last executing test programs: 7m24.527286433s ago: executing program 3 (id=4264): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 7m22.858966333s ago: executing program 3 (id=4274): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="6c00000010001fff01000000000000e1ff060000cb0cbb88b2696f17fb3421cad646b48630c6ffd6c1feb875ba7a43485bd553b990fdf4ae145d5296ffa94b24a39b00d01b83d0b31d912761c07a53379ede7af45da138498ce4a98c6b2972ab10515d6db04d62c1960062eee71f70deeebb2e5a124e9eec99219d3c46ca41044ca71f59bb802785243d6e551a3eb8b27a42f368c3601cd55b6867b09dfd804ce48c352c5720c3a24c92c44b082258d78b1110f8c106fb", @ANYRES16, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRES32], 0x6c}}, 0x40) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a240, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r2, 0xc08c5114, 0x0) write(r1, &(0x7f0000000880)="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", 0x103) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, 0x0, &(0x7f0000000200), &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x0, 0x1, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x10, 0x8000, 0x9, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) unshare(0x26020480) r9 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) 7m21.363033738s ago: executing program 3 (id=4280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x27, 0x0, 0x1) 7m21.193667428s ago: executing program 3 (id=4283): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 7m21.068174147s ago: executing program 3 (id=4285): r0 = fsmount(0xffffffffffffffff, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$binfmt_register(r3, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0xf3) symlinkat(&(0x7f00000000c0)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00') sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r8 = openat$ttynull(0xffffff9c, &(0x7f0000000080), 0x680ac0, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000e80)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x260, 0x2f8, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6tnl0\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x220, 0x260, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc59, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x29, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x7, 0x1}}, @common=@unspec=@physdev={{0x68}, {'vlan1\x00', {0xff}, 'ip6gre0\x00', {}, 0x17}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x7, 0xd0, {0x9}}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x33, 0x2f, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7}, 0x70) 7m20.722513005s ago: executing program 3 (id=4288): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x0) 7m20.571832704s ago: executing program 32 (id=4288): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r0], 0x0) 6m27.313200704s ago: executing program 0 (id=4636): r0 = fsmount(0xffffffffffffffff, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$binfmt_register(r3, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0xf3) symlinkat(&(0x7f00000000c0)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00') sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r8 = openat$ttynull(0xffffff9c, &(0x7f0000000080), 0x680ac0, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000e80)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x260, 0x2f8, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6tnl0\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x220, 0x260, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc59, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x29, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x7, 0x1}}, @common=@unspec=@physdev={{0x68}, {'vlan1\x00', {0xff}, 'ip6gre0\x00', {}, 0x17}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x7, 0xd0, {0x9}}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x33, 0x2f, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7}, 0x70) 6m26.264199843s ago: executing program 0 (id=4638): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x40000}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="af4fd73a", 0xffffffffffffff19, 0x840, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m26.143477101s ago: executing program 0 (id=4641): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x6}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 6m23.665091938s ago: executing program 0 (id=4649): r0 = fsmount(0xffffffffffffffff, 0x0, 0x80) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$binfmt_register(r3, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x4c840) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xe, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r6 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0xf3) symlinkat(&(0x7f00000000c0)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0/file0\x00') sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r8 = openat$ttynull(0xffffff9c, &(0x7f0000000080), 0x680ac0, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000e80)=@filter={'filter\x00', 0x42, 0x4, 0x460, 0xffffffff, 0x260, 0x2f8, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0x3c8, 0x3c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6tnl0\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x220, 0x260, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc59, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x29, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x7, 0x1}}, @common=@unspec=@physdev={{0x68}, {'vlan1\x00', {0xff}, 'ip6gre0\x00', {}, 0x17}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x7, 0xd0, {0x9}}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x33, 0x2f, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r7}, 0x70) 6m22.10490084s ago: executing program 0 (id=4654): syz_usb_connect(0x0, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='1', 0x1) sched_setscheduler(0x0, 0x2, 0x0) eventfd2(0x51cc, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_enter(r0, 0x2cbe, 0x366, 0x52, 0x0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 6m20.735711681s ago: executing program 0 (id=4660): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="fffffffffffffff6b702040001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 6m5.447928749s ago: executing program 33 (id=4660): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="fffffffffffffff6b702040001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 1m20.050848776s ago: executing program 6 (id=5552): socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r0, 0x4068aea3, &(0x7f0000000180)={0xbc, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e1f, @private=0xa010100}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r3, 0x8}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002080)={0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r5, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x4c5, 0x0, 0x0, 0x800000000001, 0x0, r4, &(0x7f0000000040), 0x20000044}]) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0xf5}}], 0x48}, 0x0) 1m18.605998588s ago: executing program 6 (id=5556): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)={0x168, 0x1, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_ID={0x8}, @CTA_EXPECT_NAT={0x11c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_TUPLE={0x4}]}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x4}]}, 0x168}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r5 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) sendmsg$AUDIT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0xfffffffffffffef0, 0x3e9, 0x200, 0x70bd2b, 0x25dfdbfb, {0x5, 0x0, 0x0, 0x0, 0x2, 0x5, 0xfd12, 0xee, 0x0, 0x9, 0x7}}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40008000) 1m17.624970964s ago: executing program 6 (id=5560): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x6000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0xb2, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xe2, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x6, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x4, 0x0, 0x1]}) close(0x5) close(0x4) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) 1m9.519191271s ago: executing program 6 (id=5576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = eventfd(0x7) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r3, 0x1, 0x2, r3}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf0}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x2, 0x0, 0x8000000004000005, 0x8000020, 0x6, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x2000000000000003, 0x9, 0x8000], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r5, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000340)={0x50}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r6, 0x401070ca, &(0x7f0000000000)=0xffffffff) ioctl$KVM_CAP_HYPERV_VP_INDEX(r6, 0x4068aea3, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r4, &(0x7f00000003c0)={0x2c, 0x6, r7, 0x2, r4}, 0x10) 1m6.629015192s ago: executing program 6 (id=5583): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000240)=[@clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x140800, 0x0) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x20000014}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x47, 0x5, 0x8, 0x5, 0x0, 0x9, 0x0, 0x57c73f3a, 0xfa11, 0xffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) poll(&(0x7f0000000140)=[{r5, 0x2cfc08c20dafc34e}, {r3, 0xf102}], 0x2, 0x8000007) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, &(0x7f0000000380)) 1m1.508171165s ago: executing program 6 (id=5598): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0xa2040, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x0, 0x100000, 0x4000, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$read(0x0, 0x0, 0x11) r2 = syz_open_pts(0xffffffffffffffff, 0x141601) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2185) fcntl$setstatus(r2, 0x4, 0x102800) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x104, 0x0) unshare(0x6a040000) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 45.768814972s ago: executing program 34 (id=5598): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0xa2040, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x0, 0x100000, 0x4000, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1}, 0x10) modify_ldt$read(0x0, 0x0, 0x11) r2 = syz_open_pts(0xffffffffffffffff, 0x141601) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2185) fcntl$setstatus(r2, 0x4, 0x102800) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x104, 0x0) unshare(0x6a040000) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) 19.705038942s ago: executing program 1 (id=5674): socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x118, 0x8, {{0xfffffffc, 0x1}, 0x0, 0x0, 0x5c, 0x8, 0x0, 0x200010000000}}], 0x58}, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000440)={0x2, @sliced={0x2, [0x2, 0xb, 0x8, 0x8, 0x2, 0x4, 0x6, 0x1, 0x7, 0x7, 0xb84, 0x7, 0x200, 0x2, 0x6, 0x8fee, 0x8, 0x6, 0x1, 0x8000, 0x1, 0x78e5, 0x3, 0x8, 0xae4, 0x300, 0x4, 0x9, 0x7fff, 0x401, 0xd874, 0x100, 0x9, 0x9, 0x4, 0x67, 0x1, 0xfff8, 0x58f, 0x3a4, 0xfff, 0x4, 0x7, 0x7, 0xbdcf, 0x9, 0x0, 0x93], 0xfffffa6a}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='dummy_hcd.0', 0xb) 18.015474549s ago: executing program 1 (id=5679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x68040000) socket$inet_smc(0x2b, 0x1, 0x0) fsmount(r4, 0x0, 0x1) fchdir(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, 0x0, 0x25, 0x0, @void}, 0x10) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000080)={0x3, 0xc}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0xb5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getdents64(r6, 0x0, 0x0) 16.806047132s ago: executing program 1 (id=5681): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2(0x0, 0x800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000400)={'team0\x00', 0x4}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x3}}, 0x20) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockname$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, &(0x7f00000003c0)=0x6e) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x2000000, 0x0, 0x10}, 0x4054) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000004100070700000000fedbdf25037c00001c002d8018000a80"], 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYRES16=r6], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000020301010000000000000000020000010900090000000007010000000800010001"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000303050000000000000021000a0000010c0002"], 0x20}, 0x1, 0x1000000, 0x0, 0x20000004}, 0x404) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x2) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x3}, 0x6) 16.38746422s ago: executing program 4 (id=5684): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, 0x0, 0x48850) prlimit64(0x0, 0xe, 0x0, 0x0) socket(0x26, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket(0xa, 0x3, 0x3a) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000000)) clock_gettime(0x0, 0x0) clock_gettime(0x0, 0x0) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) socket(0x40000000015, 0x805, 0x0) 14.479488118s ago: executing program 4 (id=5686): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) socket(0x10, 0x3, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) socket$unix(0x1, 0x1, 0x0) fspick(0xffffffffffffffff, 0x0, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect(0x0, 0x3a, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x49, 0xcd, 0xb4, 0x40, 0x424, 0xcf19, 0x7190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x28, 0x1, 0xff, 0x2b, 0x20, 0x6, "", [{{0x9, 0x4, 0x61, 0x9, 0x0, 0x2, 0x2, 0xff, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x403, 0x1, 0xf8, 0x0, 0x7, 0xb}]}]}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x9, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0x4, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x90000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x0, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000410000000000000000000500000a44000000060a010400000000000000000a0000040900010073797a310000000018000480140001800a0001007265646972000000040002800900020073797a3200000000140000001100011600000000000000000000000a3445f390ab6150ad34cd726fbcda101293d9ed3010d853c6841a373bb2f6499ea8868ee93686fbaa470feb7aac506148c5a3dd74efd238fb7742366f1d36c92c893698cfb53da6b42a9c7b7faf232897"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) close(0x3) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, 0x0, 0x40040) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) setuid(0xee00) close_range(r4, 0xffffffffffffffff, 0x0) 10.13973199s ago: executing program 4 (id=5691): syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0xd401}], 0x1, &(0x7f0000000440)={0x77359400}, &(0x7f0000000480)={[0x3ff]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0xfffffffffffffffc, 0x0) ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={0x0}) sched_setaffinity(0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, 0x0) r2 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r5, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r5, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0xfffffffffffffffe}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) 9.576966404s ago: executing program 1 (id=5696): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x400000, 0x2a) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) msgget$private(0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x12, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00', 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @mcast2, [0x0, 0xff000000, 0xffffffff, 0xff], [0xff, 0x47066fef753f41fe, 0xff000000, 0xff], 'veth1_to_hsr\x00', 'bond0\x00', {0xff}, {}, 0x87, 0x2, 0x3, 0xa}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) 8.843116231s ago: executing program 5 (id=5697): r0 = getpid() syz_pidfd_open(r0, 0x0) unshare(0x20000400) r1 = gettid() syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "9ca6ae", 0x1}}}, 0xd) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x9]}, 0x8, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0xfffffffffffffffd, 0x2}, 0x0, &(0x7f0000000200)={0x1e, 0x0, 0x8, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x0) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601020000000000000000000000f5140007800800124000060000080008400000003712000300686173683a6e65742c706f7274000000050005000a00000005000400000000000900020073797a31000000000500010007"], 0x60}}, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000c) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000006c0)={{r6}, "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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="75c6c1015909d4338683df9486bbc81e43f13e4926c27c2f82f846633ae45dde55cd4aa48598dfcbe26577ac059a9420bca1c94427a6d7872a1b30832e91813fe7e1af1f00f4587326ea389615a22b9b665a4b77d6cd3efb7c7ef750596fd9d755e7c9200af5a208abf303434848890294b53f279f4390b8cba0f4c94ad8b0815e520566857afa936aea2e23f24e936f8f9b2e7aafcabd0f1fdc885b32e9dcf5eddf7cd4445f872327973e0789fe437e6201e32297c99c6be42731a056ed21fee6df04daae244d4164b1f27764dc0d3b38d824461b54c9b7f13dba393b8e2029454f5174b5a59a35970316b38de13bd00db37eb9029abcf71c734e0a865ce878284540125caad33853dc11039bda8f0fb6bb9f67065a858d9d13aa1e8a79727b376ac3b5e25f688821e19fa5573034c50882e3fcbd111e137b80b428f6986d9d8cdb2a2476fbebf22de118e27f0fc48bcfb54fccde391238eea73f5a9fbe2138ae958f44fcfe66845acb714d9b49bfba663b6fe29e09f58ff81d65abe5516378bc176bf7212ed988d1e306b36a37d35ca97a62fa5c70e76829b3f63b3deaa7b98b67fc19586cc60541fadf4b6c5da31a083e57a34399348f53b9c5ab83579ce5ea883195be71b8383cbc6e6227054f1867bcb321d9da7eff2a93f0487ecf6bd2ae805d95be46bea30d267f52ace8c21410b357fef133ace7eba38a326dae7c708a25320c70f229c555289cd8703b680d78b9c6eac6bc99c8abfe8e656f6054a7cede6330f335e9c43d88f1f31380e575fec7e04b1c8cb7b43288849dc0e1ec01e259a15986e23a501ce360a25ec565e0d7d12a20513e82c89fd4f89774ad4b395191b6a9d6b26c99bccd3bc61668dd642aeddeb506782ee87da02eab31f8281587b0dff57a7dd4d8f470c96b467a711f19855c939ef8b503a302673545eb77ba3e599962eeb4e30d5261490bde68860d14d7dfd2e797674384394a39ba4635f902d15e6198e6a2df8357fd0ef40c5a309a2aafd0d94f2983d83086b93ad787ae6b6c22389cd36ee9e958b6e297123ffa6dddfa0d5f7c56de809681b23b89ddb0f38c889c5d7957d47e2aaa1330b12cde716d47c9d60c5e0ded86c8f3c592394eec7c94740e14fdfe799d75f2417c9c8d7ff3247e85bcecda02f7c22d8133a92bc44f3c96f1b7c24fb8493b117efbb2fab56013a4f442da56c46beee7ff473e8e2618e387cb2576d6a4b1d8937203bd01f5f1f8bc035c4009ac67ebc53f88e314ceeda2c1156e0150ca1c4686db66be31986aac9d0799905058a998bf04b417fefa43a9d28e89eae3e5bce4e645097646708d26789c01ecd2b592bce9caffa134a2a31bdbd14d1cc20ef586e6827a009b3472b3fc6b8e759afce903e35f588416480621d1ffb3d7fb66dfe4f0f00e343128cd677ea9833c979cdf94f3cc3eccca626af6537a268297d860e1ee10dfa3e6ee4b30cc369208ab8d44d52e6bcc961766a303053a8e459bc95be9f0f815aba00a9f9e6d4f8c13289169e6f4c2ad4f4a0ddd88e3c54460fa01814a6e154447bade1c4d2dc99d9eadf2427ba9bffb6c3c1fe76d83971d082f7f60435f226754b647ed02aa4364ed22d4331647f4c7aa8bdf5822ecf2ec217d929e5aff4625fee1dcaf38bf4dcd2233d84eba0667c868a18a39c4337f41e9ac33b94bf7856994efcf2564fb1111518ab8dd5459939043c8d72636fc2b089aa99ff158d252a864cb2281592154ff3699623da1b8dfab8f874c14672e7a3f676a0bc654495dd1779e9ba599bfcab5b77bfdce1429dc68c8738ac23056328c918ff8e6eb735c524ce0a1413cdeebe26906d123999c3445d8a6b74dadc9b2d8718c028b52ca3bc5fd30411673dd5564111dcb4f1423c880c3160d2dd83a41bd76fc80474b7e0601a8bd2708ebe85f1b23e190833485f7f3f43b4767b9aba721711dd79d55ac5aecd9ddaa66b04490f52bf6b6475309f15bb64132dc6111be416267c04a2658c490542a7e04d6a7a9dec7237555cbdb32f051c33018452976101cda7d145f39011ac31d019dddb8755998ad1721a04b3fc3f7bb07b3ac2f2087e8f63c9070c65c509238b9d0e33a596b1247108bb7985b35bc33b9c4426e90554f00b6a9c37d1e9ddc27f2f8b16ec70a8fbf13a48659fd75cf71e245772848b4999d37e1b45a3253ae3900b03acd571f5f4621b5d0b672fd87ee83bc1c0d2c08a478fb57091c1634e10d196b4a185728736e75066eb222bfdb463762e773912d5f78fcaf400531fcb2ebe375ab81be7e5412dc153b18bdd3cb0a271e5c650ee2b3fb41727144659bd9e3867733ef3dafccff61adcbc079f0034080ad6cebd2d591f5519f374c1e9cfcc1e1d149b19ed169f3d0a63ee80513db620807e89ceb0ad9c8a5bfc3e1207aab30df7e460fc715bd0e1cf8bd1f346d56e2046f2174d67e89180e5b80c2b3947a3fa80a5def940eaabd2a53d8658d07dc7290dbbdd5277ae9a5e66a8afdbe591798e2f283903bb389274e70af2b45863e6660b62b31b0b0b7c3785f9b0cc292659f97464089399a3f517a8b3b48eb751b855f37ad65d5f2c8ff377a87225ed7c9a970dcde700c62a107b59d10e8c7a6bc2d218099c457be927e35ca4fcc839a5e77ebd022b12848a85c4611d81c6dfa703dae14cbde0e4f0d4df9c888976b09b36d4b63fd474777e8841fda0fa58a3d4291303440e5c7af3ccf8bb478068577214556f48bc14fe4f25c4566c300cde1b20aeeb90c8b6e14ceea3b1c2545e9add0036af3ef47b70eeb6a4bd945bbd514b6f297992aed30393295ac72a5170b0e4b0048b4b4b16a0174405f6165721e69d5ac1c0a1b1c31f6756a0750ab9cf5e1325b77678266b4ee9e5efab246bdee0f1d48b1281cfaa0578e063caeaab14508a340043e6ea18b495ecfe518aadbd0ba4e6d534376611121917ce1eb5197997daed456437207d1e83ad98aee13e3581b0a826eb34a6ec65b6258b0791a2e86a3cdae26d3ef60cfe77ea622bc234d42530c40bc63f86a66c2e6df3efb6b0b6f1c3370eee8e123fe6d952f03ca7ffb94f2f837296771294febf0e4dc28f626da6b4a5bfc7b4c980e3a1eb2d5fa669bc661be59a73d681cefae5def0b866bf4fd7fcd967f9a3bca09c327aaff7635e218b5b7f822c759fd2a6a0a2ddcbd1daa57aef73d69ca88679dfd39934377321e080f4fccaeb5a08786fbf7c6df97ae830f1b2ab77e66bbb9ed9aea46114638b1afd0443a625f0a6e708db7431ebd946638993ffcc7f837e30f5e66abfff9cddf1f9ceba7b025b2452014616c2a66db5d6f4afaf678b1330a70bbdfbbcfb950df9f75f03eb013189982ba8d204315ecd13d70b3ed75f14386224f83b0c95fa45fb4c40a2e655204a01187aaf705bec8e6dfa8f3a387fded3205a613606b794356818ba193a89c4eb716c66ccda98becddd25e9b681307d87d8bf1f3a581ec11becc96996cdc953fa357a1b9537c25c7ea3524d8a929caef9165970aa400e4a2d9ef6dbd7bab4a79491916112073880da0ebcc22035c1f0ea07512ef2908ec62a8e7993f2871aab05016d9cdc548bb7eb8962a54a5c13977ef6b79573d2ca2977b65c22519708af129cebc852563368c225f80d4ae2e51a7bb7d5cf7031c6379697bef8bd696f1e5671d41f4121da411d9ed6a9c345c64d71c469454c1ce8fd8f9c745f6160093cd6400e625e60b7b5646c1d1d167a63379cc87201987d28ad3dae05ab8651591ece4ddb055bf5f7310ea6858040f6cd4f38fea70568f10b09a98a12d1546e7fd5efe549622f54bbc10dcd42f60f8d61aa31fa050a0f7bcbc6e45f9dce0091b5e769ed9ed4aa31e9c1b97619945c03fccf60f8bd547dc0fa072093e4265940d223555534b77489f6cef12f523deab648d6e77b7af4614eaf283a292e3034c6bcd485e8c65f7cc52ff123d1432f53ca3bd42be8b348ba3bfaf57451a5483fce32956669ec96863c3989794fb3359a4b4ac54fbedf566859b9818a5d71779f676874fd126888ad4c03a0dd018732cf5a11e58836556d5378a50c31ae83c364ae9fdeb5e183e5b34587c13e814f2fc757cbb4dbbffeb2d362d442d0617050c33c6aaa1ea593f63374566f10b741f57805d4c74fb43435b54b92c532f865300b4351e1913a34cdc80f5eb0e09e29b248df71a08cfb93351f2af9c9cb052c46d100beeb326d92d70e40da88eabb5acca56fb5fe498ee5d9e1302c3fbd05c6bc7ab12446d089635cd4d9ad88752b131e6ec91fa553afb66ace2c2e3c3709d97b68647b244843e247cf09fd7d056002e4c1754434bd4507f0b79b964bddfd3ad9ed1d1e361995f448808c886998d69f2feadc6d2babcfda86e694866728701b8ae04ef2df56d11fe16da0da9390371fa1ad5158528c5e316b292c123e3f56a579b9e9f516e6f5d321b1df3080959443ce2f88460ec57d7707b87d7f0f878aa3a0c6dff6de51b778410906cb9668c86ebb43a856d651f475142809abecf6cfafff6ed7143b4923d375678f9cb05409a23875d180c3b60a8f80dab10cee5d54fd9b12521c47e09b5df1a5c6d05e25d81232c144385bb3b46f2b5436ee0836e066d12dfe7e844c249431dfd8713ae6428607a337f06d35778ecc5ddfe3470287fc777cde9f0f8aad11e5bf89fd3c097a0fd8f8da1ebd1e4d4de1b39ad0d1cc933e1386875cae224c29a232a15d4fc1e79196ede9ec8f2ec6fa72098a93b90d8cfce870bcffc270e0874f10dd5387867aadf6413925da4ad1d581201cc914bcbe7754685a25ee3b52bdbe20491d460f7275f943f5be210faa4e9d5dbcd4a4e23adc739c521dbc78a2040d33f206e85f3ac04dfc0195368d211de09ab29855f3ea400e12ac2d43f8ca8d12502bba88fe8e027f5970ccac619e9136ee0c9bce5ee7dd16d715a046a539e042c662723b7fac74c4e2de06f7f7ef4e31648a19b0bf9628d57f3bee570147aaa29faaa60ecf78e5eee6f2b5ce48706a498d72ada4334b82815af52991a77a3546dbbc80c3e53c3a4546fe7f1c0b2dd22100a943b83125c0d0e9a7c5412aa1245c228e13bb9d176fd3734c75963d18260ae25ee11a4588a41c480220bd089223cf5bb70318d4109b5ba190525362374b457b4f198a916ff6066acc5d6e1e3d19a48b2d89ce74cf9338c9ac9ed32343536549b694eb334a5c6316522bd7c703e2df29e6266d7b715ab740098dc98c4338ea91ca592f686ac5b09ceed0fc17ad127b817556289d039bed5f7afeb9922a25a64e6259e9dfa407bc595e97b3a234c053061e9d216292b60c9f2d2465b42c31a8b0357209c6134d3b94d9bc68af60204738301072792e416c8dc612405b766bc2bc4b97acde6f6844b5fb2dfee21be5c1d91a2301bdd5740852ebc8df9c36fb1ff7d8aaee18e2c75c9763366fa7692f87f7d1076980436892251203790599dc789310964a9c03f88dc1f1c0b1cac159f5e36399c75cdb805744486f5624876e81af3f0e1590d098183a40afecf0841d0acf687b13049148eed079796bbb6c1edd3f5c0f5661a2d329b0165ac12f5cf58606970656d2c4d13a4cf2e15aaec175fc59bd9f23ea7869db744fcc0eba039259c7e541efaa066106e9b2c92bdded3e42884a8a02e71457f44775692a1c4fd845ff5ba8595c55ad4bb2177f975de0d22e0feac37f5c3f16426ebcd99d17c829759ac72dc1448661394d3a104999cd40cb09d086146cc92c6408ab1a0b0ad898cbfe76d4962ad0eec1c572a78f9d7342c3de64e881e99afc5b1df3227e198c79c1727a141a8a9da7ba3aae5b3e4ee59a84020191b70fa928d7ce136904c0b03c6c13391f55b381e2df7087b00932251ad7688117cd02ef5ceb5c7dda16d069de3a3e3ff2e341db15df06a96cab1ad2a51db41310ac48d572229695ca941cdfc8416b4307ac6dc176566635bc87d94557e7e4f7a14bdf86d1293c6dafe9ecc280d1a36cc6734485d41b6bd6a33e3605591d98e17fd34f901cdbc33710d768f791b9600218fed28a5d21a0e6589c7d6fb5120c8446eba3a8c8b39dddff369b30cffc0426484ef0b6f6664bec8655e040b2bb3fe3f6863c0a36fe182e3627f6ac38d23050092327f8b67beef764bc35207ed73e4850b43a229d48105d3649c45dc658e27b964b149f978b884268e69a4b353a06e473da3dc7d94c93f7070aae7f3cd2b422840ae55105a6ade053b47b2c72f8b7bad5edc52bc6a8daae76922517e6e3f19b82c5a286e7bfc7254d764ddb79c612e91e1bc61927ad424d1914043a6aacfecb7c90ffb16797349a1ec02de9585b51f19da3a0665f484826f77759234b4b4b7ebf0e176fde2571abc3d4714b543000a1726743dc9e0e6c0bc393b25300287603f47464988eed454ca2dc4377c4c1056f688aa1b5a40d380ba787e962f5cbb902db29a084e305b68f289df8112d19b9a34a32b76a827aa607eb306982aa8aa071c3909c9d1120a0e15a041524eeb12cba62e0378ffcfdf14821710c0d767e32e6a1bd09e76e4f6f9fe4843a967bd633a5fae28a3ae1f64861df70aec3c0cff134a5c8609f011686a430a0c7ef3a36a34a36e0d401b51e51c7eb6e8d13e8616f8c40f0bea3ed9c2b722e141567dbb558da1d7c509ee205b2e9936702b79cec40270398b97dc3525bad7b6809aece6cbe80728c4a188935aaad9edf706a557b84614741259345dfcff830299c640ab3cc534bc1ed744b3a935bb2943e4f8582600394b43269bb94b7c8b6de766770c43b96b04d59d6bb15831fe0bfbc0bb930141d0bd64c280c0a42f49380dd315adab35a4ebaa081ae1f736669156088e2d07670169ec89b85fe4149362135b290336c20451330a968e457c1c8b30ba6ee5ec335b9356a84a19dd459d49ed0b12f730289c24565d2ab0c1d5ed68fb4fa92800c8be4eba970913dd2cec7cfc1617ef0b3f7cae1d2979d2944bcdc375cf0c16a86ac6d5ed98a8d9405b674108f0bfb16b9c0408b134bec0df951bbf261ebc0be30ef15321bf82a6a482bc02db237e1a3d0c401316082ba674962a819d73671829f329b67dd5fcf3715fe6219fbf3631d265a5f0c7cfc3c107e469a55318357fc4f5f28fe48c534025fe0c1f06fa815987b7e1f5acd5a16fdd1c0dccb18d1047f8fb837affeb16dffbf91e01ea904571b21a1c0ac3cab6054314a7becb4188c96596258661a8eb71fcb374ada50b4c8e381f8e76a6b56a9e20a04ecf87445eb164760a4b9abcf96be310a9e0c2ac067f3be2bc05aeb0e91e9998bd1be01c68ce885edb372ca48d8518b45ecce90e2144c2356ceac563bfb4735ce0f21427bec2f728798578ef3c83e0a9ec0e16c4bb1ee24e99ca4dec6888eec3727702e058a3e0d5b8d5a72819b5b9dedd5e698ddb1f4542bd19f6cfdfe62cc179c7ee17307d2d8868c61d061a9310b8a037009017d24dcc6137f79926e20ff015cef3de464c2a9774b1db06a885782ac5abfcd1d48a0d65cdb898d3acaf6fbe347d4a80c9455cf7f16d8c890bc629b5d28d669e74db300023471c887f718ad5e7150890e7fdb8c78f2e63f727b205c71640840bedc58f9a52445ea55b95a6b7ddb7919e64728f716ad19c416fb51bac0e3535ff50a16acf7bdfe8066d519ce21ca4a17e4008c00b9f21c72f718d4de2d0cbeff5ca13032d498540478685bc7e45b4d5773c28acc39e58737dc2a3c907bef44e3e2af584fc7aac8f0e7d82fffc341cc984a9a7523de2ef72970646ce8b0d608315d888cc7cfa0f32d1d8da8aa646d9ad12b5dbe8049178b1ffe3bd13183d76dd06073cbca93685f096d8aedfde7c16060ca6bf3d14a24fcfa073673d77321ebfb290b2e92ea026e69ac6881a94e9ebc9b8ddb799ffb8ee771b7951312cc110a1c99a06529c0a0775b830805c54367001ceb69dcf5ab6a11d197bf1d170f686d53ec1b9635db856fd27b92e966f6c6a59ba8bb1ba812937d1b1e68193b3d7e4b213f7eb2a716717a73db04dd22878bfc34646499ded4a7acbffe6694bbae40635e6f0f322dc1662eb7e34b5a1f4a19c0c77bf2faa29b4aa2e2bb88238302cebc0210674473a3a440ddd1ce34317d74638acef8f6b8e471568887a6192a9ddf7c9d003e4890e4390a05bb5a0de8ca6ee7cebe360e6a7b326b3bf56f08fe8732fe8cf56781054ee56db70b45719f40b529d9cc9ff65362fae742c19b958cced92dac22a880ed6def03c3729612bb0ee34ff18557087a103474eff4f8066f8f25379a4d823f95718afbe5601a613abf3af27d247c88fba62280e904c4038fd8b370018a103693091ad3a44fb8be1e73fe9651c8beb51d70f945ca6ac32585b1a693b2d4598178839c10a7e60553fc83122647c5853e31bdef3a1b304da02a5b6df5d37217749c03467024a70703e32d0ec971ce4a8bab10b7a5a12303a7db83526a7fa3c4ec9fc6e125089c05f3a16e7be89249495e5b20cd6857c93378f524d0c46894e595ee76e301bd6da1743ae4e7e750ad8c4f0282f0bbf12e90383af5796e447fee78e302cf46e3a45126fd59d49a624f7033caeac61d49e147d5ed8e85a90c8914efbdfe2bebdf2ae19b58ce9b61684697dc6f0c65088437df7ec3810724ad7a021ec82b0351826dad927acd1a0662f7fc0278bcfcaafa11315bf5121d1b62f0f0471c54052bee73f2b1fb4139243a6d8de170c80604eadab39021306ff9cf5ce751af1fef52e232fc7c64247e32119e4de98d076b0dc84cf918100d8d3ebff83abefee2353acd133612e3815b8ae14d4f0d1006152807e3b42e035b9a62b58d64706730809a21440c7a9ea228ee033abf7cff2343fc4360b541311fa9ad18110be064ccab41436ca6560081111528dd2eb46a961392f024026d127b5836466fdfba1078b1a89f4c88bf8244b640da376a81142db5b1f27bc7e429cc15e6bad993f3d76f2ba3ff0815895361f20067f57fddd43f44b47375340c39283b3871a68f28b0a8166ac3ee35c8393278d5d2d3887c8a0a964f56f1769c29adbba6fbca7901415e2ab3b63f82d09caa3bf6e7f2e743aa073b57ed8a097f80c47ee546e2fe7b4f6fcbc98770fd7e9f1480517f26656171d394cf47ea395bfb995c087f93cde36b07f3507de2ae23d75b000a532c71265521631e4f8126c5eb96f15d04f183e2162ad9c967c0a1c291f1f1fc2b644271f160764af4e469823c3535ebb25cbc37f09b43fbd258b4a1d45335f162ad5f3d9e5406b671811cc0a16e76f4874041bac7b116483a0727f59a2144ca0490fb8acac82e62cba2e45442d4bf35e49f240a57f542be5df86f6942a5a4b82ff437ff2494c7837d22711aae24265a954d8b6e44b731022214e97ef1111f9bd5fde591bba1541799641670bdb290bd45c15c6b7f594179e3a81873f60e382de67bfe33ec177b64950e05706f1243388ffce2a541c5f30a72cf25623e1c35e72bdebf6d87b4684ff156efb10f96392ddb71353d8c8535173ce57ca41905afbef07ba646a067b2fd71bf3e9335e47672fb43639d7a6a4d51923243121724cb3bca92d304ba2c3fc4942b50c302f1ebb15902c5e191d0b3588df150ddb6aa67477a0046394f6ba91c38cb70d4bf5181e5e99d5c5e1fc39ed3c9b793f0520cf96831d65d51b0ecd92e3bee353b413483fa57690152bb4b524fa6d81d82f66bc2b260a40c232dabe1962f0349a078ec42ccc93bd4acbbcfe61af01388719bcf395f27c401f604684a312624820bfa594755fba5a7f61a7d59f364122398b573f37af4b0526099350b43e5bb8c42300be4f2f78a7fd5a317cb6a7cba8758d25122bb3e0fdab6d4968a668fb6db5e9a7944a78dbb0760059e1f3c2e372f28f3787c1c0163fdcf4812c48c08a381a651d4acab89797cf7a4cb1b792d049fdb4d61eb5e65e2870d94b5b23adbabb1c3e6860a021ec90e226475e5b7358199ffe783536ad7be7437b536affb32c74d5c7702b2d6eb47f3b14132bc270ee6ff482fcf6bd5125ac3b17f72e1de54f07d8f97535a0e59c5b8738c9aa630eeddb0c72d3320bf6e99eaf2b321965734106a49b82c57851f2cdbfcbe7197c3eee3a51e03beedb57a186972f0c276579c0cd429e012b3c09f697ec9a71aa074385e1a1c3d3f235bf6e72072be48d025965866667d64a9d80a18baba65ebf3594c5514dee7e4b414e72f79a47a6aab389cfdc5258d08bbb808c97e1f6e0598bc8b7935dc6faa051a95635cc31169b5b8a044a7ecdb9435b1dd5dcf7d28998cb834212777b49a02932787bd690f102fb0772284feed90aa7b5b4887c8d397c0350a010dffe01c6d35e0de2685e6dcc5e71e1542998610b12eec1cebf0bcfa4ddce0bf7b666216c1a352818e941904203dd64d7a253c9632672885e83e2bccd48410a80294a4628f24913cca629fbc5f4a5c4fa0c3c918f479c2247b8cd3768a144894ee10f41f73d18555661b68679dc09f6fb8647f85a4c752d66679468f96400f300d2636e97af596fccb3fa68038ec626d896b40b1297ab4f849dbbe109886fdb3db6cd230271a8c164be8565772125c86059dcb3aa18d40cbcc356450859b5c157f60f4c657d38c0abf8287a836ced10d852025b70000b04d6977306b5d19cac3ed6d50cf0f2a623fce68a233dd6263c0635783998d0a2da76d5080ca8aac7afe8b5750004be87b260f5c6f6dfe4ffbe55fa86924b3fae0f84e2c23f608f41e4d4e4611f22cb282d9ec2413817656806265cd4b0ec24b2ccf79235f348d5d327618c79717f4a849bf838ce3edf7b02fc27bf92abe64aded9f6f2ee8857384dbf63f88471c73cc28366c30b37361ccdb95e16523a6f65f198906b75e148e9ca78ea7e823db6ab7221697e5fc285dfb308ccfa47980e7c4bb4f6047da4cb127ba2334b6ae616098149ffb0cfd5467dc97580d838929b5363768030a59ee1b60f60194094ca8f02ba5aa3eccf7eab811a8204f6f73a886f74d0ac4669d282c7f1cfb29b26f4902f6f7e0b027b01090f362313a5ad20aa719432cea2444959d19c7889f5b3c37ae7439974bd7cb2c03279a402418600bc854b1f9456d62081a89c931b1bf427e3f495e4dcb6f85d9beb948c62a19ea47b40a00525704bda039ba87a7ea1a674da1e9d2da3878438ef4f48fb764f65841934fe0d1886714a422f1b13db25c0587f4557c042545fbae6c91aa2e9fc5a8f84b5fe90427192b0140527c56fc437be55a48d0a82d2fbb8e5254da21a3d48e5632933d1a54b3a2c0bc7ea34321640708a5790185b1f00439971d676ae6fddf92db22bc801cce738768b0618578f192fcfb4a9b9d736b61f7aeaac0ae76039ee17052f20c23754c9e3ab751a5567648eeae2de4183a7ae6d6149eeca6566a7388c3c7ff41bc7e3858978ea73dae0c9af915232f9f05308bb6b7f99fcd265a95edc4ff3ff5ccb02840c75f4d19a118deb7ef445f617bcd15a8c6fb975e51e776527eff86c7b50bcae2e3797d26237ae8e9722639decaf9489b12ad7aeaff6db3e447df91302ac942de2b6ff30b1eb506a43a0e65f02de7d512f41ee700d62b70b982d55dca30494c04a28adee874a1c7c", 0x2000, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x18082, 0x0) 8.81390509s ago: executing program 4 (id=5698): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0xffffffffffffffdc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e90937920fcba13d90af61beaa44d66a6535daf1bc35fb3af1e9197e31d26589d073c10184095fb00", 0x14}, 0x48, 0xffffffffffffffff) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r5, 0xc0040d07, &(0x7f0000000040)=0x121) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x2, 0x3, 0x9, 0x0, 0xc96e}, 0x20) close(r3) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d008dffff"}) 7.6782815s ago: executing program 5 (id=5700): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a010800000000000000000200000908000240000000030900010073797a310000000040000000030a01030000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400000006414000000"], 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) close(r1) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget$private(0x0, 0x5000, 0x4, &(0x7f000068c000/0x5000)=nil) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x1f, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, 0x0) ioctl$KVM_INTERRUPT(r7, 0x4004ae86, &(0x7f0000000240)=0x4) 7.675181373s ago: executing program 4 (id=5701): syz_usb_connect$uac3(0x5, 0xb2, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086307302040000102030109026e0003010ac007080b0002012430e50904000000010130000a2401060a0007000000090401000001023000090401010101"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, 0x0, 0x14000, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) unshare(0x22020600) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x387c02, 0x0) r5 = open(0x0, 0x60840, 0x0) fsopen(&(0x7f0000000000)='overlay\x00', 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000180)=@x86={0x3, 0x5, 0x81, 0x0, 0x9, 0xe, 0x5, 0x2, 0x1, 0x1, 0x6, 0x5, 0x0, 0x1af2, 0x3, 0x8, 0xf, 0xf4, 0x9, '\x00', 0x5, 0x8}) set_mempolicy(0x2, &(0x7f0000000000)=0x4000000ffb, 0x1000000000008) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0}]) io_setup(0x10000, &(0x7f00000014c0)) 6.552576883s ago: executing program 2 (id=5703): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x2, 0x2, 0x1000, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x1, 0xff, 0x1, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0x80ca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b5, 0x0, 0xfffffff8]}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x4, 0x7}) mkdir(&(0x7f0000000000)='./bus\x00', 0x1be) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) r8 = fsmount(r3, 0x0, 0x2) symlinkat(&(0x7f0000000280)='./file0\x00', r8, &(0x7f00000000c0)='./file0\x00') 5.6916269s ago: executing program 2 (id=5704): ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000640)=0x8) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r2, 0x0, 0x0, 0x2000c844) syz_open_dev$hiddev(&(0x7f0000000680), 0x80000000, 0x101000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0x88, r7, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_RULES={0x24, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x100}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}]}]}, @NL80211_ATTR_REG_RULES={0x30, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x80000001}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xd}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x800) ppoll(0x0, 0x0, &(0x7f0000000700)={0x77359400}, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r2, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0xf0, r0, 0x820, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x71d4}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x545}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7f}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40081}, 0x4000) 5.048274732s ago: executing program 5 (id=5705): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x68040000) socket$inet_smc(0x2b, 0x1, 0x0) fsmount(r4, 0x0, 0x1) fchdir(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, 0x0, 0x25, 0x0, @void}, 0x10) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000080)={0x3, 0xc}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0xb5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getdents64(r6, 0x0, 0x0) 4.140635925s ago: executing program 2 (id=5706): set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00', @ANYRES16=r1, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xfed024fc985380b3}, 0x4008840) socket$packet(0x11, 0x2, 0x300) r4 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r4, &(0x7f0000000200)={0x11, 0x1, 0x0, 0x1, 0x3, 0x6, @random="1e5609001000"}, 0x14) syz_emit_ethernet(0x96, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x5, 0x6, 0xa000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r7 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x26, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000240)={0x40, 0xc, 0x1, '!'}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000008c0)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}}) sysfs$3(0x3) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000380)={0x14, &(0x7f0000000280)={0x20, 0x21, 0x5b, {0x5b, 0x3d, "8e9f0647d71ae46412b613c4bb5890973ea8209c58edc39c32200deca786b0414a290f5c7ae535e197ba5d5ba41698d298bd8da8b29edae0e5b9ab32fa8e5e79993b774c76301d80a17ec2084792224da63318854027482a28"}}, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000680)={0x44, &(0x7f00000003c0)={0x40, 0x0, 0x85, "e76696bd945aaa6d49003d54518d79076359d00be68d8d4391cb0af83c96ede40c44bf3298d2a653b6ecf5b0c5e0b2793d516fc6bf016ec4731bea57f85ddba420738b957c921c4118f6540c2cddc491e66cd245822a1cc2543db99dbf1aa1b43f12ae5b6efed6c1ad32521478e8ef5ff95011eafdd5873a8b80a102c9f66963f17edfe02f"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x52}, &(0x7f0000000500)={0x20, 0x80, 0x1c, {0xa7, 0x3ff, 0x5e, 0x6, 0x5, 0x5, 0x1000, 0x9, 0x2, 0x3, 0x713, 0x6}}, &(0x7f0000000540)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000580)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000005c0)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x89, 0x2}}) 3.769677355s ago: executing program 5 (id=5707): close(0xffffffffffffffff) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) capset(&(0x7f0000000180)={0x20071026, r1}, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, 0x0, &(0x7f0000000680)='GPL\x00'}, 0x94) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0xffffffffffffffb9, 0x1, 0xfffffffffffffd77}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000780)={0x0, 0x0, 0x4, 0x0, 0x1, [], [0x0, 0x0, 0x400, 0x10000], [0x0, 0x2, 0xfffffffc], [0x1, 0x0, 0x7]}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000040)={0x0, 0x4, 0x3, 0x2, 0x1, [], [0x100, 0x6, 0xc, 0x9], [0x7fffffff, 0x80, 0xfffff7d7, 0x7], [0x10000, 0x6, 0x8000, 0xfffffffffffffffe]}) 3.404192869s ago: executing program 1 (id=5708): r0 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="2a0988f8bd86", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], "223431d5c9a46b9f"}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x49, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newtaction={0xf8, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0xe4, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x90, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3ff, 0x6, 0xffffffff, 0x3}}]}, {0x4c, 0x6, "866a611cda97e44468fefec3d93bd6e5fced18394df64c405751eece42320bbd02c40ecce9e4a5df375dd2bf1c95336756cb6e45cb29f68b31a2ee1b4e8c79a7c65581dd821bcbeb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4081}, 0x4000801) r4 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000300)={0x4000000, 0xfffffd18, 0x0, 0x2, 0x80000000}) r6 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r6, &(0x7f0000000140)=""/15, 0xf, 0x4) write(0xffffffffffffffff, &(0x7f0000000640)="240000001e005f02140c00fffffffff80700000001000000000000000500e99c", 0x20) 3.079602459s ago: executing program 2 (id=5709): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x3) shutdown(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x12082) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000340)={0x27, &(0x7f0000000140)=[{0x12, '\x00', @data=0x8, 0x9}, {0x34, '\x00', @st={0x4, [{0x3, @svalue=0xe}, {0x0, @uvalue=0x7}, {0x0, @svalue=0x7}, {0x3, @svalue=0x6}]}, 0x6}]}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0xd) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2440, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a3100000000090001007379"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r4, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)) 2.355477396s ago: executing program 4 (id=5710): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x2d01, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xff, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) writev(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000240)) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0xca, 0x0, 0x2000, 0x1}, 0x10) listen(0xffffffffffffffff, 0x7f) prlimit64(0x0, 0xe, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0xffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040f204211400000040000109022400010000b00009040100090300000009210000000122290009058103"], 0x0) 2.299292626s ago: executing program 2 (id=5711): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, r1, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x17}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x50}, 0x1, 0x0, 0x0, 0x40040c0}, 0x8000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r3, 0x80044dfd, &(0x7f00000000c0)) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r4, 0xc4c03d09, &(0x7f0000000340)={0x2}) r5 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r5, 0x80079a3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) getpid() r6 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) 1.058380127s ago: executing program 1 (id=5712): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x2c, 0xb, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008008}, 0x4800) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) gettid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) write$sysctl(r4, &(0x7f0000000040)='2\x00', 0x2) openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x400) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) munlockall() r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) close_range(r1, 0xffffffffffffffff, 0x0) 1.00581175s ago: executing program 5 (id=5713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount_setattr(0xffffffffffffff9c, 0x0, 0x200, 0x0, 0x0) getsockname(r3, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x81f) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000500)={0xffffffffffffffff, &(0x7f0000000180)}, 0x20) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x400, 0x2, 0x14a, 0x0, r7}, &(0x7f0000000180), &(0x7f0000000080), &(0x7f0000000140)) 280.643032ms ago: executing program 2 (id=5714): openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000400000002000000000000d54a308a000c000c400000000000000003"], 0x44}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0xc004054}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d400000000010104000000000000000002000000"], 0xd4}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174005c000000060a010400000000000000000100000008000b40000000000900010073797a30000000003400048030000180080001006e6174002400028008000240679349b9080004400000000c0800034000000009080001"], 0xec}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x134}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000002940), 0x40000000000017d, 0x888) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)) 0s ago: executing program 5 (id=5715): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000353000/0x2000)=nil, 0x2000, 0x2000000, 0x500, 0x2000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x1a8, 0x111, 0x4b4, 0x0, 0x700, 0x2b0, 0x278, 0x278, 0x2b0, 0x278, 0x3, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @empty, [0x0, 0x0, 0x0, 0xff0000ff], [0x1fffffffe, 0x0, 0xffffff00, 0xff], 'vlan0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x6}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x67, 0x40}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)}, 0x240440c4) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0x11, 0x148, 0x160, 0x0, 0x1f0, 0x2a8, 0x2a8, 0x1f0, 0x2a8, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0xff000000, 'geneve1\x00', 'dvmrp0\x00', {}, {0xff}, 0x2e, 0x3, 0x2}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x9}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x2, 0x1, 0x2, 0x3, 0x3], 0x1, 0x4}, {0xffffffffffffffff, [0x4, 0x7, 0x0, 0x7, 0x1, 0x4], 0x2, 0x7}}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) syz_clone(0x20091, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCH_MFLUSH(r5, 0x9208, 0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB]) kernel console output (not intermixed with test programs): device netdevsim0 [ 1482.192336][T24125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1482.211139][T24125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1482.231952][T24125] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1482.245027][T24125] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1482.253807][T24125] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1482.294149][ T139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.337865][T16845] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1482.353028][T16845] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1482.362178][ T5733] netdevsim0 speed is unknown, defaulting to 1000 [ 1482.363591][T16845] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1482.405600][T16845] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1482.554079][ T5875] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1482.562786][ T5875] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1482.571789][T24146] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1482.581700][ T30] audit: type=1400 audit(1785333531.519:10380): avc: denied { shutdown } for pid=24143 comm="syz.5.4730" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1482.594182][T24082] lo speed is unknown, defaulting to 1000 [ 1482.725946][ T30] audit: type=1400 audit(1785333531.659:10381): avc: denied { wake_alarm } for pid=24152 comm="syz.2.4733" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1482.803687][ T139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.012693][T24135] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1483.206985][ T139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.446822][T24082] lo speed is unknown, defaulting to 1000 [ 1483.458383][ T5874] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1483.473864][ T5874] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1483.483168][T22794] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1483.502167][T24082] netdevsim0 speed is unknown, defaulting to 1000 [ 1483.614971][ T5608] Bluetooth: hci5: command tx timeout [ 1483.781432][T21734] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1483.883260][ T139] pim6reg: left allmulticast mode [ 1483.992005][T17053] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1484.585846][ T139] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1484.649192][ T139] geneve2 (unregistering): left allmulticast mode [ 1484.969439][ T139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1484.997066][ T139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1485.013528][ T139] bond0 (unregistering): Released all slaves [ 1485.031518][ T139] bond1 (unregistering): Released all slaves [ 1485.074580][ T139] bond2 (unregistering): Released all slaves [ 1485.118647][ T139] bond3 (unregistering): Released all slaves [ 1485.189650][T24174] bridge1: entered promiscuous mode [ 1485.195064][T24174] bridge1: entered allmulticast mode [ 1485.702101][ T5608] Bluetooth: hci5: command tx timeout [ 1485.793786][T24202] RGB/YUV Input: ================= START STATUS ================= [ 1485.820909][T24201] zram0: detected capacity change from 0 to 8 [ 1485.843897][T24202] RGB/YUV Input: Test Pattern: 75% Colorbar [ 1485.873407][T24202] RGB/YUV Input: Show Information: All [ 1485.903991][T24202] RGB/YUV Input: Vertical Flip: false [ 1485.916797][T24202] RGB/YUV Input: Horizontal Flip: false [ 1485.922935][T24202] RGB/YUV Input: Brightness: 128 [ 1485.928833][T24202] RGB/YUV Input: Contrast: 128 [ 1485.934330][T24202] RGB/YUV Input: Hue: 0 [ 1485.939907][T24202] RGB/YUV Input: Saturation: 128 [ 1485.953456][T24202] RGB/YUV Input: Pixel Rate: 160000000 [ 1485.959178][T24082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.966911][T24082] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.974864][T24082] bridge_slave_0: entered allmulticast mode [ 1485.981114][T24202] RGB/YUV Input: Horizontal Blanking: 800 [ 1485.981164][T24202] RGB/YUV Input: Vertical Blanking: 3223 [ 1485.981196][T24202] RGB/YUV Input: ================== END STATUS ================== [ 1486.004949][T24082] bridge_slave_0: entered promiscuous mode [ 1486.015994][T24082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.023882][T24082] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.037972][T24082] bridge_slave_1: entered allmulticast mode [ 1486.047749][T24082] bridge_slave_1: entered promiscuous mode [ 1486.151108][T15999] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1486.637598][T24082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1486.649137][T24082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1486.678562][T24082] team0: Port device team_slave_0 added [ 1486.686238][T24082] team0: Port device team_slave_1 added [ 1486.729432][ T30] audit: type=1400 audit(1785333535.659:10382): avc: denied { unlink } for pid=24211 comm="syz.2.4747" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1486.768559][T15999] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 1486.786564][T15999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.795704][T24082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1486.803133][T24082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1486.837943][T15999] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 1487.061208][T24082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1487.178736][T15999] usb 6-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 1487.188008][T15999] usb 6-1: Falling back to sysfs fallback for: emi26/loader.fw [ 1487.223437][T24082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1487.260745][T24219] firmware emi26!loader.fw: firmware_loading_store: unexpected value (0) [ 1487.270056][T24082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1487.297532][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1487.321811][T15999] usb 6-1: emi26_load_firmware - request_firmware() failed [ 1487.329734][T15999] usb 6-1: emi26_load_firmware - error loading firmware: error = -2 [ 1487.339080][T15999] emi26 - firmware loader 6-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 1487.359935][T24082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1487.507130][T24082] hsr_slave_0: entered promiscuous mode [ 1487.513572][T24082] hsr_slave_1: entered promiscuous mode [ 1487.519751][T24082] debugfs: 'hsr0' already exists in 'hsr' [ 1487.526185][T24082] Cannot create hsr debugfs directory [ 1487.540608][ T5875] syzkaller0: tun_net_xmit 76 [ 1487.547041][ T5875] syzkaller0: tun_net_xmit 48 [ 1487.561206][T17053] syzkaller0: tun_net_xmit 76 [ 1487.605250][T24221] syzkaller0: create flow: hash 1984841048 index 1 [ 1487.713284][T17053] usb 6-1: USB disconnect, device number 10 [ 1487.772347][ T5608] Bluetooth: hci5: command tx timeout [ 1487.931543][T24183] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1487.961358][T15999] syzkaller0: tun_net_xmit 76 [ 1488.019622][T24220] syzkaller0: delete flow: hash 1984841048 index 1 [ 1488.388806][T24229] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4752'. [ 1488.591253][T24233] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24233 comm=syz.5.4752 [ 1490.743619][T24257] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4759'. [ 1490.989499][T24267] geneve3: entered promiscuous mode [ 1491.011177][T24267] geneve3: entered allmulticast mode [ 1491.258121][ T139] hsr_slave_0: left promiscuous mode [ 1491.282207][ T30] audit: type=1400 audit(1785333540.209:10383): avc: denied { write } for pid=24247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1491.312554][ T139] hsr_slave_1: left promiscuous mode [ 1491.324366][ T139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1491.348953][ T139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1491.507513][ T30] audit: type=1400 audit(1785333540.439:10384): avc: denied { write } for pid=24283 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1492.217402][ T5270] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1492.327912][ T9633] smbdirect: ib_dev[syz0] removed [ 1492.652088][T24303] syzkaller0: entered promiscuous mode [ 1492.677462][T24303] syzkaller0: entered allmulticast mode [ 1492.776216][T24292] tipc: Started in network mode [ 1492.809186][T24292] tipc: Node identity a6e3c22fb804, cluster identity 4711 [ 1492.851272][T24292] tipc: Enabled bearer , priority 0 [ 1492.910447][T24082] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1492.955949][T24082] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1492.981969][T24290] tipc: Resetting bearer [ 1493.037931][T24290] tipc: Disabling bearer [ 1493.076006][T24082] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1493.128808][T24082] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1493.169324][T24082] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1493.217409][T24082] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1493.259801][T24082] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1493.327739][T24082] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1493.340129][T24318] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4770'. [ 1493.351441][ T30] audit: type=1400 audit(1785333542.279:10385): avc: denied { write } for pid=24305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1493.403431][ T139] IPVS: stop unused estimator thread 0... [ 1493.509199][ T30] audit: type=1400 audit(1785333542.439:10386): avc: denied { write } for pid=24324 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1493.647852][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1493.797356][T24082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1493.905142][T24341] netlink: 'syz.1.4773': attribute type 1 has an invalid length. [ 1494.039456][T24341] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1494.097848][T24082] 8021q: adding VLAN 0 to HW filter on device team0 [ 1494.154242][T24350] bond5: (slave gretap1): making interface the new active one [ 1494.166218][T24350] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1494.179250][ T9633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.186325][ T9633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1494.266626][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.273768][ T5874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1494.526753][ T30] audit: type=1400 audit(1785333543.459:10387): avc: denied { write } for pid=24362 comm="syz.1.4777" name="functions" dev="configfs" ino=74331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1494.540139][T24363] file system registered [ 1494.699106][T24373] netlink: 'syz.4.4779': attribute type 1 has an invalid length. [ 1494.715090][ T30] audit: type=1400 audit(1785333543.649:10388): avc: denied { mount } for pid=24362 comm="syz.1.4777" name="/" dev="functionfs" ino=85216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 1494.808868][ T30] audit: type=1400 audit(1785333543.729:10389): avc: denied { unmount } for pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 1494.874180][ T5606] ffs_data_put(): freeing [ 1494.883970][ T30] audit: type=1400 audit(1785333543.799:10390): avc: denied { write } for pid=24349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1494.891435][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1495.177798][ T30] audit: type=1400 audit(1785333544.109:10391): avc: denied { write } for pid=24386 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1495.767542][T24397] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4783'. [ 1495.780477][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1496.031928][T24082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1496.482701][T24428] binder_alloc: 24427: pid 24427 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1497.230217][ T30] audit: type=1400 audit(1785333546.089:10392): avc: denied { write } for pid=24403 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1497.406434][ T5607] Bluetooth: hci5: command 0x0405 tx timeout [ 1497.481285][ T30] audit: type=1400 audit(1785333546.399:10393): avc: denied { connect } for pid=24436 comm="syz.4.4790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1497.520886][T24082] veth0_vlan: entered promiscuous mode [ 1497.550375][T24082] veth1_vlan: entered promiscuous mode [ 1497.573015][T24441] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4792'. [ 1497.582365][ T30] audit: type=1400 audit(1785333546.409:10394): avc: denied { write } for pid=24436 comm="syz.4.4790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1497.715701][T24082] veth0_macvtap: entered promiscuous mode [ 1498.002595][T24082] veth1_macvtap: entered promiscuous mode [ 1498.055615][T24082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1498.083287][T24082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1498.101791][T19552] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.106394][T24446] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4794'. [ 1498.110903][T19552] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.154723][T24448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1498.274269][ T5875] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.317804][ T5875] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1498.504916][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1498.548806][T24454] wlan1: associating to AP 50:50:50:50:50:50 with corrupt beacon [ 1498.903387][ T5875] wlan1: associate with 50:50:50:50:50:50 (try 1/3) [ 1498.913776][ T5875] wlan1: associate with 50:50:50:50:50:50 (try 2/3) [ 1498.928055][ T5875] wlan1: associate with 50:50:50:50:50:50 (try 3/3) [ 1498.958762][ T5875] wlan1: association with 50:50:50:50:50:50 timed out [ 1499.121932][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1499.146774][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1499.286573][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1499.299653][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1499.322542][T24477] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4801'. [ 1500.215384][T24487] syzkaller0: entered promiscuous mode [ 1500.260920][T24487] syzkaller0: entered allmulticast mode [ 1502.931439][T16845] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1502.973902][T16845] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1503.277672][T16845] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.318832][T16845] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1503.517870][T16845] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.529013][T16845] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1504.318714][T16845] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.354937][T16845] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1504.558246][T24569] netlink: 'syz.6.4823': attribute type 1 has an invalid length. [ 1504.647361][T24569] ipvlan2: entered allmulticast mode [ 1504.665994][T24569] team0: entered allmulticast mode [ 1504.676236][T24569] team_slave_0: entered allmulticast mode [ 1504.704584][T24569] team_slave_1: entered allmulticast mode [ 1504.812534][T24574] bridge1: entered allmulticast mode [ 1504.838840][T24574] team0: Port device bridge1 added [ 1505.669995][T16845] vlan2: left allmulticast mode [ 1505.738507][T16845] geneve0: left allmulticast mode [ 1505.756830][T16845] vlan2: left promiscuous mode [ 1505.773229][T16845] geneve0: left promiscuous mode [ 1505.790236][T16845] bridge0: port 3(vlan2) entered disabled state [ 1505.855010][T16845] bridge_slave_1: left allmulticast mode [ 1505.872610][T16845] bridge_slave_1: left promiscuous mode [ 1505.889632][T24564] xt_nat: multiple ranges no longer supported [ 1505.894410][T16845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1505.939448][T16845] bridge_slave_0: left allmulticast mode [ 1505.962216][T16845] bridge_slave_0: left promiscuous mode [ 1505.977300][T16845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1505.992304][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1505.992318][ T30] audit: type=1400 audit(1785333554.919:10396): avc: denied { ioctl } for pid=24597 comm="syz.6.4831" path="socket:[86543]" dev="sockfs" ino=86543 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1506.395384][T16845] bond4 (unregistering): (slave geneve3): Releasing active interface [ 1506.403727][T16845] geneve3 (unregistering): left allmulticast mode [ 1506.417411][T16845] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1506.450778][T16845] batman_adv: batadv0: Removing interface: vxlan0 [ 1506.463077][T16845] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1506.474393][T16845] bridge0 (unregistering): left allmulticast mode [ 1506.519068][T16845] bond5 (unregistering): (slave bond0): Releasing active interface [ 1506.547214][T16845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1506.576545][T16845] bond_slave_0: left allmulticast mode [ 1506.591557][T16845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1506.603790][T16845] bond_slave_1: left allmulticast mode [ 1506.610051][T16845] bond0 (unregistering): Released all slaves [ 1506.626379][T16845] bond1 (unregistering): Released all slaves [ 1506.643260][T16845] bond2 (unregistering): Released all slaves [ 1506.668874][T16845] bond3 (unregistering): Released all slaves [ 1506.710462][T16845] bond4 (unregistering): Released all slaves [ 1506.784278][T16845] bond5 (unregistering): Released all slaves [ 1506.987015][T24601] syzkaller1: entered promiscuous mode [ 1506.998290][T24601] syzkaller1: entered allmulticast mode [ 1507.940887][T24648] syzkaller0: entered promiscuous mode [ 1507.951246][T24648] syzkaller0: entered allmulticast mode [ 1508.018913][ T30] audit: type=1400 audit(1785333556.949:10397): avc: denied { write } for pid=24627 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1508.520251][T21200] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1508.643065][T21200] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1508.888430][T24656] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4840'. [ 1509.008486][ T30] audit: type=1400 audit(1785333557.939:10398): avc: denied { write } for pid=24657 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1509.400272][ T5270] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1509.611933][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1509.857423][T16845] hsr_slave_0: left promiscuous mode [ 1509.869453][T16845] hsr_slave_1: left promiscuous mode [ 1509.888709][T16845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1509.919725][T16845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1509.941468][T16845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1509.956497][ T30] audit: type=1400 audit(1785333558.889:10399): avc: denied { connect } for pid=24688 comm="syz.5.4844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1509.963817][T16845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1510.007634][T16845] veth1_macvtap: left promiscuous mode [ 1510.024195][T16845] veth0_macvtap: left promiscuous mode [ 1510.029905][ T30] audit: type=1400 audit(1785333558.959:10400): avc: denied { bind } for pid=24694 comm="syz.4.4845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1510.035929][T16845] veth1_vlan: left promiscuous mode [ 1510.054954][T16845] veth0_vlan: left promiscuous mode [ 1510.062544][ T30] audit: type=1400 audit(1785333558.959:10401): avc: denied { listen } for pid=24694 comm="syz.4.4845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1510.736017][T24719] syzkaller0: entered promiscuous mode [ 1510.743343][ T30] audit: type=1400 audit(1785333559.679:10402): avc: denied { unmount } for pid=24713 comm="syz.2.4850" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1510.752278][T24719] syzkaller0: entered allmulticast mode [ 1510.867543][ T30] audit: type=1400 audit(1785333559.799:10403): avc: denied { write } for pid=24702 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1510.903272][T24730] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4854'. [ 1510.939592][T24726] syzkaller0: entered promiscuous mode [ 1510.951115][T24726] syzkaller0: entered allmulticast mode [ 1510.983627][ T30] audit: type=1400 audit(1785333559.919:10404): avc: denied { write } for pid=24732 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1511.072189][T24726] tipc: Started in network mode [ 1511.124533][T24726] tipc: Node identity ee24fd30aeae, cluster identity 4711 [ 1511.167827][T24726] tipc: Enabled bearer , priority 0 [ 1511.219978][T24725] tipc: Resetting bearer [ 1511.395927][T24725] tipc: Disabling bearer [ 1511.585791][ T5270] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1512.586193][T24777] smc: net device lo applied user defined pnetid SYZ0 [ 1512.596085][ T30] audit: type=1400 audit(1785333561.529:10405): avc: denied { bind } for pid=24776 comm="syz.2.4861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1512.617756][ T30] audit: type=1400 audit(1785333561.549:10406): avc: denied { listen } for pid=24776 comm="syz.2.4861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1512.638531][ T30] audit: type=1400 audit(1785333561.549:10407): avc: denied { accept } for pid=24776 comm="syz.2.4861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1512.671064][ T30] audit: type=1400 audit(1785333561.599:10408): avc: denied { write } for pid=24752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1512.758739][ T30] audit: type=1400 audit(1785333561.689:10409): avc: denied { write } for pid=24784 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1512.794901][ T5270] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1513.392796][ T30] audit: type=1400 audit(1785333562.319:10410): avc: denied { connect } for pid=24795 comm="syz.5.4865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1513.855550][ T30] audit: type=1400 audit(1785333562.779:10411): avc: denied { write } for pid=24819 comm="syz.6.4869" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1513.949555][ T30] audit: type=1400 audit(1785333562.789:10412): avc: denied { ioctl } for pid=24819 comm="syz.6.4869" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7c02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1514.047471][ T30] audit: type=1400 audit(1785333562.979:10413): avc: denied { write } for pid=24798 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1514.188030][ T30] audit: type=1400 audit(1785333563.119:10414): avc: denied { write } for pid=24828 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1514.343069][ T5270] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1514.651144][ T5733] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1514.814476][ T5733] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1514.887173][ T5733] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1514.935724][ T5733] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 1514.996992][ T5733] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1515.037790][T24851] syzkaller0: entered promiscuous mode [ 1515.054124][T24851] syzkaller0: entered allmulticast mode [ 1515.084069][ T5733] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1515.100332][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.136687][ T5733] usb 2-1: Product: syz [ 1515.164907][ T5733] usb 2-1: Manufacturer: syz [ 1515.175602][ T5733] usb 2-1: SerialNumber: syz [ 1516.068458][ T5733] usb 2-1: USB disconnect, device number 38 [ 1517.218967][T24882] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4879'. [ 1517.338914][T24885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4880'. [ 1517.812023][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1517.812038][ T30] audit: type=1400 audit(1785333566.749:10421): avc: denied { write } for pid=24890 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1518.942878][ T30] audit: type=1400 audit(1785333567.869:10422): avc: denied { write } for pid=24909 comm="syz.6.4886" name="functions" dev="configfs" ino=74331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1519.055756][ T30] audit: type=1400 audit(1785333567.909:10423): avc: denied { write } for pid=24909 comm="syz.6.4886" name="c.1" dev="configfs" ino=80557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1520.029400][ T30] audit: type=1400 audit(1785333567.909:10424): avc: denied { write } for pid=24909 comm="syz.6.4886" name="c.1" dev="configfs" ino=80557 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1520.382498][ T30] audit: type=1400 audit(1785333569.089:10425): avc: denied { name_connect } for pid=24923 comm="syz.6.4887" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 1520.484467][T24932] fuse: fd is not a fuse device [ 1520.494279][T24931] serio: Serial port ptm0 [ 1520.505885][ T30] audit: type=1400 audit(1785333569.439:10426): avc: denied { write } for pid=24902 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1520.648609][T24942] fuse: fd is not a fuse device [ 1520.681907][ T30] audit: type=1400 audit(1785333569.609:10427): avc: denied { write } for pid=24935 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1520.752746][ T30] audit: type=1400 audit(1785333569.619:10428): avc: denied { remount } for pid=24940 comm="syz.4.4891" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1522.576742][ T30] audit: type=1400 audit(1785333571.499:10429): avc: denied { write } for pid=24956 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1522.913956][ T30] audit: type=1400 audit(1785333571.839:10430): avc: denied { write } for pid=24987 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1523.071201][ T5733] IPVS: starting estimator thread 0... [ 1523.261120][T24996] IPVS: using max 42 ests per chain, 100800 per kthread [ 1523.489354][T25009] tipc: Enabling of bearer rejected, failed to enable media [ 1524.615539][T25033] batman_adv: batadv0: Adding interface: macvtap0 [ 1524.692291][T25033] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1524.994582][T25033] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 1526.083339][T25035] batman_adv: batadv0: Removing interface: macvtap0 [ 1526.507556][T25083] binder: 25075:25083 unknown command 0 [ 1526.519082][T25083] binder: 25075:25083 ioctl c0306201 2000000001c0 returned -22 [ 1527.324608][T25089] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1529.129910][ T30] audit: type=1400 audit(1785333578.059:10431): avc: denied { write } for pid=25115 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1530.146898][ T30] audit: type=1400 audit(1785333578.909:10432): avc: denied { write } for pid=25140 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1531.555152][T25167] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[5606] was attempted by " [ 1532.721079][ T5733] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1533.009198][T25185] netlink: 276 bytes leftover after parsing attributes in process `syz.5.4943'. [ 1533.079411][T25185] tipc: Enabling of bearer rejected, failed to enable media [ 1533.342909][ T5733] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1533.345684][T25201] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4946'. [ 1533.359578][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1533.374867][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1533.379573][T25202] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4947'. [ 1533.387863][ T5733] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1533.405090][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.425711][ T5733] usb 2-1: Product: syz [ 1533.504583][ T5733] usb 2-1: Manufacturer: syz [ 1533.512343][ T5733] usb 2-1: SerialNumber: syz [ 1533.531471][T25202] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4947'. [ 1533.784043][T25202] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4947'. [ 1533.813858][ T5733] usb 2-1: config 0 descriptor?? [ 1538.183675][T25253] syzkaller0: entered promiscuous mode [ 1538.228557][T25253] syzkaller0: entered allmulticast mode [ 1538.296545][T25264] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4961'. [ 1538.512868][T25268] trusted_key: syz.2.4962 sent an empty control message without MSG_MORE. [ 1539.051114][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1540.340242][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1540.849538][ T30] audit: type=1400 audit(1785333589.779:10433): avc: denied { write } for pid=25250 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1541.698899][ T30] audit: type=1400 audit(1785333590.619:10434): avc: denied { write } for pid=25298 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1541.750088][T25302] syzkaller0: entered promiscuous mode [ 1541.814967][T25302] syzkaller0: entered allmulticast mode [ 1542.258538][T25321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4970'. [ 1544.528120][T25340] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[24082] was attempted by " [ 1544.954723][ T5733] iguanair 2-1:0.0: failed to get version [ 1545.229898][ T5733] iguanair 2-1:0.0: probe with driver iguanair failed with error -110 [ 1545.261966][ T5733] usb 2-1: USB disconnect, device number 39 [ 1546.467521][ T30] audit: type=1400 audit(1785333595.379:10435): avc: denied { write } for pid=25318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1546.781098][ T30] audit: type=1400 audit(1785333595.709:10436): avc: denied { write } for pid=25371 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1547.227768][ T30] audit: type=1400 audit(1785333596.149:10437): avc: denied { map } for pid=25365 comm="syz.1.4980" path="socket:[87577]" dev="sockfs" ino=87577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1547.257443][ T30] audit: type=1400 audit(1785333596.149:10438): avc: denied { read write } for pid=25365 comm="syz.1.4980" path="socket:[87577]" dev="sockfs" ino=87577 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1547.510804][ T30] audit: type=1400 audit(1785333596.439:10439): avc: denied { ioctl } for pid=25389 comm="syz.5.4984" path="socket:[87591]" dev="sockfs" ino=87591 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1547.591036][T25393] cgroup: Invalid name [ 1547.877701][ T30] audit: type=1400 audit(1785333596.809:10440): avc: denied { bind } for pid=25391 comm="syz.4.4985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1549.929482][ T30] audit: type=1400 audit(1785333598.859:10441): avc: denied { write } for pid=25388 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1550.269560][ T30] audit: type=1400 audit(1785333599.199:10442): avc: denied { write } for pid=25428 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1551.373476][T25445] syzkaller0: entered promiscuous mode [ 1551.389207][T25445] syzkaller0: entered allmulticast mode [ 1552.693975][T25472] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5004'. [ 1552.707269][ T30] audit: type=1400 audit(1785333601.639:10443): avc: denied { mount } for pid=25468 comm="syz.2.5003" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1553.186071][T25469] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 1553.203334][ T30] audit: type=1400 audit(1785333602.139:10444): avc: denied { relabelto } for pid=25468 comm="syz.2.5003" name="1001" dev="tmpfs" ino=5321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 1553.244815][ T30] audit: type=1400 audit(1785333602.139:10445): avc: denied { associate } for pid=25468 comm="syz.2.5003" name="1001" dev="tmpfs" ino=5321 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 1553.604906][ T30] audit: type=1400 audit(1785333602.509:10446): avc: denied { write } for pid=25486 comm="syz.6.5007" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 1553.680718][T25490] [ 1553.682124][T25490] &…ŽaAªmMvžéŒÒõRçŒj‰ÒOŠß¯ÜU9ŸèS‘‰ [ 1553.686235][ T30] audit: type=1400 audit(1785333602.619:10447): avc: denied { getopt } for pid=25486 comm="syz.6.5007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1554.300662][T25501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5012'. [ 1554.551035][ T5734] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1554.609257][T25506] tipc: Enabling of bearer rejected, failed to enable media [ 1554.725305][ T5734] usb 6-1: Using ep0 maxpacket: 8 [ 1554.732181][ T5734] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1554.862869][ T5734] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1554.872528][ T5734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.892045][ T5734] usb 6-1: config 0 descriptor?? [ 1554.913133][ T5734] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 1555.370477][ T30] audit: type=1400 audit(1785333604.299:10448): avc: denied { ioctl } for pid=25503 comm="syz.5.5010" path="socket:[88703]" dev="sockfs" ino=88703 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1555.375763][ T5734] usb 6-1: USB disconnect, device number 11 [ 1555.519971][ T30] audit: type=1400 audit(1785333604.449:10449): avc: denied { write } for pid=25529 comm="syz.6.5018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1555.593111][T25535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5019'. [ 1558.038930][ T30] audit: type=1400 audit(1785333606.969:10450): avc: denied { create } for pid=25563 comm="syz.5.5027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1558.164637][ T30] audit: type=1400 audit(1785333607.099:10451): avc: denied { bind } for pid=25563 comm="syz.5.5027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1560.371225][ T5733] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1560.521105][ T5733] usb 6-1: device descriptor read/64, error -71 [ 1560.771043][ T5733] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1561.756301][ T5733] usb 6-1: device descriptor read/64, error -71 [ 1561.901360][ T5733] usb usb6-port1: attempt power cycle [ 1562.091823][T21734] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1562.551248][ T5733] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1562.581481][ T5733] usb 6-1: device descriptor read/8, error -71 [ 1562.621033][T21734] usb 7-1: device descriptor read/64, error -71 [ 1562.851156][ T5733] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1563.329285][T21734] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1563.372637][ T5733] usb 6-1: device descriptor read/8, error -71 [ 1563.482167][ T5733] usb usb6-port1: unable to enumerate USB device [ 1563.511092][T21734] usb 7-1: device descriptor read/64, error -71 [ 1563.641257][T21734] usb usb7-port1: attempt power cycle [ 1563.924678][T25647] syzkaller0: entered promiscuous mode [ 1563.955825][T25647] syzkaller0: entered allmulticast mode [ 1564.187175][T25658] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 1567.556065][ T30] audit: type=1400 audit(1785333616.489:10452): avc: denied { create } for pid=25685 comm="syz.4.5060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1567.881263][ T30] audit: type=1400 audit(1785333616.729:10453): avc: denied { name_connect } for pid=25689 comm="syz.1.5061" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1568.325251][ T30] audit: type=1400 audit(1785333617.249:10454): avc: denied { write } for pid=25685 comm="syz.4.5060" path="socket:[89552]" dev="sockfs" ino=89552 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1570.299975][ T30] audit: type=1400 audit(1785333617.289:10455): avc: denied { recv } for pid=23 comm="ksoftirqd/1" saddr=10.128.0.169 src=30006 daddr=10.128.0.219 dest=39360 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1571.341062][T25745] macsec1: entered promiscuous mode [ 1571.356460][T25745] virt_wifi0: entered promiscuous mode [ 1576.881039][ T5733] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1577.013721][T25825] lo speed is unknown, defaulting to 1000 [ 1577.073992][ T5733] usb 7-1: Using ep0 maxpacket: 32 [ 1577.087883][ T5733] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1577.120149][ T5733] usb 7-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1577.141031][ T5733] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.160126][ T5733] usb 7-1: Product: syz [ 1577.164565][ T5733] usb 7-1: Manufacturer: syz [ 1577.174439][ T5733] usb 7-1: SerialNumber: syz [ 1577.192724][ T5733] usb 7-1: config 0 descriptor?? [ 1577.416062][ T5607] Bluetooth: hci5: unexpected event for opcode 0x1001 [ 1577.419706][ T5734] usb 7-1: USB disconnect, device number 5 [ 1577.475287][T25825] netdevsim0 speed is unknown, defaulting to 1000 [ 1577.648355][T25837] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5091'. [ 1577.756716][T25840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5092'. [ 1577.765661][ T30] audit: type=1400 audit(1785333626.689:10456): avc: denied { read } for pid=25843 comm="syz.5.5093" name="g1" dev="configfs" ino=74330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1577.823769][ T30] audit: type=1400 audit(1785333626.689:10457): avc: denied { read open } for pid=25843 comm="syz.5.5093" path="/149/my_configfs/usb_gadget/g1" dev="configfs" ino=74330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1577.883875][ T30] audit: type=1400 audit(1785333626.689:10458): avc: denied { write } for pid=25843 comm="syz.5.5093" name="functions" dev="configfs" ino=74331 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1577.917042][ T30] audit: type=1400 audit(1785333626.729:10459): avc: denied { write } for pid=25843 comm="syz.5.5093" name="header" dev="configfs" ino=90345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1577.940281][ T30] audit: type=1400 audit(1785333626.739:10460): avc: denied { write } for pid=25843 comm="syz.5.5093" name="hs" dev="configfs" ino=90353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1578.119984][ T30] audit: type=1400 audit(1785333626.739:10461): avc: denied { write } for pid=25843 comm="syz.5.5093" name="hs" dev="configfs" ino=90353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1579.277628][T21734] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1579.959226][T21734] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1580.571986][T21734] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1580.585423][T21734] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1580.594965][T21734] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.603386][T21734] usb 7-1: Product: syz [ 1580.607606][T21734] usb 7-1: Manufacturer: syz [ 1580.613531][T21734] usb 7-1: SerialNumber: syz [ 1580.923701][T21734] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1581.162093][T21734] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1581.241645][T21734] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 1581.364580][T25855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1581.425035][T25855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1582.001033][ T120] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1582.161085][ T120] usb 6-1: Using ep0 maxpacket: 16 [ 1582.167898][ T120] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1582.193423][ T120] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1582.221202][T21734] usb 7-1: invalid uac2 rates [ 1582.226238][T21734] usb 7-1: invalid uac2 rates [ 1582.233412][T21734] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 1582.241856][T21734] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 1582.786364][T21734] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1582.815566][ T120] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1582.825287][ T120] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1582.839408][ T120] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1582.864804][ T120] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1582.881427][ T120] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1582.925376][T21734] usb 7-1: USB disconnect, device number 6 [ 1582.965701][ T120] usb 6-1: Manufacturer: syz [ 1582.991679][ T120] usb 6-1: config 0 descriptor?? [ 1583.264738][T25900] syzkaller0: entered promiscuous mode [ 1583.276393][T25900] syzkaller0: entered allmulticast mode [ 1583.283723][ T120] rc_core: IR keymap rc-hauppauge not found [ 1583.297625][ T120] Registered IR keymap rc-empty [ 1583.302840][T25900] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5108'. [ 1583.321091][ T120] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.328333][T25900] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5108'. [ 1583.363588][ T120] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.442245][ T120] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1583.456162][ T120] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input36 [ 1583.949029][ T120] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1583.993115][ T120] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1584.183006][ T120] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1584.204605][ T120] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1584.232137][ T120] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1584.308040][ T120] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1584.416425][ T120] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1584.571366][ T120] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1584.645674][T25916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5112'. [ 1584.703759][ T120] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1584.741549][ T120] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1584.776974][ T120] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1584.793126][ T120] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1584.802351][T25916] bond0 (unregistering): left promiscuous mode [ 1584.821220][ T120] usb 6-1: USB disconnect, device number 16 [ 1584.842654][T25916] bond_slave_0: left promiscuous mode [ 1584.849994][T25916] bond_slave_1: left promiscuous mode [ 1584.888859][T25916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1584.902764][T25916] bond_slave_0: left allmulticast mode [ 1584.920085][T25916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1584.947823][T25916] bond_slave_1: left allmulticast mode [ 1584.976975][T25916] bond0 (unregistering): Released all slaves [ 1586.251398][T25940] xt_NFQUEUE: number of total queues is 0 [ 1587.367947][T25962] lo: entered allmulticast mode [ 1587.513714][T25962] lo: left allmulticast mode [ 1588.465097][T25975] syzkaller0: entered promiscuous mode [ 1588.480799][T25975] syzkaller0: entered allmulticast mode [ 1589.027999][T25981] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1589.043787][T25975] 0: reclassify loop, rule prio 0, protocol 800 [ 1589.216973][T25977] kvm: pic: level sensitive irq not supported [ 1589.217240][T25977] kvm: pic: non byte read [ 1589.231390][T25977] kvm: pic: level sensitive irq not supported [ 1589.231459][T25977] kvm: pic: non byte read [ 1589.257520][T25977] kvm: pic: level sensitive irq not supported [ 1589.257562][T25977] kvm: pic: non byte read [ 1589.303517][T25977] kvm: pic: level sensitive irq not supported [ 1589.303556][T25977] kvm: pic: non byte read [ 1594.583268][T26042] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1595.205250][T26045] input: syz1 as /devices/virtual/input/input37 [ 1596.651378][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1597.121116][ T120] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1597.319354][ T30] audit: type=1400 audit(1785333646.249:10462): avc: denied { map } for pid=26070 comm="syz.1.5157" path="socket:[91511]" dev="sockfs" ino=91511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1597.370372][ T120] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.382634][ T120] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1597.395821][ T120] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1597.417693][T26073] syzkaller0: entered promiscuous mode [ 1597.424067][T26073] syzkaller0: entered allmulticast mode [ 1597.429900][ T120] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.459072][ T120] usb 7-1: config 0 descriptor?? [ 1597.482805][ T120] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1597.503143][ T120] dvb-usb: bulk message failed: -22 (3/0) [ 1597.529011][ T120] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1597.552743][ T120] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1597.568018][ T120] usb 7-1: media controller created [ 1597.587884][ T120] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1597.610852][ T120] dvb-usb: bulk message failed: -22 (6/0) [ 1597.626496][ T120] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1597.652845][ T120] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input38 [ 1597.704131][ T120] dvb-usb: schedule remote query interval to 150 msecs. [ 1597.731945][ T120] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1597.752821][T26084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1597.784216][T26084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.893740][ T120] dvb-usb: bulk message failed: -22 (1/0) [ 1597.905372][ T120] dvb-usb: error while querying for an remote control event. [ 1598.111036][ T120] dvb-usb: bulk message failed: -22 (1/0) [ 1598.196824][ T120] dvb-usb: error while querying for an remote control event. [ 1598.296657][T26094] overlayfs: failed to clone upperpath [ 1598.726485][ T120] dvb-usb: bulk message failed: -22 (1/0) [ 1598.732312][ T120] dvb-usb: error while querying for an remote control event. [ 1598.884485][ T30] audit: type=1400 audit(1785333647.819:10463): avc: denied { write } for pid=26093 comm="syz.1.5162" name="file0" dev="tmpfs" ino=5710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1598.916819][ T120] dvb-usb: bulk message failed: -22 (1/0) [ 1598.929701][ T120] dvb-usb: error while querying for an remote control event. [ 1598.952170][ T30] audit: type=1400 audit(1785333647.819:10464): avc: denied { open } for pid=26093 comm="syz.1.5162" path="/1073/file0" dev="tmpfs" ino=5710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1599.009738][ T30] audit: type=1400 audit(1785333647.819:10465): avc: denied { ioctl } for pid=26093 comm="syz.1.5162" path="/1073/file0" dev="tmpfs" ino=5710 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1599.101129][ T120] dvb-usb: bulk message failed: -22 (1/0) [ 1599.106911][ T120] dvb-usb: error while querying for an remote control event. [ 1599.244024][T26102] tipc: Enabled bearer , priority 0 [ 1599.251642][T26102] syzkaller0: entered promiscuous mode [ 1599.257189][T26102] syzkaller0: entered allmulticast mode [ 1599.319247][ T120] dvb-usb: bulk message failed: -22 (1/0) [ 1599.325272][ T120] dvb-usb: error while querying for an remote control event. [ 1599.378285][T17053] usb 7-1: USB disconnect, device number 7 [ 1599.940800][T26102] tipc: Resetting bearer [ 1599.987663][T17053] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1600.123891][T26101] tipc: Resetting bearer [ 1601.268297][T26101] tipc: Disabling bearer [ 1601.783066][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1603.853984][T26124] Bluetooth: hci5: command 0x0405 tx timeout [ 1606.950441][T26178] lo speed is unknown, defaulting to 1000 [ 1607.234765][T26178] netdevsim0 speed is unknown, defaulting to 1000 [ 1607.294922][ T30] audit: type=1400 audit(1785333655.829:10466): avc: denied { egress } for pid=26175 comm="syz.1.5181" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1607.337337][ T30] audit: type=1400 audit(1785333655.829:10467): avc: denied { sendto } for pid=26175 comm="syz.1.5181" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1608.196781][T26184] tipc: Enabling of bearer rejected, failed to enable media [ 1609.824944][T26210] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 1614.309235][T26262] syzkaller0: entered promiscuous mode [ 1614.321253][T26267] overlayfs: invalid origin (00000079000000000000000000000000000000000000) [ 1614.335505][T26262] syzkaller0: entered allmulticast mode [ 1615.212116][ T30] audit: type=1400 audit(1785333664.149:10468): avc: denied { ioctl } for pid=26277 comm="syz.1.5207" path="/dev/snd/midiC2D0" dev="devtmpfs" ino=1302 ioctlcmd=0x3b88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 1615.312824][ T5704] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1615.324000][T26279] loop7: detected capacity change from 0 to 7 [ 1615.515064][ C1] blk_print_req_error: 118 callbacks suppressed [ 1615.515081][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1615.530987][ C1] buffer_io_error: 14 callbacks suppressed [ 1615.531000][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1615.622408][ T5704] usb 6-1: Using ep0 maxpacket: 32 [ 1615.660978][ T5704] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1615.693850][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1615.703499][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1615.712632][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1615.722260][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1615.797302][ T5704] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1615.837688][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1615.847333][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1615.862745][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1615.872391][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1615.881444][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1615.891066][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1615.905108][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1615.914755][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1615.922826][T26279] ldm_validate_partition_table(): Disk read failed. [ 1615.937034][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1615.946665][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1615.959792][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1615.969420][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1615.978008][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1615.987726][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1615.996344][T26279] Dev loop7: unable to read RDB block 0 [ 1616.007736][T26279] loop7: unable to read partition table [ 1616.014330][T26279] loop7: partition table beyond EOD, truncated [ 1616.020583][T26279] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 1616.079884][ T5704] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1616.152886][ T5704] usb 6-1: New USB device found, idVendor=e64c, idProduct=dfae, bcdDevice=5a.ec [ 1616.170859][ T30] audit: type=1400 audit(1785333665.079:10469): avc: denied { map } for pid=26280 comm="syz.6.5209" path="socket:[92380]" dev="sockfs" ino=92380 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1616.217459][ T5704] usb 6-1: New USB device strings: Mfr=169, Product=153, SerialNumber=242 [ 1616.237543][ T5704] usb 6-1: Product: syz [ 1616.249430][ T5704] usb 6-1: Manufacturer: syz [ 1616.302443][ T5704] usb 6-1: SerialNumber: syz [ 1616.322327][ T5704] usb 6-1: config 0 descriptor?? [ 1616.559168][ T5704] usbhid 6-1:0.0: can't add hid device: -22 [ 1616.809585][ T5704] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 1616.844217][ T5704] usb 6-1: USB disconnect, device number 17 [ 1617.185525][T26292] netlink: 'syz.2.5212': attribute type 4 has an invalid length. [ 1617.231054][T17053] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1617.397374][T17053] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1617.587512][T17053] usb 2-1: not running at top speed; connect to a high speed hub [ 1617.613747][T17053] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1617.636864][T17053] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1617.677722][T17053] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 1617.749538][T17053] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.789964][T17053] usb 2-1: Product: syz [ 1617.809649][T17053] usb 2-1: Manufacturer: syz [ 1617.880611][T17053] usb 2-1: SerialNumber: syz [ 1619.285985][T17053] usb 2-1: 3:0: failed to get current value for ch 1 (-71) [ 1619.302800][T17053] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 1619.365972][T26306] ALSA: mixer_oss: invalid OSS volume '' [ 1619.387912][T17053] usb 2-1: 3:0: cannot get min/max values for control 5 (id 3) [ 1619.532038][T17053] usb 2-1: USB disconnect, device number 40 [ 1621.211408][T26324] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1621.220130][T26324] overlayfs: missing 'lowerdir' [ 1621.959797][T21234] udevd[21234]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1627.640157][T26383] NILFS (nullb0): couldn't find nilfs on the device [ 1628.931053][ T5734] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1629.136317][ T5734] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1629.206531][ T5734] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1629.295283][ T5734] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1629.364628][ T5734] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.513091][ T30] audit: type=1400 audit(1785333678.409:10470): avc: denied { bind } for pid=26389 comm="syz.6.5236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1629.574327][T26385] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1629.624041][ T5734] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1631.975291][T26401] netlink: 'syz.6.5239': attribute type 28 has an invalid length. [ 1632.115126][ T5704] usb 2-1: USB disconnect, device number 41 [ 1634.219403][T26429] scsi_dev_info_list_add_str: bad dev info string 'v' '' '' [ 1635.822745][T26447] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1641.568557][T26508] tipc: Enabling of bearer rejected, failed to enable media [ 1641.956042][T26513] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1642.960442][ T30] audit: type=1800 audit(1785333691.889:10471): pid=26537 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.5273" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 1646.696420][T26591] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1648.275980][ T30] audit: type=1400 audit(1785333697.129:10472): avc: denied { ioctl } for pid=26600 comm="syz.5.5289" path="socket:[92910]" dev="sockfs" ino=92910 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1650.582096][T26630] lo: entered allmulticast mode [ 1654.176446][T26661] tipc: Cannot configure node identity twice [ 1654.241318][T17053] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1654.345305][T26671] tipc: Enabling of bearer rejected, failed to enable media [ 1654.402495][T17053] usb 7-1: Using ep0 maxpacket: 8 [ 1654.464385][T17053] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1654.572948][T17053] usb 7-1: config 0 has no interfaces? [ 1654.638443][T17053] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1654.688288][T17053] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.736809][T17053] usb 7-1: config 0 descriptor?? [ 1654.939985][T26685] syzkaller0: entered promiscuous mode [ 1654.955706][T26685] syzkaller0: entered allmulticast mode [ 1654.998291][T26685] tipc: Enabled bearer , priority 0 [ 1655.024988][T26682] tipc: Resetting bearer [ 1655.060653][T26682] tipc: Disabling bearer [ 1657.706490][T26721] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1658.163406][T26727] geneve2: left promiscuous mode [ 1658.168378][T26727] geneve2: left allmulticast mode [ 1658.174330][T26727] bond2: left promiscuous mode [ 1658.179093][T26727] bond2: left allmulticast mode [ 1660.860632][T17053] usb 7-1: USB disconnect, device number 8 [ 1663.128177][T26764] netlink: 'syz.6.5327': attribute type 10 has an invalid length. [ 1663.211930][T26764] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5327'. [ 1663.214575][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1664.341019][T26764] geneve1: entered allmulticast mode [ 1664.361161][T26764] team0: Port device geneve1 added [ 1664.565073][T26772] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5332'. [ 1664.592012][T26772] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5332'. [ 1664.611156][T26772] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5332'. [ 1668.137387][T26799] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1669.315746][T26814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5340'. [ 1669.462990][T26817] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1669.474469][T26817] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1669.483022][T26817] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1669.780402][ T30] audit: type=1400 audit(1785333718.629:10473): avc: denied { read append } for pid=26819 comm="syz.5.5342" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1670.007151][T26820] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1670.091764][T26820] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1670.559834][T26820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60008 sclass=netlink_route_socket pid=26820 comm=syz.5.5342 [ 1672.101480][ T5607] Bluetooth: hci5: command 0x0405 tx timeout [ 1674.241015][ T5607] Bluetooth: hci5: command 0x0405 tx timeout [ 1675.149797][ T30] audit: type=1400 audit(1785333724.079:10474): avc: denied { listen } for pid=26866 comm="syz.4.5356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1675.639444][T17053] IPVS: starting estimator thread 0... [ 1675.841029][T26885] IPVS: using max 41 ests per chain, 98400 per kthread [ 1678.035916][T26896] xt_CT: No such helper "pptp" [ 1680.007550][T26917] syzkaller0: entered promiscuous mode [ 1680.026077][T26917] syzkaller0: entered allmulticast mode [ 1680.043057][T26917] 0: reclassify loop, rule prio 0, protocol 800 [ 1682.756876][T26956] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5376'. [ 1683.993044][ T30] audit: type=1400 audit(1785333732.929:10475): avc: denied { setattr } for pid=26949 comm="syz.1.5376" path="socket:[94110]" dev="sockfs" ino=94110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1684.997062][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.006594][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1685.098251][T26976] configfs-gadget.g1 gadget.0: HOST MAC d6:b2:55:a4:a6:d3 [ 1685.105863][T26976] configfs-gadget.g1 gadget.0: MAC b2:77:d3:e7:86:76 [ 1685.381090][T17053] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1685.684010][T17053] usb 1-1: Dual-Role OTG device on HNP port [ 1685.704507][T17053] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 1685.816195][T17053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.872131][T17053] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1685.896564][T17053] gspca_spca501: reg write: error -32 [ 1685.937669][T17053] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1685.955912][T17053] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 1686.005719][T17053] cdc_ncm 1-1:1.1: MAC-Address: d6:b2:55:a4:a6:d3 [ 1686.066356][T27006] binder: 26996:27006 ioctl 89f0 200000000580 returned -22 [ 1686.112282][T17053] cdc_ncm 1-1:1.1 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), d6:b2:55:a4:a6:d3 [ 1686.259181][T27008] loop2: detected capacity change from 0 to 7 [ 1686.438939][T27008] Dev loop2: unable to read RDB block 7 [ 1686.451702][T27008] loop2: AHDI p1 p2 p3 [ 1686.457532][T27008] loop2: partition table partially beyond EOD, truncated [ 1686.473557][T27008] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1686.484600][T27008] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1687.100599][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.111358][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.773336][T26113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.876698][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.898501][T17053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.916172][ T30] audit: type=1400 audit(1785333736.839:10476): avc: denied { write } for pid=27001 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1687.919325][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1687.966793][T27022] futex_wake_op: syz.1.5388 tries to shift op by -1; fix this program [ 1689.720194][ T30] audit: type=1400 audit(1785333738.649:10477): avc: denied { write } for pid=27047 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1691.365974][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.383693][T26113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.391959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1691.567230][T27072] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1692.374355][ T30] audit: type=1400 audit(1785333741.309:10478): avc: denied { write } for pid=27074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1692.611398][T27093] syzkaller0: entered promiscuous mode [ 1692.626466][ T30] audit: type=1400 audit(1785333741.559:10479): avc: denied { write } for pid=27092 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1692.657914][T27093] syzkaller0: entered allmulticast mode [ 1692.665404][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.673610][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.785704][T27093] 0: reclassify loop, rule prio 0, protocol 700 [ 1692.971647][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.982879][T17053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1692.992869][T21734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1693.024129][T27098] syzkaller0: entered promiscuous mode [ 1693.055173][T27098] syzkaller0: entered allmulticast mode [ 1695.255596][T27114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5403'. [ 1695.611288][T17053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1696.176782][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1697.991946][ T478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.000256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.635906][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.645448][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.655358][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1698.764474][T15999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.077485][T21734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.111121][T15999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1699.851111][T15999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1700.405865][T27133] syzkaller0: entered promiscuous mode [ 1700.919923][T27133] syzkaller0: entered allmulticast mode [ 1701.039747][ T30] audit: type=1400 audit(1785333749.909:10480): avc: denied { bind } for pid=27142 comm="syz.2.5410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1702.108166][T15999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1702.225186][T27153] tipc: Enabled bearer , priority 0 [ 1702.413849][T27132] tipc: Resetting bearer [ 1702.601423][T27132] tipc: Disabling bearer [ 1702.607208][ T30] audit: type=1400 audit(1785333751.539:10481): avc: denied { write } for pid=27118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1704.219522][ T478] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.227848][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.237242][ T9633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.245497][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1704.413653][ T30] audit: type=1400 audit(1785333753.289:10482): avc: denied { write } for pid=27165 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1704.989759][T27187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.000177][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1705.399462][T15999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1706.021273][ T30] audit: type=1400 audit(1785333754.949:10483): avc: denied { recv } for pid=0 comm="swapper/1" src=68 daddr=255.255.255.255 dest=67 netif=usb1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1706.942292][ T30] audit: type=1400 audit(1785333755.879:10484): avc: denied { write } for pid=27196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1707.054796][ T30] audit: type=1400 audit(1785333755.989:10485): avc: denied { write } for pid=27217 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1707.987357][T27222] netlink: 'syz.1.5425': attribute type 13 has an invalid length. [ 1708.414104][T15999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1708.469788][T27242] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5431'. [ 1709.588429][T27256] lo speed is unknown, defaulting to 1000 [ 1709.788222][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.796571][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.841820][T27256] netdevsim0 speed is unknown, defaulting to 1000 [ 1709.931679][ T9626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1709.939972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1710.336087][T27268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5436'. [ 1710.358504][T27268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5436'. [ 1710.370263][T27268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5436'. [ 1710.381392][T27268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5436'. [ 1710.392940][T27268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5436'. [ 1711.827959][T26124] Bluetooth: hci2: command 0x1003 tx timeout [ 1711.851433][ T5607] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1712.527052][T15999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.687659][T15999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.697393][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.705508][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.713778][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1715.722028][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1716.642144][ T30] audit: type=1400 audit(1785333765.569:10486): avc: denied { write } for pid=27314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1716.837388][ T30] audit: type=1400 audit(1785333765.769:10487): avc: denied { write } for pid=27336 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1716.992802][T27339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5452'. [ 1717.039725][T27339] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5452'. [ 1718.989465][T15999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1719.240433][T27373] macsec0: entered promiscuous mode [ 1719.258735][T27373] macsec0: entered allmulticast mode [ 1719.284582][T27373] macsec0: left promiscuous mode [ 1719.306292][T27373] macsec0: left allmulticast mode [ 1719.321133][ T30] audit: type=1400 audit(1785333768.249:10488): avc: denied { cmd } for pid=27375 comm="iou-wrk-27376" path="socket:[95024]" dev="sockfs" ino=95024 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1719.464608][T27383] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1719.531646][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1721.075681][ T30] audit: type=1400 audit(1785333769.369:10489): avc: denied { write } for pid=27395 comm="syz.1.5463" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1721.194881][ T9633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.203271][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.451402][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1721.459627][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.015407][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1722.507689][T27418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5468'. [ 1722.867761][ T30] audit: type=1400 audit(1785333771.799:10490): avc: denied { write } for pid=27384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1723.097276][ T30] audit: type=1400 audit(1785333772.029:10491): avc: denied { write } for pid=27422 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1723.361898][T27424] virtio-fs: tag < : 32 [ 1723.361898][T27424] ivsize : 16 [ 1723.361898][T27424] chunksize : 16 [ 1723.361898][T27424] walksize : 16 [ 1723.361898][T27424] statesize : 0 [ 1723.361898][T27424] [ 1723.361898][T27424] name : ccm(sm4) [ 1723.361898][T27424] driver : ccm_base(ctr-sm4-aesni-avx2,cbcmac(sm4-generic)) [ 1723.361898][T27424] module : kernel [ 1723.361898][T27424] priority : 300 [ 1723.361898][T27424] refcnt : 1 [ 1723.361898][T27424] selftest : passed [ 1723.361898][T27424] internal : no [ 1723.361898][T27424] type : aead [ 1723.361898][T27424] async : no [ 1723.361898][T27424] blocksize : 1 [ 1723.361898][T27424] ivsize : 16 [ 1723.361898][T27424] maxauthsize : 16 [ 1723.361898][T27424] geniv : [ 1723.361898][T27424] [ 1723.361898][T27424] name : cbcmac(sm4) [ 1723.361898][T27424] driver : cbcmac(sm4-generic) [ 1723.361898][T27424] module : kernel [ 1723.361898][T27424] priority : 100 [ 1723.361898][T27424] refcnt : 1 [ 1723.361898][T27424] selftest : passed [ 1723.361898][T27424] internal : no [ 1723.361898][T27424] type : shash [ 1723.361898][T27424] blocksize : 16 [ 1723.361898][T27424] digestsize : 16 [ 1723.361898][T27424] [ 1723.361898][T27424] name : gcm(sm4) [ 1723.361898][T27424] driver : gcm_base(ctr-sm4-aesni-avx2,ghash-lib) [ 1723.361898][T27424] module : kernel [ 1723.361898][T27424] priority : 500 [ 1723.361898][T27424] refcnt : 1 [ 1723.361898][T27424] selftest : passed [ 1723.361898][T27424] internal : no [ 1723.361898][T27424] type : aead [ 1723.361898][T27424] async : no [ 1723.361898][T27424] blocksize : 1 [ 1723.361898][T27424] ivsize : 12 [ 1723.361898][T27424] maxauthsize : 16 [ 1723.361898][T27424] geniv : [ 1723.361898][T27424] [ 1723.361898][T27424] name : echainiv(authencesn(cmac(aes),cbc(aes))) [ 1724.107171][T27437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1724.701640][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1725.052997][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1726.612712][T27464] xt_hashlimit: size too large, truncated to 1048576 [ 1727.261795][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.269958][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.278293][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1727.286595][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.098072][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1731.586345][ T30] audit: type=1400 audit(1785333780.419:10492): avc: denied { write } for pid=27441 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.617072][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1732.322773][T27527] lo speed is unknown, defaulting to 1000 [ 1732.786916][T27527] netdevsim0 speed is unknown, defaulting to 1000 [ 1733.021731][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.030012][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.651188][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.896537][ T9633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.904925][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1734.914905][ T30] audit: type=1400 audit(1785333783.849:10493): avc: denied { write } for pid=27534 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1735.059378][ T5607] block nbd6: Receive control failed (result -107) [ 1735.671869][T27537] nbd6: detected capacity change from 0 to 8589934592 [ 1735.720576][ T4936] block nbd6: Dead connection, failed to find a fallback [ 1735.728239][ T4936] block nbd6: shutting down sockets [ 1735.733944][ T4936] blk_print_req_error: 10 callbacks suppressed [ 1735.733958][ T4936] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1735.761064][ T4936] buffer_io_error: 10 callbacks suppressed [ 1735.761078][ T4936] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1735.775421][ T4936] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1735.784972][ T4936] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1735.794141][ T4936] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1735.804001][ T4936] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1735.814690][ T4936] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1735.824254][ T4936] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1735.832321][ T4936] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1735.841845][ T4936] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1735.851274][ T4936] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1735.861092][ T4936] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1735.872093][ T4936] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1735.882031][ T4936] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1735.890203][ T4936] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1735.900039][ T4936] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1735.908124][T27385] ldm_validate_partition_table(): Disk read failed. [ 1735.931123][ T4936] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1735.940636][ T4936] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1735.948496][ T4936] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1735.958084][ T4936] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1735.966059][T27385] Dev nbd6: unable to read RDB block 0 [ 1735.972094][T27385] nbd6: unable to read partition table [ 1736.025143][T27385] ldm_validate_partition_table(): Disk read failed. [ 1736.033321][T27385] Dev nbd6: unable to read RDB block 0 [ 1736.043381][T27385] nbd6: unable to read partition table [ 1736.058580][T27557] PKCS8: Unsupported PKCS#8 version [ 1736.305151][ T30] audit: type=1400 audit(1785333785.239:10494): avc: denied { write } for pid=27543 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1738.106745][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.216025][ T30] audit: type=1400 audit(1785333787.149:10495): avc: denied { write } for pid=27586 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1738.933552][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1738.943094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1739.250028][T27604] syz.1.5494 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1739.278485][T27604] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1740.675760][ T30] audit: type=1326 audit(1785333789.019:10496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27601 comm="syz.6.5495" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825979de99 code=0x7ffc0000 [ 1740.731557][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.739844][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1740.860580][ T30] audit: type=1326 audit(1785333789.019:10497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27601 comm="syz.6.5495" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825979de99 code=0x7ffc0000 [ 1740.961099][ T30] audit: type=1326 audit(1785333789.019:10498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27601 comm="syz.6.5495" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825979de99 code=0x7ffc0000 [ 1741.007305][ T30] audit: type=1326 audit(1785333789.019:10499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27601 comm="syz.6.5495" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825979de99 code=0x7ffc0000 [ 1741.524539][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1741.847866][ T30] audit: type=1326 audit(1785333789.019:10500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27601 comm="syz.6.5495" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f825979de99 code=0x7ffc0000 [ 1741.875234][ T30] audit: type=1326 audit(1785333789.019:10501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27601 comm="syz.6.5495" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825979de99 code=0x7ffc0000 [ 1741.965905][T27623] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1741.975123][T27623] IPv6: NLM_F_CREATE should be set when creating new route [ 1741.984510][T27623] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1742.028368][ T30] audit: type=1326 audit(1785333789.019:10502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27601 comm="syz.6.5495" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825979de99 code=0x7ffc0000 [ 1742.111344][ T30] audit: type=1326 audit(1785333789.019:10503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27601 comm="syz.6.5495" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825979de99 code=0x7ffc0000 [ 1742.179139][ T30] audit: type=1326 audit(1785333789.019:10504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27601 comm="syz.6.5495" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f825979de99 code=0x7ffc0000 [ 1743.142781][T27640] ceph: No mds server is up or the cluster is laggy [ 1745.010184][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.018508][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.026907][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.155308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1745.192862][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.333916][T27679] overlayfs: failed to clone upperpath [ 1746.952106][T26113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1746.960405][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1747.160306][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1747.160322][ T30] audit: type=1400 audit(1785333795.860:10563): avc: denied { getopt } for pid=27677 comm="syz.5.5514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1748.867025][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.112286][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.120580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.322138][T27716] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 1751.873187][T27724] netlink: 'syz.4.5525': attribute type 10 has an invalid length. [ 1751.910793][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1751.952185][ T5734] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1752.133765][ T5734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1752.171894][ T5734] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1752.200671][ T5734] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1752.335898][ T5734] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1753.012217][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.020600][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1753.334581][ T5734] usb 6-1: config 0 descriptor?? [ 1753.419711][T27737] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5529'. [ 1754.161920][ T5734] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 1754.169975][ T5734] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 1754.180748][ T5734] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 1754.209973][ T5734] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 1754.340988][ T5734] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 1754.556974][ T5734] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 1754.712906][T27718] netlink: 'syz.5.5522': attribute type 4 has an invalid length. [ 1754.736713][ T5734] pyra 0003:1E7D:2CF6.001A: unknown main item tag 0x0 [ 1754.951595][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.436922][T21734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1755.501571][ T5734] pyra 0003:1E7D:2CF6.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 1756.725015][ T139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.733334][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1756.793408][ T5734] pyra 0003:1E7D:2CF6.001A: couldn't init struct pyra_device [ 1756.842559][ T5734] pyra 0003:1E7D:2CF6.001A: couldn't install mouse [ 1756.871905][ T5734] pyra 0003:1E7D:2CF6.001A: probe with driver pyra failed with error -71 [ 1757.031077][ T5734] usb 6-1: USB disconnect, device number 18 [ 1757.973914][T27776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.146733][T27776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.157642][T27776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.173583][T27776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.182198][T27776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.193216][T27776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.203834][T27776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1758.212490][T27776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1761.954077][T21200] net_ratelimit: 39 callbacks suppressed [ 1761.954092][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.487626][T19552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1762.495989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1765.037326][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1766.462050][T27841] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1766.523019][ T30] audit: type=1800 audit(1785333815.048:10564): pid=27850 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.5556" name="file0" dev="overlay" ino=790 res=0 errno=0 [ 1766.579683][ T9633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1766.587995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1767.079095][T27861] netdevsim netdevsim4: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 1768.438688][T26113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.447041][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.803265][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.977335][T27871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1769.079282][T27871] veth1_vlan: left allmulticast mode [ 1769.285931][T16845] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1769.366831][T16845] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 1769.531448][T16845] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.569286][T16845] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1769.628810][T16845] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0 [ 1769.790125][T16845] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1769.818914][T16845] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1770.378259][T16845] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0 [ 1770.410635][T16845] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1770.439431][T16845] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1770.615735][T16845] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0 [ 1770.642913][T16845] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1771.326062][ T30] audit: type=1400 audit(1785333820.198:10565): avc: denied { write } for pid=27887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1771.977212][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.989465][T26113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1771.997740][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1772.185211][ T30] audit: type=1400 audit(1785333821.058:10566): avc: denied { write } for pid=27919 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1772.403131][T27923] lo speed is unknown, defaulting to 1000 [ 1772.786961][T27923] netdevsim0 speed is unknown, defaulting to 1000 [ 1774.663982][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1774.672243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.035851][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1775.880641][ T30] audit: type=1400 audit(1785333824.748:10567): avc: denied { write } for pid=27931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1777.528493][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.536961][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.635946][ T30] audit: type=1400 audit(1785333826.498:10568): avc: denied { write } for pid=27970 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1778.179016][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1779.593569][T28008] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1779.593569][T28008] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1779.644012][T28009] xt_NFQUEUE: number of total queues is 0 [ 1780.489529][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1780.497800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1781.548081][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1781.961947][ T30] audit: type=1400 audit(1785333830.828:10569): avc: denied { write } for pid=27989 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1781.971147][T28034] netlink: 'syz.4.5590': attribute type 10 has an invalid length. [ 1782.262316][T28034] netlink: 'syz.4.5590': attribute type 10 has an invalid length. [ 1782.316771][T28034] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5590'. [ 1782.404243][ T30] audit: type=1400 audit(1785333831.278:10570): avc: denied { write } for pid=28038 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1782.871130][T28049] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5596'. [ 1782.928142][T28049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5596'. [ 1782.952134][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.960428][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.987680][ T30] audit: type=1400 audit(1785333831.858:10571): avc: denied { getopt } for pid=28047 comm="syz.2.5596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1783.730687][T17053] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1784.162365][T17053] usb 7-1: Using ep0 maxpacket: 32 [ 1784.185827][T17053] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1784.305773][T17053] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1784.325540][T17053] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1784.386284][T17053] usb 7-1: Product: syz [ 1784.408261][T17053] usb 7-1: Manufacturer: syz [ 1784.436226][T17053] usb 7-1: SerialNumber: syz [ 1784.468897][T17053] usb 7-1: config 0 descriptor?? [ 1784.522127][T28058] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1784.771347][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1785.780174][T28058] lo speed is unknown, defaulting to 1000 [ 1786.171073][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1786.323926][T26113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1786.332246][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1787.565364][T28092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5605'. [ 1787.574906][T28092] vlan2: left allmulticast mode [ 1787.579809][T28092] geneve0: left allmulticast mode [ 1787.585427][T28092] bridge0: port 3(vlan2) entered disabled state [ 1788.712754][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.721043][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1788.762048][T15999] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1789.582253][ T30] audit: type=1400 audit(1785333837.908:10572): avc: denied { map } for pid=28099 comm="syz.5.5607" path="socket:[97569]" dev="sockfs" ino=97569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1790.127327][T28058] netdevsim0 speed is unknown, defaulting to 1000 [ 1790.144775][ T30] audit: type=1400 audit(1785333837.908:10573): avc: denied { accept } for pid=28099 comm="syz.5.5607" path="socket:[97569]" dev="sockfs" ino=97569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1791.830780][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.916706][ T9633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1791.924979][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.877267][ T9633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1794.885730][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.045824][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1795.612823][ T30] audit: type=1800 audit(1785333843.479:10574): pid=28141 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.5615" name="SYSV00000000" dev="tmpfs" ino=27 res=0 errno=0 [ 1796.378714][ T30] audit: type=1400 audit(1785333844.089:10575): avc: denied { connect } for pid=28144 comm="syz.4.5616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1797.200742][T28153] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5618'. [ 1797.290943][T28153] lo speed is unknown, defaulting to 1000 [ 1797.429338][T28153] netdevsim0 speed is unknown, defaulting to 1000 [ 1798.316341][ T9633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.324679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.491517][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.910821][T21200] usb 7-1: USB disconnect, device number 9 [ 1798.925687][T28170] xt_NFQUEUE: number of total queues is 0 [ 1798.972649][T28170] batadv_slave_1: entered promiscuous mode [ 1799.014148][T28168] batadv_slave_1: left promiscuous mode [ 1799.737834][T26124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1799.765778][T26124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1799.777707][T26124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1799.789512][T26124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1799.801281][T26124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1800.185021][ T30] audit: type=1400 audit(1785333848.059:10576): avc: denied { getopt } for pid=28192 comm="syz.2.5628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1800.871402][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1800.879699][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1801.091057][T16845] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.236189][T28181] lo speed is unknown, defaulting to 1000 [ 1801.683763][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1801.750362][T16845] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1801.914938][T26124] Bluetooth: hci2: command tx timeout [ 1803.085527][T16845] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.815035][T28181] netdevsim0 speed is unknown, defaulting to 1000 [ 1804.814039][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1804.822295][T26124] Bluetooth: hci2: command tx timeout [ 1804.839208][ T9633] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1804.847523][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1805.459782][T16845] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1805.493111][T28227] syz.1.5635 (28227): drop_caches: 2 [ 1806.658485][T26113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1806.666805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1807.450986][T26124] Bluetooth: hci2: command tx timeout [ 1808.278874][ T5734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1809.410533][T28276] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1809.510985][T26124] Bluetooth: hci2: command tx timeout [ 1811.251285][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1811.259593][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1812.238570][T21200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1813.025464][T16845] bridge_slave_1: left allmulticast mode [ 1813.053284][T16845] bridge_slave_1: left promiscuous mode [ 1813.126605][T16845] bridge0: port 2(bridge_slave_1) entered disabled state [ 1813.567414][T28296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5650'. [ 1813.576409][T28296] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5650'. [ 1813.597238][T16845] bridge_slave_0: left allmulticast mode [ 1813.616542][T16845] bridge_slave_0: left promiscuous mode [ 1813.632225][T16845] bridge0: port 1(bridge_slave_0) entered disabled state [ 1814.645882][T16845] geneve1 (unregistering): left allmulticast mode [ 1814.727091][T16845] team0: Port device geneve1 removed [ 1814.775583][ T30] audit: type=1400 audit(2000000001.580:10577): avc: denied { write } for pid=28280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1814.939341][T16845] bridge1 (unregistering): left allmulticast mode [ 1814.977017][T16845] team0: Port device bridge1 removed [ 1815.064576][T28330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5654'. [ 1815.379464][T16845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1815.409726][ T30] audit: type=1400 audit(2000000002.210:10578): avc: denied { write } for pid=28331 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1815.410055][T16845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1815.457359][T16845] bond0 (unregistering): Released all slaves [ 1815.507749][T16845] bond1 (unregistering): Released all slaves [ 1815.600347][ T5270] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1818.841486][T28181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.888619][T28181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1818.923517][T28181] bridge_slave_0: entered allmulticast mode [ 1818.949597][T28181] bridge_slave_0: entered promiscuous mode [ 1818.978519][T28181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.997314][T28181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1819.027446][T28181] bridge_slave_1: entered allmulticast mode [ 1819.049892][T28181] bridge_slave_1: entered promiscuous mode [ 1819.180327][T28181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1819.344279][T28181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1819.748275][ T30] audit: type=1400 audit(2000000005.548:10579): avc: denied { write } for pid=28349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1819.889699][ T30] audit: type=1400 audit(2000000005.688:10580): avc: denied { write } for pid=28386 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1821.152390][ T5270] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1821.199807][T28403] fuse: Bad value for 'fd' [ 1821.248136][T28181] team0: Port device team_slave_0 added [ 1821.278942][T28181] team0: Port device team_slave_1 added [ 1822.077149][T28181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1822.100840][T28181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1822.596363][T28181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1822.609021][T28181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1822.616115][T28181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1822.665197][T28181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1822.980149][T28422] IPVS: Error connecting to the multicast addr [ 1823.094979][T16845] hsr_slave_0: left promiscuous mode [ 1823.241210][T16845] hsr_slave_1: left promiscuous mode [ 1823.252810][T16845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1823.268504][T16845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1823.571855][ T30] audit: type=1400 audit(2000000009.358:10581): avc: denied { name_bind } for pid=28429 comm="syz.1.5671" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 1823.709527][T16845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1823.771878][T16845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1824.097272][ T30] audit: type=1400 audit(2000000009.898:10582): avc: denied { write } for pid=28423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1824.260984][ T30] audit: type=1400 audit(2000000009.998:10583): avc: denied { write } for pid=28448 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1824.603776][T16845] virt_wifi0: left promiscuous mode [ 1824.705360][T16845] veth1_macvtap: left promiscuous mode [ 1824.763227][T16845] veth0_macvtap: left promiscuous mode [ 1824.791781][T16845] veth1_vlan: left promiscuous mode [ 1824.797097][T16845] veth0_vlan: left promiscuous mode [ 1825.442532][T28464] dummy_hcd dummy_hcd.0: remove, state 1 [ 1825.450844][T28464] usb usb1: USB disconnect, device number 1 [ 1825.456918][T28464] usb 1-1: USB disconnect, device number 35 [ 1825.470166][T28464] cdc_ncm 1-1:1.1 usb1: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 1825.949740][T16845] team_slave_1 (unregistering): left allmulticast mode [ 1825.957374][T16845] team0 (unregistering): Port device team_slave_1 removed [ 1825.969630][T16845] team_slave_0 (unregistering): left allmulticast mode [ 1825.984723][T16845] team0 (unregistering): Port device team_slave_0 removed [ 1826.069628][T28470] xt_hashlimit: max too large, truncated to 1048576 [ 1826.098914][T28470] xt_hashlimit: overflow, try lower: 6/0 [ 1826.134026][ T5270] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1826.226404][T28181] hsr_slave_0: entered promiscuous mode [ 1826.235659][T28181] hsr_slave_1: entered promiscuous mode [ 1826.242036][T28181] debugfs: 'hsr0' already exists in 'hsr' [ 1826.251074][T28181] Cannot create hsr debugfs directory [ 1826.299047][T28464] dummy_hcd dummy_hcd.0: stopped [ 1826.304011][T28464] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 1827.388019][T28476] lo speed is unknown, defaulting to 1000 [ 1827.473647][T28476] netdevsim0 speed is unknown, defaulting to 1000 [ 1827.754020][T28487] bridge_slave_1: entered promiscuous mode [ 1827.940075][T28485] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1827.948798][T28485] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1827.957451][T28485] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1828.024082][T28494] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1831.245856][T28515] overlayfs: failed to clone upperpath [ 1831.675553][T28509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1831.708368][ T30] audit: type=1400 audit(2000000017.508:10584): avc: denied { create } for pid=28519 comm="syz.5.5688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1831.715071][T28509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1831.846332][ T30] audit: type=1400 audit(2000000017.548:10585): avc: denied { bind } for pid=28519 comm="syz.5.5688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1832.240843][ T30] audit: type=1400 audit(2000000017.988:10586): avc: denied { write } for pid=28490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1832.446828][ T30] audit: type=1400 audit(2000000018.248:10587): avc: denied { write } for pid=28530 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1832.536106][T28536] netlink: 'syz.1.5681': attribute type 10 has an invalid length. [ 1832.545121][T28536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5681'. [ 1832.559083][T28536] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5681'. [ 1834.166560][T21734] lo speed is unknown, defaulting to 1000 [ 1834.182215][ T478] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1834.191276][ T478] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 1834.192139][T16845] IPVS: stop unused estimator thread 0... [ 1834.200423][ T478] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1834.208213][T21734] s: Port: 1 Link DOWN [ 1834.251255][ T478] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1834.274957][ T478] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 1834.290567][ T478] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1834.301158][ T5270] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1834.315862][T21734] lo speed is unknown, defaulting to 1000 [ 1834.450990][ T478] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1834.477272][ T478] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 1834.495891][ T478] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 1835.011484][ T30] audit: type=1400 audit(2000000020.808:10588): avc: denied { write } for pid=28550 comm="syz.5.5694" lport=39634 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1835.504151][T28181] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1835.675411][T28181] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1835.751421][T28181] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1835.813317][T28181] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1835.877739][T28181] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1836.583528][T28181] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1836.717891][T28181] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1836.752479][T28181] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1836.872674][ T30] audit: type=1400 audit(2000000022.678:10589): avc: denied { write } for pid=28555 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1836.920823][T28598] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5700'. [ 1838.391850][T28181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1838.398900][ T30] audit: type=1400 audit(2000000024.198:10590): avc: denied { write } for pid=28608 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1838.445443][T28181] 8021q: adding VLAN 0 to HW filter on device team0 [ 1838.495695][T27521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1838.502780][T27521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1838.558545][T27521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1838.565637][T27521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1839.092679][T28618] netlink: 'syz.2.5704': attribute type 4 has an invalid length. [ 1840.248072][T28628] lo speed is unknown, defaulting to 1000 [ 1840.482134][T28628] netdevsim0 speed is unknown, defaulting to 1000 [ 1841.145516][ T30] audit: type=1400 audit(2000000026.948:10591): avc: denied { write } for pid=28612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1841.440928][ T30] audit: type=1400 audit(2000000027.248:10592): avc: denied { write } for pid=28649 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1841.700307][ T30] audit: type=1400 audit(2000000027.498:10593): avc: denied { read } for pid=28641 comm="syz.1.5708" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1842.048313][T28181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1842.443431][T28673] overlayfs: failed to clone upperpath [ 1842.862748][T28675] hsr0 speed is unknown, defaulting to 1000 [ 1842.868710][T28675] hsr0 speed is unknown, defaulting to 1000 [ 1842.875232][T28675] hsr0 speed is unknown, defaulting to 1000 [ 1842.881952][T28675] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1842.896165][T28675] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1842.913097][T28675] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1842.962645][T28675] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1843.190968][T28675] hsr0 speed is unknown, defaulting to 1000 [ 1843.197669][T28675] hsr0 speed is unknown, defaulting to 1000 [ 1843.204386][T28675] hsr0 speed is unknown, defaulting to 1000 [ 1843.211431][T28675] hsr0 speed is unknown, defaulting to 1000 [ 1843.218063][T28675] hsr0 speed is unknown, defaulting to 1000 [ 1844.096628][ T30] audit: type=1400 audit(2000000029.898:10594): avc: denied { write } for pid=28660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1844.157239][T28181] veth0_vlan: entered promiscuous mode [ 1844.177217][T28181] veth1_vlan: entered promiscuous mode [ 1844.184592][ T30] audit: type=1400 audit(2000000029.978:10595): avc: denied { write } for pid=28696 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1844.690502][T28181] veth0_macvtap: entered promiscuous mode [ 1844.846650][T28181] veth1_macvtap: entered promiscuous mode [ 1844.870464][T28181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1845.492369][T28181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1845.532107][ T9633] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1845.562177][ T9633] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1845.601021][ T9633] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1845.682509][ T9633] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.326999][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1846.477465][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1847.178318][ T9633] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1847.199050][ T9633] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1847.244845][ T30] audit: type=1400 audit(2000000033.038:10596): avc: denied { write } for pid=28707 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1848.288537][T28748] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1848.362342][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1848.372273][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 1848.384338][ C1] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 1848.392738][ C1] CPU: 1 UID: 0 PID: 1311 Comm: aoe_tx0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1848.403318][ C1] Tainted: [L]=SOFTLOCKUP [ 1848.407626][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1848.417667][ C1] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 1848.422867][ C1] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 2b 2a 39 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 1848.442463][ C1] RSP: 0018:ffffc90000a08d58 EFLAGS: 00010206 [ 1848.448519][ C1] RAX: dffffc0000000000 RBX: ffff88802df90510 RCX: ffffffff87d1359f [ 1848.456478][ C1] RDX: 000000000000000c RSI: ffffffff87d13615 RDI: 0000000000000060 [ 1848.464434][ C1] RBP: ffff888027c90248 R08: 0000000000000005 R09: 0000000000000005 [ 1848.472392][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888027c90c00 [ 1848.480351][ C1] R13: ffff88802df90500 R14: ffff888027c90240 R15: 0000000000000000 [ 1848.488309][ C1] FS: 0000000000000000(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 1848.497230][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1848.503805][ C1] CR2: 00007f0cd6662300 CR3: 0000000062eff000 CR4: 00000000003526f0 [ 1848.511770][ C1] Call Trace: [ 1848.515041][ C1] [ 1848.517872][ C1] ? find_held_lock+0x2b/0x80 [ 1848.522551][ C1] ? eth_start_xmit+0x3d7/0x1390 [ 1848.527487][ C1] usb_ep_queue+0xfa/0x3c0 [ 1848.531901][ C1] eth_start_xmit+0x684/0x1390 [ 1848.536667][ C1] ? __pfx_ncm_tx_timeout+0x10/0x10 [ 1848.541861][ C1] ncm_tx_timeout+0x7f/0xb0 [ 1848.546360][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 1848.551552][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 1848.556650][ C1] handle_softirqs+0x1ea/0x9b0 [ 1848.561396][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1848.566662][ C1] ? irqtime_account_delta+0x9a/0x110 [ 1848.572010][ C1] ? __dev_queue_xmit+0xa12/0x4970 [ 1848.577098][ C1] do_softirq+0xac/0xe0 [ 1848.581234][ C1] [ 1848.584143][ C1] [ 1848.587052][ C1] __local_bh_enable_ip+0xf8/0x120 [ 1848.592146][ C1] ? __dev_queue_xmit+0xa12/0x4970 [ 1848.597234][ C1] __dev_queue_xmit+0xa27/0x4970 [ 1848.602149][ C1] ? rcu_is_watching+0x12/0xc0 [ 1848.606898][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1848.612088][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1848.617437][ C1] ? __lock_acquire+0x49f/0x1a40 [ 1848.622368][ C1] ? ref_tracker_free+0x37e/0x6c0 [ 1848.627376][ C1] ? do_raw_spin_lock+0x128/0x260 [ 1848.632386][ C1] ? rcu_is_watching+0x12/0xc0 [ 1848.637134][ C1] ? __pfx_tx+0x10/0x10 [ 1848.641279][ C1] tx+0xc4/0x130 [ 1848.644817][ C1] kthread+0x1d8/0x3c0 [ 1848.648870][ C1] ? __kthread_parkme+0xbb/0x230 [ 1848.653789][ C1] ? __pfx_kthread+0x10/0x10 [ 1848.658361][ C1] ? rcu_is_watching+0x12/0xc0 [ 1848.663109][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 1848.668898][ C1] ? __kthread_parkme+0x18c/0x230 [ 1848.673907][ C1] ? kthread+0x13a/0x450 [ 1848.678127][ C1] ? __pfx_kthread+0x10/0x10 [ 1848.682700][ C1] kthread+0x370/0x450 [ 1848.686745][ C1] ? __pfx_kthread+0x10/0x10 [ 1848.691313][ C1] ret_from_fork+0x72b/0xd50 [ 1848.695885][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1848.700979][ C1] ? __switch_to+0x800/0x10f0 [ 1848.705635][ C1] ? __pfx_kthread+0x10/0x10 [ 1848.710200][ C1] ret_from_fork_asm+0x1a/0x30 [ 1848.714966][ C1] [ 1848.717962][ C1] Modules linked in: [ 1848.735400][ C1] ---[ end trace 0000000000000000 ]--- [ 1848.740867][ C1] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 1848.746078][ C1] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 2b 2a 39 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 1848.766973][ C1] RSP: 0018:ffffc90000a08d58 EFLAGS: 00010206 [ 1848.773329][ C1] RAX: dffffc0000000000 RBX: ffff88802df90510 RCX: ffffffff87d1359f [ 1848.781655][ C1] RDX: 000000000000000c RSI: ffffffff87d13615 RDI: 0000000000000060 [ 1848.789955][ C1] RBP: ffff888027c90248 R08: 0000000000000005 R09: 0000000000000005 [ 1848.798298][ C1] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888027c90c00 [ 1848.806632][ C1] R13: ffff88802df90500 R14: ffff888027c90240 R15: 0000000000000000 [ 1848.814961][ C1] FS: 0000000000000000(0000) GS:ffff888123edc000(0000) knlGS:0000000000000000 [ 1848.824299][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1848.831199][ C1] CR2: 00007f0cd6662300 CR3: 0000000062eff000 CR4: 00000000003526f0 [ 1848.839496][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 1848.846866][ C1] Kernel Offset: disabled [ 1848.851164][ C1] Rebooting in 86400 seconds..