last executing test programs: 29m8.872609064s ago: executing program 32 (id=113): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000002c0)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000003c0)=ANY=[@ANYBLOB="205aba"], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000440)={0x20, 0x17, 0x4, "549b3e82"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000004c0)={0x0, 0xe, 0x4, "2ae84be4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f00000005c0)={0x0, 0x18, 0x4, "7fdb14d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 27m26.663529326s ago: executing program 33 (id=231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', r9, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r10, r9, 0x25, 0x2, @void}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000000), &(0x7f00000000c0)=r4}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r11 = syz_clone(0x4084111, 0x0, 0x1d, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r11, 0x1, &(0x7f0000000380)={0x14, 0x1, 0xfee9}) 27m20.546991481s ago: executing program 34 (id=235): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x200440d0) r1 = syz_genetlink_get_family_id$l2tp(0x0, r0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="00416f01", @ANYRES16=r1, @ANYBLOB="000128bd7000fedbdf250600000006001c0005000000080019000a01010206001b004e23000014001f0020010000000000000000000000000000050006002d0000000c00100001000000000000000500040004000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r10 = accept4(r8, 0x0, 0x0, 0x0) sendto(r10, &(0x7f0000000400), 0x0, 0x4044000, 0x0, 0x0) recvmmsg(r9, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/201, 0xc9}, 0x60e9}, {{0x0, 0x0, &(0x7f0000004600)}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0}], 0x1}}], 0x3, 0x101, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r11) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="680200000005030000000000000000000500000254020100010000000000008001050900ff00120073797a310000000000000000000000000000000000000000000000000000000083536fbebb759c421376cc71fc07dd45365540742570280cc97680299f52a2d35d606f739128a0826de95fedb865085504ce24b5735bcc31c9eff26500080700000000000800000001000d0000000000020000007400040002000000010001002000"], 0x268}, 0x1, 0x0, 0x0, 0x40001}, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01fffc00000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004"], 0x38}}, 0x0) recvmmsg(r11, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x0, 0x0) recvfrom(r9, &(0x7f00000001c0)=""/62, 0x3e, 0x142, 0x0, 0x0) 26m4.460477992s ago: executing program 35 (id=336): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000200025a726bd7000fddbdf250a0000cdff0000010200010008000600000000000c000c00e5"], 0x30}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20846, 0x12) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020}, 0x2020) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000002200)={{}, "afe1658d587e93ab4b5fca380cdddd71e95c81000bac90d9689507b96ace5d2f9f55fddb8b36c7cac9209681a5fa01cd3874b06f2fcadd0d6c3b2543560ad96ffb3b3bb528250d54c3849e85a72f9805820433eaf86b855cc6bb316351ebf38753b22f619e6525c21a5050c57297595293366a0ed2ad9b308f845f1d9af97cf6384f5ec26ca2afea4eb950f209116b1d8b58fe396fcfb8ae0b8898f212b216cbb7d1bbd57a726d194a29a4e15e035b8162b139c67404e6a503db799c06078f56258de59c08f1812611aff6d4485a01f3413b9b4a11412629c2a4810db413d940af170b313dcf9a1e08e0156a7784c413ffa69bfb6b135b6093ad19c7f8bc70e5f9a0bcf07eb164c44642489845d93c25064c768ff253b3faf52378653b61ed2f3460a2221e6d9b2c04e99cd9fe74c005a330a08f558771a77771a1d1eb8b110912dbc327e07869f73b857cb841b5a47296a81d956c030dee87fda743cf9e56d08856a82ee26a390ac2569a31ca9beccda0251f28b124ee1e8ea6babc1b1e2d81fc795de9620301d65ded5865c5a9f6ce7422536d40694c2aa987542364f7f0bb75bdb0182d10b18a64045c7dadc0c82a47eab7e735fe240f27bb5da305cd08c86314a4a5fef8487c96bc1ea97409d73e1cc6ceba35f74eea39f2bf881833298b1e1a201eb9ea9c0754d41ef9a91b4deefcaeff08ee35a1f31b2d780b3934d5913626ef4a0f31c8e057e43ff14fc6fbf5e4a86b906b1ba320f3c52b629974a1324d97067935df1e4340b071130ee953bababf9dc0229e4a2f29cf1ae2713ffe85a5a9bd374c928ed416e1bd2516657bd4d3a9ac114ed279fcd89645245df7c55454fc367513ffae594d5236b320ad103f2d0956b3da7344a29fc910040027ca8b239d00ab5e79eeb83e25275fb61ceb65f6ace88cb43f106e128330ae709e19f209afd87b934dbd0faf470dfb52fdfd73bfa9a7a983b36d78469568ae69a0481cdc764c554d5ac03e607781cf3a5e209bffce2276529929d800f6d9b8a2f100108d7b883b5ce5e19da38ae5c99a8351b4e41c538fee7299a890edc630abbfe604c0b8847a7b5b4eec1dc00ed60e95b5374270ec634ff6d6ccbcd08145f9df1c2082c9447482ed42b4d0ea9a73bc9a68e36ee9e118bb5c08e1e7c2bd2627e82902d2c6f0da90bdbc52103f3992663653fd2b41a4294aa8f222812fa8b5e1864b75748f992bc2b396c03e202e8bfe9a1ccca1cb8b28c9c6faa47cc6b871140ddc45a0d02c752175a0498c3ba30e79c12d6ebbc32d5533d0216529e0f713eac725fe41bad4c9051d364bf38e3b72641510b09b2645447ea13b440d568adc9aa9ce85c967d78a14bdbd2fcfe0c7324a556ee841fc9ffd7a3c784fe41a349ced68e01c145db8847a547086c5595b9f6299bf7432e0e9c9a4a9108a24f7ad49c18a3ec771953480a0a0fdfeaded6b74f174ea2def77a0b9799f6b75a77a6314a4165e194be616eb5c98726d88da79f54fd01d39e751837a6bd0d77ca79073b3a7e62686fd8e089b0258645db505bb674174d626b1d1cfdf0f32b0d880884b73c63bc78a231a8cb45a12884907c021f87cdd7b2f1de020044666d38a866983c8ffa0cc6963a745c108e80a3b54eedac65b68c897043d914f146ba4ca18a61e144e7746d31879fa7ae7c2a43747e6060d79669bf9a8edcc229b7f1a0fe239b398692a6a65acd19c58442dfa8997430aab89aae8fb8f201bb1fd58605cf9dfe5c85a15e0928542a8fd7768f4b7750c7aeab8d9ced7c9fdea6cc38bc38209f608cc3d7c8bc9240b5b7d1661b8bfd231f30047befefd70183fb8330d184394159cd4153990c6a43ccded133adecced28499e73c4b25ee86e5d68848670736362931be74fe0aab5708ce05f4d6d7a068c590d36f99a0ba3501df60d9c01f54a7c366727287996de354c4a3a5e1ece988e5f59087c730afa107edbab31de441a88061ad799fefef86254a2f2891aa47420dd3f6267833a5345bf001d10c9f1fd121401ae846a9a5df517210cd0beb50a5139854aa1747115bca24522dae42667ef9ce893c4db108941198ed5323f582f11c4b13385f60b3038fa661f3ed276504fb51fb966ef88cbbb953c269ea2ed989ced5e8988839c55b398dbce98ce1e976c2065b2ded80f929dc6ef8afad6b61145686ce14e2d26f0694fda1e52a6c5155c0d8ea91544c76548a25376f13de7245b48e7298421d2c2433a472a8c89c3e621c5370654e1c7bba0f3d8bdf40c36cdbf02f6b5a7c4138b9e3931896fd89272b4d61a9875c00ba0d8d1bd960b9aaee3b6f127db1155680d7eefc5eaa6d4c648fca303706796bef110fbdb731d9e671f937e55ebf5d2e64f7cdcc073c905c134e8d3852689ed81c95be0c259816e7ff7b979557684aa1b6c2dd42754bda93e3e55c5ffc1122c988ca171fd57ab24ebe789e819c60ff3f9f1a9465ff4a9bdc5c2b2d9c351ffef5ab375f9024e297a26642b15108781fdf3c55d0aa9a8cb68ba93b7b13cd6d05b9b16502d7f9d72d015059e7999cc4ed880fd5ebf626ea409b9f0c4ded2974bb3daf88cc1930818dc3e09200897389211d3e780faa0acd64e37c60924a3fd0a16a7146a41b1b01e43fecf610c7d11d42baac5a60db7638077162cd58b3f734070e81ee71c5092422eaac366b41dd996723124df9005cbae4e2ec47f8a06616bd7faa5da6c0200c872c2ef929a16c823c57f2d4f798061e49102cab3af65a5cc9f8856dc5d3c0de1440c4d8df50a7ec09491d2e651ee5f5a76b8fc2d20a07def1a8951b9770f85728b42cd9dafce7c341c26a90b7d1c2e36f03f74eda3bfb2c40eec5c454c38e90f4d31e6a0f23b2ad53a429f73761713181b7839792cc494f21c5be9dd7f167a6681720ccd3cfcdd4b427058b995505a82993805a1860d5ea75e61c216ec9594adfd39cab47511578d57e312f2f3e0d2da8f2d8dbe3fc1fd281bdd8e7dbd203e4ec3e7d3b468ad2b81a76c5bac460f497e3cdb6bf0c6be5ceae4bd488b9597b13a37885b95426d8ea06760516ec13aa339084407d1f45e331e5dd77ac73306f70996728a0d67b48a833e9a3ddf22968e898b59e4b4c9a16aa9ea8120202737746e1a5ec2cca9640d69df2b27900de7abe573b7c023a88d7f3fcc3469a3a4e7f9f9095a6fed55fbb1d3582807407e62b55a38d33e70a0203513f30d37a4e6f03acd9d0fd2f3438eb485aa5e693806c002efd0811ab92518c41856039d7f36cf9981981231b3cea3493f0e8988bd05d3d424a5bfc8d1cdfd0e09e3ce12cab6edfb7f6d80c1edbb4d1d51a1500b0876e13e5173bfeba378c71046e70b590cf542094d01f458a3cec642fb1ce13a992765eca608579e85f03e7d871dbdbd882ce4821a944179e48a920d346ae21b08ee043cbbf3284c3a67d9b9417a5fed1202ca537f7711650f692df044f145587467dfdd45405d7caeb064bfa12b52057e90d2b5d2885bbaf032db769654af272dd78bb8ec8446344d0c1ca57d51fe1243e0a02ada90371e75418223f171f014f9a970964828cdd9faf3b66789cefd0374437f2a271c2765d9876943fb93205cb12448d4cccf68c28259e85a540e013ac77414a147fb1e0f0fc4a4d859a928eaef6e952a103a944052534c9264c85f4200cc8b465f66725c779f49312a308dda8fe7e423ebbee16e64ad6e112b3efd95584160f08c83595fdddfa39c4b89867fcf23085a24c53a6d846863b95f5605beb9b0a1cc6d191524da81ce89c0f7767652d887661b5299e300f2e83a6c962cf9089d82b139f4bedcc14bbf6611258d52e1f3d5a5e3ac05cfa4d066550b2180c31695a52da12c1412e55cdbe6660d86fe4c8eda51f2adf34b81af8ec55b549c3bbcc588c5f074e0dc76bb9bbd0cdea26dd47d84d9321f970912d374a081c9ebb74700a0792dbbb2da41ae7e3aa5230bdd260bd208b68100dc2f7bf2132d7cb34084e999b6ee2b91356ce766523a80359147af20fa15febc42b89d43e4a48d13cb8ed6678f346aa981954e0520ea8cd0a0c16281e57f33a5e3fd97d55d24386832c17f22b1c1fb91d5b1f362f3bc8aa8369c18444fc10e9d1285f6a3bcf24e2606b69fbd89f337f7ee3c27b1a2c7e8dec2c38c84c6712de1e7f1d790d86d8e0a402c40d406d39c13879f4d103adcbca13570eadcd424f8e06155885b054e1d7f994723fd22a6d704a89e6b126271ec5c19ea7b814c36f9ca9a0223da630324ca0f2a3010f4e53426d8d514bcc3303e6fa429c00244b918c01a444f74dd376bccb5709ed103514484a67240c4b992c722601e27dee6ba8b37608ba66e2065f8298a6df8c0a491113bf10e0bf18867dda3e1170fa1853b355fdf41898de4a339927872e8d9fb8a4d1c31833ac1355695a20c75ff6dafb70244a3754cb58feee89045e3408da902a7987e6a66dad0f044951a560954ee812abe142e9a4db701bdc46fabb0b98b4be01dadd629cffc661a3816744bcacdc38777494289ba156b272ade8f4ed3e32ce48958863b09bb09fb6999281164c0c5b50a77350d5f3c78d951fa76d1db68587e58bd40f824a68fd59c4ebd4f7e22e8e1458911012472b876ab15ca8c48ef664b1da41bd1ad9a5b799a1de8b2962c477f1726cbbe4f285a5c387842ac723b3877f5826503b68602c4bdaea94544b4b056142876d995d0db128a38f5c4547f12cf9d1cbc678cd42eebf67519484ab251855dbda09dd04ddc031860a69fd592fa1c12d59adc4699c246a666f6f6c20c1a21562f05f8db43ff424cea0d16789a6a69dc8552f4865bb3fac5b650b549432a0383c8f95c79084ca4841903f0c04319135f2bfc94ec8837374f0c1eccaacf8a0722d54b1a0e748a79e6c7ecdcdbfe376d080d9747a9a5a13cc7eb4111345216d1c787f05c992df3712d2a194ac325bb568abc6a97011bc62110ee12ba209d76f690ddb4e4b417f5b5db52ee7ad97159dfcf82b1c2a4eb5a97396fa24e52ba1c47330f7caca91b2965bac75dbcb86ac85a07b774dbf82be5fc92a8621e80973418d94a0bc10905a3815e04d1a668ea8cb5ffb293893b06bd372c75b477118b78dd69a04097ca8ff8f8fb21a5293d2fe6785e33d15d61008c4ca84121a8e48fabba3656250fba7e058ffc1705c7fa13509fc7c96fc9b16d0b21a26b11ebfc3325a2ca682bc014ec54dc8433af105ada5566f491d3ebe5e1e5f0859b28a576fb7978f2a1b4897890c1c9b0c1f4f8c7351ca738a6100c4f64092d865bc65a8b92007b117e5a4dd7988d3281aa2ccebb36f9af5032eeca2c8a72888c84346d3945507a6bb956b84f03d88a90bb9ecc466c7d94a3670783e11b312ecb4f9eb8489df8d129110b6bd710138476c8be75327e9ea6a0b94b8567b31692fee2d9c17d7e20d3d23cc4d317710537f608793e87d9158cd61a43306898da40d01b544fc951ccd13f11b4b8fbf47d694df601fd6677d796818571ee3125089316e3d33c5684affe9f29f12186bb5dc4c5eaee94e41d07a03c9c59db95bc42c23da55c497caa6a64c73ea3059a8c80955a9730666a0e02c3bf87cfb79542d84a529d7bf9c3ac60b323952fa439c2e5fd512c3bfe3770178b4e8d7efa223bd76830a6b8b604e15773d63d9fec504ea6561793723ff4f6fbdd016372e1a98a9252e8d1607512e5397c78498f68d3792ef7a28f74f4b15358afa5674d4340863a2897af87499bd073a06aef8215f76c9418f5b82b79b77f0a01dfc059b510794cda70b7daf2c74950652e"}) sched_setscheduler(0x0, 0x1, &(0x7f0000003240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000003300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000003380), 0x651, 0x0) recvmmsg(r2, &(0x7f00000033c0), 0x10106, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) prlimit64(0x0, 0x3, 0x0, 0x0) r4 = creat(&(0x7f0000003400)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r4, &(0x7f0000003440)={'#! ', './file0', [{0x20, '\x15\xe6\x8e\\\xfe\x15^\xca\xbb\x88B\xeb\x90FAv\xdc\xbc\x1eiU\b\xc2D\xdb\xca\x9d\xb4oL\xe92\x7f+\f\x0e\xfd\xceTC\x1f;u\x84E\x04\xe3B19xO\xc2\xd4.Mp\xf4\x80{e\x87\xc4V\xe0\x99\x99\x8b\x93I\x8a\xb3\xce*\x9b\xd0X\aA0S\x02k\xdb\x12\a\x9c\x10nY\x85\x92\xf6\x93\xc4%\x0f\x80.\x8d\x9b\x15\x8e\xf4LWr\x14\x9eKh\x97L\xb4\x03\xe9=\x8e\xff\xf0\xb1al\xb6\xc9\xa1/L\x8c7\xa0\x8eD\x1f,\x93`\xc0h\xacjGx\xb8\x9cv\x99bA\xc5]\b\xf8\xa5\x9b\x1c\xeeKB\xdd\xe8\xbboT\x90\x84k\xae\xb5\xfa\xd9\x0f\xd4T<\x0f\xdb\xec\x05HcN\xae;\x87\x00\x00\x00\x00\b\x92\xa7\xdf\x1dS\x00\x8b\x81\xf4\x84X*\xa6e\x922|FO\v\xa6\x17jG\xe3]'}], 0xa, "85cadd42c3625d99eda3c51c4e193ec2012d8462c147ea29261500c6aa9c2c56a066b3ebc82fea7190d572b9c098378fdc5f33e13f3ea6a1f63341756d4ba54e0b1af2c6f82c635dbc2bf84868a9a346b4a4e0941ee28a59c4a34528af58f636"}, 0x144) r5 = syz_open_procfs(0x0, &(0x7f00000035c0)='net/route\x00') pread64(r5, &(0x7f0000006fc0)=""/102356, 0x18fd4, 0xc2a) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) syz_emit_vhci(&(0x7f0000020100)=ANY=[@ANYBLOB="043e1f0a"], 0x22) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006e80)={&(0x7f0000006ec0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000006f40)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r6, 0x1, 0x3}, 0x50) 23m43.518791052s ago: executing program 36 (id=564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x59) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', r7, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r8, r7, 0x25, 0x2, @void}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r9 = syz_clone(0x4084111, 0x0, 0x1d, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r9, 0x1, &(0x7f0000000380)={0x14, 0x1, 0xfee9}) 23m34.887065751s ago: executing program 6 (id=584): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) bind$inet(r3, 0x0, 0x0) 23m31.314893852s ago: executing program 6 (id=587): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x74, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x16}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYRES64=0x0], 0x20) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000180)={0x0, 0x0, @raw_data=[0x3ff, 0x2, 0x0, 0x401, 0x1, 0x2, 0x6, 0x10001, 0x7, 0x2, 0x2, 0x9, 0x2, 0x401]}) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000001600), 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x220000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001b00)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000001c00)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000902, r4, &(0x7f0000001c40)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001640)={@cgroup=r1, r2, 0x2f, 0x2010, 0x4, @value=r2}, 0x20) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001680)=@bpf_lsm={0x6, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000001780)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000017c0)={r5, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000018c0)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a0010000000", 0x28}, {&(0x7f0000001900)="11c9064268e957a7204d", 0xa}], 0x2}, 0x40) r7 = dup2(r6, r6) sendmsg$kcm(r7, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000019c0)="aa4dd412451e9286ce73e007c3daabac79b6695b3f63bee113583ea8371b96d53e22cd3640568521e7d0729e1b5d85777aa5dfad6773a9226a9378797a894e", 0x3f}, {&(0x7f0000001a00)="dfe2bf42ea607cae32c1f4b7beb1845bfcb5992515c63214ea4f5babc02d42720d6685b2818058929d40617a091fd6bf2ed6f3a8a1ad58294d40d2f2519309d3b3f54e5f275440b7803ab685dbbe3f50aed60ddd800e520b0ca2aa1b21742b8e0bab0b9e417c0e64c939a706", 0x6c}], 0x2}, 0x80) setns(0xc9, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) write(r8, &(0x7f0000001a80)="14000000140005b7ff000000040860eb0101b6ff", 0x14) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x15, {[@main=@item_4={0x3, 0x0, 0xc, "6e6d162d"}, @global=@item_012={0x1, 0x1, 0x1, 'k'}, @global=@item_4={0x3, 0x1, 0x9, "d091cda8"}, @local=@item_012={0x1, 0x2, 0x1, "04"}, @local=@item_012={0x1, 0x2, 0x2, "d1"}, @global=@item_4={0x3, 0x1, 0xf, "000200"}]}}, 0x0}, 0x0) 23m27.335872664s ago: executing program 6 (id=589): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x28bd, 0x74, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x16}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="65f60cbbb93624e8b9dd64777854e33d85ee1132ab2cce1611aa6562cfa4b8d325765cd61345c5f94583770459c399b5210396809da16e997e9bed0d45bfe4c329ffba91a43c5d47a44f36381f63c6dd7e6266afeb7d0f667fb6319c4bd3668e910bb95f67716d6943aa8a18f09c4f7a817ed2e642d78f94524219b950a4a52488ec29d9fc7c8225cdf71c0c4a7a445b8c90e60c098ad3881d0e991a7b04be1fc7bf1b39c89562248fbb555b29cc5cbd45adbff359d3971ddf3ab0fa4b3cdaf3c83409b6fc3c4bb1c0bd6dfb3c1e6e9d794fe919ed00d0fb33932b", @ANYRES64=0x0], 0x20) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000001600), 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x220000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001b00)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6}}, &(0x7f0000001c00)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r3, 0xffffffff80000902, r4, &(0x7f0000001c40)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001640)={@cgroup=r1, r2, 0x2f, 0x2010, 0x4, @value=r2}, 0x20) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001680)=@bpf_lsm={0x6, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000001780)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000017c0)={r5, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f00000018c0)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a0010000000", 0x28}, {&(0x7f0000001900)="11c9064268e957a7204d", 0xa}], 0x2}, 0x40) r7 = dup2(r6, r6) sendmsg$kcm(r7, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000019c0)="aa4dd412451e9286ce73e007c3daabac79b6695b3f63bee113583ea8371b96d53e22cd3640568521e7d0729e1b5d85777aa5dfad6773a9226a9378797a894e", 0x3f}, {&(0x7f0000001a00)="dfe2bf42ea607cae32c1f4b7beb1845bfcb5992515c63214ea4f5babc02d42720d6685b2818058929d40617a091fd6bf2ed6f3a8a1ad58294d40d2f2519309d3b3f54e5f275440b7803ab685dbbe3f50aed60ddd800e520b0ca2aa1b21742b8e0bab0b9e417c0e64c939a706", 0x6c}], 0x2}, 0x80) setns(0xc9, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) write(r8, &(0x7f0000001a80)="14000000140005b7ff000000040860eb0101b6ff", 0x14) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x15, {[@main=@item_4={0x3, 0x0, 0xc, "6e6d162d"}, @global=@item_012={0x1, 0x1, 0x1, 'k'}, @global=@item_4={0x3, 0x1, 0x9, "d091cda8"}, @local=@item_012={0x1, 0x2, 0x1, "04"}, @local=@item_012={0x1, 0x2, 0x2, "d1"}, @global=@item_4={0x3, 0x1, 0xf, "000200"}]}}, 0x0}, 0x0) 23m23.847787555s ago: executing program 6 (id=594): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x11, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000100)='./file0\x00') setresuid(0x0, 0xee00, 0x0) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r2 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r2, 0xb) shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r2, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) bind$inet(r3, 0x0, 0x0) 23m22.130192049s ago: executing program 6 (id=597): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r2 = fsopen(&(0x7f0000000080)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x40000) write$dsp(r1, 0x0, 0xfffffe59) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x1f) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r5) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b32, &(0x7f0000000080)={'virt_wifi0\x00', @multicast}) r6 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r4, 0x100000000000f7) sync_file_range(r5, 0x1d, 0x7, 0x0) read$watch_queue(r3, &(0x7f0000000000)=""/18, 0x12) keyctl$revoke(0x3, r0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) syz_usb_connect$uac2(0x5, 0x11d, &(0x7f0000000300)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8, 0x86a, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10b, 0x3, 0x1, 0x40, 0x60, 0x29, {0x8, 0xb, 0x0, 0x0, 0x1, 0x8, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8001, 0x1, 0x30, 0x5}, [@feature_unit={0xf, 0x24, 0x6, 0x2, 0x1, [0xff, 0x6, 0x3, 0x7, 0x0]}, @feature_unit={0x7, 0x24, 0x6, 0x1, 0x6, [0x1]}, @source_unit={0x8, 0x24, 0xa, 0x3, 0x3, 0xc, 0x8, 0x2}, @effect_unit={0x9, 0x24, 0x7, 0x3, 0x1, 0x6, [0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xe, 0x1, 0x6, 0x40, "1d"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0xff31, 0x94, 0x1}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xa}, @as_header={0x10, 0x24, 0x1, 0x7, 0x2, 0x0, 0x3, 0x8, 0xd, 0xff}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x8, 0x2, "701f0c125d"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x4, 0x1, 0x7, 0x80, "327d2171fb9eb02266"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7, 0xe2, 0x8, {0x8, 0x25, 0x1, 0x80, 0xf, 0xe0, 0xfc80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x4}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x8, 0x9f, 0x40, "59fbc181"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8, 0x9a, 0x5, "dc6fdcef5e8bde3c6a"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x2, 0x0, 0xb}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x4, 0x2, 0x1, {0x8, 0x25, 0x1, 0x80, 0x0, 0x4, 0x3}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x200, 0x9, 0x0, 0x9a, 0x8, 0x4d}, 0x0, 0x0, 0x5, [{0x39, &(0x7f00000005c0)=@string={0x39, 0x3, "1d303e48c2ae2e92a79b9ebe6c2b22f57581331a2297d5541ad68f8116c06ca5821e331e269d550a08bdf192bd61e6f04a008f07d1e8a9"}}, {0xcb, &(0x7f00000004c0)=@string={0xcb, 0x3, "be5faa3d536d0971c2cc8ee786bfd4451c88088fd9d8f164f0fc0c51d71971bdb81571d3749b43ee1918196e1e11b19c0732994d9fa1afec20fef226de8dd091077e454ce7957a21643323262092e02f3c775d38dfe79cfb4790a77cdb65417a942f77c0ebc067d9ad64ca27c49de37d72740039d2c48fa175a4774ce2e8c73b444bbf788066533de53ed66d6118b884a9843c2171ec8ff6ddc3a37a597d0fe86a82b1fe7f9cc3bb821ef29b795c5a38a05515382c8ef17a38e969492f19296f589266dd5052dca82f"}}, {0xbb, &(0x7f00000001c0)=@string={0xbb, 0x3, "d8bb1ddb23075f55199114eabc21f98f951a5f976c34ba60f1ab5bea8aec3f2081d97b5438ffceccf0e938606f72d99263a45f71a6b6283ad9c1d19cd6c7af1ed86667bbdb88bd20911ab4f24fd8236de9869201779ce6ca276024232fb33238bc092ab1f7076ce9bf21dadca8afb3ed2d53e0e1eed759aaaba72e13055068812f4ba596a5e169071ef8e7703d8fbc5cac18e2fae2fb5c16b9dbe9997ab7db9d4f921fcda25e3d950efb133355f5397877868b842ddf4e20eb"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1404}}, {0x31, &(0x7f0000000640)=@string={0x31, 0x3, "50ab8eaed1c4f774bd9eb1087b91025bc4172a274ed33847a2cc14c9d727e62e28e1049552720b13b04a2fcbf2421f"}}]}) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_int(r7, 0x29, 0x4b, 0x0, &(0x7f0000000e00)) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') writev(r8, &(0x7f00000012c0)=[{&(0x7f0000000100)="dd", 0x1}], 0x1) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) 23m20.775379437s ago: executing program 6 (id=601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) ptrace(0x10, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x200, 0x168, 0x10}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r4 = syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) r5 = syz_io_uring_complete(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {r4}}, './file0\x00'}) 23m19.954879522s ago: executing program 37 (id=601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x20000000}, 0x6e) sendmmsg$unix(r3, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000240), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x6) ptrace(0x10, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) openat2(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x200, 0x168, 0x10}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r4 = syz_open_dev$vbi(&(0x7f0000000200), 0x2, 0x2) r5 = syz_io_uring_complete(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4, {r4}}, './file0\x00'}) 9m35.91801187s ago: executing program 4 (id=2764): syz_open_procfs(0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) read$msr(r0, &(0x7f0000000680)=""/4096, 0x1000) syz_emit_ethernet(0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c200000086082b9827c186dd60cb3e0200403a00fc02000000000000000000000000e7eafe8000000000000000001f4d8718e81d66640000000000aa04009078000000006097436700001100fe880000000000000000000000000000000000aa0008"], 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nullb/nullb1/size\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='256\n', 0x4) 9m35.653527175s ago: executing program 4 (id=2766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 9m35.121641981s ago: executing program 4 (id=2767): clock_gettime(0x7, &(0x7f00000009c0)) io_getevents(0x0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000053238f91734d36d264fdbbfa0b722610000108000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000206010800d3f7f4316bb13a94000000140007800800114000000052000004404e21000005000116060000000000040001000000"], 0x1d}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, 0x39, 0x701, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000600)={0xc}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000700)={0x30, 0x0, 0x0, 0x0, 0x4, 0x178, 0x4079, &(0x7f0000000740)=""/77}) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="043e13010042000000aaaaaaaaaa201000"], 0x16) 9m32.96982481s ago: executing program 4 (id=2770): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x65, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="28002d800a0000000101010101000017000000ec6cadba71285c03863b"], 0x50}, 0x1, 0x0, 0x0, 0x20040444}, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @random="6a2ddcf6177a", @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8864, 0x0, 0x1}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x26, 0x58, 0x65, 0x0, 0xf, 0x2f, 0x0, @private=0xa010102, @multicast2}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x1}, {}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x5}, 0x1, {0x400}}}, {0x8, 0x22eb, 0x4, {{0xa, 0x2, 0x2, 0x2, 0x0, 0x3, 0x7, 0x50}, 0x2, {0x5, 0x1, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='md0', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x24, &(0x7f00000001c0)=0x1, 0x4) ioctl(r5, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r8, 0x8010aebc, &(0x7f0000000440)={0x40000, 0x102000}) ioctl(r5, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") syz_open_pts(0xffffffffffffffff, 0x0) ioctl(r5, 0x400c0930, 0x0) ioctl(r5, 0x932, 0x0) 9m32.10108374s ago: executing program 4 (id=2773): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xb0ff}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb01001800000000000000200a8e2445d696543f000000000000000000000d0a000000000000000100000d00000000040000"], &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0x1}, 0x28) 9m30.942407522s ago: executing program 4 (id=2779): syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000840)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000880)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000980)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a00), 0x651, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYBLOB="0c00990000000000fd77ebff15000e001c"], 0x4c}}, 0x0) recvmmsg(r1, &(0x7f0000000a40), 0x10106, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x6, 0x9fd, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) r6 = syz_open_dev$usbfs(&(0x7f0000000ac0), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000b00)) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, 0x0) unshare(0x40000000) unshare(0x40000000) 9m15.431646669s ago: executing program 38 (id=2779): syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00'}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000840)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000880)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000008c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000900)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000980)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000a00), 0x651, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYBLOB="0c00990000000000fd77ebff15000e001c"], 0x4c}}, 0x0) recvmmsg(r1, &(0x7f0000000a40), 0x10106, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sync_file_range(0xffffffffffffffff, 0x6, 0x9fd, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40c4) r6 = syz_open_dev$usbfs(&(0x7f0000000ac0), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000b00)) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, 0x0) unshare(0x40000000) unshare(0x40000000) 3m51.95899168s ago: executing program 8 (id=3500): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x65, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="28002d800a0000000101010101000017000000ec6cadba71285c03863b"], 0x50}, 0x1, 0x0, 0x0, 0x20040444}, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @random="6a2ddcf6177a", @val={@val={0x88a8, 0x2, 0x1, 0x2}, {0x8864, 0x0, 0x1}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x26, 0x58, 0x65, 0x0, 0xf, 0x2f, 0x0, @private=0xa010102, @multicast2}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x1}, {}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x5}, 0x1, {0x400}}}, {0x8, 0x22eb, 0x4, {{0xa, 0x2, 0x2, 0x2, 0x0, 0x3, 0x7, 0x50}, 0x2, {0x5, 0x1, 0x2, 0x5, 0x0, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x9}}, 0x14}}, 0x4004804) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='md0', 0x3) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x24, &(0x7f00000001c0)=0x1, 0x4) ioctl(r5, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r8, 0x8010aebc, &(0x7f0000000440)={0x40000, 0x102000}) ioctl(r5, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") syz_open_pts(0xffffffffffffffff, 0x0) ioctl(r5, 0x400c0930, 0x0) ioctl(r5, 0x932, 0x0) 3m50.116978667s ago: executing program 8 (id=3504): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x398}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 3m49.731818704s ago: executing program 8 (id=3506): clock_gettime(0x7, &(0x7f00000009c0)) io_getevents(0x0, 0x2e5, 0x3, &(0x7f0000000100)=[{}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000200025a729bd7000fcdbdf250a000000fe0000010200c55397450600fe7f0000"], 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000053238f91734d36d264fdbbfa0b722610000108000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000206010800d3f7f4316bb13a94000000140007800800114000000052000004404e21000005000116060000000000040001000000"], 0x1d}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, 0x39, 0x701, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000600)={0xc}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000700)={0x30, 0x0, 0x0, 0x0, 0x4, 0x178, 0x4079, &(0x7f0000000740)=""/77}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="043e13010042000000aaaaaaaaaa201000"], 0x16) 3m46.25039309s ago: executing program 8 (id=3510): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000023c0)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f0000002400)="dc", 0x34000, 0x44004, &(0x7f0000002440)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) 3m45.884555434s ago: executing program 8 (id=3512): fsopen(&(0x7f0000000000)='pvfs2\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x2) write(0xffffffffffffffff, &(0x7f0000000100)="4f4f4f4fffffffff000000010000028000000168", 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r4, @ANYBLOB="080008000604000014000100ff"], 0x34}, 0x1, 0x0, 0x0, 0x891}, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000240)={0x1, 0x7, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000280)=@userptr={0x0, 0x2, 0x2c, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000300)}, 0x400000}) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000340)={0x1, 0x1, 0x2}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000380)=@userptr={0x0, 0x1, 0x400000, 0x0, 0x0, {}, {}, 0x0, 0x2, {&(0x7f0000000400)}, 0x400000}) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000440)=0x2) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000480)=0x1) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001e00), &(0x7f0000001e40), 0xca}, 0x38) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r6}]}, 0x20}}, 0x0) syz_open_procfs(0x0, &(0x7f00000005c0)='map_files\x00') sendmsg$nl_route(r1, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000016c0)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001b40)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001c00)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r7}]}}}]}, 0x6c}}, 0x0) 3m43.029382933s ago: executing program 9 (id=3519): socket$nl_netfilter(0x10, 0x3, 0xc) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000007c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000b80), 0x8, 0x10, &(0x7f0000000bc0), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c80)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='&'], 0x10) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r8}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11dd, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4, 0x0, 0xc3, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x2b7}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20084884) 3m42.828941031s ago: executing program 8 (id=3520): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'sit0\x00'}) syz_clone3(&(0x7f0000000000)={0x400800580, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000080), 0x4000000000001f2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20008000) r4 = getpid() sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x9, 0x3, 0x0, 0xb49, 0x8, 0x8, 0x2, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000140)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f00000001c0)=0x0, 0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, 0x0, r7, &(0x7f0000000240)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 3m41.881974237s ago: executing program 9 (id=3521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000540)=ANY=[@ANYBLOB="50000000080211000001c5ddf59e00000807000000000000640001000006020202020202010882848b960c12182416f5f01ad734fb052bbe85de4da2e65c363f720a32aeba01b7241401b8b2561992d0cf279c56f8e969362838dcfb9bd084522ea96156c8bce5ae4f4277eb83d5f38e8cce8eaa3573a33ff0b311"], 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000780)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4}, @device_a, @from_mac=@device_b, @device_a, {0x4, 0x1}, "", @void, @value=@ver_80211n={0x0, 0xb, 0x3, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @random="eb705c890d3cce4daf2925bbe7f601405f7d76f939f9827b8e03ccf1d9775d67407ae88300a32acfc6b4617185f8bf247caf69abaf81503f22b4472034a6a2563cbf7619d32b5cc1d4a0126dedbbd38c7775644fc8fcf00b61aa4a1dce871643b778740123373473808d3fa36ae5ee21ecd090c9e57d03781f89d455e0d2b6802fff49a543b04d805c044d5cb878f9c32fa07cf2605a580a25afe3f02bd71d62052fdb3c1af91e06154d00d935a2f01a87e46fda88cf75644597a5a1880c2053330629d0c641fc72da403a5f9f168a11aa978773086be3f07b2d442f7c04593d6edd0e473304cf5b1bf135f82f1cc502049653200312d7ba6f6c3887bf28603a058c1b6407095d4b773c94b2b32c0d19a7e93f19d15b6bd0cec5d30b33b796c7cf4d609cce86e7475fe439996e93487c1701137db5fa1f3e85f6f6d2b2a9bc87abf7d02bed607d2fe895aff56b3e0d0f15373789c026217e3506cbce4e71688effe6ae329adc81ddb9e64feacdffa2d5480429124bd31dbfb2e9a2cda16febc832d8e4e11bee3d8cdc4ac14753bf4a8fde74a899813f6406287550969f2bc5f06acf0dd84bcc89d5f1b188cefddd7a86b18e0345dc5ee8ff9c1c7cf70691ea9ad19317c7469e2340b2e50a172e449c48d0ea0fbb68905c992adf757981bfd1af2d9605981c90e44d27c06954b1a9a0c44a55d1d03b97485ef60ad6b0d77458740ed2f23a783f65685ea13fb72fa7c99cbfd229ea32732c487fcc8a43e1519f7c9516a5253a91b3c371af82b219d89185bc3ce32e7e13872a38ab3beea0c7bb9faac13a19a140efe0f3e8ba86704cebea380dde9c5e19c876f0dbde70b6567df88071c145c68f73d0a85bc1b2c54fb1c70c75e0e72c1c5710e185d729612a67e24f30882ab676a3e474135a27c5609468779c8393636b2e5f40246bf6eef515874e548d7cc5de0139a63be33d5273b73d65ce1ed6d43bd8ea7f3ccf5756132132fe2690277d10d1698cdbbfe6ddf4b2d66b615cfc45491643ca873aebeae4c5cb471a8f536cb511b99e773b2df27a830050a98866f2759a0afd0bb1942bcf0ca5f32692ecca599d5dabf7e30c53c88edf597dad7a0aeea3ab000343c8c34ffafda2e8a3ef2c2fe50789"}, 0x345) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r3, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)=[0x0], &(0x7f00000003c0), 0x0, 0x3e, 0x1}) r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x80, 0xc4, 0x0, 0xa, "a900"}, 0x2000000, 0x2, {}, 0x20800}) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 3m34.323055769s ago: executing program 2 (id=3534): clock_gettime(0x7, &(0x7f00000009c0)) io_getevents(0x0, 0x2e5, 0x4, &(0x7f0000000100)=[{}, {}, {}, {}], &(0x7f0000000180)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000500)=""/139, &(0x7f00000005c0)=0x8b) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000053238f91734d36d264fdbbfa0b722610000108000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b0000000000"], 0x30}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000206010800d3f7f4316bb13a94000000140007800800114000000052000004404e21000005000116060000000000040001000000"], 0x1d}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, 0x39, 0x701, 0x0, 0x0, {0x10}}, 0x14}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000600)={0xc}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000700)={0x30, 0x0, 0x0, 0x0, 0x4, 0x178, 0x4079, &(0x7f0000000740)=""/77}) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="043e13010042000000aaaaaaaaaa201000"], 0x16) 3m32.48296779s ago: executing program 9 (id=3535): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) unshare(0x22020600) shmget$private(0x0, 0x3000, 0x20, &(0x7f0000ffa000/0x3000)=nil) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) 3m31.297139445s ago: executing program 9 (id=3538): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) openat$kvm(0xffffffffffffff9c, 0x0, 0x101201, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20000000000, 0xfffffffffffffffd, 0x10000000, 0x3}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000600)={0x2020}, 0x2020) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0xfffe) 3m31.016517403s ago: executing program 2 (id=3539): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000180), 0x651, 0x0) recvmmsg(r1, &(0x7f00000001c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000006a00010000000000000000000000000000000000080001000200000008000e000100"], 0x28}}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0307047079000000000001000400040001", @ANYRES8=r3, @ANYRES16=r2], 0x18}}, 0x0) add_key(&(0x7f0000000500)='asymmetric\x00', 0x0, &(0x7f0000000540)="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", 0x52f, 0xfffffffffffffffd) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000002280), 0x4) syz_emit_ethernet(0x66, &(0x7f00000022c0)={@local, @random="706ab144ffe0", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x8, 0x2f, 0x0, @remote, @remote}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x20}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x600}}}}}}}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000002380)={'virt_wifi0\x00', &(0x7f00000023c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x8, 0x1, 0x7fff, 0x1, 0x7, 0x9, 0xa4, 0xffc, 0x7, 0xb69, 0xc1, 0x4, 0x40001, 0x3, 0x4, 0xfe, 0x1000, 0x9, 0x3, 0x3, 0x6, 0xffbffffa, 0x5d, 0xa, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0xfffffffc, 0xfffffffd, 0xe, 0x2b12, 0x1100, 0x6, 0x100, 0xb, 0x40, 0xbed4, 0x4000001, 0x1, 0xffffad37, 0x0, 0x11000, 0x8, 0x7, 0x79b, 0x2, 0x1, 0x7f, 0x7, 0x4c3e, 0xefaf, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x5, 0xaa, 0x81, 0x9, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0xfffffffe, 0x400, 0x9, 0x4, 0x7, 0x4009, 0xf9, 0x4, 0x100002, 0x8, 0x752, 0xfffffffc, 0x3, 0x0, 0x10001, 0x8, 0x8, 0x6, 0x6, 0x9, 0x80000002, 0xfdffffff, 0x10002, 0xfffffffe, 0x84, 0x100, 0x5, 0xc, 0x81, 0xb, 0x5, 0x6, 0xb, 0x23, 0xb, 0x4, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x4, 0x40000005, 0x9, 0x8000000, 0x4, 0x2, 0x80003b, 0x4, 0x4, 0x4, 0x2, 0x66cd, 0x8, 0x8, 0x1, 0x5, 0x3, 0xffffffff]}}) ppoll(&(0x7f0000002600)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000002640), 0x3000, 0x0, 0x0, 0x0) rseq(&(0x7f0000002700)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) 3m30.640784551s ago: executing program 9 (id=3540): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_trace', 0x1, 0x0) io_setup(0x4, &(0x7f00000001c0)=0x0) r2 = getpgrp(0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000003c0)={0x0, 0x0, 0x10001, 0x4, r2}) r3 = openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$OCFS2_IOC_RESVSP64(r3, 0x4030582a, &(0x7f0000000240)={0x1, 0x0, 0x3, 0x9, 0x8b, 0xed1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000280), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000340), 0x404, &(0x7f0000000380)=ANY=[@ANYBLOB]) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x40080c0) r4 = syz_ublk_setup_io_uring(0xd, &(0x7f00000004c0)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000e00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x6, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_DELFLOWTABLE={0x9c, 0x18, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb9}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000600)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000680)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f00000006c0)=0x0) dup(0xffffffffffffffff) syz_ublk_setup_queues(r0, r9, &(0x7f0000000700)={0x0, 0x3e80, 0x800, 0x0, 0x32c, 0x0, r4}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd7f3, 0x200, 0x1006, 0x200015a, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x0, 0x2a5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x10000, 0x7, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbe, 0x0, r4}}], 0x1, &(0x7f0000000a00)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x5c0, 0x0, 0x0}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', '\x1f\t'}, 0x17, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000000)="0162fbeafeb0e0c25205", 0xa, 0x2}]) 3m29.691452572s ago: executing program 2 (id=3541): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000440)={0x20071026}, &(0x7f0000000780)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0x4}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f00000007c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x41, 0x48) write$rfkill(r1, 0x0, 0x0) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@id, 0x10) r3 = syz_open_dev$video(&(0x7f0000000800), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000840)={0x1, 0x2, 0x2}) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000880)=0x2) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f00000008c0)={0x1}) 3m29.013754491s ago: executing program 9 (id=3544): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'sit0\x00'}) syz_clone3(&(0x7f0000000000)={0x400800580, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000080), 0x4000000000001f2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20008000) r4 = getpid() sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x9, 0x3, 0x0, 0xb49, 0x8, 0x8, 0x2, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000140)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f00000001c0)=0x0, 0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, 0x0, r7, &(0x7f0000000240)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 3m28.272712919s ago: executing program 2 (id=3545): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) io_uring_setup(0x4822, &(0x7f00000002c0)={0x0, 0x0, 0x400, 0x3, 0xfb}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c831, 0xffffffffffffffff, 0x0) socket(0x29, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x4000040) ioctl$F2FS_IOC_RESIZE_FS(0xffffffffffffffff, 0x4008f510, &(0x7f0000000b40)=0xc) sched_setattr(0x0, &(0x7f0000000b80)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x6, 0xc3, &(0x7f0000000dc0)=""/195, 0x0, 0x5a, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000ec0), 0x8, 0x10, &(0x7f0000000f00)={0x2}, 0x10}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000f40)={0xfffffff7}, 0x8) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000fc0), 0xcfa42, 0x0) sendfile(r0, r0, 0x0, 0x200000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000022c0)={'vcan0\x00'}) socket$can_j1939(0x1d, 0x2, 0x7) 3m27.581933367s ago: executing program 39 (id=3520): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'sit0\x00'}) syz_clone3(&(0x7f0000000000)={0x400800580, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000080), 0x4000000000001f2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20008000) r4 = getpid() sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x9, 0x3, 0x0, 0xb49, 0x8, 0x8, 0x2, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000140)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f00000001c0)=0x0, 0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, 0x0, r7, &(0x7f0000000240)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 3m26.74873639s ago: executing program 2 (id=3549): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x200440d0) r1 = syz_genetlink_get_family_id$l2tp(0x0, r0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="00416f01", @ANYRES16=r1, @ANYBLOB="000128bd7000fedbdf250600000006001c0005000000080019000a01010206001b004e23000014001f0020010000000000000000000000000000050006002d0000000c0010000100000000000000050004"], 0x5c}, 0x1, 0x0, 0x0, 0x4008801}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) accept4(r8, 0x0, 0x0, 0x0) recvmmsg(r9, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/201, 0xc9}, 0x60e9}, {{0x0, 0x0, &(0x7f0000004600)}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0}], 0x1}}], 0x3, 0x101, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r10) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="680200000005030000000000000000000500000254020100010000000000008001050900ff00120073797a310000000000000000000000000000000000000000000000000000000083536fbebb759c421376cc71fc07dd45365540742570280cc97680299f52a2d35d606f739128a0826de95fedb865085504ce24b5735bcc31c9eff26500080700000000000800000001000d0000000000020000007400040002000000010001002000008000000000040000004a"], 0x268}, 0x1, 0x0, 0x0, 0x40001}, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="01fffc00000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004"], 0x38}}, 0x0) recvmmsg(r10, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x0, 0x0) 3m23.272833361s ago: executing program 2 (id=3554): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'sit0\x00'}) syz_clone3(&(0x7f0000000000)={0x400800580, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000080), 0x4000000000001f2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20008000) r4 = getpid() sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x9, 0x3, 0x0, 0xb49, 0x8, 0x8, 0x2, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000140)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f00000001c0)=0x0, 0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, 0x0, r7, &(0x7f0000000240)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 3m13.830202582s ago: executing program 40 (id=3544): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'sit0\x00'}) syz_clone3(&(0x7f0000000000)={0x400800580, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000080), 0x4000000000001f2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20008000) r4 = getpid() sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x9, 0x3, 0x0, 0xb49, 0x8, 0x8, 0x2, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000140)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f00000001c0)=0x0, 0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, 0x0, r7, &(0x7f0000000240)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 3m8.079550031s ago: executing program 41 (id=3554): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'sit0\x00'}) syz_clone3(&(0x7f0000000000)={0x400800580, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, 0x0}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000080), 0x4000000000001f2, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20008000) r4 = getpid() sched_setattr(r4, &(0x7f0000000100)={0x38, 0x5, 0x9, 0x3, 0x0, 0xb49, 0x8, 0x8, 0x2, 0x3}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000140)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f00000001c0)=0x0, 0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r6, 0x0, r7, &(0x7f0000000240)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 14.608213103s ago: executing program 1 (id=3922): r0 = fsopen(0x0, 0x0) r1 = fsopen(&(0x7f0000000940)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f0000000f00)=0xff, 0x4) setsockopt$inet6_int(r3, 0x29, 0x8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x80) r4 = open_tree(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x89901) r5 = memfd_create(&(0x7f0000000ac0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fcntl$addseals(r5, 0x409, 0xe) ioctl$OCFS2_IOC_RESVSP(r5, 0x40305828, 0x0) move_mount(r4, &(0x7f0000000a00)='.\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x0) rmdir(&(0x7f0000000a80)='./file0\x00') fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='source\x00', &(0x7f00000003c0)='127.0.0.1:/export\x00', 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) inotify_init() bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r8 = fsopen(&(0x7f00000002c0)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000440)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r9, r7, 0x25, 0x10, @val=@netfilter={0xa, 0x1, 0x3}}, 0x20) sendmsg$inet(r4, &(0x7f0000001440)={&(0x7f0000000fc0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000001200)=[{&(0x7f0000001000)="f8c2143c0becc5f6c6e77b0657d6e3ecfafca0939736e9887904cbf9761c2f3965d82e6ec285a1678e044fed1d829a80d15841718c9348258c1032931e89868e01051d6d9cca757bb6dda0b2882d20cd39f9382d001e1a58cdb8828243446b9106f2b17c46d58bd8fca9db00b64ad202eeca8a31f2817462660282d34203cb77cd9218c91e423beae5d102304354a784b5cba7bb4ce4f535a62dc46388b585e5d314a69bbea83d47099999a5cd7fb478164f9b8bb29cfc006b19a5d658acb71f28e818c89a6679935b15104520", 0xcd}, {&(0x7f0000001100)="88d36f05a24208a663edeed2157bbe4135985b7883cdd43d61edc1c7e11344a9c19bf85adcc66fb84ec14cf780751ee1f6044f2db6677d8a8635e668ed76b66253f78b8992c08a505c2f063e470add3317c5e569d2f6b77df3215e54bc827560c31bf9de7a969f5fe7a286d8c79fe373e6b657ca9f6767583a25ebdee5b2dcc83b8250e79521ee1297629c87d2739a7178b25a2b6d3c4ffb40f2fcce1d4f7e07a82c81a8ed0920e6b1687b569bd803a04a270d09d4feb11ae6f240ff3c6ddd7a0cd4a443d6d6a23452aa0b079db3a5641ea487bedb4dc151d1f62ef013e9dc81045724", 0xe3}], 0x2, &(0x7f0000001380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @remote, @dev={0xac, 0x14, 0x14, 0x3e}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @loopback}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0xc0}, 0x20008000) close(r0) 13.015265677s ago: executing program 3 (id=3926): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.268061133s ago: executing program 0 (id=3930): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) 10.207464782s ago: executing program 7 (id=3933): memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000000), 0x0, &(0x7f0000000580)={0x9, 0xd2, 0x0, 0x2}) 10.133330607s ago: executing program 0 (id=3934): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x7, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x409, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4c, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x6, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20004080}, 0x240400c0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x18}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000540), 0x6040, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000008080)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008001}, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 9.888065641s ago: executing program 5 (id=3935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x80480, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, 0x0) 9.72811433s ago: executing program 3 (id=3936): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x103080) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000340)={0x0, 0xb9d8, 0x2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000740)=[@ioring_restriction_register_op], 0x1) io_uring_setup(0x266b, &(0x7f0000000780)={0x0, 0x4abf, 0x3ff, 0x3, 0x2d3}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) 9.610185064s ago: executing program 5 (id=3937): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c92012000e"], 0x17) 9.581284565s ago: executing program 1 (id=3938): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000340)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x84, &(0x7f0000019740)={0x0, @in6={{0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd31}}, [0x9, 0x8, 0x233666cf, 0x5, 0x8001, 0xd4, 0x4, 0x8000000000000000, 0x3, 0x1, 0x6, 0x3, 0x2000dbf, 0x8, 0x43fd]}, &(0x7f0000019840)=0x100) r5 = openat$nsim_del_device(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$nsim_del_device(r5, &(0x7f0000019440)={0x0}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000019480)={0x0, 0x0, &(0x7f00000194c0)={&(0x7f0000019500)=@newtaction={0x78, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x140a}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0xb0, 0xffffffffffffffff, 0xc, 0xb5}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xb}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x4) 8.087682369s ago: executing program 1 (id=3939): mount(0x0, &(0x7f0000000780)='./dev\x00', &(0x7f00000007c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000a40)="0400000000000000000000009001000038010000010000000000000000100000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f203020312031") 8.060981114s ago: executing program 3 (id=3940): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x24, 0x9, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) setns(0xc9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='dummy_udc.0', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./proc\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000500)='proc\x00', 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000640)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./dev/ttyGS0\x00', 0x2, 0x0) write(r1, &(0x7f00000006c0)='t', 0x1) 7.966744499s ago: executing program 0 (id=3941): inotify_init1(0x800) pipe(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc14", 0x3}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x7}}], 0x38}, 0x24040000) write(r4, &(0x7f0000000300)='1', 0x1) 7.198044565s ago: executing program 5 (id=3942): close(0x3) prctl$PR_MCE_KILL(0x42, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x1) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x2, 0x400008}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000046000900000000000000000002000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x24000044) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) recvmmsg(r3, 0x0, 0x0, 0xfc0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB]) r4 = openat$nsim_port_pp_hold(0xffffffffffffff9c, &(0x7f00000001c0)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x33}, 0x800, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010400001d000080000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e000004000280080005", @ANYRES32=r6, @ANYBLOB="0800040036ee"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) lseek(r4, 0x100000000, 0x1) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) 6.935405212s ago: executing program 0 (id=3943): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x400008bf) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) syz_open_procfs$namespace(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) syz_open_procfs(r1, &(0x7f00000000c0)='net/l2cap\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) setreuid(0xee00, 0x0) keyctl$join(0x1, 0x0) 6.051238431s ago: executing program 5 (id=3944): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000200)='silent\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x11, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x800040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x80001, 0x0) write(r2, &(0x7f0000000140)='off', 0x3) 6.03618486s ago: executing program 7 (id=3945): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 5.317858597s ago: executing program 7 (id=3946): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000140)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)='exfat\x00', 0x8080, &(0x7f0000000440)='discard') ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) epoll_create1(0x80000) read$char_usb(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r1 = io_uring_setup(0x2e06, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) 5.305502921s ago: executing program 3 (id=3947): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x28}}, 0x0) 5.246614661s ago: executing program 0 (id=3948): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.147626123s ago: executing program 1 (id=3949): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)='5', 0x1, 0x20000000, 0x0, 0x0) shutdown(r0, 0x1) 4.024612014s ago: executing program 3 (id=3950): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000000340)=""/102392, 0x18ff8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x84, &(0x7f0000019740)={0x0, @in6={{0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0xd31}}, [0x9, 0x8, 0x233666cf, 0x5, 0x8001, 0xd4, 0x4, 0x8000000000000000, 0x3, 0x1, 0x6, 0x3, 0x2000dbf, 0x8, 0x43fd]}, &(0x7f0000019840)=0x100) openat$nsim_del_device(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000019480)={0x0, 0x0, &(0x7f00000194c0)={&(0x7f0000019500)=@newtaction={0x78, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x64, 0x1, [@m_sample={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x140a}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0xb0, 0xffffffffffffffff, 0xc, 0xb5}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xb}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x4) 3.911074208s ago: executing program 7 (id=3951): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x103080) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x318, 0x0) recvmmsg(r2, &(0x7f00000002c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_setup(0xa0, &(0x7f0000000340)={0x0, 0xb9d8, 0x2}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000740)=[@ioring_restriction_register_op], 0x1) io_uring_setup(0x266b, &(0x7f0000000780)={0x0, 0x4abf, 0x3ff, 0x3, 0x2d3}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x19, 0x4, 0x4, 0x8}, 0x50) 3.132861566s ago: executing program 3 (id=3952): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c92012000e000500"], 0x17) 3.071751884s ago: executing program 0 (id=3953): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x10140, 0x50) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000002c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000004c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000500), 0x10106, 0x2, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000008c0)={0xe, {"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", 0x942}}, 0x1006) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rfcomm\x00') pread64(r3, &(0x7f0000001940)=""/102400, 0x19000, 0x1000000000) r4 = socket(0x80000000000000a, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f000001a940), 0x76, 0x1) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f000001a980)=@urb_type_control={0x2, {}, 0x2, 0x40, &(0x7f000001a9c0)={0x0, 0xb, 0xfffe, 0x42}, 0x8, 0x203ffffd, 0x300, 0x0, 0xeeb, 0x20002, 0x0}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f000001aa00)={0x1f, 0xffff, 0x3}, 0x6) syz_emit_vhci(&(0x7f000001aa80)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_local_features={{0x1}, {0x0, "ffffffffffffffff"}}}}, 0xf) nanosleep(&(0x7f000001aac0)={0x0, 0x5f5e100}, 0x0) setns(0xc9, 0x0) r7 = socket(0x1f, 0x5, 0x8) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f000001ab00)={0x0, 0x3e8}, 0x10) connect(r7, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.056954628s ago: executing program 1 (id=3954): prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000580)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000005c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000600)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000640), 0x0, 0x0) read$msr(r2, &(0x7f00000007c0)=""/102392, 0x18ff8) r3 = epoll_create1(0x80000) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000197c0)={0xa0000001}) 3.051488448s ago: executing program 5 (id=3955): close(0x3) prctl$PR_MCE_KILL(0x42, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x1) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x2, 0x400008}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000046000900000000000000000002000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x24000044) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) recvmmsg(r3, 0x0, 0x0, 0xfc0, 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB]) openat$nsim_port_pp_hold(0xffffffffffffff9c, &(0x7f00000001c0)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x33}, 0x800, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010400001d000080000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e000004000280080005", @ANYRES32=r5, @ANYBLOB="0800040036ee"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r6 = socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) sendmmsg$inet_sctp(r6, 0x0, 0x0, 0x0) 398.125772ms ago: executing program 1 (id=3956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0) 283.297954ms ago: executing program 7 (id=3957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffd}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0) 130.37568ms ago: executing program 5 (id=3958): close(0x3) prctl$PR_MCE_KILL(0x42, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000080)=0x1) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000000c0)={0x0, 0x2, 0x400008}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000046000900000000000000000002000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x24000044) 0s ago: executing program 7 (id=3959): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000780)='./dev\x00', &(0x7f00000007c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000a40)="0400000000000000000000009001000038010000010000000000000000100000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c74697061746800000000000000322071756575655f6d6f64652062696f203020312031") kernel console output (not intermixed with test programs): n minor 1 [ 1684.622034][T13421] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1684.622391][T13421] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1684.652579][T13421] usb 3-1: USB disconnect, device number 42 [ 1684.659943][T18147] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1684.978676][T22323] udevd[22323]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1684.999152][T22320] udevd[22320]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1685.018108][T16530] Bluetooth: hci4: command 0x2016 tx timeout [ 1687.574303][T22512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1687.649021][T22515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1687.722516][T22512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1688.002020][T13509] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1688.197245][T13509] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1688.295568][ T145] net_ratelimit: 68 callbacks suppressed [ 1688.355901][T13509] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.419670][T13509] usb 10-1: config 0 descriptor?? [ 1690.021146][T13509] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1690.164517][T13509] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 1 [ 1690.164529][T13509] [drm] Initialized udl on minor 1 [ 1690.894359][T22534] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816) [ 1693.411134][ C1] net_ratelimit: 81 callbacks suppressed [ 1695.185458][T13509] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1695.368237][T17680] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1695.801853][T13509] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1696.605172][T13509] usb 10-1: USB disconnect, device number 38 [ 1696.973525][T22570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9043 sclass=netlink_route_socket pid=22570 comm=syz.2.3534 ** 1855 printk messages dropped ** [ 1698.645493][ T7052] net_ratelimit: 67 callbacks suppressed ** 1837 printk messages dropped ** ** 3 printk messages dropped ** ** 7 printk messages dropped ** [ 1699.696804][T22590] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3540'. [ 1700.388498][T22602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3542'. ** 1702 printk messages dropped ** ** 1 printk messages dropped ** [ 1700.525062][T22602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9043 sclass=netlink_route_socket pid=22602 comm=syz.3.3542 ** 1678 printk messages dropped ** ** 907 printk messages dropped ** [ 1701.376550][T11656] Bluetooth: hci4: command 0x2016 tx timeout [ 1701.793327][T22624] jffs2: notice: (22624) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (1 unchecked, 1 orphan) and 7 of xref (0 dead, 3 orphan) found. [ 1701.799470][ T29] audit: type=1400 audit(1792513219.165:1168): avc: denied { write } for pid=22622 comm="syz.3.3547" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1701.921122][ T29] audit: type=1400 audit(1792513219.285:1169): avc: denied { write } for pid=22622 comm="syz.3.3547" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1701.930640][ T29] audit: type=1400 audit(1792513219.295:1170): avc: denied { write } for pid=22622 comm="syz.3.3547" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1702.037154][ T29] audit: type=1400 audit(1792513219.405:1171): avc: denied { write } for pid=22622 comm="syz.3.3547" name="file7" dev="jffs2" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1702.111056][ T29] audit: type=1400 audit(1792513219.475:1172): avc: denied { write } for pid=22622 comm="syz.3.3547" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1702.156216][T11656] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1702.170006][T11656] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1702.178543][T11656] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 ** 202 printk messages dropped ** ** 216 printk messages dropped ** ** 212 printk messages dropped ** ** 210 printk messages dropped ** ** 229 printk messages dropped ** ** 213 printk messages dropped ** ** 213 printk messages dropped ** ** 238 printk messages dropped ** ** 234 printk messages dropped ** ** 218 printk messages dropped ** ** 240 printk messages dropped ** ** 205 printk messages dropped ** ** 210 printk messages dropped ** ** 264 printk messages dropped ** ** 255 printk messages dropped ** ** 276 printk messages dropped ** ** 264 printk messages dropped ** ** 72 printk messages dropped ** ** 3532 printk messages dropped ** [ 1702.615653][T19956] Bluetooth: hci1: command 0x2016 tx timeout [ 1703.119863][T17680] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1703.271009][T17680] usb 3-1: Using ep0 maxpacket: 16 [ 1703.271739][T17680] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1703.272894][T17680] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 1703.272915][T17680] usb 3-1: config 1 has no interface number 0 [ 1703.272952][T17680] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1703.272976][T17680] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1703.272999][T17680] usb 3-1: config 1 interface 105 has no altsetting 0 [ 1703.275161][T17680] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1703.275183][T17680] usb 3-1: Product: syz [ 1703.275199][T17680] usb 3-1: Manufacturer: syz [ 1703.275214][T17680] usb 3-1: SerialNumber: syz [ 1703.280970][T22642] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1703.281090][T22642] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 ** 238 printk messages dropped ** [ 1703.686801][T22642] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1703.686915][T22642] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1703.715908][T22630] rxe_eth0 speed is unknown, defaulting to 1000 [ 1704.179645][T22656] net_ratelimit: 107 callbacks suppressed ** 508 printk messages dropped ** [ 1704.499057][T11656] Bluetooth: hci2: command tx timeout [ 1704.706536][T11656] Bluetooth: hci1: command 0x2016 tx timeout ** 855 printk messages dropped ** [ 1705.920649][T17680] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 1705.920790][T17680] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 1706.175933][T17680] usb 3-1: USB disconnect, device number 43 [ 1706.298073][ T145] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1706.611129][T19956] Bluetooth: hci2: command tx timeout [ 1707.195083][ T145] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1707.552821][ T145] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.576241][ T145] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.702095][T19956] Bluetooth: hci2: command tx timeout ** 1441 printk messages dropped ** [ 1708.955432][T22630] bridge0: port 1(bridge_slave_0) entered blocking state [ 1708.955522][T22630] bridge0: port 1(bridge_slave_0) entered disabled state [ 1708.955706][T22630] bridge_slave_0: entered allmulticast mode [ 1708.957237][T22630] bridge_slave_0: entered promiscuous mode [ 1708.959643][T22630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.960030][T22630] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.960183][T22630] bridge_slave_1: entered allmulticast mode [ 1708.963838][T22630] bridge_slave_1: entered promiscuous mode [ 1709.148249][T22630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1709.161509][T22630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link ** 7044 printk messages dropped ** [ 1709.512489][ C0] net_ratelimit: 119 callbacks suppressed [ 1709.680647][T22630] team0: Port device team_slave_0 added [ 1709.684260][T22630] team0: Port device team_slave_1 added [ 1709.974099][T22630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1709.974109][T22630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1709.974129][T22630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1710.120532][ T145] bridge_slave_1: left allmulticast mode [ 1710.120550][ T145] bridge_slave_1: left promiscuous mode [ 1710.120747][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1710.165851][ T145] bridge_slave_0: left allmulticast mode [ 1710.165863][ T145] bridge_slave_0: left promiscuous mode [ 1710.165975][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.167945][T22690] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1710.395678][T22691] md: md0 stopped. [ 1710.428793][T22690] md: invalid raid superblock magic on ram1 [ 1710.428808][T22690] md: ram1 does not have a valid v0.90 superblock, not importing! [ 1710.428869][T22690] md: md_import_device returned -22 ** 2445 printk messages dropped ** ** 14 printk messages dropped ** ** 2599 printk messages dropped ** ** 1046 printk messages dropped ** ** 33 printk messages dropped ** ** 3 printk messages dropped ** ** 37 printk messages dropped ** ** 1414 printk messages dropped ** [ 1712.131788][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1712.242385][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1712.264313][ T145] bond0 (unregistering): Released all slaves [ 1712.324988][T22630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1712.324999][T22630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1712.325022][T22630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active ** 2473 printk messages dropped ** [ 1714.316601][T22630] hsr_slave_0: entered promiscuous mode [ 1714.319343][T22630] hsr_slave_1: entered promiscuous mode [ 1714.325782][T22630] debugfs: 'hsr0' already exists in 'hsr' [ 1714.325798][T22630] Cannot create hsr debugfs directory [ 1714.611820][ C0] net_ratelimit: 72 callbacks suppressed ** 1717 printk messages dropped ** ** 236 printk messages dropped ** ** 178 printk messages dropped ** ** 2 printk messages dropped ** [ 1715.773104][T11656] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1715.791590][T11656] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1715.816233][T11656] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1715.854988][T11656] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1715.877077][T11656] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 ** 2331 printk messages dropped ** ** 514 printk messages dropped ** [ 1716.469147][T22717] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1716.776939][ T29] audit: type=1400 audit(1792513234.135:1173): avc: denied { write } for pid=22710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 ** 1655 printk messages dropped ** ** 105 printk messages dropped ** ** 62 printk messages dropped ** ** 49 printk messages dropped ** ** 3 printk messages dropped ** [ 1717.339607][ T29] audit: type=1400 audit(1792513234.705:1174): avc: denied { write } for pid=22736 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 ** 2833 printk messages dropped ** [ 1717.991016][T19956] Bluetooth: hci4: command tx timeout [ 1718.368365][ T5264] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1718.703728][T22753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3568'. [ 1718.790274][ T145] hsr_slave_0: left promiscuous mode [ 1718.871218][ T145] hsr_slave_1: left promiscuous mode [ 1718.872177][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1718.872194][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1718.897387][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1718.897403][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1718.921706][ T145] veth1_macvtap: left promiscuous mode [ 1718.921732][ T145] veth0_macvtap: left promiscuous mode [ 1718.921797][ T145] veth1_vlan: left promiscuous mode [ 1718.921852][ T145] veth0_vlan: left promiscuous mode ** 1821 printk messages dropped ** ** 32 printk messages dropped ** ** 31 printk messages dropped ** ** 22 printk messages dropped ** ** 14 printk messages dropped ** ** 15 printk messages dropped ** ** 14 printk messages dropped ** ** 34 printk messages dropped ** ** 7 printk messages dropped ** [ 1719.891006][ C0] net_ratelimit: 116 callbacks suppressed [ 1720.060794][T19956] Bluetooth: hci4: command tx timeout [ 1720.101862][ T145] team0 (unregistering): Port device team_slave_1 removed [ 1720.173672][ T145] team0 (unregistering): Port device team_slave_0 removed [ 1720.434294][T22760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1720.496355][T22761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1720.623727][T22760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1720.932360][T17680] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1721.161060][T17680] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1721.203108][T17680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1721.205682][T17680] usb 2-1: config 0 descriptor?? [ 1721.543899][T17680] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1721.623981][T22773] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3573'. [ 1722.167106][T19956] Bluetooth: hci4: command tx timeout [ 1722.178915][T22759] loop5: detected capacity change from 0 to 7 [ 1722.225399][T22759] Dev loop5: unable to read RDB block 7 [ 1722.225423][T22759] loop5: AHDI p2 [ 1722.225443][T22759] loop5: partition table partially beyond EOD, truncated [ 1722.264253][T17680] [drm:udl_init] *ERROR* Selecting channel failed [ 1722.308885][T17680] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 1722.308905][T17680] [drm] Initialized udl on minor 1 [ 1722.354721][T17680] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1722.355081][T17680] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1722.357858][ T29] audit: type=1400 audit(1792513239.725:1175): avc: denied { write } for pid=22766 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1722.427586][T17680] usb 2-1: USB disconnect, device number 24 [ 1722.444667][ T6920] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1722.477757][T22715] rxe_eth0 speed is unknown, defaulting to 1000 [ 1722.537874][T11656] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1722.553978][T11656] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1722.557146][T11656] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1722.585141][T11656] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1722.587645][T11656] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1722.823170][ T29] audit: type=1400 audit(1792513240.195:1176): avc: denied { write } for pid=22787 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1722.943201][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1723.411728][T22796] jffs2: notice: (22796) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (1 unchecked, 1 orphan) and 6 of xref (0 dead, 2 orphan) found. [ 1723.449029][ T29] audit: type=1400 audit(1792513240.815:1177): avc: denied { write } for pid=22795 comm="syz.1.3574" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1723.560145][ T29] audit: type=1400 audit(1792513240.925:1178): avc: denied { write } for pid=22795 comm="syz.1.3574" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1723.676825][ T29] audit: type=1400 audit(1792513241.035:1179): avc: denied { write } for pid=22795 comm="syz.1.3574" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1723.676873][ T29] audit: type=1400 audit(1792513241.035:1180): avc: denied { write } for pid=22795 comm="syz.1.3574" name="file7" dev="jffs2" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1723.809674][ T29] audit: type=1400 audit(1792513241.165:1181): avc: denied { write } for pid=22795 comm="syz.1.3574" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1724.049649][T22780] rxe_eth0 speed is unknown, defaulting to 1000 [ 1724.200248][ T145] tipc: Disabling bearer [ 1724.211435][T19956] Bluetooth: hci4: command tx timeout [ 1724.342731][ T145] tipc: Left network mode [ 1724.393058][T22779] rxe_eth0 speed is unknown, defaulting to 1000 [ 1724.704036][T19956] Bluetooth: hci3: command tx timeout ** 2540 printk messages dropped ** ** 12 printk messages dropped ** ** 2 printk messages dropped ** [ 1725.045238][T13509] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1725.101176][ C0] net_ratelimit: 135 callbacks suppressed ** 2692 printk messages dropped ** ** 59 printk messages dropped ** ** 63 printk messages dropped ** ** 48 printk messages dropped ** ** 42 printk messages dropped ** ** 43 printk messages dropped ** ** 44 printk messages dropped ** ** 41 printk messages dropped ** ** 42 printk messages dropped ** ** 141 printk messages dropped ** ** 47 printk messages dropped ** ** 44 printk messages dropped ** ** 43 printk messages dropped ** ** 124 printk messages dropped ** ** 42 printk messages dropped ** ** 32 printk messages dropped ** ** 33 printk messages dropped ** ** 29 printk messages dropped ** ** 24 printk messages dropped ** ** 27 printk messages dropped ** ** 25 printk messages dropped ** ** 27 printk messages dropped ** ** 26 printk messages dropped ** ** 27 printk messages dropped ** ** 32 printk messages dropped ** ** 57 printk messages dropped ** ** 30 printk messages dropped ** ** 32 printk messages dropped ** ** 39 printk messages dropped ** ** 34 printk messages dropped ** ** 30 printk messages dropped ** ** 34 printk messages dropped ** ** 33 printk messages dropped ** ** 43 printk messages dropped ** [ 1725.417045][T13509] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1725.418935][T13509] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1725.418963][T13509] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1725.418977][T13509] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1725.541856][T13509] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1725.541867][T13509] usb 2-1: Product: syz [ 1725.541876][T13509] usb 2-1: Manufacturer: syz [ 1725.541885][T13509] usb 2-1: SerialNumber: syz [ 1725.544801][T22630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1725.546923][T13509] usb 2-1: config 0 descriptor?? [ 1725.565332][T13509] usb 2-1: selecting invalid altsetting 0 [ 1725.581398][T22630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1726.047124][T22630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1726.057543][T22630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1726.190103][ T29] audit: type=1400 audit(1792513243.555:1182): avc: denied { write } for pid=22801 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1726.352643][T22630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1726.415324][T22630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1726.422995][T22630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1726.543356][T22826] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3576'. [ 1726.561677][T22630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1726.596689][ T29] audit: type=1400 audit(1792513243.975:1183): avc: denied { write } for pid=22827 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1726.766267][T22828] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1726.810253][T19956] Bluetooth: hci3: command tx timeout [ 1726.820420][T22782] rxe_eth0 speed is unknown, defaulting to 1000 [ 1726.849166][ T5264] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1728.377490][ T29] audit: type=1400 audit(1792513245.745:1184): avc: denied { write } for pid=22843 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1728.485916][T22860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1728.571935][T22861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1728.628130][ T29] audit: type=1400 audit(1792513245.995:1185): avc: denied { write } for pid=22859 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1728.633787][ T5716] usb 2-1: USB disconnect, device number 25 [ 1728.667532][T22861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1728.851146][T19956] Bluetooth: hci3: command tx timeout [ 1728.961028][T13421] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1729.105694][ T5264] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1729.126878][T13421] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1729.138440][T13421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.140127][T13421] usb 4-1: config 0 descriptor?? [ 1729.214348][ T145] hsr_slave_0: left promiscuous mode [ 1729.216517][ T145] hsr_slave_1: left promiscuous mode [ 1729.251632][ T145] veth1_macvtap: left promiscuous mode [ 1729.251662][ T145] veth0_macvtap: left promiscuous mode [ 1729.251751][ T145] veth1_vlan: left promiscuous mode [ 1729.358363][T13421] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1729.494613][ T145] team0 (unregistering): Port device vlan0 removed [ 1729.589612][T13421] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 1729.589632][T13421] [drm] Initialized udl on minor 1 [ 1729.976041][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1729.976096][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.095487][T22715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1730.095997][T22715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1730.096161][T22715] bridge_slave_0: entered allmulticast mode [ 1730.098365][T22715] bridge_slave_0: entered promiscuous mode [ 1730.255505][T22715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1730.255592][T22715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.255756][T22715] bridge_slave_1: entered allmulticast mode [ 1730.257669][T22715] bridge_slave_1: entered promiscuous mode [ 1730.405795][T22715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1730.455610][T22715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1730.579948][ T29] audit: type=1400 audit(1792513247.935:1186): avc: denied { write } for pid=22869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1730.624570][T22715] team0: Port device team_slave_0 added [ 1730.630124][T22715] team0: Port device team_slave_1 added [ 1730.659482][T22630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1730.824044][ T29] audit: type=1400 audit(1792513248.195:1187): avc: denied { write } for pid=22884 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1730.898510][T22715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1730.898520][T22715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1730.898541][T22715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1730.929009][T22630] 8021q: adding VLAN 0 to HW filter on device team0 [ 1730.935002][T19956] Bluetooth: hci3: command tx timeout [ 1731.028444][T21126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1731.028538][T21126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1731.036159][T21126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.036251][T21126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1731.066934][T22715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1731.066945][T22715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1731.066967][T22715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1731.104176][ C1] net_ratelimit: 110 callbacks suppressed [ 1731.169626][ T145] bridge_slave_1: left allmulticast mode [ 1731.169668][ T145] bridge_slave_1: left promiscuous mode [ 1731.169863][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1731.195137][ T145] bridge_slave_0: left allmulticast mode [ 1731.195155][ T145] bridge_slave_0: left promiscuous mode [ 1731.195354][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1731.453857][ T29] audit: type=1400 audit(1792513248.825:1188): avc: denied { write } for pid=22890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1731.579152][ T29] audit: type=1400 audit(1792513248.955:1189): avc: denied { write } for pid=22903 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1732.090445][T22914] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1732.194107][ T29] audit: type=1400 audit(1792513249.565:1190): avc: denied { write } for pid=22907 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1732.196048][ T145] bond1 (unregistering): Released all slaves [ 1732.436132][ T29] audit: type=1400 audit(1792513249.805:1191): avc: denied { write } for pid=22921 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1732.767003][T22715] hsr_slave_0: entered promiscuous mode [ 1732.770647][T22715] hsr_slave_1: entered promiscuous mode [ 1733.739109][ T29] audit: type=1400 audit(1792513251.105:1192): avc: denied { write } for pid=22924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1733.905814][T22943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3583'. [ 1733.907137][T22782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.907375][T22782] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.908150][T22782] bridge_slave_0: entered allmulticast mode [ 1733.909280][T22943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9043 sclass=netlink_route_socket pid=22943 comm=syz.1.3583 [ 1733.971214][T22782] bridge_slave_0: entered promiscuous mode [ 1734.104786][T22782] bridge0: port 2(bridge_slave_1) entered blocking state [ 1734.105194][T22782] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.105656][T22782] bridge_slave_1: entered allmulticast mode [ 1734.153385][T22782] bridge_slave_1: entered promiscuous mode [ 1734.662001][T22782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1734.760551][T13421] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1734.760900][T13421] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1734.761762][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1734.761974][T13424] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1734.783103][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 1734.784813][T13424] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 1734.785008][T13424] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1734.869435][T13421] usb 4-1: USB disconnect, device number 66 [ 1734.902201][ T29] audit: type=1400 audit(1792513252.275:1193): avc: denied { write } for pid=22945 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1734.954892][T22782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1735.572704][T22782] team0: Port device team_slave_0 added [ 1736.033579][ T29] audit: type=1400 audit(1792513253.405:1194): avc: denied { write } for pid=22954 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1736.144988][T22782] team0: Port device team_slave_1 added [ 1736.184060][ T145] hsr_slave_0: left promiscuous mode [ 1736.192188][ T145] hsr_slave_1: left promiscuous mode [ 1736.197321][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1736.197335][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1736.215559][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1736.215575][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1736.253872][ T145] veth1_macvtap: left promiscuous mode [ 1736.253907][ T145] veth0_macvtap: left promiscuous mode [ 1736.253966][ T145] veth1_vlan: left promiscuous mode [ 1736.254004][ T145] veth0_vlan: left promiscuous mode [ 1736.254330][ T145] net_ratelimit: 34 callbacks suppressed [ 1736.356042][ T29] audit: type=1400 audit(1792513253.725:1195): avc: denied { write } for pid=22967 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1737.169724][ T29] audit: type=1400 audit(1792513254.535:1196): avc: denied { write } for pid=22969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1737.548829][T22988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3587'. [ 1737.563827][T22988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9043 sclass=netlink_route_socket pid=22988 comm=syz.1.3587 [ 1737.883521][ T145] team0 (unregistering): Port device team_slave_1 removed [ 1738.705732][ T29] audit: type=1400 audit(1792513256.075:1197): avc: denied { write } for pid=22987 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1738.820892][ T145] team0 (unregistering): Port device team_slave_0 removed [ 1739.625319][ T145] team0 (unregistering): Port device dummy0 removed [ 1739.651612][T11656] Bluetooth: hci5: command 0x2016 tx timeout [ 1740.037800][T22782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1740.037810][T22782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1740.037830][T22782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1740.056240][T22782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1740.056250][T22782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1740.096493][T22782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1741.502420][T22782] hsr_slave_0: entered promiscuous mode [ 1741.504975][T22782] hsr_slave_1: entered promiscuous mode [ 1741.516189][T22782] debugfs: 'hsr0' already exists in 'hsr' [ 1741.516206][T22782] Cannot create hsr debugfs directory [ 1741.571016][ C1] net_ratelimit: 212 callbacks suppressed [ 1741.647670][T23020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.721763][T23015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.731074][T19956] Bluetooth: hci5: command 0x2016 tx timeout [ 1741.817593][T23015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1741.964220][T22630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1741.997985][ T29] audit: type=1400 audit(1792513259.365:1198): avc: denied { write } for pid=23006 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1742.081996][T13421] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1742.235531][T13421] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1742.238377][T13421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.264480][T13421] usb 2-1: config 0 descriptor?? [ 1742.324268][ T29] audit: type=1400 audit(1792513259.695:1199): avc: denied { write } for pid=23028 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1742.476959][T13421] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1742.762277][T13421] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 1742.762298][T13421] [drm] Initialized udl on minor 1 [ 1742.890042][T13421] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1742.890402][T13421] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1742.924628][T13414] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1742.925493][T13414] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1742.925663][T13414] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1742.925794][T13421] usb 2-1: USB disconnect, device number 26 [ 1743.035081][ T29] audit: type=1400 audit(1792513260.405:1200): avc: denied { write } for pid=23031 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1743.343436][T22630] veth0_vlan: entered promiscuous mode [ 1743.406772][T22630] veth1_vlan: entered promiscuous mode [ 1743.413595][T22715] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1743.446608][ T29] audit: type=1400 audit(1792513260.815:1201): avc: denied { write } for pid=23042 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1743.447365][T22715] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1743.448121][T22715] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1743.494218][T22715] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1743.522385][T22715] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1743.593254][T22715] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1743.597349][T22715] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1743.659148][T22715] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1744.219564][T22630] veth0_macvtap: entered promiscuous mode [ 1744.265635][ T29] audit: type=1400 audit(1792513261.635:1202): avc: denied { write } for pid=23044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1744.425470][ T29] audit: type=1400 audit(1792513261.795:1203): avc: denied { write } for pid=23064 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1744.627063][T22630] veth1_macvtap: entered promiscuous mode [ 1744.775034][T22630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1745.181158][T22630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1745.223966][ T1388] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.224318][ T1388] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.224608][ T1388] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.225254][ T1388] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.301213][T23079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3596'. [ 1745.301966][T23079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9043 sclass=netlink_route_socket pid=23079 comm=syz.1.3596 [ 1746.582464][T21126] net_ratelimit: 313 callbacks suppressed [ 1746.591636][T22715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1746.829119][T22715] 8021q: adding VLAN 0 to HW filter on device team0 [ 1746.916275][ T1388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1746.916384][ T1388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1747.066428][ T5927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1747.066442][ T5927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1747.119931][ T1388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1747.120020][ T1388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1747.174475][ T29] audit: type=1400 audit(1792513264.545:1204): avc: denied { write } for pid=23070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1747.393163][ T5927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1747.393178][ T5927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1747.416354][T11656] Bluetooth: hci5: command 0x2016 tx timeout [ 1747.456034][ T29] audit: type=1400 audit(1792513264.825:1205): avc: denied { write } for pid=23090 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1747.787832][T22782] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1747.839967][T22782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1747.853035][T22782] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1747.877520][T22782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1747.889495][T22782] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1748.708897][T22782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1749.223014][T22782] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1749.491271][T11656] Bluetooth: hci5: command 0x2016 tx timeout [ 1749.632230][T22782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1749.754567][T23109] jffs2: notice: (23109) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 1749.762628][ T29] audit: type=1400 audit(1792513267.125:1206): avc: denied { write } for pid=23108 comm="syz.0.3598" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1749.849025][T23113] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816) [ 1750.140365][ T29] audit: type=1400 audit(1792513267.505:1207): avc: denied { write } for pid=23108 comm="syz.0.3598" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1750.179228][ T29] audit: type=1400 audit(1792513267.545:1208): avc: denied { write } for pid=23108 comm="syz.0.3598" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1750.179274][ T29] audit: type=1400 audit(1792513267.545:1209): avc: denied { write } for pid=23108 comm="syz.0.3598" name="file7" dev="jffs2" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1750.257033][ T29] audit: type=1400 audit(1792513267.625:1210): avc: denied { write } for pid=23094 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1750.330551][T22782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1750.402518][ T29] audit: type=1400 audit(1792513267.775:1211): avc: denied { write } for pid=23131 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1750.475002][T22782] 8021q: adding VLAN 0 to HW filter on device team0 [ 1750.529060][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1750.529152][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1750.603605][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.603700][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1750.952248][ T29] audit: type=1400 audit(1792513268.325:1212): avc: denied { write } for pid=23108 comm="syz.0.3598" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1750.958888][ T29] audit: type=1400 audit(1792513268.325:1213): avc: denied { write } for pid=23133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1751.405702][T23158] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3600'. [ 1751.615753][T23162] rxe_eth0 speed is unknown, defaulting to 1000 [ 1751.859089][T23163] net_ratelimit: 179 callbacks suppressed [ 1752.075028][T23163] rxe_eth0 speed is unknown, defaulting to 1000 [ 1752.527105][T22715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1752.977409][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1752.977427][ T29] audit: type=1400 audit(1792513270.345:1215): avc: denied { write } for pid=23156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1753.054859][T23177] nvme_fabrics: missing parameter 'transport=%s' [ 1753.054878][T23177] nvme_fabrics: missing parameter 'nqn=%s' [ 1753.389943][T23199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1753.409562][ T29] audit: type=1400 audit(1792513270.775:1216): avc: denied { write } for pid=23195 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1753.454080][T23199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1753.511935][T23199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1753.655007][T22782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1753.791874][ T5716] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1754.266178][ T5716] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1754.387591][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.521127][ T5716] usb 2-1: config 0 descriptor?? [ 1754.710016][T23215] futex_wake_op: syz.3.3607 tries to shift op by 144; fix this program [ 1754.725626][T22715] veth0_vlan: entered promiscuous mode [ 1754.728629][ T5716] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1755.106529][T22715] veth1_vlan: entered promiscuous mode [ 1756.414713][T22715] veth0_macvtap: entered promiscuous mode [ 1756.469829][T22715] veth1_macvtap: entered promiscuous mode [ 1756.503372][ T5716] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 1756.503393][ T5716] [drm] Initialized udl on minor 1 [ 1756.727781][T22715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1756.771205][ T5716] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1756.771521][ T5716] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1756.785247][T22715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1756.803519][T13421] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1756.804222][T13421] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1756.804595][T13421] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 1756.804943][ T5716] usb 2-1: USB disconnect, device number 27 [ 1756.902473][T22715] net_ratelimit: 71 callbacks suppressed [ 1756.919037][ T7483] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.928452][ T7052] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.928631][ T7052] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1756.929025][ T7052] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.150614][T23235] md: md0 stopped. [ 1757.211262][T23233] md: invalid raid superblock magic on ram1 [ 1757.211296][T23233] md: ram1 does not have a valid v0.90 superblock, not importing! [ 1757.211355][T23233] md: md_import_device returned -22 [ 1757.567246][T21126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.567258][T21126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1757.777982][T23236] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1757.833461][ T29] audit: type=1400 audit(1792513275.205:1217): avc: denied { write } for pid=23209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1757.939265][T22782] veth0_vlan: entered promiscuous mode [ 1757.973857][ T7483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.973871][ T7483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1757.998032][T22782] veth1_vlan: entered promiscuous mode [ 1758.211717][T22782] veth0_macvtap: entered promiscuous mode [ 1758.241705][T22782] veth1_macvtap: entered promiscuous mode [ 1758.275137][ T29] audit: type=1400 audit(1792513275.645:1218): avc: denied { write } for pid=23247 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1758.374223][T22782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1758.437989][T22782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1758.733836][ T8787] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.797909][ T8787] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.804508][ T7483] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.805856][ T7483] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1758.953637][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1758.953667][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1759.057299][ T8787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1759.057313][ T8787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1759.112189][ T5724] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1759.262421][ T5724] usb 8-1: Using ep0 maxpacket: 16 [ 1759.268107][ T5724] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1759.272622][ T5724] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 1759.272647][ T5724] usb 8-1: config 1 has no interface number 0 [ 1759.272700][ T5724] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1759.272727][ T5724] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1759.272750][ T5724] usb 8-1: config 1 interface 105 has no altsetting 0 [ 1759.281094][ T5724] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1759.281116][ T5724] usb 8-1: Product: syz [ 1759.281138][ T5724] usb 8-1: Manufacturer: syz [ 1759.281153][ T5724] usb 8-1: SerialNumber: syz [ 1759.290607][T23250] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1759.290726][T23250] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1759.790323][T23250] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1759.790417][T23250] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1760.424894][ T29] audit: type=1400 audit(1792513277.785:1219): avc: denied { write } for pid=23251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1761.981771][ C1] net_ratelimit: 468 callbacks suppressed [ 1762.279277][ T5724] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 1762.279424][ T5724] aqc111 8-1:1.105: probe with driver aqc111 failed with error -71 [ 1762.510145][ T29] audit: type=1400 audit(1792513279.875:1220): avc: denied { write } for pid=23290 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1762.604761][ T5724] usb 8-1: USB disconnect, device number 3 [ 1762.778903][T23298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1762.851786][T23292] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1762.956194][T23298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1763.264798][ T5724] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1763.422740][ T5724] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1763.504790][ T5724] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.618461][ T5724] usb 8-1: config 0 descriptor?? [ 1764.041081][ T5724] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1764.258819][ T5724] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 1 [ 1764.258831][ T5724] [drm] Initialized udl on minor 1 [ 1765.513427][ T29] audit: type=1400 audit(1792513282.885:1221): avc: denied { write } for pid=23301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1765.948941][ T29] audit: type=1400 audit(1792513283.315:1222): avc: denied { write } for pid=23326 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1766.128998][ T29] audit: type=1400 audit(1792513283.495:1223): avc: denied { ioctl } for pid=23330 comm="syz.3.3626" path="socket:[72588]" dev="sockfs" ino=72588 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1766.206505][T23332] vimc link validate: Sensor A:src:640x480 (0x42474752, 8, 2, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 1766.209943][T23332] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1767.001575][T13414] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1767.091072][ C1] net_ratelimit: 121 callbacks suppressed [ 1767.151017][T13414] usb 2-1: Using ep0 maxpacket: 16 [ 1767.151797][T13414] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1767.153109][T13414] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1767.153133][T13414] usb 2-1: config 1 has no interface number 0 [ 1767.153170][T13414] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1767.153195][T13414] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1767.153209][T13414] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1767.155256][T13414] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1767.155268][T13414] usb 2-1: Product: syz [ 1767.155277][T13414] usb 2-1: Manufacturer: syz [ 1767.155291][T13414] usb 2-1: SerialNumber: syz [ 1767.158387][T23342] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1767.158481][T23342] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1767.524108][ T29] audit: type=1400 audit(1792513284.895:1224): avc: denied { write } for pid=23334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1767.588071][T23342] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1767.588192][T23342] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1767.751352][T13424] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1767.958474][T13424] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1767.973226][T13424] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1767.973254][T13424] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1767.973277][T13424] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1768.003430][T13424] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1768.003452][T13424] usb 4-1: Product: syz [ 1768.003466][T13424] usb 4-1: Manufacturer: syz [ 1768.003480][T13424] usb 4-1: SerialNumber: syz [ 1768.034094][T13424] usb 4-1: config 0 descriptor?? [ 1768.110238][T13424] usb 4-1: selecting invalid altsetting 0 [ 1768.172788][ T29] audit: type=1400 audit(1792513285.545:1225): avc: denied { write } for pid=23356 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1768.657872][T23363] jffs2: notice: (23363) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 5 of xref (0 dead, 1 orphan) found. [ 1768.720710][ T29] audit: type=1400 audit(1792513286.085:1226): avc: denied { write } for pid=23362 comm="syz.0.3629" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1768.830135][ T29] audit: type=1400 audit(1792513286.195:1227): avc: denied { write } for pid=23362 comm="syz.0.3629" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1769.305390][ T29] audit: type=1400 audit(1792513286.675:1228): avc: denied { write } for pid=23365 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1769.338678][ T5724] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 1769.339043][ T5724] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1769.363664][ T29] audit: type=1400 audit(1792513286.735:1229): avc: denied { write } for pid=23362 comm="syz.0.3629" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1769.368263][ T6920] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1769.368756][ T5724] usb 8-1: USB disconnect, device number 4 [ 1769.369835][ T6920] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1769.370022][ T6920] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1769.371954][ T29] audit: type=1400 audit(1792513286.735:1230): avc: denied { write } for pid=23362 comm="syz.0.3629" name="file7" dev="jffs2" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1769.562799][T23385] futex_wake_op: syz.7.3631 tries to shift op by 144; fix this program [ 1770.175538][T13414] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 1770.175792][T13414] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 1770.676338][T13414] usb 2-1: USB disconnect, device number 28 [ 1771.180522][ T6920] usb 4-1: USB disconnect, device number 67 [ 1772.114490][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1772.114503][ T29] audit: type=1400 audit(1792513289.485:1233): avc: denied { write } for pid=23408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1772.211067][ C1] net_ratelimit: 88 callbacks suppressed [ 1772.632357][T13421] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1774.190235][ T29] audit: type=1400 audit(1792513291.555:1234): avc: denied { write } for pid=23441 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1774.227509][T13421] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1774.242022][T13421] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1774.242049][T13421] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1774.242063][T13421] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1775.525229][T23452] jffs2: notice: (23452) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 6 of xref (0 dead, 1 orphan) found. [ 1775.596598][ T29] audit: type=1400 audit(1792513292.965:1235): avc: denied { write } for pid=23451 comm="syz.3.3641" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1775.770384][ T29] audit: type=1400 audit(1792513293.115:1236): avc: denied { write } for pid=23451 comm="syz.3.3641" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 ** 214 printk messages dropped ** ** 151 printk messages dropped ** ** 71 printk messages dropped ** ** 73 printk messages dropped ** ** 4 printk messages dropped ** ** 56 printk messages dropped ** ** 114 printk messages dropped ** ** 60 printk messages dropped ** ** 8 printk messages dropped ** ** 74 printk messages dropped ** ** 88 printk messages dropped ** ** 6 printk messages dropped ** ** 53 printk messages dropped ** ** 414 printk messages dropped ** [ 1776.624568][T23465] rxe_eth0 speed is unknown, defaulting to 1000 [ 1777.730993][ C1] net_ratelimit: 134 callbacks suppressed [ 1777.799427][ T29] audit: type=1400 audit(1792513295.165:1237): avc: denied { write } for pid=23451 comm="syz.3.3641" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1777.799486][ T29] audit: type=1400 audit(1792513295.165:1238): avc: denied { write } for pid=23451 comm="syz.3.3641" name="file7" dev="jffs2" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1778.057694][T13421] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1778.057713][T13421] usb 8-1: Product: syz [ 1778.057727][T13421] usb 8-1: Manufacturer: syz [ 1778.060375][T13421] usb 8-1: config 0 descriptor?? [ 1778.078721][T13421] usb 8-1: can't set config #0, error -71 [ 1778.094281][T13421] usb 8-1: USB disconnect, device number 5 [ 1778.116505][ T29] audit: type=1400 audit(1792513295.485:1239): avc: denied { write } for pid=23448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1778.282800][ T29] audit: type=1400 audit(1792513295.655:1240): avc: denied { write } for pid=23451 comm="syz.3.3641" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1778.282856][ T29] audit: type=1400 audit(1792513295.655:1241): avc: denied { write } for pid=23451 comm="syz.3.3641" name="file7" dev="jffs2" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1778.302411][ T29] audit: type=1400 audit(1792513295.665:1242): avc: denied { write } for pid=23470 comm="syz.0.3643" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1778.302459][ T29] audit: type=1400 audit(1792513295.665:1243): avc: denied { write } for pid=23470 comm="syz.0.3643" name="file7" dev="jffs2" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1778.302780][ T29] audit: type=1400 audit(1792513295.665:1244): avc: denied { write } for pid=23470 comm="syz.0.3643" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1778.303009][ T29] audit: type=1400 audit(1792513295.665:1245): avc: denied { write } for pid=23470 comm="syz.0.3643" name="file7" dev="jffs2" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1778.503327][ T29] audit: type=1400 audit(1792513295.875:1246): avc: denied { write } for pid=23494 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1779.198257][T23510] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816) [ 1779.226611][T23511] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3650'. ** 216 printk messages dropped ** [ 1779.451108][T23514] rxe_eth0 speed is unknown, defaulting to 1000 [ 1779.776443][T23515] rxe_eth0 speed is unknown, defaulting to 1000 [ 1780.664645][T23520] fuse: Invalid rootmode ** 213 printk messages dropped ** ** 3 printk messages dropped ** ** 65 printk messages dropped ** ** 15 printk messages dropped ** ** 59 printk messages dropped ** ** 29 printk messages dropped ** ** 89 printk messages dropped ** ** 36 printk messages dropped ** ** 24 printk messages dropped ** ** 96 printk messages dropped ** ** 40 printk messages dropped ** ** 30 printk messages dropped ** ** 41 printk messages dropped ** ** 63 printk messages dropped ** ** 98 printk messages dropped ** ** 13 printk messages dropped ** ** 148 printk messages dropped ** ** 12 printk messages dropped ** ** 69 printk messages dropped ** ** 76 printk messages dropped ** ** 10 printk messages dropped ** ** 82 printk messages dropped ** ** 65 printk messages dropped ** [ 1782.473269][T23553] rxe_eth0 speed is unknown, defaulting to 1000 [ 1783.091300][ C0] net_ratelimit: 215 callbacks suppressed ** 1395 printk messages dropped ** [ 1785.000036][T23586] rxe_eth0 speed is unknown, defaulting to 1000 [ 1786.122135][T23597] jffs2: notice: (23597) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 6 of xref (0 dead, 1 orphan) found. [ 1786.235223][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1786.235233][ T29] audit: type=1400 audit(1792513303.605:1250): avc: denied { write } for pid=23546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1786.367971][ T29] audit: type=1400 audit(1792513303.735:1251): avc: denied { write } for pid=23596 comm="syz.0.3666" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1786.895880][ T29] audit: type=1400 audit(1792513304.265:1252): avc: denied { write } for pid=23596 comm="syz.0.3666" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1787.199767][ T29] audit: type=1400 audit(1792513304.565:1253): avc: denied { write } for pid=23615 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1787.312463][T23603] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1788.211386][ C1] net_ratelimit: 110 callbacks suppressed [ 1788.398523][ T29] audit: type=1400 audit(1792513305.765:1254): avc: denied { write } for pid=23596 comm="syz.0.3666" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1788.398859][ T29] audit: type=1400 audit(1792513305.765:1255): avc: denied { write } for pid=23596 comm="syz.0.3666" name="file7" dev="jffs2" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1788.469523][ T29] audit: type=1400 audit(1792513305.835:1256): avc: denied { write } for pid=23596 comm="syz.0.3666" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1788.469562][ T29] audit: type=1400 audit(1792513305.835:1257): avc: denied { write } for pid=23596 comm="syz.0.3666" name="file7" dev="jffs2" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1788.471013][T17680] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1788.609961][ T29] audit: type=1400 audit(1792513305.975:1258): avc: denied { write } for pid=23596 comm="syz.0.3666" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1788.621800][T17680] usb 2-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 1788.648800][T17680] usb 2-1: config index 0 descriptor too short (expected 1572, got 36) [ 1788.648815][T17680] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1788.675633][T17680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1788.675644][T17680] usb 2-1: Product: syz [ 1788.675653][T17680] usb 2-1: Manufacturer: syz [ 1788.675663][T17680] usb 2-1: SerialNumber: syz [ 1788.765921][T17680] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input7 [ 1788.957549][ T4954] bcm5974 2-1:1.0: could not read from device [ 1788.981955][ T29] audit: type=1400 audit(1792513306.355:1259): avc: denied { write } for pid=23625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1788.987970][ T4954] bcm5974 2-1:1.0: could not read from device [ 1789.087999][T17680] bcm5974 2-1:1.0: could not read from device [ 1789.184060][ T4954] bcm5974 2-1:1.0: could not read from device [ 1789.272160][T17680] input: failed to attach handler mousedev to device input7, error: -5 [ 1789.322079][ T4954] bcm5974 2-1:1.0: could not read from device [ 1789.322778][T17680] usb 2-1: USB disconnect, device number 29 [ 1791.747789][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.747836][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.857221][T23671] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 1792.076103][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1792.076114][ T29] audit: type=1400 audit(1792513309.445:1262): avc: denied { connect } for pid=23680 comm="syz.1.3683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1792.292605][ T29] audit: type=1400 audit(1792513309.665:1263): avc: denied { write } for pid=23657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1792.407816][T13421] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1792.532615][ T29] audit: type=1400 audit(1792513309.905:1264): avc: denied { connect } for pid=23694 comm="syz.3.3687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1792.607310][T13421] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1792.608658][T13421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1792.608687][T13421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1792.608744][T13421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.653478][T13421] usb 1-1: config 0 descriptor?? [ 1792.758463][ T29] audit: type=1400 audit(1792513310.125:1265): avc: denied { write } for pid=23698 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1792.909440][T13421] usbhid 1-1:0.0: can't add hid device: -71 [ 1792.909633][T13421] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1792.949813][T13421] usb 1-1: USB disconnect, device number 15 [ 1793.072504][ T29] audit: type=1400 audit(1792513310.445:1266): avc: denied { unmount } for pid=19082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1793.250999][ C0] net_ratelimit: 109 callbacks suppressed [ 1793.286126][ T29] audit: type=1400 audit(1792513310.655:1267): avc: denied { ioctl } for pid=23708 comm="syz.1.3689" path="socket:[75261]" dev="sockfs" ino=75261 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1793.521076][T13421] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1793.621885][T23720] netlink: 'syz.3.3692': attribute type 1 has an invalid length. [ 1793.671781][T13421] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1793.789095][T13421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1793.789122][T13421] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1793.789159][T13421] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.824816][T13421] usb 1-1: config 0 descriptor?? [ 1793.901958][ T29] audit: type=1400 audit(1792513311.275:1268): avc: denied { module_request } for pid=23715 comm="syz.5.3690" kmod=6E65746465762D37C4A5E3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1794.298900][ T1388] IPVS: starting estimator thread 0... [ 1794.525484][T23725] IPVS: using max 63 ests per chain, 151200 per kthread [ 1794.551574][T13421] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 1794.625230][T13421] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000A/input/input8 [ 1794.677124][ T29] audit: type=1400 audit(1792513312.045:1269): avc: denied { write } for pid=23710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1794.725978][T23735] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816) [ 1794.813788][T23735] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816) [ 1794.871414][ T29] audit: type=1400 audit(1792513312.235:1270): avc: denied { write } for pid=23738 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1794.936140][T13421] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 1795.020593][T17680] usb 1-1: USB disconnect, device number 16 [ 1795.289732][T23740] fido_id[23740]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1795.382963][ T5716] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1795.551135][ T5716] usb 8-1: Using ep0 maxpacket: 16 [ 1795.551881][ T5716] usb 8-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 1795.553352][ T5716] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1795.553386][ T5716] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.630257][ T5716] usb 8-1: config 0 descriptor?? [ 1795.637253][T23744] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1795.721958][T23762] dummy0 speed is unknown, defaulting to 1000 [ 1795.722036][T23762] dummy0 speed is unknown, defaulting to 1000 [ 1795.723780][T23762] dummy0 speed is unknown, defaulting to 1000 [ 1795.725641][T23762] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1795.725682][T23762] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1795.725748][T23762] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1795.794417][T23762] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1795.823699][T23762] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1795.887883][T23762] dummy0 speed is unknown, defaulting to 1000 [ 1795.890062][T23762] dummy0 speed is unknown, defaulting to 1000 [ 1795.934455][T23762] dummy0 speed is unknown, defaulting to 1000 [ 1795.972869][T23762] dummy0 speed is unknown, defaulting to 1000 [ 1795.993595][T23762] dummy0 speed is unknown, defaulting to 1000 [ 1796.012208][T23762] dummy0 speed is unknown, defaulting to 1000 [ 1796.048564][ T5716] hid (null): nested delimiters [ 1796.078081][ T5716] hid_parser_main: 5 callbacks suppressed [ 1796.078092][ T5716] aquacomputer_d5next 0003:0C70:F00D.000B: unknown main item tag 0x0 [ 1796.078110][ T5716] aquacomputer_d5next 0003:0C70:F00D.000B: unknown main item tag 0x0 ** 1366 printk messages dropped ** [ 1796.685793][ T5716] usb 8-1: USB disconnect, device number 6 [ 1796.814926][ T29] audit: type=1400 audit(1792513314.185:1271): avc: denied { write } for pid=23747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1796.901371][T23774] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3703'. [ 1797.523534][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1797.523572][ T29] audit: type=1400 audit(1792513314.755:1273): avc: denied { getopt } for pid=23780 comm="syz.1.3704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1798.132510][ T29] audit: type=1400 audit(1792513315.495:1274): avc: denied { map } for pid=23785 comm="syz.5.3707" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1798.191213][T17680] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1798.347686][T17680] usb 8-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 1798.349131][T17680] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1798.349157][T17680] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1798.349170][T17680] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1798.349184][T17680] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1798.412878][T17680] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1798.412890][T17680] usb 8-1: Product: syz [ 1798.412898][T17680] usb 8-1: Manufacturer: syz [ 1798.444376][T17680] mos7840 8-1:1.0: required endpoints missing [ 1798.931017][ C1] net_ratelimit: 74 callbacks suppressed [ 1801.134012][ T29] audit: type=1400 audit(1792513318.505:1275): avc: denied { bind } for pid=23794 comm="syz.7.3709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1801.296404][T23824] ======================================================= [ 1801.296404][T23824] WARNING: The mand mount option has been deprecated and [ 1801.296404][T23824] and is ignored by this kernel. Remove the mand [ 1801.296404][T23824] option from the mount to silence this warning. [ 1801.296404][T23824] ======================================================= [ 1801.538068][ T29] audit: type=1400 audit(1792513318.905:1276): avc: denied { write } for pid=23789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1801.571462][ T29] audit: type=1400 audit(1792513318.945:1277): avc: denied { name_bind } for pid=23826 comm="syz.1.3716" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1801.758055][T23830] FAULT_INJECTION: forcing a failure. [ 1801.758055][T23830] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.758088][T23830] CPU: 0 UID: 0 PID: 23830 Comm: syz.0.3717 Not tainted syzkaller #0 PREEMPT(full) [ 1801.758112][T23830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1801.758124][T23830] Call Trace: [ 1801.758131][T23830] [ 1801.758139][T23830] dump_stack_lvl+0x100/0x190 [ 1801.758176][T23830] should_fail_ex.cold+0x5/0xa [ 1801.758205][T23830] should_failslab+0xc2/0x120 [ 1801.758237][T23830] __kmalloc_noprof+0xfc/0x840 [ 1801.758266][T23830] ? lsm_blob_alloc+0x68/0x90 [ 1801.758295][T23830] lsm_blob_alloc+0x68/0x90 [ 1801.758317][T23830] security_prepare_creds+0x2d/0x290 [ 1801.758341][T23830] prepare_creds+0x5d6/0x950 [ 1801.758366][T23830] __sys_setresgid+0x4a7/0x12f0 [ 1801.758398][T23830] do_syscall_64+0x123/0x790 [ 1801.758432][T23830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1801.758454][T23830] RIP: 0033:0x7f309599f559 [ 1801.758470][T23830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1801.758489][T23830] RSP: 002b:00007f30967dd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000077 [ 1801.758510][T23830] RAX: ffffffffffffffda RBX: 00007f3095c25fa0 RCX: 00007f309599f559 [ 1801.758524][T23830] RDX: 000000000000ee01 RSI: 0000000000000000 RDI: 0000000000000000 [ 1801.758537][T23830] RBP: 00007f3095a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 1801.758550][T23830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1801.758563][T23830] R13: 00007f3095c26038 R14: 00007f3095c25fa0 R15: 00007fff12df7568 [ 1801.758594][T23830] [ 1803.427404][ T29] audit: type=1400 audit(1792513320.795:1278): avc: denied { write } for pid=23835 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1803.663145][ T5724] usb 8-1: USB disconnect, device number 7 [ 1804.061034][ C0] net_ratelimit: 51 callbacks suppressed [ 1804.842323][ T29] audit: type=1400 audit(1792513321.665:1279): avc: denied { block_suspend } for pid=23848 comm="syz.0.3724" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1807.416914][ T29] audit: type=1400 audit(1792513324.785:1280): avc: denied { write } for pid=23839 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1807.728828][T23876] exFAT-fs (nbd7): mounting with "discard" option, but the device does not support discard [ 1807.732845][T23876] exFAT-fs (nbd7): unable to read boot sector [ 1807.732886][T23876] exFAT-fs (nbd7): failed to read boot sector [ 1807.732924][T23876] exFAT-fs (nbd7): failed to recognize exfat type [ 1809.057086][ T29] audit: type=1326 audit(1792513326.425:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23881 comm="syz.3.3712" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5499f559 code=0x7ffc0000 [ 1809.061228][ T29] audit: type=1326 audit(1792513326.435:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23881 comm="syz.3.3712" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5499f559 code=0x7ffc0000 [ 1809.071677][ T29] audit: type=1326 audit(1792513326.445:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23881 comm="syz.3.3712" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5499f559 code=0x7ffc0000 [ 1809.071724][ T29] audit: type=1326 audit(1792513326.445:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23881 comm="syz.3.3712" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5499f559 code=0x7ffc0000 [ 1809.071969][ T29] audit: type=1326 audit(1792513326.445:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23881 comm="syz.3.3712" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a549a0dc7 code=0x7ffc0000 [ 1809.072358][ T29] audit: type=1326 audit(1792513326.445:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23881 comm="syz.3.3712" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8a5495fd8e code=0x7ffc0000 [ 1809.072934][ T29] audit: type=1326 audit(1792513326.445:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23881 comm="syz.3.3712" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8a5495fd8e code=0x7ffc0000 [ 1809.073171][ T29] audit: type=1326 audit(1792513326.445:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23881 comm="syz.3.3712" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8a5495fd8e code=0x7ffc0000 [ 1809.074931][ T29] audit: type=1326 audit(1792513326.445:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23881 comm="syz.3.3712" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8a5495fd8e code=0x7ffc0000 [ 1809.075506][ T29] audit: type=1326 audit(1792513326.445:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23881 comm="syz.3.3712" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a5499f559 code=0x7ffc0000 [ 1809.351962][ C0] net_ratelimit: 48 callbacks suppressed [ 1809.954538][T23892] ptrace attach of "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[22715] was attempted by "ci-upstream-kasan-gce-selinux-root/syz-executor exec"[23892] [ 1810.305768][T23895] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 1811.821078][ T5716] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1811.972991][ T5716] usb 8-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1811.977985][ T5716] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1811.978006][ T5716] usb 8-1: config 0 has no interfaces? [ 1811.982182][ T5716] usb 8-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1811.982202][ T5716] usb 8-1: Product: syz [ 1811.982217][ T5716] usb 8-1: Manufacturer: syz [ 1811.982231][ T5716] usb 8-1: SerialNumber: syz [ 1811.994236][ T5716] usb 8-1: config 0 descriptor?? [ 1812.281378][ T5716] usb 8-1: USB disconnect, device number 8 [ 1812.519829][T23925] syzkaller1: entered allmulticast mode [ 1814.255711][ T5724] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1814.453928][ T5724] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 1814.474403][ T5724] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1814.474435][ T5724] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 1814.474592][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1814.690986][ C0] net_ratelimit: 72 callbacks suppressed [ 1814.815471][ T5724] usb 2-1: probing VID:PID(0424:012C) [ 1815.058767][ T5724] usb 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 1815.058804][ T5724] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 1815.058852][ T5724] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 1815.058883][ T5724] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 1815.058931][ T5724] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 1816.521064][ T5724] vub300 2-1:1.0: probe with driver vub300 failed with error -110 [ 1816.550329][ T5724] usb 2-1: USB disconnect, device number 30 [ 1818.300411][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1818.300430][ T29] audit: type=1400 audit(1792513335.665:1302): avc: denied { write } for pid=23935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1818.614074][ T29] audit: type=1400 audit(1792513335.985:1303): avc: denied { write } for pid=23976 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1818.651717][ T5724] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1818.847962][ T29] audit: type=1400 audit(1792513336.215:1304): avc: denied { mounton } for pid=23980 comm="syz.5.3749" path="/file0" dev="ramfs" ino=75739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 1818.878112][T23981] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1818.878145][T23981] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1818.879821][T23981] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 1819.281355][ T5724] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1819.284046][ T5724] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1819.284103][ T5724] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.582595][ T29] audit: type=1400 audit(1792513336.955:1305): avc: denied { accept } for pid=23997 comm="syz.3.3744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1819.787009][T23973] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3752'. [ 1819.810987][ C0] net_ratelimit: 70 callbacks suppressed [ 1819.818467][ T5724] qmi_wwan 8-1:1.0: probe with driver qmi_wwan failed with error -22 [ 1819.819707][T24003] tmpfs: Unknown parameter 'ω‘`' [ 1819.861937][ T5724] usb 8-1: USB disconnect, device number 9 [ 1821.839279][T11656] Bluetooth: hci0: command 0xfc11 tx timeout [ 1821.850321][T19956] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1821.946837][ T29] audit: type=1400 audit(1792513339.315:1306): avc: denied { write } for pid=24000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1822.064266][T24036] kAFS: No cell specified [ 1822.662677][T13421] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 1822.905503][T13421] usb 4-1: New USB device found, idVendor=045e, idProduct=02ae, bcdDevice=55.0c [ 1822.963615][T13421] usb 4-1: config 0 has no interfaces? [ 1823.054583][T13421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.054604][T13421] usb 4-1: Product: syz [ 1823.054619][T13421] usb 4-1: Manufacturer: syz [ 1823.054635][T13421] usb 4-1: SerialNumber: syz [ 1823.120046][T13421] usb 4-1: config 0 descriptor?? [ 1823.239424][T24041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1823.302301][ T29] audit: type=1400 audit(1792513340.675:1307): avc: denied { write } for pid=24043 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1823.442363][T24049] mmap: syz.1.3768 (24049) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1823.711010][T13421] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1823.966217][T13421] usb 6-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1824.075104][T13421] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.159190][T13421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.159210][T13421] usb 6-1: Product: syz [ 1824.159225][T13421] usb 6-1: Manufacturer: syz [ 1824.159241][T13421] usb 6-1: SerialNumber: syz [ 1824.469487][T13421] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1824.599553][T13414] usb 4-1: USB disconnect, device number 68 [ 1824.649703][ T29] audit: type=1400 audit(1792513342.015:1308): avc: denied { write } for pid=24053 comm="syz.1.3770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1825.023187][T24069] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1825.254291][T13421] gspca_mr97310a: reg read [21] error -110 [ 1825.254336][T13421] mr97310a 6-1:1.0: probe with driver mr97310a failed with error -110 [ 1825.296061][ T29] audit: type=1400 audit(1792513342.665:1309): avc: denied { write } for pid=24051 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1825.331008][ C0] net_ratelimit: 566 callbacks suppressed [ 1826.077425][ T29] audit: type=1400 audit(1792513343.445:1310): avc: denied { write } for pid=24083 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1826.128007][ T29] audit: type=1400 audit(1792513343.495:1311): avc: denied { read } for pid=24085 comm="syz.7.3777" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1826.128220][ T29] audit: type=1400 audit(1792513343.495:1312): avc: denied { open } for pid=24085 comm="syz.7.3777" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 1827.253829][T19956] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 1827.443387][T13421] usb 6-1: USB disconnect, device number 20 [ 1827.601456][T24099] FAULT_INJECTION: forcing a failure. [ 1827.601456][T24099] name failslab, interval 1, probability 0, space 0, times 0 [ 1827.601484][T24099] CPU: 0 UID: 0 PID: 24099 Comm: syz.5.3781 Not tainted syzkaller #0 PREEMPT(full) [ 1827.601512][T24099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1827.601526][T24099] Call Trace: [ 1827.601534][T24099] [ 1827.601543][T24099] dump_stack_lvl+0x100/0x190 [ 1827.601580][T24099] should_fail_ex.cold+0x5/0xa [ 1827.601612][T24099] should_failslab+0xc2/0x120 [ 1827.601643][T24099] __kmalloc_cache_noprof+0x91/0x6d0 [ 1827.601667][T24099] ? snd_seq_port_use_ptr+0x3c/0x300 [ 1827.601694][T24099] ? snd_seq_port_connect+0x61/0x540 [ 1827.601724][T24099] snd_seq_port_connect+0x61/0x540 [ 1827.601750][T24099] ? check_subscription_permission.isra.0+0x146/0x240 [ 1827.601780][T24099] snd_seq_ioctl_subscribe_port+0x219/0x490 [ 1827.601808][T24099] ? __pfx_snd_seq_ioctl_subscribe_port+0x10/0x10 [ 1827.601833][T24099] ? lock_acquire+0x1d1/0x380 [ 1827.601857][T24099] ? clientptr+0x20/0x190 [ 1827.601877][T24099] ? find_held_lock+0x2b/0x80 [ 1827.601904][T24099] ? clientptr+0x80/0x190 [ 1827.601930][T24099] call_seq_client_ctl+0xa3/0x130 [ 1827.601955][T24099] snd_seq_kernel_client_ctl+0x35/0x50 [ 1827.601979][T24099] snd_seq_oss_midi_open+0x465/0x680 [ 1827.602009][T24099] ? __pfx_snd_seq_oss_midi_open+0x10/0x10 [ 1827.602049][T24099] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 1827.602077][T24099] snd_seq_oss_midi_open_all+0x95/0xf0 [ 1827.602109][T24099] snd_seq_oss_open+0x81c/0xa10 [ 1827.602140][T24099] odev_open+0x6f/0x90 [ 1827.602160][T24099] ? __pfx_odev_open+0x10/0x10 [ 1827.602189][T24099] soundcore_open+0x2e3/0x5a0 [ 1827.602216][T24099] ? __pfx_soundcore_open+0x10/0x10 [ 1827.602241][T24099] chrdev_open+0x234/0x6a0 [ 1827.602274][T24099] ? __pfx_chrdev_open+0x10/0x10 [ 1827.602304][T24099] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1827.602334][T24099] do_dentry_open+0x674/0x1470 [ 1827.602361][T24099] ? __pfx_chrdev_open+0x10/0x10 [ 1827.602394][T24099] vfs_open_consume+0xcc/0x460 [ 1827.602419][T24099] path_openat+0x1551/0x2430 [ 1827.602454][T24099] ? __pfx_path_openat+0x10/0x10 [ 1827.602492][T24099] do_file_open+0x20e/0x430 [ 1827.602524][T24099] ? __pfx_do_file_open+0x10/0x10 [ 1827.602572][T24099] ? _raw_spin_unlock+0x28/0x50 [ 1827.602599][T24099] ? alloc_fd+0x471/0x7a0 [ 1827.602639][T24099] do_sys_openat2+0x163/0x1d0 [ 1827.602660][T24099] ? __pfx_do_sys_openat2+0x10/0x10 [ 1827.602682][T24099] ? find_held_lock+0x2b/0x80 [ 1827.602719][T24099] __x64_sys_openat+0x12d/0x210 [ 1827.602741][T24099] ? __pfx___x64_sys_openat+0x10/0x10 [ 1827.602773][T24099] do_syscall_64+0x123/0x790 [ 1827.602805][T24099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1827.602828][T24099] RIP: 0033:0x7ff5c879f559 [ 1827.602846][T24099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1827.602866][T24099] RSP: 002b:00007ff5c9675028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1827.602887][T24099] RAX: ffffffffffffffda RBX: 00007ff5c8a25fa0 RCX: 00007ff5c879f559 [ 1827.602901][T24099] RDX: 0000000000080a02 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1827.602915][T24099] RBP: 00007ff5c8836b20 R08: 0000000000000000 R09: 0000000000000000 [ 1827.602929][T24099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1827.602942][T24099] R13: 00007ff5c8a26038 R14: 00007ff5c8a25fa0 R15: 00007ffc33f38c78 [ 1827.602973][T24099] [ 1827.897598][T13414] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 1828.057093][T13414] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1828.057132][T13414] usb 1-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40 [ 1828.058572][T13414] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1828.058593][T13414] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1828.087189][T13414] usb 1-1: string descriptor 0 read error: -22 [ 1828.087359][T13414] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.345407][T11656] Bluetooth: hci2: command 0x0406 tx timeout [ 1829.691734][ T29] audit: type=1400 audit(1792513347.065:1313): avc: denied { write } for pid=24087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1830.047614][ T29] audit: type=1400 audit(1792513347.415:1314): avc: denied { write } for pid=24115 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1830.257263][ T5724] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1830.267732][T13414] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1830.285438][T13414] usb 1-1: USB disconnect, device number 17 [ 1830.352335][ T29] audit: type=1400 audit(1792513347.725:1315): avc: denied { read } for pid=24119 comm="syz.7.3784" path="socket:[76998]" dev="sockfs" ino=76998 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1830.385800][ C1] net_ratelimit: 40 callbacks suppressed [ 1830.440873][T24120] ceph: No mds server is up or the cluster is laggy [ 1830.517939][T13509] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1830.616640][ T29] audit: type=1400 audit(1792513347.985:1316): avc: denied { write } for pid=24118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1830.730277][ T29] audit: type=1400 audit(1792513348.095:1317): avc: denied { write } for pid=24135 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1833.523478][T24165] Cannot find add_set index 0 as target [ 1835.084750][T24176] jffs2: notice: (24176) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 6 of xref (0 dead, 1 orphan) found. [ 1835.891003][ C1] net_ratelimit: 190 callbacks suppressed [ 1836.228875][ T29] audit: type=1400 audit(1792513353.595:1318): avc: denied { write } for pid=24139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1837.540089][T24191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3797'. [ 1837.745832][ T29] audit: type=1400 audit(1792513355.105:1319): avc: denied { write } for pid=24190 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1838.770767][ T29] audit: type=1400 audit(1792513356.135:1320): avc: denied { write } for pid=24199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1838.981925][ T29] audit: type=1400 audit(1792513356.355:1321): avc: denied { write } for pid=24213 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1839.083589][T13421] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1839.235283][T13421] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1839.242723][T13421] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1839.243014][T13421] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 1839.243042][T13421] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1839.243102][T13421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.551884][T19956] Bluetooth: hci4: command 0x0406 tx timeout [ 1840.930990][ C0] net_ratelimit: 57 callbacks suppressed [ 1841.173418][T24210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1841.200804][T24210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1841.395003][T24210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1841.438725][T24210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1841.589324][T13421] cxacru 2-1:1.0: send of cm 0x84 failed (-71) [ 1841.589432][T13421] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 1841.659747][T13421] cxacru 2-1:1.0: send of cm 0x88 failed (-71) [ 1841.659941][T13421] ATM dev 0: poll status: error -71 [ 1841.724093][T13421] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 1841.724160][T13421] ATM dev 0: usbatm_submit_urb: urb 0xffff888059e36100 submission failed (-8)! [ 1841.724588][T13421] ATM dev 0: usbatm_submit_urb: urb 0xffff88802d150700 submission failed (-8)! [ 1841.724642][T13421] ATM dev 0: usbatm_submit_urb: urb 0xffff88802d150a00 submission failed (-8)! [ 1841.724704][T13421] ATM dev 0: usbatm_submit_urb: urb 0xffff88802d150800 submission failed (-8)! [ 1841.831660][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff88802d150800 submission failed (-8)! [ 1841.941203][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff88802d150800 submission failed (-8)! [ 1842.051071][ C0] ATM dev 0: usbatm_submit_urb: urb 0xffff88802d150800 submission failed (-8)! [ 1842.054389][T13421] usb 2-1: USB disconnect, device number 31 ** 6 printk messages dropped ** ** 42 printk messages dropped ** ** 55 printk messages dropped ** ** 24 printk messages dropped ** ** 46 printk messages dropped ** ** 90 printk messages dropped ** ** 34 printk messages dropped ** ** 1 printk messages dropped ** ** 2 printk messages dropped ** ** 2 printk messages dropped ** ** 1 printk messages dropped ** ** 1 printk messages dropped ** ** 125 printk messages dropped ** ** 35 printk messages dropped ** ** 17 printk messages dropped ** ** 32 printk messages dropped ** ** 1 printk messages dropped ** ** 2 printk messages dropped ** ** 45 printk messages dropped ** ** 1 printk messages dropped ** ** 390 printk messages dropped ** [ 1843.576150][T24258] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3809'. [ 1843.789831][T24265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3810'. [ 1844.923186][ T5724] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1844.943627][ T29] audit: type=1400 audit(1792513362.315:1322): avc: denied { write } for pid=24271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1845.964992][T19846] net_ratelimit: 59 callbacks suppressed [ 1846.051316][ T5724] usb 1-1: Using ep0 maxpacket: 16 [ 1846.066481][ T5724] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1846.069210][ T5724] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1846.069230][ T5724] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1846.111201][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.111221][ T5724] usb 1-1: Product: syz [ 1846.111235][ T5724] usb 1-1: Manufacturer: syz [ 1846.111259][ T5724] usb 1-1: SerialNumber: syz [ 1846.146470][ T5724] usb 1-1: 0:2 : does not exist [ 1846.369632][ T5724] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1846.440188][ T5724] usb 1-1: USB disconnect, device number 18 [ 1846.522683][T24212] udevd[24212]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1849.265441][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1849.265460][ T29] audit: type=1400 audit(1792513366.635:1325): avc: denied { bind } for pid=24313 comm="syz.3.3805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1850.525252][T11656] Bluetooth: hci3: link tx timeout [ 1850.525262][T11656] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1850.531352][T11656] Bluetooth: hci3: link tx timeout [ 1850.531362][T11656] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1850.570168][T11656] Bluetooth: hci3: link tx timeout [ 1850.570178][T11656] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1850.570338][T11656] Bluetooth: hci3: link tx timeout [ 1850.570348][T11656] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1850.570529][T11656] Bluetooth: hci3: link tx timeout [ 1850.570536][T11656] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1850.632679][T11656] Bluetooth: hci3: link tx timeout [ 1850.632688][T11656] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1850.632842][T11656] Bluetooth: hci3: link tx timeout [ 1850.632851][T11656] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1850.633011][T11656] Bluetooth: hci3: link tx timeout [ 1850.633020][T11656] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1850.633158][T11656] Bluetooth: hci3: link tx timeout [ 1850.633167][T11656] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1850.633347][T11656] Bluetooth: hci3: link tx timeout [ 1850.633356][T11656] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1850.633739][T11656] Bluetooth: hci3: link tx timeout [ 1850.633749][T11656] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1850.634653][ T29] audit: type=1400 audit(1792513368.005:1326): avc: denied { shutdown } for pid=24322 comm="syz.7.3826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1851.112588][T24331] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 1851.491292][ C1] net_ratelimit: 59 callbacks suppressed [ 1851.559936][T24336] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3817'. [ 1852.089769][ T29] audit: type=1400 audit(1792513369.455:1327): avc: denied { write } for pid=24332 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1852.611037][T11656] Bluetooth: hci3: command 0x0406 tx timeout [ 1852.832696][ T29] audit: type=1400 audit(1792513370.205:1328): avc: denied { write } for pid=24354 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1852.867054][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.867100][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.086274][T24362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3824'. [ 1853.261909][ T29] audit: type=1326 audit(1792513370.435:1329): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.0.3824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309599f559 code=0x7ffc0000 [ 1853.262115][ T29] audit: type=1326 audit(1792513370.435:1330): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.0.3824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309599f559 code=0x7ffc0000 [ 1853.262305][ T29] audit: type=1326 audit(1792513370.435:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.0.3824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309599f559 code=0x7ffc0000 [ 1853.262632][ T29] audit: type=1326 audit(1792513370.445:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.0.3824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309599f559 code=0x7ffc0000 [ 1853.263545][ T29] audit: type=1326 audit(1792513370.445:1333): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.0.3824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f309599f559 code=0x7ffc0000 [ 1853.263711][ T29] audit: type=1326 audit(1792513370.445:1334): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.0.3824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309599f559 code=0x7ffc0000 [ 1854.600164][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 1854.600178][ T29] audit: type=1326 audit(1792513371.965:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.0.3824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f309599f559 code=0x7ffc0000 [ 1854.633751][ T29] audit: type=1400 audit(1792513372.005:1429): avc: denied { read write } for pid=24361 comm="syz.1.3833" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1854.633799][ T29] audit: type=1400 audit(1792513372.005:1430): avc: denied { open } for pid=24361 comm="syz.1.3833" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1854.671539][T24363] CacheFiles: Failed to register: -95 [ 1854.833757][ T29] audit: type=1400 audit(1792513372.205:1431): avc: denied { write } for pid=24357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1854.941493][T21064] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1854.965294][ T29] audit: type=1326 audit(1792513372.335:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.0.3824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309599f559 code=0x7ffc0000 [ 1854.965341][ T29] audit: type=1326 audit(1792513372.335:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.0.3824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309599f559 code=0x7ffc0000 [ 1854.965846][ T29] audit: type=1326 audit(1792513372.335:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24351 comm="syz.0.3824" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f309599f559 code=0x7ffc0000 [ 1855.093555][ T29] audit: type=1400 audit(1792513372.465:1435): avc: denied { write } for pid=24382 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1855.141244][T21064] usb 2-1: Using ep0 maxpacket: 32 [ 1855.156395][T21064] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1855.167322][T21064] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 1855.167346][T21064] usb 2-1: config 0 has no interface number 0 [ 1855.167382][T21064] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1855.167402][T21064] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1855.167427][T21064] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 1855.167446][T21064] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1855.181808][T21064] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.181828][T21064] usb 2-1: Product: syz [ 1855.181844][T21064] usb 2-1: Manufacturer: syz [ 1855.181859][T21064] usb 2-1: SerialNumber: syz [ 1855.186642][T21064] usb 2-1: config 0 descriptor?? [ 1855.193879][T24363] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1855.284062][T21064] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input9 [ 1856.178569][T21064] usb 2-1: USB disconnect, device number 32 [ 1856.770961][ C1] net_ratelimit: 200 callbacks suppressed [ 1858.354908][T11656] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1858.421890][T24407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1858.765501][T24405] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 1859.016957][ T29] audit: type=1400 audit(1792513376.385:1436): avc: denied { write } for pid=24390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1859.182780][ T29] audit: type=1400 audit(1792513376.555:1437): avc: denied { write } for pid=24423 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1859.758105][ T29] audit: type=1326 audit(1792513377.125:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.0.3845" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309599f559 code=0x7ffc0000 [ 1859.758306][ T29] audit: type=1326 audit(1792513377.125:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.0.3845" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309599f559 code=0x7ffc0000 [ 1859.760856][ T29] audit: type=1326 audit(1792513377.125:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.0.3845" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309599f559 code=0x7ffc0000 [ 1859.764027][ T29] audit: type=1326 audit(1792513377.135:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.0.3845" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f309599f559 code=0x7ffc0000 [ 1859.764085][ T29] audit: type=1326 audit(1792513377.135:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.0.3845" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309599f559 code=0x7ffc0000 [ 1859.764126][ T29] audit: type=1326 audit(1792513377.135:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.0.3845" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309599f559 code=0x7ffc0000 [ 1859.764166][ T29] audit: type=1326 audit(1792513377.135:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.0.3845" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309599f559 code=0x7ffc0000 [ 1859.764464][ T29] audit: type=1326 audit(1792513377.135:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.0.3845" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309599f559 code=0x7ffc0000 [ 1859.765587][ T29] audit: type=1326 audit(1792513377.135:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.0.3845" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f309599f559 code=0x7ffc0000 [ 1859.765635][ T29] audit: type=1326 audit(1792513377.135:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24429 comm="syz.0.3845" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309599f559 code=0x7ffc0000 [ 1859.785063][T24430] loop4: detected capacity change from 0 to 7 [ 1859.800735][T24430] Dev loop4: unable to read RDB block 7 [ 1859.800769][T24430] loop4: unable to read partition table [ 1859.802300][T24430] loop4: partition table beyond EOD, truncated [ 1859.802335][T24430] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1859.825636][T24333] udevd[24333]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 1861.274182][T24333] udevd[24333]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 1861.307298][T24333] udevd[24333]: inotify_add_watch(7, /dev/loop4, 10) failed: Not a directory [ 1861.811069][ C0] net_ratelimit: 99 callbacks suppressed [ 1863.054505][T24452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3851'. [ 1863.187009][T24452] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1863.187037][T24452] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1863.187083][T24452] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1863.311144][T13414] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1863.462090][T13414] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1863.463271][T13414] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1863.463300][T13414] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1863.463355][T13414] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.466326][T13414] usb 6-1: config 0 descriptor?? [ 1864.588749][T13414] hid_parser_main: 45 callbacks suppressed [ 1864.588768][T13414] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1864.588792][T13414] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1864.588814][T13414] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1864.588835][T13414] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1864.588857][T13414] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1864.588880][T13414] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1864.588905][T13414] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 1864.597795][T13414] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 1864.876020][T13414] cp2112 0003:10C4:EA90.000C: Part Number: 0x00 Device Version: 0x00 [ 1865.022008][T24471] udevd[24471]: open /dev/null failed: Not a directory [ 1865.086584][T13414] cp2112 0003:10C4:EA90.000C: error requesting SMBus config [ 1865.658212][T13414] cp2112 0003:10C4:EA90.000C: probe with driver cp2112 failed with error -71 [ 1865.662397][T13414] usb 6-1: USB disconnect, device number 21 [ 1866.928676][T16530] Bluetooth: hci1: command 0x2016 tx timeout [ 1866.935310][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 1866.935320][ T29] audit: type=1400 audit(1792513383.735:1562): avc: denied { view } for pid=24479 comm="syz.5.3859" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1866.937061][T23102] net_ratelimit: 60 callbacks suppressed [ 1868.922986][T24489] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1871.103328][T24503] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 1871.995956][T24523] exFAT-fs (nbd1): mounting with "discard" option, but the device does not support discard [ 1871.996194][T24523] exFAT-fs (nbd1): unable to read boot sector [ 1871.996205][T24523] exFAT-fs (nbd1): failed to read boot sector [ 1871.996214][T24523] exFAT-fs (nbd1): failed to recognize exfat type [ 1872.031133][T24524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3874'. [ 1872.130981][ C0] net_ratelimit: 54 callbacks suppressed [ 1872.131363][T13421] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1872.725237][T13421] usb 6-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1873.136939][T13421] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1873.678820][T13421] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1873.680465][T13421] usb 6-1: Product: syz [ 1873.680872][T13421] usb 6-1: Manufacturer: syz [ 1873.690823][T13421] usb 6-1: SerialNumber: syz [ 1874.305388][T13421] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1875.099439][T24538] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1875.108956][T11656] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 1875.629580][T13421] gspca_mr97310a: reg read [21] error -110 [ 1875.629648][T13421] mr97310a 6-1:1.0: probe with driver mr97310a failed with error -110 [ 1876.315285][ T5724] usb 6-1: USB disconnect, device number 22 [ 1877.171037][ T145] net_ratelimit: 79 callbacks suppressed [ 1877.215456][T24555] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3885'. [ 1878.671605][T24575] exFAT-fs (nbd7): mounting with "discard" option, but the device does not support discard [ 1878.672587][T24575] exFAT-fs (nbd7): unable to read boot sector [ 1878.672642][T24575] exFAT-fs (nbd7): failed to read boot sector [ 1878.672682][T24575] exFAT-fs (nbd7): failed to recognize exfat type [ 1881.739918][ T6920] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1881.922959][ T6920] usb 1-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1881.927382][ T6920] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1881.932124][ T6920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.932145][ T6920] usb 1-1: Product: syz [ 1881.932159][ T6920] usb 1-1: Manufacturer: syz [ 1881.932174][ T6920] usb 1-1: SerialNumber: syz [ 1881.949770][ T6920] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1882.096375][T24597] kvm [24596]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 1882.096450][T24597] kvm [24596]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1882.099057][T24597] kvm [24596]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xb480 [ 1882.112197][T24597] kvm [24596]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xe580 [ 1882.123931][T24597] kvm [24596]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x4780 [ 1882.291205][ C0] net_ratelimit: 75 callbacks suppressed [ 1883.212752][ T6920] gspca_mr97310a: reg write [21] error -110 [ 1883.212822][ T6920] mr97310a 1-1:1.0: probe with driver mr97310a failed with error -110 [ 1884.635933][T24621] tmpfs: Unknown parameter 'ω‘`' [ 1886.206743][T24527] usb 1-1: USB disconnect, device number 19 [ 1886.284390][T24629] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1886.296284][T11656] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 1886.876300][T24637] exFAT-fs (nbd5): mounting with "discard" option, but the device does not support discard [ 1886.877560][T24637] exFAT-fs (nbd5): unable to read boot sector [ 1886.877599][T24637] exFAT-fs (nbd5): failed to read boot sector [ 1886.877643][T24637] exFAT-fs (nbd5): failed to recognize exfat type [ 1887.420957][ C1] net_ratelimit: 77 callbacks suppressed [ 1891.245550][T24661] tmpfs: Unknown parameter 'ω‘`' [ 1891.747639][T24665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3901'. [ 1892.610996][ C0] net_ratelimit: 90 callbacks suppressed [ 1893.237374][T24675] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1893.244603][T11656] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1896.370249][T24706] tmpfs: Unknown parameter 'ω‘`' [ 1897.445768][T24713] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3929'. [ 1898.080057][T23102] net_ratelimit: 60 callbacks suppressed [ 1898.176141][T24704] kvm_do_msr_access: 314 callbacks suppressed [ 1898.176995][T24704] kvm [24702]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x80 [ 1898.177037][T24704] kvm [24702]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1898.188514][T24704] kvm [24702]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xb480 [ 1898.220481][T24704] kvm [24702]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xe580 [ 1898.238241][T24704] kvm [24702]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x4780 [ 1899.041164][T24723] exFAT-fs (nbd5): mounting with "discard" option, but the device does not support discard [ 1899.051941][T24723] exFAT-fs (nbd5): unable to read boot sector [ 1899.051979][T24723] exFAT-fs (nbd5): failed to read boot sector [ 1899.052023][T24723] exFAT-fs (nbd5): failed to recognize exfat type [ 1899.741304][ T29] audit: type=1400 audit(1792513417.015:1563): avc: denied { sqpoll } for pid=24731 comm="syz.3.3936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1899.864387][T11656] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1901.432350][ T29] audit: type=1400 audit(1792513418.675:1564): avc: denied { write } for pid=24743 comm="syz.3.3940" name="functions" dev="configfs" ino=26559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1902.212267][T24755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3942'. [ 1902.661223][T24748] configfs-gadget.g1 gadget.0: HOST MAC 6e:36:10:08:94:b9 [ 1902.661321][T24748] configfs-gadget.g1 gadget.0: MAC 0a:ed:cd:65:91:16 [ 1902.957751][T24748] workqueue: Failed to create a rescuer kthread for wq "report_work": -EINTR [ 1902.958906][T24748] configfs-gadget.g1 gadget.0: hidg_bind FAILED [ 1903.025553][T24748] udc dummy_udc.0: failed to start g1: -12 [ 1903.025576][T24748] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -12 [ 1903.091457][ C1] net_ratelimit: 70 callbacks suppressed [ 1903.208170][T24770] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (pcl816) [ 1903.628508][T24748] UDC core: g1: couldn't find an available UDC or it's busy [ 1903.728325][T24768] smpboot: CPU 1 is now offline [ 1903.856835][T24761] process 24764 (syz.0.3943) no longer affine to cpu1 [ 1903.857524][T24761] process 24769 (syz.0.3943) no longer affine to cpu1 [ 1904.438630][T24784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3947'. [ 1905.035915][T24785] exFAT-fs (nbd7): mounting with "discard" option, but the device does not support discard [ 1905.036034][T24785] exFAT-fs (nbd7): unable to read boot sector [ 1905.036040][T24785] exFAT-fs (nbd7): failed to read boot sector [ 1905.036046][T24785] exFAT-fs (nbd7): failed to recognize exfat type [ 1905.196954][ T29] audit: type=1400 audit(1792513422.565:1565): avc: denied { write } for pid=24772 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1908.139081][T22837] net_ratelimit: 73 callbacks suppressed [ 1908.730925][T24809] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1908.732412][T11656] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 1908.818925][T24806] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3955'. [ 1908.949110][ T29] audit: type=1400 audit(1792513426.315:1566): avc: denied { write } for pid=24810 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1909.213431][T24821] kcov: kcov_start: t = ffff888032eba580, size = 524288, area = ffffc9000fe02000 [ 1909.214833][ T5264] usb0: bond_netdev_event received NETDEV_PRE_UP [ 1909.214858][ T5264] net usb0: siw: event 14 [ 1909.214945][ T5264] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000025: 0000 [#1] SMP KASAN NOPTI [ 1909.246649][ T5264] KASAN: null-ptr-deref in range [0x0000000000000128-0x000000000000012f] [ 1909.255063][ T5264] CPU: 0 UID: 0 PID: 5264 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 1909.263966][ T5264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1909.273989][ T5264] RIP: 0010:__dynamic_dev_dbg+0x1da/0x310 [ 1909.279684][ T5264] Code: 85 40 ff ff ff 00 00 00 00 48 c7 85 48 ff ff ff 00 00 00 00 48 c7 85 50 ff ff ff 00 00 00 00 48 c7 85 58 ff ff ff 00 00 00 00 <80> 3c 08 00 0f 85 13 01 00 00 4c 8b 7b 50 4d 85 ff 0f 84 a8 00 00 [ 1909.299258][ T5264] RSP: 0018:ffffc9000330f6b0 EFLAGS: 00010202 [ 1909.305302][ T5264] RAX: 0000000000000025 RBX: 00000000000000d8 RCX: dffffc0000000000 [ 1909.313256][ T5264] RDX: ffffffff8cdc6f80 RSI: 00000000000000d8 RDI: 0000000000000128 [ 1909.321206][ T5264] RBP: ffffc9000330f858 R08: 0000000000000005 R09: 0000000000000000 [ 1909.329162][ T5264] R10: ffffc9000330f868 R11: 0000000000000001 R12: 1ffff92000661ed7 [ 1909.337103][ T5264] R13: ffffffff923c1658 R14: ffffc9000330f7f8 R15: ffffffff8cdc7c20 [ 1909.345045][ T5264] FS: 00007fc1a621e780(0000) GS:ffff888122940000(0000) knlGS:0000000000000000 [ 1909.353945][ T5264] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1909.360503][ T5264] CR2: 00007ff5c9653ff8 CR3: 0000000075f69000 CR4: 00000000003526f0 [ 1909.368448][ T5264] Call Trace: [ 1909.371701][ T5264] [ 1909.374603][ T5264] ? find_held_lock+0x2b/0x80 [ 1909.379260][ T5264] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 1909.384705][ T5264] ? ib_device_get_by_netdev+0x1a8/0x530 [ 1909.390310][ T5264] ? ib_device_get_by_netdev+0x1b2/0x530 [ 1909.395918][ T5264] ? ip6_route_dev_notify+0xe4/0x750 [ 1909.401175][ T5264] ? ndisc_netdev_event+0xa1/0x560 [ 1909.406259][ T5264] ? notifier_call_chain+0x31b/0x3f0 [ 1909.411520][ T5264] eth_open+0x17b/0x1f0 [ 1909.415650][ T5264] ? __pfx_eth_open+0x10/0x10 [ 1909.420297][ T5264] __dev_open+0x3ad/0x8f0 [ 1909.424600][ T5264] ? __pfx___dev_open+0x10/0x10 [ 1909.429424][ T5264] ? __local_bh_enable_ip+0xa5/0x120 [ 1909.434679][ T5264] __dev_change_flags+0x596/0x850 [ 1909.439673][ T5264] ? __pfx___dev_change_flags+0x10/0x10 [ 1909.445187][ T5264] netif_change_flags+0x8d/0x160 [ 1909.450096][ T5264] dev_change_flags+0xba/0x260 [ 1909.454832][ T5264] devinet_ioctl+0x110b/0x1f10 [ 1909.459571][ T5264] ? __pfx_devinet_ioctl+0x10/0x10 [ 1909.464653][ T5264] ? _copy_from_user+0x59/0xd0 [ 1909.469391][ T5264] inet_ioctl+0x3aa/0x3f0 [ 1909.473696][ T5264] ? __pfx_inet_ioctl+0x10/0x10 [ 1909.478520][ T5264] ? tomoyo_path_number_perm+0x188/0x580 [ 1909.484127][ T5264] sock_do_ioctl+0x118/0x280 [ 1909.488688][ T5264] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1909.493770][ T5264] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1909.499635][ T5264] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1909.504631][ T5264] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 1909.511123][ T5264] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1909.517951][ T5264] sock_ioctl+0x599/0x6b0 [ 1909.522258][ T5264] ? __pfx_sock_ioctl+0x10/0x10 [ 1909.527084][ T5264] ? selinux_file_ioctl+0x13b/0x290 [ 1909.532256][ T5264] ? selinux_file_ioctl+0xb6/0x290 [ 1909.537344][ T5264] ? __pfx_sock_ioctl+0x10/0x10 [ 1909.542178][ T5264] __x64_sys_ioctl+0x18e/0x210 [ 1909.546915][ T5264] do_syscall_64+0x123/0x790 [ 1909.551486][ T5264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1909.557363][ T5264] RIP: 0033:0x7fc1a631e378 [ 1909.561750][ T5264] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 1909.581324][ T5264] RSP: 002b:00007ffd19028938 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1909.589706][ T5264] RAX: ffffffffffffffda RBX: 000000000000001d RCX: 00007fc1a631e378 [ 1909.597646][ T5264] RDX: 00007ffd19038b30 RSI: 0000000000008914 RDI: 000000000000001d [ 1909.605588][ T5264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1909.613529][ T5264] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd19048cd0 [ 1909.621470][ T5264] R13: 00007fc1a621e708 R14: 0000000000000028 R15: 0000000000008914 [ 1909.629418][ T5264] [ 1909.632421][ T5264] Modules linked in: [ 1909.637211][ C0] virtqueue callback for ffff888028014000 (ffffffff86ee1a60) [ 1909.645738][ T5264] ---[ end trace 0000000000000000 ]--- [ 1909.651213][ C0] No more buffers in queue [ 1909.655816][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 1909.661657][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 1909.667472][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 1909.673280][ C0] No more buffers in queue [ 1909.677820][ C0] eth0: xmit ffff888073942b40 42:01:0a:80:00:01 [ 1909.684086][ C0] Added buffer head 5 to ffff888028013800 [ 1909.689904][ C0] virtqueue callback for ffff888028013800 (ffffffff86eea980) [ 1909.697287][ C0] virtqueue callback for ffff888028014000 (ffffffff86ee1a60) [ 1909.704825][ C0] eth0: xmit ffff888073942dc0 42:01:0a:80:00:01 [ 1909.711068][ C0] Added buffer head 17 to ffff888028013c00 [ 1909.716864][ C0] virtqueue callback for ffff888028013c00 (ffffffff86eea980) [ 1909.724663][ C0] Sent skb ffff888073942b40 [ 1909.724684][ C0] No more buffers in queue [ 1909.724694][ C0] Sent skb ffff888073942dc0 [ 1909.724709][ C0] No more buffers in queue [ 1909.724716][ C0] No more buffers in queue [ 1909.724738][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 1909.724751][ C0] No more buffers in queue [ 1909.724840][ C0] eth0: xmit ffff888073942b40 42:01:0a:80:00:01 [ 1909.724855][ C0] Added buffer head 17 to ffff888028013c00 [ 1909.724868][ C0] No more buffers in queue [ 1909.724875][ C0] No more buffers in queue [ 1909.724884][ C0] virtqueue callback for ffff888028013c00 (ffffffff86eea980) [ 1909.724895][ C0] Sent skb ffff888073942b40 [ 1909.724918][ C0] No more buffers in queue [ 1909.810894][ C0] wireguard: wg1: Handshake for peer 69 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 12) [ 1909.810957][ C0] wireguard: wg2: Handshake for peer 71 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 11) [ 1909.811004][ C0] wireguard: wg1: Handshake for peer 70 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 12) [ 1909.915327][T24818] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 211 [ 1909.927451][T24802] kcov: kcov_task_exit: t = ffff88802b1e2580, kcov->t = ffff88802b1e2580 [ 1909.927602][T24809] kcov: kcov_task_exit: t = ffff888032348000, kcov->t = ffff888032348000 [ 1909.927679][T24813] kcov: kcov_task_exit: t = ffff888033a84b00, kcov->t = ffff888033a84b00 [ 1909.971889][T14552] sd 0:0:1:0: cmd ffff8880321b3950 CDB: 0x2a [ 1909.971915][T14552] Added buffer head 283 to ffff888027ff2200 [ 1909.971929][T14552] sd 0:0:1:0: cmd ffff8880321b3d10 CDB: 0x2a [ 1909.971940][T14552] Added buffer head 621 to ffff888027ff2200 [ 1909.971953][T14552] sd 0:0:1:0: cmd ffff8880321b40d0 CDB: 0x2a [ 1909.971964][T14552] Added buffer head 366 to ffff888027ff2200 [ 1909.971990][T14552] sd 0:0:1:0: cmd ffff8880321b4490 CDB: 0x2a [ 1909.972008][T14552] Added buffer head 635 to ffff888027ff2200 [ 1909.972020][T14552] sd 0:0:1:0: cmd ffff8880321b4850 CDB: 0x2a [ 1909.972030][T14552] Added buffer head 7 to ffff888027ff2200 [ 1909.972043][T14552] sd 0:0:1:0: cmd ffff8880321b4c10 CDB: 0x2a [ 1909.972059][T14552] Added buffer head 182 to ffff888027ff2200 [ 1909.983889][ C0] virtqueue callback for ffff888027ff2200 (ffffffff86a35190) [ 1909.983907][ C0] sd 0:0:1:0: cmd ffff8880321b4c10 response 0 status 0x0 sense_len 0 [ 1909.983923][ C0] sd 0:0:1:0: cmd ffff8880321b40d0 response 0 status 0x0 sense_len 0 [ 1909.983934][ C0] No more buffers in queue [ 1909.985629][T21064] nfc: nfc_urelease_event_work: portid 211 [ 1909.994068][ C0] virtqueue callback for ffff888027ff2200 (ffffffff86a35190) [ 1909.994083][ C0] sd 0:0:1:0: cmd ffff8880321b3d10 response 0 status 0x0 sense_len 0 [ 1909.994096][ C0] No more buffers in queue [ 1910.002616][ C0] virtqueue callback for ffff888027ff2200 (ffffffff86a35190) [ 1910.002633][ C0] sd 0:0:1:0: cmd ffff8880321b3950 response 0 status 0x0 sense_len 0 [ 1910.002650][ C0] sd 0:0:1:0: cmd ffff8880321b4490 response 0 status 0x0 sense_len 0 [ 1910.002662][ C0] sd 0:0:1:0: cmd ffff8880321b4850 response 0 status 0x0 sense_len 0 [ 1910.002672][ C0] No more buffers in queue [ 1910.135840][T24822] kcov: kcov_start: t = ffff88807dc62580, size = 524288, area = ffffc900046c1000 [ 1910.168445][T24821] kcov: kcov_task_exit: t = ffff888032eba580, kcov->t = ffff888032eba580 [ 1910.168732][T24819] kcov: kcov_task_exit: t = ffff88802ea5a580, kcov->t = ffff88802ea5a580 [ 1910.236894][T24823] kcov: kcov_start: t = ffff888033e50000, size = 524288, area = ffffc90006137000 [ 1910.244444][T24824] kcov: kcov_start: t = ffff88801415a580, size = 524288, area = ffffc9000dde1000 [ 1910.249059][T24825] kcov: kcov_start: t = ffff888033cba580, size = 524288, area = ffffc9000e901000 [ 1910.257899][T24825] kcov: kcov_task_exit: t = ffff888033cba580, kcov->t = ffff888033cba580 [ 1910.269602][T24824] kcov: kcov_task_exit: t = ffff88801415a580, kcov->t = ffff88801415a580 [ 1910.290965][T24823] kcov: kcov_task_exit: t = ffff888033e50000, kcov->t = ffff888033e50000 [ 1910.304831][ T29] audit: type=1400 audit(1792513427.615:1567): avc: denied { read } for pid=4951 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1910.304859][ T29] audit: type=1400 audit(1792513427.615:1568): avc: denied { search } for pid=4951 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1910.304877][ T29] audit: type=1400 audit(1792513427.615:1569): avc: denied { write search } for pid=4951 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1910.304895][ T29] audit: type=1400 audit(1792513427.615:1570): avc: denied { add_name } for pid=4951 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1910.304913][ T29] audit: type=1400 audit(1792513427.615:1571): avc: denied { create } for pid=4951 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1910.304931][ T29] audit: type=1400 audit(1792513427.615:1572): avc: denied { append open } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1910.304950][ T29] audit: type=1400 audit(1792513427.615:1573): avc: denied { getattr } for pid=4951 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1910.434057][T24822] kcov: kcov_task_exit: t = ffff88807dc62580, kcov->t = ffff88807dc62580 [ 1910.456281][ C0] wireguard: wg0: Handshake for peer 67 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 1910.557442][T24828] kcov: kcov_start: t = ffff88807e054b00, size = 524288, area = ffffc90010e06000 [ 1910.557582][T24829] kcov: kcov_start: t = ffff88807e050000, size = 524288, area = ffffc90014614000 [ 1910.559442][T24829] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 866 [ 1910.564173][T21064] nfc: nfc_urelease_event_work: portid 866 [ 1910.564206][T11656] hci1 [ 1910.564212][T11656] kcov: kcov_remote_start: handle = 4, context: task [ 1910.564221][T11656] kcov: kcov_start: t = ffff888023f68000, size = 1048576, area = ffffc9001a225000 [ 1910.564245][T11656] hci1 ACL data packet [ 1910.564252][T11656] hci1: len 18 handle 0x00c9 flags 0x0002 [ 1910.564271][T11656] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 1910.564279][T11656] kcov: kcov_move_area: ffffc9002123c000 1048576 <= ffffc9001a225000 2870 [ 1910.642639][ T5264] RIP: 0010:__dynamic_dev_dbg+0x1da/0x310 [ 1910.642664][ T5264] Code: 85 40 ff ff ff 00 00 00 00 48 c7 85 48 ff ff ff 00 00 00 00 48 c7 85 50 ff ff ff 00 00 00 00 48 c7 85 58 ff ff ff 00 00 00 00 <80> 3c 08 00 0f 85 13 01 00 00 4c 8b 7b 50 4d 85 ff 0f 84 a8 00 00 [ 1910.642675][ T5264] RSP: 0018:ffffc9000330f6b0 EFLAGS: 00010202 [ 1910.642686][ T5264] RAX: 0000000000000025 RBX: 00000000000000d8 RCX: dffffc0000000000 [ 1910.642693][ T5264] RDX: ffffffff8cdc6f80 RSI: 00000000000000d8 RDI: 0000000000000128 [ 1910.642701][ T5264] RBP: ffffc9000330f858 R08: 0000000000000005 R09: 0000000000000000 [ 1910.642708][ T5264] R10: ffffc9000330f868 R11: 0000000000000001 R12: 1ffff92000661ed7 [ 1910.642715][ T5264] R13: ffffffff923c1658 R14: ffffc9000330f7f8 R15: ffffffff8cdc7c20 [ 1910.642723][ T5264] FS: 00007fc1a621e780(0000) GS:ffff888122940000(0000) knlGS:0000000000000000 [ 1910.642735][ T5264] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1910.642742][ T5264] CR2: 00007ff43fdecc40 CR3: 0000000075f69000 CR4: 00000000003526f0 [ 1910.642761][ T5264] Kernel panic - not syncing: Fatal exception [ 1910.743147][ T5264] Kernel Offset: disabled [ 1910.747446][ T5264] Rebooting in 86400 seconds..