last executing test programs: 8m59.826952505s ago: executing program 32 (id=449): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x9100, &(0x7f0000000080)={0x81, 0x7a}, 0x20) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10) sendto$inet(r0, &(0x7f0000000180)="aa131fd2222953972e434ed7973ec947e2fca463eb38b0c57a5375640607fa79f65b1e90817ec2266f90b20bb6e4f554720d3197bde013a6e2fa812879e35e29bf5285e6289ba537591bcbf3534e3f60833687e40c49cf53fb26a3cd59fe5529ee321f84746ab316bb0eec0c6c3c4ae4c4c4df42fc056b02aea0f4244276d356c56e795eaa9a45f91f9296cc24", 0x8d, 0x4000000, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x709}, 0x14}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 5m40.037289466s ago: executing program 33 (id=886): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m23.0243059s ago: executing program 3 (id=1149): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$vicodec0(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000180)={0xa, @capture={0x0, 0x0, {0x2, 0x2}, 0x4, 0x9}}) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x414640, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) syz_io_uring_setup(0x2000048, &(0x7f0000000500)={0x0, 0xf20f, 0x40, 0x2, 0x1b, 0x0, r2}, &(0x7f0000000100), &(0x7f00000000c0), 0x0) syz_open_dev$radio(&(0x7f0000000440), 0x1, 0x2) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$9p_unix(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000280)={0x9a, 0x5, 0x68, 0x1, 0x408}) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000100)=@mmap={0x7, 0xa, 0x4, 0x400, 0x5, {0x0, 0xea60}, {0x5, 0x9, 0x7, 0x60, 0x9, 0x7, "de056a52"}, 0x4, 0x1, {}, 0x3ff, 0x0, r2}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410019012bbd700000000000047c00000400c2800c00018006000600843b00000c000280080007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) 4m22.791760105s ago: executing program 3 (id=1151): syz_usb_connect$uac1(0x2, 0x9e, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201010200000020050b431740000102030109028c00030109403f0904000000010100000a2401d2000a00020102090401000001020000090401010101020000072401080505000f2402020002ff0f00f441a4440fb209050109ff037808ba072501080403000904020000010200000904020101010200000f240202000007000223c586c54c01072501000e0300e7eb3381d03a03a016e6"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3600) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x9, 0x20, 0xa7, 0x2, 0x5, 0x9, 0x3}, {0x0, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0xce, 0x0, 0x4, 0xff, 0x0, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x20, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x1, 0x1000000000000004}], 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x3, 0x2, 0x0, 0x1], 0x8080000}) mprotect(&(0x7f0000008000/0x4000)=nil, 0x4000, 0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000080)) syz_emit_vhci(0x0, 0x0) 4m14.80672487s ago: executing program 3 (id=1162): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000002e000000080002", @ANYRES32], 0x40}}, 0x4008000) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4eb1c78dac84186a) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00'}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x20040000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0xa6, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000480)) r2 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_KEY(r2, 0x6a, 0x1, 0x0, 0xc) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) ioctl$BLKRRPART(0xffffffffffffffff, 0x80044d0d, 0x0) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r4, 0x2, {0x2, 0xf}, 0xff}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x206c}, 0x1, 0x0, 0x0, 0x8005}, 0x40084) 4m13.585019938s ago: executing program 3 (id=1165): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0xa000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0xf00, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'c6xdigio\x00', [0x3c4, 0x10, 0x2, 0xa, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$PTP_SYS_OFFSET(r5, 0x43403d05, 0x0) 4m12.492289012s ago: executing program 3 (id=1167): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x4) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000000340)=""/102400, 0x19000) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) 4m10.023717505s ago: executing program 3 (id=1170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xa19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, &(0x7f0000000300)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000020880)=""/102400, 0x19000) r4 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x400882d) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x15, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2ffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m54.329886076s ago: executing program 34 (id=1170): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0xa19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1f, 0x0, &(0x7f0000000300)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000020880)=""/102400, 0x19000) r4 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x400882d) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89ed, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x15, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2ffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 52.837178303s ago: executing program 6 (id=1457): socket(0x1, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x2, 0xeac, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, 0x0, 0x0, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x51f2, 0x20, 0x1000000, 0x33b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10b0, 0x2, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6f, 0x8, 0x3, 0x2e5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x200, 0x3, 0xffffffff}}], 0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "70ea04f751c60ba5dcceaade50f35e396f436cae609bccb44142a06ddee06839e38f740866d5296ed18944810f23e753c95d9bdda01159"}, 0x42) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) 51.843964738s ago: executing program 6 (id=1462): prlimit64(0x0, 0xc, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0xfffffffb], [{0x0, 0x1, 0x0, 0x1}, {0xb, 0x35}, {0xfff, 0x100000c}, {0xffffffff}, {0x0, 0x3}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x2010000}, {0x3, 0x82}, {0x1010000, 0x6}, {0xec41, 0xffffffff}, {0x3, 0x8}], 0xc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="bf"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 50.780083364s ago: executing program 6 (id=1467): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x64000}, 0x4040) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000200)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @random="180008000001"}, 0x14) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)}], 0x2, 0x0, 0x0, 0x10}], 0x1, 0x40800) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0xffff, @multicast2}, {0x2, 0x200, @empty}, {0x2, 0x4e24, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00800000000086dd600a843500140600fe8000000000000000000000000000bbf7010000000000000000000053e46cce6ba91b2f", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000540)=ANY=[], 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x9, 0x7, 0x6, 0x7f, @random="f42b835595ee"}, 0x10) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) 44.816885793s ago: executing program 6 (id=1479): set_mempolicy(0x4005, 0x0, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x89901) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0xfffffc7a) 42.122601902s ago: executing program 6 (id=1484): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56", @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f90753"], 0xb8, 0x40800}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 40.694537759s ago: executing program 2 (id=1498): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56", @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f90753"], 0xb8, 0x40800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 40.685834119s ago: executing program 4 (id=1499): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 38.94429601s ago: executing program 2 (id=1490): prlimit64(0x0, 0xc, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0xfffffffb], [{0x0, 0x1, 0x0, 0x1}, {0xb, 0x35}, {0xfff, 0x100000c}, {0xffffffff}, {0x0, 0x3}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x2010000}, {0x3, 0x82}, {0x1010000, 0x6}, {0xec41, 0xffffffff}, {0x3, 0x8}], 0xc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="bf"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 38.778665354s ago: executing program 4 (id=1492): set_mempolicy(0x4005, 0x0, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x89901) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0xfffffc7a) 37.812932295s ago: executing program 6 (id=1495): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 37.811936606s ago: executing program 2 (id=1496): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10150) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 37.678098191s ago: executing program 4 (id=1497): socket(0x1, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x2, 0xeac, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f00000002c0)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, 0x0, 0x1, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "70ea04f751c60ba5dcceaade50f35e396f436cae609bccb44142a06ddee06839e38f740866d5296ed18944810f23e753c95d9bdda01159"}, 0x42) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) 36.634552959s ago: executing program 4 (id=1500): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10150) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 36.319632174s ago: executing program 2 (id=1502): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10150) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 34.951470324s ago: executing program 2 (id=1504): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10150) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 34.248596496s ago: executing program 2 (id=1506): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 33.316103271s ago: executing program 7 (id=1507): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r6 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffffc) statx(r2, &(0x7f0000000300)='./file0\x00', 0x800, 0x200, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r6, r7, r8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000200)={{0xffffffffffffffff, &(0x7f0000000000)='/l\x00', 0x100, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x45ac}, {[0x9, 0x800, 0x1, 0x800]}, 0x4, 0x0, 0x0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, 0x0) 33.166503675s ago: executing program 4 (id=1509): set_mempolicy(0x4005, 0x0, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) open_tree(0xffffffffffffff9c, 0x0, 0x89901) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x800000000000002, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002040)='net/snmp6\x00') read$FUSE(r3, &(0x7f0000000000)={0x2020}, 0xfffffc7a) 32.166938907s ago: executing program 4 (id=1510): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 32.102840514s ago: executing program 7 (id=1511): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10150) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 31.24485671s ago: executing program 7 (id=1513): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10150) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 30.224594204s ago: executing program 7 (id=1515): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10150) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 29.726256937s ago: executing program 7 (id=1517): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10150) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 28.716661394s ago: executing program 7 (id=1521): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 27.639621185s ago: executing program 1 (id=1522): socket(0x1, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f00000002c0)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x51f2, 0x20, 0x1000000, 0x33b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10b0, 0x2, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6f, 0x8, 0x3, 0x2e5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x200, 0x3, 0xffffffff}}], 0x1, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000340)={'#! ', './file0', [], 0xa, "70ea04f751c60ba5dcceaade50f35e396f436cae609bccb44142a06ddee06839e38f740866d5296ed18944810f23e753c95d9bdda01159"}, 0x42) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) 26.753455638s ago: executing program 1 (id=1523): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10150) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 26.478352236s ago: executing program 1 (id=1524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x9, [0x10, 0xf, 0x6, 0xe, 0x5, 0x10, 0x9, 0xf, 0x6, 0xd, 0x3, 0x8, 0x0, 0xc, 0x5, 0x2], 0x0, [0xd883, 0xd01d, 0x7, 0x9, 0x3f, 0x6, 0x40, 0x8000, 0x4, 0x2, 0x4, 0x4, 0x2, 0x1, 0x9, 0xfffd], [0x5, 0xfeff, 0xfc01, 0x10, 0x9, 0x5, 0x3, 0x200, 0x4, 0xb6, 0xfffb, 0x80, 0x38fb, 0x3, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfffd, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) 26.329902601s ago: executing program 1 (id=1525): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x3, 0x28c, 0x10001}) r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x84, @local, 0x4e21, 0x3, 'sed\x00', 0x0, 0xa7e, 0x3f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f28, 0x3, 'nq\x00', 0x5, 0x8, 0x78}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x4e23, 0x10003, 0xcd, 0x1}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="26df"], 0x20) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000280)={0x20, 0x0, 0x0, 0x1c, 0x1c}) preadv(r1, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x40000000, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000001c0)=""/94) 25.990301627s ago: executing program 1 (id=1526): socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000540)="05000000018000b362c7a4f513c2cbe2c2e58c236389b2ec27c2898c15cb0a013d71f8c76015b79625ccbe6c8891e78aacfea1a4863a7bd261841ad37eac90bfd6d1cc8483e9d96eb25cc7051aa8838462d285c67952ae85fc834b90b6e8d17fda4639ffea121ce2e1286e94d6499e8740290c1d702df349ed4e97b10d0895b02a14a0e70115410b72465e3437bfc116b634", 0x92) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) openat$ttynull(0xffffff9c, 0x0, 0x48781, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x54, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0xa0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x4044) 25.087353924s ago: executing program 1 (id=1527): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 22.321399212s ago: executing program 35 (id=1495): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 20.437894085s ago: executing program 8 (id=1528): prlimit64(0x0, 0xc, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0xfffffffb], [{0x0, 0x1, 0x0, 0x1}, {0xb, 0x35}, {0xfff, 0x100000c}, {0xffffffff}, {0x0, 0x3}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x2010000}, {0x3, 0x82}, {0x1010000, 0x6}, {0xec41, 0xffffffff}, {0x3, 0x8}], 0xc}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 20.382564635s ago: executing program 8 (id=1529): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 18.818302434s ago: executing program 36 (id=1506): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 16.98330552s ago: executing program 9 (id=1530): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16.960721436s ago: executing program 37 (id=1510): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 13.492821997s ago: executing program 38 (id=1521): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r0, &(0x7f0000000080)=""/1, 0x1) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 9.766491385s ago: executing program 39 (id=1527): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.154594786s ago: executing program 40 (id=1529): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 4.397900293s ago: executing program 0 (id=1547): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 4.220075665s ago: executing program 0 (id=1548): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$kcm(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 3.80086366s ago: executing program 0 (id=1549): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10150) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 3.439523462s ago: executing program 5 (id=1532): prlimit64(0x0, 0xc, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0xfffffffb], [{0x0, 0x1, 0x0, 0x1}, {0xb, 0x35}, {0xfff, 0x100000c}, {0xffffffff}, {0x0, 0x3}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x2010000}, {0x3, 0x82}, {0x1010000, 0x6}, {0xec41, 0xffffffff}, {0x3, 0x8}], 0xc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="bf"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.266068114s ago: executing program 5 (id=1550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) socket(0x1, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000019980)=""/102393, &(0x7f0000000400)=0x18ff9) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) getpeername$l2tp(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f0000000040)='./bus\x00') read$FUSE(0xffffffffffffffff, 0x0, 0x600) socket$nl_xfrm(0x10, 0x3, 0x6) 2.692333017s ago: executing program 0 (id=1551): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r0, r0, 0x2f}, 0x20) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$kcm(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000880)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @broadcast, @void, {@mpls_uc={0x8847, {[], @ipv4=@gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x65, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x7, 0x1, 0x9, 0x0, 0x1, 0x2, 0x2, 0xb}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x6, 0x3, 0x1, 0x1, 0x4, 0x2e}, 0x2, {0x5, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 2.320051879s ago: executing program 0 (id=1552): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x70bd29, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty, 0x3}, 0x10) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f00000000c0)) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000000280)) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCXONC(r7, 0x540a, 0x2) close(r7) 2.204742977s ago: executing program 5 (id=1553): r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff00003e400000000000000000000003000000000200000002"], 0x0, 0x56}, 0x20) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) 2.173008561s ago: executing program 0 (id=1554): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.407761956s ago: executing program 41 (id=1530): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.211836015s ago: executing program 5 (id=1556): socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a602, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) unshare(0x1e060c80) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setrlimit(0x0, &(0x7f0000000200)={0xb0, 0x2}) ioctl$COMEDI_RANGEINFO(0xffffffffffffffff, 0x80106408, &(0x7f0000000280)={0xb, 0x0}) openat$hwrng(0xffffffffffffff9c, 0x0, 0xd01, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000604}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, 0x1, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5ac1}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xc097}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7f}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xa4}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfdb}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000004) r4 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) acct(&(0x7f00000000c0)='./file1\x00') socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) 288.321269ms ago: executing program 5 (id=1557): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56", @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f90753"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258", 0x22}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c", 0xf}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 5 (id=1558): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) read(0xffffffffffffffff, &(0x7f0000000080)=""/1, 0x1) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) munlockall() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): : cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 536.883354][ T5626] CPU: 0 UID: 0 PID: 5626 Comm: kworker/u9:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.883410][ T5626] Tainted: [L]=SOFTLOCKUP [ 536.883430][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 536.883449][ T5626] Workqueue: hci0 hci_rx_work [ 536.883502][ T5626] Call Trace: [ 536.883511][ T5626] [ 536.883520][ T5626] dump_stack_lvl+0x100/0x190 [ 536.883582][ T5626] sysfs_warn_dup.cold+0x1c/0x28 [ 536.883623][ T5626] sysfs_create_dir_ns+0x24b/0x2b0 [ 536.883651][ T5626] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 536.883689][ T5626] ? find_held_lock+0x2b/0x80 [ 536.883709][ T5626] ? kobject_add_internal+0x25f/0x930 [ 536.883754][ T5626] ? kobject_add_internal+0x25f/0x930 [ 536.883787][ T5626] ? do_raw_spin_unlock+0x145/0x1e0 [ 536.883841][ T5626] kobject_add_internal+0x2c8/0x930 [ 536.883887][ T5626] kobject_add+0x16a/0x1e0 [ 536.883931][ T5626] ? __pfx_kobject_add+0x10/0x10 [ 536.883974][ T5626] ? class_to_subsys+0x10f/0x150 [ 536.884023][ T5626] ? kobject_put+0xb9/0x640 [ 536.884057][ T5626] ? _raw_spin_unlock+0x28/0x50 [ 536.884105][ T5626] device_add+0x294/0x1970 [ 536.884161][ T5626] ? __pfx_dev_set_name+0x10/0x10 [ 536.884194][ T5626] ? __pfx_device_add+0x10/0x10 [ 536.884233][ T5626] ? mgmt_send_event_skb+0x2fb/0x460 [ 536.884285][ T5626] hci_conn_add_sysfs+0x1a3/0x260 [ 536.884349][ T5626] le_conn_complete_evt+0x11eb/0x1f60 [ 536.884411][ T5626] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 536.884435][ T5626] ? hci_event_packet+0x186/0xcd0 [ 536.884494][ T5626] hci_le_conn_complete_evt+0x23c/0x3a0 [ 536.884532][ T5626] ? skb_pull_data+0x15f/0x1e0 [ 536.884587][ T5626] hci_le_meta_evt+0x34a/0x5f0 [ 536.884633][ T5626] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 536.884662][ T5626] hci_event_packet+0x51c/0xcd0 [ 536.884711][ T5626] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 536.884751][ T5626] ? __pfx_hci_event_packet+0x10/0x10 [ 536.884802][ T5626] ? kcov_remote_start+0x384/0x670 [ 536.884832][ T5626] ? lockdep_hardirqs_on+0x78/0x100 [ 536.884869][ T5626] hci_rx_work+0x451/0xfc0 [ 536.884916][ T5626] process_one_work+0xa23/0x1940 [ 536.884988][ T5626] ? __pfx_process_one_work+0x10/0x10 [ 536.885026][ T5626] ? __pfx_hci_rx_work+0x10/0x10 [ 536.885065][ T5626] worker_thread+0x5ef/0xe50 [ 536.885107][ T5626] ? __pfx_worker_thread+0x10/0x10 [ 536.885153][ T5626] ? kthread+0x13a/0x450 [ 536.885180][ T5626] ? __pfx_worker_thread+0x10/0x10 [ 536.885207][ T5626] kthread+0x370/0x450 [ 536.885226][ T5626] ? __pfx_kthread+0x10/0x10 [ 536.885261][ T5626] ret_from_fork+0x72b/0xd50 [ 536.885310][ T5626] ? __pfx_ret_from_fork+0x10/0x10 [ 536.885357][ T5626] ? __switch_to+0x800/0x10f0 [ 536.885386][ T5626] ? __pfx_kthread+0x10/0x10 [ 536.885426][ T5626] ret_from_fork_asm+0x1a/0x30 [ 536.885496][ T5626] [ 536.885571][ T5626] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 537.195156][ T5626] Bluetooth: hci0: failed to register connection device [ 537.862077][ T9800] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 538.041778][ T9800] usb 7-1: Using ep0 maxpacket: 16 [ 538.056594][ T9800] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.079028][ T9800] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.100915][ T9800] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 538.136808][ T9800] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 538.161781][ T9800] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.200697][ T9800] usb 7-1: config 0 descriptor?? [ 538.360344][T10186] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 538.637543][ T9800] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 538.666947][ T9800] microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0 [ 538.745155][ T9800] microsoft 0003:045E:07DA.0003: implement() called with n (152) > 32! (kworker/0:16) [ 538.912155][ T9800] microsoft 0003:045E:07DA.0003: unsupported Resolution Multiplier 0 [ 539.148161][T10196] netlink: 'syz.3.1007': attribute type 9 has an invalid length. [ 539.177638][ T9800] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 539.190224][ T9800] microsoft 0003:045E:07DA.0003: no inputs found [ 539.198379][ T9800] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 539.422309][ T9800] usb 7-1: USB disconnect, device number 2 [ 539.460595][T10199] binder_alloc: 10198: binder_alloc_buf, no vma [ 540.606962][T10201] fido_id[10201]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 542.162074][ T5723] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 545.834567][ T5723] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 545.847718][ T5723] usb 3-1: can't read configurations, error -71 [ 546.602016][T10272] Driver unsupported XDP return value 0 on prog (id 155) dev N/A, expect packet loss! [ 547.006945][T10278] binder: 10277:10278 ioctl c0306201 200000000080 returned -14 [ 547.033838][T10278] binder: 10277:10278 ioctl c0306201 2000000003c0 returned -14 [ 547.250257][ T8982] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 548.238863][T10291] syzkaller0: entered promiscuous mode [ 548.244449][T10291] syzkaller0: entered allmulticast mode [ 550.380007][ T29] audit: type=1400 audit(1785901257.519:866): avc: denied { create } for pid=10330 comm="syz.3.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 550.509997][ T29] audit: type=1400 audit(1785901257.649:867): avc: denied { read write } for pid=10337 comm="syz.1.1048" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 550.615073][ T29] audit: type=1400 audit(1785901257.679:868): avc: denied { open } for pid=10337 comm="syz.1.1048" path="/210/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 550.658548][T10346] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 552.269682][ T12] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 552.566186][T10373] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 552.572932][T10373] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 552.594313][T10373] vhci_hcd vhci_hcd.0: Device attached [ 552.779300][ T9781] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 552.841811][ T120] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 552.941868][ T9781] usb 4-1: Using ep0 maxpacket: 16 [ 552.956972][ T29] audit: type=1400 audit(1785901260.099:869): avc: denied { relabelfrom } for pid=10387 comm="syz.6.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 552.987550][T10379] vhci_hcd: connection closed [ 552.992592][ T9781] usb 4-1: unable to get BOS descriptor or descriptor too short [ 553.012220][ T1160] vhci_hcd vhci_hcd.3: stop threads [ 553.028935][ T1160] vhci_hcd vhci_hcd.3: release socket [ 553.037095][ T9781] usb 4-1: no configurations [ 553.052651][ T29] audit: type=1400 audit(1785901260.099:870): avc: denied { relabelto } for pid=10387 comm="syz.6.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 553.073025][ T9781] usb 4-1: can't read configurations, error -22 [ 553.089587][ T1160] vhci_hcd vhci_hcd.3: disconnect device [ 553.102664][ T120] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 553.134167][T10390] syzkaller0: entered promiscuous mode [ 553.139781][T10390] syzkaller0: entered allmulticast mode [ 553.202551][T10390] tc action pedit 'at' offset 20 out of bounds [ 553.515358][T10398] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 556.418013][T10408] syzkaller0: entered promiscuous mode [ 556.425490][T10408] syzkaller0: entered allmulticast mode [ 558.959818][ T29] audit: type=1400 audit(1785901265.299:871): avc: denied { getopt } for pid=10414 comm="syz.1.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 561.749240][T10448] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 562.602161][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.665033][ T29] audit: type=1400 audit(1785901268.889:872): avc: denied { mounton } for pid=10445 comm="syz.3.1077" path="/225/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 562.926248][T10454] 9pnet_fd: p9_fd_create_unix (10454): problem connecting socket: ./cgroup: -111 [ 563.164125][T10457] rt1711h 0-004e: probe with driver rt1711h failed with error -5 [ 563.172612][T10457] i2c i2c-0: new_device: Instantiated device rt1711h at 0x4e [ 564.779912][ T29] audit: type=1400 audit(1785901271.919:873): avc: denied { bind } for pid=10473 comm="syz.3.1084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 567.007196][ T29] audit: type=1400 audit(1785901274.149:874): avc: denied { read } for pid=10478 comm="syz.3.1085" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 567.117696][ T29] audit: type=1400 audit(1785901274.149:875): avc: denied { open } for pid=10478 comm="syz.3.1085" path="/228/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 571.206290][ T29] audit: type=1800 audit(1785901277.909:876): pid=10527 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1093" name="file0" dev="overlay" ino=1249 res=0 errno=0 [ 572.351971][T10539] tipc: Enabled bearer , priority 12 [ 572.584232][T10541] syzkaller0: entered promiscuous mode [ 572.603066][T10541] syzkaller0: entered allmulticast mode [ 578.613279][ T8769] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 582.855972][T10593] kvm: kvm [10592]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 583.703063][T10602] mac80211_hwsim hwsim17 syzkaller0: entered promiscuous mode [ 583.710587][T10602] mac80211_hwsim hwsim17 syzkaller0: entered allmulticast mode [ 583.897362][ T47] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 586.999717][ T29] audit: type=1400 audit(1785901294.139:877): avc: denied { read } for pid=10627 comm="syz.2.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 589.524923][T10653] syzkaller0: entered promiscuous mode [ 589.531730][T10653] syzkaller0: entered allmulticast mode [ 589.668752][ T29] audit: type=1400 audit(1785901296.809:878): avc: denied { setopt } for pid=10655 comm="syz.6.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 589.972796][T10663] netlink: 'syz.3.1132': attribute type 1 has an invalid length. [ 590.156189][T10663] bond1: entered promiscuous mode [ 590.181037][T10663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 591.743912][T10666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 591.799428][T10666] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 591.834189][T10666] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 591.882170][T10666] bond1: (slave ip6gre1): making interface the new active one [ 591.906455][T10666] ip6gre1: entered promiscuous mode [ 592.164604][T10666] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 592.411198][ T29] audit: type=1400 audit(1785901299.549:879): avc: denied { transfer } for pid=10682 comm="syz.2.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 593.284803][T10686] syzkaller0: entered promiscuous mode [ 593.290314][T10686] syzkaller0: entered allmulticast mode [ 594.149885][T10695] sctp: [Deprecated]: syz.2.1138 (pid 10695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 594.149885][T10695] Use struct sctp_sack_info instead [ 594.666379][ T5817] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 596.204578][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 596.240408][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 596.292916][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 598.224278][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 598.534259][ T5817] usb 3-1: string descriptor 0 read error: -71 [ 598.855925][ T5817] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 598.872473][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.884630][ T5817] usb 3-1: config 0 descriptor?? [ 599.669313][ T5817] usb 3-1: can't set config #0, error -71 [ 599.711501][ T5817] usb 3-1: USB disconnect, device number 12 [ 599.982997][ T29] audit: type=1400 audit(1785901307.129:880): avc: denied { connect } for pid=10714 comm="syz.1.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 600.041504][T10722] 9pnet_fd: p9_fd_create_unix (10722): problem connecting socket: ./cgroup: -111 [ 600.092072][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1147'. [ 600.272178][ T5817] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 600.560602][ T5723] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 600.606776][ T5817] usb 2-1: Using ep0 maxpacket: 32 [ 600.674833][ T5817] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 600.779400][ T5817] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 600.814917][ T29] audit: type=1400 audit(1785901307.909:881): avc: denied { connect } for pid=10716 comm="syz.4.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 600.865463][ T5723] usb 4-1: unable to get BOS descriptor or descriptor too short [ 600.907811][ T5817] usb 2-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=21.11 [ 600.930071][ T5723] usb 4-1: not running at top speed; connect to a high speed hub [ 600.973982][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.012393][ T5723] usb 4-1: config 1 has an invalid descriptor of length 231, skipping remainder of the config [ 601.040905][ T5817] usb 2-1: Product: syz [ 601.066835][ T5723] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 601.082755][ T5817] usb 2-1: Manufacturer: syz [ 601.102862][ T29] audit: type=1400 audit(1785901308.229:882): avc: denied { setopt } for pid=10716 comm="syz.4.1148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 601.130508][ T5817] usb 2-1: SerialNumber: syz [ 601.169458][ T5723] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 601.234907][ T5817] usb 2-1: config 0 descriptor?? [ 601.261026][ T5723] usb 4-1: string descriptor 0 read error: -22 [ 601.492608][ T5723] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 601.846838][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.922193][ T5817] usb 2-1: USB disconnect, device number 13 [ 602.187387][ T5723] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 602.250620][ T5723] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 602.284646][ T5723] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 602.335436][ T5723] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 602.363869][T10728] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 602.750625][T10746] o2cb: This node has not been configured. [ 602.756879][T10746] o2cb: Cluster check failed. Fix errors before retrying. [ 602.764287][T10746] (syz.6.1155,10746,1):user_dlm_register:674 ERROR: status = -22 [ 602.772148][T10746] (syz.6.1155,10746,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file2" [ 602.790054][ T29] audit: type=1400 audit(1785901309.889:883): avc: denied { write } for pid=10740 comm="syz.6.1155" name="/" dev="ocfs2_dlmfs" ino=33103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 603.602390][ T29] audit: type=1400 audit(1785901309.889:884): avc: denied { add_name } for pid=10740 comm="syz.6.1155" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 603.730806][ T29] audit: type=1400 audit(1785901309.889:885): avc: denied { create } for pid=10740 comm="syz.6.1155" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 603.759958][ T29] audit: type=1400 audit(1785901309.889:886): avc: denied { associate } for pid=10740 comm="syz.6.1155" name="file2" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 603.793979][T10728] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 603.806518][T10728] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 603.814616][T10728] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 604.355880][T10728] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 604.711372][T10728] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 604.724078][T10728] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 605.721887][T10728] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 606.001195][T10728] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 606.139700][T10728] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 608.120044][ T9798] usb 4-1: USB disconnect, device number 12 [ 608.483440][ T29] audit: type=1400 audit(1785901315.609:887): avc: denied { setopt } for pid=10774 comm="syz.3.1162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 609.214334][T10784] syzkaller0: entered promiscuous mode [ 609.220089][T10784] syzkaller0: entered allmulticast mode [ 611.448204][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 611.581253][ T29] audit: type=1400 audit(1785901318.719:888): avc: denied { read } for pid=10796 comm="syz.3.1167" name="usbmon7" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 611.686884][ T29] audit: type=1400 audit(1785901318.829:889): avc: denied { create } for pid=10799 comm="syz.2.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 612.425662][ T29] audit: type=1400 audit(1785901319.309:890): avc: denied { write } for pid=10799 comm="syz.2.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 615.841104][ T1160] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 615.905190][ T29] audit: type=1400 audit(1785901323.049:891): avc: denied { mount } for pid=10813 comm="syz.1.1172" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 622.349154][T10870] syzkaller0: entered promiscuous mode [ 622.354729][T10870] syzkaller0: entered allmulticast mode [ 624.199368][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.581876][ T9798] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 629.672452][T10906] tipc: Started in network mode [ 629.678961][T10906] tipc: Node identity 080211000001, cluster identity 4711 [ 629.698491][T10906] tipc: Enabled bearer , priority 0 [ 629.797980][ T9798] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 629.808014][T10906] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 629.823376][ T9798] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.866857][ T9798] usb 5-1: Product: syz [ 629.881474][ T9798] usb 5-1: Manufacturer: syz [ 629.894088][ T9798] usb 5-1: SerialNumber: syz [ 629.938748][T10906] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 630.011826][T10907] tipc: Resetting bearer [ 630.076986][ T5624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 630.093842][ T5624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 630.105717][ T5624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 630.118400][ T5624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 630.127744][ T5624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 630.448828][ T9798] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 630.566459][ T9798] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 630.742687][ T9800] tipc: Node number set to 134418688 [ 631.167729][ T9798] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 631.183076][ T9798] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 631.200202][ T9798] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 631.281847][ T9798] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 631.425794][T10931] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 631.890122][T10918] IPVS: stopping backup sync thread 10931 ... [ 631.899466][T10933] syzkaller0: entered promiscuous mode [ 631.907887][ T29] audit: type=1400 audit(1785901339.029:892): avc: denied { write } for pid=10928 comm="syz.2.1186" name="functions" dev="configfs" ino=11825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 631.932821][T10933] syzkaller0: entered allmulticast mode [ 632.077811][ T29] audit: type=1400 audit(1785901339.029:893): avc: denied { write } for pid=10928 comm="syz.2.1186" name="core" dev="configfs" ino=2915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 632.183659][ T5626] Bluetooth: hci6: command tx timeout [ 632.200765][ T29] audit: type=1400 audit(1785901339.049:894): avc: denied { write } for pid=10928 comm="syz.2.1186" name="rd_mcp_0" dev="configfs" ino=32686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 632.255895][ T29] audit: type=1400 audit(1785901339.259:895): avc: denied { write } for pid=10928 comm="syz.2.1186" name="target" dev="configfs" ino=2914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 632.386491][ T29] audit: type=1400 audit(1785901339.279:896): avc: denied { write } for pid=10928 comm="syz.2.1186" name="usb_gadget" dev="configfs" ino=33659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 632.476061][ T9798] usb 5-1: USB disconnect, device number 20 [ 633.418178][ T29] audit: type=1400 audit(1785901340.559:897): avc: denied { create } for pid=10959 comm="syz.1.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 633.723516][T10968] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 634.262278][ T5626] Bluetooth: hci6: command tx timeout [ 635.884590][T10967] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1200'. [ 636.686072][ T5626] Bluetooth: hci6: command tx timeout [ 637.867542][T10908] lo speed is unknown, defaulting to 1000 [ 638.037135][ T29] audit: type=1400 audit(1785901345.179:898): avc: denied { create } for pid=10986 comm="syz.6.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 638.741943][ T5626] Bluetooth: hci6: command tx timeout [ 639.912787][T10987] syz.6.1204 (10987): drop_caches: 2 [ 641.242152][ T5723] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 641.554953][ T5723] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 642.594035][ T5723] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 643.072744][ T5723] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 643.101382][ T5723] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 643.176160][ T5723] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 643.228808][ T13] bridge_slave_1: left allmulticast mode [ 643.246891][ T13] bridge_slave_1: left promiscuous mode [ 643.438041][ T5723] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 643.455698][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.482370][ T13] bridge_slave_0: left allmulticast mode [ 643.869089][ T5723] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 643.892047][ T13] bridge_slave_0: left promiscuous mode [ 643.898769][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.929447][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 643.955660][ T5723] usb 3-1: Product: syz [ 643.973327][ T5723] usb 3-1: Manufacturer: syz [ 644.212810][ T8758] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 644.223799][ T5723] usb 3-1: can't set config #1, error -71 [ 645.113729][ T5723] usb 3-1: USB disconnect, device number 13 [ 646.605059][ T13] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 646.616756][ T13] ip6gre1 (unregistering): left promiscuous mode [ 647.575207][ T7928] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 647.790053][ T29] audit: type=1400 audit(1785901354.929:899): avc: denied { write } for pid=11033 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.047423][ T5626] Bluetooth: hci4: unexpected event for opcode 0x4ad0 [ 648.062988][ T29] audit: type=1400 audit(1785901355.199:900): avc: denied { write } for pid=11067 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.206721][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.246857][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.284809][ T13] bond0 (unregistering): Released all slaves [ 649.008889][ T13] bond1 (unregistering): Released all slaves [ 649.145108][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5 [ 649.254964][ T13] tipc: Left network mode [ 651.997200][T10908] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.041381][T10908] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.086535][T10908] bridge_slave_0: entered allmulticast mode [ 652.110452][T10908] bridge_slave_0: entered promiscuous mode [ 652.905602][T11095] tipc: Enabled bearer , priority 0 [ 653.000262][T10908] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.034907][T10908] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.065507][T10908] bridge_slave_1: entered allmulticast mode [ 653.083673][T10908] bridge_slave_1: entered promiscuous mode [ 653.140924][T11101] syzkaller0: entered promiscuous mode [ 653.150850][T11101] syzkaller0: entered allmulticast mode [ 653.355106][T11116] tipc: Resetting bearer [ 653.389645][T11093] tipc: Resetting bearer [ 653.487243][T11134] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[9948] was attempted by ""[11134] [ 653.852305][T11093] tipc: Disabling bearer [ 653.965834][T11137] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 655.258526][ T29] audit: type=1400 audit(1785901362.399:901): avc: denied { write } for pid=11105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.335781][ T29] audit: type=1400 audit(1785901366.479:902): avc: denied { write } for pid=11148 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 659.392194][T10908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.046075][T10908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.134487][T11182] /dev/nullb0: Can't open blockdev [ 661.031573][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6 [ 661.176203][T10908] team0: Port device team_slave_0 added [ 661.262911][T10908] team0: Port device team_slave_1 added [ 662.211678][ T13] hsr_slave_0: left promiscuous mode [ 662.294508][ T13] hsr_slave_1: left promiscuous mode [ 662.311816][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 662.323944][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 662.857786][ T29] audit: type=1400 audit(1785901369.999:903): avc: denied { connect } for pid=11207 comm="syz.6.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 663.005177][ T29] audit: type=1400 audit(1785901370.149:904): avc: denied { setopt } for pid=11207 comm="syz.6.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 663.395790][T10908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.448773][T10908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.554223][T10908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.645801][T10908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.680143][T10908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.745327][T10908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.080219][T11225] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 666.180151][T10908] hsr_slave_0: entered promiscuous mode [ 666.243231][T10908] hsr_slave_1: entered promiscuous mode [ 666.280049][T10908] debugfs: 'hsr0' already exists in 'hsr' [ 666.296642][T10908] Cannot create hsr debugfs directory [ 666.591754][ T9781] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 666.645681][ T13] IPVS: stop unused estimator thread 0... [ 666.761716][ T9781] usb 7-1: Using ep0 maxpacket: 8 [ 666.785934][ T9781] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 666.823934][ T9781] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.883474][ T9781] pvrusb2: Hardware description: Terratec Grabster AV400 [ 666.900882][ T9781] pvrusb2: ********** [ 666.948919][ T9781] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 666.990203][ T9781] pvrusb2: Important functionality might not be entirely working. [ 667.041295][ T9781] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 667.114452][ T9781] pvrusb2: ********** [ 667.141517][ T2364] pvrusb2: Invalid write control endpoint [ 667.967431][T11234] netlink: 'syz.6.1247': attribute type 21 has an invalid length. [ 668.541233][ T2364] pvrusb2: Invalid write control endpoint [ 668.579068][ T2364] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 668.661711][ T2364] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 668.678483][T11234] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1247'. [ 668.693186][ T2364] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 668.745100][ T5723] usb 7-1: USB disconnect, device number 3 [ 668.758472][ T2364] pvrusb2: Device being rendered inoperable [ 668.793441][ T2364] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 668.827290][ T2364] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 668.872485][ T29] audit: type=1400 audit(1785901376.009:905): avc: denied { write } for pid=11229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 668.982886][ T2364] pvrusb2: Attached sub-driver cx25840 [ 669.015359][ T2364] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 669.065851][ T2364] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 669.072917][T10908] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 669.129718][ T29] audit: type=1400 audit(1785901376.269:906): avc: denied { write } for pid=11262 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 669.163334][T10908] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 669.174971][T11261] syzkaller0: entered promiscuous mode [ 669.180475][T11261] syzkaller0: entered allmulticast mode [ 669.297458][T10908] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 669.354950][T10908] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 669.385180][ T5274] 8021q: adding VLAN 0 to HW filter on device eth7 [ 669.406113][T10908] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 669.534404][T10908] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 669.759907][T10908] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 669.860062][T10908] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 670.195464][T11261] tipc: Started in network mode [ 670.200637][T11261] tipc: Node identity da60f09641d2, cluster identity 4711 [ 670.235009][T11261] tipc: Enabled bearer , priority 0 [ 670.415145][T11260] tipc: Resetting bearer [ 670.452509][T11260] tipc: Disabling bearer [ 672.940061][T10908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 673.026161][T11294] syzkaller0: entered promiscuous mode [ 673.033428][T11294] syzkaller0: entered allmulticast mode [ 673.270955][T10908] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.319685][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.326929][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.934481][ T574] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.941984][ T574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.090043][T10908] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 676.165559][T10908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 676.420902][ T29] audit: type=1400 audit(1785901383.559:907): avc: denied { write } for pid=11290 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 676.805855][T11315] bond1: option xmit_hash_policy: invalid value (6) [ 676.824390][ T29] audit: type=1400 audit(1785901383.969:908): avc: denied { write } for pid=11325 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 677.959172][T11315] bond1 (unregistering): Released all slaves [ 678.125853][ T56] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 678.621786][ T5274] 8021q: adding VLAN 0 to HW filter on device eth8 [ 680.096457][ T8988] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 681.239158][ T29] audit: type=1400 audit(1785901388.379:909): avc: denied { open } for pid=11360 comm="syz.4.1271" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 681.375187][ T29] audit: type=1400 audit(1785901388.439:910): avc: denied { ioctl } for pid=11360 comm="syz.4.1271" path="/dev/ptyqc" dev="devtmpfs" ino=131 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 682.238557][T11373] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 682.292270][ T29] audit: type=1400 audit(1785901389.399:911): avc: denied { ioctl } for pid=11370 comm="syz.2.1272" path="socket:[35888]" dev="sockfs" ino=35888 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 684.164742][T11393] syzkaller0: entered promiscuous mode [ 684.170412][T11393] syzkaller0: entered allmulticast mode [ 684.589415][ T29] audit: type=1400 audit(1785901391.519:912): avc: denied { connect } for pid=11399 comm="syz.4.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 685.048113][ T29] audit: type=1400 audit(1785901392.179:913): avc: denied { read } for pid=11399 comm="syz.4.1277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 685.109576][T10908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.470184][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.625976][T11411] xt_hashlimit: size too large, truncated to 1048576 [ 686.963400][T11424] xt_hashlimit: size too large, truncated to 1048576 [ 690.318710][ T29] audit: type=1400 audit(1785901397.459:914): avc: denied { create } for pid=11437 comm="syz.6.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 691.649801][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 691.666865][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 691.685382][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 691.693573][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 691.707289][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 693.767825][T11482] 9pnet_fd: Insufficient options for proto=fd [ 693.866253][ T5624] Bluetooth: hci0: command tx timeout [ 694.683926][ T29] audit: type=1400 audit(1785901401.819:915): avc: denied { write } for pid=11447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 694.841844][ T9778] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 695.004412][ T29] audit: type=1400 audit(1785901402.149:916): avc: denied { write } for pid=11489 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.111879][ T9778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.128309][ T9778] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.138729][ T9778] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 695.296001][ T9778] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.674456][ T5624] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 695.731500][ T9778] usb 2-1: config 0 descriptor?? [ 696.370896][ T9778] usb 2-1: language id specifier not provided by device, defaulting to English [ 696.503157][ T5624] Bluetooth: hci0: command tx timeout [ 697.336033][ T9778] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #100: -71 [ 697.375577][ T9778] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 697.389636][ T9778] uclogic 0003:256C:006D.0004: failed probing pen v1 parameters: -71 [ 697.417765][ T9778] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 697.455712][ T9778] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 697.837075][T11516] syzkaller0: entered promiscuous mode [ 697.842718][T11516] syzkaller0: entered allmulticast mode [ 697.863011][ T9778] usb 2-1: USB disconnect, device number 14 [ 697.967116][ T29] audit: type=1400 audit(1785901405.109:917): avc: denied { write } for pid=11499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 698.061521][T11461] lo speed is unknown, defaulting to 1000 [ 698.581908][ T5624] Bluetooth: hci0: command tx timeout [ 698.656721][ T29] audit: type=1400 audit(1785901405.789:918): avc: denied { write } for pid=11536 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 700.210091][T11559] xt_hashlimit: size too large, truncated to 1048576 [ 700.853122][ T5624] Bluetooth: hci0: command tx timeout [ 703.590499][ T35] bridge_slave_1: left allmulticast mode [ 704.181374][ T29] audit: type=1400 audit(1785901410.799:919): avc: denied { connect } for pid=11572 comm="syz.6.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 704.248817][ T35] bridge_slave_1: left promiscuous mode [ 704.266759][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.292928][ T35] bridge_slave_0: left allmulticast mode [ 704.317979][ T35] bridge_slave_0: left promiscuous mode [ 704.341881][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.388162][ T29] audit: type=1400 audit(1785901412.529:920): avc: denied { write } for pid=11569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 705.625497][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.720913][T11597] x_tables: duplicate underflow at hook 1 [ 706.007056][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 706.164456][ T35] bond0 (unregistering): Released all slaves [ 706.263276][ T29] audit: type=1400 audit(1785901413.409:921): avc: denied { write } for pid=11593 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 707.297496][T11601] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1305'. [ 707.320653][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1305'. [ 708.671096][T11606] syzkaller0: entered promiscuous mode [ 708.676766][T11606] syzkaller0: entered allmulticast mode [ 709.024836][ T35] hsr_slave_0: left promiscuous mode [ 709.034460][ T35] hsr_slave_1: left promiscuous mode [ 709.044890][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 709.069182][ T29] audit: type=1400 audit(1785901416.209:922): avc: denied { connect } for pid=11619 comm="syz.4.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 709.093186][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 709.283324][ T9799] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 709.581507][ T9799] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 709.600922][ T9799] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 709.621895][ T9799] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 709.634633][ T9799] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 709.676119][ T9799] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 709.736184][ T9799] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 709.751664][ T9799] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 709.755677][ T35] team0 (unregistering): Port device team_slave_1 removed [ 709.801721][ T9799] usb 2-1: Product: syz [ 709.845173][ T9799] usb 2-1: Manufacturer: syz [ 710.168570][ T9799] cdc_wdm 2-1:1.0: skipping garbage [ 710.174146][ T9799] cdc_wdm 2-1:1.0: skipping garbage [ 710.187098][ T9799] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 710.204383][ T35] team0 (unregistering): Port device team_slave_0 removed [ 710.219353][ T9799] cdc_wdm 2-1:1.0: Unknown control protocol [ 710.874124][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 711.663824][ T9800] usb 2-1: USB disconnect, device number 15 [ 712.543123][ T13] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 713.658936][T11461] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.670167][T11461] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.683733][T11461] bridge_slave_0: entered allmulticast mode [ 713.705430][T11461] bridge_slave_0: entered promiscuous mode [ 713.872079][T11461] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.911479][T11461] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.934352][T11461] bridge_slave_1: entered allmulticast mode [ 714.700989][T11461] bridge_slave_1: entered promiscuous mode [ 714.877010][T11461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 715.303945][T11461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 715.327678][ T29] audit: type=1400 audit(1785901422.459:923): avc: denied { write } for pid=11624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 716.399273][T11461] team0: Port device team_slave_0 added [ 716.804980][T11461] team0: Port device team_slave_1 added [ 717.318049][ T29] audit: type=1400 audit(1785901424.439:924): avc: denied { write } for pid=11669 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 717.505680][T11461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.536682][T11461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.599335][T11461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.749218][T11461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 717.792151][T11461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 717.848316][T11461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.014657][T11690] sctp: [Deprecated]: syz.1.1319 (pid 11690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 719.014657][T11690] Use struct sctp_sack_info instead [ 719.708994][T11461] hsr_slave_0: entered promiscuous mode [ 719.738414][T11461] hsr_slave_1: entered promiscuous mode [ 719.756310][T11461] debugfs: 'hsr0' already exists in 'hsr' [ 719.767358][T11461] Cannot create hsr debugfs directory [ 719.811656][ T5716] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 719.980262][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 720.001382][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 720.018877][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 720.038605][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 720.051291][ T5716] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 720.084414][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.126008][ T5716] usb 2-1: Product: syz [ 720.144896][ T5716] usb 2-1: Manufacturer: syz [ 720.162243][ T5716] usb 2-1: SerialNumber: syz [ 720.178231][ T5716] usb 2-1: config 0 descriptor?? [ 720.413620][ T5716] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 720.842221][ T29] audit: type=1400 audit(1785901427.909:925): avc: denied { write } for pid=11700 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 721.191396][ T5716] usb 2-1: USB disconnect, device number 16 [ 721.897658][ T29] audit: type=1400 audit(1785901429.039:926): avc: denied { write } for pid=11731 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 724.228078][ T5274] 8021q: adding VLAN 0 to HW filter on device eth9 [ 724.247561][ T29] audit: type=1400 audit(1785901430.529:927): avc: denied { write } for pid=11735 comm="syz.2.1326" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 724.272962][ T29] audit: type=1400 audit(1785901430.619:928): avc: denied { audit_write } for pid=11735 comm="syz.2.1326" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 724.295702][ T29] audit: type=1400 audit(1785901430.689:929): avc: denied { watch watch_reads } for pid=11735 comm="syz.2.1326" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 724.615509][T11746] syzkaller0: entered promiscuous mode [ 724.621532][T11746] syzkaller0: entered allmulticast mode [ 726.916091][T11766] Invalid ELF header magic: != ELF [ 727.896527][T11769] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1333'. [ 728.763691][T11782] rdma_rxe: rxe_newlink: failed to add lo [ 729.126136][ T29] audit: type=1400 audit(1785901436.259:930): avc: denied { write } for pid=11753 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 730.386484][ T29] audit: type=1400 audit(1785901437.459:931): avc: denied { write } for pid=11788 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 731.692225][T11461] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 731.785877][T11461] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 731.825170][T11461] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 731.889505][T11461] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 731.904168][T11461] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 732.203741][T11808] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 732.213077][T11808] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 733.103345][T11461] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 733.111993][T11461] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 733.261783][ T29] audit: type=1400 audit(1785901440.329:932): avc: denied { write } for pid=11802 comm="syz.4.1338" name="functions" dev="configfs" ino=11825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 733.296277][T11461] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 734.151312][ T29] audit: type=1400 audit(1785901440.509:933): avc: denied { write } for pid=11802 comm="syz.4.1338" name="functions" dev="configfs" ino=11825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 734.244358][T11798] Bluetooth: MGMT ver 1.23 [ 735.377552][ T29] audit: type=1400 audit(1785901442.509:934): avc: denied { write } for pid=11793 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.605068][T11461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 735.664999][T11836] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 735.787002][T11461] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.875570][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.882753][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.005678][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.013479][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 737.160355][ T120] Process accounting resumed [ 738.077815][ T29] audit: type=1400 audit(1785901445.219:935): avc: denied { write } for pid=11843 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.108517][T11847] Mass Storage Function, version: 2009/09/11 [ 738.115483][T11847] LUN: removable file: (no medium) [ 738.142231][ T29] audit: type=1400 audit(1785901445.249:936): avc: denied { write } for pid=11846 comm="syz.2.1344" name="functions" dev="configfs" ino=11825 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 738.219082][ T29] audit: type=1800 audit(1785901445.269:937): pid=11847 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1344" name="file" dev="configfs" ino=38166 res=0 errno=0 [ 738.336101][ T29] audit: type=1400 audit(1785901445.269:938): avc: denied { create } for pid=11846 comm="syz.2.1344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 738.482704][T11853] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1345'. [ 738.821885][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 739.268977][T11863] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5617] was attempted by ""[11863] [ 741.333967][T11872] lo speed is unknown, defaulting to 1000 [ 743.337667][T11893] syzkaller0: entered promiscuous mode [ 743.345641][T11893] syzkaller0: entered allmulticast mode [ 743.703666][ T29] audit: type=1400 audit(1785901450.849:939): avc: denied { write } for pid=11869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 744.017957][ T47] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 745.564846][ T7928] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 746.033423][ T29] audit: type=1400 audit(1785901453.079:940): avc: denied { mount } for pid=11920 comm="syz.6.1356" name="/" dev="hugetlbfs" ino=38294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 747.687809][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.141042][ T29] audit: type=1400 audit(1785901455.279:941): avc: denied { write } for pid=11921 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 748.728403][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1357'. [ 749.287346][T11933] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 750.240352][T11461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 751.695047][ T29] audit: type=1326 audit(1785901458.079:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.1369" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f079e019 code=0x7ffc0000 [ 751.954726][ T29] audit: type=1326 audit(1785901458.079:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.1369" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f079e019 code=0x7ffc0000 [ 753.007758][ T29] audit: type=1326 audit(1785901458.079:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.1369" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f75f075e84e code=0x7ffc0000 [ 753.228327][ T29] audit: type=1326 audit(1785901458.089:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.1369" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f079e019 code=0x7ffc0000 [ 753.331712][ T29] audit: type=1326 audit(1785901458.089:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.1369" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f079e019 code=0x7ffc0000 [ 753.609725][ T29] audit: type=1326 audit(1785901458.089:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.1369" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f75f079e019 code=0x7ffc0000 [ 753.648615][ T29] audit: type=1326 audit(1785901458.089:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.1369" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f079e019 code=0x7ffc0000 [ 753.650978][ T5626] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 753.677587][ T29] audit: type=1326 audit(1785901458.089:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.1369" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f079e019 code=0x7ffc0000 [ 753.746170][T11960] o2cb: This node has not been configured. [ 753.752115][T11960] o2cb: Cluster check failed. Fix errors before retrying. [ 753.761270][T11960] (syz.1.1361,11960,1):user_dlm_register:674 ERROR: status = -22 [ 753.769151][T11960] (syz.1.1361,11960,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file2" [ 753.798663][ T5626] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 753.811499][ T5626] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 753.825051][ T5626] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 753.839402][ T5626] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 754.368653][ T29] audit: type=1326 audit(1785901458.089:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.1369" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7f75f079e019 code=0x7ffc0000 [ 754.399888][ T29] audit: type=1326 audit(1785901458.089:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11944 comm="syz.1.1369" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75f079e019 code=0x7ffc0000 [ 756.421747][ T5626] Bluetooth: hci6: command tx timeout [ 756.555175][T11977] netlink: zone id is out of range [ 756.561010][T11977] netlink: zone id is out of range [ 756.631752][T11977] syz.2.1364(11977): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 756.818088][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 756.818109][ T29] audit: type=1326 audit(1785901463.639:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.2.1364" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20cf39e019 code=0x7ffc0000 [ 757.291724][ T29] audit: type=1326 audit(1785901463.639:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.2.1364" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20cf39e019 code=0x7ffc0000 [ 757.438500][T11976] syzkaller0: entered promiscuous mode [ 757.444049][T11976] syzkaller0: entered allmulticast mode [ 757.460972][ T29] audit: type=1326 audit(1785901463.649:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.2.1364" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f20cf39e019 code=0x7ffc0000 [ 757.598770][ T29] audit: type=1326 audit(1785901463.649:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.2.1364" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20cf39e019 code=0x7ffc0000 [ 757.740844][ T29] audit: type=1326 audit(1785901463.649:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.2.1364" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20cf39e019 code=0x7ffc0000 [ 757.882285][ T29] audit: type=1326 audit(1785901463.649:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.2.1364" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f20cf39e019 code=0x7ffc0000 [ 758.020766][ T29] audit: type=1326 audit(1785901463.659:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.2.1364" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20cf39e019 code=0x7ffc0000 [ 758.153149][ T29] audit: type=1326 audit(1785901463.659:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.2.1364" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20cf39e019 code=0x7ffc0000 [ 758.193088][T11957] lo speed is unknown, defaulting to 1000 [ 758.255197][ T29] audit: type=1326 audit(1785901463.659:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.2.1364" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f20cf39e019 code=0x7ffc0000 [ 758.374898][ T29] audit: type=1326 audit(1785901463.669:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11972 comm="syz.2.1364" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20cf39e019 code=0x7ffc0000 [ 758.517008][ T5626] Bluetooth: hci6: command tx timeout [ 759.754145][T11957] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.764202][T11957] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.783017][T11957] bridge_slave_0: entered allmulticast mode [ 759.901875][T11957] bridge_slave_0: entered promiscuous mode [ 759.923942][T11957] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.002144][T11957] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.142222][T11957] bridge_slave_1: entered allmulticast mode [ 760.167716][T11957] bridge_slave_1: entered promiscuous mode [ 760.608166][ T5626] Bluetooth: hci6: command tx timeout [ 761.616465][T11957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.658791][T11957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.905366][T11957] team0: Port device team_slave_0 added [ 762.676913][ T5626] Bluetooth: hci6: command tx timeout [ 766.063978][T11957] team0: Port device team_slave_1 added [ 766.434766][T11957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.443379][T11957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.469419][T11957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.483148][T11957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.490127][T11957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.518879][T11957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.705797][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 766.705828][ T29] audit: type=1400 audit(1785901473.849:1015): avc: denied { write } for pid=12031 comm="syz.1.1378" name="0x409" dev="configfs" ino=21312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 766.793351][ T29] audit: type=1400 audit(1785901473.919:1016): avc: denied { create } for pid=12031 comm="syz.1.1378" name="serialnumber" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 767.308206][T12035] rt1719 0-0049: probe with driver rt1719 failed with error -5 [ 767.330207][T12035] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 767.395579][T12037] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 767.648815][T12037] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 768.060006][T11957] hsr_slave_0: entered promiscuous mode [ 768.137616][T11957] hsr_slave_1: entered promiscuous mode [ 768.141724][ T29] audit: type=1400 audit(1785901474.739:1017): avc: denied { write } for pid=12031 comm="syz.1.1378" name="uncompressed" dev="configfs" ino=27354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 768.174295][T11957] debugfs: 'hsr0' already exists in 'hsr' [ 768.187405][T11957] Cannot create hsr debugfs directory [ 768.760237][T12038] bond1: entered promiscuous mode [ 770.693101][ T29] audit: type=1400 audit(1785901477.839:1018): avc: denied { write } for pid=12054 comm="syz.4.1382" lport=14737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 770.694236][T12062] binder: 12059:12062 ioctl c0306201 0 returned -14 [ 770.767023][ T1160] bridge_slave_1: left allmulticast mode [ 770.784740][ T1160] bridge_slave_1: left promiscuous mode [ 770.803934][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.850276][ T1160] bridge_slave_0: left allmulticast mode [ 770.864645][ T1160] bridge_slave_0: left promiscuous mode [ 770.877341][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.360837][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.388085][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.401064][ T1160] bond0 (unregistering): Released all slaves [ 771.491987][T12070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1385'. [ 772.490134][T12075] xt_hashlimit: size too large, truncated to 1048576 [ 773.693914][ T1160] hsr_slave_0: left promiscuous mode [ 773.807203][ T1160] hsr_slave_1: left promiscuous mode [ 773.918118][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 774.009241][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 774.212968][ T29] audit: type=1400 audit(1785901481.329:1019): avc: denied { write } for pid=12092 comm="syz.4.1389" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 775.699386][ T29] audit: type=1400 audit(1785901481.449:1020): avc: denied { create } for pid=12092 comm="syz.4.1389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 777.064654][ T29] audit: type=1400 audit(1785901484.199:1021): avc: denied { write } for pid=12080 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 777.201083][ T574] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 778.392124][ T29] audit: type=1400 audit(1785901485.529:1022): avc: denied { write } for pid=12115 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 778.554975][ T1160] team0 (unregistering): Port device team_slave_1 removed [ 778.564926][ T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 778.621367][ T1160] team0 (unregistering): Port device team_slave_0 removed [ 779.219351][ T5274] 8021q: adding VLAN 0 to HW filter on device eth9 [ 780.101874][ T29] audit: type=1400 audit(1785901487.089:1023): avc: denied { remount } for pid=12130 comm="syz.1.1393" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 782.065070][ T29] audit: type=1400 audit(1785901489.209:1024): avc: denied { bind } for pid=12162 comm="syz.6.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 782.083499][T11957] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 782.151292][ T29] audit: type=1400 audit(1785901489.289:1025): avc: denied { listen } for pid=12162 comm="syz.6.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 782.220459][T11957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 782.257929][T11957] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 782.283151][ T29] audit: type=1400 audit(1785901489.359:1026): avc: denied { write } for pid=12152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.329583][T11957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 782.380233][T11957] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 782.458469][ T29] audit: type=1400 audit(1785901489.449:1027): avc: denied { accept } for pid=12162 comm="syz.6.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 782.460173][T11957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 782.688163][T11957] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 782.736151][T11957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 782.763471][ T29] audit: type=1400 audit(1785901489.909:1028): avc: denied { write } for pid=12175 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.858365][T12183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1402'. [ 783.977350][T11957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.047257][T11957] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.076195][ T8988] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.083420][ T8988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 784.160881][ T8988] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.168090][ T8988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 784.355261][ T120] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 785.054521][ T120] usb 2-1: Using ep0 maxpacket: 32 [ 785.091812][ T120] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 785.104327][ T120] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 785.115645][ T120] usb 2-1: config 0 interface 0 has no altsetting 0 [ 785.137362][ T120] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 785.413832][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.441689][ T120] usb 2-1: Product: syz [ 785.446230][ T120] usb 2-1: Manufacturer: syz [ 786.251792][ T29] audit: type=1400 audit(1785901492.849:1029): avc: denied { write } for pid=12210 comm="syz.6.1406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 786.255994][ T120] usb 2-1: SerialNumber: syz [ 786.283585][ T120] usb 2-1: config 0 descriptor?? [ 786.592221][T12220] dummy0: entered allmulticast mode [ 786.602740][T12220] dummy0: left allmulticast mode [ 786.685812][ T5626] Bluetooth: hci4: unexpected event for opcode 0x732f [ 786.813502][ T120] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 787.005575][ T120] gs_usb 2-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 787.015542][ T120] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32 [ 787.113036][ T29] audit: type=1400 audit(1785901494.239:1030): avc: denied { write } for pid=12208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 789.318880][ T9798] usb 2-1: USB disconnect, device number 17 [ 789.360107][ T29] audit: type=1400 audit(1785901496.499:1031): avc: denied { write } for pid=12249 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 789.715050][T11957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.137329][T12264] binder_alloc: 12262: binder_alloc_buf, no vma [ 790.468321][T12272] tc_dump_action: action bad kind [ 790.884968][ T29] audit: type=1400 audit(1785901498.029:1032): avc: denied { write } for pid=12257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 791.270591][ T29] audit: type=1400 audit(1785901498.409:1033): avc: denied { bind } for pid=12270 comm="syz.6.1413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 791.370014][ T29] audit: type=1400 audit(1785901498.499:1034): avc: denied { write } for pid=12287 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 791.571714][T12297] futex_wake_op: syz.2.1417 tries to shift op by -1; fix this program [ 791.847247][T12291] syzkaller0: entered promiscuous mode [ 791.852841][T12291] syzkaller0: entered allmulticast mode [ 792.067725][T11957] veth0_vlan: entered promiscuous mode [ 792.078270][T12305] binder: BINDER_SET_CONTEXT_MGR already set [ 792.129694][T12305] binder: 12304:12305 ioctl 4018620d 200000004a80 returned -16 [ 792.195989][T11957] veth1_vlan: entered promiscuous mode [ 792.309837][T11957] veth0_macvtap: entered promiscuous mode [ 792.343462][T12313] binder_alloc: 12311: binder_alloc_buf, no vma [ 792.487820][T11957] veth1_macvtap: entered promiscuous mode [ 792.741904][ T29] audit: type=1400 audit(1785901499.739:1035): avc: denied { bpf } for pid=12310 comm="syz.2.1420" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 792.851489][T11957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 792.875480][T11957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.010951][T11190] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.323477][T12329] xt_hashlimit: size too large, truncated to 1048576 [ 793.610448][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.092100][ T35] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.191466][ T29] audit: type=1400 audit(1785901501.319:1036): avc: denied { perfmon } for pid=12333 comm="syz.6.1424" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 794.422201][ T8987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.457279][ T8987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.856410][ T8988] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.935122][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.960008][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.961398][ T29] audit: type=1400 audit(1785901502.099:1037): avc: denied { write } for pid=12306 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.098127][ T5723] IPVS: starting estimator thread 0... [ 795.658686][T12356] xt_hashlimit: size too large, truncated to 1048576 [ 795.842704][T12350] IPVS: using max 40 ests per chain, 96000 per kthread [ 796.453096][ T29] audit: type=1400 audit(1785901503.589:1038): avc: denied { write } for pid=12359 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.567022][T12402] xt_hashlimit: size too large, truncated to 1048576 [ 803.374135][ T5716] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 803.677363][ T5716] usb 7-1: Using ep0 maxpacket: 8 [ 803.735663][ T5716] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 803.797358][ T5716] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.850116][ T5716] usb 7-1: Product: syz [ 803.901135][ T5716] usb 7-1: Manufacturer: syz [ 803.953012][ T5716] usb 7-1: SerialNumber: syz [ 804.055478][ T5716] usb 7-1: config 0 descriptor?? [ 804.162361][T12412] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 804.213504][ T5716] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 804.287981][T12418] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1443'. [ 805.263050][ T5716] gspca_sonixj: reg_w1 err -71 [ 805.453405][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 805.478772][ T5716] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 805.559538][T12426] xt_hashlimit: size too large, truncated to 1048576 [ 805.840729][ T5716] usb 7-1: USB disconnect, device number 4 [ 807.005482][T12439] binder_alloc: 12437: binder_alloc_buf, no vma [ 807.811459][T12451] binder_alloc: 12440: binder_alloc_buf, no vma [ 807.983972][T12456] binder_alloc: 12452: binder_alloc_buf, no vma [ 808.532308][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.665926][ T574] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 809.930798][T12471] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 810.000498][ T8988] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 810.513273][ T29] audit: type=1400 audit(1785901517.589:1039): avc: denied { mmap_zero } for pid=12478 comm="syz.6.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 810.726730][T12487] binder: 12485:12487 ioctl 4018620d 0 returned -22 [ 811.141648][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 811.397059][T12499] xt_hashlimit: size too large, truncated to 1048576 [ 812.022013][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805870b000: rx timeout, send abort [ 812.078652][ T29] audit: type=1400 audit(1785901519.219:1040): avc: denied { read } for pid=4961 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 812.173285][ T29] audit: type=1400 audit(1785901519.219:1041): avc: denied { search } for pid=4961 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 812.298590][ T29] audit: type=1400 audit(1785901519.219:1042): avc: denied { write search } for pid=4961 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 812.949553][ T29] audit: type=1400 audit(1785901519.219:1043): avc: denied { add_name } for pid=4961 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.347835][ T29] audit: type=1400 audit(1785901519.219:1044): avc: denied { create } for pid=4961 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 813.368695][ T29] audit: type=1400 audit(1785901519.219:1045): avc: denied { append open } for pid=4961 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 813.422937][ T29] audit: type=1400 audit(1785901519.219:1046): avc: denied { getattr } for pid=4961 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 815.919437][T12550] xt_hashlimit: size too large, truncated to 1048576 [ 817.019350][T12558] xt_hashlimit: size too large, truncated to 1048576 [ 817.496724][T12561] xt_hashlimit: size too large, truncated to 1048576 [ 819.024792][ T5817] IPVS: starting estimator thread 0... [ 819.640299][T12576] lo speed is unknown, defaulting to 1000 [ 819.930580][T12574] IPVS: using max 41 ests per chain, 98400 per kthread [ 820.854537][T12587] xt_hashlimit: size too large, truncated to 1048576 [ 822.197092][T12602] xt_hashlimit: size too large, truncated to 1048576 [ 823.157995][T12615] xt_hashlimit: size too large, truncated to 1048576 [ 825.482442][T12640] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 825.968541][T12649] xt_hashlimit: size too large, truncated to 1048576 [ 826.036675][T12651] xt_hashlimit: size too large, truncated to 1048576 [ 827.294306][T12666] xt_hashlimit: size too large, truncated to 1048576 [ 827.493657][T12669] xt_hashlimit: size too large, truncated to 1048576 [ 828.310018][T12679] xt_hashlimit: size too large, truncated to 1048576 [ 829.027759][ T29] audit: type=1400 audit(1785901536.169:1047): avc: denied { write } for pid=12676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 829.054304][T12695] xt_hashlimit: size too large, truncated to 1048576 [ 829.406091][ T29] audit: type=1400 audit(1785901536.529:1048): avc: denied { write } for pid=12700 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 830.486856][T12716] xt_hashlimit: size too large, truncated to 1048576 [ 830.968594][ T29] audit: type=1400 audit(1785901538.109:1049): avc: denied { write } for pid=12702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.251099][T12732] xt_hashlimit: size too large, truncated to 1048576 [ 831.361339][ T29] audit: type=1400 audit(1785901538.499:1050): avc: denied { write } for pid=12731 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.570846][T12738] bridge0: port 3(dummy0) entered disabled state [ 831.577415][T12738] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.584726][T12738] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.672854][T12738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 831.719613][T12738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 832.037461][T12757] xt_hashlimit: size too large, truncated to 1048576 [ 832.067718][T12737] [U]  [ 832.067739][T12743] syz1: Port: 1 Link DOWN [ 832.081788][ T8758] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.096800][ T8758] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.115694][ T8758] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.124867][ T8758] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.009187][T12767] xt_hashlimit: size too large, truncated to 1048576 [ 833.460308][T12776] xt_hashlimit: size too large, truncated to 1048576 [ 834.106020][T12782] [U]  [ 834.418592][T12790] xt_hashlimit: size too large, truncated to 1048576 [ 835.064304][ T29] audit: type=1400 audit(1785901542.209:1051): avc: denied { write } for pid=12791 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 835.176243][ T29] audit: type=1400 audit(1785901542.319:1052): avc: denied { write } for pid=12804 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 835.497611][ T29] audit: type=1400 audit(1785901542.639:1053): avc: denied { write } for pid=12806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 835.662819][ T29] audit: type=1400 audit(1785901542.779:1054): avc: denied { write } for pid=12820 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 836.314902][T12824] xt_hashlimit: size too large, truncated to 1048576 [ 836.486666][T12828] syzkaller0: entered promiscuous mode [ 836.492818][T12828] syzkaller0: entered allmulticast mode [ 840.511396][ T1160] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 840.753656][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 840.781317][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 840.790253][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 840.798140][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 840.805663][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 841.007275][T12840] lo speed is unknown, defaulting to 1000 [ 841.158813][T12840] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.165974][T12840] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.173191][T12840] bridge_slave_0: entered allmulticast mode [ 841.179946][T12840] bridge_slave_0: entered promiscuous mode [ 841.187637][T12840] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.194865][T12840] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.202185][T12840] bridge_slave_1: entered allmulticast mode [ 841.208980][T12840] bridge_slave_1: entered promiscuous mode [ 841.233702][T12840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.244809][T12840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.269730][T12840] team0: Port device team_slave_0 added [ 841.276925][T12840] team0: Port device team_slave_1 added [ 841.296546][T12840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.303615][T12840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.329638][T12840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.344324][T12840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.351262][T12840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 841.377316][T12840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.413532][T12840] hsr_slave_0: entered promiscuous mode [ 841.419659][T12840] hsr_slave_1: entered promiscuous mode [ 841.425849][T12840] debugfs: 'hsr0' already exists in 'hsr' [ 841.431790][T12840] Cannot create hsr debugfs directory [ 841.559377][T12840] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 841.568245][T12840] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 841.576055][T12840] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 841.584538][T12840] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 841.593271][T12840] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 841.602139][T12840] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 841.609911][T12840] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 841.619143][T12840] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 841.644630][T12840] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.651761][T12840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.659066][T12840] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.666184][T12840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.707513][T12840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.725006][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.734091][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.749211][T12840] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.761603][T11190] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.768693][T11190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.780676][T11190] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.787773][T11190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.038328][T12840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.191281][T12840] veth0_vlan: entered promiscuous mode [ 842.205096][T12840] veth1_vlan: entered promiscuous mode [ 842.233426][T12840] veth0_macvtap: entered promiscuous mode [ 842.242687][T12840] veth1_macvtap: entered promiscuous mode [ 842.258573][T12840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.272469][T12840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.374879][ T8758] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.385704][ T8758] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.406150][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.415708][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.440397][ T8758] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.448455][ T8758] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.452173][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.468331][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.527417][T12881] binder_alloc: 12880: binder_alloc_buf, no vma [ 842.846731][ T29] audit: type=1400 audit(1785901549.989:1055): avc: denied { write } for pid=12886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 842.906015][ T5624] Bluetooth: hci0: command tx timeout [ 842.916020][ T29] audit: type=1400 audit(1785901550.049:1056): avc: denied { write } for pid=12897 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 843.127152][ T29] audit: type=1400 audit(1785901550.269:1057): avc: denied { write } for pid=12899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 843.189548][ T29] audit: type=1400 audit(1785901550.329:1058): avc: denied { write } for pid=12910 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 844.190585][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 844.201222][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 844.211049][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 844.223834][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 844.232748][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 844.435207][T12913] lo speed is unknown, defaulting to 1000 [ 844.589593][T12913] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.597109][T12913] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.604706][T12913] bridge_slave_0: entered allmulticast mode [ 844.612757][T12913] bridge_slave_0: entered promiscuous mode [ 844.620150][T12913] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.627279][T12913] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.634464][T12913] bridge_slave_1: entered allmulticast mode [ 844.641286][T12913] bridge_slave_1: entered promiscuous mode [ 844.663480][T12913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.675230][T12913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.698360][T12913] team0: Port device team_slave_0 added [ 844.706107][T12913] team0: Port device team_slave_1 added [ 844.728736][T12913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.735796][T12913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.762555][T12913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.774358][T12913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.781278][T12913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.807459][T12913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 844.845778][T12913] hsr_slave_0: entered promiscuous mode [ 844.852083][T12913] hsr_slave_1: entered promiscuous mode [ 844.858144][T12913] debugfs: 'hsr0' already exists in 'hsr' [ 844.864501][T12913] Cannot create hsr debugfs directory [ 844.982143][ T5624] Bluetooth: hci0: command tx timeout [ 844.997163][T12913] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 845.007642][T12913] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 845.015674][T12913] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 845.024971][T12913] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 845.034020][T12913] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 845.043518][T12913] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 845.051261][T12913] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 845.060535][T12913] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 845.086151][T12913] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.093255][T12913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.100551][T12913] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.107664][T12913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.150379][T12913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 845.164985][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.175541][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.188111][T12913] 8021q: adding VLAN 0 to HW filter on device team0 [ 845.200987][T11190] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.208095][T11190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 845.219871][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.226988][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 845.481490][T12913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 845.637969][T12913] veth0_vlan: entered promiscuous mode [ 845.647690][T12913] veth1_vlan: entered promiscuous mode [ 845.674569][T12913] veth0_macvtap: entered promiscuous mode [ 845.683948][T12913] veth1_macvtap: entered promiscuous mode [ 845.698995][T12913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 845.715382][T12913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.764673][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.821849][ T1160] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.850160][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.858355][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.860455][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.869217][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.904824][ T8987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.913607][ T8987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 846.197042][ T5626] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 846.210227][ T5626] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 846.237105][ T5626] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 846.247784][ T5626] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 846.262975][ T5626] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 846.342062][ T5624] Bluetooth: hci1: command tx timeout [ 846.616326][ T29] audit: type=1400 audit(1785901553.749:1059): avc: denied { write } for pid=12961 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 846.658997][T12956] lo speed is unknown, defaulting to 1000 [ 846.698297][ T29] audit: type=1400 audit(1785901553.839:1060): avc: denied { write } for pid=12979 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 846.986719][T12956] bridge0: port 1(bridge_slave_0) entered blocking state [ 846.994076][T12956] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.001357][T12956] bridge_slave_0: entered allmulticast mode [ 847.009463][T12956] bridge_slave_0: entered promiscuous mode [ 847.019594][T12956] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.027321][T12956] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.034899][T12956] bridge_slave_1: entered allmulticast mode [ 847.042676][T12956] bridge_slave_1: entered promiscuous mode [ 847.055450][ T29] audit: type=1400 audit(1785901554.199:1061): avc: denied { write } for pid=12981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 847.061916][ T5624] Bluetooth: hci0: command tx timeout [ 847.103578][T12956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.116684][T12956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.155961][T12956] team0: Port device team_slave_0 added [ 847.164478][T12956] team0: Port device team_slave_1 added [ 847.179492][ T29] audit: type=1400 audit(1785901554.319:1062): avc: denied { write } for pid=12999 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 847.194608][T12956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.209053][T12956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.236704][T12956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.250041][T12956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.257668][T12956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.285162][T12956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.329016][T12956] hsr_slave_0: entered promiscuous mode [ 847.336930][T12956] hsr_slave_1: entered promiscuous mode [ 847.343431][T12956] debugfs: 'hsr0' already exists in 'hsr' [ 847.349161][T12956] Cannot create hsr debugfs directory [ 847.678649][ T29] audit: type=1400 audit(1785901554.819:1063): avc: denied { write } for pid=13002 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 847.777986][ T29] audit: type=1400 audit(1785901554.919:1064): avc: denied { write } for pid=13013 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.066608][T12956] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 848.080325][T12956] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 848.092987][T12956] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 848.105176][T12956] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 848.113479][T12956] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 848.124267][T12956] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 848.131328][ T29] audit: type=1400 audit(1785901555.269:1065): avc: denied { write } for pid=13015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.155535][T12956] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 848.166781][T12956] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 848.211893][ T29] audit: type=1400 audit(1785901555.349:1066): avc: denied { write } for pid=13026 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.304054][T12956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.327957][T12956] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.340937][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.341667][ T5624] Bluetooth: hci7: command tx timeout [ 848.348099][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.364737][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.371934][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 848.422257][ T5624] Bluetooth: hci1: command tx timeout [ 848.567454][ T29] audit: type=1400 audit(1785901555.709:1067): avc: denied { write } for pid=13034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.688791][ T29] audit: type=1400 audit(1785901555.829:1068): avc: denied { write } for pid=13051 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.890851][T12956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 848.941232][T12956] veth0_vlan: entered promiscuous mode [ 848.959797][T12956] veth1_vlan: entered promiscuous mode [ 848.998464][T12956] veth0_macvtap: entered promiscuous mode [ 849.012573][T12956] veth1_macvtap: entered promiscuous mode [ 849.033399][T12956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.049868][T12956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.081158][ T29] audit: type=1400 audit(1785901556.219:1069): avc: denied { write } for pid=13062 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.124621][ T1160] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.144136][ T5624] Bluetooth: hci0: command tx timeout [ 849.172352][ T8758] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.206839][ T8758] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.251867][ T1160] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 849.269185][ T29] audit: type=1400 audit(1785901556.409:1070): avc: denied { write } for pid=13074 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 849.291874][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.306182][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.348803][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.357926][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.687618][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 849.706038][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 849.714521][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 849.728938][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 849.736848][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 849.976270][T13095] [U]  [ 849.987047][T13090] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.994769][T13090] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.014694][ T29] audit: type=1400 audit(1785901557.159:1071): avc: denied { write } for pid=13076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.102219][T13090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 850.114671][T13090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 850.119049][ T29] audit: type=1400 audit(1785901557.259:1072): avc: denied { write } for pid=13098 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.237918][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.261921][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.278930][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.308194][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.421818][ T5624] Bluetooth: hci7: command tx timeout [ 850.505793][ T5624] Bluetooth: hci1: command tx timeout [ 850.637467][T13084] lo speed is unknown, defaulting to 1000 [ 850.643243][ T29] audit: type=1400 audit(1785901557.779:1073): avc: denied { write } for pid=13101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.780679][ T29] audit: type=1400 audit(1785901557.919:1074): avc: denied { write } for pid=13120 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.821492][T13124] xt_hashlimit: size too large, truncated to 1048576 [ 851.149286][T13084] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.181072][T13084] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.209980][T13084] bridge_slave_0: entered allmulticast mode [ 851.254465][T13084] bridge_slave_0: entered promiscuous mode [ 851.284920][T13084] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.309840][T13084] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.337095][T13084] bridge_slave_1: entered allmulticast mode [ 851.364269][T13084] bridge_slave_1: entered promiscuous mode [ 851.412700][T13084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.438502][T13084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.515113][T13084] team0: Port device team_slave_0 added [ 851.558150][T13084] team0: Port device team_slave_1 added [ 851.624065][T13084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.641308][T13084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.698055][T13084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.727881][T13084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.741975][T13084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.804880][T13084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.865908][ T5624] Bluetooth: hci2: command tx timeout [ 851.939493][T13084] hsr_slave_0: entered promiscuous mode [ 851.947133][T13084] hsr_slave_1: entered promiscuous mode [ 851.953875][T13084] debugfs: 'hsr0' already exists in 'hsr' [ 851.959713][T13084] Cannot create hsr debugfs directory [ 852.265333][T13084] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.445904][T13084] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.521703][ T5624] Bluetooth: hci7: command tx timeout [ 852.581875][ T5624] Bluetooth: hci1: command tx timeout [ 852.589165][T13084] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.853627][T13084] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.087256][T13084] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 853.148944][T13084] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 853.172541][T13084] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 853.200978][T13084] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 853.226790][T13084] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 853.271637][T13084] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 853.297887][T13084] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 853.348882][T13084] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 853.407578][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 853.407603][ T29] audit: type=1400 audit(1785901560.549:1083): avc: denied { write } for pid=13193 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 853.447660][ T5626] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 853.471822][ T5626] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 853.484398][ T5626] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 853.492490][ T5626] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 853.500017][ T5626] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 853.681450][ T1160] smbdirect: ib_dev[syz1] removed [ 853.699833][ T29] audit: type=1400 audit(1785901560.839:1084): avc: denied { write } for pid=13216 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 853.747734][T13084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.825653][T13084] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.853086][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.860445][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.904252][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.911402][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.944112][ T5624] Bluetooth: hci2: command tx timeout [ 853.966035][T13224] xt_hashlimit: size too large, truncated to 1048576 [ 854.526930][ T29] audit: type=1400 audit(1785901561.669:1085): avc: denied { write } for pid=13222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.576120][T13242] syzkaller0: entered promiscuous mode [ 854.590011][T13242] syzkaller0: entered allmulticast mode [ 854.591696][ T5624] Bluetooth: hci7: command tx timeout [ 854.609498][T13211] lo speed is unknown, defaulting to 1000 [ 854.711421][ T29] audit: type=1400 audit(1785901561.839:1086): avc: denied { write } for pid=13247 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.918969][T13255] syzkaller0: entered promiscuous mode [ 854.927931][T13255] syzkaller0: entered allmulticast mode [ 855.085897][T13084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.284255][ T29] audit: type=1400 audit(1785901562.429:1087): avc: denied { write } for pid=13251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 855.459320][ T29] audit: type=1400 audit(1785901562.599:1088): avc: denied { write } for pid=13279 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 855.522588][T13211] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.549192][T13211] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.583644][T13211] bridge_slave_0: entered allmulticast mode [ 855.599475][T13211] bridge_slave_0: entered promiscuous mode [ 855.614507][T13211] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.622656][T13211] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.629884][T13211] bridge_slave_1: entered allmulticast mode [ 855.636285][ T5624] Bluetooth: hci8: command tx timeout [ 855.654909][T13211] bridge_slave_1: entered promiscuous mode [ 855.691279][T13211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.714877][T13211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 855.750450][T13211] team0: Port device team_slave_0 added [ 855.763781][T13211] team0: Port device team_slave_1 added [ 855.795628][T13211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 855.803784][T13211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.829864][T13211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 855.909220][T13211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 855.920079][T13211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 855.957690][T13211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.031870][ T5624] Bluetooth: hci2: command tx timeout [ 856.289005][T13211] hsr_slave_0: entered promiscuous mode [ 856.295592][T13211] hsr_slave_1: entered promiscuous mode [ 856.305289][T13211] debugfs: 'hsr0' already exists in 'hsr' [ 856.311039][T13211] Cannot create hsr debugfs directory [ 856.419906][T13084] veth0_vlan: entered promiscuous mode [ 856.439310][T13084] veth1_vlan: entered promiscuous mode [ 856.499573][T13084] veth0_macvtap: entered promiscuous mode [ 856.532769][T13084] veth1_macvtap: entered promiscuous mode [ 857.300495][ T29] audit: type=1400 audit(1785901564.439:1089): avc: denied { write } for pid=13294 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.372433][T13084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.386966][T13084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 857.455127][ T29] audit: type=1400 audit(1785901564.599:1090): avc: denied { write } for pid=13307 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.491440][ T1160] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.532391][ T1160] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.702988][ T5624] Bluetooth: hci8: command tx timeout [ 857.932460][T13313] Bluetooth: MGMT ver 1.23 [ 858.102525][ T5624] Bluetooth: hci2: command tx timeout [ 858.301893][T13313] lo speed is unknown, defaulting to 1000 [ 858.308145][T11190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 858.341188][T11190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 858.420700][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.783349][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 858.798343][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 858.813002][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 858.823333][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 858.837465][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 859.005228][T11190] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.025881][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.034172][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 859.096591][ T29] audit: type=1400 audit(1785901566.239:1091): avc: denied { write } for pid=13315 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 859.228902][ T29] audit: type=1400 audit(1785901566.369:1092): avc: denied { write } for pid=13339 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 859.420047][T13342] xt_hashlimit: size too large, truncated to 1048576 [ 859.781813][T13330] Bluetooth: hci8: command tx timeout [ 859.830067][T13211] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 859.850716][T13211] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 859.885865][T13211] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 859.940222][T13211] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 859.954041][T13211] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 859.980438][T13211] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 860.203008][T13211] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 860.408492][ T29] audit: type=1400 audit(1785901567.549:1093): avc: denied { write } for pid=13343 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 860.413651][T13211] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 860.636528][T13324] lo speed is unknown, defaulting to 1000 [ 860.679004][T13379] [U]  [ 860.701130][ T29] audit: type=1400 audit(1785901567.749:1094): avc: denied { write } for pid=13377 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 860.932223][T13330] Bluetooth: hci0: command tx timeout [ 861.506730][T13211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.620444][T13211] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.680830][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.688018][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.756289][T12842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 861.774743][T12842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 861.783053][T12842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 861.795241][T12842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 861.803414][T12842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 861.805255][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.817516][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.864522][T13330] Bluetooth: hci8: command tx timeout [ 862.774110][ T29] audit: type=1400 audit(1785901569.909:1095): avc: denied { write } for pid=13383 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 862.952036][ T29] audit: type=1400 audit(1785901570.089:1096): avc: denied { write } for pid=13418 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 862.989346][T13330] Bluetooth: hci0: command tx timeout [ 863.052043][T13324] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.059292][T13324] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.070050][T13324] bridge_slave_0: entered allmulticast mode [ 863.086727][T13324] bridge_slave_0: entered promiscuous mode [ 863.118948][T13324] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.129816][T13324] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.137807][T13324] bridge_slave_1: entered allmulticast mode [ 863.147685][T13324] bridge_slave_1: entered promiscuous mode [ 863.221286][T13324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.247304][T13324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.332057][T13399] lo speed is unknown, defaulting to 1000 [ 863.335027][T13324] team0: Port device team_slave_0 added [ 863.390414][T13324] team0: Port device team_slave_1 added [ 863.457660][T13324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.475407][T13324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.502688][T13324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.523813][T13324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.530826][T13324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.562364][T13324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.608974][ T29] audit: type=1400 audit(1785901570.749:1097): avc: denied { write } for pid=13430 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.656794][T13324] hsr_slave_0: entered promiscuous mode [ 863.667589][T13324] hsr_slave_1: entered promiscuous mode [ 863.674084][T13324] debugfs: 'hsr0' already exists in 'hsr' [ 863.679908][T13324] Cannot create hsr debugfs directory [ 863.725198][ T29] audit: type=1400 audit(1785901570.869:1098): avc: denied { write } for pid=13446 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.086057][T13211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 864.192051][T13330] Bluetooth: hci3: command tx timeout [ 864.203273][ T29] audit: type=1400 audit(1785901571.349:1099): avc: denied { write } for pid=13451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.250304][T13324] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.303917][ T29] audit: type=1400 audit(1785901571.449:1100): avc: denied { write } for pid=13469 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.376930][T13399] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.387193][T13399] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.395075][T13399] bridge_slave_0: entered allmulticast mode [ 864.403425][T13399] bridge_slave_0: entered promiscuous mode [ 864.421988][T13399] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.429747][T13399] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.437055][T13399] bridge_slave_1: entered allmulticast mode [ 864.448205][T13399] bridge_slave_1: entered promiscuous mode [ 864.485423][T13324] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.509695][T13211] veth0_vlan: entered promiscuous mode [ 864.537641][T13211] veth1_vlan: entered promiscuous mode [ 864.620392][T13324] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.645630][T13399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.665560][ T9697] ------------[ cut here ]------------ [ 864.667789][T13399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 864.671050][ T9697] time_after(jiffies, warn_timeout) [ 864.681203][ T9697] WARNING: io_uring/io-wq.c:1370 at io_wq_put_and_exit+0x36c/0x9d0, CPU#1: syz.5.886/9697 [ 864.698017][ T9697] Modules linked in: [ 864.702219][ T9697] CPU: 1 UID: 0 PID: 9697 Comm: syz.5.886 Tainted: G L syzkaller #0 PREEMPT(full) [ 864.713030][ T9697] Tainted: [L]=SOFTLOCKUP [ 864.717348][ T9697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 864.727520][ T9697] RIP: 0010:io_wq_put_and_exit+0x36c/0x9d0 [ 864.734224][ T9697] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 df 87 68 09 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 cf f4 f1 fc 4d 85 ff 79 aa e8 25 fa f1 fc 90 <0f> 0b 90 eb 9f e8 1a fa f1 fc 4c 8d 63 08 48 b8 00 00 00 00 00 fc [ 864.754428][ T9697] RSP: 0018:ffffc900073878c0 EFLAGS: 00010293 [ 864.760491][ T9697] RAX: 0000000000000000 RBX: ffff8880368bb000 RCX: ffffffff85186ab1 [ 864.768705][ T9697] RDX: ffff88801ef7ca80 RSI: ffffffff85186abb RDI: ffff88801ef7ca80 [ 864.776835][ T9697] RBP: fffffbfff1d01e50 R08: 0000000000000007 R09: 0000000000000000 [ 864.786098][ T9697] R10: ffffffffffffe9d4 R11: 0000000000000000 R12: 000000010000c5d4 [ 864.794854][ T9697] R13: 0000000000001b58 R14: ffff8880368bb018 R15: ffffffffffffe9d4 [ 864.802900][ T9697] FS: 00007f7c5d7f86c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 864.811869][ T9697] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 864.818452][ T9697] CR2: 00007fff02656248 CR3: 0000000032efe000 CR4: 00000000003526f0 [ 864.826484][ T29] audit: type=1400 audit(1785901571.899:1101): avc: denied { write } for pid=13473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.826533][ T29] audit: type=1400 audit(1785901571.959:1102): avc: denied { write } for pid=5597 comm="syz-executor" path="pipe:[3851]" dev="pipefs" ino=3851 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 864.874852][ T9697] Call Trace: [ 864.878136][ T9697] [ 864.881079][ T9697] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 864.887682][ T9697] ? __pfx___might_resched+0x10/0x10 [ 864.894587][ T9697] ? io_wq_set_exit_on_idle+0x156/0x290 [ 864.900158][ T9697] io_uring_clean_tctx+0x114/0x180 [ 864.905393][ T9697] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 864.911596][ T9697] ? percpu_counter_add_batch+0xb9/0x230 [ 864.917245][ T9697] ? __refcount_sub_and_test.constprop.0+0x82/0x90 [ 864.924055][ T9697] io_uring_cancel_generic+0x798/0x7f0 [ 864.929528][ T9697] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 864.935588][ T9697] ? __pfx___file_ref_put+0x10/0x10 [ 864.940790][ T9697] ? __pfx_autoremove_wake_function+0x10/0x10 [ 864.946925][ T9697] ? fput+0xd9/0x100 [ 864.950826][ T9697] ? io_uring_unreg_ringfd+0xca/0x140 [ 864.956257][ T9697] do_exit+0x344/0x2ae0 [ 864.960435][ T9697] ? __pfx_do_exit+0x10/0x10 [ 864.965073][ T9697] ? do_raw_spin_lock+0x128/0x260 [ 864.970110][ T9697] ? find_held_lock+0x2b/0x80 [ 864.974919][ T9697] ? get_signal+0x7e0/0x21e0 [ 864.979535][ T9697] do_group_exit+0xd5/0x2a0 [ 864.984370][ T9697] get_signal+0x1ec7/0x21e0 [ 864.989934][ T9697] ? __pfx_get_signal+0x10/0x10 [ 864.995480][ T9697] ? do_futex+0x190/0x440 [ 864.999829][ T9697] arch_do_signal_or_restart+0x91/0x7e0 [ 865.005480][ T9697] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 865.011713][ T9697] ? lockdep_softirqs_on+0xad/0x120 [ 865.016928][ T9697] exit_to_user_mode_loop+0x139/0x6f0 [ 865.022384][ T9697] ? rcu_is_watching+0x12/0xc0 [ 865.027160][ T9697] do_syscall_64+0x666/0x870 [ 865.031867][ T9697] ? clear_bhb_loop+0x40/0x90 [ 865.036566][ T9697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.042495][ T9697] RIP: 0033:0x7f7c5c99e019 [ 865.046924][ T9697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.057007][ T29] audit: type=1400 audit(1785901572.189:1103): avc: denied { write } for pid=13484 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 865.067030][ T9697] RSP: 002b:00007f7c5d7f80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 865.090141][T13330] Bluetooth: hci0: command tx timeout [ 865.099186][ T9697] RAX: fffffffffffffe00 RBX: 00007f7c5cc25fa8 RCX: 00007f7c5c99e019 [ 865.111906][ T9697] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7c5cc25fa8 [ 865.119906][ T9697] RBP: 00007f7c5cc25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 865.127984][ T9697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.136003][ T9697] R13: 00007f7c5cc26038 R14: 00007ffe87a628a0 R15: 00007ffe87a62988 [ 865.144287][ T9697] [ 865.147319][ T9697] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 865.154590][ T9697] CPU: 1 UID: 0 PID: 9697 Comm: syz.5.886 Tainted: G L syzkaller #0 PREEMPT(full) [ 865.165336][ T9697] Tainted: [L]=SOFTLOCKUP [ 865.169637][ T9697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 865.179671][ T9697] Call Trace: [ 865.182932][ T9697] [ 865.185845][ T9697] dump_stack_lvl+0x100/0x190 [ 865.190515][ T9697] vpanic+0x552/0x970 [ 865.194484][ T9697] ? __pfx_vpanic+0x10/0x10 [ 865.198979][ T9697] panic+0xd1/0xe0 [ 865.202686][ T9697] ? __pfx_panic+0x10/0x10 [ 865.207095][ T9697] ? check_panic_on_warn+0x1f/0x90 [ 865.212195][ T9697] check_panic_on_warn.cold+0x19/0x34 [ 865.217550][ T9697] ? io_wq_put_and_exit+0x36c/0x9d0 [ 865.222742][ T9697] __warn.cold+0x191/0x318 [ 865.227143][ T9697] __report_bug+0x30f/0x440 [ 865.231638][ T9697] ? io_wq_put_and_exit+0x36c/0x9d0 [ 865.236830][ T9697] ? __pfx___report_bug+0x10/0x10 [ 865.241844][ T9697] ? do_raw_spin_lock+0x128/0x260 [ 865.246864][ T9697] ? find_held_lock+0x2b/0x80 [ 865.251521][ T9697] ? __wait_for_common+0x1f3/0x4c0 [ 865.256622][ T9697] ? rcu_is_watching+0x12/0xc0 [ 865.261379][ T9697] ? io_wq_put_and_exit+0x36c/0x9d0 [ 865.266570][ T9697] report_bug+0xb2/0x220 [ 865.270801][ T9697] ? io_wq_put_and_exit+0x36c/0x9d0 [ 865.275993][ T9697] handle_bug+0x16a/0x2a0 [ 865.280314][ T9697] exc_invalid_op+0x17/0x50 [ 865.284809][ T9697] asm_exc_invalid_op+0x1a/0x20 [ 865.289646][ T9697] RIP: 0010:io_wq_put_and_exit+0x36c/0x9d0 [ 865.295446][ T9697] Code: 00 00 0f 85 7d 05 00 00 48 8b 15 df 87 68 09 4d 89 e7 31 ff 49 29 d7 4c 89 fe e8 cf f4 f1 fc 4d 85 ff 79 aa e8 25 fa f1 fc 90 <0f> 0b 90 eb 9f e8 1a fa f1 fc 4c 8d 63 08 48 b8 00 00 00 00 00 fc [ 865.315039][ T9697] RSP: 0018:ffffc900073878c0 EFLAGS: 00010293 [ 865.321093][ T9697] RAX: 0000000000000000 RBX: ffff8880368bb000 RCX: ffffffff85186ab1 [ 865.329046][ T9697] RDX: ffff88801ef7ca80 RSI: ffffffff85186abb RDI: ffff88801ef7ca80 [ 865.337000][ T9697] RBP: fffffbfff1d01e50 R08: 0000000000000007 R09: 0000000000000000 [ 865.344957][ T9697] R10: ffffffffffffe9d4 R11: 0000000000000000 R12: 000000010000c5d4 [ 865.352909][ T9697] R13: 0000000000001b58 R14: ffff8880368bb018 R15: ffffffffffffe9d4 [ 865.360868][ T9697] ? io_wq_put_and_exit+0x361/0x9d0 [ 865.366077][ T9697] ? io_wq_put_and_exit+0x36b/0x9d0 [ 865.371287][ T9697] ? __pfx_io_wq_put_and_exit+0x10/0x10 [ 865.376834][ T9697] ? __pfx___might_resched+0x10/0x10 [ 865.382108][ T9697] ? io_wq_set_exit_on_idle+0x156/0x290 [ 865.387654][ T9697] io_uring_clean_tctx+0x114/0x180 [ 865.392764][ T9697] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 865.398393][ T9697] ? percpu_counter_add_batch+0xb9/0x230 [ 865.404023][ T9697] ? __refcount_sub_and_test.constprop.0+0x82/0x90 [ 865.410523][ T9697] io_uring_cancel_generic+0x798/0x7f0 [ 865.415976][ T9697] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 865.421941][ T9697] ? __pfx___file_ref_put+0x10/0x10 [ 865.427130][ T9697] ? __pfx_autoremove_wake_function+0x10/0x10 [ 865.433189][ T9697] ? fput+0xd9/0x100 [ 865.437071][ T9697] ? io_uring_unreg_ringfd+0xca/0x140 [ 865.442435][ T9697] do_exit+0x344/0x2ae0 [ 865.446594][ T9697] ? __pfx_do_exit+0x10/0x10 [ 865.451179][ T9697] ? do_raw_spin_lock+0x128/0x260 [ 865.456199][ T9697] ? find_held_lock+0x2b/0x80 [ 865.460856][ T9697] ? get_signal+0x7e0/0x21e0 [ 865.465440][ T9697] do_group_exit+0xd5/0x2a0 [ 865.469928][ T9697] get_signal+0x1ec7/0x21e0 [ 865.474427][ T9697] ? __pfx_get_signal+0x10/0x10 [ 865.479267][ T9697] ? do_futex+0x190/0x440 [ 865.483595][ T9697] arch_do_signal_or_restart+0x91/0x7e0 [ 865.489128][ T9697] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 865.495270][ T9697] ? lockdep_softirqs_on+0xad/0x120 [ 865.500465][ T9697] exit_to_user_mode_loop+0x139/0x6f0 [ 865.505836][ T9697] ? rcu_is_watching+0x12/0xc0 [ 865.510599][ T9697] do_syscall_64+0x666/0x870 [ 865.515182][ T9697] ? clear_bhb_loop+0x40/0x90 [ 865.519847][ T9697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.525723][ T9697] RIP: 0033:0x7f7c5c99e019 [ 865.530120][ T9697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.549707][ T9697] RSP: 002b:00007f7c5d7f80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 865.558103][ T9697] RAX: fffffffffffffe00 RBX: 00007f7c5cc25fa8 RCX: 00007f7c5c99e019 [ 865.566060][ T9697] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7c5cc25fa8 [ 865.574012][ T9697] RBP: 00007f7c5cc25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 865.581967][ T9697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 865.589918][ T9697] R13: 00007f7c5cc26038 R14: 00007ffe87a628a0 R15: 00007ffe87a62988 [ 865.597884][ T9697] [ 865.601114][ T9697] Kernel Offset: disabled [ 865.605421][ T9697] Rebooting in 86400 seconds..