x64, 0x65, 0x36, 0x39], 0x2d, [0x62, 0x32, 0x33, 0xce0f0d18476c3be9], 0x2d, [0x5bdca4c131b00b05, 0x65, 0x31, 0x39], 0x2d, [0x65, 0x64, 0x61, 0x31, 0x37, 0x66, 0x63, 0x32]}}}, {@appraise_type}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x66, 0x62, 0x30, 0x64, 0x35, 0x38, 0x33], 0x2d, [0x63, 0x63, 0x32, 0x36], 0x2d, [0x62, 0x33, 0x66, 0x65], 0x2d, [0x34, 0x38, 0x37, 0x35], 0x2d, [0x2c, 0x5e, 0x39, 0x65, 0x37, 0x62, 0x31, 0x39]}}}, {@flag='sync'}]}}) (async) fsmount(r4, 0x1, 0x80) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, r5, 0x16, 0x0, @void}, 0x10) (async) socket$igmp6(0xa, 0x3, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000000)=0x6, 0x4) (async) 16m14.085718636s ago: executing program 5 (id=834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$FBIOBLANK(r3, 0x4611, 0x2) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x1966, 0x4000, 0x3, 0x1df}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xba9c, 0x10, 0x3, 0x279}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x259, 0x400, 0x2, 0x388}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x23d7, 0x2000, 0x2, 0x19f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5a07, 0x100, 0x2, 0xb0}}], 0x4, &(0x7f0000001980)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x4}, 0x0, 0x0, '\x00', {0x3, 0x9d7, 0x0, &(0x7f0000000980)=@buf_4k="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"}}, &(0x7f0000001a00)) io_uring_setup(0x577d, &(0x7f00000001c0)={0x0, 0x9c62, 0x1, 0xfffffffa, 0x2a5}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x1, 0x1, 0x5}) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) gettimeofday(0xfffffffffffffffe, 0x0) 16m13.061586726s ago: executing program 5 (id=836): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf4e) (async) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)}, 0x408c0) r1 = socket$inet(0x2, 0x80001, 0x84) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) (async) syz_emit_ethernet(0x46, &(0x7f0000000080)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b33883", 0x10, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_ra={0xc0}}}}}}, 0x0) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x200040, 0x0) (async) mkdir(&(0x7f00000003c0)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./debugfs\x00', &(0x7f0000000480)='debugfs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debugfs/ubifs/chk_index\x00', 0x2, 0x0) write(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001a0)='./nfsd/max_block_size\x00', 0x1, 0x0) write(r3, &(0x7f00000000c0)="3b548c99760cdf41eaa056a5e06abfa5ac7926a4527f57afb69e01dd4a5555392c8b1d65c44b79e8784ac3d3dea7f237f9f2", 0x32) (async) r4 = dup3(0xffffffffffffffff, r1, 0x80000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'ip6_vti0\x00', 0x20}) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 16m12.832422862s ago: executing program 5 (id=837): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) setfsgid(0xee00) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x24040844) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x14, r3, 0x705, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40003}, 0x4000800) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x20010, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x4c, 0x1a, 0x198, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) r5 = syz_open_dev$ublk_chdev(&(0x7f0000002e80), 0x0, 0x101100) pread64$ublk_ch(r5, 0x0, 0x0, 0x10001) socket$inet(0x2, 0x1, 0x4) 16m12.256931284s ago: executing program 2 (id=838): r0 = syz_usb_connect$hid(0x5, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000004032150d0100000000000109022400010000e80b0900000000030002000921fd7f0001226103090581038936010a70"], 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1022, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7, 0x10, 0xff, {0x8, 0xb, 0x1, 0x1, 0x1, 0x25, 0x30, 0xf2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0xa, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xe3, 0x2, 0xa, {0xa, 0x25, 0x25, 0x2, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x9, 0x3, 0xd, {0xa, 0x25, 0x25, 0x1800000, 0x7f, 0x8}}}}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x5, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000004032150d0100000000000109022400010000e80b0900000000030002000921fd7f0001226103090581038936010a70"], 0x0) (async) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000200)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x499, 0x1022, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7, 0x10, 0xff, {0x8, 0xb, 0x1, 0x1, 0x1, 0x25, 0x30, 0xf2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xa, 0xa, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xe3, 0x2, 0xa, {0xa, 0x25, 0x25, 0x2, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x9, 0x3, 0xd, {0xa, 0x25, 0x25, 0x1800000, 0x7f, 0x8}}}}}}}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) rmdir(&(0x7f0000000000)='./file0\x00') (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 16m11.68388884s ago: executing program 5 (id=841): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0x4}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x200, 0xc0000001, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xcdbf0d3388237035, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x20004015) fanotify_mark(0xffffffffffffffff, 0x2, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="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"}) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) recvmmsg(0xffffffffffffffff, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f00000066c0)}, 0x9a9}], 0x1, 0x21, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$P9_RLERROR(r4, &(0x7f00000000c0)={0xd, 0x7, 0x1, {0x4, ':\x1b\\.'}}, 0xd) 16m10.900281944s ago: executing program 2 (id=844): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = socket(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', r1, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) socket$can_bcm(0x1d, 0x2, 0x2) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) 16m10.509007665s ago: executing program 35 (id=844): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = socket(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', r1, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50) socket$can_bcm(0x1d, 0x2, 0x2) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, &(0x7f0000000180)) 16m8.851256677s ago: executing program 5 (id=848): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) setfsgid(0xee00) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x24040844) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x14, r3, 0x705, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40003}, 0x4000800) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x20010, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x4c, 0x1a, 0x198, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) r5 = syz_open_dev$ublk_chdev(&(0x7f0000002e80), 0x0, 0x101100) pread64$ublk_ch(r5, 0x0, 0x0, 0x10001) socket$inet(0x2, 0x1, 0x4) 16m8.749167816s ago: executing program 36 (id=848): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) setfsgid(0xee00) setresgid(0xffffffffffffffff, 0x0, 0xffffffffffffffff) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x40000000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x24040844) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x14, r3, 0x705, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40003}, 0x4000800) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x20010, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) chroot(&(0x7f0000000040)='./file0/file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x4c, 0x1a, 0x198, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xc}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev, [], [0x0, 0x0, 0xffffff00]}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2125099, 0x0) r5 = syz_open_dev$ublk_chdev(&(0x7f0000002e80), 0x0, 0x101100) pread64$ublk_ch(r5, 0x0, 0x0, 0x10001) socket$inet(0x2, 0x1, 0x4) 10m36.631524506s ago: executing program 7 (id=1922): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4008054}, 0x40) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xd) readv(r5, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/171, 0xab}], 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000380)=0x15) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0xd5d8, 0x1, 0x4, 0x8, 0x401, 0x0}) sched_setscheduler(r6, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000009b80)=""/102392, 0x18ff8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mount(0x0, 0x0, 0x0, 0x208000, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 10m35.442707763s ago: executing program 7 (id=1927): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x212a7, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) creat(0x0, 0x49) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e23, 0x400, @private1, 0x401}}}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000dc0)={0x0, 0xe, 0xac, 0xfe01, 0xf147, 0x9, 0x400, 0x5, {r1, @in={{0x2, 0x4e23, @multicast2}}, 0x5, 0x6, 0x0, 0x4, 0x4}}, &(0x7f0000000e80)=0xb0) 10m34.444778342s ago: executing program 7 (id=1933): bpf$MAP_CREATE(0x1800000000000000, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000500)={0x19980330}, &(0x7f0000000080)={0x200002, 0x200002, 0x801, 0x101, 0x7, 0x2}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010f00000000000000006b"], 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 10m31.231651155s ago: executing program 7 (id=1945): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x58, 0x9c68, 0x8, 0x83, 0x1ff, 0x4, 0x10001, 0x0, 0x3, 0x3ff, 0x2, 0xfffffffd, 0xd, 0x0, 0x5, 0x2, 0xbdf, 0x7, 0xce6c, 0x81, 0xc000000, 0x8000, 0xa0, 0x7, 0x1, 0x7fff, 0x4000, 0x7, 0x5, 0x6, 0x5, 0x10, 0x400, 0x3, 0xfffffffa, 0x4, 0x3, 0x9, 0xf, 0xe, 0x76f, 0x0, 0x2, 0x800, 0xaeca, 0x1, 0x101, 0x1894dfaa, 0x9, 0x4, 0x8, 0xfffff998, 0x3, 0x2, 0x6a32000, 0x83f, 0x800, 0x2, 0x4, 0xfffffff9, 0x8, 0x6, 0x9, 0x5, 0x28, 0x10001, 0x2, 0xfffffff8, 0xf8e, 0x7fffffff, 0xd, 0x6, 0x6, 0x6, 0x5, 0x5, 0x401, 0x2, 0xffffffff, 0xfffffffc, 0x6af, 0x899, 0x5, 0x7, 0x800, 0x6, 0x401, 0x4, 0x1, 0x4, 0x8, 0x6, 0x2, 0x7fffffff, 0x9, 0xfffffffd, 0x6, 0x401, 0x2, 0x9, 0x10000, 0x800, 0x5, 0x6, 0x6, 0x57b8, 0x3, 0x8000, 0x8, 0x8001, 0x0, 0x8, 0x8, 0x2, 0x34, 0x401, 0x80, 0x8, 0x1, 0x80, 0x1000, 0x9, 0xfffffffd, 0x1, 0xffffffff, 0x200, 0x1, 0x5, 0x1ff, 0x4, 0x320, 0x4, 0x2, 0xd, 0xffffff57, 0x4, 0x4, 0xe, 0x6, 0x1, 0x3, 0x3, 0x7, 0x5, 0xfff, 0x1, 0x0, 0xc, 0x1, 0xffffffc0, 0x7, 0xcc05, 0xa, 0x9, 0x6, 0x7fff, 0x800, 0x1, 0x100, 0xb0000000, 0x4, 0x4d861478, 0xc0, 0x0, 0x1, 0x6, 0x3, 0x0, 0x4, 0x4, 0xa187, 0xffffffff, 0x2b, 0x81e, 0x0, 0x10000, 0x76, 0x2, 0x2, 0x0, 0x3, 0x9, 0x9, 0x8, 0x2f0, 0x3, 0x6, 0x7, 0x80000001, 0x2, 0xd, 0x2, 0xf1, 0x1, 0xa, 0xfffffffb, 0x7, 0x6, 0x8001, 0x7, 0x4, 0x401, 0x3, 0x6, 0x0, 0x2, 0x66, 0x8, 0x200, 0x1, 0x0, 0x0, 0x8000, 0xfffffffb, 0x2, 0x3, 0xaa4e, 0x0, 0x40, 0x2, 0x6, 0x29b3, 0x4, 0xd1dd, 0x800, 0x20000, 0x5, 0x9, 0x7f, 0x7, 0xfffffff9, 0x6, 0x380000, 0xfff, 0x4, 0x100, 0x6b3, 0x1, 0x7, 0x7f0cc9db, 0x401, 0x3, 0x7f, 0x80000001, 0x40, 0x3, 0xeb, 0x1, 0x23, 0x1ff, 0x1, 0x8, 0xdb9, 0x5, 0xba, 0xffffff4c, 0x7, 0xb, 0x0, 0x4, 0x1, 0x3, 0x7fffffff, 0x2, 0xffffffff, 0x8000, 0x100, 0x7, 0x800, 0xfffffffa, 0xf, 0x8, 0x100, 0x9, 0x0, 0x0, 0x9, 0x548, 0x7, 0x0, 0x8, 0x8001, 0x10001, 0x2, 0xae, 0xffffffff, 0x9, 0x4d2, 0xfffffffa, 0x8, 0x3, 0x8, 0x1ff, 0x10000, 0x4, 0x5, 0x0, 0x8, 0x9, 0x407, 0x7, 0x9, 0x5604, 0x7ff, 0x3, 0x0, 0x100, 0x9, 0x7fffffff, 0x7f, 0xfffffcb4, 0x10001, 0x2, 0x8, 0xd5b, 0x6, 0x0, 0x3, 0xd, 0x7, 0x9, 0x6, 0x200, 0x800, 0x3, 0xffffff42, 0xffffff4e, 0x6, 0x5, 0x24f8, 0x2, 0x754e, 0x2aaa, 0x4, 0x5, 0x9, 0x6, 0xf, 0x7, 0x0, 0x200, 0xffffffc0, 0x6, 0xfffffff4, 0x18, 0x9, 0x9, 0x113, 0x2, 0x6, 0x3, 0x7, 0xb, 0x4, 0x7ff, 0xfffffff8, 0x1, 0x3, 0x1df, 0x2b18f9e1, 0x8, 0x5, 0x0, 0xe, 0x4, 0x1, 0x100, 0x9, 0x3, 0x3, 0x5, 0x6cb1, 0xa, 0x0, 0x5, 0x2000, 0x439186ac, 0x401, 0x1, 0x416, 0x4, 0x20f, 0x73a6dd5f, 0xec9, 0xfc, 0x1, 0x4, 0x4, 0x1, 0x2683, 0x80, 0x941, 0x10001, 0x9, 0x1, 0x46, 0xff, 0x5849, 0xff, 0xf, 0x1000, 0x8, 0x4, 0xae, 0xffffffff, 0xc, 0x800, 0x2, 0x23, 0x3, 0x37, 0x40, 0xd97, 0x3c, 0x80, 0x9, 0x60f3af9e, 0x9, 0x4, 0x4, 0x1000, 0x4b, 0x4, 0xa, 0x9, 0x401, 0x3, 0x6469, 0x7, 0x7fffffff, 0x6, 0x0, 0x4, 0x9, 0x8, 0x10000, 0x3, 0x6, 0x8, 0xfffffffc, 0x3, 0x8, 0x7, 0x9, 0x1, 0x4, 0x40, 0x401, 0x2, 0xfffffff7, 0x3, 0x5, 0xfffffffc, 0x10000, 0x7, 0xd, 0xf0a, 0x9, 0x10000, 0x2d2, 0x3, 0x401, 0x80000001, 0x3, 0xe, 0x4, 0x4, 0x9, 0x0, 0xff9df84e, 0xd78, 0x1, 0x8, 0xc, 0x10000, 0xfffffffe, 0xfffffffa, 0xd3, 0x2, 0x3, 0xe1e, 0x2, 0x8, 0x6, 0x40, 0x5, 0x9, 0x2, 0x7ff, 0x4, 0x200, 0x5, 0xa, 0x4, 0x3cdbbe6b, 0x1, 0x5cfa, 0x80, 0x5, 0x8, 0x8, 0x100, 0xa265, 0x0, 0x3b, 0x6, 0x731, 0x3, 0x5, 0x81, 0x1, 0x1, 0x6, 0x7, 0x127a346, 0x4, 0xe, 0x7, 0x6, 0x0, 0x0, 0x0, 0x8001, 0x5, 0x0, 0x2, 0x4, 0x0, 0x5, 0xb9a, 0x4, 0x4db00000, 0x2, 0x2, 0x8, 0x1b629af1, 0x1, 0x7, 0x800, 0xc90, 0x280, 0x0, 0x0, 0x3, 0x4, 0x80000000, 0x5, 0x0, 0x4, 0xa8, 0x0, 0x2, 0x5, 0x1, 0x7, 0xf, 0x0, 0x3, 0x3, 0x6, 0x6, 0x8, 0x1, 0x2, 0x3, 0x6, 0x100, 0xfffffc00, 0x40, 0x2b4, 0x3, 0x8, 0x2, 0x7, 0x5, 0x80, 0x1c1, 0x9, 0x80, 0xffffff35, 0x1167, 0x4, 0x3, 0x0, 0x2, 0x4, 0x6, 0x401, 0x3, 0x7f, 0xe4b, 0x0, 0x1000, 0xff, 0x4, 0x8001, 0x0, 0xffffffff, 0x7, 0x9, 0x1, 0xfffffffd, 0x401, 0xff2, 0x7, 0x3, 0x4, 0x8, 0xffffffff, 0x6, 0x2, 0x4, 0x3, 0x80000000, 0x7fff, 0x7, 0x6, 0x5, 0xffffffc0, 0x6, 0xffffffff, 0x8, 0x3, 0x0, 0x200, 0x6, 0x10000, 0x6, 0x1, 0x3, 0x9, 0x7, 0x1, 0x4, 0x3ff, 0x7, 0x3, 0x6, 0x7ff, 0xe81, 0x2, 0x8727, 0xb, 0x34b, 0x0, 0x2, 0x6, 0x9, 0x9, 0x200, 0x7, 0xbd13, 0xc, 0x231f, 0x9814, 0x0, 0x4, 0xc91, 0x8, 0x9, 0xffffffff, 0x9, 0x7, 0x0, 0x0, 0x7, 0x6, 0x0, 0x2, 0x3, 0x6b4fb954, 0x8000, 0x90, 0xfffffffa, 0x200, 0x6, 0x5, 0x1, 0x8a, 0x2, 0x4, 0x4, 0x6, 0x0, 0x317, 0x9, 0x2, 0x3, 0xb, 0x4, 0x10001, 0xffff, 0x8, 0x726, 0x9, 0x5, 0x3, 0x4, 0x1, 0x0, 0x0, 0xc, 0x0, 0x800, 0x7, 0x6, 0x5, 0x2, 0x585b, 0x80, 0x7, 0x6, 0xfffffff7, 0xff, 0x6, 0x3, 0x9, 0x65cb, 0x7, 0x2, 0x3, 0x1, 0x9, 0x3, 0x1, 0x4, 0x232, 0x0, 0x8b, 0x54, 0x969, 0xfffffffe, 0x10000, 0x1, 0x100, 0x66, 0x7, 0x1, 0x0, 0xa, 0xa8, 0x0, 0x3, 0x3, 0xb5, 0x4, 0x2, 0x0, 0x0, 0x6, 0x9, 0x100, 0x2, 0x200, 0xe093, 0x7, 0x1, 0xea9, 0x1, 0x8, 0x6, 0x80000000, 0x1, 0xb8, 0x7, 0x5, 0x7892, 0x2, 0x7, 0x8, 0x7f, 0x9, 0xffffff75, 0x1, 0xff, 0x2, 0x5, 0x80000000, 0x4, 0x4, 0x19a, 0x6, 0x0, 0x1, 0xfffff7cb, 0x3, 0xfff, 0x27cd, 0x3, 0x2, 0x1, 0x10000, 0x400, 0x7, 0x1, 0x1, 0x1, 0x8, 0xc, 0x401, 0xffffffff, 0x8, 0x1, 0x98000000, 0x1000, 0x4, 0x88, 0xfffffff9, 0x6, 0x1, 0x3, 0x80, 0x80000000, 0x9, 0x9, 0xff, 0x7fff, 0x80, 0x3, 0x6, 0x4, 0x1, 0x9, 0x9, 0xfffffff8, 0x10, 0x7f, 0x2, 0x6, 0x48b4, 0x3, 0x3f, 0xffffffff, 0xfffffff8, 0xc96a, 0x3, 0xfffffffe, 0xffffffff, 0x0, 0x4, 0x5, 0x9, 0x3, 0x38, 0x8, 0x2, 0x80000001, 0x5, 0x100, 0xcb6a, 0x200, 0x7f, 0x81, 0x0, 0xb0f, 0x4, 0xc, 0x8000, 0x2, 0x1, 0x7, 0x5, 0x101, 0x0, 0x7, 0x8, 0x5, 0x4, 0x6, 0x0, 0x26ab, 0x2, 0x3, 0x6, 0xc0b, 0x1ff, 0x2, 0x4, 0x7, 0xffffffff, 0x9, 0x4, 0x7, 0x7d, 0x7fff, 0x7, 0x81, 0x1, 0x1, 0x1, 0x63181ba7, 0x9, 0x7, 0x7fff, 0xfffffff9, 0xc5bc, 0x101, 0x4, 0x3, 0x5, 0x9, 0xc5c, 0x56b, 0x73a, 0x501, 0x5, 0x7, 0x9, 0x7, 0x8, 0x2, 0x0, 0x7f, 0x7, 0x8, 0x9, 0x5, 0x581, 0x1, 0x2d9, 0x5, 0x5, 0x9, 0xfffffeda, 0x80000000, 0x5, 0x4, 0x86, 0x7fffffff, 0x80000001, 0x5, 0x0, 0x1, 0x7f, 0xc4, 0x9, 0x400, 0xffffffff, 0x10000, 0x9, 0x8, 0x1, 0x2, 0x4, 0x4, 0x8000, 0x81, 0x3, 0x3, 0x4, 0xe33, 0xfff, 0x6, 0x3ff, 0x7ff, 0x5, 0x2, 0xfffffffd, 0xc8, 0x5, 0x3, 0x8, 0x2, 0x4, 0x4, 0x4, 0x8, 0x8, 0x9, 0x302, 0x2, 0x8, 0x3, 0x3, 0x5, 0x4, 0x9, 0x8, 0xb1, 0x8, 0x8, 0x2, 0x8813, 0x81, 0x846, 0x36, 0x1, 0x1, 0x8, 0x7974, 0x5, 0x800, 0x1000, 0xfffffffa, 0x25e74c09, 0x9, 0x8, 0x6, 0x1, 0x3, 0x4, 0x3, 0x0, 0x4, 0x1, 0xffff6833, 0x1000, 0x255a, 0xd, 0x3, 0x81, 0x7fffffff, 0x3ff, 0x1, 0xb9, 0x5, 0xa, 0x200, 0x2, 0x89, 0x4, 0x0, 0x4, 0x6], 0x3, 0x400, 0xd}) write(r0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x12ab866, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) 10m30.972447019s ago: executing program 7 (id=1946): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000009540)=[{{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000500)="26fc", 0x2}], 0x1, &(0x7f0000001ac0)=[{0x90, 0x1, 0x2, "4838dd1cd0fb897a5f112b3c31fb9237083239ed05435fbf2ab39ecd33d7866e33acb5f330a2328bb1dafa4da2b051d4e7e3f054e44413bda16f323cc7646f3f0abf057127aff7254f0e8e3c00742de4f493b7a88d09978a6c345aa99c35cffe17653c7492f51681fccbd3a44b514404f420f2870e652e4a15f496cd"}, {0xd8, 0x10e, 0x0, "34dc7f0261de6bb2decd977c25ab18d0d19fc22dc4d68abe4bf24971b07eab3442a9a9b40079a9c534c67de2696df6247fd0cf5ec77f52f7ab930a5ca9b4b28566b4a19d7d2f4b1886f0467e9a65a091102ffc192552a4c2063b2af6184b789dc44c139836f0781e3eae1f6f78840c5343ac4b6fc3b607ad4f5ba63f61ce8c5c26ed4cf30f03a9988ddfafc8a0f5ce523e058b22499d5d5fa9c37c3cd79cc784630cf56cce80f61e7b81aa16b65df663c229de7677e1c60280ab426e9aa87d68be04"}, {0xd0, 0x117, 0xfffffffd, "a10f24a4ed7ccba4952ffd69cbe565212d929b71e32d0b2e1f5eeb6fe81f723c89ce612254b2303ee533f4955b4389c6a6f724c660d25c7000a7472c354297e39a03881d493cc684d55ba6c8af96c40f78a4c36ed1df25907b3f42749da3219071cb00c4c004101655e4f07975957e61a2082aae49a97e9e74d8c504eba12e2cc935c3e510d9a745d71a6df3142935606cc476689b8e2d160589e958aa1f60afa4573876ac43811a6eb1540bcf1aa37d612091fd643d8b9c743d1130fb9385"}, {0x1010, 0x1, 0x4, "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"}, {0xf0, 0x84, 0x0, "a7b4c379d9c340ce422a3a7b60bd48692b9d5be7cf3da828242aaf00b4e10c8d93a9c4c621dd350e2194f4b6b97d89fa2c163fb58faffd14dcf5125d19690b496ce7389679e9ec1ee744b767c68499fd7340fef360e7f1b3e14742a66f0a8813914a3f6dcef1929a2680985765139865cf6088ff23d57430890cfd9657c7cd062a7c5590bc4de85c5e176cb69be8c4c4791bc276e1b578f100f38605c506bee0057a082d51c2fa13f2dafba39adcc588a1e2c8085026a8419c43d1d6364701d2d6063160d2d11f9e59e71e4eee6e46b373218ef2d3159adf70b9d349da58bd"}], 0x1338}}], 0x1, 0x0) 10m29.410454175s ago: executing program 7 (id=1956): ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x420200, 0x1c2) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0xc8) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) getsockopt(r2, 0x1, 0xe, 0x0, &(0x7f0000000140)) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, &(0x7f00000001c0)) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028004001f0004000000080007"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20000, 0x1) 10m29.168855106s ago: executing program 37 (id=1956): ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x420200, 0x1c2) mkdirat(r0, &(0x7f0000000280)='./file0\x00', 0xc8) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x8, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) getsockopt(r2, 0x1, 0xe, 0x0, &(0x7f0000000140)) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, &(0x7f00000001c0)) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028004001f0004000000080007"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20000, 0x1) 2m58.615912437s ago: executing program 8 (id=3307): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r0}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES64], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x1ffffffffffffe, 0x0) read$msr(r2, &(0x7f000004b680)=""/102392, 0x18ff8) kexec_load(0x0, 0x5, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x4010000}], 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000740)={0x0, 0x5f, "9740a34a43eb78081b0dd06bf0c9acf1ed6d5fb09d24c3cadf35594e0f2ad3549d314b83040aa432bc42f5570c8a7b426343886d4e68ad1a789103b11b884fddf7d2671500cc588b5e4890ca2af4c636184b0ce668dcbd692085e046b7ae6c"}, &(0x7f0000000800)=0x67) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000280)={0x21, 0x1, 0x6, 0x9, 0x6c, 0x81}) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f0000000100)={0x4, 0xfffffffffffffff7, 0x60c6eb51, 0x100, 0x5, 0x8, 0xb, 0x4}, &(0x7f0000000140)={0xffffffff, 0x8e, 0x3, 0xc, 0x2, 0x31, 0x6, 0x4ba}, &(0x7f0000000180)={0x36, 0x6, 0x6bc1, 0x280, 0x8, 0xfffffffffffffef8, 0x0, 0x4000000000007}, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={[0x353]}, 0x8}) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x6, 0x4, 0x100000001, 0x3, 0x8000000000000024, 0xffffffffffffffff, 0x6, 0x8, 0x100fff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000a00)={0x0, r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1e, 0x200000000000005e, &(0x7f0000000a40)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x106}, 0x94) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, 0x0, 0x5000) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r6}, 0xc) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0xe, 0x4, 0x2c8, 0xffffffff, 0x0, 0x0, 0x198, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@ip={@local, @rand_addr=0x64010101, 0xffffff00, 0x0, 'veth0_to_team\x00', 'xfrm0\x00', {0xff}, {0xff}, 0x2f, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xff, 0xffffff00, 0xff000000], 0x4e22, 0x4e22, 0x4e21, 0x4e21, 0x0, 0x1000, 0x5, 0x9, 0x9}}}, {{@ip={@broadcast, @multicast1, 0xffffff00, 0xffffffff, 'virt_wifi0\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x67, 0x3}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x2], 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 2m55.450032816s ago: executing program 8 (id=3317): socket$inet_udp(0x2, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x7, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x4c880) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0x750, 0x10000000, 0x0, 'queue1\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) ptrace$setregs(0xf, r1, 0x5da07285, &(0x7f0000000480)="c884ae9b589ff50486b9b43b8eac2c9a4e2c2c6d4cf05977b6e0c1934d142fe774db36638b84a2f6b430e9939faf22a769dc583ce503c99398babc1c8f6720d239e9b5ca06925a457abd20ef73c78dc097ac276ffcc07ef86b2c4864de67640c4476f41a0bc60e24bf58302808e96b862e4c9c7929f75264dbc0553c81b7d2c1f6fd69245be496e957fce0f93700b690151a4cd11284b69adfbc94b771fc985ebce12c84290493f09f5ba1ed74bc1c4a00ecc5f437cb4c8eacdc82aa186b7d6994a5a9594011bf137d1379b744efda31fd9238498880d13e213e2864e7ce36bf054cf3b672240d35ac5cbed5") bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp6(0xa, 0x3, 0x2) memfd_create(0x0, 0x3) socket$key(0xf, 0x3, 0x2) 2m53.629949083s ago: executing program 8 (id=3324): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file2\x00', 0x42, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0xffffffffffffff87) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$cgroup(r0, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) writev(r4, &(0x7f0000000340)=[{&(0x7f0000004100)="32e2148307", 0x5}, {0x0}], 0x2) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r6, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000040)={0x18, r6}) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write(r7, &(0x7f0000000140)='tsc\n', 0x4) ioctl$CEC_DQEVENT(r7, 0xc0506107, &(0x7f0000000040)) 2m48.832556474s ago: executing program 8 (id=3340): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps_rollup\x00') exit(0xfffffffffffffffb) readv(r2, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/107, 0x6b}], 0x1) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffff9, 0x0, 0x100, 0x0, 0x200400}}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000002c0)={0x0, 0x81}) 2m47.518717155s ago: executing program 8 (id=3347): r0 = socket$kcm(0x2, 0x3, 0x2) close(r0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r2, &(0x7f0000000800)=[{&(0x7f0000000340)=""/48, 0x30}, {0x0, 0x30}], 0x2) accept4$x25(r2, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @remote}}}], 0x20}, 0x48000) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001740), 0x6000}], 0x4, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r3, &(0x7f0000000640)='-', 0x1) 2m46.843869367s ago: executing program 8 (id=3348): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x353c7a510d3d58d2, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x0, 0x7, 0x8}, &(0x7f00000000c0)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004500)={0x2020}, 0x2028) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000400"}) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) 2m31.753079448s ago: executing program 38 (id=3348): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x353c7a510d3d58d2, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)=""/229, 0xe5}], 0x1, 0x0, 0x0, 0xf5000000}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x0, 0x7, 0x8}, &(0x7f00000000c0)=0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004500)={0x2020}, 0x2028) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="020000000400"}) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) 55.454941758s ago: executing program 4 (id=3639): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket(0x10, 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) r2 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x189083) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x1, 0x5}) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000380)={0x2, 0xffff, 0x10000, 0x9, 0x12, "a294e700010001001b78d681c441000700"}) write$UHID_INPUT(r3, &(0x7f0000001c40)={0x8, {"45707fe6c13ec0bd03e5ecc69c764fabe1f326e479445fcb5b205f8c3b622124e794bd8e155f4d904619803fd30c7c202046abd5cd2a26aeb32d246533b18dbb112bba54737fa3db4899cfbf40d3f0c487e58766cf9c7b78842142fb94c1a1c94a4b98b0cf1fed922cdbea0b164200d9f958ecd17c75d4b852a384e41367b0298b005bb13c7050e0342de230db20f9a86fe5fff6fff420f03ec7bb88747480857ed08bd7b1c7d178945f1af284d8ca636101edf9c287491e9a33df027ba595b273a8ed5aa6e64d7d3b218b76dc3566398b63e3a8dd3de57079ca6118e08a919f343ead86112d5dea53d5318814f9ddf14081758874653d15a71d0a4b7b18910a03e474208e31ca08e010c28aaa46ecc7c466cb8a06ee6047ca4ae798dc67f6e612afb9aca11097fec86fd5f12ffc6d43e70d749ed8962f2c9d7e88c49cad8b6af5ffca7d38eecafe276f318fdc229937052dee824a11519c054b9716a45703baef71e935632522ac184812313296a6599384899e8015ca5812cd608882ed02e8bc602bb3fb28b7e2bf2128e9fbe97a1e27e074586c6ebb0449ae67c56a96a0b0fcddadb770e57ef7377fed2191d519f222f8a8ce060cbeaa0428c835884f62fca487cd834ad600a5f68c28840878f9f519238abac8ab71c985bd0cdfb5bb1448cb8bb34a59ae512f2deee1f404e0d0c603c615a09be57ef4b94005ee0ef906239d56fa9f310b1be21098ac02db6302c4950496fdbc249d8ffd7cd19e7e26464e712c3184182b57546ae65b77ce55edeae4ee690a0db16b5c26977d36a3369c58ee48588f0ba502f4b584ccfe2e0f60b861930f24db34307ccfb6bf8139b0f8dea88413afc00bcf5582f211348df402e4ae1556627ac3f07dcc77d44d9454ba8eed51139ffdcea61172920c3494ff0d222e6836f8de22d66b10e3875b9b89a48c4ae134e7d81049039d186ea8995b5a289584437c54eb5d03197a7b81e2339f633dbba878eef49eeb85ee34df7789295c5491584af81f8f53487b713becb9a285f674d4c72b188ba6f767ede8ffae64842ecb82b33e799e90f7e977556884664e978e9dc7686c5d1253d4328ac7d95c67258a4fbc267a29b515f09a27a87015756c825f3ce309a2d8b089f2aed4e560d2b154d40ec1fe9cd01ecbfe3b025ff4222891757b376a9cbf325820912f8027ddd963d1ccf549baa912c0cf4817bf1a639dd5b39e56a63d108d914169c72577bc45730e1a9e20529a9f6a8aee9c83da159467c2f77212c1b9eda16804490198a29c61efec362dfa448ffa56a8e120690222f8e56ee6a820feda4173637e34c1aab938637ff82aad4f4f352f12ff9c164a9a7ebaa7a17797764b2bacae18898c33e8c759298eb94db0b8e676b6cc7971e6bd80445472af014f7470656d2566d7ca656acd4135e61dd4545f2d587ea05e6161db82f298bd71d610e50a092b817789473f5da3d32716613a1b09bbda29d501eff30e9993271f20423e74a2a0a1662f99f73c27e855d32796bc68a769e92e2b5d659f2ebd132dc9bfffbf031cd225f7e83e321160b65e55ff38462e8a36a4c533d30302d8102bcb41bec2abab1984b06733d370c2f3363a8d5e30c08f0e74e9e876f72745f574bc80fbe25943896ebe04fe72cfa9de6ee8506ad70c3be65a86eaf4f1fb913821afc85cf985b841d8ca96321dc1a31724f0b599c2ad147713692ecde7238ac87f2f426169bc060281c460f0e1346a92f464ee1f794002d3187a84fc6757f735cbbf42c41a0bb5d99ca04ef3792276491a1232fbcc00f7caf321ac9951a6517eeabaedc207c6b4d9c8f4e5a458d7def6c08a508b66ed3ccae5b544f0b84c9871129c4f6efa804404852993483d06b9227a689cb37a605b43265ca46ebe674073fbca8f83a56856cd6d5cf6e018dea75ca325b2365527888321bc8686069a7dbdc8b22a32c20e07e79eca4f83902a7d02c641bbdbe66a1bc18ff132c770b67964cce6c3800c05a5f0e0253ebd85b825e1c692887e36e4b938ac97507979aa39459ea04070fb078c63c334eabbc1e6444ce1336f98a41045d2a576a049d07368e027b182f6038ad38c3359dd3de78544dc621f9acd4f0540e117162c22e753462c4be2065724c3429b75b4db74e89d84f2795aba986dfc2b1fdcbe98346260cb9748f454a65f4b35b874ac5910184ad0fece39f01cd50663ca2462729f4cfa4e756c0cb6fc397f77c8fdcd7c9e194705e522ca83c625c7fab6ea43aad89db0b6ba71eed901209fc7330e8bc671aff44e5e48502abddc2409b52ece3779d3b19c1832b30abd3f81a9ff0c68fce42ad9c1941f03ce33ed9d37dce98dbe5e1d23519d22087f307e870c82f028e96fef580c4c8c62a32c2776eed31c3d8bddeb43cc53ab8592478253b6de3095d6828bd960989b9ed9879f863d3128f708eebe99f7701823f232444f2ac9830da973b993679e1bb510b2b6939847751cd0d4642d7bb899e21a7c26938fae9f1b149ff19032b5149b4cde635fa99c2160a8cd6f7ad6a5a242b6b31e253e04ea72f1b6f60677ef87fd8e175373c24822a3794134a3124f2e109a59d9db08e48f845254d4b68c42da5b2b2f3c3c528f4281cae4f5117cd0a4658e9ed1dba09656393623fb13fad1cda4eaa602176aba55ba251817017338193512318390fed2a914739050b1a85ca3833f71aa7c4c8fb45158b530c24bd4316f72c9b432a1bd067cd6fc64d646cc06bfbbf990dacb32de9496a8d730cc07171ce548957d435b2f121ea4bb939f70785ebce86f0ad6d89bb71cdc1d0897284ac5d09b95a76ddbfc787a98193b9cbdb1d3ffd89d5f10b9bbb5d41a2a33f73385df351db85c83786db3da558d890f414b21615160dfcb3b46f0958d492bd6d056550c48e5f0c26dd10c1c6ab3b4c6b7d911db5ac463f8e37a8bbcc2295fe79fa109f491a126fff6a1ffe161c7787f746fc8ddea5f19bd20fabca63aa81ae2d725e0b250f27fd7c8431ef6b2827904f62b5ffefc9bfdfb7d55ef6d9883c6ab43c5214b4af237d0df67afcb3d62e80041720952e837e65a22351cb3bf8a9e271568597f79f12144495d31ef72fc36a86e9eb4359790aee88c00b05473ac1a90b8bbe0c0db99570dd9bda506469c258e145841d9c26c9f32722a678cf25657acd124831cfc6a1809e341989b46b6df9db72b18f8be39cd845669bad697bc6bd9bec531047d5fa9e201e1a525c372367f8495280c5d93a62f9fb6f890c59959dcbac7de68e3a417befcd11c722067aac4726e2fdcabce2321ea64d9fbda04ab25dedbcb441faaef2d7bf024fe765591fd0354b2bcaa243a6d741272d4458e433118568944047eeec85d3b0f5b98cbdad0f77371be15af9c1bf928eceb652c581fa638e2131c22d901e6f047a5649ffab5324054389ebeb47ff283e0f0ffe074382e520c632bc440cbeaa68770877516e101709489bcb643b187cb2715e58479074cd32d53077331453fc537d34f87a7ec5e5da686c2f304116394e2bd1e480f5da74a6b725d526b71dc869df8dda3feb44f5463f4c678b6a8be34994ecb0902b3cf269de1adf0da8b8ad340b63a6d0237df7e812b94572adbc196784dfcf33e3e97a17b71a2dad7015fb2d59d4c5838ca551984c7d8ee7bf05ab3edf89029ffd20e373fcb72523bff1e63df721416a068d7b2daa3e17fbba8e831c53e29a94dc483e289cf7406a7b2da28ecc761cf9d847d39b7daa5e34a2a0e4dd19ca5c4a1ab274c7fb9a3057109ec0644579f1af210f8b8133dd87f1abd7c71ac09cfc38699573b35e6d9c5bdaa21f16442b87860e9a7f62ff7c2458160c6a64dc218a258ee06e222e47b3b8e0cf5a5c2d9985f886f32abd129ee056fae9b2e32d0571532eab27fa8f079f9c3e378125f2020064850cfb19c53aa44ad8da6f83a5d827bcb131da9d4dde6e8bd0005ef240c4a02b17051845c35725bd8668c3b27b46355febbf2bf3e5dc5ec650499669cbfe921815396d87b3ede410d492cc73ec7f3a40409eed9358131f1f75e31f24e34af6fc7b6fe2730fd043fd69269d939772e7fef5f2e08b657038a61bc8a8d5688b16029d15aacefe6631a364769d3b9b261bbac584c5ba29b7fbda146fc2ac0f1044f89141a57292b87c7275c6ec6011e5b4b40d1ebc4fc32e7c7ac96aea170225e60c189ed09f8df0a143232bd93c6a9d0fba9783f303b3375b10dde9cd501e68df3734f6278a0389418578834e1912806f07e2fa715bfed4bc707559ee3d4966f51cb652b06b747ae2d79b56759035f01953e76a2dc14c817eb0f97332e68c1d3995dcd84b2329194299944cb2c050991c409fe447ed764a9a3a1182bc30f773b0b415c1898460150c9fec8987c24ba07f87f299d014bd89049b3e9d0c9bf1c6bf159545e52cdfcf9e799b593cb411a3db12396dc9c09ddeddfcb6165a99074e531b7ceddaf344baf2e65225203da537cf09fc073d61d92c13a1c95f93e70050b99850272d0227a89faadfbfae923501b0321984b59229b7dc3c646bf4e381534fcb31783c568deb1a36f95c873df99ccab25446c77d96de6b2c70d5baa5b27786e8027b2f70be117bfdc1b2c6d72a6ab2f9e9a9ce231443d0621448e78393142f90177e7bb52976c668583c64beca45af5ea23a060ec910c6cd89ba7cb9cbbd7627ee56dd2d4d60d994cd63e81f181642b8864afa797aecc22358eea8d059d681a333caa15a8c56918523d465e94668d6ef5f3dcc089bffb13ad76dbf79c44c14f494fda3a55f61c3ed659e20a274297360576fd3230b3e4b7e79ea5b7d78c1def22741a38d17b39c646579d8d5df4cae4eca98d1c0df9371532fe89efc2c375fe433699ee14fcd4cf84495d380663aa10a374dba851536b8159deee491ed2c0e2b920bf7c5627db54562f1ff9c56795245be220391d6b681360fa221efc91faf57d80f15b5e3d881cfa30e1145dbde325c6cc8254938a9eb906d846ec5f76f63443b8f2c50db90b6563900a8f97947c82caec3ce4ee3a5e19fc3324376e4b041b7ed82d9940f7a63f9f962f6d746cb781dbbe16a90649881a77e8ac40677e74d87beadc50df2bc624aa6a707cb50c8ee749db526903f38d706df0201bf503b759d320fa940838ec74c914d0de569ed9ffc6eb2cee026ce22cd50a884bccfadbf503892930c4c4dd7efcb3caaac1695027ed66f3f29c7a1edade721bac0599ff0c400542d31d5dc235ddca7bada9cabcf427e038e5c6a54687b955131c547155036401c7a9a44b3b0437edaa30635b84e37996bcc8594307a6b6bbd8b06daa994cf238925485cd9ace35b3fdfd72788199b6f0570eed2078a4b2f36f511a68566927389ca5ce1c854cb500c2693d7a7917cc8f1215608b7dd2ab22de43a5cc91309a4db2a4c29fdeceaec4a604d13af72a60ea50070626aa6d4cfa418b95edda37a88db5218a1e096436a3551ee712ae137217cd0e941c31e86839e3a9aef8058f5f3196a5006f5a13f3343c0cbf50f9a27c7481e62614a4c51071df6c9a2e0058e534be00c510052e03148c79cc31256359b330c0de91e6130ce741d0472a838463987b9cb80693701825d0af139207f4ff1dc5cb92187170acb8c217f26b1a0544021a8ddce3e31de19b603a5eeca75a7a6234f75d890322a2dca481bc814ba65893cf8e4492094dfe534936a4378e85f680559f4ebce2cccdbea2c0c1e776c4cf50df6b0bc2effcee0f2c76b5c478f9dd02e0eef9399ddf2ba449e03cfd5d33388b0b683c3ce0d301ca1ba4ab", 0x1000}}, 0x1006) syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = syz_open_dev$admmidi(0x0, 0x2, 0x10400) open(0x0, 0x0, 0x157) open_by_handle_at(r5, 0x0, 0xa500) syz_clone3(0x0, 0x0) syz_io_uring_setup(0x3bad, 0x0, &(0x7f0000000740), 0x0, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 52.535708394s ago: executing program 4 (id=3646): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x2, &(0x7f0000000080)=0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, 0x0, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8) umount2(&(0x7f00000002c0)='./file0\x00', 0xc) io_submit(r1, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff0000", 0x6}]) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 51.908648339s ago: executing program 4 (id=3648): syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7f) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000000d0a050000000000000000000a0000020900010073797a310000000004000380d81f864d02ffc2a3761a3348237b4674ce09b99ca0da9505b7f321156be09df7fe1b24496264cb2837bf2456539362e5c435036de627416c003e10eac838eb2c9535c359e01c7e54b0394a77a9dfbb"], 0x24}}, 0x8000) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fsopen(0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000340)=@multiplanar_userptr={0x3, 0x1, 0x4, 0x110000, 0x5, {0x77359400}, {0x3, 0x1, 0x0, 0x2, 0x0, 0xad, "75ff52b2"}, 0x6, 0x2, {0x0}, 0x3ff}) ioctl$vim2m_VIDIOC_QBUF(r3, 0x40045613, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x2000, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0xa) r4 = open(0x0, 0x1031c2, 0x0) ftruncate(r4, 0x2007ffb) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, 0xffffffffffffffff, 0x0) close(r4) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20201) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f00000000c0)={{0x1, 0x2, 0x5, 0x3}, 0x51, 0x4}) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) openat(0xffffffffffffff9c, 0x0, 0x88882, 0x0) 47.659174576s ago: executing program 4 (id=3658): r0 = socket$key(0xf, 0x3, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r4, r3, 0x25, 0x8, @void}, 0x10) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r0, 0x275c8000) syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000000080)=ANY=[@ANYBLOB="1201f2010000001062e901204000010203010300000000004a00050904000000010100000a2401000008000201020904010001010102000009050109080002fc0a072501000e060009ffffffff0102000009040201010102000008240201f9033c7f0724010704021009058229400000000000000000"], 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000100)=0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r7, &(0x7f0000000240)="e3c31bb7", 0x4, 0x90, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) r8 = syz_open_procfs(r6, &(0x7f0000000140)='net/snmp\x00') ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r8, 0xf504, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r8, 0x7ab, &(0x7f00000007c0)={&(0x7f0000000380)={{@local, 0xc}, {@host, 0x4}, 0x400, "27083af624371c881f04908e5c4cfbaaf2c0fe273bc3b685a1caac3f978da2390699eef5a2a6a4a89fedd2d006d86dccd75d5235ef77cb5148587ee5ef9cf83522372a5cac15b6c8831e7fb44a6dc2114f8e1c5d133efb0ca011d240835ae7f179be8e2775c8edca9a239c5f09ccd81c805a3f277fc21704060a74bb0b1df20243b1d52eba8386e58ae14b090c71aa2cd9311127d540e6634f97f61f10174e5ca2de2f97cd21caef6b56d5da428de6f31d92e53242f2e056f7d81436d2c0bde206e492735ce10257aba492179f879212c208a8087a7d1f611153600887240bf7cf49e68865d377a3b0082d2707b23624f3e70442718a226e99437fad02fed8f5237bc82f693526f7e130a9d401b43cb81aef189868ea187bffe85b6fb23946e434d4774588a17fad21646b2ee0c045e527cbfcbebcd31a01d5d18d67d7451bcd1a219aaa8a5783e39969f22271bb6c7e4a51ab7f95bede1e454c34f5fd67ea4e090e3076de1761f33b7b1a346a2e2d800f178333617947899cd25cc4e30b492cfc054dda3c28672e5994515d7c7e1536cf13d0ebea35d7455142cd6dced72806d735910440a0644f115e79b9f6e683b3161487af39be3a4e1c0251947bec1ac60fc4252690a49862484a4838d2c530596ce947d476c6b05e4406e1ace5e747dbfca7395c478de714d66b8b7b8683be6c17606a6f0975d31b299eb8436eaadaabf58114eabd547c870be14372e222c0e47a7eca9f402649c4e665ba9404cf3d4c43f1908ce2b27fed36630454925feb9b960ace2bda9e594bb3dfeb775219c1c24a2af589754160f5310a7dbbcdd81fe847677442dac23722b4a3586c3f95f793878548cfb6b247fd23d6da9142f812dd0e08366c39949d03bee8bbb2c10c673419fd0c26d90621e6776ea2629d50d7208a4e3b3d52077aaf86d77940fa75b3386dfa6f7c01a0fe5a64d1f718da91e87794f492a4433bac0460e39ffd14ddd8fc72a53bfd782689d472b8625a6153099b214feba4e9a8a99f6dbd055356c5c7740a41180157fcac3b3f9010ed1e8f13210c0ecf0f9d2df037accc8b9c93d4e0604a47f83791d4643f71fe79fbd0559df83ddab457dd9dab73601f171532a004c6c90df22680437ef469797d5a1b96e1ff54ebf90a0902139041976b8b789e56bbe47d9333fe51410a54e007f329883db5aa4e6d661397b0fa39b1b77fb9a5ce43630f96dd7701ba19525e7759217c4e1283a01eb0bace2e46e67f458cca88dd47b1864dbf0db941be6729169b7207f28fff16bbc9faf307f7b704d57aa8b91df14124f9c694d5eb141979f9ebfc66f4fe891879053bdfbf44a698c6f480c5dff286c56b70bca42fe8807a17092b425ee714f6d89d76bfb025a6ce7d4565aa8005a16e2a28cd50d60233be1a81d26bfb9787da2d02372f42fe7e0dfddfc54695eb"}, 0x418, 0x5}) sendmsg$key(r0, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020f00001100000000000000000000000f00180008016a009f3f47fd6be90c684f7855b571f449ae4ee2168cf6c00191d9ca123b1f94dec80f5d71c6e05e76c956de23ddf9e88ae1b7466166bcf79bc2a082a028b843eec463cfc730745c2d319f94073f425f4d4a3c5754670b1848219aa48bcbcf85152e73543912c8687cc81576000000000000b65bab5b60f218ca2468ad0ee1c3d7d56b65ba72a97fa1f118832c96fabfa1aa8ddf1ca792415d62a682f25270239cf3709b8ae36241026acf5ced5b3c1acd47c049e9e531b43e1369f4745a38b3447681b134bc8889801000a386eeaf1546a32774d08d2de67ae3f1659c47fff23520c10c855b4fd611bd149dee8489ea2fce880f8ad6a0734a4994d5bb64f9b39515b7cc06be870b233800"], 0x88}}, 0x0) 43.690776024s ago: executing program 4 (id=3669): semget$private(0x0, 0x4000000009, 0x668) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0xfffffffe, 0x5, 0x1, 0x0, &(0x7f0000001600)=0x1000, 0x43000001) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x814d, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x6, 0x11}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000001c0)={r1, 0x0, 0x0}, 0x20) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000300)={{}, 0x4abf, 0x3, 0x8}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x40, '\x00', 0x0, r0, 0x4, 0x0, 0x2}, 0x50) syz_ublk_setup_io_uring(0x1e, &(0x7f0000000400)={0x0, 0xd6b7, 0x4, 0x3, 0x3b0, 0x0, r0}, &(0x7f00000003c0), &(0x7f00000004c0), 0x0) socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) nanosleep(&(0x7f0000000100)={r2, r3+60000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000040)=0x3ff) sendfile(r5, r6, 0x0, 0x10ffff) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000740)={0x0, 0x483aa011, 0x4, 0x0, 0x18, "fe941600faff008000"}) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) 39.399288534s ago: executing program 4 (id=3676): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x22, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r3, &(0x7f0000000180)=""/145, 0x91) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000140)={&(0x7f00002c5000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000}) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 37.203750385s ago: executing program 39 (id=3676): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x22, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x4}, 0x20) connect$l2tp6(r2, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) read(r3, &(0x7f0000000180)=""/145, 0x91) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) ioctl$UFFDIO_MOVE(r3, 0xc028aa05, &(0x7f0000000140)={&(0x7f00002c5000/0x1000)=nil, &(0x7f0000c76000/0x1000)=nil, 0x1000}) sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 19.112353414s ago: executing program 6 (id=3705): setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@sha1={0x1, "54b879d431c1e4a4a1252f12f3bd3830c074cbb1"}, 0x15, 0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000000800010001"], 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xd6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @generic={0x66, 0x0, 0x2, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @exit, @alu={0x7, 0x0, 0xc, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x94) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x41) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000100)="2e9b3d0207e03dc45193df", 0xb}, {&(0x7f0000000140)="00bcebb09848fd", 0x7}], 0x2) openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@gettfilter={0x3c, 0x2e, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1, 0x1}, {0x1, 0xfff1}, {0xd, 0x5}}, [{0x8, 0xb, 0x8a}, {0x8, 0xb, 0x956}, {0x8, 0xb, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x8000) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000010301070000000000000000000500000c0002000000000000000069"], 0x20}, 0x1, 0x0, 0x0, 0x20048001}, 0x5800) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0xc010) setsockopt$inet6_tcp_int(r8, 0x6, 0x24, &(0x7f0000000180), 0x4) r11 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000400)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r11, &(0x7f0000000440)={'full', 0x20, 0xffffffff, 0x20, 0x6}, 0x2f) 18.876122146s ago: executing program 3 (id=3707): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="38000000680001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000084) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0xfb, 0x3a, 0x1000, 0x3a, 0x7f7, 0x1, 0x3}, 0x1c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x109040, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x48c, 0x0, 0x5}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a00eb637488e3fafadbdf250a"], 0x24}}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r12 = socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r13, &(0x7f00000028c0)={0x2020}, 0x2020) getsockopt$XDP_STATISTICS(r12, 0x11b, 0x7, &(0x7f0000000000), &(0x7f00000001c0)=0x30) 18.555245701s ago: executing program 0 (id=3708): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r0, 0x400448df, &(0x7f0000000040)="15a6c21ff4d7a5483905d3bba9a8b457338bafaec92ac684ccaba0c859246ccd70357e1112cef744067bb5bf233ac801ef30d27aaef85d79828ec1daccc374904606f839091179f4c703da9c934afaedbe298ae2f7c26bb79403e203d89ed4a93134e20a8091d8581c519f38a541623b4d75de0cf95604432bac0fdcbfbbfe2f830944") 17.40827991s ago: executing program 3 (id=3710): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt(r0, 0x1b26e590, 0x0, 0x0, 0xfffffffffffffefd) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket(0x10, 0x3, 0x0) timerfd_gettime(r1, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x1c, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x5}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x5}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xefa5}]}}]}, 0x4c}}, 0x2000400c) r6 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xa) r7 = ioctl$LOOP_CTL_ADD(r1, 0x4c80, r6) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f0000000340)={0x3, 0x0, 0x1, 0x0, 0x7fffffff}) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r7) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_int(r9, 0x29, 0x19, 0x0, 0x0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="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"/382, 0x17e}], 0x1, 0x0) 13.913493544s ago: executing program 0 (id=3712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x200000) keyctl$describe(0x6, r0, 0x0, 0xffffffffffffff87) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f6, 0x0) r5 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) writev(r5, &(0x7f0000000340)=[{&(0x7f0000004100)="32e2148307", 0x5}, {0x0}], 0x2) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r7, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) 11.211970976s ago: executing program 9 (id=3713): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, 0xfffffffffffffffc) 11.040732744s ago: executing program 9 (id=3714): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f252"], 0x40}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) socket(0x400000000010, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r3, &(0x7f0000002640)={0x2020}, 0x2020) r7 = socket$inet(0x2, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000040) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@getspdinfo={0x14, 0x25, 0x0, 0x70bd28, 0x25dfdbfd, 0x6, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 10.682507403s ago: executing program 3 (id=3715): io_uring_setup(0x4823, &(0x7f0000000100)={0x0, 0x3ffe, 0x40, 0x2, 0x16d}) pause() bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8000018, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x96}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='n\x00', 0x2) 9.095088322s ago: executing program 0 (id=3716): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_clone3(&(0x7f0000000600)={0x0, &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000340), {0x22}, 0x0, 0x0, &(0x7f0000000480)=""/10, &(0x7f0000000540)=[r1, 0x0, 0x0, r2, r2, r2, r0, r2], 0x8}, 0x58) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a90000000060a030400000000000000000a0000050900010073797a3100000000500004804c001f800b00010074617267657400003c000280240003007339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c2008000240000000000c00010052415445455354000900020033797a3200000000140000001100010000000000000000000100000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) syz_usb_connect(0x5, 0xe4, 0x0, 0x0) r5 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@dev}, &(0x7f00000000c0)=0x14) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0xe64, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x202}, 0x1c) r6 = syz_open_dev$radio(&(0x7f00000005c0), 0x0, 0x2) flock(r6, 0x5) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000380)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) gettid() r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) io_uring_setup(0x7623, &(0x7f00000003c0)={0x0, 0x653f, 0x40, 0x1, 0x1c8}) 8.977300209s ago: executing program 3 (id=3717): r0 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f00000000c0)={0x3ff, @multicast}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000001e00)={0x20, 0x14, 0x4, "348b35e5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f0000000140)={0x2, 0x0, 0x5, 0x3, 0x200000000002, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x8, 0x4}, 0x0, 0x0, 0x0) 8.119357132s ago: executing program 6 (id=3718): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000600)='auxv\x00') sched_setattr(0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30bd, 0x800, 0x2, 0x15a}, &(0x7f0000000400)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) r4 = syz_open_procfs(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) request_key(&(0x7f0000000280)='trusted\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000003c0)='\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/comedi4\x00', 0x80c00, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r9 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r0, r8, &(0x7f0000000180)={0x0, 0x845d, 0x800, 0x400001, 0x257, 0x0, r0}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x1ffe, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca14, 0x8000, 0x100000, 0x3d5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x1000, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xaa1a, 0x80000, 0x2, 0x1a6}}], 0x1, &(0x7f0000000340)={0x2e, 0x3f, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x1, 0x22f, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r11, &(0x7f00000000c0)=""/208, 0xd0, 0x8d35) sendmsg$nl_route(r10, 0x0, 0x0) 8.020311438s ago: executing program 9 (id=3719): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES8=r0, @ANYBLOB="0000000f1405000e000600"/21, @ANYRES32=r1, @ANYRESOCT=r1, @ANYRESDEC=r0], 0x3c}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000009b80)=ANY=[], 0x6c1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000), &(0x7f0000000080)=0x10) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$full(0xffffff9c, &(0x7f00000003c0), 0x8002, 0x0) io_uring_setup(0x2f08, &(0x7f00000007c0)={0x0, 0x768, 0x1000, 0x0, 0x14d, 0x0, r4}) r5 = openat$dsp1(0xffffffffffffff9c, 0x0, 0xc8a01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB(r5, 0xc400941b, &(0x7f0000002c80)={0x0, 0x5, 0x3, 0x1}) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000fe8000000000000000000000000000000004000000000000071800000000040000"], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x1ac, &(0x7f0000000640)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) mount(&(0x7f0000000480)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cramfs\x00', 0x208000, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000001a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r8 = syz_io_uring_setup(0x111, &(0x7f0000000200)={0x0, 0xfec9, 0x400, 0x13, 0x3cc}, &(0x7f0000000040), &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r8, 0x18, &(0x7f0000000000)={0xfffffffffffffc00, r7, 0x0, {0xa, 0xffffffffffffffff}, 0x4}, 0x1) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) write$cgroup_int(r9, &(0x7f0000000180)=0xfe5f, 0x12) socket$nl_route(0x10, 0x3, 0x0) 5.969138963s ago: executing program 9 (id=3720): io_uring_setup(0x4823, &(0x7f0000000100)={0x0, 0x3ffe, 0x40, 0x2, 0x16d}) pause() bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_emit_vhci(0x0, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8000018, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x19}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x96}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='n\x00', 0x2) 5.392234665s ago: executing program 6 (id=3721): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0}) 5.272471623s ago: executing program 3 (id=3722): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x6}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000740)=""/105, 0xfffffe0b}], 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1000000, &(0x7f0000000000/0x1000000)=nil}) madvise(&(0x7f0000000000/0x1000000)=nil, 0x1000000, 0x17) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='7\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000600), 0x100, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000d80)=@raw={'raw\x00', 0x8, 0x3, 0x398, 0x0, 0x43, 0xa0, 0x0, 0x98, 0x300, 0x178, 0x178, 0x300, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'geneve1\x00'}, 0x12a, 0x1b0, 0x1d8, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x0, 0x2}, {0xffffffffffffffff, 0x0, 0x2}}}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c206000000116d00"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f8) write(r3, &(0x7f0000000700)='+ 0 0 0 1 1\n\x00', 0xc) write(r3, &(0x7f0000000800)='+ 1 0 0 1 1\n\x00', 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000140)={0x2, 0x2, 0x6, {0x1, 0x40}, 0xc97365a1, 0xfc0}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x34, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000047}, 0x408c6) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) write$sysctl(r5, &(0x7f00000002c0)='3\x00', 0x2) 4.898332492s ago: executing program 0 (id=3723): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4.647646552s ago: executing program 6 (id=3724): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/snmp\x00') preadv(r0, &(0x7f0000000180), 0x0, 0x2, 0x8) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0x2c58, 0x80, 0x20002, 0x16c}, &(0x7f00000000c0)=0x0, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, 0x0, r3, &(0x7f0000000100)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0x200, 0x1}) syz_ublk_add_dev(r1, r2, 0x0, r3, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003180)=@any_dev={0x1, 0x881, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x14}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioperm(0x2, 0x7ff, 0x8) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) utimes(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/pid_for_children\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_score_adj\x00') readlinkat(r6, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000540)=""/76, 0x4c) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) writev(r7, &(0x7f0000000080)=[{&(0x7f00000001c0)="943f219ca6abd6944c4d32b3ee6d9517417e085692c2bc8a7f4a61417873976c23a15e48a23bfa2933a4e48575415cb36b9548d9ff5406d8d3f744170cdfc900225285a0", 0x44}, {0x0}], 0x2) 4.592594427s ago: executing program 0 (id=3725): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100811212290000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4401adf88700000000000000000000000000ff7f000000000000", @ANYRES32=0x0, @ANYBLOB="14d00400000000002400128009000100626f6e64000000001400028008001f00ffffff7f0800070008000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004003}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_freeze_timeout', 0x800, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$char_usb(r2, &(0x7f0000000040)=""/236, 0xec) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000009c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0x4, 0xfff3}, {0xe, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c4}, 0xc010) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 2.182127047s ago: executing program 9 (id=3726): symlink(0x0, &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x103) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000002c0)={0x30, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x500}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20000884) mount(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x40, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000500)={0x6, 0x0, [{0x40000000, 0xaf8a, 0x4, 0xa, 0x5, 0x7, 0x5}, {0x1, 0xc, 0x3, 0x4, 0xea0, 0x6, 0x8}, {0x80000008, 0x4cc, 0x0, 0x8, 0x7, 0x407, 0x200}, {0xd, 0x0, 0x6, 0x6, 0x3, 0x7, 0xe4}, {0x40000000, 0x5, 0x5, 0x0, 0x6, 0x3, 0x80000000}, {0x80000007, 0x7, 0x0, 0x1, 0x831, 0x4, 0x2}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) dup3(r1, r1, 0x80000) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='.\x02\x00') r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000003f0009000000000000080000030000000400000010000180"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff18110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000019b7040000000000008500000033000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r10, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') 1.569965377s ago: executing program 0 (id=3727): r0 = openat(0xffffffffffffff9c, 0x0, 0x80940, 0x0) close(r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) r9 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) 1.436092054s ago: executing program 9 (id=3728): socket$netlink(0x10, 0x3, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000006740)=[{{&(0x7f00000016c0)=@nl=@kern={0x10, 0x0, 0x0, 0x800}, 0x80, 0x0}}], 0x1, 0x4000) r1 = semget$private(0x0, 0x1, 0x400) semop(r1, &(0x7f00000001c0)=[{0x1, 0x7, 0x1000}], 0x1) semtimedop(0x0, &(0x7f0000000340), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) get_robust_list(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_dbroot\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./my_dbroot', 0xb) close(r3) mkdir(&(0x7f0000000500)='./my_dbroot/alua\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_dbroot/alua/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000900)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) socket$alg(0x26, 0x5, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f0000000380)=""/71, 0x47}], 0x1, 0x15c, 0x0) 1.358098433s ago: executing program 6 (id=3729): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file2\x00', 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0xffffffffffffff87) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$cgroup(r0, 0x0, 0x200002, 0x0) writev(r4, &(0x7f0000000340)=[{&(0x7f0000004100)="32e2148307", 0x5}, {0x0}], 0x2) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r6, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000040)={0x18, r6}) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write(r7, &(0x7f0000000140)='tsc\n', 0x4) ioctl$CEC_DQEVENT(r7, 0xc0506107, &(0x7f0000000040)) 157.390785ms ago: executing program 6 (id=3730): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) add_key(&(0x7f00000001c0)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) write$tun(r0, &(0x7f0000000140)=ANY=[], 0x88) 0s ago: executing program 3 (id=3731): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) statx(0xffffffffffffffff, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0xb19, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, r1, &(0x7f0000000700)) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmctl$SHM_UNLOCK(r2, 0xc) socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400"], 0x50) kernel console output (not intermixed with test programs): 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.858905][ T9627] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1223.879765][ T9627] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1223.898616][ T9627] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.918843][ T9627] usb 10-1: config 0 descriptor?? [ 1223.924397][ T8154] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1223.924431][ T8154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1223.962182][ T5615] usb usb7-port1: unable to enumerate USB device [ 1224.032080][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1224.483979][T20507] key id 000004d2 not found [ 1224.508835][T20507] : renamed from vlan0 (while UP) [ 1224.585061][ T9627] usbhid 10-1:0.0: can't add hid device: -71 [ 1224.595308][ T9627] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1224.628509][ T9627] usb 10-1: USB disconnect, device number 93 [ 1225.357989][T20510] bond0: entered promiscuous mode [ 1225.365581][T20510] bond_slave_0: entered promiscuous mode [ 1225.386759][T20510] bond_slave_1: entered promiscuous mode [ 1225.400330][T20510] batadv0: entered promiscuous mode [ 1225.700920][ T9627] usb 1-1: new low-speed USB device number 112 using dummy_hcd [ 1225.711137][ T5615] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 1225.941247][ T5615] usb 10-1: Using ep0 maxpacket: 32 [ 1225.948547][ T9627] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1225.964244][ T5615] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1225.977790][ T9627] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.994392][ T5615] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.012748][ T9627] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1226.035531][ T5615] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1226.058948][ T9627] usb 1-1: string descriptor 0 read error: -22 [ 1226.069249][ T5615] usb 10-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 1226.082508][ T9627] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1226.095874][ T5615] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.112226][ T9627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.122940][ T5615] usb 10-1: Product: syz [ 1226.135244][ T5615] usb 10-1: Manufacturer: syz [ 1226.149526][ T5615] usb 10-1: SerialNumber: syz [ 1226.602590][T20517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1226.615476][T20517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1226.719178][ T5615] usb 10-1: USB disconnect, device number 94 [ 1227.691196][ T9627] usb 1-1: USB disconnect, device number 112 [ 1228.465386][T11186] net_ratelimit: 81 callbacks suppressed [ 1228.465410][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1228.624828][T11186] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1228.823022][ T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1228.973314][ T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1228.995122][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1229.038508][T20536] SELinux: invalid class [ 1229.140977][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1229.166802][ T30] audit: type=1400 audit(1785599909.741:3302): avc: denied { bind } for pid=20547 comm="syz.4.3378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1229.188818][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1229.198755][ T198] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1229.271068][T20536] SELinux: failed to load policy [ 1229.312844][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1229.350349][ T198] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1229.606689][T20559] overlayfs: failed to resolve './file0': -2 [ 1229.741306][ T5801] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1229.921973][ T5801] usb 5-1: Using ep0 maxpacket: 32 [ 1229.937272][ T5801] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1229.962964][ T5801] usb 5-1: config 0 has no interface number 0 [ 1229.989284][ T5801] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1230.010359][ T5801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.037738][ T5801] usb 5-1: Product: syz [ 1230.048549][ T5801] usb 5-1: Manufacturer: syz [ 1230.059080][ T5801] usb 5-1: SerialNumber: syz [ 1230.079977][ T5801] usb 5-1: config 0 descriptor?? [ 1230.515218][ T5801] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1230.551128][ T5801] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1230.937601][ T30] audit: type=1400 audit(1785599911.511:3303): avc: denied { relabelto } for pid=20584 comm="syz.6.3386" name="32" dev="tmpfs" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 1230.976705][T20585] block nbd6: not configured, cannot reconfigure [ 1231.045910][ T30] audit: type=1400 audit(1785599911.551:3304): avc: denied { associate } for pid=20584 comm="syz.6.3386" name="32" dev="tmpfs" ino=183 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 1231.160018][ T30] audit: type=1800 audit(1785599911.551:3305): pid=20585 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3386" name="max_speed" dev="configfs" ino=82659 res=0 errno=0 [ 1231.188387][T20569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3382'. [ 1231.443887][T20581] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3384'. [ 1232.654407][T20588] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1233.376150][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1233.522854][ T5801] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 1233.547864][T20601] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3390'. [ 1233.557777][ T198] net_ratelimit: 114 callbacks suppressed [ 1233.557792][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1233.575019][ T5801] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1233.599248][T20601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=20601 comm=syz.6.3390 [ 1233.674532][ T198] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1233.688176][ T5801] usb 5-1: USB disconnect, device number 40 [ 1233.831168][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1233.848569][T20607] overlayfs: failed to resolve './file0': -2 [ 1233.888078][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1233.941851][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1233.971117][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1234.011913][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1234.020070][T20613] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3392'. [ 1234.039783][T20604] SELinux: invalid class [ 1234.061272][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1234.083266][T16670] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1234.142310][T20613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=20613 comm=syz.0.3392 [ 1234.220917][ T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1234.267790][T20604] SELinux: failed to load policy [ 1234.953064][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1234.977611][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1234.994200][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1235.007729][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1235.017493][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1236.437080][ T30] audit: type=1400 audit(1785599917.011:3306): avc: denied { getopt } for pid=20659 comm="syz.6.3404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1236.551411][T12228] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1236.742734][T12228] usb 1-1: Using ep0 maxpacket: 8 [ 1236.832372][T12228] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1236.883942][T12228] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1236.939168][T12228] usb 1-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 1236.955651][T20642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3402'. [ 1237.008404][T12228] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 1237.060662][ T5625] Bluetooth: hci1: command tx timeout [ 1237.099734][T12228] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1237.193574][T12228] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1237.295888][T12228] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1237.361125][ T30] audit: type=1400 audit(1785599917.941:3307): avc: denied { write } for pid=20647 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1237.394407][T12228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.737197][T12228] usb 1-1: GET_CAPABILITIES returned 0 [ 1237.773701][T12228] usbtmc 1-1:16.0: can't read capabilities [ 1237.903225][ T30] audit: type=1400 audit(1785599918.481:3308): avc: denied { write } for pid=20671 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1238.056129][ T5736] usb 1-1: USB disconnect, device number 113 [ 1238.259602][T20678] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3406'. [ 1238.372488][T20678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=20678 comm=syz.9.3406 [ 1238.575189][T16666] net_ratelimit: 102 callbacks suppressed [ 1238.575249][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1238.655242][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1238.711442][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1238.801036][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1238.869915][T16670] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1239.055588][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1239.099659][T16666] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1239.123540][ T30] audit: type=1400 audit(1785599919.691:3309): avc: denied { write } for pid=20696 comm="syz.0.3409" name="0x409" dev="configfs" ino=13149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1239.162793][ T5625] Bluetooth: hci1: command tx timeout [ 1239.231473][T12228] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 1239.249167][ T30] audit: type=1400 audit(1785599919.811:3310): avc: denied { write } for pid=20696 comm="syz.0.3409" name="yuyv" dev="configfs" ino=24238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1239.352089][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1239.392511][T16666] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1239.425362][ T30] audit: type=1400 audit(1785599919.911:3311): avc: denied { write } for pid=20696 comm="syz.0.3409" name="header" dev="configfs" ino=24227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1239.483561][T12228] usb 7-1: Using ep0 maxpacket: 16 [ 1239.525044][T12228] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1239.551415][ T10] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1239.570090][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1239.584012][ T30] audit: type=1400 audit(1785599920.001:3312): avc: denied { write } for pid=20696 comm="syz.0.3409" name="ss" dev="configfs" ino=24236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1239.614457][T12228] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1239.661276][T12228] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1239.694389][T12228] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1239.727845][ T30] audit: type=1400 audit(1785599920.011:3313): avc: denied { create } for pid=20696 comm="syz.0.3409" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 1239.763659][T12228] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.825918][T12228] usb 7-1: config 0 descriptor?? [ 1239.845823][ T30] audit: type=1400 audit(1785599920.011:3314): avc: denied { write } for pid=20696 comm="syz.0.3409" name="ss" dev="configfs" ino=24236 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1239.883018][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1239.949660][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1240.016912][T20629] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.037846][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1240.065555][ T30] audit: type=1400 audit(1785599920.011:3315): avc: denied { write } for pid=20696 comm="syz.0.3409" name="header" dev="configfs" ino=24214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1240.110889][T20629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.134709][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.156831][T20629] bridge_slave_0: entered allmulticast mode [ 1240.181965][T20629] bridge_slave_0: entered promiscuous mode [ 1240.205792][ T10] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 1240.254532][T20629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.275628][ T10] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 1240.300333][T20629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.347479][T20629] bridge_slave_1: entered allmulticast mode [ 1240.397886][T20629] bridge_slave_1: entered promiscuous mode [ 1240.555495][T20629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.624089][T20629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1240.650400][T20695] comedi comedi3: aio_iiro_16: I/O port conflict (0x100,8) [ 1240.687183][ T5801] usb 7-1: USB disconnect, device number 84 [ 1240.825342][T20629] team0: Port device team_slave_0 added [ 1240.861088][T20629] team0: Port device team_slave_1 added [ 1241.001070][ T10] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1241.020296][T20629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1241.051588][T20629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.163770][T20629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1241.201793][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1241.211025][ T5625] Bluetooth: hci1: command tx timeout [ 1241.250363][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1241.300183][T20720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1241.321505][T20720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1241.331164][T20629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1241.341898][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1241.370937][T20629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.417660][ T10] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1241.445780][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.502631][T20629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.514963][ T10] usb 1-1: config 0 descriptor?? [ 1241.708743][T20629] hsr_slave_0: entered promiscuous mode [ 1241.739818][T20629] hsr_slave_1: entered promiscuous mode [ 1241.820836][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 1241.840414][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1241.887269][ T10] usb 1-1: USB disconnect, device number 114 [ 1242.088868][T20729] input: syz0 as /devices/virtual/input/input31 [ 1243.291108][ T5625] Bluetooth: hci1: command tx timeout [ 1243.644882][T11186] net_ratelimit: 128 callbacks suppressed [ 1243.645075][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1244.310029][T11186] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1244.850312][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1245.152049][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1245.206250][ T5598] usb 5-1: USB disconnect, device number 41 [ 1245.240993][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1245.312603][ T5598] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1245.334666][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1245.358995][ T5598] spcp8x5 5-1:1.0: device disconnected [ 1245.380969][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1245.503968][T18852] usb 10-1: new high-speed USB device number 95 using dummy_hcd [ 1245.521254][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1246.071259][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1246.109196][ T8697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1246.234080][T18852] usb 10-1: Using ep0 maxpacket: 32 [ 1246.259859][T18852] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.298273][T18852] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1246.335104][T18852] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1246.356302][T18852] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.401599][T18852] usb 10-1: Product: syz [ 1246.425435][T18852] usb 10-1: Manufacturer: syz [ 1246.451581][T18852] usb 10-1: SerialNumber: syz [ 1246.578509][T18852] usb 10-1: config 0 descriptor?? [ 1246.729630][T20743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3420'. [ 1247.378090][ T5736] usb 10-1: USB disconnect, device number 95 [ 1247.864328][T20629] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.141845][T20756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3421'. [ 1248.156347][T20758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=20758 comm=syz.0.3421 [ 1248.791749][T16670] net_ratelimit: 88 callbacks suppressed [ 1248.791809][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1248.851765][T20629] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.871296][T11292] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1248.900859][T11292] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1248.910648][T11292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1249.060843][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1249.301754][ T8154] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1249.361060][T11292] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1249.394163][T20629] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.433313][ T8154] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1249.482073][ T8154] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1249.532602][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1249.704186][T20629] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.914759][T20772] gadgetfs: bound to dummy_udc driver [ 1250.172104][ T5736] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 1250.209585][ C1] gadgetfs: connected [ 1250.223818][ T5736] gadgetfs: disconnected [ 1250.364218][T20771] gadgetfs: suspended from state 2 [ 1250.567298][T20793] overlayfs: failed to resolve './file0': -2 [ 1250.580831][ T5736] usb 1-1: device not accepting address 115, error -71 [ 1250.793092][T20800] overlayfs: failed to resolve './file0': -2 [ 1251.206649][T20629] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1251.219777][T20629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1251.232112][T20629] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1251.245116][T20629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1251.256433][T20629] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1251.634320][T20629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1251.664566][T20629] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1251.700486][T20629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1252.166437][T20629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1252.323151][T20825] overlayfs: failed to resolve './file0': -2 [ 1253.133542][T20629] 8021q: adding VLAN 0 to HW filter on device team0 [ 1253.221153][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1253.228809][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1253.302818][T20821] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3437'. [ 1253.317500][T11292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1253.324762][T11292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1253.555205][T20829] syzkaller1: entered promiscuous mode [ 1253.573670][T20829] syzkaller1: entered allmulticast mode [ 1253.801389][T16666] net_ratelimit: 96 callbacks suppressed [ 1253.801425][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1253.879450][T16666] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1254.036027][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1254.105332][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1254.151036][T16670] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1254.340964][ T8154] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1254.586895][ T8154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1255.723362][ T8154] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1255.859258][T11292] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1255.914932][T11292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1256.090308][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1256.090335][ T30] audit: type=1400 audit(1785599936.661:3322): avc: denied { read } for pid=20853 comm="syz.4.3444" name="file2" dev="tmpfs" ino=1576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1256.167378][ T5736] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 1256.390988][ T5736] usb 10-1: Using ep0 maxpacket: 16 [ 1256.425990][ T5736] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.480555][ T5736] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1256.513907][ T5736] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1256.548064][ T5736] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1256.832499][ T5736] usb 10-1: SerialNumber: syz [ 1257.125773][ T5736] usb 10-1: 0:2 : does not exist [ 1258.074296][T20629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1258.083955][T20880] Bluetooth: MGMT ver 1.23 [ 1258.277024][T20629] veth0_vlan: entered promiscuous mode [ 1258.337676][T20629] veth1_vlan: entered promiscuous mode [ 1258.683212][ T5736] usb 10-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1258.762800][T20629] veth0_macvtap: entered promiscuous mode [ 1258.841034][T20629] veth1_macvtap: entered promiscuous mode [ 1258.851026][T16666] net_ratelimit: 44 callbacks suppressed [ 1258.851060][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1258.936258][ T5736] usb 10-1: USB disconnect, device number 96 [ 1258.958840][ T8154] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1259.013504][ T8154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1259.109548][T17433] udevd[17433]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 1259.177250][T20629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1259.241248][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1259.301137][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1259.316225][T20629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1259.362250][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1259.410858][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1259.433002][ T8154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.482750][T11292] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1259.531208][T16666] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.568165][T16666] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.602781][ T8154] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1259.651070][T16666] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1259.661989][ T8154] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1260.135282][T11292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.186699][T11292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1260.327230][T20896] overlayfs: failed to resolve './file0': -2 [ 1260.378621][T11292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1260.419066][T11292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.164728][T20921] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1262.187603][T20921] SELinux: failed to load policy [ 1263.931430][T11186] net_ratelimit: 67 callbacks suppressed [ 1263.931468][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1263.953410][T11186] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1264.171757][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1264.230080][T11186] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1264.371338][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1264.394373][T16666] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1264.586112][T11292] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1264.612414][T11292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1264.647652][T20938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1264.752663][T11292] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1264.789928][T11292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1266.242726][T20960] /dev/sg0: Can't lookup blockdev [ 1267.875656][T20972] syzkaller0: entered promiscuous mode [ 1267.912925][T20972] syzkaller0: entered allmulticast mode [ 1268.733191][ T30] audit: type=1400 audit(1785599949.311:3323): avc: denied { create } for pid=20984 comm="syz.3.3474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1268.985603][T16670] net_ratelimit: 57 callbacks suppressed [ 1268.985633][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1268.989528][ T30] audit: type=1400 audit(1785599949.561:3324): avc: denied { write } for pid=20943 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1269.014959][T16670] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1269.223528][T20987] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3472'. [ 1269.302260][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1269.328103][T20987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1269.372622][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1269.427082][ T8145] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1269.488063][ T8145] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1269.653387][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1269.776839][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1269.841001][T21005] FAULT_INJECTION: forcing a failure. [ 1269.841001][T21005] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.871313][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1269.918561][ T30] audit: type=1400 audit(1785599950.491:3325): avc: denied { write } for pid=21003 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1269.957575][T21005] CPU: 0 UID: 0 PID: 21005 Comm: syz.6.3478 Tainted: G L syzkaller #0 PREEMPT(full) [ 1269.957606][T21005] Tainted: [L]=SOFTLOCKUP [ 1269.957612][T21005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1269.957624][T21005] Call Trace: [ 1269.957631][T21005] [ 1269.957638][T21005] dump_stack_lvl+0x100/0x190 [ 1269.957666][T21005] should_fail_ex.cold+0x5/0xa [ 1269.957694][T21005] should_failslab+0xc2/0x120 [ 1269.957717][T21005] __kmalloc_noprof+0xfc/0x820 [ 1269.957736][T21005] ? rcu_is_watching+0x12/0xc0 [ 1269.957761][T21005] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1269.957789][T21005] tomoyo_realpath_from_path+0xb6/0x690 [ 1269.957813][T21005] tomoyo_path_number_perm+0x23c/0x580 [ 1269.957836][T21005] ? tomoyo_path_number_perm+0x22e/0x580 [ 1269.957860][T21005] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1269.957907][T21005] ? find_held_lock+0x2b/0x80 [ 1269.957922][T21005] ? __fget_files+0x215/0x3d0 [ 1269.957939][T21005] ? hook_file_ioctl_common+0x140/0x440 [ 1269.957957][T21005] ? __fget_files+0x215/0x3d0 [ 1269.957979][T21005] ? __fget_files+0x21f/0x3d0 [ 1269.957999][T21005] security_file_ioctl+0xd3/0x230 [ 1269.958026][T21005] __x64_sys_ioctl+0xb7/0x210 [ 1269.958053][T21005] do_syscall_64+0x115/0x870 [ 1269.958073][T21005] ? clear_bhb_loop+0x40/0x90 [ 1269.958093][T21005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.958112][T21005] RIP: 0033:0x7f575759e019 [ 1269.958126][T21005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.958142][T21005] RSP: 002b:00007f57584cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1269.958160][T21005] RAX: ffffffffffffffda RBX: 00007f5757825fa0 RCX: 00007f575759e019 [ 1269.958171][T21005] RDX: 0000200000000500 RSI: 00000000c058565d RDI: 0000000000000003 [ 1269.958181][T21005] RBP: 00007f57584cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.958190][T21005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.958200][T21005] R13: 00007f5757826038 R14: 00007f5757825fa0 R15: 00007ffdebae4eb8 [ 1269.958223][T21005] [ 1269.958238][T21005] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1271.881013][T12228] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1272.383368][T12228] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1272.392224][T12228] usb 1-1: config 0 has no interface number 0 [ 1272.416173][T12228] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1272.466075][T12228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.503306][T12228] usb 1-1: Product: syz [ 1272.525977][T12228] usb 1-1: Manufacturer: syz [ 1272.547923][T12228] usb 1-1: SerialNumber: syz [ 1272.640667][T12228] usb 1-1: config 0 descriptor?? [ 1272.906954][T12228] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1272.950042][T12228] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1273.143919][T12228] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1273.186424][ T30] audit: type=1400 audit(1785599953.761:3326): avc: denied { write } for pid=21016 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1273.218562][T12228] usb 1-1: media controller created [ 1273.381329][T21029] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3484'. [ 1273.467583][T12228] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1273.588743][T21084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3495'. [ 1274.024089][T11292] net_ratelimit: 73 callbacks suppressed [ 1274.024110][T11292] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1274.085214][T12228] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1274.115712][T11292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1274.277552][ T30] audit: type=1400 audit(1785599954.851:3327): avc: denied { write } for pid=21086 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1274.310458][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1274.357716][ T198] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1274.428791][T12228] usb 1-1: USB disconnect, device number 117 [ 1274.476670][T21095] fuse: Bad value for 'user_id' [ 1274.519329][T21095] fuse: Bad value for 'user_id' [ 1274.540894][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1274.741363][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1274.788999][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1274.941098][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1274.995264][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1275.042322][T21103] binder: 21102:21103 ioctl c0306201 200000004a40 returned -22 [ 1275.134632][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1275.484046][ T30] audit: type=1400 audit(1785599956.061:3328): avc: denied { read write } for pid=21112 comm="syz.9.3505" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 1275.562808][T21113] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3505'. [ 1275.570983][T12228] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1275.610956][ T30] audit: type=1400 audit(1785599956.091:3329): avc: denied { open } for pid=21112 comm="syz.9.3505" path="/419/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 1275.706124][ T30] audit: type=1400 audit(1785599956.121:3330): avc: denied { ioctl } for pid=21112 comm="syz.9.3505" path="/419/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 1275.791330][T12228] usb 4-1: Using ep0 maxpacket: 32 [ 1275.908881][T21118] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1276.064359][T12228] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1276.096118][T12228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.141828][T12228] usb 4-1: Product: syz [ 1276.170951][T12228] usb 4-1: Manufacturer: syz [ 1276.185973][T12228] usb 4-1: SerialNumber: syz [ 1276.226069][T12228] usb 4-1: config 0 descriptor?? [ 1276.276110][T12228] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1276.323902][T12228] dvb-usb: bulk message failed: -22 (4/0) [ 1276.344095][T12228] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1276.402706][T12228] dvb-usb: bulk message failed: -22 (5/0) [ 1276.410984][T21092] Bluetooth: hci0: command 0x0406 tx timeout [ 1276.438033][T12228] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1276.521046][T21111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3504'. [ 1276.542110][T12228] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1276.597275][T21132] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20002 [ 1276.620867][ T5615] usb 10-1: new full-speed USB device number 97 using dummy_hcd [ 1276.733676][T12228] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1276.764592][T21133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1276.786446][ T5615] usb 10-1: not running at top speed; connect to a high speed hub [ 1276.822391][ T5615] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 254, changing to 4 [ 1276.838509][T12228] usb 4-1: media controller created [ 1276.878063][ T5615] usb 10-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1276.915783][ T5615] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.953362][T12228] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1276.954491][ T5615] usb 10-1: Product: syz [ 1277.029655][ T5615] usb 10-1: Manufacturer: syz [ 1277.057745][ T5615] usb 10-1: SerialNumber: syz [ 1277.125174][T21136] binder: 21135:21136 ioctl c0306201 200000004a40 returned -22 [ 1277.133801][T12228] usb 4-1: selecting invalid altsetting 3 [ 1277.167491][T12228] ttusb2: set interface to alts=3 failed [ 1277.509518][T12228] DVB: Unable to find symbol tda10086_attach() [ 1277.574520][T12228] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1277.658131][T12228] dvb-usb: bulk message failed: -22 (4/0) [ 1277.674364][ T5615] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 1277.727254][ T10] IPVS: starting estimator thread 0... [ 1277.738943][T12228] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1277.798173][T12228] dvb-usb: bulk message failed: -22 (5/0) [ 1277.840785][T12228] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1277.852165][T21145] IPVS: using max 41 ests per chain, 98400 per kthread [ 1279.204380][T16666] net_ratelimit: 52 callbacks suppressed [ 1279.204443][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1279.361825][ T5615] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1279.410952][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1279.607046][T16666] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1279.735892][T12228] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1279.901397][ T5615] usb 10-1: USB disconnect, device number 97 [ 1279.976012][T21160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1280.001957][T12228] usb 4-1: USB disconnect, device number 8 [ 1280.027775][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1280.101606][T16670] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1280.195622][T20556] udevd[20556]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 1280.371631][T11292] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1280.426450][T12228] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1280.445023][T11292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1280.510950][T21169] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3523'. [ 1280.611434][T21169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3523'. [ 1280.615726][ T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1280.773748][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1280.859572][T21165] program syz.3.3520 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1281.103026][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1281.239087][T21179] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3526'. [ 1281.986059][T21183] binder: 21181:21183 ioctl c0306201 200000004a40 returned -22 [ 1282.460589][T21171] netlink: 128 bytes leftover after parsing attributes in process `syz.9.3524'. [ 1284.263010][ T198] net_ratelimit: 41 callbacks suppressed [ 1284.263045][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1284.451075][ T198] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1284.572560][ T30] audit: type=1400 audit(1785599965.141:3331): avc: denied { write } for pid=21210 comm="syz.0.3532" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1284.602247][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1284.650881][ T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1284.671726][ T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1284.720929][ T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1284.779649][T11292] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1284.810915][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1284.850948][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1284.866393][T11186] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1286.578670][T21230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1286.641826][T12228] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1286.894136][T21234] FAULT_INJECTION: forcing a failure. [ 1286.894136][T21234] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.924828][T21234] CPU: 1 UID: 0 PID: 21234 Comm: syz.6.3539 Tainted: G L syzkaller #0 PREEMPT(full) [ 1286.924861][T21234] Tainted: [L]=SOFTLOCKUP [ 1286.924867][T21234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1286.924878][T21234] Call Trace: [ 1286.924885][T21234] [ 1286.924892][T21234] dump_stack_lvl+0x100/0x190 [ 1286.924920][T21234] should_fail_ex.cold+0x5/0xa [ 1286.924939][T21234] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1286.924968][T21234] should_failslab+0xc2/0x120 [ 1286.924992][T21234] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1286.925015][T21234] ? skb_clone+0x190/0x400 [ 1286.925042][T21234] skb_clone+0x190/0x400 [ 1286.925067][T21234] netlink_deliver_tap+0xaed/0xcc0 [ 1286.925103][T21234] netlink_unicast+0x62b/0x850 [ 1286.925124][T21234] ? __pfx_netlink_unicast+0x10/0x10 [ 1286.925141][T21234] ? __pfx_sock_has_perm+0x10/0x10 [ 1286.925170][T21234] netlink_sendmsg+0x8b0/0xda0 [ 1286.925192][T21234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1286.925213][T21234] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1286.925242][T21234] ____sys_sendmsg+0xa4d/0xbe0 [ 1286.925269][T21234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1286.925289][T21234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1286.925319][T21234] ? rcu_is_watching+0x12/0xc0 [ 1286.925345][T21234] ? ___sys_sendmsg+0x19d/0x1e0 [ 1286.925366][T21234] ? kfree+0x1e5/0x6c0 [ 1286.925394][T21234] ___sys_sendmsg+0x190/0x1e0 [ 1286.925414][T21234] ? __pfx____sys_sendmsg+0x10/0x10 [ 1286.925456][T21234] ? __pfx___might_resched+0x10/0x10 [ 1286.925484][T21234] __sys_sendmmsg+0x20c/0x440 [ 1286.925511][T21234] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1286.925533][T21234] ? ksys_write+0x190/0x250 [ 1286.925579][T21234] ? fput+0x79/0x100 [ 1286.925599][T21234] ? ksys_write+0x1ac/0x250 [ 1286.925625][T21234] ? __pfx_ksys_write+0x10/0x10 [ 1286.925655][T21234] __x64_sys_sendmmsg+0x9c/0x100 [ 1286.925678][T21234] ? lockdep_hardirqs_on+0x78/0x100 [ 1286.925699][T21234] do_syscall_64+0x115/0x870 [ 1286.925718][T21234] ? clear_bhb_loop+0x40/0x90 [ 1286.925740][T21234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.925758][T21234] RIP: 0033:0x7f575759e019 [ 1286.925773][T21234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.925791][T21234] RSP: 002b:00007f57584cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1286.925809][T21234] RAX: ffffffffffffffda RBX: 00007f5757825fa0 RCX: 00007f575759e019 [ 1286.925821][T21234] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1286.925832][T21234] RBP: 00007f57584cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1286.925843][T21234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1286.925852][T21234] R13: 00007f5757826038 R14: 00007f5757825fa0 R15: 00007ffdebae4eb8 [ 1286.925876][T21234] [ 1286.928226][T21234] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3539'. [ 1287.355747][T12228] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1287.385740][T21235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=21235 comm=syz.0.3538 [ 1287.421379][T21241] FAULT_INJECTION: forcing a failure. [ 1287.421379][T21241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1287.446983][T12228] usb 4-1: config 12 has an invalid interface number: 99 but max is 0 [ 1287.466509][T21234] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3539'. [ 1287.493012][T12228] usb 4-1: config 12 has no interface number 0 [ 1287.502666][ T198] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1287.536431][T21241] CPU: 0 UID: 0 PID: 21241 Comm: syz.9.3540 Tainted: G L syzkaller #0 PREEMPT(full) [ 1287.536468][T21241] Tainted: [L]=SOFTLOCKUP [ 1287.536476][T21241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1287.536488][T21241] Call Trace: [ 1287.536496][T21241] [ 1287.536504][T21241] dump_stack_lvl+0x100/0x190 [ 1287.536539][T21241] should_fail_ex.cold+0x5/0xa [ 1287.536567][T21241] _copy_to_user+0x32/0xd0 [ 1287.536599][T21241] simple_read_from_buffer+0xcb/0x170 [ 1287.536625][T21241] proc_fail_nth_read+0x1af/0x230 [ 1287.536660][T21241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1287.536695][T21241] ? rw_verify_area+0xce/0x6d0 [ 1287.536725][T21241] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1287.536757][T21241] vfs_read+0x1e4/0xb40 [ 1287.536794][T21241] ? __pfx_vfs_read+0x10/0x10 [ 1287.536826][T21241] ? __fget_files+0x215/0x3d0 [ 1287.536856][T21241] ? __fget_files+0x21f/0x3d0 [ 1287.536890][T21241] ksys_read+0x12a/0x250 [ 1287.536930][T21241] ? __pfx_ksys_read+0x10/0x10 [ 1287.536968][T21241] do_syscall_64+0x115/0x870 [ 1287.536994][T21241] ? clear_bhb_loop+0x40/0x90 [ 1287.537005][ T198] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1287.537021][T21241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.537045][T21241] RIP: 0033:0x7fc3e2d5e84e [ 1287.537065][T21241] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1287.537085][T21241] RSP: 002b:00007fc3e3c0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1287.537105][T21241] RAX: ffffffffffffffda RBX: 00007fc3e3c0f6c0 RCX: 00007fc3e2d5e84e [ 1287.537116][T21241] RDX: 000000000000000f RSI: 00007fc3e3c0f0a0 RDI: 0000000000000005 [ 1287.537125][T21241] RBP: 00007fc3e3c0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1287.537135][T21241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.537145][T21241] R13: 00007fc3e3026038 R14: 00007fc3e3025fa0 R15: 00007ffc496028a8 [ 1287.537170][T21241] [ 1287.784954][T21242] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3541'. [ 1287.859731][T12228] usb 4-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 50676, setting to 64 [ 1287.863847][ T198] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1287.970075][ T198] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1288.049205][T12228] usb 4-1: config 12 interface 99 has no altsetting 0 [ 1288.106661][T12228] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 1288.163809][T12228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.201772][T21255] binder: 21252:21255 ioctl c0306201 200000004a40 returned -22 [ 1288.219289][T12228] usb 4-1: Product: syz [ 1288.255847][T12228] usb 4-1: Manufacturer: 膂醘폁챓솪볙论셒貅朔箂搴踀謙붲춈䰜䲾 [ 1288.316691][T12228] usb 4-1: SerialNumber: syz [ 1288.693084][T12228] usb 4-1: no audio or video endpoints found [ 1288.754693][T12228] usb 4-1: USB disconnect, device number 9 [ 1289.713589][ T198] net_ratelimit: 71 callbacks suppressed [ 1289.713622][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1289.915042][ T198] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1290.034133][ T8697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1290.133067][T21274] netlink: 'syz.6.3549': attribute type 14 has an invalid length. [ 1290.617355][ T8697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1290.811016][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1290.992498][ T8697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1291.154786][ T8697] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1291.313298][ T8697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1291.544479][T21287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1292.198503][T21288] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1292.281844][ T8697] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1292.422982][ T8697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1292.537320][T21292] netlink: 'syz.6.3553': attribute type 1 has an invalid length. [ 1292.609470][ T30] audit: type=1400 audit(1785599973.181:3332): avc: denied { append } for pid=21294 comm="syz.4.3555" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1292.821147][T12228] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1292.853451][T21296] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1292.900810][ T5801] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1292.927300][T21296] bond2 (unregistering): Released all slaves [ 1292.991234][T12228] usb 1-1: Using ep0 maxpacket: 16 [ 1293.036823][ T30] audit: type=1400 audit(1785599973.611:3333): avc: denied { write } for pid=21259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.085048][ T5598] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1293.155019][T12228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1293.174450][ T5801] usb 5-1: Using ep0 maxpacket: 8 [ 1293.211711][ T5801] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1293.246459][T12228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.276682][ T5801] usb 5-1: config 31 has an invalid interface number: 152 but max is 0 [ 1293.352321][T12228] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1293.371033][ T5598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1293.383453][ T5801] usb 5-1: config 31 has no interface number 0 [ 1293.383510][ T5801] usb 5-1: config 31 interface 152 has no altsetting 0 [ 1293.423282][ T5801] usb 5-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=6b.29 [ 1293.533694][T12228] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1293.543758][ T5801] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1293.571449][ T5598] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.573943][ T5801] usb 5-1: Product: syz [ 1293.588001][T12228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.625838][T12228] usb 1-1: config 0 descriptor?? [ 1293.638908][ T5801] usb 5-1: Manufacturer: syz [ 1293.651198][ T5598] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 1293.688702][ T30] audit: type=1400 audit(1785599974.261:3334): avc: denied { write } for pid=21313 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.720143][ T5598] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.765355][ T5801] usb 5-1: SerialNumber: syz [ 1293.769370][ T5598] usb 4-1: config 0 descriptor?? [ 1294.063937][ T5801] usb_ehset_test 5-1:31.152: probe with driver usb_ehset_test failed with error -32 [ 1294.128420][ T5801] usb 5-1: USB disconnect, device number 42 [ 1294.209527][T12228] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 1294.242950][T12228] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 1294.274146][ T5598] kye 0003:0458:5016.0015: control desc unexpectedly large [ 1294.282358][T12228] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 1294.322603][T12228] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 1294.349743][T12228] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 1294.379867][T12228] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 1294.393979][ T5598] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0015/input/input33 [ 1294.416169][T12228] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 1294.465434][T12228] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 1294.520806][T12228] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 1294.551807][T12228] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 1294.628331][T12228] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1294.710490][T12228] microsoft 0003:045E:07DA.0014: no inputs found [ 1294.720855][ T198] net_ratelimit: 56 callbacks suppressed [ 1294.720911][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1294.743268][ T5598] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0015/input/input34 [ 1294.782961][T12228] microsoft 0003:045E:07DA.0014: could not initialize ff, continuing anyway [ 1294.795824][ T198] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1294.820833][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1294.846595][T21323] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3558'. [ 1294.878816][T21309] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1294.885733][T21309] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1294.906977][T12228] usb 1-1: USB disconnect, device number 118 [ 1294.987066][ T8697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1295.030518][T21309] vhci_hcd vhci_hcd.0: Device attached [ 1295.070919][ T8697] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1295.128115][T21324] fido_id[21324]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1295.224449][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1295.285579][ T198] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1295.353234][T18852] usb 40-1: SetAddress Request (2) to port 0 [ 1295.369118][T18852] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1295.449253][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1295.529160][ T198] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1296.516990][T21326] vhci_hcd: connection reset by peer [ 1296.643419][ T1177] vhci_hcd vhci_hcd.3: stop threads [ 1296.649095][ T1177] vhci_hcd vhci_hcd.3: release socket [ 1296.651491][ T5598] kye 0003:0458:5016.0015: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 1296.656893][T11292] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1296.713611][ T30] audit: type=1400 audit(1785599977.291:3335): avc: denied { write } for pid=21315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1296.758570][ T1177] vhci_hcd vhci_hcd.3: disconnect device [ 1296.901631][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1297.458558][T21367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3563'. [ 1297.484333][T21367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3563'. [ 1297.508817][T11186] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1298.145728][T21365] binder: 21364:21365 ioctl c0306201 200000004a40 returned -22 [ 1298.355062][T21366] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1298.431072][T11186] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1298.448371][T11186] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1298.458883][T11186] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1298.487500][ T30] audit: type=1400 audit(1785599979.061:3336): avc: denied { write } for pid=21361 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1298.755597][ T5598] usb 4-1: USB disconnect, device number 10 [ 1299.785466][ T48] net_ratelimit: 41 callbacks suppressed [ 1299.785523][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1299.859817][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1300.136452][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1300.332277][T16670] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1300.491459][T18852] usb 40-1: device descriptor read/8, error -110 [ 1300.606865][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1300.861625][T16666] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1301.233219][ T1177] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1301.242312][ T1177] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1301.591391][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1301.610781][T16666] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1301.845417][T21385] netlink: 'syz.6.3567': attribute type 1 has an invalid length. [ 1302.150835][ T5801] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1302.191348][T18852] usb usb40-port1: attempt power cycle [ 1302.325193][ T5801] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1302.350346][ T5801] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1302.379475][ T5801] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1302.410247][ T5801] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.446754][ T5801] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1302.466788][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1302.487287][ T5801] usb 1-1: Product: syz [ 1302.505126][ T5801] usb 1-1: Manufacturer: syz [ 1302.557523][ T5801] cdc_wdm 1-1:1.0: skipping garbage [ 1302.582810][ T5801] cdc_wdm 1-1:1.0: skipping garbage [ 1302.620430][ T5801] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1302.657625][ T5801] cdc_wdm 1-1:1.0: Unknown control protocol [ 1302.762390][T18852] usb usb40-port1: unable to enumerate USB device [ 1302.881950][T18852] usb 1-1: USB disconnect, device number 119 [ 1304.060779][T18852] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1304.420781][T18852] usb 1-1: device descriptor read/64, error -71 [ 1304.652574][T21415] binder: 21413:21415 ioctl c0306201 200000004a40 returned -22 [ 1304.732849][T21417] IPVS: length: 217 != 24 [ 1304.739634][T21417] netlink: 'syz.6.3576': attribute type 3 has an invalid length. [ 1304.751172][T18852] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1305.394993][ T8154] net_ratelimit: 62 callbacks suppressed [ 1305.395043][ T8154] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1305.632168][ T8154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1305.901988][T11292] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1305.943409][T21429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1306.031364][T11292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1306.475408][ T8697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1306.487931][ T8697] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1306.736413][ T30] audit: type=1400 audit(1785599987.311:3337): avc: denied { write } for pid=21424 comm="syz.9.3582" name="functions" dev="configfs" ino=11040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1306.771579][T21426] Mass Storage Function, version: 2009/09/11 [ 1307.139235][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1307.189007][ T198] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1307.213214][T21426] LUN: removable file: (no medium) [ 1307.340824][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1307.449531][ T198] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1308.990935][T18852] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1309.215275][T18852] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1309.418810][T18852] usb 4-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1309.435898][T12228] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 1309.516404][T18852] usb 4-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1309.610153][T18852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.640917][T12228] usb 7-1: Using ep0 maxpacket: 16 [ 1309.675255][T12228] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1309.722415][T18852] usb 4-1: Product: syz [ 1309.759542][T12228] usb 7-1: config 127 has an invalid interface number: 124 but max is 0 [ 1309.777639][T18852] usb 4-1: Manufacturer: syz [ 1309.826932][T18852] usb 4-1: SerialNumber: syz [ 1309.838351][T12228] usb 7-1: config 127 has no interface number 0 [ 1309.898075][T12228] usb 7-1: config 127 interface 124 has no altsetting 0 [ 1309.953158][T18852] usb 4-1: can't set config #2, error -71 [ 1309.971674][T12228] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1309.999651][T18852] usb 4-1: USB disconnect, device number 11 [ 1310.025167][T12228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.072948][T12228] usb 7-1: Product: syz [ 1310.112053][T12228] usb 7-1: Manufacturer: syz [ 1310.120832][ T5801] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 1310.147121][T12228] usb 7-1: SerialNumber: syz [ 1310.340844][ T5801] usb 10-1: Using ep0 maxpacket: 32 [ 1310.372524][ T5801] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 1310.417712][ T5801] usb 10-1: config 0 has no interface number 0 [ 1310.471499][ T1177] net_ratelimit: 62 callbacks suppressed [ 1310.471531][ T1177] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1310.563949][ T5801] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1310.630848][ T1177] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1310.641993][ T5801] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1310.657745][T21468] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3591'. [ 1310.670441][T21468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1310.692379][ T1177] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1310.694992][ T5801] usb 10-1: Product: syz [ 1310.726353][ T5801] usb 10-1: Manufacturer: syz [ 1310.746960][ T5801] usb 10-1: SerialNumber: syz [ 1310.772680][ T5801] usb 10-1: config 0 descriptor?? [ 1310.804621][ T1177] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1310.880905][ T1177] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1310.983194][T21476] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3593'. [ 1311.014047][ T1177] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1311.045284][T21480] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21480 comm=syz.0.3593 [ 1311.222283][T12228] usb 7-1: reset high-speed USB device number 85 using dummy_hcd [ 1311.302188][ T1177] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1311.366308][T21483] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1311.377538][ T5801] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 1311.419323][ T5801] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1311.447261][ T8697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1311.451538][T12228] usb 7-1: device descriptor read/64, error -71 [ 1311.460721][ T8697] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1311.589281][ T5801] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1311.650552][ T5801] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71 [ 1311.699523][ T5801] usb 10-1: USB disconnect, device number 98 [ 1311.804320][T12228] usb 7-1: reset high-speed USB device number 85 using dummy_hcd [ 1311.950948][T12228] usb 7-1: device descriptor read/64, error -71 [ 1312.063153][T21486] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3595'. [ 1312.079303][ T9627] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1313.225207][ T9627] usb 4-1: Using ep0 maxpacket: 16 [ 1313.227271][T21491] syzkaller0: entered promiscuous mode [ 1313.245121][ T9627] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.257272][T21491] syzkaller0: entered allmulticast mode [ 1313.269701][ T9627] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1313.281558][ T9627] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1313.292439][ T9627] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1313.305391][ T9627] usb 4-1: SerialNumber: syz [ 1313.431128][T21491] tipc: Enabled bearer , priority 0 [ 1313.614177][ T9627] usb 4-1: 0:2 : does not exist [ 1313.693298][ T5801] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1313.896529][T21491] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3598'. [ 1313.952374][T21497] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3598'. [ 1314.044319][T21499] tipc: Resetting bearer [ 1314.065355][ T5801] usb 1-1: Using ep0 maxpacket: 16 [ 1314.116005][ T5801] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1314.148916][ T5801] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1314.164511][T21489] tipc: Resetting bearer [ 1314.183043][T21488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3596'. [ 1314.197664][T12228] usb 7-1: USB disconnect, device number 85 [ 1314.216280][ T5801] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1314.269467][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.281028][ T5801] usb 1-1: Product: syz [ 1314.285444][ T5801] usb 1-1: Manufacturer: syz [ 1314.291408][T21489] tipc: Disabling bearer [ 1314.302149][ T5801] usb 1-1: SerialNumber: syz [ 1314.313817][ T9627] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1314.318018][ T5801] usb 1-1: config 0 descriptor?? [ 1314.376832][ T5801] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1314.403441][ T5801] usb 1-1: Detected FT232R [ 1314.433200][ T9627] usb 4-1: USB disconnect, device number 12 [ 1314.591353][ T5801] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1314.612474][ T5801] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1314.628545][ T5801] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 1314.653075][ T5801] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1314.679084][ T5801] usb 1-1: USB disconnect, device number 122 [ 1314.706775][ T5801] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1314.733870][ T5801] ftdi_sio 1-1:0.0: device disconnected [ 1315.570795][ T1177] net_ratelimit: 59 callbacks suppressed [ 1315.570862][ T1177] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1315.662758][ T1177] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1315.841705][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1315.898287][ T198] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1316.084120][ T1177] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1316.144719][ T1177] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1316.290824][ T8697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1316.381478][ T8697] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1316.541519][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1316.728406][ T198] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1316.767598][T21525] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1317.885636][T21532] fuse: Unknown parameter 'grmmd~*loup_il' [ 1318.360902][ T5801] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1318.542344][ T5801] usb 1-1: Using ep0 maxpacket: 16 [ 1318.553361][ T5801] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1318.584733][ T5801] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1318.619122][ T5801] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1318.951073][ T5801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.138044][ T5801] usb 1-1: config 0 descriptor?? [ 1320.646010][ T8154] net_ratelimit: 76 callbacks suppressed [ 1320.646057][ T8154] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1320.725482][ T5801] usbhid 1-1:0.0: can't add hid device: -71 [ 1320.761235][ T5801] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1320.767644][ T8154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1320.817435][ T5801] usb 1-1: USB disconnect, device number 123 [ 1320.877416][T21566] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 1321.057407][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1321.163584][T11186] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1321.353691][ T8154] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1321.433598][ T8154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1321.603967][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1321.666584][T11186] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1321.859612][T18852] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 1321.874630][T11292] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1321.901631][T11292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1322.045647][T18852] usb 10-1: Using ep0 maxpacket: 8 [ 1322.068575][T18852] usb 10-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 1322.110417][T18852] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.174882][T18852] usb 10-1: config 0 descriptor?? [ 1322.233388][T18852] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 1322.270211][ T30] audit: type=1400 audit(1785600002.841:3338): avc: denied { write } for pid=21544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1322.449378][T18852] cxusb: set interface failed [ 1322.463348][T18852] dvb-usb: bulk message failed: -22 (1/0) [ 1322.654981][T18852] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1322.863473][T18852] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 1322.911747][T21593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1323.016023][T18852] usb 10-1: media controller created [ 1323.257740][T18852] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1323.377650][ T30] audit: type=1400 audit(1785600003.951:3339): avc: denied { write } for pid=21595 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1323.926752][T18852] DVB: Unable to find symbol lgdt330x_attach() [ 1323.976827][T18852] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 1324.021165][ T9627] usb 7-1: new low-speed USB device number 86 using dummy_hcd [ 1324.075474][T18852] dvb-usb: bulk message failed: -22 (1/0) [ 1324.103064][T18852] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 1324.185364][T18852] usb 10-1: USB disconnect, device number 99 [ 1324.232561][ T9627] usb 7-1: device descriptor read/64, error -71 [ 1324.424419][T18852] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 1324.533836][ T9627] usb 7-1: new low-speed USB device number 87 using dummy_hcd [ 1324.721180][ T9627] usb 7-1: device descriptor read/64, error -71 [ 1324.872409][ T9627] usb usb7-port1: attempt power cycle [ 1324.888834][T18852] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 1325.039502][T21617] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1325.049035][T21617] block device autoloading is deprecated and will be removed. [ 1325.289992][ T30] audit: type=1400 audit(1785600005.771:3340): avc: denied { associate } for pid=21618 comm="syz.0.3625" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1325.391416][ T9627] usb 7-1: new low-speed USB device number 88 using dummy_hcd [ 1325.424543][T18852] usb 10-1: Using ep0 maxpacket: 32 [ 1325.492077][ T9627] usb 7-1: device descriptor read/8, error -71 [ 1325.542566][T18852] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1325.702979][ T1177] net_ratelimit: 58 callbacks suppressed [ 1325.703007][ T1177] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1325.745186][T18852] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1325.779096][ T1177] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1325.794855][ T9627] usb 7-1: new low-speed USB device number 89 using dummy_hcd [ 1325.810595][T18852] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1325.872452][T18852] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.885836][ T9627] usb 7-1: device descriptor read/8, error -71 [ 1325.898238][ T30] audit: type=1400 audit(1785600006.471:3341): avc: denied { write } for pid=21606 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1325.952280][ T1177] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1326.006887][T18852] usb 10-1: config 0 descriptor?? [ 1326.008518][ T1177] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1326.041248][ T9627] usb usb7-port1: unable to enumerate USB device [ 1326.202705][ T1177] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1326.235182][ T1177] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1326.290239][ T30] audit: type=1400 audit(1785600006.861:3342): avc: denied { write } for pid=21629 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1326.316330][T21631] FAULT_INJECTION: forcing a failure. [ 1326.316330][T21631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1326.386638][ T1177] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1326.393374][T21631] CPU: 0 UID: 0 PID: 21631 Comm: syz.3.3627 Tainted: G L syzkaller #0 PREEMPT(full) [ 1326.393402][T21631] Tainted: [L]=SOFTLOCKUP [ 1326.393408][T21631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1326.393417][T21631] Call Trace: [ 1326.393423][T21631] [ 1326.393429][T21631] dump_stack_lvl+0x100/0x190 [ 1326.393454][T21631] should_fail_ex.cold+0x5/0xa [ 1326.393474][T21631] _copy_to_user+0x32/0xd0 [ 1326.393497][T21631] bpf_log_attr_finalize+0x169/0x1a0 [ 1326.393523][T21631] ? __pfx_bpf_log_attr_finalize+0x10/0x10 [ 1326.393546][T21631] ? btf_new_fd+0x4690/0x5bc0 [ 1326.393562][T21631] ? btf_new_fd+0x4750/0x5bc0 [ 1326.393577][T21631] ? kfree+0x22b/0x6c0 [ 1326.393603][T21631] btf_new_fd+0x47a4/0x5bc0 [ 1326.393621][T21631] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1326.393649][T21631] ? __pfx_btf_new_fd+0x10/0x10 [ 1326.393668][T21631] ? rcu_is_watching+0x12/0xc0 [ 1326.393700][T21631] ? security_capable+0x80/0x260 [ 1326.393721][T21631] ? ns_capable+0xd2/0xf0 [ 1326.393742][T21631] __sys_bpf+0x1e5f/0x4e80 [ 1326.393766][T21631] ? __pfx___sys_bpf+0x10/0x10 [ 1326.393781][T21631] ? find_held_lock+0x2b/0x80 [ 1326.393795][T21631] ? get_pid_task+0xfc/0x250 [ 1326.393809][T21631] ? get_pid_task+0xfc/0x250 [ 1326.393829][T21631] ? find_held_lock+0x2b/0x80 [ 1326.393847][T21631] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1326.393862][T21631] ? find_held_lock+0x2b/0x80 [ 1326.393875][T21631] ? ksys_write+0x190/0x250 [ 1326.393898][T21631] ? ksys_write+0x190/0x250 [ 1326.393935][T21631] ? fput+0x79/0x100 [ 1326.393957][T21631] ? __x64_sys_bpf+0xce/0x140 [ 1326.393972][T21631] __x64_sys_bpf+0xce/0x140 [ 1326.393988][T21631] ? do_syscall_64+0x90/0x870 [ 1326.394008][T21631] do_syscall_64+0x115/0x870 [ 1326.394025][T21631] ? clear_bhb_loop+0x40/0x90 [ 1326.394044][T21631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.394059][T21631] RIP: 0033:0x7feed3d9e019 [ 1326.394073][T21631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1326.394087][T21631] RSP: 002b:00007feed4c75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1326.394103][T21631] RAX: ffffffffffffffda RBX: 00007feed4025fa0 RCX: 00007feed3d9e019 [ 1326.394113][T21631] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000012 [ 1326.394122][T21631] RBP: 00007feed4c75090 R08: 0000000000000000 R09: 0000000000000000 [ 1326.394132][T21631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1326.394141][T21631] R13: 00007feed4026038 R14: 00007feed4025fa0 R15: 00007ffe96a73068 [ 1326.394161][T21631] [ 1326.702769][T18852] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 1326.741458][T18852] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 1326.908565][T18852] ft260 0003:0403:6030.0016: chip code: 0000 0000 [ 1327.148566][T18852] ft260 0003:0403:6030.0016: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.9-1/input0 [ 1327.336927][T18852] ft260 0003:0403:6030.0016: failed to retrieve status: -32, no wakeup [ 1327.405698][T18852] ft260 0003:0403:6030.0016: failed to retrieve status: -32 [ 1328.388490][T21651] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1328.701132][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1328.871096][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1328.971336][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1330.176524][T18852] usb 10-1: USB disconnect, device number 100 [ 1330.643201][T21650] xt_hashlimit: max too large, truncated to 1048576 [ 1330.785648][T16670] net_ratelimit: 14 callbacks suppressed [ 1330.785682][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1330.861788][T16670] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1330.938714][T21670] [U]  [ 1330.950911][T21670] [U] K{ [ 1330.957164][T21670] [U] T 1ŠFFˊ`GJǘGO/MC [ 1330.977407][T21670] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1330.991044][T18852] usb 10-1: new high-speed USB device number 101 using dummy_hcd [ 1331.000880][T11292] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1331.014798][T11292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1331.023225][T21670] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1331.042040][T21670] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1331.083178][T21670] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1331.142178][T11292] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1331.157400][T11292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1331.165584][T21670] [U] ܾ4B`˗HT_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1331.183551][T18852] usb 10-1: Using ep0 maxpacket: 32 [ 1331.193886][T21670] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1331.208134][T21670] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`Ʀ\ [ 1331.330144][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1331.335826][T18852] usb 10-1: config 0 interface 12 has no altsetting 0 [ 1331.338083][T11186] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1331.362238][T18852] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1331.383887][T18852] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.420077][T18852] usb 10-1: Product: syz [ 1331.442971][T18852] usb 10-1: Manufacturer: syz [ 1331.449580][T21670] [U] MX"{; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1331.575511][ T1177] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1331.584447][ T1177] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1332.037824][T21670] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1332.053028][T18852] usb 10-1: SerialNumber: syz [ 1332.076081][T21670] [U] 22Ʃ۩X?0;3U [ 1332.084187][T18852] usb 10-1: config 0 descriptor?? [ 1332.093145][T21670] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1332.157521][T21670] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1332.232501][T21670] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1332.270076][T21670] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1332.287419][T21670] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1332.330782][T21670] [U] EC [ 1332.339512][T21670] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1332.472528][T21669] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1334.092749][ T30] audit: type=1400 audit(1785600014.671:3343): avc: denied { setopt } for pid=21666 comm="syz.9.3637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1334.774601][T18852] f81534 10-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1334.798486][T18852] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 1334.804572][T21717] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3649'. [ 1334.824371][T18852] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1334.851214][T18852] f81534 10-1:0.12: probe with driver f81534 failed with error -71 [ 1334.901738][T18852] usb 10-1: USB disconnect, device number 101 [ 1334.937155][T21717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=21717 comm=syz.3.3649 [ 1335.120432][ T5736] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1335.696936][ T5736] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1335.750833][ T5736] usb 5-1: config 0 has no interface number 0 [ 1335.779283][ T5736] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.946669][T11292] net_ratelimit: 64 callbacks suppressed [ 1335.946687][T11292] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1335.966359][T11292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1335.988471][ T5736] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1336.025935][T21725] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1336.076559][ T5736] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1336.125021][ T5736] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1336.130944][T11292] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1336.142950][T11292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1336.164282][ T5736] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.251972][ T1177] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1336.269812][ T1177] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1336.335822][ T5736] usb 5-1: config 0 descriptor?? [ 1336.386267][T21727] overlayfs: failed to resolve './file0': -2 [ 1336.463766][ T1177] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1336.482187][ T1177] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1336.702736][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1336.723484][T11186] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1337.264686][ T5736] uclogic 0003:28BD:0042.0017: failed retrieving string descriptor #100: -71 [ 1337.305951][ T5736] uclogic 0003:28BD:0042.0017: failed retrieving pen parameters: -71 [ 1337.597044][ T5736] uclogic 0003:28BD:0042.0017: pen probing failed: -71 [ 1337.758321][ T5625] Bluetooth: hci0: Invalid handle: 0x20c9 > 0x0eff [ 1338.407453][ T5736] uclogic 0003:28BD:0042.0017: failed probing parameters: -71 [ 1338.560087][ T5736] uclogic 0003:28BD:0042.0017: probe with driver uclogic failed with error -71 [ 1338.590664][T21741] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3655'. [ 1338.686284][ T30] audit: type=1400 audit(1785600019.241:3344): avc: denied { write } for pid=21743 comm="syz.6.3656" name="functions" dev="configfs" ino=11040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1339.239556][ T30] audit: type=1400 audit(1785600019.241:3345): avc: denied { write } for pid=21743 comm="syz.6.3656" name="functions" dev="configfs" ino=11040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1339.247514][ T5736] usb 5-1: USB disconnect, device number 43 [ 1339.491708][T21751] macvlan2: entered promiscuous mode [ 1339.562102][T21751] bridge0: entered promiscuous mode [ 1339.767696][ T30] audit: type=1400 audit(1785600020.341:3346): avc: denied { map } for pid=21753 comm="syz.4.3658" path="socket:[89153]" dev="sockfs" ino=89153 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1340.082111][T17774] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1340.335562][T21774] overlayfs: unescaped trailing colons in lowerdir mount option. [ 1340.727178][T17774] usb 5-1: Using ep0 maxpacket: 16 [ 1341.053770][T11292] net_ratelimit: 43 callbacks suppressed [ 1341.053803][T11292] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1341.334312][T11292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1341.590406][T21783] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1341.856848][ T1177] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1341.866367][ T1177] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1342.021614][T17774] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1342.032224][T17774] usb 5-1: can't read configurations, error -61 [ 1342.041315][ T48] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1342.065940][ T48] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1342.241223][T11292] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1342.249087][T11292] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1342.348059][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1342.349517][T17774] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1342.407225][T16670] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1346.783242][ T57] net_ratelimit: 47 callbacks suppressed [ 1346.783275][ T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1346.807027][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1347.247502][ T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1347.309922][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1347.409121][T21823] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3673'. [ 1347.513328][ T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1347.539557][ T57] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1347.585844][T21823] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=21823 comm=syz.0.3673 [ 1347.678098][T11292] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.861535][ T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1347.957366][ T57] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1348.074415][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1348.194532][ T8697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1349.374901][T11292] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.477003][T21838] netlink: 'syz.9.3679': attribute type 3 has an invalid length. [ 1349.704079][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1349.718543][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1349.735632][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1349.749098][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1349.756798][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1350.152158][ T30] audit: type=1400 audit(1785600030.691:3347): avc: denied { create } for pid=21841 comm="syz.9.3680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1350.174617][ T30] audit: type=1400 audit(1785600030.741:3348): avc: denied { accept } for pid=21841 comm="syz.9.3680" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1350.207715][T11292] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.254477][ T30] audit: type=1400 audit(1785600030.801:3349): avc: denied { create } for pid=21835 comm="syz.0.3678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1350.332907][ T30] audit: type=1400 audit(1785600030.801:3350): avc: denied { write } for pid=21835 comm="syz.0.3678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1350.354171][ T30] audit: type=1400 audit(1785600030.911:3351): avc: denied { write } for pid=21848 comm="syz.6.3681" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1350.377306][T21837] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3678'. [ 1350.409287][ T30] audit: type=1400 audit(1785600030.911:3352): avc: denied { open } for pid=21848 comm="syz.6.3681" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1350.561295][ T30] audit: type=1400 audit(1785600030.911:3353): avc: denied { ioctl } for pid=21848 comm="syz.6.3681" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1350.586122][ T30] audit: type=1400 audit(1785600030.911:3354): avc: denied { module_request } for pid=21839 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1350.597322][T11292] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.779996][ T30] audit: type=1400 audit(1785600031.021:3355): avc: denied { read } for pid=21848 comm="syz.6.3681" dev="nsfs" ino=4026532438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1350.862540][T21853] vxfs: WRONG superblock magic 00000000 at 1 [ 1350.880248][ T30] audit: type=1400 audit(1785600031.021:3356): avc: denied { open } for pid=21848 comm="syz.6.3681" path="net:[4026532438]" dev="nsfs" ino=4026532438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1350.958389][T21854] sctp: [Deprecated]: syz.0.3682 (pid 21854) Use of int in maxseg socket option. [ 1350.958389][T21854] Use struct sctp_assoc_value instead [ 1351.862367][T16670] net_ratelimit: 43 callbacks suppressed [ 1351.862385][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1351.951512][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1351.964609][T21092] Bluetooth: hci2: command tx timeout [ 1352.037645][T21853] vxfs: WRONG superblock magic 00000000 at 8 [ 1352.043642][T21853] vxfs: can't find superblock. [ 1352.058255][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1352.133228][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1352.200526][T11186] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1352.362034][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1352.370060][ T198] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1352.503258][ T8697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1352.545171][ T8697] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1352.661049][ T8697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1352.689945][T21880] comedi comedi3: comedi_config --init_data is deprecated [ 1354.093162][T11292] bridge_slave_1: left allmulticast mode [ 1354.099490][T11292] bridge_slave_1: left promiscuous mode [ 1354.105340][T11292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.123655][T21092] Bluetooth: hci2: command tx timeout [ 1355.318864][T11292] bridge_slave_0: left allmulticast mode [ 1355.332134][T21891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5135 sclass=netlink_route_socket pid=21891 comm=syz.0.3688 [ 1355.409480][T11292] bridge_slave_0: left promiscuous mode [ 1355.473265][T11292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.520099][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 1355.520130][ T30] audit: type=1400 audit(1785600036.091:3405): avc: denied { write } for pid=21886 comm="syz.0.3688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1356.443656][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1356.851444][ T8697] net_ratelimit: 73 callbacks suppressed [ 1356.851481][ T8697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1356.883102][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1356.949771][ T30] audit: type=1400 audit(1785600037.521:3406): avc: denied { write } for pid=21871 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1356.999497][ T8697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1357.180804][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1357.211966][T16666] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1357.244419][ T5625] Bluetooth: hci2: command tx timeout [ 1357.252704][ T30] audit: type=1400 audit(1785600037.521:3407): avc: denied { add_name } for pid=21871 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1357.253064][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1357.440923][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1357.532785][ T8697] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1357.588312][ T30] audit: type=1400 audit(1785600037.521:3408): avc: denied { create } for pid=21871 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1357.632024][T21908] overlayfs: failed to resolve './file0': -2 [ 1357.744171][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1357.744437][ T30] audit: type=1400 audit(1785600037.521:3409): avc: denied { write } for pid=21871 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=15061 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1357.990946][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1357.993728][ T30] audit: type=1400 audit(1785600037.521:3410): avc: denied { append } for pid=21871 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=15061 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1358.154370][ T30] audit: type=1400 audit(1785600038.301:3411): avc: denied { read } for pid=21907 comm="syz.6.3691" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1358.194979][ T30] audit: type=1400 audit(1785600038.301:3412): avc: denied { open } for pid=21907 comm="syz.6.3691" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1358.271937][ T30] audit: type=1400 audit(1785600038.371:3413): avc: denied { ioctl } for pid=21907 comm="syz.6.3691" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1358.324942][ T30] audit: type=1400 audit(1785600038.451:3414): avc: denied { write } for pid=21911 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1358.356909][ T5625] Bluetooth: hci1: command 0x0406 tx timeout [ 1359.290763][T21092] Bluetooth: hci2: command tx timeout [ 1359.780777][T21933] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1359.850341][T21933] CUSE: unknown device info "" [ 1359.855224][T21933] CUSE: unknown device info "" [ 1359.860062][T21933] CUSE: unknown device info "" [ 1359.940834][T21933] CUSE: unknown device info "" [ 1359.952863][T21933] CUSE: unknown device info "" [ 1359.957784][T21933] CUSE: unknown device info "" [ 1359.991041][T21933] CUSE: unknown device info "" [ 1360.008304][T21933] CUSE: unknown device info "}" [ 1360.019825][T21935] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 1360.051958][T21933] CUSE: unknown device info "" [ 1360.071495][T21933] CUSE: unknown device info "" [ 1360.096945][T21933] CUSE: unknown device info "" [ 1360.106285][T21933] CUSE: unknown device info "r" [ 1360.147306][T21933] CUSE: unknown device info "#" [ 1360.180807][T21933] CUSE: unknown device info "" [ 1360.209566][T21933] CUSE: unknown device info "" [ 1360.225682][T21933] CUSE: unknown device info "" [ 1360.230663][T21933] CUSE: DEVNAME unspecified [ 1360.497163][T11292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1360.600568][T11292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1360.678418][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1360.678435][ T30] audit: type=1400 audit(1785600041.251:3436): avc: denied { create } for pid=21938 comm="syz.3.3698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1360.716976][T11292] bond0 (unregistering): Released all slaves [ 1360.773440][ T30] audit: type=1400 audit(1785600041.341:3437): avc: denied { bind } for pid=21938 comm="syz.3.3698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1360.897628][ T30] audit: type=1400 audit(1785600041.341:3438): avc: denied { listen } for pid=21938 comm="syz.3.3698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1360.936589][T21889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3688'. [ 1361.207323][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1361.264040][T21946] netlink: 'syz.0.3699': attribute type 1 has an invalid length. [ 1361.366252][ T30] audit: type=1400 audit(1785600041.941:3439): avc: denied { create } for pid=21945 comm="syz.0.3699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1361.861400][ T12] net_ratelimit: 70 callbacks suppressed [ 1361.861465][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1361.996502][T11292] : left promiscuous mode [ 1362.060742][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1362.108546][ T30] audit: type=1400 audit(1785600042.681:3440): avc: denied { create } for pid=21954 comm="syz.9.3701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1362.110566][ T12] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1362.141630][ T30] audit: type=1400 audit(1785600042.711:3441): avc: denied { write } for pid=21954 comm="syz.9.3701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1362.513533][ T8145] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1363.857721][ T30] audit: type=1400 audit(1785600042.951:3442): avc: denied { map } for pid=21945 comm="syz.0.3699" path="socket:[89706]" dev="sockfs" ino=89706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 1364.049522][ T8145] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1364.159596][T16664] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1364.291312][T21962] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1364.356910][ T30] audit: type=1400 audit(1785600043.331:3443): avc: denied { create } for pid=21952 comm="syz.6.3700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1364.398436][ T30] audit: type=1400 audit(1785600043.331:3444): avc: denied { setopt } for pid=21952 comm="syz.6.3700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1364.412779][ T179] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1364.434971][ T30] audit: type=1400 audit(1785600043.331:3445): avc: denied { bind } for pid=21952 comm="syz.6.3700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1364.608453][T21946] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1364.649381][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1364.757123][T11184] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1366.956618][T21965] netlink: 196 bytes leftover after parsing attributes in process `syz.9.3701'. [ 1366.989312][T21965] netlink: 196 bytes leftover after parsing attributes in process `syz.9.3701'. [ 1366.999313][T21965] netlink: 19 bytes leftover after parsing attributes in process `syz.9.3701'. [ 1367.025518][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1367.116988][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1367.226662][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1367.347196][ T179] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1367.433724][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1367.532755][T21962] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1367.579158][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1367.579188][ T30] audit: type=1400 audit(1785600048.151:3451): avc: denied { create } for pid=21979 comm="syz.9.3706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1367.610816][T21962] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1367.640474][ T30] audit: type=1400 audit(1785600048.211:3452): avc: denied { bind } for pid=21979 comm="syz.9.3706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1367.665633][ T179] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1367.693894][T21982] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3707'. [ 1367.772989][ T9627] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1367.833312][T21962] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1367.843976][ T30] audit: type=1400 audit(1785600048.381:3453): avc: denied { read } for pid=21980 comm="syz.3.3707" dev="sockfs" ino=89766 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1367.894228][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1367.897008][T21982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3707'. [ 1367.936429][ T30] audit: type=1400 audit(1785600048.471:3454): avc: denied { setopt } for pid=21979 comm="syz.9.3706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1367.981289][ T30] audit: type=1400 audit(1785600048.531:3455): avc: denied { create } for pid=21980 comm="syz.3.3707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1367.986531][ T9627] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1368.080165][ T30] audit: type=1400 audit(1785600048.541:3456): avc: denied { ioctl } for pid=21979 comm="syz.9.3706" path="socket:[89761]" dev="sockfs" ino=89761 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1368.206195][ T9627] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1368.233234][ T30] audit: type=1400 audit(1785600048.561:3457): avc: denied { getopt } for pid=21980 comm="syz.3.3707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1368.257318][ T9627] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1368.266729][ T30] audit: type=1400 audit(1785600048.701:3458): avc: denied { ioctl } for pid=21987 comm="syz.0.3708" path="socket:[90291]" dev="sockfs" ino=90291 ioctlcmd=0x48df scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1368.384880][T11186] Bluetooth: hci6: Frame reassembly failed (-84) [ 1368.664051][ T9627] usb 7-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1368.711125][ T9627] usb 7-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1368.746029][ T9627] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1368.832602][ T9627] usb 7-1: config 1 interface 1 has no altsetting 0 [ 1369.043854][ T30] audit: type=1400 audit(1785600049.621:3459): avc: denied { create } for pid=22006 comm="syz.3.3710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1369.168018][ T9627] usb 7-1: string descriptor 0 read error: -22 [ 1369.185038][ T9627] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1369.279374][ T9627] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.494351][ T30] audit: type=1400 audit(1785600050.071:3460): avc: denied { write } for pid=21984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1369.883849][T21839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1369.989736][T21839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1370.068287][T21839] bridge_slave_0: entered allmulticast mode [ 1370.416031][ T5625] Bluetooth: hci6: command 0x1003 tx timeout [ 1370.427606][T21092] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1370.565239][T21839] bridge_slave_0: entered promiscuous mode [ 1370.715999][T21839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.025377][T21839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.260103][T21839] bridge_slave_1: entered allmulticast mode [ 1371.536509][T21839] bridge_slave_1: entered promiscuous mode [ 1372.042366][T16670] net_ratelimit: 86 callbacks suppressed [ 1372.042497][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1372.349245][T21962] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1372.442583][T21962] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1372.637416][T21962] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1372.873517][T11184] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1373.161654][ T179] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1373.394274][ T179] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1373.553398][T21962] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1374.084460][T22037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1374.662136][ T179] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1374.780830][ T179] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1374.873593][T11292] hsr_slave_0: left promiscuous mode [ 1374.879858][T11292] hsr_slave_1: left promiscuous mode [ 1374.907138][T11292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1374.914783][T11292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1374.952824][T11292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1374.960339][T11292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1375.029583][T11292] veth1_vlan: left promiscuous mode [ 1375.122866][T11292] veth0_vlan: left promiscuous mode [ 1375.372444][ T9627] usb 7-1: 2:0: failed to get current value for ch 1 (-32) [ 1375.377597][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1375.377612][ T30] audit: type=1400 audit(1785600055.951:3464): avc: denied { setopt } for pid=22040 comm="syz.9.3714" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1375.590706][ T30] audit: type=1400 audit(1785600056.161:3465): avc: denied { create } for pid=22040 comm="syz.9.3714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1375.665124][ T30] audit: type=1400 audit(1785600056.241:3466): avc: denied { write } for pid=22040 comm="syz.9.3714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1375.741788][ T30] audit: type=1400 audit(1785600056.241:3467): avc: denied { nlmsg_read } for pid=22040 comm="syz.9.3714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1375.832545][ T30] audit: type=1400 audit(1785600056.271:3468): avc: denied { ioctl } for pid=22040 comm="syz.9.3714" path="socket:[89861]" dev="sockfs" ino=89861 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1376.142154][ T30] audit: type=1400 audit(1785600056.721:3469): avc: denied { mount } for pid=22046 comm="syz.3.3715" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1376.267177][T11292] team0 (unregistering): Port device team_slave_1 removed [ 1376.392377][T11292] team0 (unregistering): Port device team_slave_0 removed [ 1376.908167][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1377.114267][T16670] net_ratelimit: 25 callbacks suppressed [ 1377.114288][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1377.153526][T21839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1377.169861][T21839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1377.198747][ T8154] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1377.239942][ T30] audit: type=1400 audit(1785600057.811:3470): avc: denied { unmount } for pid=20629 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1377.316098][ T179] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1377.443380][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1377.556198][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1377.563959][T16670] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1377.593062][T21839] team0: Port device team_slave_0 added [ 1377.783115][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1377.851992][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1377.902017][ T9627] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1377.951616][ T8154] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1378.017251][T21839] team0: Port device team_slave_1 added [ 1378.057211][ T8154] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1378.083901][ T9] usb 7-1: USB disconnect, device number 90 [ 1378.241919][ T9627] usb 4-1: Using ep0 maxpacket: 32 [ 1378.291506][ T9627] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1378.333157][ T30] audit: type=1400 audit(1785600058.911:3471): avc: denied { read write } for pid=22059 comm="syz.9.3719" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1378.363164][T22060] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3719'. [ 1378.395680][ T9627] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1378.423626][ T30] audit: type=1400 audit(1785600058.911:3472): avc: denied { open } for pid=22059 comm="syz.9.3719" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1378.603699][T22062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3716'. [ 1379.028260][ T9627] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1379.034447][T21839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1379.081733][T21839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.108061][ T30] audit: type=1400 audit(1785600058.941:3473): avc: denied { ioctl } for pid=22059 comm="syz.9.3719" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 ioctlcmd=0x641e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1379.171641][ T9627] usb 4-1: config 14 has no interface number 0 [ 1379.191727][ T9627] usb 4-1: config 14 has no interface number 1 [ 1379.251345][T21839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1379.388901][T22067] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1379.644498][ T9627] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1379.689502][ T9627] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1379.850358][ T9627] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1379.897844][ T9627] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1379.967274][ T9627] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1380.074228][T21839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1380.105335][T21839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1380.176534][ T9627] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1380.313938][ T9627] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1380.403297][ T9627] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1380.422773][T21839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1380.899350][ T9627] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1381.022789][ T9627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.082671][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1381.082687][ T30] audit: type=1400 audit(1785600061.661:3480): avc: denied { read } for pid=22076 comm="syz.6.3721" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1381.112066][ T30] audit: type=1400 audit(1785600061.661:3481): avc: denied { open } for pid=22076 comm="syz.6.3721" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1381.126962][ T9627] usb 4-1: Product: syz [ 1381.419430][ T9627] usb 4-1: can't set config #14, error -71 [ 1381.435679][ T30] audit: type=1400 audit(1785600061.751:3482): avc: denied { ioctl } for pid=22076 comm="syz.6.3721" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1381.454863][ T9627] usb 4-1: USB disconnect, device number 13 [ 1381.473568][T21839] hsr_slave_0: entered promiscuous mode [ 1381.504232][T21839] hsr_slave_1: entered promiscuous mode [ 1381.524765][ T30] audit: type=1400 audit(1785600061.751:3483): avc: denied { set_context_mgr } for pid=22076 comm="syz.6.3721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1381.658054][T21839] debugfs: 'hsr0' already exists in 'hsr' [ 1381.664222][ T30] audit: type=1400 audit(1785600061.751:3484): avc: denied { write } for pid=22076 comm="syz.6.3721" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1381.691191][T21839] Cannot create hsr debugfs directory [ 1381.752843][ T30] audit: type=1400 audit(1785600061.981:3485): avc: denied { map } for pid=22076 comm="syz.6.3721" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1382.128665][T16670] net_ratelimit: 87 callbacks suppressed [ 1382.139394][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1382.234890][T16670] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1382.497885][T21962] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1382.697856][T16664] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1382.971831][ T9627] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1383.104427][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1383.339824][ T30] audit: type=1400 audit(1785600062.151:3486): avc: denied { mount } for pid=22080 comm="syz.3.3722" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1383.668079][T21962] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1383.851373][ T9627] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1383.873108][T21962] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1383.906809][ T9627] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1383.954104][ T30] audit: type=1400 audit(1785600062.161:3487): avc: denied { write } for pid=22061 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1384.041670][T21962] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1384.055341][ T9627] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1384.106778][T21962] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1384.157977][ T9627] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.206070][T21962] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1384.231994][T22098] overlayfs: failed to resolve './file0': -2 [ 1384.307280][ T30] audit: type=1400 audit(1785600062.331:3488): avc: denied { write } for pid=22089 comm="syz.6.3724" name="snmp" dev="proc" ino=4026532997 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1384.418134][ T30] audit: type=1400 audit(1785600063.261:3489): avc: denied { setopt } for pid=22080 comm="syz.3.3722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1384.570436][T22090] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1384.588058][ T9627] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1384.769965][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1385.284320][T22111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1386.407284][T22110] [ 1386.409644][T22110] ====================================================== [ 1386.416742][T22110] WARNING: possible circular locking dependency detected [ 1386.423937][T22110] syzkaller #0 Tainted: G L [ 1386.429907][T22110] ------------------------------------------------------ [ 1386.436914][T22110] syz.9.3728/22110 is trying to acquire lock: [ 1386.443145][T22110] ffff8880244e0ac0 (&sb->s_type->i_mutex_key#29){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 1386.454638][T22110] [ 1386.454638][T22110] but task is already holding lock: [ 1386.462082][T22110] ffff8880a70e4118 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 1386.471217][T22110] [ 1386.471217][T22110] which lock already depends on the new lock. [ 1386.471217][T22110] [ 1386.481616][T22110] [ 1386.481616][T22110] the existing dependency chain (in reverse order) is: [ 1386.490616][T22110] [ 1386.490616][T22110] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 1386.498253][T22110] lock_acquire+0x1b9/0x370 [ 1386.503812][T22110] __mutex_lock+0x1a4/0x1bd0 [ 1386.509263][T22110] tcm_set_name+0x29/0xb0 [ 1386.514127][T22110] function_make+0x21c/0x3f0 [ 1386.519237][T22110] configfs_mkdir+0x51e/0xb70 [ 1386.524429][T22110] vfs_mkdir+0x361/0x850 [ 1386.529558][T22110] filename_mkdirat+0x48b/0x5e0 [ 1386.535534][T22110] __x64_sys_mkdir+0x6b/0x90 [ 1386.540736][T22110] do_syscall_64+0x115/0x870 [ 1386.545847][T22110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.552271][T22110] [ 1386.552271][T22110] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 1386.560510][T22110] lock_acquire+0x1b9/0x370 [ 1386.565525][T22110] __mutex_lock+0x1a4/0x1bd0 [ 1386.570621][T22110] configfs_rmdir+0x5ae/0x950 [ 1386.575807][T22110] vfs_rmdir+0x328/0x8a0 [ 1386.580572][T22110] filename_rmdir+0x31a/0x5c0 [ 1386.585755][T22110] __x64_sys_rmdir+0x46/0x70 [ 1386.590852][T22110] do_syscall_64+0x115/0x870 [ 1386.596127][T22110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.602540][T22110] [ 1386.602540][T22110] -> #0 (&sb->s_type->i_mutex_key#29){++++}-{4:4}: [ 1386.611305][T22110] check_prev_add+0xeb/0xe60 [ 1386.616416][T22110] __lock_acquire+0x136c/0x1a40 [ 1386.621771][T22110] lock_acquire+0x1b9/0x370 [ 1386.626950][T22110] down_write+0x8b/0x1f0 [ 1386.631704][T22110] configfs_depend_item_unlocked+0xf3/0x6a0 [ 1386.638884][T22110] usbg_make_tpg+0x261/0x620 [ 1386.643980][T22110] target_fabric_make_tpg+0xab/0x8c0 [ 1386.649861][T22110] configfs_mkdir+0x51e/0xb70 [ 1386.655064][T22110] vfs_mkdir+0x361/0x850 [ 1386.659824][T22110] filename_mkdirat+0x48b/0x5e0 [ 1386.665190][T22110] __x64_sys_mkdir+0x6b/0x90 [ 1386.670282][T22110] do_syscall_64+0x115/0x870 [ 1386.675375][T22110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.681769][T22110] [ 1386.681769][T22110] other info that might help us debug this: [ 1386.681769][T22110] [ 1386.692156][T22110] Chain exists of: [ 1386.692156][T22110] &sb->s_type->i_mutex_key#29 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 1386.692156][T22110] [ 1386.706932][T22110] Possible unsafe locking scenario: [ 1386.706932][T22110] [ 1386.714370][T22110] CPU0 CPU1 [ 1386.719723][T22110] ---- ---- [ 1386.725165][T22110] lock(&opts->dep_lock); [ 1386.729570][T22110] lock(gadget_subsys.su_mutex); [ 1386.737188][T22110] lock(&opts->dep_lock); [ 1386.744113][T22110] lock(&sb->s_type->i_mutex_key#29); [ 1386.749574][T22110] [ 1386.749574][T22110] *** DEADLOCK *** [ 1386.749574][T22110] [ 1386.757711][T22110] 5 locks held by syz.9.3728/22110: [ 1386.762895][T22110] #0: ffff88801df34450 (sb_writers#17){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 1386.772465][T22110] #1: ffff8880558dd440 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 1386.783517][T22110] #2: ffffffff8fd88028 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b5/0xb70 [ 1386.793618][T22110] #3: ffffffff90253340 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x620 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1386.803442][T22110] #4: ffff8880a70e4118 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 1386.812928][T22110] [ 1386.812928][T22110] stack backtrace: [ 1386.818797][T22110] CPU: 0 UID: 0 PID: 22110 Comm: syz.9.3728 Tainted: G L syzkaller #0 PREEMPT(full) [ 1386.818819][T22110] Tainted: [L]=SOFTLOCKUP [ 1386.818824][T22110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1386.818834][T22110] Call Trace: [ 1386.818842][T22110] [ 1386.818849][T22110] dump_stack_lvl+0x100/0x190 [ 1386.818869][T22110] print_circular_bug.cold+0x178/0x1c7 [ 1386.818893][T22110] check_noncircular+0x146/0x160 [ 1386.818912][T22110] check_prev_add+0xeb/0xe60 [ 1386.818932][T22110] __lock_acquire+0x136c/0x1a40 [ 1386.818950][T22110] ? rcu_is_watching+0x12/0xc0 [ 1386.818973][T22110] lock_acquire+0x1b9/0x370 [ 1386.818989][T22110] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 1386.819010][T22110] ? __pfx___might_resched+0x10/0x10 [ 1386.819029][T22110] down_write+0x8b/0x1f0 [ 1386.819048][T22110] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 1386.819068][T22110] ? __pfx_down_write+0x10/0x10 [ 1386.819088][T22110] configfs_depend_item_unlocked+0xf3/0x6a0 [ 1386.819107][T22110] ? __lock_acquire+0x49f/0x1a40 [ 1386.819126][T22110] usbg_make_tpg+0x261/0x620 [ 1386.819142][T22110] ? __pfx_usbg_make_tpg+0x10/0x10 [ 1386.819160][T22110] ? find_held_lock+0x2b/0x80 [ 1386.819172][T22110] ? __pfx_usbg_make_tpg+0x10/0x10 [ 1386.819189][T22110] target_fabric_make_tpg+0xab/0x8c0 [ 1386.819211][T22110] configfs_mkdir+0x51e/0xb70 [ 1386.819232][T22110] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 1386.819252][T22110] ? __pfx_configfs_mkdir+0x10/0x10 [ 1386.819273][T22110] ? inode_permission+0x374/0x620 [ 1386.819296][T22110] vfs_mkdir+0x361/0x850 [ 1386.819315][T22110] filename_mkdirat+0x48b/0x5e0 [ 1386.819334][T22110] ? __pfx_filename_mkdirat+0x10/0x10 [ 1386.819349][T22110] ? strncpy_from_user+0x19d/0x2d0 [ 1386.819369][T22110] ? do_getname+0x191/0x390 [ 1386.819388][T22110] __x64_sys_mkdir+0x6b/0x90 [ 1386.819404][T22110] do_syscall_64+0x115/0x870 [ 1386.819421][T22110] ? clear_bhb_loop+0x40/0x90 [ 1386.819437][T22110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.819453][T22110] RIP: 0033:0x7fc3e2d9e019 [ 1386.819466][T22110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1386.819481][T22110] RSP: 002b:00007fc3e3bee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1386.819496][T22110] RAX: ffffffffffffffda RBX: 00007fc3e3026090 RCX: 00007fc3e2d9e019 [ 1386.819506][T22110] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000c00 [ 1386.819515][T22110] RBP: 00007fc3e2e3500c R08: 0000000000000000 R09: 0000000000000000 [ 1386.819525][T22110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1386.819533][T22110] R13: 00007fc3e3026128 R14: 00007fc3e3026090 R15: 00007ffc496028a8 [ 1386.819547][T22110] [ 1387.132261][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1387.132313][ T30] audit: type=1400 audit(1785600066.801:3494): avc: denied { unmount } for pid=20629 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1387.164232][ T198] net_ratelimit: 13 callbacks suppressed [ 1387.164253][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1387.312968][ T9627] usb 7-1: USB disconnect, device number 91 [ 1387.355144][ T30] audit: type=1400 audit(1785600066.931:3495): avc: denied { mount } for pid=22102 comm="syz.9.3728" name="/" dev="configfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1387.810366][T21962] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1387.919396][T21962] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1387.945760][ T30] audit: type=1400 audit(1785600066.931:3496): avc: denied { search } for pid=22102 comm="syz.9.3728" name="/" dev="configfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1388.068363][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1388.166934][T16670] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1388.200457][ T30] audit: type=1400 audit(1785600066.931:3497): avc: denied { search } for pid=22102 comm="syz.9.3728" name="target" dev="configfs" ino=1257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1388.532130][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1388.964459][ T8154] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1389.078291][ T8154] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1389.168280][ T30] audit: type=1400 audit(1785600066.931:3498): avc: denied { write } for pid=22102 comm="syz.9.3728" name="dbroot" dev="configfs" ino=90080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1389.196357][ T30] audit: type=1400 audit(1785600066.931:3499): avc: denied { open } for pid=22102 comm="syz.9.3728" path="/470/my_configfs/target/dbroot" dev="configfs" ino=90080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1389.225377][ T30] audit: type=1400 audit(1785600066.941:3500): avc: denied { search } for pid=22102 comm="syz.9.3728" name="/" dev="configfs" ino=1102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1389.249848][ T30] audit: type=1400 audit(1785600066.941:3501): avc: denied { search } for pid=22102 comm="syz.9.3728" name="usb_gadget" dev="configfs" ino=1474 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1389.276032][ T30] audit: type=1400 audit(1785600066.941:3502): avc: denied { search } for pid=22102 comm="syz.9.3728" name="g1" dev="configfs" ino=11037 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1389.277935][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1389.487159][ T30] audit: type=1400 audit(1785600066.941:3503): avc: denied { search } for pid=22102 comm="syz.9.3728" name="functions" dev="configfs" ino=11040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1389.572943][ T198] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1390.670584][T16666] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.088415][T16666] bridge_slave_1: left allmulticast mode [ 1391.138450][T16666] bridge_slave_1: left promiscuous mode [ 1391.188364][T16666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.265769][T16666] bridge_slave_0: left allmulticast mode [ 1391.295771][T16666] bridge_slave_0: left promiscuous mode [ 1391.327882][T16666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.857562][T16666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1391.875401][T16666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1391.892826][T16666] bond0 (unregistering): Released all slaves [ 1392.111291][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1392.272921][ T8154] net_ratelimit: 94 callbacks suppressed [ 1392.273318][ T8154] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1392.316685][ T8154] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1392.344459][ T8154] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1392.468242][T16666] hsr_slave_0: left promiscuous mode [ 1392.477565][T16666] hsr_slave_1: left promiscuous mode [ 1392.491616][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1392.506562][T16666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1392.517696][T16666] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1392.531499][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1392.548895][T16666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1392.559542][T16666] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.567994][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1392.586808][T16666] veth1_vlan: left promiscuous mode [ 1392.593172][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1392.602450][T16666] veth0_vlan: left promiscuous mode [ 1392.621600][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1392.651694][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1392.683834][T11186] bond1: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1393.020019][T16666] team0 (unregistering): Port device team_slave_1 removed [ 1393.062646][T16666] team0 (unregistering): Port device team_slave_0 removed [ 1393.109284][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 1393.109313][ T30] audit: type=1400 audit(1785600073.681:3523): avc: denied { write } for pid=22137 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1393.314147][ T30] audit: type=1400 audit(1785600073.871:3524): avc: denied { write } for pid=22148 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1393.610016][T16666] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1393.631413][T16666] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.712647][T16666] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1393.723668][ T30] audit: type=1400 audit(1785600074.291:3525): avc: denied { write } for pid=22150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1393.793032][ T30] audit: type=1400 audit(1785600074.371:3526): avc: denied { write } for pid=22161 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1393.801416][T16666] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.913028][T16666] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1393.933889][T16666] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.036011][T16666] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1394.067897][T16666] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.134630][ T30] audit: type=1400 audit(1785600074.711:3527): avc: denied { write } for pid=22163 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1394.203253][ T30] audit: type=1400 audit(1785600074.781:3528): avc: denied { write } for pid=22174 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1394.679754][ T30] audit: type=1400 audit(1785600075.251:3529): avc: denied { write } for pid=22177 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1394.760312][T16666] bridge_slave_1: left allmulticast mode [ 1394.768923][T16666] bridge_slave_1: left promiscuous mode [ 1394.776848][T16666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.789642][T16666] bridge_slave_0: left allmulticast mode [ 1394.797133][T16666] bridge_slave_0: left promiscuous mode [ 1394.805137][T16666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.816764][T16666] bridge_slave_1: left allmulticast mode [ 1394.826904][T16666] bridge_slave_1: left promiscuous mode [ 1394.835903][T16666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.846463][ T30] audit: type=1400 audit(1785600075.431:3530): avc: denied { write } for pid=22188 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1394.873233][T16666] bridge_slave_0: left allmulticast mode [ 1394.891844][T16666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.912434][T16666] bridge_slave_1: left allmulticast mode [ 1394.920777][T16666] bridge_slave_1: left promiscuous mode [ 1394.927797][T16666] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.945264][T16666] bridge_slave_0: left allmulticast mode [ 1394.952851][T16666] bridge_slave_0: left promiscuous mode [ 1394.958849][T16666] bridge0: port 1(bridge_slave_0) entered disabled state [ 1395.067652][T16666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1395.085469][T16666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1395.114469][T16666] bond0 (unregistering): Released all slaves [ 1395.244644][ T30] audit: type=1400 audit(1785600075.811:3531): avc: denied { write } for pid=22190 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1395.364991][ T30] audit: type=1400 audit(1785600075.941:3532): avc: denied { write } for pid=22201 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1395.457962][T16666] bond0 (unregistering): left promiscuous mode [ 1395.481196][T16666] bond_slave_0: left promiscuous mode [ 1395.491249][T16666] bond_slave_1: left promiscuous mode [ 1395.513234][T16666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1395.535137][T16666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1395.562138][T16666] bond0 (unregistering): Released all slaves [ 1395.578123][T16666] bond1 (unregistering): Released all slaves [ 1395.713038][T16666] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1395.915835][T16666] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1395.927535][T16666] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1395.958420][T16666] bond0 (unregistering): Released all slaves [ 1395.969607][T16666] bond1 (unregistering): Released all slaves [ 1396.089363][T16666] tipc: Left network mode