last executing test programs: 16m49.04947169s ago: executing program 32 (id=2830): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000005600911000dd000000"], 0xfe33) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x4, 0x141080) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000000)={0x4, 0x0, 0x81, 0xffffffffffffffff, 0x0, 0x0}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'vlan0\x00', @random="010000201000"}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x0, 0x0}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060108000000000000000000000000050005000a000040050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x4000080) socket$netlink(0x10, 0x3, 0xc) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 16m12.06086181s ago: executing program 33 (id=2976): syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r2 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) add_key$fscrypt_v1(&(0x7f0000000100), 0x0, &(0x7f0000000480)={0x0, "cec8e9b9d7d4a26bb9073b1d643011dcc9f61a1969d89edd97ddec2ed4c655b1b162e09526f488caa30f100b8be8f6d1c45c2354ccbc004131e1628fcaef59f9", 0x23}, 0x48, r2) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000400)={0x93de, 0x1, 0x0, 0x3, 0x1ff, 0x7, 0xdff8, 0xb, r4}, 0x20) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x102, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) socket$netlink(0x10, 0x3, 0xf) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000c0}, 0x240c8840) socket$unix(0x1, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000081, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, &(0x7f0000000180)) 8m50.70527152s ago: executing program 34 (id=4677): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000240)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x10000, 0x40, &(0x7f0000000080)="1f11d9", 0x3, 0xd8e1, 0x0, 0x0, 0x0, 0x3, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$dsp(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x0, 0x0, 0x6a0a65d351a035ca, 0x2}, 0x9c) ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = syz_clone(0x20000, &(0x7f00000001c0)="002710c35bb14a7f553814e6194d69a0ac82295f2be6996c53cd77d3c9ef5127db818347e5c5eaee889ed3f981", 0x2d, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000003c0)="ee3ad81b258300424c2f239d77e0203a8d0b71ebd44ff9d296b62882373510a877dba26dd8501c5251183dcb8c210bc0babf1503bd03f12916ba33a9c6fa40684075ca1aae7be31905ce324b0204304cb3967606983441be8f7faaae7063531904e2a35120b11494ba78384c80f9cf14d057d695be89f7faea8609baed28b3504565f23fa29faf") sendmsg$AUDIT_SET(r4, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x3c, 0x3e9, 0x400, 0x70bd2b, 0x25dfdbfc, {0x1, 0x0, 0x0, r5, 0x1, 0xfffffbff, 0x2, 0x7, 0x0, 0x2, 0x7}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x204c800}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r6 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESDEC=r7]) close(0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000001180)={0xffffffffffffffff}, 0x4000) ioprio_set$pid(0x3, 0x0, 0x0) read$char_usb(r9, 0x0, 0x0) 7m12.12205559s ago: executing program 35 (id=5049): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000140)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x5, [@typedef={0x2}, @ptr={0x9}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x8}}, @restrict={0x1, 0x0, 0x0, 0xb, 0x5}, @var={0x10, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x2e, 0x5f, 0x5f]}}, &(0x7f0000000840)=""/73, 0x69, 0x49, 0x1, 0xfffffbff}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x5, '\x00', 0x0, r2, 0x0, 0x5, 0x2}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r3]) close(0x4) syz_usb_connect(0x2, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="12011001095494209911a3682afa010203010902120001010740010904520700ffffff"], 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) read$FUSE(r4, &(0x7f0000001280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = gettid() r8 = epoll_create(0x200) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r4, &(0x7f00000032c0)={r8, r4, 0x10000}) socketpair(0x2a, 0x2, 0x5, &(0x7f0000000100)) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) r10 = accept4(r9, 0x0, 0x0, 0x80800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/97, 0x61}], 0x1}, 0x0) io_setup(0x9, &(0x7f0000000080)=0x0) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_TSC(0x1a, 0x1) getsockopt$inet_tcp_int(r12, 0x6, 0x5, 0x0, &(0x7f00000044c0)) syz_usb_connect$cdc_ecm(0x2, 0xbe, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xac, 0x1, 0x1, 0x5, 0xc0, 0x6, "", [{{0x9, 0x4, 0x0, 0xfb, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x8, 0x24, 0x6, 0x0, 0x0, "a9f76f"}, {0x5, 0x24, 0x0, 0x806a}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0xf5, 0x4, 0x7}, [@dmm={0x7, 0x24, 0x14, 0x0, 0x2f}, @acm={0x4}, @obex={0x5, 0x24, 0x15, 0x7}, @mdlm_detail={0x5e, 0x24, 0x13, 0x8, "c91fb7b3b12a55befaec8507fa4e646659b44ac7f6520b8b73449d594e54d81322fd536e8bfac49727256acdff583b04b755e22e428fe73f99cc35d46751f77a122652625e6f8cc931632e22d95b57fb7a749e4b0f4d23de09ec"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xf8, 0x2, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x7, 0x7f}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x8, 0x9, 0x1, 0x10, 0x67}, 0x17, &(0x7f00000000c0)={0x5, 0xf, 0x17, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x88, 0xff, 0x0, 0x263, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x6, 0x4}]}, 0x4, [{0xe4, &(0x7f0000000500)=ANY=[@ANYBLOB="e403b077a52530f0f8d2359ae237aab94697497d0f6e7126e8d30a913e36d87f9284ff8aaf3951d06afce7d1eb09136d47a34a8d6c8422afd8b8ef83ed2cfd6f6db352c28edcb93e15b53c8b54de7b6c5dc1b141c2d24f223d376a2a050211749969cf0115823710cbca2df79bd85d043e1f968363359c405293f6aaebab1e4898e7b65d9c49ea494f15ec6739042679dd62f83f84adc6128aebad27cfc72924e8450654c22af2e553196cc2fce55b81f9808dd4224fe9175ced5f1c4e0098ef1b41df2ef2953361f48dd60685b85424950bbedd20ff785b5bab79b22db470545bde2d66"]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x441}}, {0xc9, &(0x7f0000000640)=@string={0xc9, 0x3, "0e7357c44cbf7f5811bea0a2023ebe62aa6bc6f941bc078d67dff95946185a4216c704577cad798c81e772e45cec45951a460fc8acab3148cc618cb9aa76caa2d22369b825bd20edc6d4f59858fe1d3fd91168655558d295ce738e3f5edbabb5e92a8a3feb2a63352103badcbfe2b7c33930cbca851877dfb8ac2ae4d0807639791ea8eac392b024c52b9c71b87c375df298cbd2067cca1db0123c7947ff3d635af63448c20e9a59fe7b1ae97f8b31df009866ded06b85f314db79a86f4cff6698a8bd3baf0853"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x457}}]}) ioctl$SOUND_PCM_READ_CHANNELS(r4, 0x80045006, &(0x7f0000000200)) io_submit(r11, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0300ffff0000", 0x6}]) 6m7.844797121s ago: executing program 36 (id=5261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa32, 0x60, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="0100180003040031acee7395b7a77b1af2fb0004000300"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x200480c0) sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101"], 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f00000001c0)={&(0x7f0000000140)=""/89, 0x59}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4000}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0xe) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0xffffffffffffffff, 0x300) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r9, 0x4601, &(0x7f0000000100)={0x356, 0xa, 0x0, 0x0, 0x0, 0x180, 0x10, 0x0, {}, {0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x8, 0x1a09, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0xed, 0x800, 0x0, 0x0, 0x1, 0x6}) sendmsg$AUDIT_MAKE_EQUIV(r9, &(0x7f0000010240)={0x0, 0x0, 0x0}, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) 2m0.748040593s ago: executing program 37 (id=6109): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[r4], 0x1, r2, r3, 0x3, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x49, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 1m37.286338258s ago: executing program 3 (id=6175): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x56, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23, 0x310bb}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30082, 0x22}}}}}}]}, 0x48}}, 0x24008000) ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019300)=""/102392, 0x18ff8) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000900)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x57, 0xc, 0xff, 0x5, 0x4}}, 0x120) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) 1m35.647702572s ago: executing program 3 (id=6183): r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000140)={'geneve0\x00', {0x2, 0x0, @remote}}) clock_settime(0x0, &(0x7f0000001500)) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000040)={0x8000001, 0x0, 0x0, 0x0, 0x3}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp6\x00') socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x10) preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000340)=""/105, 0x69}, {&(0x7f00000003c0)=""/62, 0x3e}, {&(0x7f0000000400)=""/137, 0x89}, {&(0x7f00000004c0)=""/214, 0xd6}, {&(0x7f00000006c0)=""/131, 0x83}], 0x5, 0x7, 0x20000000) get_mempolicy(&(0x7f0000000180), 0x0, 0x6, &(0x7f0000ff8000/0x3000)=nil, 0x2) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000240)={0x10002, 0x0, &(0x7f0000e7f000/0x2000)=nil}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES8], 0xd0}, 0x1, 0x0, 0x0, 0x850}, 0x4) 1m35.18580642s ago: executing program 3 (id=6186): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$uac2(0x4, 0x7b, &(0x7f0000000100)=ANY=[@ANYBLOB="12012006000000100c200b1040000102030109026900120108200708"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0xf8) connect$pppl2tp(r1, &(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x9}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x11be}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xde17}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004040}, 0x40000) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000480)=@ethtool_rx_ntuple={0x35, {0xd, @tcp_ip4_spec={@multicast1, @multicast1, 0x4e22, 0x4e21, 0x7}, @ether_spec={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7}, 0x4, 0x1, 0x2, 0x8, 0xfffffffffffffffe}}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f00000000c0), 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001580), 0x1041, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) 1m33.065079128s ago: executing program 3 (id=6193): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008974) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) (async) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000001100), r5) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001140)=ANY=[@ANYBLOB="3c0000e2", @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf251b0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0000000000"], 0x3c}}, 0x4) (async) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f00000002c0)={0x28, 0x4, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) r9 = dup3(r8, r7, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000001680)=[@decrefs], 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000000)={0x8, r4}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1m32.955764752s ago: executing program 3 (id=6194): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x56, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23, 0x310bb}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30082, 0x22}}}}}}]}, 0x48}}, 0x24008000) ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019300)=""/102392, 0x18ff8) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000900)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x57, 0xc, 0xff, 0x5, 0x4}}, 0x120) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) 1m32.347825486s ago: executing program 9 (id=6198): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000bb88faa4b22d780900000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000ddfffffdffffff"]}, 0x104) syz_open_dev$vim2m(0x0, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x20c03, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000900)='trans=tcp,') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r1], 0x50) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r5, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000100)={0x4, r6}) ioctl$DMA_BUF_SET_NAME_A(r8, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x3, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x1, 0xffff2d3a, 0xffffff01, 0x6, 0x4, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x400000, 0xe660, 0x4, 0xa, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x80000001, 0x6, 0x8, 0x0, 0x7, 0x5, 0x0, 0x8, 0xff, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x9, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x0, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x5, 0x5, 0x3, 0x20000002, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0x7, 0x2, 0x6, 0x7ff, 0xfffffffc, 0x2, 0x25b, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xfffffff9, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa22, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x8, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x100) 1m31.929286411s ago: executing program 9 (id=6200): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) iopl(0x14) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\a', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1m31.823603763s ago: executing program 9 (id=6201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) r0 = epoll_create(0x80) r1 = dup3(0xffffffffffffffff, r0, 0x0) syz_usb_connect(0x2, 0x36, 0x0, 0x0) write$uinput_user_dev(r1, 0x0, 0x178) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="ff0001e96dac0bb5582500000000"], 0x8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) (fail_nth: 4) 1m30.947486043s ago: executing program 3 (id=6203): socket$packet(0x11, 0x3, 0x300) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x82802, 0xf) syz_open_dev$video(&(0x7f0000000000), 0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) getsockname$packet(r4, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, 0x0, 0x0) 1m29.195187981s ago: executing program 5 (id=6209): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x16, &(0x7f00000002c0)=0x3) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x3, 0x12) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) pipe(&(0x7f00000002c0)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x13) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r10, 0x5425, 0x0) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) 1m28.463567746s ago: executing program 9 (id=6211): syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0xa0080) semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x3, 0x3, 0x800}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={[], [{@subj_role={'subj_role', 0x3d, 'tracefs\x00'}}, {@euid_gt}, {@fsmagic={'fsmagic', 0x3d, 0x8000000000000000}}, {@dont_measure}, {@euid_lt}, {@defcontext={'defcontext', 0x3d, 'system_u'}}], 0x2f}) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80, 0x0) close(0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) 1m28.249138855s ago: executing program 5 (id=6212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000030500000a88000000060a0b040000000000000000020000005c000480580001800a0001006d617463680000004800028008000240000000001c0003004cb43801b2486e8f58c2052fade1bc2c62cdeb7521cf85f60e0001007374617469737469630000000e000100636f6e6e62797465730000000900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) 1m28.23594955s ago: executing program 9 (id=6213): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="2c1c7aa03d572de3eb385a7a", 0xc) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443", 0x67}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1m28.169143744s ago: executing program 5 (id=6214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e40)={0x28, r2, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000004c0)={@void, @val={0x0, 0x0, 0x1, 0x800}, @mpls={[{0x8}, {0x6d7, 0x0, 0x1}, {0x1ff}, {0x2, 0x0, 0x1}], @generic="9d33c15ab2977343cd2e3b10440f53d0cda7a4f81d177cab70f14601c56fd7d7f0ff4350bc9a32f7a4664623b84f2726a8ddc9ce1f020d38b6838171d2afbdc6ac3b3526881f2445a3fbdd1b77c238f446b36ba08ff492f99441b9f9bfe51a6d518aa00c5e62c285ca91ba7bf1ca16554138f62559e2108b62a1b3f3781fb87fff56701017824591"}}, 0xa2) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r9 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r9, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r10, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f00000002c0), r11, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r10, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r11, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) setsockopt$inet6_group_source_req(r9, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r9, 0x29, 0x2b, &(0x7f0000000380)={0xfe, {{0xa, 0x4e21, 0x7f, @private0={0xfc, 0x0, '\x00', 0x1}}}, {{0xa, 0xfffe, 0x0, @mcast2, 0x6}}}, 0x108) r12 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r12, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) ioctl$SIOCGETSGCNT(r8, 0x89e1, &(0x7f0000000040)={@broadcast, @broadcast}) r13 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r13, r12, 0x0) 1m28.166897801s ago: executing program 1 (id=6215): r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e24, @private=0xa010100}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ustat(0xf65, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000000000000000010800060001000000060001000a"], 0x44}}, 0x0) 1m27.795459192s ago: executing program 1 (id=6216): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = io_uring_setup(0x47b0, &(0x7f0000000240)={0x0, 0xf0cc, 0x40000, 0xfffffffc, 0x227}) io_uring_enter(r0, 0x0, 0xcc, 0x1, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/vmallocinfo\x00', 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) munmap(&(0x7f0000abe000/0x2000)=nil, 0x2000) pread64(r1, &(0x7f0000000440)=""/200, 0xc8, 0xd73) lseek(r1, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6}) socket(0x400000000010, 0x3, 0x0) 1m27.793436871s ago: executing program 9 (id=6217): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x28, 0xba, 0xd, 0x10, 0x46d, 0x87c, 0xb07a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x40, 0x9, 0x90, 0x0, "", [{{0x9, 0x4, 0xee, 0x9, 0x0, 0xe, 0x1, 0x0, 0x8}}]}}]}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='romfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x22, 0x800000000004}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000980)=ANY=[], 0xfe8e) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1m27.561354756s ago: executing program 38 (id=6217): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x28, 0xba, 0xd, 0x10, 0x46d, 0x87c, 0xb07a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x40, 0x9, 0x90, 0x0, "", [{{0x9, 0x4, 0xee, 0x9, 0x0, 0xe, 0x1, 0x0, 0x8}}]}}]}}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x9, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x29, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='romfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x22, 0x800000000004}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000980)=ANY=[], 0xfe8e) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1m26.470056791s ago: executing program 1 (id=6219): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'macsec0\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8924, &(0x7f0000000240)={'bridge0\x00', 0x1}) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) dup(0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@local, @in6=@loopback, 0x4e21, 0x2, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2b}, {0x1, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xfffffffffffffe03, 0x0, 0x6, 0x1000000000}, 0x0, 0x1002, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast2, 0x4d5, 0x2b}, 0x0, @in6=@remote, 0x0, 0x3, 0x1, 0x0, 0x0, 0x8004}}, 0xe8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f00000000c0)={0x0, @reserved}) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000c00)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@broadcast, @empty=0xff03, 0xffffff00, 0xff000000, 0xe, 0x2, {@empty, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff]}}, 0x4, 0x4, 0x1, 0x4d3, 0x0, 0xf8db, 'veth1_virt_wifi\x00', 'ip6tnl0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x8, 0x8}}}, {{@arp={@private=0xa010101, @empty, 0xffffffff, 0xffffff00, 0x9, 0x2, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x730e8ec89ff96e2d]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x1, 0xb, 0x6, 0x4000, 0x4, 'virt_wifi0\x00', 'bond_slave_0\x00', {}, {0xff}, 0x0, 0x397}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @private=0xa010102, @multicast2, 0x2}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}]}, 0x50}, 0x1, 0xba01}, 0x0) 1m24.602114774s ago: executing program 1 (id=6220): syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0xa0080) semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x3, 0x3, 0x800}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={[], [{@subj_role={'subj_role', 0x3d, 'tracefs\x00'}}, {@euid_gt}, {@fsmagic={'fsmagic', 0x3d, 0x8000000000000000}}, {@dont_measure}, {@euid_lt}, {@defcontext={'defcontext', 0x3d, 'system_u'}}], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80, 0x0) getdents64(r3, &(0x7f0000000580)=""/174, 0xff56) close(0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) 1m24.509258384s ago: executing program 1 (id=6221): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x11, r0, 0x0) (async) io_setup(0xc00, &(0x7f0000000000)=0x0) (async) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x10480) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000380001800600010002000000080005000000feff0b000700000000000000000008000900000000000800080000000000080006"], 0x4c}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) (async) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r5, 0xfffff000) (async) r6 = eventfd2(0xfffffffa, 0x80000) io_cancel(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x8, 0xfff, r2, &(0x7f00000001c0)="c95029b4915a073ba4d8b1d361a7f676fd287896458b1c19c9d5ad552ff5efd500bd79925712b6bc23d279de6177a0262872d8c6ce639b4ef89304ff8034f7a8cc432d1247012b8f1f1e4e183ccfc2d8cd81d98883ba2ffdb6a46a3c441bf93ed668cb994c8731a1f6c2fe2ce0ac89", 0x6f, 0x4, 0x0, 0x1, r6}, &(0x7f00000002c0)) ioctl$EVIOCGKEYCODE(r2, 0x80084504, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x40a640) (async) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x9, r0, &(0x7f0000000140)="3ba5807c2e19eed98ace86c830089bc68777309e3ecc1c3f0c08b569774cb1a5d754419433c80b4beae2210cf1d6abd1f15c651c03d3074bdbcc0bef5919b397298daffd50756f4ebd6cee65ff", 0x4d, 0x8, 0x0, 0x2}]) 1m24.097690454s ago: executing program 5 (id=6224): syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0xa0080) semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x3, 0x3, 0x800}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={[], [{@subj_role={'subj_role', 0x3d, 'tracefs\x00'}}, {@euid_gt}, {@fsmagic={'fsmagic', 0x3d, 0x8000000000000000}}, {@dont_measure}, {@euid_lt}, {@defcontext={'defcontext', 0x3d, 'system_u'}}], 0x2f}) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80, 0x0) close(0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) 1m23.691619655s ago: executing program 5 (id=6225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)={0x38, 0x1, 0x2, 0x5, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xbc}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004084) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x14) 1m23.443274987s ago: executing program 1 (id=6226): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x20040880) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001440)={{r0, &(0x7f0000000080)='-\'i\x00', 0x300, &(0x7f00000000c0)={@align=0x8001, {0x6, 0x7, 0x1, 0x9}}, 0xfffffffe, &(0x7f0000000100), &(0x7f0000000180)=0x6}, 0x2, &(0x7f0000001400)=[{0x3, 0xffffff80, &(0x7f00000001c0)='\'\xf9\\(#&]]]$[-\x00', &(0x7f0000000200)="bca8f7a67d2a94ca5147c44fb9553c76a44ef8637311557f68bbbe2d30d29d86532845fd4c88af788a5be810e792e04ba395b7ee72e6ac8786fead5405e3b7cb30122f3600d4e1ddaf56ae50039d0c836a3784d4bbaacb88487d2bba243d4f350724c171ccf4a6dba3a4655aa1adf184e98a004fc085d072e44e80bce2085d18c3a900002b33663c0634f5a777a3ad1e225d4a7b6d2b9c01fb40f664a68e1fc28e3a9e13544345db695426721a73", 0xae, 0x8}, {0x1, 0xffff, &(0x7f00000002c0)='\x00', &(0x7f0000001340)="399d8b680eefd3d27c2e52d7ea7b400d3091c467df6c76baff9a6e6367c59c7ce8d1c342116bf21e307865aff9afbd6ad78ee20d8d2aae46196eee87349ecc1c779ef727ba4b981125ef0a18272b642cf65cfb36c65b67657b9186964876352b3373456e9de8acf244e9179a24301f7b44f03171712342271cf9f18efe2c1b07371998b56182b6ce16c43382d972d673b5a755c0a2002969851048886e84315b2d9a3de4e1444c", 0xa7, 0x10}]}) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000040)={r7, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000014c0)={r7, 0x9, 0xfffe, 0x5, 0x7, 0xb}, 0x14) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r8, 0x400, 0x0) fcntl$lock(r8, 0x25, &(0x7f0000000000)={0x1, 0x0, 0x842ab, 0x8}) recvfrom$inet6(r0, &(0x7f0000000000)=""/27, 0x1b, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000040)="4805000015004d183c461900"/22, 0x16}, {&(0x7f0000000300)="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", 0x1000}], 0x2) r9 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m23.219132716s ago: executing program 39 (id=6226): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x20040880) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001440)={{r0, &(0x7f0000000080)='-\'i\x00', 0x300, &(0x7f00000000c0)={@align=0x8001, {0x6, 0x7, 0x1, 0x9}}, 0xfffffffe, &(0x7f0000000100), &(0x7f0000000180)=0x6}, 0x2, &(0x7f0000001400)=[{0x3, 0xffffff80, &(0x7f00000001c0)='\'\xf9\\(#&]]]$[-\x00', &(0x7f0000000200)="bca8f7a67d2a94ca5147c44fb9553c76a44ef8637311557f68bbbe2d30d29d86532845fd4c88af788a5be810e792e04ba395b7ee72e6ac8786fead5405e3b7cb30122f3600d4e1ddaf56ae50039d0c836a3784d4bbaacb88487d2bba243d4f350724c171ccf4a6dba3a4655aa1adf184e98a004fc085d072e44e80bce2085d18c3a900002b33663c0634f5a777a3ad1e225d4a7b6d2b9c01fb40f664a68e1fc28e3a9e13544345db695426721a73", 0xae, 0x8}, {0x1, 0xffff, &(0x7f00000002c0)='\x00', &(0x7f0000001340)="399d8b680eefd3d27c2e52d7ea7b400d3091c467df6c76baff9a6e6367c59c7ce8d1c342116bf21e307865aff9afbd6ad78ee20d8d2aae46196eee87349ecc1c779ef727ba4b981125ef0a18272b642cf65cfb36c65b67657b9186964876352b3373456e9de8acf244e9179a24301f7b44f03171712342271cf9f18efe2c1b07371998b56182b6ce16c43382d972d673b5a755c0a2002969851048886e84315b2d9a3de4e1444c", 0xa7, 0x10}]}) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000040)={r7, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000014c0)={r7, 0x9, 0xfffe, 0x5, 0x7, 0xb}, 0x14) r8 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r8, 0x400, 0x0) fcntl$lock(r8, 0x25, &(0x7f0000000000)={0x1, 0x0, 0x842ab, 0x8}) recvfrom$inet6(r0, &(0x7f0000000000)=""/27, 0x1b, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000001300)=[{&(0x7f0000000040)="4805000015004d183c461900"/22, 0x16}, {&(0x7f0000000300)="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", 0x1000}], 0x2) r9 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r9, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1m23.194801329s ago: executing program 5 (id=6228): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) sendto$packet(r5, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a88800080048", 0x19, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[r11], 0x1, r3, r4, 0x3, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x49, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 1m22.882093742s ago: executing program 40 (id=6228): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x0) sendto$packet(r5, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a88800080048", 0x19, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[r11], 0x1, r3, r4, 0x3, 0x0, 0x2, 0x1, {0xac7c, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x49, 0x412f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 1m20.252885369s ago: executing program 8 (id=6231): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x90004, @loopback, 0xb}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000700000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 1m20.105232794s ago: executing program 8 (id=6232): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB]}, 0x78) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000900)='trans=tcp,') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x50) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x14}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000000c0)=[@release], 0x0, 0x0, 0x0}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x100) 1m19.174776297s ago: executing program 8 (id=6233): userfaultfd(0x80001) accept$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2000) mq_open(0x0, 0x40, 0xb5, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='coredump_filter\x00') pread64(r0, 0x0, 0x0, 0x2f) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18050000080400000000000003000002180100002020703e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000bbf5ffff850000000600000085000000d000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x1f, &(0x7f0000000300)="882f1242a03c3f98722780b605a7", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m18.775854596s ago: executing program 8 (id=6234): syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0xa0080) semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x3, 0x3, 0x800}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={[], [{@subj_role={'subj_role', 0x3d, 'tracefs\x00'}}, {@euid_gt}, {@fsmagic={'fsmagic', 0x3d, 0x8000000000000000}}, {@dont_measure}, {@euid_lt}, {@defcontext={'defcontext', 0x3d, 'system_u'}}], 0x2f}) getdents64(0xffffffffffffffff, &(0x7f0000000580)=""/174, 0xff56) close(0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) 1m18.53832106s ago: executing program 8 (id=6235): socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24048814) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x80) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x80, 0x80, 0xd, 0x10, 0x3e7, 0x2, 0xa00, 0x20, 0x1, 0x1, 0xfffffffb, &(0x7f0000000600)=[0x7], 0x1, 0x0}) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@random="e90c610faca2", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffe, 0x27, 0x0, @gue={{0x2, 0x0, 0x2, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x140, &(0x7f0000000bc0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x132, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x11e, 0x0, @opaque="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"}}}}}, 0x0) 1m17.938699428s ago: executing program 8 (id=6237): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$uac2(0x4, 0x7b, &(0x7f0000000100)=ANY=[@ANYBLOB="12012006000000100c200b1040000102030109026900120108200708"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef5"], 0xf8) connect$pppl2tp(r1, &(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x9}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x11be}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xde17}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004040}, 0x40000) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000480)=@ethtool_rx_ntuple={0x35, {0xd, @tcp_ip4_spec={@multicast1, @multicast1, 0x4e22, 0x4e21, 0x7}, @ether_spec={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7}, 0x4, 0x1, 0x2, 0x8, 0xfffffffffffffffe}}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f00000000c0), 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001580), 0x1041, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) 1m17.776259474s ago: executing program 41 (id=6237): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB], 0x0, 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102384, 0x18ff0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$uac2(0x4, 0x7b, &(0x7f0000000100)=ANY=[@ANYBLOB="12012006000000100c200b1040000102030109026900120108200708"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef5"], 0xf8) connect$pppl2tp(r1, &(0x7f0000001140)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000340)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r4, 0x9}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r6, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x11be}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xde17}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004040}, 0x40000) socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000480)=@ethtool_rx_ntuple={0x35, {0xd, @tcp_ip4_spec={@multicast1, @multicast1, 0x4e22, 0x4e21, 0x7}, @ether_spec={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x7}, 0x4, 0x1, 0x2, 0x8, 0xfffffffffffffffe}}}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f00000000c0), 0x4) openat$snapshot(0xffffffffffffff9c, &(0x7f0000001580), 0x1041, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) 1m14.562600082s ago: executing program 42 (id=6203): socket$packet(0x11, 0x3, 0x300) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1608e2) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x82802, 0xf) syz_open_dev$video(&(0x7f0000000000), 0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = dup(r3) getsockname$packet(r4, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, 0x0, 0x0) 31.570279511s ago: executing program 2 (id=6348): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="2c1c7aa03d572de3eb385a7a", 0xc) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 29.245894271s ago: executing program 2 (id=6355): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x56, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23, 0x310bb}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30082, 0x22}}}}}}]}, 0x48}}, 0x24008000) ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019300)=""/102392, 0x18ff8) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000900)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x57, 0xc, 0xff, 0x5, 0x4}}, 0x120) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) 27.584522059s ago: executing program 2 (id=6359): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x8405, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000001001000001000000ec"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) 27.318847524s ago: executing program 2 (id=6361): syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0xa0080) semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x3, 0x3, 0x800}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={[], [{@subj_role={'subj_role', 0x3d, 'tracefs\x00'}}, {@euid_gt}, {@fsmagic={'fsmagic', 0x3d, 0x8000000000000000}}, {@dont_measure}, {@euid_lt}, {@defcontext={'defcontext', 0x3d, 'system_u'}}], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80, 0x0) getdents64(r3, &(0x7f0000000580)=""/174, 0xff56) close(0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) 27.27071643s ago: executing program 7 (id=6362): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@getlink={0x20, 0x12, 0x1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x60000, 0x40000}}, 0x20}, 0x1, 0x0, 0x0, 0x44000000}, 0x80) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) sched_setaffinity(r1, 0x8, &(0x7f0000000140)=0x7fff) setresuid(0x0, 0xee00, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, 0x0, &(0x7f0000000440)) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000280)='%\xdf\xf1\xcf(,c\xbe\xfbL:', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x0) 27.152033614s ago: executing program 2 (id=6363): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x200080c1, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x22282) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0xc0086202, &(0x7f0000000180)=0x6) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat(0xffffffffffffff9c, 0x0, 0xe0000, 0x125) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x5, 0x5}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, 0x0, 0x25, 0x2, @void}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="28000000070605000000000000000000040000000000000073797a32000000000500010007000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@int=0x325ede2c, 0x4) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x2) sendmsg$NL80211_CMD_DEL_PMK(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x34, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x80) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) 26.391184177s ago: executing program 7 (id=6366): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) listen(0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) socket$packet(0x11, 0x3, 0x300) 26.083678806s ago: executing program 2 (id=6367): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x100, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) 25.326079225s ago: executing program 43 (id=6367): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x100, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) 25.2654288s ago: executing program 7 (id=6370): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x56, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23, 0x310bb}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30082, 0x22}}}}}}]}, 0x48}}, 0x24008000) ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019300)=""/102392, 0x18ff8) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000900)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x57, 0xc, 0xff, 0x5, 0x4}}, 0x120) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) 22.864972328s ago: executing program 7 (id=6374): syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0xa0080) semtimedop(0x0, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x3, 0x3, 0x800}], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000400)={[], [{@subj_role={'subj_role', 0x3d, 'tracefs\x00'}}, {@euid_gt}, {@fsmagic={'fsmagic', 0x3d, 0x8000000000000000}}, {@dont_measure}, {@euid_lt}, {@defcontext={'defcontext', 0x3d, 'system_u'}}], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80, 0x0) getdents64(r3, &(0x7f0000000580)=""/174, 0xff56) close(0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0) 22.167651638s ago: executing program 7 (id=6376): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x0, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000100)={0xa, 0x4, 0xfa00, {r2}}, 0xc) ioctl$XFS_IOC_GETBMAPA(r1, 0xc020582c, &(0x7f0000000140)={0x2, 0x3ff, 0x4, 0x8, 0x7}) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, &(0x7f0000000180)={{r1}, "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"}) r3 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000001180), 0xc0800) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f00000011c0), &(0x7f0000001200)=0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0xa4, r5, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xf}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xc}}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7f}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000000}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) (async) fcntl$lock(r1, 0x6, &(0x7f0000001400)={0x0, 0x1, 0x9, 0x4}) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x9, 0x34, &(0x7f0000001440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @tail_call, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001600)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x81213d847396bdaf, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001640)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001680)={0x0, 0x7, 0xc8, 0x94000000}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000016c0)=[{0x5, 0x2, 0x9, 0x9}, {0x5, 0x4, 0x9, 0x3}], 0x10, 0x70}, 0x94) ioctl$XFS_IOC_FSGEOMETRY_V1(r6, 0x80705864, &(0x7f00000017c0)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001880)={'vcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x74, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7b045a61f21e856c}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x74}}, 0x8810) (async) fsetxattr$security_capability(r1, &(0x7f00000019c0), &(0x7f0000001a00)=@v1={0x1000000, [{0x6b, 0x4}]}, 0xc, 0x2) (async) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001a40), 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r8, 0x5403) (async) accept$inet6(r0, &(0x7f0000001a80), &(0x7f0000001ac0)=0x1c) (async) io_setup(0x800, &(0x7f0000001b00)) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000001d40)={{r4, &(0x7f0000001b40)='security.capability\x00', 0x84200, &(0x7f0000001b80)={@align=0xc, {0x1, 0xb, 0x1, 0x4}}, 0x5, &(0x7f0000001bc0)={@_ha_fsid}, &(0x7f0000001c00)=0x9}, {[0x9, 0x0, 0xffffffff, 0xff]}, 0x7, 0xe8, &(0x7f0000001c40)=""/232}) accept4$llc(r9, &(0x7f0000001dc0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000001e00)=0x10, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r9, 0x117, 0x5, 0x0, 0x0) fsopen(&(0x7f0000001e40)='ecryptfs\x00', 0x1) sendmsg$nl_route(r9, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)=@ipv6_getnetconf={0x2c, 0x52, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x9}, @NETCONFA_IFINDEX={0x8, 0x1, r7}, @NETCONFA_FORWARDING={0x8, 0x2, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000040}, 0x974d15c0f520b293) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000001f80), 0x0, 0x0) (async) ioctl$OCFS2_IOC_INFO(0xffffffffffffffff, 0x80106f05, &(0x7f0000007400)={&(0x7f0000007240)=[&(0x7f0000001fc0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000002000)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000003}}, &(0x7f0000002040)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000002080)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000002100)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, &(0x7f0000002140)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000002180)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000002200)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000002240)=@features={{0x4f32494e, 0x6, 0x10, 0x1}}, &(0x7f0000002280)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f00000022c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000002300)=@journal={{0x4f32494e, 0x7, 0x10, 0x180000001}}, &(0x7f0000002340)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000001}, [{0xffff, 0x88}, {0x78, 0x663}, {0x3, 0xb}, {0x5, 0x2}, {0x80, 0x5}, {0x81}, {0x8, 0x5}, {0x6, 0x242}, {0x7}, {0x3, 0x9}, {0xf, 0x800}, {0x6, 0x4}, {0x6, 0x7}, {0x8, 0x4}, {0x800, 0xfa}, {0x1, 0x9}, {0x100, 0x400}, {0x4, 0x80}, {0xffff, 0x2}, {0x9, 0x21df}, {0x6, 0x2}, {0x8, 0x100}, {0x5, 0x400}, {0x7798, 0x101}, {0x6, 0xffff}, {0xfffffffffffffff8, 0xd2a8}, {0x8746, 0x401}, {0xe, 0x7}, {0xf, 0x2}, {0x9, 0xffff}, {0x7, 0x4}, {0x84, 0x9}, {0x3}, {0x2, 0x6}, {0x80000001, 0x9}, {0x0, 0x8}, {0x4, 0x4}, {0xfff, 0xc}, {0xffff, 0x100000000}, {0x3, 0x4}, {0x6, 0x1}, {0x5, 0x1}, {0x6, 0x80000001}, {0x5, 0x59}, {0x3e45, 0x8}, {0x8, 0x9}, {0x400, 0xea2}, {0x0, 0x9}, {0x9, 0x6}, {0x2, 0x1}, {0x217703f3, 0xb8}, {0x2, 0xf}, {0x6, 0x4}, {0xd, 0x8}, {0x4, 0x5}, {0x0, 0xcb7}, {0x7fffffff, 0xe00000000}, {0x306, 0x2}, {0x7, 0x1}, {0x629, 0x7fff}, {0xffff, 0x5}, {0x3, 0x3}, {0x9f, 0x81}, {0x1ff, 0x2}, {0xb63, 0xfffffffffffffff7}, {0x6, 0x8}, {0xa617, 0x8}, {0x3, 0xe}, {0x200}, {0x8, 0x8}, {0x9, 0x40}, {0x7, 0xd0}, {0x10000, 0x7f}, {0x1d91, 0x81}, {0x5, 0x2}, {0xd, 0x8}, {0x1, 0x61b125f8}, {0x4, 0xdc}, {0x1, 0x40}, {0x7, 0x5ea}, {0xfb, 0x5}, {0x6d9, 0x8}, {0x3, 0x9}, {0x6, 0x7}, {0x40}, {0x8, 0x4}, {0x1, 0x6}, {0x81, 0x80}, {0x6, 0x101}, {0x5ca, 0x8}, {0x4, 0x2}, {0x0, 0x8}, {0xa, 0x400}, {0x3, 0x5}, {0x52a5daff, 0x401}, {0x100, 0xcc27}, {0x7, 0x4}, {0x8, 0x6}, {0x9c, 0xf}, {0x9, 0x3ff}, {0xb8, 0xfff}, {0xfffffffffffffffd, 0x4}, {0x400, 0x2}, {0x2, 0xffffffffffffff80}, {0x2, 0x4}, {0x6, 0xffff}, {0x0, 0x7cc8}, {0x9, 0x3}, {0x6, 0x8}, {0x6, 0x8}, {0x4}, {0x29e8a9bd, 0x2}, {0x0, 0x6}, {0x19, 0x5}, {0x9}, {0x4, 0x9}, {0xaddc, 0x5}, {0xa, 0xf}, {0x8001, 0x10}, {0x7fff, 0x8}, {0x2, 0x1f9c4298}, {0x4773, 0x200}, {0x80, 0x7}, {0x3, 0x6}, {0x8000000000000001, 0x80000000}, {0x3, 0x10001}, {0x80, 0x80000001}, {0xffffffffffffffff, 0x4}, {0x8, 0x5}, {0x40, 0x9}, {0x8000000000000001, 0x9}, {0xa, 0x1000}, {0xffff, 0x2}, {0x6, 0x100}, {0x1, 0x9}, {0x97a5, 0x2}, {0x6000000000000000, 0xfff}, {0x5, 0x3}, {0x1, 0xa}, {0x5, 0x6}, {0x3, 0xfffffffffffffffe}, {0x101, 0x1}, {0x9, 0x4}, {0x5, 0xfffffffffffffffb}, {0x9, 0xee14}, {0xf11c, 0x5}, {0xfffffffffffffffa, 0x4}, {0xf1}, {0x5, 0x3}, {0x8, 0x10}, {0x3, 0x2}, {0x7, 0xfffffffffffffff4}, {0x3, 0x1}, {0xee87, 0x3}, {0xd, 0x3}, {0x0, 0xc}, {0xffffffff, 0x8}, {0x0, 0xffffffffffffffff}, {0x1, 0x7f}, {0x3, 0x7}, {0x1, 0x4}, {0x8, 0x8000}, {0x9, 0xbf6}, {0xffffffffffffff1c, 0x9}, {0x87b, 0x2}, {0x6, 0x10000}, {0x8, 0x100000001}, {0x101, 0x4}, {0xc4, 0x9}, {0x1, 0x100000000}, {0x7fff, 0xff}, {0x4, 0x8c1}, {0x7}, {0x9, 0x10001}, {0x403e, 0x1}, {0x5, 0x3ff}, {0xb065, 0x1}, {0x9, 0x7fffffffffffffff}, {0x0, 0x4}, {0x9, 0x100000000}, {0x7fff, 0x8}, {0x6, 0x9}, {0x2, 0x304f}, {0x9, 0x4}, {0xffffffffffff9592, 0x3}, {0x8000000000000001, 0xf83a}, {0x80000001, 0x7e7c92fd}, {0x4e, 0x3}, {0x2, 0x2}, {0x4, 0xfffffffffffffffe}, {0x2, 0x23eef00}, {0x80000001, 0x2}, {0x80000000, 0x10ec}, {0xd34, 0x8}, {0x7, 0x3}, {0x7, 0x2}, {0xb, 0xa}, {0x5, 0x10000}, {}, {0x8000000000000001, 0x7}, {0x10, 0x2893}, {0x30ed22a, 0x400}, {0x9, 0x3}, {0x5, 0x7f}, {0x4, 0x8000}, {0x891a, 0xfffffffffffffffb}, {0x4, 0x18000}, {0x9, 0xf}, {0x2, 0x5620d39}, {0x81, 0x1}, {0x80000000, 0xffff}, {0x9, 0x8}, {0x81, 0x2}, {0xc221, 0x9}, {0x34dd, 0xcf6e}, {0xd14, 0x1}, {0x6, 0x5}, {0x6, 0x8}, {0x80000001, 0x1}, {0xfffffffffffffffc, 0x5}, {0x52, 0xff1}, {0x3, 0xb}, {0x1000, 0xa15}, {0x8a2, 0x3}, {0x80, 0x8}, {0x6e1a, 0x1}, {0x311, 0xf}, {0x5, 0x2}, {0xad51, 0xffff}, {0xfffffffffffffffe}, {0x7f, 0x9}, {0x5}, {0x3ff000, 0x6c}, {0x3, 0x9}, {0xfff, 0x8}, {0x5, 0x7}, {0x1e, 0x9}, {0x301, 0x4503}, {0x9, 0x6}, {0x3ff, 0x3}, {0x9, 0xd43}, {0xdd, 0x4}, {0x3, 0x3}, {0x7d97, 0x7fffffff}, {0x7ff}, {0xe000000000000000, 0x70000000000}, {0x3, 0xc}, {0x2476}, {0x0, 0xffffffffffff7fff}, {0x9210, 0x6}, {0xd724, 0xffffffff}, {0x3ff, 0x6}, {0x7, 0x10}, {0x4, 0x4f1}, {0x8000000000000001, 0x2}]}, &(0x7f0000003380)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f00000033c0)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x1, 0x3}, {0x6, 0x3}, {0x4, 0x5}, {0xb9, 0x100000000}, {0x5, 0x80}, {0x1bc, 0xffffffffffff7973}, {0x7, 0xffffffffffffffff}, {0x8, 0xffff}, {0x7fffffffffffffff, 0x5}, {0x8000000000000000, 0x4}, {0x9, 0xa}, {0x800, 0x7ff}, {0x1, 0x400}, {0xfffffffffffffff8, 0x2}, {0x8, 0xd50}, {0x1, 0x7fffffff}, {0x9, 0x5}, {0x6000000000000, 0x28}, {0xfffffffffffff6eb, 0x2}, {0xfffffffffffffff9, 0xfffffffffffffff8}, {0x7, 0x7ff}, {0x9, 0xfff}, {0x9, 0x9}, {0xff, 0x7a}, {0xfffffe0000000000, 0x1}, {0xa20, 0x3}, {0xf5, 0x10001}, {0x7, 0x3}, {0x1, 0x3}, {0x5, 0x10000}, {0x6, 0x219fb6de}, {0x8000, 0x9}, {0xc73, 0x5}, {0x4, 0x8000000000000000}, {0x7fffffff, 0xe}, {0xf520, 0x5}, {0xfe, 0x81}, {0x1, 0x9}, {0xfffffffffffffffe}, {0x7fffffffffffffff, 0x8}, {0xfffffffffffffffa, 0x8000000000000001}, {0x0, 0x9}, {0xfffffffffffffff5}, {0x8, 0xfffffffffffffff9}, {0x9, 0x2400000}, {0x1000, 0xd95}, {0x9, 0xfba8f3}, {0xffff, 0x7}, {0x1, 0x8}, {0xffffffffffffffff}, {0x2, 0x4}, {0x3, 0x1cde442b}, {0x98e5}, {0xfffffffffffffff9, 0x9}, {0x70, 0x2}, {0x4, 0x9}, {0x101, 0x5}, {0x9}, {0x4, 0x9}, {0x6, 0x7}, {0x7fff, 0x6}, {0x7fffffffffffffff, 0x2}, {0x7, 0x4ee}, {0x96, 0x1}, {0x2, 0x1}, {0x6, 0x37144f3e}, {0x0, 0x4}, {0xffffffffffffffff, 0xe}, {0x4fa, 0x8}, {0xe4a1, 0x4}, {0x40e, 0x4}, {0x4, 0x9}, {0x19e4, 0x6f0ea918}, {0xffffffffffffffff, 0x8}, {0x100000000, 0xccd0}, {0x9, 0x6}, {0x4, 0x1}, {0x1, 0x400}, {0xf980, 0x9}, {0xfffffffffffffff7, 0x5}, {0x61aaf7c2, 0x7fffffff}, {0x2, 0xfa3}, {0xffff}, {0x7, 0x1}, {0x80, 0x4}, {0x2, 0x8000}, {0x8, 0x9}, {0xcef, 0x2}, {0x4, 0x93a}, {0x7, 0xff}, {0x598, 0xe}, {0x658f, 0xddb9}, {0xf39, 0x6d80}, {0x3, 0x676d}, {0x3, 0x4}, {0x7, 0x1ff}, {0x1, 0x1}, {0x2, 0x2}, {0x209c}, {0x9, 0x9}, {0xfffffffffffffff9, 0x7}, {0xa4, 0x6}, {0xfffffffffffffff7, 0x7fffffffffffffff}, {0x15, 0xfffffffffffffffb}, {0x10000, 0x8001}, {0x401, 0x1000}, {0x8}, {0x4, 0x6}, {0x9, 0x3}, {0x4, 0x4}, {0x7, 0x5}, {0x76, 0x2}, {0x10001, 0x6}, {0x8, 0x4}, {0x4, 0x7}, {0x6, 0x1}, {0x8, 0x7fff}, {0x1, 0x7}, {0x0, 0xfff}, {0x7, 0x4}, {0x200, 0x1}, {0xfffffffffffffff7, 0x7}, {0x6, 0x9}, {0x80000001, 0x8}, {0x8000}, {0x3, 0xffffffff}, {0x4, 0x4}, {0x0, 0xb60}, {0x1, 0x6}, {0x8, 0x3ff}, {0xab6, 0xc3}, {0x1, 0x8}, {0x100000000, 0x7fffffffffffffff}, {0x1dd, 0x20000000}, {0x34, 0x2}, {0x9, 0xfffffffffffffff9}, {0x0, 0x2}, {0x8, 0xf}, {0xfe77, 0x5}, {0x9, 0x4ef}, {0x8, 0x5}, {0x6}, {0xffffffff}, {0xe6, 0x6}, {0x0, 0x1}, {0x80, 0x3}, {0xb, 0x6}, {0x0, 0x7}, {0xd10, 0x4ce1}, {0x400, 0x8}, {0x10001, 0xc}, {}, {0xa69a, 0x1000}, {0x8, 0xfff}, {0x80}, {0x0, 0x1}, {0x4}, {0x6, 0x6}, {0x619c990e, 0xfffffffffffffffe}, {0x8, 0x2}, {0xa2d, 0x5}, {0x7eef, 0x9}, {0x5, 0x7fff}, {0x5, 0x65}, {0x0, 0x831}, {0x8000000000000001, 0x400}, {0xff, 0x14bd}, {0x10, 0x5}, {0xffffffffffff8001, 0x5}, {0x3384, 0x4}, {0x151, 0x7f}, {0x1}, {0xffffffffffffff03, 0xff}, {0x5, 0x6da03717}, {0xe, 0x800}, {0x2, 0x1}, {0x5, 0x4}, {0x8, 0x80000001}, {0x5d43, 0x5}, {0x3, 0x3bdb9099}, {0x618, 0x27}, {0x8, 0xef}, {0xfffffffffffffff9, 0x3}, {0x4, 0x6}, {0x0, 0x3}, {0x4}, {0x5, 0xffffffff}, {0x5, 0xf}, {0x34, 0x8001}, {0x0, 0x8}, {0x1, 0x80}, {0x200, 0xc88}, {0x0, 0x1}, {0x1f5, 0x7}, {0x3, 0xfffffffffffffff8}, {0xdc, 0x9}, {0x10001, 0x82}, {0x81}, {0xfffffffffffffbff, 0x80}, {0x10c, 0xffff}, {0x8, 0x800}, {0x6, 0x81}, {0x3}, {0x4, 0x9}, {0xadd, 0x4}, {0x3b8, 0x7e0}, {0x34, 0x4}, {0xfffffffffffffff7, 0x8}, {0x9, 0xfffffffffffffffd}, {0x1, 0xffffffffffffffff}, {0x0, 0x7}, {0x3, 0x6}, {0x0, 0x5}, {0xe31, 0x10}, {0x100, 0x882}, {0x323, 0x68}, {0x3}, {0x9, 0xfa1}, {0x10001, 0x8}, {0x3, 0x2ef}, {0xffffffffffffffff}, {0x0, 0x5}, {0x400, 0x80000001}, {0x1000, 0x10001}, {0xffffffffffffe337, 0x4}, {0x1, 0x3}, {0x4, 0x5}, {0x4, 0x5}, {0x401, 0xcadb}, {0x6, 0x8000}, {0x8ad, 0x1}, {0x100000001, 0x8}, {0x100000001, 0x6e08}, {0x6, 0x2}, {0x8, 0x8}, {0xe, 0x8000000000000001}, {0x8000, 0x4}, {0x0, 0x6ff}, {0x7fffffff, 0x7}, {0x6, 0x5}, {0x3, 0x9}, {0x8, 0x8}, {0x800, 0x4}, {0x3, 0x90d}, {0x8, 0xffff}, {0x8, 0xfd}, {0x5, 0x185}, {0x800, 0x100}, {0x0, 0x1}, {0x618d, 0x9}, {0x8, 0x9}, {0x4, 0xc77}, {0x3, 0xe}, {0x0, 0x100}, {0x401, 0x1184}]}, &(0x7f0000004400)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000004440)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000004480)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f00000044c0)=@journal={{0x4f32494e, 0x7, 0x10, 0xd7185203152c7323}}, &(0x7f0000004500)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x40000000}, [{0x2, 0x2}, {0x6, 0x2}, {0x8, 0x3}, {0x8001, 0xce4}, {0x21, 0x7fffffffffffffff}, {0x8, 0x8}, {}, {0x8000, 0x7}, {0x1000, 0x4}, {0xa17c, 0x6}, {0x6, 0xb5}, {0x7fffffffffffffff, 0x81}, {0x16, 0x9}, {0xffffffffffffffff, 0x5}, {0x5, 0x8001}, {0x2, 0x9}, {0x9, 0x6}, {0x8, 0x364}, {0x0, 0xff}, {0x1, 0x80}, {0x3, 0x6}, {0x4}, {0x7fff, 0x2}, {0xfff, 0x7}, {0x10001, 0x3}, {0x90f, 0x2}, {0xf, 0xd87}, {0x7f, 0x415}, {0x6, 0x2}, {0x7fffffff, 0xffffffffffff104f}, {0x4, 0x1}, {0x59a, 0x8}, {0x6, 0x9e}, {0x7, 0x9}, {0x0, 0x9}, {0x21, 0x9}, {0x5, 0xfff}, {0x8, 0x400}, {0x20, 0x3}, {0x3a81}, {0x8, 0x5}, {0x8, 0x10001}, {0x10001, 0x3}, {0x1cb, 0x8}, {0x64, 0x7}, {0xef3, 0x400}, {0x2, 0x92d7}, {0x8, 0x7}, {0x5, 0xb527}, {0x6, 0x33}, {}, {0x7, 0x4}, {0x2, 0x9ad}, {0x1, 0x2d}, {0x6, 0x54a}, {0x10001, 0x5}, {0xffff, 0x6}, {0x6, 0x2}, {0x0, 0xffffffff}, {0x9, 0xfff}, {0x4, 0x52b}, {0x100000000, 0xfffffffffffffffe}, {0x0, 0x1ee}, {0x7, 0x800}, {0x1, 0x80000000}, {0x0, 0x1}, {0x4, 0x8}, {0x3, 0x4}, {0x8, 0x400}, {0x1}, {0x0, 0x4}, {0x7, 0xe}, {0x1, 0x9}, {0x3, 0xff}, {0x8, 0xdab}, {0xd7, 0x40}, {0x4, 0x5}, {0x8, 0xffffffff}, {0x0, 0x1}, {0x6, 0x5}, {0x6, 0x2}, {0x1, 0xfffffffeffffffff}, {0xffffffffffffff46, 0xfff}, {0x1, 0x7ff}, {0x1, 0x5}, {0x80000001, 0x1}, {0xc, 0x8000}, {0xa, 0x8001}, {0x2, 0x4a064567}, {0x934, 0x7}, {0x3, 0xb}, {0x8e24, 0x6}, {0x0, 0x5}, {0x2d, 0x6}, {0x3b7, 0x9}, {0x5dee, 0x6a}, {0x80000000, 0x8001}, {0x5c, 0x7}, {0xff, 0x200}, {0x400, 0x8000000000000001}, {0x180000000, 0x6471d7ef}, {0x2000000, 0xfe}, {0x6, 0x10000}, {0x5, 0x6}, {0x88bc, 0x7}, {0x713f, 0xc5d}, {0x0, 0xac}, {0xffffffff, 0x7}, {0xf, 0x4}, {0x8, 0x5}, {0x3, 0x8}, {0xffffffffffffffff, 0x5}, {0x7fffffffffffffff, 0x9}, {0x205, 0x8}, {0x6, 0x1}, {0x70, 0x400}, {0xca53, 0x5}, {0x6, 0x9}, {0x2, 0x870}, {0x9}, {0x2, 0x7fffffff}, {0x6, 0x2}, {0x27c, 0x9}, {0x8001, 0x9}, {0xfffffffffffffffc, 0x100}, {0x0, 0x7fffffff}, {0x3ff, 0x1}, {0x1, 0xfffffffffffff594}, {0x2, 0x9}, {0x7fff, 0x6000000}, {0x0, 0x3}, {0x71, 0x81}, {0x6, 0xf}, {0x380000, 0x40}, {0x1, 0x7}, {0x80, 0x2b}, {0x7fff, 0x100000000}, {0x75, 0x8}, {0xc, 0x4}, {0x9, 0x10001}, {0xffffffffffffffd1, 0x3}, {0x6}, {0x3, 0x3}, {0xd5, 0xa}, {0xfffffffffffffff9, 0x3}, {0x7, 0x8}, {0x7, 0xf9b}, {0x9fff, 0x4}, {0x2, 0x7ff}, {0xffffffffffffff82, 0xa6}, {0x5, 0x80}, {0x3, 0x1}, {0x9, 0x7}, {0x8, 0x3ff}, {0x8, 0x2}, {0x5, 0x3}, {0xff8d, 0x2}, {0x8, 0x3}, {0x1, 0x4}, {0x80000000, 0x5}, {0x401, 0x5}, {0xc1}, {0x3c0, 0xa}, {0x7, 0x1}, {0x0, 0x4}, {0xffffffffffffff7f}, {0x2, 0x7fffffff}, {0x5, 0x40}, {0x9, 0x7}, {0xffffffffffff61a3, 0x1000}, {0x6c2, 0x6}, {0xdc3d, 0xf}, {0xffffffffffff8000, 0x6}, {0x6871d0e4, 0x5}, {0x6, 0x8}, {0x3, 0x100000000}, {0x1, 0x6}, {0x1}, {0x2, 0x9}, {0x3, 0xc}, {0x4, 0x8}, {0x6, 0xff}, {0xe17b, 0x200}, {0xb, 0x2}, {0x4, 0x6}, {0xfffffffffffffbff, 0x40}, {0x80, 0x8}, {0xff, 0x5dd6}, {0xfffffffffffffffa, 0x7}, {0x7fffffff, 0x9}, {0x8, 0x8b37}, {0x7088, 0x7}, {0x9, 0x1}, {0x0, 0xaf}, {0x7, 0x503d}, {0x0, 0x200}, {0x0, 0x28}, {0x68, 0x1}, {0x7f, 0xffffffffffff6b1e}, {0x1, 0x87}, {0x9, 0xfffffffffffff3eb}, {0x9, 0xf1}, {0x1, 0x3}, {0xfff, 0x9}, {0xdbc, 0x3}, {0xd, 0x9}, {0x7, 0xc000000000000000}, {0x8, 0xfffffffffffffffe}, {0x1506, 0x1}, {0x80, 0x1}, {0x6, 0x10}, {0xfffffffffffffff8, 0x6838}, {0x0, 0x4}, {0x8, 0x6}, {0x3, 0x7}, {0x10000, 0x8}, {0x5, 0xe8b}, {0xe, 0xffffffffffffffff}, {0x6, 0x3}, {0x4, 0x7}, {0x10, 0x8}, {0x4}, {0x4}, {0xed19, 0x200}, {0x5, 0x7}, {0x3, 0x80000000}, {0xed, 0x4}, {0x401, 0x1}, {0x1, 0x6}, {0x7fff, 0x3}, {0xb, 0x7}, {0x9, 0x4}, {0xe59, 0xe0}, {0x80000001, 0x6}, {0xb, 0x75}, {0x10001, 0x1}, {0x9, 0x7f}, {0x40, 0x4}, {0x48a7, 0x1000}, {0xc, 0x1f6}, {0x2, 0xff}, {0x8, 0x1ff}, {0x8000000000000001, 0x1}, {0xffffffffffffffff, 0x3}, {0x5, 0x6}, {0x7487b04d, 0x81}, {0x7, 0x4}, {0x5}, {0x6, 0x9}, {0x6, 0x7f9}, {0x4, 0xd56}, {0x80, 0x4}, {0x641}, {0x7, 0x946f}, {0x9, 0x80000001}]}, &(0x7f0000005540)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x2, 0x2}, {0x401, 0xff}, {0x8, 0x5}, {0x8001, 0x8}, {0x80000000, 0x5}, {0x39, 0x8}, {0x8000000000000000, 0x5ef9}, {0x2, 0x8}, {0xff, 0x3}, {0x2, 0x10}, {0x6, 0x800}, {0x2, 0x3}, {0x6, 0x9f}, {0x2, 0x5}, {0x7, 0x5}, {0x1, 0x8}, {0xe, 0x4}, {0x7}, {0x6, 0x6}, {0x6, 0x1}, {0x7, 0x6}, {0x1, 0x2}, {0x3, 0x81}, {0x1000, 0xfffffffffffffff9}, {0x0, 0x3}, {0x8000000000000001, 0x4}, {0x2}, {0x3, 0x5}, {0x1ae, 0x3}, {0x8, 0x4}, {0xd, 0xd7}, {0x8, 0x6}, {0x7, 0x88ac}, {0xfffffffffffffff8, 0x2}, {0x8}, {0x5, 0x7fff}, {0x9, 0x8000000000000001}, {0x1, 0x9}, {0x8000, 0x1}, {0x7fff, 0x1}, {0x4, 0x9}, {0x86}, {0x3ff}, {}, {0xc6, 0x2}, {0x10000}, {0x4, 0x80000001}, {0xba95, 0x7}, {0x7f, 0x4}, {0x9, 0x1924}, {0x100, 0x5}, {0x2, 0x1}, {0x9, 0x10000}, {0x5, 0xd7c}, {0x2, 0x4}, {0x5, 0x8}, {0x34, 0x6}, {0x800, 0xa}, {0x1ff, 0x5}, {0x8, 0x6}, {0x5, 0x64e0}, {0xc0, 0xa}, {0xdad, 0xe}, {0x2, 0x1}, {0x94, 0x8}, {0x4}, {0x600000000, 0x3}, {0x7a, 0x80}, {0xebc000, 0x80}, {0x8, 0xd}, {0x57c2, 0x3}, {0x9, 0x8}, {0x6, 0x9}, {0x7f, 0xffff}, {0x80, 0x16eadf38}, {}, {0x9, 0xbca}, {0x7, 0x7}, {0x9, 0x7}, {0x1, 0x7}, {0xfffffffffffffff1, 0x4}, {0x52800000000, 0x1}, {0x7, 0x8}, {0x1, 0x4}, {0x9, 0x8}, {0x80000000, 0x80000000}, {0x8000000000000000, 0x5}, {0x0, 0x5}, {0xffffffffffffffff, 0x5}, {0x10000, 0x4}, {0x80000001, 0x2}, {0x8, 0xd531}, {0x200, 0x9}, {0x0, 0x1}, {0xfffffffffffffeff, 0x1}, {0x9, 0x8000}, {0x8000000000000001, 0xfffffffffffffffb}, {0x3ff}, {0x7f}, {0x800, 0x9}, {0x7}, {0x11f, 0x100}, {0x8, 0x8}, {0x8, 0x2}, {0x1, 0xffffffffffffffff}, {0x7, 0x100000001}, {0xfc9, 0x3}, {0x7fff, 0x9}, {0x0, 0x6}, {0x5, 0xc}, {0x3, 0x5}, {0x4}, {0x2, 0x8}, {0x10000, 0x1000}, {0x6, 0x22}, {0x90, 0x8}, {0x8, 0x1}, {0x0, 0xe}, {0x8b81, 0x86}, {0x8, 0x6}, {0xffffffffffffffff, 0x400}, {0x67, 0xe2}, {0x9883, 0x8}, {0x9, 0x7f}, {0x100, 0x78}, {0x9, 0xfffffffffffffffc}, {0x1491, 0xc0000000000}, {0x800, 0x7ff}, {0x5, 0x8}, {0x6, 0xfffffffffffffffc}, {0xb70}, {0xc7, 0x6}, {0x0, 0x2}, {0x8, 0x8}, {0x1271, 0x1}, {0x8, 0x9c8}, {0xf, 0x47}, {0x4, 0x5}, {0x6, 0x7}, {0x10001, 0x6}, {0x5, 0x1}, {0x2, 0x100000000}, {0x40, 0x101}, {0xffffffffffffffff, 0x2}, {0x587, 0x8}, {0x2, 0xfff}, {0x5, 0x9}, {0x100000001, 0x800}, {0x5, 0x7}, {0x1, 0xfffffffffffffff0}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x2}, {0x100000001, 0x9}, {0x5, 0x6}, {0x8, 0xb}, {0x91e, 0x8}, {0x5, 0x6}, {0x5, 0x9}, {0x9000, 0x5}, {0x2, 0x48}, {0x25bc, 0x5a25ee74}, {0x3, 0xffffffffffffffff}, {0x0, 0x3}, {0x4, 0x8000}, {0x41b, 0x3}, {0x0, 0x9}, {0x6, 0x1d}, {0x6, 0x6}, {0xffffffffffff0000, 0x2}, {0x5b, 0x532}, {0x8000000000000001, 0xffffffff}, {0x8, 0x4}, {0x5, 0x7}, {0x9, 0x5}, {0xfffffffffffffe00, 0x7}, {0x9, 0x466}, {0x55, 0x3}, {0x3, 0x5}, {0x2, 0x79}, {0x401, 0x7f}, {0x8, 0xfff}, {0x9, 0x5}, {0x3, 0xa}, {0x8000000000000000, 0x8000000000000000}, {0x7fffffffffffffff, 0xd}, {0x0, 0x4}, {0x8}, {0x0, 0x3}, {0xbc0, 0x9}, {0x7, 0xfffffffffffffffa}, {0x3, 0x9}, {0x100, 0x7f6}, {0x9, 0x8}, {0x6, 0xcf1}, {0x5, 0x2}, {0xfff, 0xc}, {0x1, 0x6}, {0x1, 0xfffffffffffffe01}, {0x2, 0x4}, {0x87, 0x8000000000000001}, {0xffffffffffff1352, 0x1}, {0x80000000, 0x10001}, {0x9, 0x120000000}, {0x3e, 0x8}, {0x1}, {0x3, 0x10}, {0x784b, 0xd}, {0xada}, {0x1000200000000, 0x3}, {0xc, 0x8}, {0x8000000000000000, 0x66a4800000000}, {0xb, 0x3ecf}, {0x400, 0x4}, {0x0, 0x3ff}, {0xe, 0x5}, {0x100000001, 0x6}, {0x8000000000000001, 0x1}, {0x2, 0x5a5}, {0xaebc}, {0x100000001, 0x6}, {0x5, 0x53}, {0x3, 0x4}, {0xb56, 0x7}, {0x5, 0x2d}, {0xff, 0x3}, {0x200, 0x7}, {0xf, 0x7}, {0x7, 0x6}, {0x3, 0x5}, {0x6ca, 0x7}, {0x6, 0x6}, {0x656, 0x9}, {0xfc, 0x9}, {0x6}, {0x7fffffff, 0x2}, {0xfffffffffffff77b, 0x2}, {0x7, 0x3}, {0x3800000, 0x1}, {0x1, 0x6}, {0xffffffffffffffff, 0x3ff}, {0x4, 0x1}, {0x5, 0x5}, {0xb, 0x100}, {0x7, 0x5}, {0x2, 0x7}, {0xffffffff, 0x4}, {0x10, 0x7}, {0x9, 0xd}, {0x2, 0x4}, {0x9, 0x4}, {0xfffffffffffffb3c, 0x100000000}, {0x0, 0x7}, {0x8000000000000001, 0x8000000000000000}, {0xd2, 0x8000000000000001}]}, &(0x7f0000006580)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f00000065c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000001}}, &(0x7f0000006600)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000001}, {}, 0x4}, &(0x7f0000006740)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000006780)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f00000067c0)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000006800)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000006840)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000006880)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000000}, {}, 0x2}, &(0x7f00000069c0)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000006a40)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000006a80)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000006ac0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000006b00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x8}, &(0x7f0000006c40)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, &(0x7f0000006c80)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000006cc0)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000006d40)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000001}, {}, 0x8}, &(0x7f0000006e80)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}, &(0x7f0000006ec0)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000006f00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000006f40)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}, &(0x7f0000006f80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x80000000}}, &(0x7f0000006fc0)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000001}}, &(0x7f0000007000)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000001}}, &(0x7f0000007040)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, &(0x7f0000007080)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x2c76}, &(0x7f00000071c0)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000007200)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}], 0x32}) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000007440)={0x3ff, 0xfff, 0x101, 0xfff6}) 21.468309374s ago: executing program 7 (id=6381): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x353, 0x78, 0x300, 0x0, 0xa, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x100}, {}, {}, 0x0, 0x100, 0x3, 0x2, 0x1, 0x4, 0x9f6, 0x3, 0x1ff, 0x803d, 0x1, 0x7, 0x5f, 0x202, 0x1, 0xc}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xe, 0x9}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xf, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000080)={0x794, 0xffff, 0x8, 0x8, 0x506, 0xd}) 20.432476802s ago: executing program 44 (id=6381): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x353, 0x78, 0x300, 0x0, 0xa, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x100}, {}, {}, 0x0, 0x100, 0x3, 0x2, 0x1, 0x4, 0x9f6, 0x3, 0x1ff, 0x803d, 0x1, 0x7, 0x5f, 0x202, 0x1, 0xc}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f0000000200)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xe, 0x9}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xf, 0xfff3}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000080)={0x794, 0xffff, 0x8, 0x8, 0x506, 0xd}) 9.834050759s ago: executing program 0 (id=6407): r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(0xffffffffffffffff, 0x80045010, &(0x7f0000000000)) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000004000000000000080000000000000bf9ae7988d5db3214bd016147c0cbe3603684928fb86b0de9be13f9294c26f785b969c2f5bb7570807fc05", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000480)={@caif=@util={0x25, "00992a108bb221bad1dcd217a110886c"}, {&(0x7f0000000380)=""/135, 0x87}, &(0x7f0000000440), 0x50}, 0xa0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r7, r4, 0x25, 0x0, @val=@tcx}, 0x1c) 7.742877652s ago: executing program 6 (id=6411): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="2c1c7aa03d572de3eb385a7a", 0xc) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7.742003984s ago: executing program 4 (id=6412): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x1ff}}) alarm(0x5) sendmsg$nl_route_sched(r5, 0x0, 0x40000d0) umount2(0x0, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000000)) 7.580662436s ago: executing program 0 (id=6413): socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80400220}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r1, 0x400, 0x70bd28, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x60}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00044000000000000000000900010073797a300000000038000000020a01"], 0x110}}, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x42, 0x12, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4004, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x3, 0x10000004, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35b9, 0x1, 0xfffffffd, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1000c1cf, 0x1000, 0x0, 0x1f0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x200, 0x12, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000", @ANYRES32=0x0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100008b}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120150026ae63240cd0c800086b201020301090224000202ecb08d0904"], &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101082, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x9, 0x3, 0x6}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8848}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000000778af67c628770c0000002a0b00000000b3fa5e444b"], 0x0}, 0x0) setns(r4, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r10 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) 6.844321198s ago: executing program 6 (id=6414): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x3}, 0x9}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) msgget$private(0x0, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1, &(0x7f0000000380)=""/173, 0xad}, 0xffff}, {{&(0x7f0000000440)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)=""/130, 0x82}], 0x1, &(0x7f00000005c0)=""/101, 0x65}, 0x10000}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)=""/158, 0x9e}, {&(0x7f0000000700)=""/33, 0x21}], 0x2}, 0x1fc00}], 0x3, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) accept$alg(r7, 0x0, 0x0) 6.71504129s ago: executing program 4 (id=6415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c044) socket$nl_rdma(0x10, 0x3, 0x14) 6.423301022s ago: executing program 4 (id=6416): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f0000000480)=""/94, 0x5e, 0x734, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x5804, 0x2, 0x2, 0x18092, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r1, 0xe) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbb3d0abbbba538ae46463208004500001c0000000000029078ac1e0001e000000122009078e00052cbd869f45b2285b8b62aafab7ebdf8906178561ec7625e17da8a94ae780cb39869b30afdccc5023de6062a58ce9f02d8eab99e2c2d568595805c"], 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dbg={0x25, 0x4}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x20000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000100811212290000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000000140)={0x10, 0x30, 0x3, {0x0, 0x3, {0x2, 0x4e20, 0x6, @rand_addr=' \x01\x00', 0x10003}}}, 0x38) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="c400000097000000e6acdfef3d0be27d36faef6b4e1140e94ace0301f9a7ec1c79b4c1161c1a1011ac75e336bd126aaf4fdb70982ce33d675ba87b8948bb7214daf9fe3865a6b846983bc059284e9b1434be4e4c70d7a9b2224359aa341a31e9e833cfaa96a4a078f37a8496d1f9f4fea6b2d1b559fe4bf260b85d5e243b3d6b0712d8c522d929ea27315a2ee1a3e92b609bb155afea6827b946fa40d75e2127b414f2fe552b6d942049173b98cae64455e5bb2785f8e6df2557811033eafd5af3b830c76dc81e9c5b5c0000"], 0x8000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x3e8, 0x248, 0x43, 0xa0, 0x248, 0x98, 0x350, 0x178, 0x178, 0x350, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x248, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x108, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x448) dup(0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000c40)="120000000001ffa0000010000000", 0xe, 0x8800, 0x0, 0x0) r8 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080), 0x0, 0x0, 0x0, 0x1) 5.475185573s ago: executing program 6 (id=6417): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000020000000000000014085000000050000001801000020786c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x400) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) syz_emit_ethernet(0x68, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbc7bbbbbbbb6076b5cad4f686dd6075e70000323a0020010000000000000000000000000000ff020000000000000000000001000000000000000000000060a3579e00002b00ff01000000000000000000eeff000001fe8000000000000000000000000000bb6be295b206b80f088907ab605b39b371607997a190e75f4ba272916b16ada7660e462f895850a5"], 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000580)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60b59f0000383afffe880000000000000000000000000001ff020000000000000000000000000001020090780000000167d32d6200022c00fe8000000000000000000000000000aafe8000000000000000000000000000aae20faee2dfbdb06195748e7327fe1547ac923c76e33cbc8512b3f978d862d9971cf1de419d31569eab919d7fcaf32867f8e47bdc0c28"], 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aac2aaaa"], 0x20) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x6, 0x1, 0x5) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r6 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000080), &(0x7f00000001c0)=r6}, 0x20) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x24008091}, 0x804) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0xc0189436, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r7}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0xe, 0x0, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3fd, 0x0, 0x0, 0x0, 0xfe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x4000}) 4.382190342s ago: executing program 6 (id=6418): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/108, 0x0, 0x40000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) write$vhost_msg_v2(r1, &(0x7f00000000c0)={0x2, 0x0, {&(0x7f0000000140)=""/110, 0x6e, 0x0, 0x1, 0x2}}, 0x48) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ftruncate(0xffffffffffffffff, 0x1000006) syz_usb_connect(0x5, 0x36, 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000580)=0x1) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, 0x0) setuid(0xee01) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 3.53898407s ago: executing program 0 (id=6419): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) semctl$GETVAL(0x0, 0x2, 0xc, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) getpid() r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0], 0x50) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) openat$null(0xffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) write$rfkill(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffc0}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20004820) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="001000000000000000fde5ffff00000000000002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) 3.373294972s ago: executing program 0 (id=6420): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x56, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23, 0x310bb}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30082, 0x22}}}}}}]}, 0x48}}, 0x24008000) ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019300)=""/102392, 0x18ff8) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000900)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x57, 0xc, 0xff, 0x5, 0x4}}, 0x120) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) 2.167304904s ago: executing program 0 (id=6421): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x56, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23, 0x310bb}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30082, 0x22}}}}}}]}, 0x48}}, 0x24008000) ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019300)=""/102392, 0x18ff8) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000900)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x57, 0xc, 0xff, 0x5, 0x4}}, 0x120) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) 2.145848778s ago: executing program 6 (id=6422): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000002c0)="2c1c7aa03d572de3eb385a7a", 0xc) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 2.140029155s ago: executing program 4 (id=6423): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x69) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2f, 0x2000, 0x0, &(0x7f0000000140)="e0b9547ed387dbe9abc89b6f5b2e", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r2, &(0x7f0000000980)={&(0x7f00000002c0)=@ax25={{0x3, @default}, [@remote, @null, @netrom, @netrom, @bcast, @null, @null, @null]}, 0x80, &(0x7f0000000900)=[{&(0x7f00000004c0)=""/136, 0x88}, {&(0x7f0000000580)=""/38, 0x26}, {&(0x7f00000005c0)=""/195, 0xc3}, {&(0x7f00000006c0)=""/12, 0xc}, {&(0x7f0000000700)=""/65, 0x41}, {&(0x7f0000000780)=""/253, 0xfd}, {&(0x7f0000000880)=""/71, 0x47}], 0x7}, 0x2022) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x37, 0x1, 0x7fffc, 0x4, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) 1.503655368s ago: executing program 4 (id=6424): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x56, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300)=0x8df, 0x4) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x23, 0x310bb}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x30082, 0x22}}}}}}]}, 0x48}}, 0x24008000) ioctl$UBLK_U_CMD_STOP_DEV(0xffffffffffffffff, 0xc0207507, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019300)=""/102392, 0x18ff8) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000900)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x0, 0x57, 0xc, 0xff, 0x5, 0x4}}, 0x120) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r2, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) 928.86887ms ago: executing program 6 (id=6425): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000200)={0x2, 'lo\x00', 0x3}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="07000000000000000000020200000400018046e354069c"], 0x18}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYRESDEC=r5, @ANYRES64, @ANYRESOCT=r4], 0x18}, 0x1, 0xff07}, 0x6008001) prlimit64(0x0, 0x2, &(0x7f0000000180)={0x5, 0x800000000008b}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRES64=r6], 0x0) socket$inet6(0xa, 0x2, 0xc) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYRES8=r7, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000020000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000030000000000000000000000000000f92b041fe3587e465f1f16bf923f83a22e01fe86029557bf694f16442d9f0a6b547f28e85b7cc28469fb2f913e34249378a5061657d9508641b06637c22cdb247f0715712ee0a144b7e5b7b28b4c348eed0b8d9bf5e78261b8023167be64fcdd92a91cb3bcc04f6ce60f6d58456eecc72b585875ec24207b181c3dfe709b77cc56f5734544bec1d15f2ccb02f1de4a90dba3403d3c00bb63b3e03688affb9299a21a20b9236170ad"], 0xfc}}, 0x4) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002380)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00002001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac14140c000000000000000000000000fc000000000000000000000000000001e0000001000000000000000000a96af2e28000000000000000000000000000aa32607e811c0000000200020000000000000000000000ffff7f000001fc0200000000000000000000f7000000e0000002000000000000000000000000fc0200000000000000000000000000003c000000000000000a000a"], 0xec}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r10 = getpid() sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 835.346484ms ago: executing program 0 (id=6426): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x36, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffff}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @jmp={0x5, 0x1, 0x2, 0x0, 0x0, 0x8, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @exit, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}}, @map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @map_fd]}, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xf475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) socket$kcm(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xc6fe2, 0x11403f}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x470243, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x5) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x3a, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 0s ago: executing program 4 (id=6427): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a030000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010400000000000000000a0000040900020073797a310000080008000a40fffffffc0900010073797a3100000000080005400000000b14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x830}, 0x810) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x8) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) syz_open_dev$sndctrl(&(0x7f0000000100), 0x80007fffffff, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32=r4, @ANYBLOB="3872a4c910c0ab55c3572edaee4251170dbd0ddf05a42e509d7434ec8ccb0a"], 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000180)={0x3, 'veth0_to_bridge\x00', {0x7}, 0x5}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000001c0)={0x2, [0x0, 0x0]}, &(0x7f0000000340)=0xc) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x3, [@func={0xf, 0x0, 0x0, 0xc, 0x1}, @float={0xb, 0x0, 0x0, 0x10, 0x2}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x35, 0x0, 0x5f, 0x4}, @restrict={0x2, 0x0, 0x0, 0xb, 0x5}, @typedef={0x6, 0x0, 0x0, 0x8, 0x7}]}, {0x0, [0x5f]}}, &(0x7f00000001c0)=""/134, 0x5b, 0x86, 0x1, 0x3ff}, 0x28) kernel console output (not intermixed with test programs): th driver quatech2 failed with error -71 [ 1784.748848][T28625] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.755394][ T5719] usb 10-1: USB disconnect, device number 17 [ 1784.796502][T28625] bridge0: port 2(bridge_slave_1) entered disabled state [ 1785.108023][T28625] bridge_slave_1: entered allmulticast mode [ 1785.329580][T28625] bridge_slave_1: entered promiscuous mode [ 1785.540751][T28625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1785.592513][T28625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1785.626956][T28625] team0: Port device team_slave_0 added [ 1785.636825][T28625] team0: Port device team_slave_1 added [ 1785.700606][T28625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1785.732182][T28625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1786.296845][T11323] Bluetooth: hci1: command tx timeout [ 1786.335286][T28625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1786.415225][T28696] binder: 28692:28696 ioctl c0306201 200000000080 returned -14 [ 1786.419532][T28625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1786.459043][T28625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1786.490819][T28625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1786.536123][T28625] hsr_slave_0: entered promiscuous mode [ 1786.659298][T28625] hsr_slave_1: entered promiscuous mode [ 1786.682926][T28625] debugfs: 'hsr0' already exists in 'hsr' [ 1786.705784][T28625] Cannot create hsr debugfs directory [ 1788.491612][T11323] Bluetooth: hci1: command tx timeout [ 1789.369061][T28625] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1789.466027][T19622] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1789.650665][T19622] usb 10-1: Using ep0 maxpacket: 32 [ 1789.658657][T28625] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1789.680630][T19622] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1789.721612][T19622] usb 10-1: config 0 has no interface number 0 [ 1789.764781][T19622] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1789.820043][T19622] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.861649][T19622] usb 10-1: Product: syz [ 1789.914240][T19622] usb 10-1: Manufacturer: syz [ 1789.952566][T19622] usb 10-1: SerialNumber: syz [ 1790.166363][T19622] usb 10-1: config 0 descriptor?? [ 1790.202949][ T5791] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1790.318304][T19622] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1790.485395][ T5791] usb 6-1: Using ep0 maxpacket: 32 [ 1790.552375][ T5791] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1790.595698][ T5791] usb 6-1: config 0 has no interface number 0 [ 1790.617784][T19622] usb 10-1: qt2_attach - failed to power on unit: -71 [ 1790.626472][T19622] quatech2 10-1:0.51: probe with driver quatech2 failed with error -71 [ 1790.676427][ T5791] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1790.736119][ T5791] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.748006][T11323] Bluetooth: hci1: command tx timeout [ 1790.853894][ T5791] usb 6-1: Product: syz [ 1790.928486][ T5791] usb 6-1: Manufacturer: syz [ 1790.970804][T19622] usb 10-1: USB disconnect, device number 18 [ 1790.978217][ T5791] usb 6-1: SerialNumber: syz [ 1791.002233][ T5791] usb 6-1: config 0 descriptor?? [ 1791.029286][ T5791] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1791.099939][T28625] team0: Port device netdevsim1 removed [ 1791.126059][T28625] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.251677][T28732] netlink: 'syz.8.6134': attribute type 2 has an invalid length. [ 1791.290386][T28732] netlink: 'syz.8.6134': attribute type 2 has an invalid length. [ 1791.300822][T28732] netlink: 'syz.8.6134': attribute type 2 has an invalid length. [ 1791.310609][T28625] netdevsim netdevsim1 ªªªªª» (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1791.325348][T28732] netlink: 'syz.8.6134': attribute type 1 has an invalid length. [ 1791.354768][T28732] netlink: 'syz.8.6134': attribute type 1 has an invalid length. [ 1791.365758][T28732] netlink: 'syz.8.6134': attribute type 1 has an invalid length. [ 1791.379456][T28732] netlink: 'syz.8.6134': attribute type 2 has an invalid length. [ 1791.381783][ T5791] usb 6-1: qt2_attach - failed to power on unit: -71 [ 1791.522998][ T5791] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 1791.623737][ T5791] usb 6-1: USB disconnect, device number 76 [ 1792.251784][T28745] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6139'. [ 1792.275081][T28625] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1792.296229][T28625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1792.306393][T28625] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1792.326194][T28625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1792.334618][T28625] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1792.348598][T28625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1792.357826][T28625] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1792.373055][T28625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1792.561530][T28625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1792.618025][T28625] 8021q: adding VLAN 0 to HW filter on device team0 [ 1792.632721][T12306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1792.639919][T12306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1793.122025][T12306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1793.129234][T12306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1793.263156][T28757] binder: 28755:28757 ioctl c0306201 200000000080 returned -14 [ 1795.228595][T25470] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1795.360933][ T5791] usb 9-1: new low-speed USB device number 26 using dummy_hcd [ 1795.401745][T25470] usb 10-1: Using ep0 maxpacket: 32 [ 1795.413668][T25470] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 1795.435648][T25470] usb 10-1: config 0 has no interface number 0 [ 1795.455210][T25470] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1795.470174][T25470] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.482666][T25470] usb 10-1: Product: syz [ 1795.499385][T25470] usb 10-1: Manufacturer: syz [ 1795.510221][T25470] usb 10-1: SerialNumber: syz [ 1795.514957][ T5791] usb 9-1: device descriptor read/64, error -71 [ 1795.527458][T25470] usb 10-1: config 0 descriptor?? [ 1795.530817][T28625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1795.538833][T25470] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1795.895532][T25470] usb 10-1: qt2_attach - failed to power on unit: -71 [ 1795.910943][T25470] quatech2 10-1:0.51: probe with driver quatech2 failed with error -71 [ 1795.933390][ T5791] usb 9-1: new low-speed USB device number 27 using dummy_hcd [ 1795.955497][T25470] usb 10-1: USB disconnect, device number 19 [ 1796.101406][ T5791] usb 9-1: device descriptor read/64, error -71 [ 1796.111975][T28625] veth0_vlan: entered promiscuous mode [ 1796.133521][T28625] veth1_vlan: entered promiscuous mode [ 1796.286022][T28625] veth0_macvtap: entered promiscuous mode [ 1796.325658][T28625] veth1_macvtap: entered promiscuous mode [ 1796.428083][T28625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1796.501556][T28625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1796.537223][ T5791] usb usb9-port1: attempt power cycle [ 1796.576321][T26785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.598800][T26785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.654129][T26785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.670574][T26785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1796.852268][T26780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1796.871399][T26780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1796.944096][ T5791] usb 9-1: new low-speed USB device number 28 using dummy_hcd [ 1797.135539][ T5791] usb 9-1: device descriptor read/8, error -71 [ 1797.191771][T28800] random: crng reseeded on system resumption [ 1797.336309][T26775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1797.354934][T26775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1797.405649][ T5791] usb 9-1: new low-speed USB device number 29 using dummy_hcd [ 1797.434404][ T5791] usb 9-1: device descriptor read/8, error -71 [ 1797.505081][T26775] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1797.558514][ T5791] usb usb9-port1: unable to enumerate USB device [ 1797.785330][ T30] audit: type=1400 audit(2000001051.284:1821): avc: denied { mount } for pid=28806 comm="syz.3.6154" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1797.827688][T28809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6154'. [ 1797.837288][T28809] netlink: set zone limit has 4 unknown bytes [ 1798.150076][T28808] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1799.015560][ T30] audit: type=1400 audit(2000001052.411:1822): avc: denied { unmount } for pid=25775 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1799.188972][T28822] binder: 28817:28822 ioctl c0306201 200000000080 returned -14 [ 1799.940269][T25470] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1800.037213][ T30] audit: type=1804 audit(2000001053.352:1823): pid=28834 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.6162" name="/newroot/50/file0" dev="tmpfs" ino=274 res=1 errno=0 [ 1800.782757][T28843] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1800.785156][T25470] usb 4-1: Using ep0 maxpacket: 32 [ 1801.262614][T26783] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1801.339055][T25470] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1801.347671][T25470] usb 4-1: config 0 has no interface number 0 [ 1801.357938][T25470] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1801.367380][T25470] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1801.383572][T25470] usb 4-1: Product: syz [ 1801.392844][T25470] usb 4-1: Manufacturer: syz [ 1801.408905][T25470] usb 4-1: SerialNumber: syz [ 1801.540167][T25470] usb 4-1: config 0 descriptor?? [ 1801.696033][T25470] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1802.541153][T28851] batman_adv: batadv0: Adding interface: dummy0 [ 1802.567054][T28851] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1803.399890][T28860] overlayfs: workdir and upperdir must reside under the same mount [ 1803.415719][T28851] batman_adv: batadv0: Interface activated: dummy0 [ 1803.480598][T25470] usb 4-1: qt2_attach - failed to power on unit: -71 [ 1803.497889][T25470] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 1803.540655][T28859] batadv0: mtu less than device minimum [ 1803.552767][T25470] usb 4-1: USB disconnect, device number 120 [ 1803.577715][T28859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1803.591085][T28859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1803.602303][T28859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1803.613557][T28859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1803.624676][T28859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1803.635478][T28859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1803.646260][T28859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1803.657506][T28859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1803.668319][T28859] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1803.770858][T28864] vxcan1 speed is unknown, defaulting to 1000 [ 1803.890206][T28851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1803.995180][T28869] binder: 28867:28869 ioctl c0306201 200000000080 returned -14 [ 1804.032903][T28869] binder: 28867:28869 ioctl c0306201 0 returned -14 [ 1804.987176][T28864] wlan0 speed is unknown, defaulting to 1000 [ 1805.018019][T28880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1805.912875][T28892] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1806.287138][ T30] audit: type=1400 audit(2000001059.122:1824): avc: denied { audit_write } for pid=28899 comm="syz.8.6179" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1806.568389][T28906] binder: 28903:28906 ioctl c0306201 200000000080 returned -14 [ 1806.640294][ T30] audit: type=1400 audit(2000001059.455:1825): avc: denied { listen } for pid=28909 comm="syz.3.6183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1806.813338][T28914] binder: 28911:28914 ioctl c0306201 200000000080 returned -14 [ 1806.829471][T28914] binder: 28911:28914 ioctl c0306201 0 returned -14 [ 1807.229508][T28921] binder: 28917:28921 ioctl c0306201 200000000080 returned -14 [ 1807.511033][T28922] random: crng reseeded on system resumption [ 1807.981953][T19618] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1808.465527][T19618] usb 6-1: Using ep0 maxpacket: 32 [ 1808.923328][T19618] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1808.931947][T19618] usb 6-1: config 0 has no interface number 0 [ 1808.942822][T19618] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1808.951943][T19618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.960650][T19618] usb 6-1: Product: syz [ 1808.965458][T19618] usb 6-1: Manufacturer: syz [ 1808.970118][T19618] usb 6-1: SerialNumber: syz [ 1808.991067][T19618] usb 6-1: config 0 descriptor?? [ 1809.000961][T19618] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1809.069817][T28945] net_ratelimit: 10 callbacks suppressed [ 1809.069833][T28945] sock: sock_set_timeout: `syz.8.6192' (pid 28945) tries to set negative timeout [ 1809.176143][T28949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1809.222895][T19618] usb 6-1: qt2_attach - failed to power on unit: -71 [ 1809.271269][T19618] quatech2 6-1:0.51: probe with driver quatech2 failed with error -71 [ 1809.283314][T19618] usb 6-1: USB disconnect, device number 77 [ 1809.342167][T28954] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1809.418205][T25712] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1809.424119][T28956] fuse-io-uring is disabled [ 1809.431813][ T30] audit: type=1400 audit(2000001062.021:1826): avc: denied { cmd } for pid=28955 comm="syz.9.6196" path="/dev/cuse" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=io_uring permissive=1 [ 1809.603466][T25712] usb 9-1: device descriptor read/64, error -71 [ 1809.938553][T25712] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1809.992585][T28969] binder: 28967:28969 ioctl c0306201 200000000080 returned -14 [ 1810.004297][T25470] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1810.012470][T28969] binder: 28967:28969 ioctl c0306201 0 returned -14 [ 1810.292388][T28971] pim6reg: entered allmulticast mode [ 1810.302175][T28971] pim6reg: left allmulticast mode [ 1810.358013][T25470] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1810.368743][T25470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.371478][T25712] usb 9-1: device descriptor read/64, error -71 [ 1810.397173][T25470] usb 2-1: Product: syz [ 1810.407015][T25470] usb 2-1: Manufacturer: syz [ 1810.424124][T25470] usb 2-1: SerialNumber: syz [ 1810.450516][T25470] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1810.929224][T25712] usb usb9-port1: attempt power cycle [ 1810.943698][T19622] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1811.248825][T25470] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1811.407342][T25712] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1811.422713][T19619] usb 2-1: USB disconnect, device number 82 [ 1811.426999][T25470] usb 6-1: Using ep0 maxpacket: 8 [ 1811.447680][T25470] usb 6-1: config 6 has an invalid interface number: 2 but max is 0 [ 1811.455065][T25712] usb 9-1: device descriptor read/8, error -71 [ 1811.458178][T25470] usb 6-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 1811.472690][T25470] usb 6-1: config 6 has no interface number 0 [ 1811.479259][T25470] usb 6-1: config 6 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1811.862063][T25470] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 1811.874565][T25470] usb 6-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 1811.883480][T25470] usb 6-1: Product: syz [ 1811.888442][T25470] usb 6-1: Manufacturer: syz [ 1811.893079][T25470] usb 6-1: SerialNumber: syz [ 1811.996641][T25712] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1812.018251][T25712] usb 9-1: device descriptor read/8, error -71 [ 1812.123514][T25470] hso 6-1:6.2: Failed to find INT IN ep [ 1812.136801][T25470] usb 6-1: USB disconnect, device number 78 [ 1812.148388][T25712] usb usb9-port1: unable to enumerate USB device [ 1812.154079][T19622] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1812.163763][T19622] ath9k_htc: Failed to initialize the device [ 1812.172686][T19619] usb 2-1: ath9k_htc: USB layer deinitialized [ 1812.932574][T28998] xt_hashlimit: size too large, truncated to 1048576 [ 1813.057974][T25712] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1813.152162][T29004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6209'. [ 1813.163442][T29004] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6209'. [ 1813.220885][T25712] usb 9-1: Using ep0 maxpacket: 32 [ 1813.314867][T25712] usb 9-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30 [ 1813.526569][T29004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1813.534133][T29004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1813.635565][T29004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1813.646874][T29004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1813.701756][T25712] usb 9-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 1813.737509][T25712] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1813.745347][T25712] usb 9-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 1813.760681][T26780] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.765686][T25712] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1813.785521][T26780] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.803062][T25712] usb 9-1: config 0 descriptor?? [ 1813.803787][T26780] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.833145][T26780] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1813.897851][T29019] overlayfs: failed lookup in lower (newroot/207, name='bus', err=-40): overlapping layers [ 1813.922735][T29016] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6210'. [ 1813.932040][T29016] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1813.984409][T25279] overlayfs: failed lookup in lower (newroot/207, name='bus', err=-40): overlapping layers [ 1814.004819][T25279] overlayfs: failed lookup in lower (newroot/207, name='bus', err=-40): overlapping layers [ 1814.282828][T25712] logitech-djreceiver 0003:046D:C532.0037: unknown main item tag 0x1 [ 1814.290981][T25712] logitech-djreceiver 0003:046D:C532.0037: ignoring exceeding usage max [ 1814.754584][T29036] random: crng reseeded on system resumption [ 1815.745667][T15665] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1815.788584][T15665] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1815.798416][T15665] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1815.816962][T15665] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1815.835433][T15665] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1816.752099][T29038] vxcan1 speed is unknown, defaulting to 1000 [ 1816.803325][T29051] x_tables: duplicate underflow at hook 1 [ 1816.872038][ T30] audit: type=1400 audit(2000001068.844:1827): avc: denied { read } for pid=29045 comm="syz.1.6219" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1816.982596][T29052] vlan2: entered allmulticast mode [ 1816.987798][T29052] macsec0: entered allmulticast mode [ 1816.993159][T29052] veth1_macvtap: entered allmulticast mode [ 1817.348932][ T30] audit: type=1400 audit(2000001068.844:1828): avc: denied { open } for pid=29045 comm="syz.1.6219" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1817.373882][ T30] audit: type=1400 audit(2000001068.844:1829): avc: denied { ioctl } for pid=29045 comm="syz.1.6219" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1817.402797][T29038] wlan0 speed is unknown, defaulting to 1000 [ 1817.575210][T29038] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.582413][T29038] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.625514][T29038] bridge_slave_0: entered allmulticast mode [ 1817.635967][T29038] bridge_slave_0: entered promiscuous mode [ 1817.647612][T29038] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.655360][T29038] bridge0: port 2(bridge_slave_1) entered disabled state [ 1817.666182][T29038] bridge_slave_1: entered allmulticast mode [ 1817.670134][T29062] overlayfs: failed lookup in lower (newroot/13, name='bus', err=-40): overlapping layers [ 1817.673557][T29038] bridge_slave_1: entered promiscuous mode [ 1817.707457][T28625] overlayfs: failed lookup in lower (newroot/13, name='bus', err=-40): overlapping layers [ 1817.719291][T29038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1817.724602][T28625] overlayfs: failed lookup in lower (newroot/13, name='bus', err=-40): overlapping layers [ 1817.731679][T29038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1817.802952][T25712] usb 9-1: USB disconnect, device number 34 [ 1817.931104][T29038] team0: Port device team_slave_0 added [ 1817.969033][T29038] team0: Port device team_slave_1 added [ 1818.043048][T29067] tmpfs: Bad value for 'mpol' [ 1818.047806][ T30] audit: type=1400 audit(2000001069.988:1830): avc: denied { mounton } for pid=29065 comm="syz.8.6223" path="/syzcgroup/cpu/syz8/cgroup.procs" dev="cgroup" ino=816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 1818.213685][T11323] Bluetooth: hci2: command tx timeout [ 1818.222584][T29069] overlayfs: failed lookup in lower (newroot/66, name='bus', err=-40): overlapping layers [ 1818.510766][T27600] overlayfs: failed lookup in lower (newroot/66, name='bus', err=-40): overlapping layers [ 1818.580022][T27600] overlayfs: failed lookup in lower (newroot/66, name='bus', err=-40): overlapping layers [ 1818.630009][T29038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1818.676332][T29038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1818.732968][T29038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1818.815656][T29038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1818.822947][T29038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1818.879409][T29038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1819.215375][T15665] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1819.229899][T15665] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1819.233620][T29038] hsr_slave_0: entered promiscuous mode [ 1819.245990][T15665] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1819.255675][T15665] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1819.265497][T29038] hsr_slave_1: entered promiscuous mode [ 1819.265613][T15665] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1819.305814][T29038] debugfs: 'hsr0' already exists in 'hsr' [ 1819.324414][T29038] Cannot create hsr debugfs directory [ 1819.508976][T15665] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1819.553963][T15665] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1819.566312][T15665] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1819.574517][T15665] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1819.582177][T15665] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1819.623151][T25712] usb 9-1: new full-speed USB device number 35 using dummy_hcd [ 1819.820817][T25712] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14129, setting to 64 [ 1819.847960][T25712] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1819.877390][T25712] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.894528][T25712] usb 9-1: config 0 descriptor?? [ 1820.054331][T29073] vxcan1 speed is unknown, defaulting to 1000 [ 1820.120838][T25712] ath6kl: Failed to submit usb control message: -71 [ 1820.132635][T25712] ath6kl: unable to send the bmi data to the device: -71 [ 1820.140855][T25712] ath6kl: Unable to send get target info: -71 [ 1820.148844][T25712] ath6kl: Failed to init ath6kl core: -71 [ 1820.155966][T25712] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1820.168370][T25712] usb 9-1: USB disconnect, device number 35 [ 1820.266212][ T30] audit: type=1400 audit(2000001072.038:1831): avc: denied { write } for pid=29091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1820.458681][ T30] audit: type=1400 audit(2000001072.213:1832): avc: denied { write } for pid=29109 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1820.467808][T15665] Bluetooth: hci2: command tx timeout [ 1820.548230][T29073] wlan0 speed is unknown, defaulting to 1000 [ 1820.567865][T26785] bridge_slave_1: left allmulticast mode [ 1820.574016][T26785] bridge_slave_1: left promiscuous mode [ 1820.581370][T26785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1820.591047][T26785] bridge_slave_0: left allmulticast mode [ 1820.596705][T26785] bridge_slave_0: left promiscuous mode [ 1820.606592][T26785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1820.769427][T26785] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1820.864967][T26785] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1820.883111][T26785] bond0 (unregistering): Released all slaves [ 1820.897174][T29082] vxcan1 speed is unknown, defaulting to 1000 [ 1821.060859][T29116] fuse: Unknown parameter '18446744073709551615>' [ 1821.501344][T29082] wlan0 speed is unknown, defaulting to 1000 [ 1821.513657][T15665] Bluetooth: hci1: command tx timeout [ 1821.554986][ T30] audit: type=1400 audit(2000001073.229:1833): avc: denied { write } for pid=29114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1821.758061][ T30] audit: type=1400 audit(2000001073.404:1834): avc: denied { write } for pid=29127 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1821.853444][T15665] Bluetooth: hci6: command tx timeout [ 1822.206009][ T30] audit: type=1400 audit(2000001073.829:1835): avc: denied { write } for pid=29130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1822.256246][T26785] hsr_slave_0: left promiscuous mode [ 1822.272207][T29148] binder: 29143:29148 ioctl c0306201 200000000080 returned -14 [ 1822.281685][T26785] hsr_slave_1: left promiscuous mode [ 1822.306499][T26785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1822.320820][T26785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1822.398037][ T30] audit: type=1400 audit(2000001073.995:1836): avc: denied { write } for pid=29149 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1822.634764][T15665] Bluetooth: hci0: command 0x0406 tx timeout [ 1822.721709][T11323] Bluetooth: hci2: command tx timeout [ 1822.798344][T26785] team0 (unregistering): Port device team_slave_1 removed [ 1822.837344][T26785] team0 (unregistering): Port device team_slave_0 removed [ 1823.006289][ T30] audit: type=1400 audit(2000001074.558:1837): avc: denied { write } for pid=29151 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1823.147965][ T30] audit: type=1400 audit(2000001074.669:1838): avc: denied { write } for pid=29162 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1823.548993][T29167] overlayfs: failed lookup in lower (newroot/242, name='bus', err=-40): overlapping layers [ 1823.666790][T24512] overlayfs: failed lookup in lower (newroot/242, name='bus', err=-40): overlapping layers [ 1823.683280][T24512] overlayfs: failed lookup in lower (newroot/242, name='bus', err=-40): overlapping layers [ 1823.760672][T11323] Bluetooth: hci1: command tx timeout [ 1823.770717][T29073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1823.777960][T29073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1823.785402][T29073] bridge_slave_0: entered allmulticast mode [ 1823.792891][T29073] bridge_slave_0: entered promiscuous mode [ 1823.831857][T29073] bridge0: port 2(bridge_slave_1) entered blocking state [ 1823.846931][T29073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1823.859133][T29073] bridge_slave_1: entered allmulticast mode [ 1823.878411][T29073] bridge_slave_1: entered promiscuous mode [ 1823.920716][T26785] IPVS: stop unused estimator thread 0... [ 1823.986670][T26776] smbdirect: ib_dev[syz1] removed [ 1824.018985][T29038] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1824.037703][T29038] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1824.079070][T29073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1824.107733][T11323] Bluetooth: hci6: command tx timeout [ 1824.114931][T29073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1824.136733][ T24] infiniband syz1: ib_query_port failed (-19) [ 1824.144902][T29038] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1824.148884][ T30] audit: type=1400 audit(2000001075.611:1839): avc: denied { write } for pid=29174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1824.179714][T29038] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1824.216608][T29038] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1824.229757][T29038] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1824.237768][T29038] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1824.250412][T29038] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1824.254004][ T30] audit: type=1400 audit(2000001075.712:1840): avc: denied { write } for pid=29186 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1824.302212][T29073] team0: Port device team_slave_0 added [ 1824.328129][T29073] team0: Port device team_slave_1 added [ 1824.378665][ T5272] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1824.425546][T29073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1824.432695][T29073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1824.460873][T29073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1824.505432][T29073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1824.515631][T29073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1824.556141][T25281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1824.565912][T29073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1824.569275][T25281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1824.588881][T25281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1824.609466][T25281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1824.630610][T25281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1824.648398][T29082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1824.681986][T29082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1824.689315][T29082] bridge_slave_0: entered allmulticast mode [ 1824.698470][T29082] bridge_slave_0: entered promiscuous mode [ 1824.745617][T29082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1824.761055][T29082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1824.772971][T29082] bridge_slave_1: entered allmulticast mode [ 1824.780832][T29082] bridge_slave_1: entered promiscuous mode [ 1824.858105][T29073] hsr_slave_0: entered promiscuous mode [ 1824.866255][T29073] hsr_slave_1: entered promiscuous mode [ 1824.872441][T29073] debugfs: 'hsr0' already exists in 'hsr' [ 1824.887662][T29073] Cannot create hsr debugfs directory [ 1824.902982][T29082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1824.927967][T29082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1824.974351][T11323] Bluetooth: hci2: command tx timeout [ 1825.023898][T29082] team0: Port device team_slave_0 added [ 1825.045503][T29082] team0: Port device team_slave_1 added [ 1825.055027][ T30] audit: type=1400 audit(2000001076.442:1841): avc: denied { write } for pid=29202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1825.108910][T29082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1825.116787][T29082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1825.144612][T29082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1825.166160][T29082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1825.174174][T29082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1825.191729][ T30] audit: type=1400 audit(2000001076.571:1842): avc: denied { write } for pid=29220 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1825.208369][T29082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1825.290376][ T5272] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1825.296934][T29198] vxcan1 speed is unknown, defaulting to 1000 [ 1825.370316][T29038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1825.392338][T29082] hsr_slave_0: entered promiscuous mode [ 1825.408479][T29082] hsr_slave_1: entered promiscuous mode [ 1825.435176][T29082] debugfs: 'hsr0' already exists in 'hsr' [ 1825.447972][T29082] Cannot create hsr debugfs directory [ 1825.594819][T29038] 8021q: adding VLAN 0 to HW filter on device team0 [ 1825.628382][T29198] wlan0 speed is unknown, defaulting to 1000 [ 1825.641867][T26788] bridge0: port 1(bridge_slave_0) entered blocking state [ 1825.649010][T26788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1825.706704][ T30] audit: type=1400 audit(2000001077.051:1843): avc: denied { write } for pid=29222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1825.805594][T26776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1825.812792][T26776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1825.813527][ T30] audit: type=1400 audit(2000001077.162:1844): avc: denied { write } for pid=29233 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1826.013188][T11323] Bluetooth: hci1: command tx timeout [ 1826.339326][ T30] audit: type=1400 audit(2000001077.642:1845): avc: denied { write } for pid=29236 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1826.359752][T11323] Bluetooth: hci6: command tx timeout [ 1826.567530][T29198] bridge0: port 1(bridge_slave_0) entered blocking state [ 1826.588988][T29198] bridge0: port 1(bridge_slave_0) entered disabled state [ 1826.596658][T29198] bridge_slave_0: entered allmulticast mode [ 1826.613430][T29198] bridge_slave_0: entered promiscuous mode [ 1826.661322][T29198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1826.685084][T29198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1826.694891][T29198] bridge_slave_1: entered allmulticast mode [ 1826.718508][T29198] bridge_slave_1: entered promiscuous mode [ 1826.763774][T29038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1826.791632][T29073] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1826.819898][T29073] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1826.828184][T29073] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1826.838063][T29073] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1826.866783][T29198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1826.879773][T11323] Bluetooth: hci4: command tx timeout [ 1826.894854][T29198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1826.921208][T29073] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1826.948341][T29073] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1826.958274][T29073] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1826.968835][T29073] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1827.091101][T29082] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.114201][T29198] team0: Port device team_slave_0 added [ 1827.122823][T29198] team0: Port device team_slave_1 added [ 1827.198254][T29198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1827.208741][T29198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1827.235376][T29198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1827.257672][T29198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1827.265081][T29198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1827.293898][T29198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1827.338186][T29082] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.492682][T29082] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.528959][T29198] hsr_slave_0: entered promiscuous mode [ 1827.537760][T29198] hsr_slave_1: entered promiscuous mode [ 1827.544731][T29198] debugfs: 'hsr0' already exists in 'hsr' [ 1827.550485][T29198] Cannot create hsr debugfs directory [ 1827.683710][T29082] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1827.752374][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1827.777121][T29038] veth0_vlan: entered promiscuous mode [ 1827.815101][T25281] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1827.841008][T25281] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1827.851966][T25281] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1827.868178][T25281] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1827.879044][T25281] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1828.020670][T29038] veth1_vlan: entered promiscuous mode [ 1828.190902][T29073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1828.260513][T29038] veth0_macvtap: entered promiscuous mode [ 1828.266418][T11323] Bluetooth: hci1: command tx timeout [ 1828.286451][T29073] 8021q: adding VLAN 0 to HW filter on device team0 [ 1828.300966][T29038] veth1_macvtap: entered promiscuous mode [ 1828.315492][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1828.315507][ T30] audit: type=1400 audit(2000001079.470:1851): avc: denied { write } for pid=29310 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1828.438774][T12306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1828.445908][T12306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1828.470604][ T30] audit: type=1400 audit(2000001079.608:1852): avc: denied { write } for pid=29326 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1828.518332][T26788] bridge0: port 2(bridge_slave_1) entered blocking state [ 1828.525464][T26788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1828.561140][T29038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1828.588640][T29082] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1828.607333][T29082] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1828.617230][T11323] Bluetooth: hci6: command tx timeout [ 1828.627204][T29082] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1828.636791][T29082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1828.647458][T29038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1828.657165][ T5272] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1828.664041][T29082] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1828.673578][T29082] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1828.768860][T29082] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1828.778232][T29082] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1828.790149][T26788] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.791536][T29306] vxcan1 speed is unknown, defaulting to 1000 [ 1828.799089][T26788] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.844616][T26788] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1828.853655][T26788] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1829.035693][T29306] wlan0 speed is unknown, defaulting to 1000 [ 1829.140145][T11323] Bluetooth: hci4: command tx timeout [ 1829.355942][ T30] audit: type=1400 audit(2000001080.421:1853): avc: denied { write } for pid=29330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1829.518743][ T30] audit: type=1400 audit(2000001080.568:1854): avc: denied { write } for pid=29352 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1829.690172][T26776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1829.725950][T26776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1829.910698][T29073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1829.952739][T29082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1829.990720][T26785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1830.016383][T26785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1830.089018][T11323] Bluetooth: hci7: command tx timeout [ 1830.103405][ T30] audit: type=1400 audit(2000001081.113:1855): avc: denied { write } for pid=29355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1830.235207][ T30] audit: type=1400 audit(2000001081.233:1856): avc: denied { write } for pid=29377 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1830.434601][T29306] bridge0: port 1(bridge_slave_0) entered blocking state [ 1830.441866][T29306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1830.450701][T29306] bridge_slave_0: entered allmulticast mode [ 1830.459341][T29306] bridge_slave_0: entered promiscuous mode [ 1830.484371][T29082] 8021q: adding VLAN 0 to HW filter on device team0 [ 1830.522215][T29073] veth0_vlan: entered promiscuous mode [ 1830.551267][T29306] bridge0: port 2(bridge_slave_1) entered blocking state [ 1830.785920][T29306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1830.838247][T29306] bridge_slave_1: entered allmulticast mode [ 1830.907882][T29306] bridge_slave_1: entered promiscuous mode [ 1830.940565][T26788] bridge0: port 1(bridge_slave_0) entered blocking state [ 1830.947748][T26788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1830.996280][T26788] bridge0: port 2(bridge_slave_1) entered blocking state [ 1831.003435][T26788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1831.028842][T29073] veth1_vlan: entered promiscuous mode [ 1831.040730][T29198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1831.063135][T29198] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1831.071094][T29198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1831.080551][T29198] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1831.094986][T29306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1831.107249][T29306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1831.117096][T29198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1831.127994][T29198] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1831.182625][T29198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1831.195824][T29198] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1831.198368][ T30] audit: type=1400 audit(2000001082.128:1857): avc: denied { write } for pid=29384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1831.255389][T29306] team0: Port device team_slave_0 added [ 1831.267371][T29306] team0: Port device team_slave_1 added [ 1831.387086][T11323] Bluetooth: hci4: command tx timeout [ 1831.413818][T29306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1831.432971][ T30] audit: type=1400 audit(2000001082.341:1858): avc: denied { write } for pid=29401 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1831.442096][T29408] binder: 29400:29408 ioctl c0306201 200000000080 returned -14 [ 1831.482080][T29306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1831.512543][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1831.519125][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1831.542017][T29306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1831.570760][T29306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1831.578209][T29306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1831.606274][T29306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1831.744819][T29073] veth0_macvtap: entered promiscuous mode [ 1831.813220][T29306] hsr_slave_0: entered promiscuous mode [ 1831.834007][T29306] hsr_slave_1: entered promiscuous mode [ 1831.847557][T29306] debugfs: 'hsr0' already exists in 'hsr' [ 1831.855033][T29306] Cannot create hsr debugfs directory [ 1831.875496][T29073] veth1_macvtap: entered promiscuous mode [ 1832.059163][T29073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1832.167448][T12306] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1832.190227][T29073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1832.331242][T12306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.351420][T11323] Bluetooth: hci7: command tx timeout [ 1832.374035][T12306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.391831][ T30] audit: type=1400 audit(2000001083.227:1859): avc: denied { write } for pid=29412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1832.406408][T12306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.461717][T29198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1832.481121][T26788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1832.669078][ T30] audit: type=1400 audit(2000001083.486:1860): avc: denied { write } for pid=29429 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1832.753606][T29198] 8021q: adding VLAN 0 to HW filter on device team0 [ 1832.824294][T26788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1832.846103][T26788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1832.855614][T26779] bridge0: port 1(bridge_slave_0) entered blocking state [ 1832.862701][T26779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1833.101089][T29306] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1833.115699][T29306] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.168818][T26779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1833.202188][T26779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1833.220457][T26781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1833.227624][T26781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1833.473397][T26788] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.536177][T29082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1833.649280][T11323] Bluetooth: hci4: command tx timeout [ 1833.740999][T26788] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.858446][T29306] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1833.912634][T29306] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.315218][T26788] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.593034][T11323] Bluetooth: hci7: command tx timeout [ 1834.633375][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1834.633391][ T30] audit: type=1400 audit(2000001085.295:1863): avc: denied { write } for pid=29457 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1834.681464][T29306] bond0: (slave netdevsim1): Releasing backup interface [ 1834.747355][T29306] netdevsim netdevsim6 netdevsim1 (unregistering): left allmulticast mode [ 1834.769377][T29306] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1834.829419][ T30] audit: type=1400 audit(2000001085.480:1864): avc: denied { write } for pid=29478 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1834.843595][T29306] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.211921][T26788] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.329198][ T24] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1835.534289][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 1835.565035][ T24] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice= 0.40 [ 1835.618013][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.675811][ T24] usb 5-1: Product: â¡ [ 1835.711145][ T24] usb 5-1: Manufacturer: 畯殊í…鴡艓⦒뤹î¡æ¶†ã°°é¯†à¹ˆî™¿â»œëš‰ê‘„ݾá‰æ’œêœ“飤錽Ꚛí¢â†½ê€ä¹ªà¯›ë¼­á„•è–ãƒé‘Ÿãžçž©ì“홰敿颫෦₞抲牒áˆé¬…䀵㓜昈テì¬æ’¢â…¥î¥¹ì¢®ë¾§ä«•è©â‚•ï‚㞣䡒èžç¨²æ–™ì¿­á†Žã¯³ä›¶á¸˜à¬œá©¿è‡²èŸ™è¶½é®¸ê»œï¥©î¾¸å—¾å€«î¤–ä˜âµ‰ã’®ê„®à­Šå…Šß§á¶§ï¤›Ä®å¹•â‹½ê´¦é½†èŒ›ë¦„î†ç¯šè’±ã±¤é¹¥ç€£ì¬›ç±³ä­±ä’¿å§ç®¯ã«ã¢ç½ƒâ¢˜ä¼¤áŸ•à¥­ìíŒ©è ºá˜†ê¼ [ 1835.786511][ T24] usb 5-1: SerialNumber: 㩱똅酀瀄⑰쥼ë¼ê·Žá˜ªï·ƒáºŒê»‡â¤©ì¢ƒë›è”³ç¹Šï§ç¶®ç“å—崶ὠ臭꯯ì¥â‰ä½Œéˆ˜â‹ì½Ÿç¼µç¨á«ƒê¶ãŽ‘ç¿‹åºç¶¢ä¬—䲧탽淟솨ꎤ缸î¡áš°å´¤í…žåœ‹ï‘„呥팸룣풼Ⓞ⋃呇ｃ⸭精뻮ﭺ颛皑ꤰ齬踔Ũë²á”ï´— [ 1835.941443][T26780] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1836.179519][T29491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1836.227672][T29491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1836.301151][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1836.368684][ T30] audit: type=1400 audit(2000001086.892:1865): avc: denied { write } for pid=29497 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1836.446445][T29082] veth0_vlan: entered promiscuous mode [ 1836.470494][ T24] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1836.502275][ T24] usb 5-1: USB disconnect, device number 98 [ 1836.580921][T28562] udevd[28562]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1836.654761][T29530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1836.689324][ T30] audit: type=1400 audit(2000001087.197:1866): avc: denied { write } for pid=29529 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1836.844161][T29082] veth1_vlan: entered promiscuous mode [ 1836.850819][T11323] Bluetooth: hci7: command tx timeout [ 1837.529173][T26788] bridge_slave_1: left allmulticast mode [ 1837.550581][T26788] bridge_slave_1: left promiscuous mode [ 1837.580431][T26788] bridge0: port 2(bridge_slave_1) entered disabled state [ 1837.631324][T26788] bridge_slave_0: left allmulticast mode [ 1837.648528][T26788] bridge_slave_0: left promiscuous mode [ 1837.675979][T26788] bridge0: port 1(bridge_slave_0) entered disabled state [ 1837.735999][T26788] pim6reg: left allmulticast mode [ 1838.099806][T29555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1838.178941][T29556] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6251'. [ 1838.593383][ T30] audit: type=1400 audit(2000001088.960:1867): avc: denied { write } for pid=29536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1838.691623][ T30] audit: type=1400 audit(2000001089.043:1868): avc: denied { write } for pid=29560 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1838.911763][T26788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1838.934231][T26788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1838.948329][T26788] bond0 (unregistering): Released all slaves [ 1838.997168][T29198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1839.029207][T29082] veth0_macvtap: entered promiscuous mode [ 1839.120148][ T30] audit: type=1400 audit(2000001089.431:1869): avc: denied { write } for pid=29562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1839.497337][T29082] veth1_macvtap: entered promiscuous mode [ 1839.767055][ T30] audit: type=1400 audit(2000001090.031:1870): avc: denied { write } for pid=29580 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1840.033751][T29306] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1840.150738][T29306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1840.174269][T29306] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1840.201121][T29306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1840.254690][T29082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1840.302376][T29585] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1840.429703][T29306] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1840.755854][T29306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1840.789378][T29198] veth0_vlan: entered promiscuous mode [ 1840.856291][T29306] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1840.898178][T29306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1840.914561][T29082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1840.961204][ T30] audit: type=1804 audit(2000001091.139:1871): pid=29593 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.6253" name="/newroot/11/file0" dev="tmpfs" ino=75 res=1 errno=0 [ 1840.965884][T29593] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1841.035390][T29198] veth1_vlan: entered promiscuous mode [ 1841.068080][T26790] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1841.088223][T26790] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1841.135120][T26790] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1841.161191][T26790] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1841.204257][T29592] uprobe: syz.4.6253:29592 failed to unregister, leaking uprobe [ 1841.462838][T29605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1841.526635][T29198] veth0_macvtap: entered promiscuous mode [ 1841.549906][T29610] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1842.172451][T26788] hsr_slave_0: left promiscuous mode [ 1842.181277][ T30] audit: type=1400 audit(2000001092.265:1872): avc: denied { write } for pid=29591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1842.211661][T26788] hsr_slave_1: left promiscuous mode [ 1842.220836][T26788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1842.229573][T26788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1842.242355][T26788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1842.261965][T26788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1842.286736][T26788] veth1_macvtap: left promiscuous mode [ 1842.292222][T26788] veth0_macvtap: left promiscuous mode [ 1842.301567][T26788] veth1_vlan: left promiscuous mode [ 1842.316560][T26788] veth0_vlan: left promiscuous mode [ 1842.342795][ T30] audit: type=1400 audit(2000001092.413:1873): avc: denied { write } for pid=29618 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1842.645996][T26788] team0 (unregistering): Port device team_slave_1 removed [ 1842.663249][T26788] team0 (unregistering): Port device team_slave_0 removed [ 1842.705542][ T30] audit: type=1400 audit(2000001092.736:1874): avc: denied { write } for pid=29620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1842.828616][ T30] audit: type=1400 audit(2000001092.865:1875): avc: denied { write } for pid=29631 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1842.905397][T29198] veth1_macvtap: entered promiscuous mode [ 1842.959963][T26776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1842.991505][T26776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1843.118498][T12306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1843.126528][T12306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1843.228100][T29198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1843.262229][T29198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1843.336619][T26780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.375992][T26780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.413298][T26780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.494360][T29306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1843.514191][T26780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1843.559199][T29647] Device name cannot be null; rc = [-22] [ 1844.157941][T26788] IPVS: stop unused estimator thread 0... [ 1844.159091][T29650] bridge0: port 2(bridge_slave_1) entered disabled state [ 1844.319280][ T30] audit: type=1400 audit(2000001094.241:1876): avc: denied { write } for pid=29635 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1844.346711][T29306] 8021q: adding VLAN 0 to HW filter on device team0 [ 1844.399723][T26780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1844.406816][T26780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1844.497059][T26785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1844.518332][T26790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1844.525487][T26790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1844.543305][T26785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1844.583876][ T30] audit: type=1400 audit(2000001094.481:1877): avc: denied { write } for pid=29658 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1844.759269][T29667] binder: 29659:29667 ioctl c0306201 200000000080 returned -14 [ 1844.798113][T26790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1845.376786][T26790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1847.071180][ T24] IPVS: starting estimator thread 0... [ 1847.186389][ T30] audit: type=1400 audit(2000001096.872:1878): avc: denied { write } for pid=29671 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1847.272616][T29721] IPVS: using max 59 ests per chain, 141600 per kthread [ 1847.395715][ T24] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1847.442764][ T30] audit: type=1400 audit(2000001097.121:1879): avc: denied { write } for pid=29727 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1847.592021][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 1847.607686][ T24] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1847.636109][ T24] usb 3-1: config 0 has no interface number 0 [ 1847.671645][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1847.699665][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.739022][ T24] usb 3-1: Product: syz [ 1847.758034][ T24] usb 3-1: Manufacturer: syz [ 1847.773392][ T24] usb 3-1: SerialNumber: syz [ 1847.808616][ T24] usb 3-1: config 0 descriptor?? [ 1847.821596][ T24] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1847.887484][T29306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1848.046721][ T24] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1848.078240][ T24] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 1848.109339][ T24] usb 3-1: USB disconnect, device number 40 [ 1848.280003][ T30] audit: type=1400 audit(2000001097.897:1880): avc: denied { write } for pid=29735 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1848.411643][T29757] NILFS (nullb0): couldn't find nilfs on the device [ 1848.463393][ T30] audit: type=1400 audit(2000001098.063:1881): avc: denied { write } for pid=29759 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1848.477587][T29306] veth0_vlan: entered promiscuous mode [ 1848.543317][T29306] veth1_vlan: entered promiscuous mode [ 1848.635461][T29306] veth0_macvtap: entered promiscuous mode [ 1849.091393][T29306] veth1_macvtap: entered promiscuous mode [ 1849.117130][T19617] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1849.265722][ T30] audit: type=1400 audit(2000001098.801:1882): avc: denied { write } for pid=29761 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1849.292178][T29306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1849.382314][T29306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1849.414991][T19617] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1849.446586][T19617] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1849.447903][T17698] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.531866][T19617] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1849.534081][T17698] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.591881][T19617] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1849.606656][T17698] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.647814][ T30] audit: type=1400 audit(2000001099.152:1883): avc: denied { write } for pid=29784 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1849.676948][T17698] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1849.712414][T19617] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1849.840549][T29791] netlink: 408 bytes leftover after parsing attributes in process `syz.4.6276'. [ 1849.916929][T19617] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1849.939882][T19617] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1849.953673][T19617] usb 3-1: Product: syz [ 1849.959013][T19617] usb 3-1: Manufacturer: syz [ 1850.033185][T29795] binder: 29792:29795 ioctl c0306201 200000000080 returned -14 [ 1850.074156][T19617] cdc_wdm 3-1:1.0: skipping garbage [ 1850.133483][T19617] cdc_wdm 3-1:1.0: skipping garbage [ 1850.172947][T17698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1850.181700][T29791] vxcan1 speed is unknown, defaulting to 1000 [ 1850.206682][T19617] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1850.206955][T17698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1850.238395][T19617] cdc_wdm 3-1:1.0: Unknown control protocol [ 1850.291412][T29799] xt_connbytes: Forcing CT accounting to be enabled [ 1850.298429][T29799] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1850.414745][T26790] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1850.452701][T26790] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1850.547424][T11323] Bluetooth: hci2: command 0x0406 tx timeout [ 1850.902921][ T30] audit: type=1400 audit(2000001100.316:1884): avc: denied { write } for pid=29807 comm="syz.6.6239" name="/" dev="configfs" ino=1088 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1850.961512][T29791] wlan0 speed is unknown, defaulting to 1000 [ 1851.082063][ T30] audit: type=1400 audit(2000001100.482:1885): avc: denied { write } for pid=29797 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1851.217912][ T30] audit: type=1400 audit(2000001100.602:1886): avc: denied { write } for pid=29817 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1851.708693][T29833] xt_hashlimit: size too large, truncated to 1048576 [ 1851.759538][T29837] xt_hashlimit: size too large, truncated to 1048576 [ 1851.970653][ T24] IPVS: starting estimator thread 0... [ 1852.088537][ C1] wdm_int_callback: 134 callbacks suppressed [ 1852.088561][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1852.101167][ C1] wdm_int_callback: 134 callbacks suppressed [ 1852.101188][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1852.114476][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1852.121086][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1852.127645][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1852.134249][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1852.142238][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1852.148841][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1852.156122][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1852.162729][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1852.169196][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1852.175794][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1852.182634][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1852.189228][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1852.195671][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1852.202267][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1852.209007][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1852.215602][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1852.222688][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1852.229279][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1852.236850][ T24] usb 3-1: USB disconnect, device number 41 [ 1852.243111][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1852.290788][T29840] IPVS: using max 49 ests per chain, 117600 per kthread [ 1852.334887][T29010] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1852.343576][ T30] audit: type=1400 audit(2000001101.645:1887): avc: denied { write } for pid=29820 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1853.071585][T29010] usb 5-1: Using ep0 maxpacket: 32 [ 1853.130088][T25281] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1853.151227][T29010] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1853.168283][T29010] usb 5-1: config 0 has no interface number 0 [ 1853.201111][T29010] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1853.258609][T29855] random: crng reseeded on system resumption [ 1853.266441][T29010] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1853.343642][T29010] usb 5-1: Product: syz [ 1853.477799][T29010] usb 5-1: Manufacturer: syz [ 1853.508661][T29010] usb 5-1: SerialNumber: syz [ 1853.537516][T29010] usb 5-1: config 0 descriptor?? [ 1853.564173][T29010] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1853.640188][ T30] audit: type=1400 audit(2000001102.845:1888): avc: denied { write } for pid=29858 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1853.886557][T29010] usb 5-1: qt2_attach - failed to power on unit: -71 [ 1854.048608][T29010] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 1854.183371][T29010] usb 5-1: USB disconnect, device number 99 [ 1854.227164][T29865] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1855.908069][T29890] binder: 29881:29890 ioctl c0306201 200000000080 returned -14 [ 1856.493364][T25281] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 1856.531999][T29897] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1856.631387][ T30] audit: type=1400 audit(2000001105.605:1889): avc: denied { write } for pid=29866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1856.738462][ T30] audit: type=1400 audit(2000001105.707:1890): avc: denied { write } for pid=29906 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1857.915324][ T30] audit: type=1400 audit(2000001106.796:1891): avc: denied { write } for pid=29914 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1858.328956][T29938] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1858.361683][ T30] audit: type=1400 audit(2000001107.203:1892): avc: denied { write } for pid=29934 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1858.524897][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1858.613129][T29010] IPVS: starting estimator thread 0... [ 1858.725882][T29946] IPVS: using max 51 ests per chain, 122400 per kthread [ 1858.882909][T29953] binder: 29949:29953 ioctl c0306201 200000000080 returned -14 [ 1858.943510][ T30] audit: type=1400 audit(2000001107.683:1893): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=47644 daddr=10.128.0.117 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1859.214850][ T30] audit: type=1400 audit(2000001107.987:1894): avc: denied { create } for pid=29948 comm="syz.0.6306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1859.230520][T29955] binder: 29948:29955 ioctl c0306201 200000000080 returned -14 [ 1859.406668][T29964] binder: 29959:29964 ioctl c0306201 200000000080 returned -14 [ 1859.673718][ T30] audit: type=1400 audit(2000001107.987:1895): avc: denied { write } for pid=29948 comm="syz.0.6306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1859.807018][ T30] audit: type=1400 audit(2000001108.135:1896): avc: denied { read } for pid=29956 comm="syz.4.6308" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1859.985977][ T30] audit: type=1400 audit(2000001108.135:1897): avc: denied { open } for pid=29956 comm="syz.4.6308" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1860.089575][ T30] audit: type=1400 audit(2000001108.403:1898): avc: denied { read } for pid=29958 comm="syz.6.6298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1860.129856][T29977] vxcan1 speed is unknown, defaulting to 1000 [ 1860.282098][ T30] audit: type=1400 audit(2000001108.403:1899): avc: denied { ioctl } for pid=29958 comm="syz.6.6298" path="socket:[124876]" dev="sockfs" ino=124876 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1860.522726][ T30] audit: type=1400 audit(2000001109.178:1900): avc: denied { write } for pid=29947 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1860.710072][T29977] wlan0 speed is unknown, defaulting to 1000 [ 1860.737863][ T30] audit: type=1400 audit(2000001109.391:1901): avc: denied { write } for pid=29994 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1860.838217][T30001] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1860.959888][T30003] binder: 29996:30003 ioctl c0306201 200000000080 returned -14 [ 1861.340507][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1861.356303][ T30] audit: type=1400 audit(2000001109.963:1902): avc: denied { ioctl } for pid=30007 comm="syz.0.6320" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x640d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1861.725342][T30012] binder: 30010:30012 ioctl c0306201 200000000080 returned -14 [ 1865.418168][ T30] audit: type=1400 audit(2000001113.711:1903): avc: denied { write } for pid=30024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1865.739112][T30060] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1865.760322][ T30] audit: type=1400 audit(2000001114.034:1904): avc: denied { write } for pid=30059 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1866.211627][ T5272] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1866.875856][T26779] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1867.369200][T30076] binder: 30073:30076 ioctl c0306201 200000000080 returned -14 [ 1867.797565][T30082] tipc: Started in network mode [ 1867.824194][T30082] tipc: Node identity 965b8f753944, cluster identity 4711 [ 1867.855817][T30082] tipc: Enabled bearer , priority 0 [ 1867.906946][T30089] binder: 30085:30089 ioctl c0306201 200000000080 returned -14 [ 1867.951951][T30088] syzkaller0: MTU too low for tipc bearer [ 1867.985122][T30088] tipc: Disabling bearer [ 1868.284454][ T30] audit: type=1400 audit(2000001116.361:1905): avc: denied { read } for pid=30095 comm="syz.6.6337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1868.314461][T30099] binder: BINDER_SET_CONTEXT_MGR already set [ 1868.343379][T30099] binder: 30096:30099 ioctl 4018620d 200000004a80 returned -16 [ 1868.409865][T30102] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1868.850848][ T30] audit: type=1400 audit(2000001116.887:1906): avc: denied { write } for pid=30071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1869.328055][T30108] trusted_key: encrypted_key: keylen parameter is missing [ 1869.544348][T26785] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1869.669462][ T30] audit: type=1400 audit(2000001117.635:1907): avc: denied { write } for pid=30117 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1869.843583][T30121] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 1870.497684][T30126] binder: 30125:30126 ioctl c0306201 200000000080 returned -14 [ 1870.519134][T30132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6346'. [ 1870.550420][ T5272] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1872.996117][T30161] binder: 30157:30161 ioctl c0306201 200000000080 returned -14 [ 1873.110391][T30165] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1873.305494][T29011] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1873.683532][T30174] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6356'. [ 1873.727104][T29011] usb 5-1: Using ep0 maxpacket: 16 [ 1873.734074][T29011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1873.794279][T29011] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1873.831716][T29011] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1873.902533][T29011] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1873.938202][T29011] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1874.017280][T29011] usb 5-1: config 0 descriptor?? [ 1874.226346][T30184] binder: 30182:30184 ioctl c0306201 200000000080 returned -14 [ 1874.662185][T29011] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 1874.684348][T29011] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 1874.718216][ T30] audit: type=1400 audit(2000001122.306:1908): avc: denied { write } for pid=30175 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1874.718350][T29011] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 1874.757900][T29011] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 1874.765256][T29011] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 1874.855459][T29011] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 1874.928542][T30199] openvswitch: netlink: Actions may not be safe on all matching packets [ 1874.969278][T30196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6360'. [ 1874.985825][T30201] overlayfs: failed lookup in lower (newroot/34, name='bus', err=-40): overlapping layers [ 1874.987905][T29011] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 1875.018559][T30196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6360'. [ 1875.020433][T25281] Bluetooth: hci4: unexpected subevent 0x01 length: 12 < 18 [ 1875.057562][T29011] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 1875.067140][T29073] overlayfs: failed lookup in lower (newroot/34, name='bus', err=-40): overlapping layers [ 1875.095228][T29011] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 1875.110718][T29073] overlayfs: failed lookup in lower (newroot/34, name='bus', err=-40): overlapping layers [ 1875.133419][ T30] audit: type=1400 audit(2000001122.685:1909): avc: denied { write } for pid=30204 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1875.141484][T29011] microsoft 0003:045E:07DA.0038: unknown main item tag 0x0 [ 1875.575326][T29011] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0038/input/input91 [ 1875.895200][T29011] microsoft 0003:045E:07DA.0038: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1876.298444][T19617] usb 5-1: USB disconnect, device number 100 [ 1876.939866][T26775] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.320972][T30225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1877.789830][T11323] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1877.817464][T11323] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1877.827780][T11323] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1877.839767][T11323] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1877.850038][T11323] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1879.185089][T29011] IPVS: starting estimator thread 0... [ 1879.338596][T30246] IPVS: using max 84 ests per chain, 201600 per kthread [ 1879.997786][T30258] overlayfs: failed lookup in lower (newroot/23, name='bus', err=-40): overlapping layers [ 1880.037889][T29082] overlayfs: failed lookup in lower (newroot/23, name='bus', err=-40): overlapping layers [ 1880.050028][T29082] overlayfs: failed lookup in lower (newroot/23, name='bus', err=-40): overlapping layers [ 1880.225978][T26775] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.349374][T30257] macvlan2: entered promiscuous mode [ 1880.371433][T30257] macvlan2: entered allmulticast mode [ 1880.389536][T30257] batadv0: entered promiscuous mode [ 1880.405848][T30257] batadv0: entered allmulticast mode [ 1880.430916][T30257] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1880.438974][T25281] Bluetooth: hci1: command tx timeout [ 1880.454083][T30257] team0: Port device macvlan2 added [ 1880.691557][T26775] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1880.789503][T29011] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1880.893488][T30278] binder: 30275:30278 ioctl c0306201 200000000080 returned -14 [ 1881.191259][T29011] usb 5-1: Using ep0 maxpacket: 8 [ 1881.237559][T30232] vxcan1 speed is unknown, defaulting to 1000 [ 1881.281653][T29011] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 1881.372547][T29011] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 1881.375189][T26775] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1881.441374][T29011] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1881.469906][T29011] usb 5-1: config 250 has no interface number 0 [ 1881.472026][ T30] audit: type=1400 audit(2000001128.538:1910): avc: denied { write } for pid=30261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1881.514128][T29011] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1881.586125][T29011] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1881.627785][T29011] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1881.671613][T29011] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1881.706899][T30232] wlan0 speed is unknown, defaulting to 1000 [ 1881.711850][T29011] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1881.755202][T29011] usb 5-1: config 250 interface 228 has no altsetting 0 [ 1881.763634][ T30] audit: type=1400 audit(2000001128.805:1911): avc: denied { write } for pid=30286 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1881.789233][T29011] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1881.828662][T29011] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1881.852399][T29011] usb 5-1: Product: syz [ 1881.868250][T30291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1881.887521][T29011] usb 5-1: SerialNumber: syz [ 1881.903492][T30292] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1881.917243][T29011] hub 5-1:250.228: bad descriptor, ignoring hub [ 1881.939286][T29011] hub 5-1:250.228: probe with driver hub failed with error -5 [ 1882.539590][T29011] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 101 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1882.622337][T11323] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1882.650828][T11323] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1882.662335][T11323] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1882.673479][T11323] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1882.681020][T11323] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1882.695905][T11323] Bluetooth: hci1: command tx timeout [ 1882.792543][T26775] bridge_slave_1: left allmulticast mode [ 1882.810216][T26775] bridge_slave_1: left promiscuous mode [ 1882.826814][T26775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1882.844751][T26775] bridge_slave_0: left allmulticast mode [ 1882.851366][T26775] bridge_slave_0: left promiscuous mode [ 1882.858162][T26775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1882.917685][T25469] usb 5-1: USB disconnect, device number 101 [ 1882.940619][T25469] usblp0: removed [ 1883.024631][T26775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1883.036100][T26775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1883.050031][T26775] bond0 (unregistering): Released all slaves [ 1884.174166][ T30] audit: type=1400 audit(2000001131.021:1912): avc: denied { write } for pid=30312 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1884.179886][ T5719] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1884.402223][ T5719] usb 5-1: Using ep0 maxpacket: 32 [ 1884.415241][ T5719] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1884.424127][ T5719] usb 5-1: config 0 has no interface number 0 [ 1884.433376][ T5719] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1884.442920][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.463471][T30302] vxcan1 speed is unknown, defaulting to 1000 [ 1884.476915][ T30] audit: type=1400 audit(2000001131.317:1913): avc: denied { write } for pid=30342 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1884.575001][T30346] FAULT_INJECTION: forcing a failure. [ 1884.575001][T30346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1884.588700][T30346] CPU: 1 UID: 0 PID: 30346 Comm: syz.0.6388 Tainted: G L syzkaller #0 PREEMPT(full) [ 1884.588729][T30346] Tainted: [L]=SOFTLOCKUP [ 1884.588736][T30346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1884.588747][T30346] Call Trace: [ 1884.588754][T30346] [ 1884.588761][T30346] dump_stack_lvl+0x100/0x190 [ 1884.588791][T30346] should_fail_ex.cold+0x5/0xa [ 1884.588818][T30346] _copy_to_user+0x32/0xd0 [ 1884.588844][T30346] simple_read_from_buffer+0xcb/0x170 [ 1884.588866][T30346] proc_fail_nth_read+0x1af/0x230 [ 1884.588894][T30346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1884.588923][T30346] ? rw_verify_area+0xce/0x6d0 [ 1884.588953][T30346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1884.588980][T30346] vfs_read+0x1e4/0xb40 [ 1884.589011][T30346] ? __pfx_vfs_read+0x10/0x10 [ 1884.589037][T30346] ? __fget_files+0x215/0x3d0 [ 1884.589062][T30346] ? __fget_files+0x21f/0x3d0 [ 1884.589089][T30346] ksys_read+0x12a/0x250 [ 1884.589116][T30346] ? __pfx_ksys_read+0x10/0x10 [ 1884.589150][T30346] do_syscall_64+0x115/0x870 [ 1884.589177][T30346] ? clear_bhb_loop+0x40/0x90 [ 1884.589199][T30346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1884.589218][T30346] RIP: 0033:0x7fa06535d68e [ 1884.589233][T30346] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1884.589251][T30346] RSP: 002b:00007fa06622efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1884.589269][T30346] RAX: ffffffffffffffda RBX: 00007fa06622f6c0 RCX: 00007fa06535d68e [ 1884.589281][T30346] RDX: 000000000000000f RSI: 00007fa06622f0a0 RDI: 0000000000000009 [ 1884.589292][T30346] RBP: 00007fa06622f090 R08: 0000000000000000 R09: 0000000000000000 [ 1884.589303][T30346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1884.589313][T30346] R13: 00007fa065616218 R14: 00007fa065616180 R15: 00007fff80f7a748 [ 1884.589340][T30346] [ 1884.840263][ T5719] usb 5-1: Product: syz [ 1884.845472][ T5719] usb 5-1: Manufacturer: syz [ 1884.852736][ T5719] usb 5-1: SerialNumber: syz [ 1884.940869][T11323] Bluetooth: hci6: command tx timeout [ 1884.948767][T11323] Bluetooth: hci1: command tx timeout [ 1884.982336][ T5719] usb 5-1: config 0 descriptor?? [ 1885.010260][ T5719] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1885.028327][T26775] hsr_slave_0: left promiscuous mode [ 1885.047031][T30352] isofs_fill_super: bread failed, dev=nbd0, iso_blknum=16, block=32 [ 1885.058567][T26775] hsr_slave_1: left promiscuous mode [ 1885.070100][T26775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1885.105485][T26775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1885.113787][T26775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1885.121239][T26775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1885.176882][T26775] veth1_macvtap: left promiscuous mode [ 1885.196011][T26775] veth0_macvtap: left promiscuous mode [ 1885.214038][T26775] veth1_vlan: left promiscuous mode [ 1885.231801][T26775] veth0_vlan: left promiscuous mode [ 1885.685273][T26775] team0 (unregistering): Port device team_slave_1 removed [ 1885.701515][T26775] team0 (unregistering): Port device team_slave_0 removed [ 1885.866435][T30361] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6389'. [ 1885.965976][T30302] wlan0 speed is unknown, defaulting to 1000 [ 1885.988655][ T5272] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1886.173410][T30232] bridge0: port 1(bridge_slave_0) entered blocking state [ 1886.224163][T30232] bridge0: port 1(bridge_slave_0) entered disabled state [ 1886.255751][T30232] bridge_slave_0: entered allmulticast mode [ 1886.262176][T30352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1886.282295][T30232] bridge_slave_0: entered promiscuous mode [ 1886.336987][ T5719] usb 5-1: qt2_attach - failed to power on unit: -71 [ 1886.367732][ T5719] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 1886.385011][ T5719] usb 5-1: USB disconnect, device number 102 [ 1886.487305][T30232] bridge0: port 2(bridge_slave_1) entered blocking state [ 1886.521148][T30232] bridge0: port 2(bridge_slave_1) entered disabled state [ 1886.552535][T30232] bridge_slave_1: entered allmulticast mode [ 1886.565393][T30232] bridge_slave_1: entered promiscuous mode [ 1886.678607][T30232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1886.764148][T30232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1886.776314][T26775] IPVS: stop unused estimator thread 0... [ 1886.935732][T30374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6392'. [ 1886.942699][T30377] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1886.978608][T30374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6392'. [ 1887.019983][ T30] audit: type=1400 audit(2000001133.662:1914): avc: denied { write } for pid=30378 comm="syz.6.6393" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1887.172340][T30232] team0: Port device team_slave_0 added [ 1887.191105][T11323] Bluetooth: hci1: command tx timeout [ 1887.191124][T25281] Bluetooth: hci6: command tx timeout [ 1887.284166][T30232] team0: Port device team_slave_1 added [ 1887.363094][T25469] kernel read not supported for file /82/cmdline (pid: 25469 comm: kworker/1:2) [ 1887.413336][T30382] syzkaller0: entered promiscuous mode [ 1887.422556][T30382] syzkaller0: entered allmulticast mode [ 1887.702323][ T30] audit: type=1400 audit(2000001134.252:1915): avc: denied { write } for pid=30368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1887.836906][T26775] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1887.958601][ T30] audit: type=1400 audit(2000001134.529:1916): avc: denied { write } for pid=30405 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1888.040489][T30232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1888.050247][T30232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1888.083581][T30232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1888.344319][T26775] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1888.471183][T30232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1888.498073][T30232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1888.553054][T30232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1888.666783][T30415] fuse: Bad value for 'rootmode' [ 1889.313444][T30428] binder: 30423:30428 ioctl c0306201 200000000080 returned -14 [ 1889.315569][T26775] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1889.449745][T25281] Bluetooth: hci6: command tx timeout [ 1889.927577][T30232] hsr_slave_0: entered promiscuous mode [ 1890.609867][T30232] hsr_slave_1: entered promiscuous mode [ 1890.628830][T30232] debugfs: 'hsr0' already exists in 'hsr' [ 1890.634693][T30232] Cannot create hsr debugfs directory [ 1890.815270][T30302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1890.831341][T30302] bridge0: port 1(bridge_slave_0) entered disabled state [ 1890.843686][T30302] bridge_slave_0: entered allmulticast mode [ 1890.875305][T30302] bridge_slave_0: entered promiscuous mode [ 1890.931474][T26775] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1891.197717][T30302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1891.205943][T30302] bridge0: port 2(bridge_slave_1) entered disabled state [ 1891.213932][T30302] bridge_slave_1: entered allmulticast mode [ 1891.222268][T30302] bridge_slave_1: entered promiscuous mode [ 1891.919697][T30453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1891.940064][T25281] Bluetooth: hci6: command tx timeout [ 1892.171762][T30302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1892.326583][T30302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1893.013526][T30302] team0: Port device team_slave_0 added [ 1893.638188][T30302] team0: Port device team_slave_1 added [ 1893.720410][ T30] audit: type=1400 audit(2000001139.847:1917): avc: denied { write } for pid=30458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1893.928258][ T30] audit: type=1400 audit(2000001140.032:1918): avc: denied { write } for pid=30481 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1894.142318][T30488] binder: 30485:30488 ioctl c0306201 200000000080 returned -14 [ 1894.301397][T30302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1894.342121][T30302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1894.435745][T30302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1894.664572][T30302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1894.673679][T30302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1895.306394][T30302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1895.319811][T30496] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6413'. [ 1895.328792][ T5272] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1895.460221][T30302] hsr_slave_0: entered promiscuous mode [ 1895.467163][T30302] hsr_slave_1: entered promiscuous mode [ 1895.473440][T30302] debugfs: 'hsr0' already exists in 'hsr' [ 1895.479683][T30302] Cannot create hsr debugfs directory [ 1895.577795][T26775] bridge_slave_1: left allmulticast mode [ 1895.583547][T26775] bridge_slave_1: left promiscuous mode [ 1895.588851][T30507] syz.4.6415 (30507): attempted to duplicate a private mapping with mremap. This is not supported. [ 1895.590301][T26775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1895.623844][T26775] bridge_slave_0: left allmulticast mode [ 1895.630503][T26775] bridge_slave_0: left promiscuous mode [ 1895.636354][T26775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1895.672491][T25469] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1895.880422][ T30] audit: type=1400 audit(2000001141.823:1919): avc: denied { write } for pid=30499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1895.972797][T25469] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1895.989365][T26788] Bluetooth: hci8: Frame reassembly failed (-84) [ 1895.996086][T25469] usb 1-1: not running at top speed; connect to a high speed hub [ 1896.033191][T25469] usb 1-1: config 2 has an invalid descriptor of length 64, skipping remainder of the config [ 1896.033914][ T30] audit: type=1400 audit(2000001141.961:1920): avc: denied { write } for pid=30520 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1896.046238][T25469] usb 1-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 1896.078997][T30522] xt_connbytes: Forcing CT accounting to be enabled [ 1896.086978][T25469] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=b2.86 [ 1896.095673][T30522] Cannot find set identified by id 0 to match [ 1896.098318][T25469] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.110908][T25469] usb 1-1: Product: syz [ 1896.115141][T25469] usb 1-1: Manufacturer: syz [ 1896.119844][T25469] usb 1-1: SerialNumber: syz [ 1896.175771][T26775] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1896.188488][T26775] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1896.201997][T26775] bond0 (unregistering): Released all slaves [ 1896.373680][T30496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1896.383488][T30496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1896.657154][T30232] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.927253][T25469] snd-usb-6fire 1-1:2.0: unable to receive device firmware state. [ 1897.934693][ T30] audit: type=1400 audit(2000001143.734:1921): avc: denied { write } for pid=30524 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1897.947125][T25469] snd-usb-6fire 1-1:2.0: probe with driver snd-usb-6fire failed with error -71 [ 1897.967116][T30232] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.029243][T25469] usb 1-1: USB disconnect, device number 9 [ 1898.032544][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1898.044051][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1898.184686][ T30] audit: type=1400 audit(2000001143.964:1922): avc: denied { write } for pid=30545 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1898.209576][T25281] Bluetooth: hci8: Entering manufacturer mode failed (-110) [ 1898.220128][T11323] Bluetooth: hci8: command 0xfc11 tx timeout [ 1898.265953][T30232] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.544937][T30232] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.595799][T26775] hsr_slave_0: left promiscuous mode [ 1898.612669][T26775] hsr_slave_1: left promiscuous mode [ 1898.630619][T26775] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1898.648041][T26775] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1898.688456][T26775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1898.705198][T26775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1898.783501][T26775] veth1_macvtap: left promiscuous mode [ 1898.811874][T26775] veth0_macvtap: left promiscuous mode [ 1898.820392][T26775] veth1_vlan: left promiscuous mode [ 1898.827280][T26775] veth0_vlan: left promiscuous mode [ 1898.882297][T30559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1899.500366][ T30] audit: type=1400 audit(2000001145.183:1923): avc: denied { write } for pid=30548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1899.623746][ T30] audit: type=1400 audit(2000001145.294:1924): avc: denied { write } for pid=30571 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1899.658022][T26775] team0 (unregistering): Port device team_slave_1 removed [ 1899.676408][T26775] team0 (unregistering): Port device team_slave_0 removed [ 1899.918034][T30302] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1900.143605][T30581] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1900.736607][T30302] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1900.759551][T30591] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1900.820874][T26775] IPVS: stop unused estimator thread 0... [ 1901.289927][T30302] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1901.345016][ T30] audit: type=1400 audit(2000001146.882:1925): avc: denied { bind } for pid=30600 comm="syz.6.6425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1901.395481][T30602] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 1901.532245][T26790] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1901.532336][ T30] audit: type=1400 audit(2000001147.057:1926): avc: denied { write } for pid=30585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1901.591073][T30302] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1901.651818][T29012] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 1902.091530][ T30] audit: type=1400 audit(2000001147.574:1927): avc: denied { write } for pid=30608 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1902.168299][ T5272] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1902.192970][T29012] usb 7-1: device descriptor read/64, error -71 [ 1902.456353][T29012] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 1902.572949][T30232] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1902.606702][T29012] usb 7-1: device descriptor read/64, error -71 [ 1902.624797][T30232] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1902.632285][T30628] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1902.685373][T30232] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1902.703036][T19617] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1902.738687][T29012] usb usb7-port1: attempt power cycle [ 1902.761100][T30232] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1902.839880][T30232] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1902.919115][T19617] usb 5-1: Using ep0 maxpacket: 32 [ 1902.948066][T19617] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1902.981713][T19617] usb 5-1: config 0 has no interface number 0 [ 1903.006281][T30232] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1903.012076][T19617] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1903.066218][ T30] audit: type=1400 audit(2000001148.470:1928): avc: denied { write } for pid=30612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1903.077599][T30232] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1903.090250][T19617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.105748][T19617] usb 5-1: Product: syz [ 1903.109949][T19617] usb 5-1: Manufacturer: syz [ 1903.116198][T19617] usb 5-1: SerialNumber: syz [ 1903.129899][T19617] usb 5-1: config 0 descriptor?? [ 1903.146946][T19617] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1903.159936][T30232] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1903.169169][T29012] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 1903.206661][T29012] usb 7-1: device descriptor read/8, error -71 [ 1903.212718][ T30] audit: type=1400 audit(2000001148.608:1929): avc: denied { write } for pid=30632 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1903.319052][T30302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1903.331077][T30302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1903.339113][T30302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1903.349913][T30302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1903.362648][T30302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1903.375175][T26790] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1903.389022][T30302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1903.406122][T30302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1903.415471][T30302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1903.471599][T29012] usb 7-1: new high-speed USB device number 92 using dummy_hcd [ 1903.504653][T29012] usb 7-1: device descriptor read/8, error -71 [ 1903.517373][T19617] usb 5-1: qt2_attach - failed to power on unit: -71 [ 1903.538381][T19617] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 1903.584720][T19617] usb 5-1: USB disconnect, device number 103 [ 1903.634289][T29012] usb usb7-port1: unable to enumerate USB device [ 1903.661212][T30232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1903.720277][T30232] 8021q: adding VLAN 0 to HW filter on device team0 [ 1903.736651][T26775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1903.743782][T26775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1903.775181][ T30] audit: type=1400 audit(2000001149.134:1930): avc: denied { write } for pid=30641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1903.776774][T26790] bridge0: port 2(bridge_slave_1) entered blocking state [ 1903.805429][T26790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1904.081893][T30302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1904.140665][T30302] 8021q: adding VLAN 0 to HW filter on device team0 [ 1904.169943][T26775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1904.177158][T26775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1904.220759][ T30] audit: type=1400 audit(2000001149.531:1931): avc: denied { write } for pid=30664 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1904.270213][T17698] bridge0: port 2(bridge_slave_1) entered blocking state [ 1904.277339][T17698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1904.342560][T30232] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1904.360213][T30232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1904.419169][T30668] No source specified [ 1906.041344][T30232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1906.076437][ T30] audit: type=1400 audit(2000001151.258:1932): avc: denied { write } for pid=30685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1906.168136][T30302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1906.218915][ T30] audit: type=1400 audit(2000001151.387:1933): avc: denied { write } for pid=30714 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1906.264240][T30302] veth0_vlan: entered promiscuous mode [ 1906.287018][T30302] veth1_vlan: entered promiscuous mode [ 1906.296837][ T5272] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1906.348823][T30302] veth0_macvtap: entered promiscuous mode [ 1906.377566][T30302] veth1_macvtap: entered promiscuous mode [ 1906.410507][T30232] veth0_vlan: entered promiscuous mode [ 1906.427638][T30302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1906.446889][T30232] veth1_vlan: entered promiscuous mode [ 1906.473854][T30302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1906.506926][T26785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.551032][T26785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.561044][T26785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.595196][T30232] veth0_macvtap: entered promiscuous mode [ 1906.613984][T26785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.672567][T30232] veth1_macvtap: entered promiscuous mode [ 1906.754551][T30232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1906.758411][ T30] audit: type=1400 audit(2000001151.885:1934): avc: denied { write } for pid=30719 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1906.771502][T30232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1906.836551][T17698] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.846183][T17698] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.858949][T17698] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.886041][T17698] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1906.895843][ T30] audit: type=1400 audit(2000001152.005:1935): avc: denied { write } for pid=30730 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1906.936448][T12832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1906.946449][T12832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1906.985497][ T5272] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1907.020960][T26780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1907.075637][T26780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1907.203223][T26776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1907.230229][T26776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1907.276206][T26776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1907.287660][T26776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1907.441072][T30744] binder: 30740:30744 ioctl c0306201 200000000080 returned -14 [ 1907.501524][T19617] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1907.557346][ T30] audit: type=1400 audit(2000001152.624:1936): avc: denied { write } for pid=30733 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1907.663514][T19617] usb 2-1: Using ep0 maxpacket: 16 [ 1907.670448][T19617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1907.684248][T19617] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1907.693889][T19617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.724727][T19617] usb 2-1: config 0 descriptor?? [ 1907.827962][ T30] audit: type=1400 audit(2000001152.873:1937): avc: denied { write } for pid=30749 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1907.987194][ T5272] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1908.179350][T19617] hid_parser_main: 5 callbacks suppressed [ 1908.179370][T19617] mcp2221 0003:04D8:00DD.0039: unknown main item tag 0x0 [ 1908.197633][T19617] mcp2221 0003:04D8:00DD.0039: unknown main item tag 0x0 [ 1908.204834][T19617] mcp2221 0003:04D8:00DD.0039: unknown main item tag 0x0 [ 1908.212789][T19617] mcp2221 0003:04D8:00DD.0039: unknown main item tag 0x0 [ 1908.224382][T19617] mcp2221 0003:04D8:00DD.0039: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1908.263721][ T30] audit: type=1400 audit(2000001153.280:1938): avc: denied { write } for pid=30752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1908.351757][ T30] audit: type=1400 audit(2000001153.353:1939): avc: denied { write } for pid=30763 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1908.397485][ C1] usb 2-1: input irq status -75 received [ 1908.630918][ T30] audit: type=1400 audit(2000001153.612:1940): avc: denied { write } for pid=30767 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1908.668936][T19619] usb 2-1: USB disconnect, device number 83 [ 1908.730720][ T30] audit: type=1400 audit(2000001153.704:1941): avc: denied { write } for pid=30779 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1908.768854][ T5272] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1909.027319][ T5272] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1913.113541][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1913.113558][ T30] audit: type=1400 audit(2000001157.757:1944): avc: denied { write } for pid=30811 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1913.164237][ T30] audit: type=1400 audit(2000001157.794:1945): avc: denied { write } for pid=30822 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1919.608264][ T30] audit: type=1400 audit(2000001163.749:1946): avc: denied { write } for pid=30833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1919.658219][ T30] audit: type=1400 audit(2000001163.795:1947): avc: denied { write } for pid=30844 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1920.505962][ T30] audit: type=1400 audit(2000001164.579:1948): avc: denied { write } for pid=30847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1920.563186][ T30] audit: type=1400 audit(2000001164.626:1949): avc: denied { write } for pid=30858 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1920.778905][ T30] audit: type=1400 audit(2000001164.829:1950): avc: denied { write } for pid=30861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1920.830009][ T30] audit: type=1400 audit(2000001164.875:1951): avc: denied { write } for pid=30872 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1921.028751][ T30] audit: type=1400 audit(2000001165.060:1952): avc: denied { write } for pid=30875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1921.083444][ T30] audit: type=1400 audit(2000001165.106:1953): avc: denied { write } for pid=30886 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1921.272333][ T30] audit: type=1400 audit(2000001165.281:1954): avc: denied { write } for pid=30889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1921.322451][ T30] audit: type=1400 audit(2000001165.327:1955): avc: denied { write } for pid=30900 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1936.153073][T12832] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1937.204559][T12832] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1950.189446][T11323] Bluetooth: hci2: command 0x0406 tx timeout [ 1961.281315][T15665] Bluetooth: hci7: command 0x0406 tx timeout [ 1961.289156][T15665] Bluetooth: hci4: command 0x0406 tx timeout [ 1964.581469][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1964.587900][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1970.812579][T26779] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1970.815085][T26785] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1979.825687][ T31] INFO: task syz.3.6203:28984 blocked for more than 143 seconds. [ 1979.833938][ T31] Tainted: G L syzkaller #0 [ 1979.841273][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1979.850730][ T31] task:syz.3.6203 state:D stack:28856 pid:28984 tgid:28980 ppid:25775 task_flags:0x400140 flags:0x00080002 [ 1979.863995][ T31] Call Trace: [ 1979.867279][ T31] [ 1979.870282][ T31] __schedule+0x125c/0x6730 [ 1979.874806][ T31] ? __pfx___schedule+0x10/0x10 [ 1979.879723][ T31] ? find_held_lock+0x2b/0x80 [ 1979.884403][ T31] ? schedule+0x225/0x2c0 [ 1979.888711][ T31] schedule+0xdd/0x2c0 [ 1979.892856][ T31] cgroup_lock_and_drain_offline+0x383/0x800 [ 1979.898849][ T31] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 1979.905461][ T31] ? rcu_is_watching+0x12/0xc0 [ 1979.911797][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1979.918297][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1979.923067][ T31] ? security_capable+0x80/0x260 [ 1979.928043][ T31] cgroup1_get_tree+0xc2/0x1620 [ 1979.932922][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1979.937800][ T31] ? security_capable+0x80/0x260 [ 1979.942764][ T31] vfs_get_tree+0x92/0x320 [ 1979.947314][ T31] path_mount+0x7d0/0x23d0 [ 1979.951741][ T31] ? __pfx_path_mount+0x10/0x10 [ 1979.956722][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 1979.961933][ T31] ? putname+0xb1/0x110 [ 1979.966065][ T31] ? kmem_cache_free+0x127/0x6b0 [ 1979.971132][ T31] ? __x64_sys_mount+0x293/0x310 [ 1979.976080][ T31] __x64_sys_mount+0x293/0x310 [ 1979.980976][ T31] ? __pfx___x64_sys_mount+0x10/0x10 [ 1979.986300][ T31] do_syscall_64+0x115/0x870 [ 1979.990999][ T31] ? clear_bhb_loop+0x40/0x90 [ 1979.995695][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1980.002263][ T31] RIP: 0033:0x7f5593d9ce59 [ 1980.006708][ T31] RSP: 002b:00007f5594c22028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1980.015465][ T31] RAX: ffffffffffffffda RBX: 00007f5594016180 RCX: 00007f5593d9ce59 [ 1980.025143][ T31] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 1980.033401][ T31] RBP: 00007f5593e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1980.041376][ T31] R10: 0000000002010042 R11: 0000000000000246 R12: 0000000000000000 [ 1980.049397][ T31] R13: 00007f5594016218 R14: 00007f5594016180 R15: 00007ffdbbbe8698 [ 1980.057426][ T31] [ 1980.060485][ T31] [ 1980.060485][ T31] Showing all locks held in the system: [ 1980.068246][ T31] 1 lock held by khungtaskd/31: [ 1980.073089][ T31] #0: ffffffff8e9e60c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1980.083097][ T31] 1 lock held by syslogd/4959: [ 1980.088857][ T31] #0: ffff8880b843b520 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 1980.098892][ T31] 2 locks held by getty/5365: [ 1980.103561][ T31] #0: ffff88803300a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1980.113383][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1980.123613][ T31] [ 1980.125949][ T31] ============================================= [ 1980.125949][ T31] [ 1980.136341][ T31] NMI backtrace for cpu 0 [ 1980.136358][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1980.136383][ T31] Tainted: [L]=SOFTLOCKUP [ 1980.136390][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1980.136400][ T31] Call Trace: [ 1980.136407][ T31] [ 1980.136414][ T31] dump_stack_lvl+0x100/0x190 [ 1980.136444][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1980.136470][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1980.136495][ T31] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1980.136521][ T31] sys_info+0x141/0x190 [ 1980.136540][ T31] watchdog+0xcb1/0x1030 [ 1980.136581][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1980.136607][ T31] ? __pfx_watchdog+0x10/0x10 [ 1980.136628][ T31] ? __kthread_parkme+0x18c/0x230 [ 1980.136658][ T31] ? kthread+0x13a/0x450 [ 1980.136673][ T31] ? __pfx_watchdog+0x10/0x10 [ 1980.136693][ T31] kthread+0x370/0x450 [ 1980.136710][ T31] ? __pfx_kthread+0x10/0x10 [ 1980.136730][ T31] ret_from_fork+0x72b/0xd50 [ 1980.136756][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1980.136781][ T31] ? __switch_to+0x800/0x10f0 [ 1980.136800][ T31] ? __pfx_kthread+0x10/0x10 [ 1980.136811][ T31] ret_from_fork_asm+0x1a/0x30 [ 1980.136827][ T31] [ 1980.136831][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1980.270418][ C1] NMI backtrace for cpu 1 [ 1980.270434][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1980.270454][ C1] Tainted: [L]=SOFTLOCKUP [ 1980.270459][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1980.270468][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1980.270491][ C1] Code: b6 a4 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 b9 2e 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1980.270505][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000242 [ 1980.270518][ C1] RAX: 000000000bd875e9 RBX: ffff88801ead2540 RCX: ffffffff8b9ce2d5 [ 1980.270528][ C1] RDX: 0000000000000000 RSI: ffffffff8e15d8c3 RDI: ffffffff8c3e9b80 [ 1980.270537][ C1] RBP: ffffed1003d5a4a8 R08: 0000000000000001 R09: ffffed10170a678d [ 1980.270546][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 1980.270555][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 1980.270564][ C1] FS: 0000000000000000(0000) GS:ffff8881241e0000(0000) knlGS:0000000000000000 [ 1980.270579][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1980.270588][ C1] CR2: 00005571072a0660 CR3: 000000000e792000 CR4: 00000000003526f0 [ 1980.270598][ C1] Call Trace: [ 1980.270602][ C1] [ 1980.270608][ C1] default_idle+0x9/0x10 [ 1980.270621][ C1] default_idle_call+0x6c/0xb0 [ 1980.270634][ C1] do_idle+0x3a7/0x5b0 [ 1980.270655][ C1] ? __pfx_do_idle+0x10/0x10 [ 1980.270673][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 1980.270696][ C1] cpu_startup_entry+0x4f/0x60 [ 1980.270714][ C1] start_secondary+0x21d/0x2d0 [ 1980.270733][ C1] ? __pfx_start_secondary+0x10/0x10 [ 1980.270753][ C1] common_startup_64+0x13e/0x158 [ 1980.270772][ C1] [ 1980.450017][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1980.456858][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1980.467505][ T31] Tainted: [L]=SOFTLOCKUP [ 1980.471799][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1980.481822][ T31] Call Trace: [ 1980.485081][ T31] [ 1980.487995][ T31] dump_stack_lvl+0x100/0x190 [ 1980.492657][ T31] vpanic+0x552/0x970 [ 1980.496607][ T31] ? __pfx_vpanic+0x10/0x10 [ 1980.501081][ T31] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 1980.507210][ T31] panic+0xd1/0xe0 [ 1980.510912][ T31] ? __pfx_panic+0x10/0x10 [ 1980.515327][ T31] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 1980.521463][ T31] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 1980.527598][ T31] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 1980.533729][ T31] ? watchdog.cold+0x1ec/0x234 [ 1980.538473][ T31] ? watchdog+0xcc1/0x1030 [ 1980.542872][ T31] watchdog.cold+0x1fd/0x234 [ 1980.547445][ T31] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1980.553233][ T31] ? __pfx_watchdog+0x10/0x10 [ 1980.557892][ T31] ? __kthread_parkme+0x18c/0x230 [ 1980.562928][ T31] ? kthread+0x13a/0x450 [ 1980.567155][ T31] ? __pfx_watchdog+0x10/0x10 [ 1980.571815][ T31] kthread+0x370/0x450 [ 1980.575873][ T31] ? __pfx_kthread+0x10/0x10 [ 1980.580445][ T31] ret_from_fork+0x72b/0xd50 [ 1980.585022][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1980.590120][ T31] ? __switch_to+0x800/0x10f0 [ 1980.594777][ T31] ? __pfx_kthread+0x10/0x10 [ 1980.599350][ T31] ret_from_fork_asm+0x1a/0x30 [ 1980.604103][ T31] [ 1980.607317][ T31] Kernel Offset: disabled [ 1980.611616][ T31] Rebooting in 86400 seconds..