last executing test programs: 1m6.176190583s ago: executing program 3 (id=260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = fsopen(&(0x7f0000000140)='msdos\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x1, 0x0) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xc, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x40, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) close(0x3) close(0xffffffffffffffff) 1m4.937024624s ago: executing program 3 (id=269): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x2000000058831, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_generic(0x11, 0x3, 0x10) close(r2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 1m2.64942341s ago: executing program 3 (id=273): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x500, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 1m2.484914587s ago: executing program 3 (id=274): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000280)=@secondary) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) 1m2.420142026s ago: executing program 3 (id=275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf25010000000800030008000000080085000400000005000500030000000500060001"], 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) 1m2.03189322s ago: executing program 3 (id=279): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8917, &(0x7f0000000080)={'pim6reg0\x00', {0x2, 0x4e24, @multicast2}}) io_setup(0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x273}, 0x94) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x3b1101, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) 1m1.726435472s ago: executing program 32 (id=279): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8917, &(0x7f0000000080)={'pim6reg0\x00', {0x2, 0x4e24, @multicast2}}) io_setup(0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x273}, 0x94) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x3b1101, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) 48.813749564s ago: executing program 2 (id=307): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c3442, 0x10c) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000180)=[0x2], 0x0, 0x0, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, 0xffffffffffffffff, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$pokeuser(0x6, r2, 0x1, 0xd02) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x3, 0x1, 0x3, {0xa, 0x4e22, 0x19c7, @empty, 0x5265}}}, 0x3a) recvmmsg(r3, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0xc802) r7 = fsmount(r5, 0x0, 0x0) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x14) 47.504572256s ago: executing program 2 (id=311): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0xe) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, 0x0, 0x0) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r5, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r5, 0xc0485660, &(0x7f0000000380)={0x1, 0x1, @start={0x775b4acb, 0x1}}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180)=r1, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) close_range(r4, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 45.564116681s ago: executing program 1 (id=312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf25010000000800030008000000080085000400000005000500030000000500060001"], 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) 45.09705475s ago: executing program 1 (id=314): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './config', [{0x20, '/dev/snd/midiC#D#\x00'}, {0x20, '/dev/sequencer\x00'}, {0x20, '/dev/sequencer\x00'}, {}, {0x20, '/dev/bus/usb/00#/00#\x00'}, {0x20, '/dev/bus/usb/00#/00#\x00'}, {0x20, '/dev/sequencer\x00'}, {0x20, '-(:'}], 0xa, "492521b5e0acd0a3e9e1e99aa423424b83c1f11897e40b41e9b7c56df4f2263361a781d283a924b59eb43cc80a015528d92a8c65116985fe71b3fac4ea9376f0a76fe7c624f78840dee1acf1cb742a283980a4303d9db9597d61d0ed9bece53240a4409be93c4c79dd75f13090d93b4f9c5880899449e977e61e2e7a3317899ae4f097e6090438067f392165d0ed680667df19c2bda5a5bfe06764c8eb99f455ed007899ea14a9da6af057409802fffc8f09383c1b331480761d59512b4b5e0a065f0ff70ba2c045f4d91c01b25df6"}, 0x14f) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) syz_emit_ethernet(0x30, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mkdir(&(0x7f0000000100)='./config\x00', 0x850e856b79c500b0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000), 0x4) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000500)={0x0, 0x1, 0x1, 0x3, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2100, 0x20c, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3382, 0x8000, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x2000000, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfe95, 0x40000, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) 43.181760955s ago: executing program 1 (id=318): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5601, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') r2 = socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0d00000003000000040000000900000001000000", @ANYRES32=0x1, @ANYBLOB="0000001200000000000000000000000000000000efeaabfd98f9bbbae5d04ecf3c400cdc2809f8c517ca34e217db184baf22d551619b3efb2e6d21c25500c052af05e4a1039368dd5d1a3803c89767138dcb3d5dde3944ec9735c1333f4131831a4887a46709fd4b7f995f4715af32f18da7b1b448e1a658ff6d4f525c80777b90bc7f365cbe6459d2e0f83f6be1a9250b55c9d739038103e494ad84058c6eb5d395f061c2900437f2b5b244fa8a01ef", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0) 42.916920533s ago: executing program 1 (id=319): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) 42.688987343s ago: executing program 1 (id=323): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf25010000000800030008000000080085000400000005000500030000000500060001"], 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) 42.626293856s ago: executing program 2 (id=324): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0000}]}) capget(0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x20, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfab0100000011ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)=ANY=[@ANYBLOB="200310"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x44, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0x40) 41.811252944s ago: executing program 1 (id=326): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r1}) (async) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', {0x2, 0x4e20, @remote}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0xfffffffe, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x100000, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x2400c0d5}, 0x9080) 41.525117725s ago: executing program 33 (id=326): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r1}) (async) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', {0x2, 0x4e20, @remote}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0xfffffffe, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x100000, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x2400c0d5}, 0x9080) 39.871461278s ago: executing program 2 (id=332): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) 39.007864294s ago: executing program 2 (id=334): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) syz_emit_ethernet(0x56, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af25, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() openat$comedi(0xffffffffffffff9c, 0x0, 0x202, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x6fa, 0x0, 0x0, 0x51, 0x0, 0x4, 0x2000000, 0xffffffffffff2190, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x3, 0x8000000000000001, 0x1fff, 0xffffffffffffff7c, 0x4, 0x0, 0x69241edf, 0x0, 0x3, 0x1ff, 0x18ab}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mmap(&(0x7f0000728000/0x1000)=nil, 0x1000, 0x5, 0x12, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(r4) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r5, &(0x7f0000000180)=""/4, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x2710, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x11, @loopback, 0x2710, 0x0, 'rr\x00'}, {@loopback=0x7f000002, 0x4e20, 0x0, 0x1}}, 0x44) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r6, &(0x7f0000000210)={0x2, 0x2710, @loopback}, 0x10) r7 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r7, &(0x7f0000000300)="450000380000000040017cc07f0000027f000003030339a4000000004500001c0000000040117ccc7f0000037f00000275304e20000800", 0x37, 0x24000000, &(0x7f0000000400)={0x2, 0x0, @empty}, 0x10) 38.496288854s ago: executing program 2 (id=336): syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100100000020cc171010400001020301090269000301069002080b00020109200909040000"], 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x1cb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000580), 0x1ff, 0x80800) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000100000", @ANYRES32=r0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x8040) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000001c0)={0x1, r4}) openat$full(0xffffff9c, &(0x7f0000000200), 0x248200, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x14, &(0x7f0000000040), 0x50) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000c40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000006c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) sendmsg$nl_route(r2, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) 37.748645809s ago: executing program 34 (id=336): syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100100000020cc171010400001020301090269000301069002080b00020109200909040000"], 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x1cb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000580), 0x1ff, 0x80800) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000100000", @ANYRES32=r0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x8040) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000001c0)={0x1, r4}) openat$full(0xffffff9c, &(0x7f0000000200), 0x248200, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0x14, &(0x7f0000000040), 0x50) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000c40)={0x1, 0x0, [{0x0, 0xf3, &(0x7f00000008c0)=""/243}]}) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f00000006c0)={0x1, r4}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) sendmsg$nl_route(r2, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x800000000001e8, 0x12) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x10000000, 0x1c6a8b68, 0x6}) 28.372397503s ago: executing program 5 (id=371): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 28.14223624s ago: executing program 5 (id=374): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close(0x3) r0 = socket(0x27, 0x5, 0x2) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) connect$bt_l2cap(r0, &(0x7f0000000380)={0x1f, 0x401, @any, 0x2, 0x2}, 0xe) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) shutdown(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) recvfrom$unix(r0, &(0x7f0000000800)=""/131, 0x83, 0x40, &(0x7f00000008c0)=@file={0x1, './file0\x00'}, 0x6e) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mlock(&(0x7f0000544000/0x3000)=nil, 0x3000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000007c0)={'syzkaller0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0xa, [{0x1, 0x8}, {0x3b, 0x4}, {0x9, 0x80000000}, {0x7, 0x8}, {0xe}, {0x7}, {0x101, 0x5}, {0xe4, 0x5}, {0x7ff, 0x6}, {0x7fffffff, 0x7}]}}) fstat(r1, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x542, 0x0) write$binfmt_aout(r3, &(0x7f0000000080)=ANY=[], 0xfffffee2) r4 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000480)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x8) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000008}, 0x20000000) 26.795052541s ago: executing program 5 (id=378): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f0000001280)=[{&(0x7f0000000040)=""/189, 0xbd}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/122, 0x7a}, {&(0x7f0000001180)=""/204, 0xcc}], 0x4) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000001440)={0x2, @win={{0x3, 0x4, 0xd196, 0xbc95}, 0x9, 0xd12, &(0x7f0000001380)={{0x7ff, 0x10000, 0x1, 0x2}, &(0x7f0000001340)={{0x0, 0x800, 0x2, 0x2}, &(0x7f0000001300)={{0x3, 0x48f, 0x40, 0x7}, &(0x7f00000012c0)={{0x9, 0x9, 0x5, 0x1}}}}}, 0x6, &(0x7f00000013c0)="aba28a3447e7a0e247b099c05d7c81009cf7d0c5129aa301385185337d8e86ee84b3db86017ac5a5bacf6ce1286f731f46ad2bf4901cdcf2c920b769c3870457d5dd2d91c7c188db63df8cddb389aabf36c3a5b485db3aa64e5eb9150265e9809330cc137d94dc44ed8723eb4f512d3e85bf369735a97dc4ad09", 0x7}}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001540), 0x428c40, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000001580)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f00000015c0)={0x48, 0xb, 0xffffffffffffffff, 0x0, r2}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001640), 0xd00, 0x0) ioctl$VIDIOC_S_MODULATOR(r3, 0x40445637, &(0x7f0000001680)={0x6, "1c009d75564421d9e47b77da2e32b47c3434891bd98bdd69850f82fbdbef61d8", 0x20, 0x0, 0xc, 0x2, 0x2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r3) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001c00)={{r3, &(0x7f0000001740)='*\\\x00', 0x20000, &(0x7f0000001780)={@_ha_fsid={[0x7, 0x1]}, {0x10, 0x0, 0x2, 0x4}}, 0x0, &(0x7f00000017c0), &(0x7f0000001800)=0xd38}, 0x4, &(0x7f0000001b80)=[{0x1, 0x7, &(0x7f0000001840)='[&)\x00', &(0x7f0000001880)="292cd49903202c990d4dac69339786c0", 0x10, 0x30}, {0x1, 0xfffffffb, &(0x7f00000018c0)='[\x00', &(0x7f0000001900), 0x0, 0x22}, {0x1, 0x1, &(0x7f0000001940)='\x00', &(0x7f0000001980)="5421dc85d8adc8d1322727df62f5698ea1c7d7cbeb80b66bc83aa08fcbdfda9ab2ca4c9a8dcd03b0cfc0a046e67fe543beac724cc7424345a3257d7ed7dddb89e208fcb7940421ea0e5467d9f4201bfa19f468c1578c8634ba4db9d857fcf001cccd6380f7186a02e382d90a83bd7453abdbc86b261df38c78b7f562592d2a2d3aaa", 0x82, 0x10}, {0x0, 0x4, &(0x7f0000001a40)='\\\\-@#\x00', &(0x7f0000001a80)="e5e7db167a04d7fe08ad0e56985acc57f141499833389af7d119c00cf02e8b188ad7dd84487281c5f7b14876ff17cd219d5a0dc4f274022741d5a911add16dc41e28aa3dec658298b3097764ad057cb6f6de3f490f1e9e44a1f9914b480f289f7bf1394b9ba6de3fd09245a147012b80adc8a16c189c876f246037fcd4e0fd6984025948ff1ab0c02abbbd9fca80a07396a92a59cf382e18756e0d5d8aa71160c4a225020aaf125f7e5cf3b67f6e234424460b7796af9d90d15165b4d00c90fe94e17188a02e009f6903a20c016a42", 0xcf}]}) r5 = syz_ublk_setup_io_uring(0x178, &(0x7f0000001c80)={0x0, 0x472f, 0x40000, 0x0, 0x2de, 0x0, r3}, &(0x7f0000001d00), &(0x7f0000001d40), &(0x7f0000001d80)) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r4, 0x4002f516, &(0x7f0000001dc0)={0x1, 0x2}) ioctl$BTRFS_IOC_SNAP_DESTROY(r4, 0x5000940f, &(0x7f0000001e00)={{r5}, "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"}) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000002e00)) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002e40), 0x484241, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r6, 0xc0805841, &(0x7f0000002e80)={0x7ff, 0x28e45b1b, 0x4, 0x7, 0x4}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000002f00)={0xd, @pix={0x81, 0x578f77b4, 0x32314247, 0x4, 0x6, 0x4, 0xa, 0x7, 0x0, 0x2, 0x0, 0x5}}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003000), r3) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000003040)={0x1, 0x80000, r4}) socket$alg(0x26, 0x5, 0x0) chroot(&(0x7f0000003080)='./file0\x00') r8 = socket(0x1a, 0x28489d1614ea6c55, 0x3) openat$adsp1(0xffffffffffffff9c, &(0x7f00000030c0), 0x70001, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r8, &(0x7f00000031c0)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003180)={&(0x7f0000003140)={0x20, 0x1406, 0x100, 0x70bd2d, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x44) setsockopt$llc_int(r6, 0x10c, 0x7, &(0x7f0000003200)=0xfffffff8, 0x4) getsockname$packet(r8, &(0x7f0000003280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000032c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000003380)={'ip6gre0\x00', &(0x7f0000003300)={'ip6tnl0\x00', 0x0, 0x4, 0xd, 0xe8, 0x1, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x20, 0x700, 0x2240, 0x6}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000033c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f00000034c0)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x1cc286daf76e8e0e}, 0xc, &(0x7f0000003480)={&(0x7f0000003400)={0x44, r7, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x30000894}, 0x80) shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ff9000/0x4000)=nil) 26.450329864s ago: executing program 5 (id=379): mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000001cc0)='erofs\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) llistxattr(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000680)=""/124, 0x7c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x610003d5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x7, 0x16, &(0x7f0000002880)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26}, 0x94) r4 = io_uring_setup(0x76fc, &(0x7f0000000340)={0x0, 0x3c3b, 0x2000, 0x5, 0x2d4}) io_uring_setup(0x7625, &(0x7f00000002c0)={0x0, 0x653f, 0x10000, 0x0, 0x28e, 0x0, r4}) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r6, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0) r7 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000cff010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000010000000a0080010000000200000000000000000000000000000001"], 0x110) setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f0000000180)={0x0, {{0xa, 0x4e22, 0x6ef, @mcast1, 0xfffffffd}}, {{0xa, 0x4e24, 0x21, @loopback, 0xfffffe01}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f0000000840)={0x0, {{0xa, 0x4e1f, 0x2, @mcast1, 0xf}}, {{0xa, 0x4e24, 0x4, @local, 0x4}}}, 0x108) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40840}, 0x4000040) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x14, 0x16, 0x107, 0x70bd29, 0x25dddbfe, {0x20, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc090) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0/file0\x00', 0x0, 0x2a530d1, 0x0) 24.87689583s ago: executing program 5 (id=381): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x1000000}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r3, 0xc00464be, &(0x7f0000000340)) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000000c0)={0xbc, 0x0, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x80a0000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000}) 24.534822808s ago: executing program 5 (id=382): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) syz_emit_ethernet(0x56, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af25, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() openat$comedi(0xffffffffffffff9c, 0x0, 0x202, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x6fa, 0x0, 0x0, 0x51, 0x0, 0x4, 0x2000000, 0xffffffffffff2190, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x3, 0x8000000000000001, 0x1fff, 0xffffffffffffff7c, 0x4, 0x0, 0x69241edf, 0x0, 0x3, 0x1ff, 0x18ab}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mmap(&(0x7f0000728000/0x1000)=nil, 0x1000, 0x5, 0x12, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(r4) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r5, &(0x7f0000000180)=""/4, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x2710, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x11, @loopback, 0x2710, 0x0, 'rr\x00'}, {@loopback=0x7f000002, 0x4e20, 0x0, 0x1}}, 0x44) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x7530, @loopback=0x7f000003}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000210)={0x2, 0x2710, @loopback}, 0x10) r6 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r6, &(0x7f0000000300)="450000380000000040017cc07f0000027f000003030339a4000000004500001c0000000040117ccc7f0000037f00000275304e20000800", 0x37, 0x24000000, &(0x7f0000000400)={0x2, 0x0, @empty}, 0x10) 23.059994438s ago: executing program 35 (id=382): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) syz_emit_ethernet(0x56, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af25, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() openat$comedi(0xffffffffffffff9c, 0x0, 0x202, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x6fa, 0x0, 0x0, 0x51, 0x0, 0x4, 0x2000000, 0xffffffffffff2190, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x3, 0x8000000000000001, 0x1fff, 0xffffffffffffff7c, 0x4, 0x0, 0x69241edf, 0x0, 0x3, 0x1ff, 0x18ab}) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mmap(&(0x7f0000728000/0x1000)=nil, 0x1000, 0x5, 0x12, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(r4) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r5, &(0x7f0000000180)=""/4, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x2710, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x11, @loopback, 0x2710, 0x0, 'rr\x00'}, {@loopback=0x7f000002, 0x4e20, 0x0, 0x1}}, 0x44) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x7530, @loopback=0x7f000003}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000210)={0x2, 0x2710, @loopback}, 0x10) r6 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r6, &(0x7f0000000300)="450000380000000040017cc07f0000027f000003030339a4000000004500001c0000000040117ccc7f0000037f00000275304e20000800", 0x37, 0x24000000, &(0x7f0000000400)={0x2, 0x0, @empty}, 0x10) 9.258689938s ago: executing program 0 (id=404): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000e00}) 9.251191872s ago: executing program 4 (id=405): socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) syz_emit_ethernet(0x56, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af25, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() openat$comedi(0xffffffffffffff9c, 0x0, 0x202, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000280)={0x1000000000066fb, 0x800000000004, 0x6fa, 0x0, 0x0, 0x51, 0x0, 0x4, 0x2000000, 0xffffffffffff2190, 0x0, 0x240b, 0x3f, 0x9, 0x0, 0x3, 0x8000000000000001, 0x1fff, 0xffffffffffffff7c, 0x4, 0x0, 0x69241edf, 0x0, 0x3, 0x1ff, 0x18ab}) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mmap(&(0x7f0000728000/0x1000)=nil, 0x1000, 0x5, 0x12, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close(r3) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000180)=""/4, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x7530, @loopback=0x7f000003}, 0x10) connect$inet(r5, &(0x7f0000000210)={0x2, 0x2710, @loopback}, 0x10) r6 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r6, &(0x7f0000000300)="450000380000000040017cc07f0000027f000003030339a4000000004500001c0000000040117ccc7f0000037f00000275304e20000800", 0x37, 0x24000000, &(0x7f0000000400)={0x2, 0x0, @empty}, 0x10) 9.231250074s ago: executing program 8 (id=406): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0xe) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x14, 0x0, 0x0) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r4, 0xc0485660, &(0x7f0000000380)={0x1, 0x1, @start={0x775b4acb, 0x1}}) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000180), 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) close_range(r3, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.102954552s ago: executing program 0 (id=408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_generic(0x11, 0x3, 0x10) close(r3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) execve(0x0, 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 7.146257415s ago: executing program 7 (id=409): fsopen(&(0x7f0000000140)='erofs\x00', 0x0) r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrwo|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00'/898, 0x42, 0x1f0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) mq_timedsend(r0, 0x0, 0x0, 0x8000000000000001, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 7.026086355s ago: executing program 0 (id=410): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x52, &(0x7f0000000040)=0x27, 0x4) syz_emit_ethernet(0x22, &(0x7f00000001c0)={@broadcast, @remote, @val, {@ipv4}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002780)={0x8, {"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", 0x1000}}, 0x1006) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x401, 0x9, 0xa, 0xf, 0x5, 0x0}) mount(0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r1, 0x5, &(0x7f0000000000)=0x401, &(0x7f00000000c0)=0xf6f2) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000280)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x10, 0x803, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x3, 0xfb, 0x4, 0x3cda, 0x4, 0x285e}) prctl$PR_CAPBSET_DROP(0x18, 0x23) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040054) accept4(r2, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400001702020000052406000005240000000d240f0100000000060000002006240704"], 0x0) 6.914018299s ago: executing program 7 (id=411): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5601, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') r2 = socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0d00000003000000040000000900000001000000", @ANYRES32=0x1, @ANYBLOB="0000001200000000000000000000000000000000efeaabfd98f9bbbae5d04ecf3c400cdc2809f8c517ca34e217db184baf22d551619b3efb2e6d21c25500c052af05e4a1039368dd5d1a3803c89767138dcb3d5dde3944ec9735c1333f4131831a4887a46709fd4b7f995f4715af32f18da7b1b448e1a658ff6d4f525c80777b90bc7f365cbe6459d2e0f83f6be1a9250b55c9d739038103e494ad84058c6eb5d395f061c2900437f2b5b244fa8a01ef", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0) 6.330045003s ago: executing program 7 (id=412): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2, 0x3, 0x84) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="b91b0000000f3225ff0f00000d000010000f30c4c27d79bfb4000000f6cb33bb000310008903", 0x26}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r0], 0x48}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000640)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206010800000000000000000000000014000780080012400002000305001500580000000500010006000000050005000a00000005000400000000000900020073797a300000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) 5.279265299s ago: executing program 4 (id=413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_generic(0x11, 0x3, 0x10) close(r3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(0x0, 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 4.301160585s ago: executing program 7 (id=414): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/rebind\x00', 0x1, 0x0) write(r0, &(0x7f0000001000)="312d93", 0x3) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000380)={0x1, {{0xa, 0x0, 0x3, @mcast2, 0x711}}, {{0xa, 0x4e20, 0x7fff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}}}, 0x108) fcntl$dupfd(r1, 0x406, r1) 4.29535936s ago: executing program 8 (id=415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x2, 0x6, 0x201, 0x0, 0x6000, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x34, 0x9, 0x6, 0x5, 0x0, 0x0, {0x6, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x804) 3.684664998s ago: executing program 8 (id=416): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r0, &(0x7f0000000140), 0x0) 3.557471582s ago: executing program 4 (id=417): listns(&(0x7f0000000200)={0x20, 0x0, 0x8000000000000000, 0x8000000, 0x0, 0x3}, 0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x402) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TCFLSH(r1, 0x540b, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000), 0x400, &(0x7f0000000100)=ANY=[]) openat$kvm(0xffffffffffffff9c, 0x0, 0x2001, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/../file0\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x800000, 0x13, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000080)={'dt2817\x00', [0x3c8, 0x5, 0x2, 0x8, 0x14000000, 0x0, 0x3, 0xa, 0xefd, 0x7ffe, 0x9, 0x13, 0x400, 0x2, 0x13, 0xbd55, 0x40, 0x3c, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0x860, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x3]}) 3.471095435s ago: executing program 7 (id=418): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x4, &(0x7f0000000140)=[{0x7, 0x0, 0xb4, 0x7da4}, {0x3, 0x5, 0x0, 0x5}, {0xb0f, 0x5, 0xf8, 0x7}, {0x0, 0x4, 0x9, 0x9}]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000101010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c0002800500010000000000470002800500010001"], 0xe4}}, 0x0) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000280)={0x5, @vbi={0x0, 0xfff, 0x9, 0x3432564e, [0x2e, 0x4], [0x4, 0x5], 0x1}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000240)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e5002abd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB], 0x38}}, 0xc4c4) ioctl$EVIOCGREP(r2, 0x80084503, &(0x7f0000000400)=""/117) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400200000000800124008001f000500010006000000050005000200000005000400000000000900020073797a31000000000c"], 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="8800000010000d040400fdf20000000000000000", @ANYRES32=0x0, @ANYBLOB="0010000019500000540012800c0001006d6163766c616e0044000280080009000800000008000700d1ae0000080001000200000008000300020000000800010002000000080007000600000008000700060000000600020001000000140035006d6163766c616e30"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000080)={0x0, 'batadv0\x00', {0x5}}) syz_usb_connect(0x2, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d2f6010000400009046a00067af4190009050f080000050801060c8b631b7507250102020700090501"], 0x0) 3.470641769s ago: executing program 8 (id=419): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000280)=@secondary) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x403, r0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) 2.698132494s ago: executing program 8 (id=420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_generic(0x11, 0x3, 0x10) close(r3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 2.652631508s ago: executing program 6 (id=421): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.475595216s ago: executing program 6 (id=422): syz_open_procfs(0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) close(0x3) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = creat(0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f00000002c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r4, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0x4, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) timer_create(0x7, &(0x7f0000000540)={0x0, 0x28, 0x0, @thr={&(0x7f00000003c0)="0a468a164e2d555af6462262043937c78497d990476357721db8dfb6b4c39ae33d9fa5f35e81092783cf511e83b4705b09fa1a891f6caf052280f3fd56dce87eb37a0baeef1d2696456f5883bc361bb9f5a830db431b34c4cd9dea7f4427407df68456bc0d180b85e421b09154d86d3e9b9e02a876d5003b61ad017c00c432f65caa314a2d6005b648b1a7edfd5ce4d7c84138a66daf1fe45fccce3da14128122bcbf7e48143a1437ce39477e762d321cf18e52c98876a2abb9e9693a1996927d98cf4645302ef054d", &(0x7f00000004c0)="dba03867bee89c0694311ec90165ec2dd2abeb271c15cb59a8cda504df84ab1c43746a2b05ca959ab94937404f384b5adc2ac9f0a5afbe55e530d1f6232c9b00169ae2172d7bfd3e6dd9f9cd8f590847dcfec37502b60f904a8fb6e2d7898acb5b87077a47e2bc4e148aefeb956765"}}, &(0x7f0000000580)) 2.474959787s ago: executing program 4 (id=423): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r2 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x168503) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f00000000c0)=0x22) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x11, r6, 0x1000) ioctl$BLKROSET(r5, 0x125d, &(0x7f0000000000)=0x1000000010) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r9 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r8}, 0x8) close(r9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r10, @ANYBLOB="0100000002"], 0x40) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r11, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r13}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r12}, &(0x7f00000000c0), &(0x7f0000000140)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r4, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r7, r4, 0x5}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xa, 0x1}, {0xa, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 2.369770577s ago: executing program 6 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x722, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_generic(0x11, 0x3, 0x10) close(r3) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)) 2.353663249s ago: executing program 4 (id=425): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$kcm(0x2, 0x3, 0x84) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="b91b0000000f3225ff0f00000d000010000f30c4c27d79bfb4000000f6cb33bb000310008903", 0x26}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$inet(r1, &(0x7f0000000700)={&(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r0], 0x48}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x541b, &(0x7f0000000640)) 2.294783709s ago: executing program 8 (id=426): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB="28002000130001002cbd7006fcf8df2500000000", @ANYRES32=r7, @ANYBLOB="141004001f4c050008000a00", @ANYRES32=r6, @ANYBLOB], 0x28}}, 0x20040000) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001100010028bd70c210d4f18027ef26d5", @ANYRES32=0x0, @ANYBLOB="570da8000103000014000300626f6e6430"], 0x34}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x402842, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r12, 0x4068aea3, &(0x7f0000000340)={0xc5, 0x0, r12}) r13 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmmsg(r4, &(0x7f0000002680)=[{{&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r13, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x3}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="61cae8838f4d6f3adc8d19a554554e3f3a0d461632ba5b083d231d7476b6c8fc1c61cb11e6db9c95f4a004ce89654be8469cfc8bb5d038de9a38e9e812dada2efb59b93966a8e96b1a9b76311e4e0fe17b1c58acbd878c3462727589c58aa7d620d6666cf35a344cb99c01dcf95dee7b5821b507a906276e2805b23509586961e99a5c3c84ed5e4b041eeaca2a5afc11f5271db2a042d035ba1212480e8859c55dc122dfef935ae11d606c01b36b5b4cd0dc6c8547e331df0d8762c982b5885d6051ea0f851369cbd23fa4ee3dc457ab18590c2b0828fba2edfd", 0xda}, {&(0x7f0000000480)="6c9148c1c1ed434ef779dab778617eb4e2b213dc5ec07895062d5a442fc2065740a2612e24e570a4c2eaad4e5450d761bc73ed4719bb818a52804c156d2ed91cc064b864012b9b3765207ff4f38120c2690293ef772a0efbb7d3b0342710cb3f699167b97c5c820201049515c20f50d8bc05b1536faa83d272338a8f284336f9022c834e8cf70a2cbf701071936640cf2edacaee79d60db6467516600480", 0x9e}], 0x2, &(0x7f00000010c0)=[{0x1010, 0x107, 0x1abe, "e78c4c50c118730b305968e60f2d733e6d1150a8c6f8d24e4d4596b5b8e53cbd223b7d0df3e08901daa1ce77218cda3aabde5055fd5de7fcf0a8a8bf25ce218387426fcf29c1f14cba68fe8dde9394c544c688e12543a7e00dbcd1b89d244fe5398dd5e34f8256f333ff25568c6971383e3e38297b0d8e0c49989fb42e2b36f25d1b17a65eb913b0b5cf2728e0f9f00924f2ad1a48b6571c301a886842faca646bc8f5d81736d9fdbb9b6f3dbd958dd57a641e01cd5ae0f4302d5a024cca013ea74bc593bd84fc1e27b760bba69f5dacb03297667b3cf23ad041ac1018a9ce988b4741669194a329c588c8ad348f07dcf7972af72bb98bbce952db69b664d20a98be2a61137c68c182a6cdc738e5e0baebc1bb47a97a51dab41ac48382865e918c7df3cbc51fa490d6d97af8282e6f0147ca129de45a4c7c5c0eee87132369d4979a5aa877b26491021817d0c4d8042adcf1a3586a85fe753919b402acc85ebf1f41d87e0842f64822def18bcab06c5d6e935332a4726246878ee142b7f86b25a3998a0905e792d5ef7b78ac3c90f4b8a8e57878f748c899c31f9afa6784e72ecd7b9ec67455e260452bbd7665879268d0fc11b699057a28f5347626b61e1442b82c77fb5f8dd376fa5e879e320ed0597f49acf4b7a3f4a0e11264ae0ff676be69241fdf8037be7c8c508ec27d4682ea59f0ffa567bd2fda8fe507bda1b6afca46f92a1a6f56c78674bc031091c73012732a26e3dd70fe6ac2863be2894735b877f0720eb654fe234ce7a553acc6bc5893b8004158bc2ad04f46eaeb8b8e6e3e3022940017bb6703c3d1244e8b9456dc16b211da858264d27f2f1813c86ceaebb728416571de902fcea200c32f2007cbd070ea9f76db91438db893aa71066d8e98eba146122d733ce8550503ce91331604f3ef8866ede4837e983a9e7b5d147cfa17b5a239e9958301c1ac798efc4a2cf5565dc3091b35ef1c17e45b9ab46dccf6a6e06039f0f9ad281a8a029027575280f156f208ee9a1c0f9a13b5ca68002d7496f00baecb54aa70093a45a700ff9bb0163e6895d754ef9715b8d1bd47abeeb34ec817dc41baeb76fe22c5532f8c292f64faf8754f4af8b4cebf4fda9206d85e39bde468d98e26222341e181e6f3e5ea0e57ee4ba88ecf65f9f7bdfc7a5f47a0d41f92d6fce5ef5818f41e7a936b65d55b1ac0b9a27750569e3adbb35e9eef9b40132556ed43e6784df751f8a826d5ad7370ebe0c2b8444a922682498eb19348c43bafbe1a6b671d08b1bbd8e108b558ab8985a05faacf4bd6dc19263765cab15e9c663bcb7ee69c9669ff768088f06d9e701f27385ece9db5c45942ecbb696ecdd46506006458ce0ea3ae0b0611db6049d984d39c36803b095c42fbfb4cfaec0bfa5cda9bc48a9787474f46bf21a813ed0ee854776418c90b03a2c98f2ecd174fdcb3be7738991b558b1e5850b07bebc405621d566aaf1fed24d8e467714456a65f5a8648c645563b6df15daaeb85210b2e75875c7a703887d151d8f8a45c090aedd72509251b1ff3bb75047f64b838a07a875006d775d560d596d42a5eb15e007589168129ec0d59aecba2e4711219c123f1955558066db42f80982e619ec62082263fdee6042cefe6d24905e6444c4905946be9ebbbae07f43d4a472038d8edaba14008636da0702568ad7d147c7dc23821e9a09efe16b5a9316b606c4019ae03e1fdb8672c719d79f47949b78cd9586d4b419843f21161b914b57995aac70190ebb246d81ed5410c2bd42f1250eedb936149be1f4222d226c3ac5a3b1bc0c88f48d1e9fb66da7684919e13bc24237413e6cff46755b1ffb026d3c51ca722cb253e53160492caaaefb4003bbaf135ac9968482065d5df69f037595ed8601c1116dc41dc07eb7972cc7952d7935573487383ae79f8bd30d8c579bdaf6d180600b757c90bf14d73f72529c560548d1559f9ead96079ddbacca9895ea9bccf4bd7a58bcb247b7a29af96b1678c134bac1d0ecdcfcdad4bfe24ade34da84d87196cdcdb9051d843d3a2266ed1b5acf593f2ad6544b858b90cda4bd8c74c6dafbc90e78f0f2d86174c0d06a2d9923619b3899ae3a3b6fdb1bf9720c3822bdd005015072c65acff61fac21d92f6bd2fed565186304b5c1624f5b25a33623af9c3ae8a42cf2dc8a5bbd98bd19c43354ba8b930e8b6812fb8991b9ed0c67d5a7d2af2f7da19e6334c356354adbb2ce5a17cf1fb4ff8da8a96409c26ecebb04c35a6fc2f0974030cabfc5d26b836f67b07eb4d2bfa6a54a5f4d1f67d14960881a4aba450fb31fae6131312bcf71dc96e2b59dc0b63d4ad34ba103b98d0099036a5ab3475b37f339fa6cf1927bd07334a2eddda794d2de84594b302fb006ea90ce91d5699f434d6f4e8cd3fb99ab162b260852794f32ce268c6ada3a939fb992f660bf6087bc3e76ea46613bba6eebd385e8771df817de46733f3cb7b8e9fd13a30fc3935b0d9c189bb29a1a56a69c86970294956aa73155167ad69ee0067d916f507da02f2c739aecab6941a1a08b177b67785e7ac2b6fcbc7bb7083bc3dfdaf766557bd12e66ee85c293694924a1035e756825f431bb22a255d971c696335c190687e81e7013fb3a96c81a951c01ac29c248290915232224fcdcf83e965913197c7b3dc74cb534f0bce477b0eb3aac5a5c81fb736ca25623bc412c2e2cae3e5164d24024ab6eab2c684bb2b4cd0444b28da58cdddfba098758539095e17650baa4aeff0568e09f0310e26ce7553463d625c65ca1ca3adcfb219a604325760d0ca6786deebbd37d3b53aa5c8d2fe5ceebc7c65eff35424604c5e32bc4404977907a95e176b4ca15fe25da2622df52be486dc1947027fa66fd5b94e4e88b71216f0899526313ac5ed943b508f5dd11d850c89fa8767367f9268d791e0f3e2541e2772076d76bb59f5e213c9772596cf34c829eff1a0b59c6c9a1bc157571575ed36376c8a8ba8c7b18b1f1fb5ae5f2165afe6ba05b2335e55d89e1fdcddb4fa14854baec460be1bd7de2859a0202d9bddda51f89c93f5fa0ce8276c18418c0e27ef97bff9d11dfd71989f18c07e0fb08562074874fa254181f363aba716fc1d7af2250a6141e1084b95d2acf24055926df7f776e95baa33fdc1278b3b647ed4ebe906ad60fb1789c1e3c5d59e22fcc68b29a672eab399f1f2e4f0d276d263350199f0f1186f27f4ca306586f0c3784ec657e223ac4553923613e459a3d1d7011501dc760d7cd9748f3d1473e8ffeb69729c171d895214a28b9b38e5898af60083910292754b4ea424f87b9237ceb11ab2a5985289ea5a238de9ae8f5716f6d00030025e9fcb613f58953bc02cc1207fe516808d16fea0f92f5ff40e1f1c8875176c8ae8acccebe1280c6cb939e48e2bb18b0a325bf0cf89e2934fab16dd1edc1143320e0a8202de56351fbcff6252c2f57e72f60214834722cf2fbc8124b4d140eee18830763ad9eaee740cfc6831beba9e74b69bb47404571964569657d2872935aad4eab5affa3fcc09a29aee0e4379b308bee32b217ac585f587b86905e2dcd94ea9bda09e4bb8779f1c1f4716ae5edbf1becf1410bf694f696fe4082984f81147d3793a4e43c3443ab2cef61715637267a793b029a927a8e419a54060bb34d923f6094689e758c64101b788e7e5bd00f6f285ca6faff1832b37d63c662a225b04b0bdd68cba06eb8c10bc4c42db56dd4a4a611f71d11511e48949e4d337706faca6bf51c38e8e6baf846bf0390e81a0661150e34c7d49ff9d4dad1b38ad53239378a91649c56cf65cc6d1acad52a53a3223aec01f6e7872f7771415d73ff82ceafd82abdc35d242eee46be045198026a8e63b63d58fb1880d51e9b1634644054c39165acf4ce280730576c3f3af617b2d4768dfb0bbe3663821e426fc35321173029000289312659eb606c8198a44e322c3a4e2e1203e1b2247321c6490a084e65200b01d5c553bfb5caf3a9b967bf087302e246e4c04ebd075174dcb02fe6a1fc8a2ab3aea8cec7e823ba207ece5db4c0daaa2387ccc4998b7d31bbde87eadf10f62acbe39df56091bfb4f8a2d82047fb0f51168c2cdea4430e1934e57dd335357c63a93010e2a84cc89354d46d4888d35f8d3f44f2ac750390f62f1bd9f8432dc5d9f887176c592d51b5e36ea53eb751c63033ad6af1a85b4dcc87cad83a899d1ef10007704b43224383494bc5578ba01fb23a50c94c7500e01f3565c860a0e54b22645fd9c1e42473578dc14d14f38a729e6e4b2e0312c89e295a004f2948938ca6abe06f10322388336e9f1b4a507761714474b6242221fdaba995979256c5239debbcc0eb3281fb064db1e2e153a820775b47576b99292b381c1c5cc26c472e6dd1fae180e8e6a63259045b6072902f3c4250070817436eb4184e3c5348409ae49eef0f36c65b8feeac91cc4706cc124726c278949c5ee2425d3833ec9d7f9eb43542c06079d1327f9a9b2ca44dae708f0e3baa9f2432a0de9f18220f77f967c82bb4d156cc807c1f647aebd9676b8a7cc4e79f4a1fd691182895846579c33f3efbd40c13b2a42011fa3d38acdf2faf060e11589e83d7c080c6c042c021e7952beb23477434bbcff3b01d7fdec1c5f38ffa48efd396bef626e25303765c7e1be73ab50a93df7fd3590e8463f25b837f9e9d93679e97a364d5b76e11e9ea28a21f4491a8d51268d0020d31a7f210ca7b50e6e6d551b0512d013aa1f247b4e51dcd6c196f5e9be0955a7312340fa6d2c5196990215512f7391605bc3562909ba031b5837660e387aff04ccc9c7e7f728ec8f692d0c15b398d4637a6aa0aac26d7141cfc16385a57528bfbc4e73c6fa061d59905918d77db560f2fca71de90c7d9243da70a727757fcc14d6d65d6c042938b5fe8797ae239c227edec65cafa5d86465062ed0fdbcf8b89baf0b5dc60891445bb18b2a066c0cd64f778107de24b8358462f03f0eb5c7b15652408cb938174c470ddcfbc77c5a1ef0f8a15c2fc97afec0701a54900e874e9959781cad822ae5f84a5b6a2ff1d4c5b23e6beed9f6a747f961ddeaab0db36be118cc59d8a09eadc700dee2de602881567c59258e75bfcefa0c0a8c97623b8aad287c6e5c237837c189a1c82172a19ef6ab24b7c9333797109d8a053789b3aa7b520f685e9f21ce4b66bb7a882e1335985d45ef343a3106a85c78e0343464fcaf81a97fdb2cc9e226b7457bf51759f6ea8488743838e0e43c08a968a742e0daf137b2ae47ec0042b7444bf21b5e60c151f89b0be176b27326a6f2f3fd662286ec9ba336c970ca4bd18d8f7895ebe01d8b1feed535bff3d59988b893c81a93057f0241c6e2c52da9193f0be38339c3b1a2d873370b4fb59a07942348c3cf3e50669fb637d2e770464d3964bb51f9200ad7f1a0d0b8e0751aa3390c969571f2f46986c938e0d4e708290febc6282815c0d8e644ce7851f35d5ffb77222d9b5f63832e7a4642edaebe73890a44f787c5a9afdd60e1363ee2ebe31133dec01fa732863ceb4970002c2170461673806ed70e205c70ae0be8c1151866f40ca0162e3309b3dd67fbdcef407516b193e6460578a7cfa524cd2c09a0a4bdac2e3afe6d00280ec482e1658a767d3e1dfa971ad44136b48edbb801ef1b9aefaa592a955d648e1ac08303096342dc53b208a7953a8501563b4df836e20c1b92f0141d0a14a0dada93b4cf3bdc4d65f3a190107d7b860127202ad2605871848ae633580205d8877935e03b35886a998f2cd16c5ff1bd2f2cfc66ddab"}, {0x40, 0x111, 0xa6, "641302a148416bea8ea75d990a6b6a194ef97cf0da6b131873fd06909e3a6b3cf73f9e88ba505c258aa910bcec6e2f"}, {0x78, 0x84, 0x1, "6123da363e7c62d094e45a70f12ac440174826834e31c28033dab926ecb6494fa9958816f648d36cc99885b063d86bddbaabea4c80a248f621d1b2a0233d02484564ca2a4685cea1dc9c63ac4dc68eb519fd9a14084455844ac54f94461cec7adad03a"}, {0xe8, 0x101, 0x1, "09f4bd34100c9e5434e73c0b92ea07aad5167ac21908c3600ee52b7701fe24624ecbedb02019550e5b48d2f1586cbdb3d66716d2a20fb5cf7c0192b8c456d023841657eea8af108b8229378fe6de58d262c5d6a8f71e63dbf49f4d59673ddba8b88425cc1ebe5984c22c2d96a6c744acb0706d8a4223aa76fcd1323fa17c4386507f4cbb2aa6cf8e85ba0eddd820f0135d5d91810239a894492f947389ad50a3f8b1eed87bc71442d511d3c2894ee0392a0b98271f71356e155aea95f4b3a06abb2e9b4206f4848d18766ecc2d1bb42aa91a598b"}, {0x18, 0x10d, 0xc, "05"}], 0x11c8}}, {{&(0x7f00000022c0)=@in6={0xa, 0x4e24, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x200}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002340)="28d43cefe9a177620a49b671d3a99f3b04d1ad7486224fe81a2e428339b9adcfa3438463bdc56f8f48e498782a0ce9e5303177269e587309f263a6338f204c8f8f6906ee3dff5f29a697f01d527191a68820ba308503c39329be7215e73493205bfcb9b412b154f012aa61f941176e5d87c0021a84b1fb14d3aaa81ca8ef64d783d1c6fcc6ad90aa54d4381829f679668cb4d526c335fb5ff11a009a084dec793a09de574fb5b2f6c179462f4390a009d1fb13a947f67855d8b21c04f4396fe187a4a292898b8367914ac40107cb1367c1bf3a7d71317bccb7fe291d8a413fd4bad645f9a8ac52f21719a51acea9890f68d46405", 0xf4}], 0x1, &(0x7f0000002480)=[{0xe8, 0x107, 0x10001, "08bdbc13ecfcf89e157ed2624e44d26ac405dfe94bcfd4e23c2136820a18be7c98c106c498de3bfff4245cf7af17e8a84f8e034a3e302481fb2577d2779b492e113aa69cc88e3d28f6c7d53d380a69394071936993b0e462e7df267a8663bc31c6ceda37aad035515d1c910aaa9b1e15c17773bf3a1c89ab601da4663a4a37e01b70930c44e7c40314da5cc5cbed5674d6b19629923c0d988fe84c7b90bd7a5d84364fb824978101def2dab0b150e300fcbb2ba951431ae0840bec48242f9e1ad203cbb8a5836e59e448a0eae04f12e7c63d0087559ad1"}, {0xf0, 0x10b, 0x1, "4d00b636db94d74a0d9d9e9c663bd97fa13cf581878ba2536b71a23bfe41502b19a95d6993b7632084b83fd4f5fe6d493d2bd26dd792ec52b5e98d91e986d95e4993f85fba9c01fdf04ce09c63a3389a0c19ca5e699a06818425626bf04119f12beb28902b7933a49bbd0e08077d849cf36522618cea950ea2ccca650c465922e2e8f673dd675536907e617e571131b7e91ec252d912b88a17ca60aded1f81d287e703081eb401d56c0789966cc25e7e73e39dffa78df8933526eb5435f345b1d511bfd02a2d2aea007af203b077aae287f9e3e1e30a96e81386fb0bae099713"}], 0x1d8}}], 0x2, 0x80) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r15, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r16 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r16, 0x400448c8, &(0x7f0000000280)={r15, r15, 0x0, 0x0, 0x0, 0x0, 0xbd, 0xa, 0x5677, 0xc3c8, 0x0, 0x7, 'syz0\x00'}) sendmsg$L2TP_CMD_SESSION_DELETE(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x40, r10, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x44) 2.28779748s ago: executing program 0 (id=427): getrandom(0x0, 0x0, 0x3) getrandom(&(0x7f0000000700)=""/15, 0xf, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @local}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x97, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x4, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e63046d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x19, 0x1, "000000000400260004000000"}, {0x1, 0x1, "fe906d17efe3"}]}}}}}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f0000000100)=""/68, 0x44}, {&(0x7f0000000200)=""/43, 0x2b}, {&(0x7f0000000240)=""/56, 0x38}, {&(0x7f0000000280)=""/216, 0xd8}, {&(0x7f0000000380)=""/225, 0xe1}, {&(0x7f0000000480)=""/242, 0xf2}], 0x7, &(0x7f0000000600)=""/182, 0xb6}, 0x0) 1.357859167s ago: executing program 36 (id=426): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000002f000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r2, 0x4) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001bc0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48008) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)=ANY=[@ANYBLOB="28002000130001002cbd7006fcf8df2500000000", @ANYRES32=r7, @ANYBLOB="141004001f4c050008000a00", @ANYRES32=r6, @ANYBLOB], 0x28}}, 0x20040000) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001100010028bd70c210d4f18027ef26d5", @ANYRES32=0x0, @ANYBLOB="570da8000103000014000300626f6e6430"], 0x34}}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) prctl$PR_SET_THP_DISABLE(0x29, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x402842, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r12, 0x4068aea3, &(0x7f0000000340)={0xc5, 0x0, r12}) r13 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmmsg(r4, &(0x7f0000002680)=[{{&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, r13, {0x2, 0x4e24, @loopback}, 0x0, 0x3, 0x3}}, 0x80, &(0x7f0000000540)=[{&(0x7f00000002c0)="61cae8838f4d6f3adc8d19a554554e3f3a0d461632ba5b083d231d7476b6c8fc1c61cb11e6db9c95f4a004ce89654be8469cfc8bb5d038de9a38e9e812dada2efb59b93966a8e96b1a9b76311e4e0fe17b1c58acbd878c3462727589c58aa7d620d6666cf35a344cb99c01dcf95dee7b5821b507a906276e2805b23509586961e99a5c3c84ed5e4b041eeaca2a5afc11f5271db2a042d035ba1212480e8859c55dc122dfef935ae11d606c01b36b5b4cd0dc6c8547e331df0d8762c982b5885d6051ea0f851369cbd23fa4ee3dc457ab18590c2b0828fba2edfd", 0xda}, {&(0x7f0000000480)="6c9148c1c1ed434ef779dab778617eb4e2b213dc5ec07895062d5a442fc2065740a2612e24e570a4c2eaad4e5450d761bc73ed4719bb818a52804c156d2ed91cc064b864012b9b3765207ff4f38120c2690293ef772a0efbb7d3b0342710cb3f699167b97c5c820201049515c20f50d8bc05b1536faa83d272338a8f284336f9022c834e8cf70a2cbf701071936640cf2edacaee79d60db6467516600480", 0x9e}], 0x2, &(0x7f00000010c0)=[{0x1010, 0x107, 0x1abe, "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"}, {0x40, 0x111, 0xa6, "641302a148416bea8ea75d990a6b6a194ef97cf0da6b131873fd06909e3a6b3cf73f9e88ba505c258aa910bcec6e2f"}, {0x78, 0x84, 0x1, "6123da363e7c62d094e45a70f12ac440174826834e31c28033dab926ecb6494fa9958816f648d36cc99885b063d86bddbaabea4c80a248f621d1b2a0233d02484564ca2a4685cea1dc9c63ac4dc68eb519fd9a14084455844ac54f94461cec7adad03a"}, {0xe8, 0x101, 0x1, "09f4bd34100c9e5434e73c0b92ea07aad5167ac21908c3600ee52b7701fe24624ecbedb02019550e5b48d2f1586cbdb3d66716d2a20fb5cf7c0192b8c456d023841657eea8af108b8229378fe6de58d262c5d6a8f71e63dbf49f4d59673ddba8b88425cc1ebe5984c22c2d96a6c744acb0706d8a4223aa76fcd1323fa17c4386507f4cbb2aa6cf8e85ba0eddd820f0135d5d91810239a894492f947389ad50a3f8b1eed87bc71442d511d3c2894ee0392a0b98271f71356e155aea95f4b3a06abb2e9b4206f4848d18766ecc2d1bb42aa91a598b"}, {0x18, 0x10d, 0xc, "05"}], 0x11c8}}, {{&(0x7f00000022c0)=@in6={0xa, 0x4e24, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x200}, 0x80, &(0x7f0000002440)=[{&(0x7f0000002340)="28d43cefe9a177620a49b671d3a99f3b04d1ad7486224fe81a2e428339b9adcfa3438463bdc56f8f48e498782a0ce9e5303177269e587309f263a6338f204c8f8f6906ee3dff5f29a697f01d527191a68820ba308503c39329be7215e73493205bfcb9b412b154f012aa61f941176e5d87c0021a84b1fb14d3aaa81ca8ef64d783d1c6fcc6ad90aa54d4381829f679668cb4d526c335fb5ff11a009a084dec793a09de574fb5b2f6c179462f4390a009d1fb13a947f67855d8b21c04f4396fe187a4a292898b8367914ac40107cb1367c1bf3a7d71317bccb7fe291d8a413fd4bad645f9a8ac52f21719a51acea9890f68d46405", 0xf4}], 0x1, &(0x7f0000002480)=[{0xe8, 0x107, 0x10001, "08bdbc13ecfcf89e157ed2624e44d26ac405dfe94bcfd4e23c2136820a18be7c98c106c498de3bfff4245cf7af17e8a84f8e034a3e302481fb2577d2779b492e113aa69cc88e3d28f6c7d53d380a69394071936993b0e462e7df267a8663bc31c6ceda37aad035515d1c910aaa9b1e15c17773bf3a1c89ab601da4663a4a37e01b70930c44e7c40314da5cc5cbed5674d6b19629923c0d988fe84c7b90bd7a5d84364fb824978101def2dab0b150e300fcbb2ba951431ae0840bec48242f9e1ad203cbb8a5836e59e448a0eae04f12e7c63d0087559ad1"}, {0xf0, 0x10b, 0x1, "4d00b636db94d74a0d9d9e9c663bd97fa13cf581878ba2536b71a23bfe41502b19a95d6993b7632084b83fd4f5fe6d493d2bd26dd792ec52b5e98d91e986d95e4993f85fba9c01fdf04ce09c63a3389a0c19ca5e699a06818425626bf04119f12beb28902b7933a49bbd0e08077d849cf36522618cea950ea2ccca650c465922e2e8f673dd675536907e617e571131b7e91ec252d912b88a17ca60aded1f81d287e703081eb401d56c0789966cc25e7e73e39dffa78df8933526eb5435f345b1d511bfd02a2d2aea007af203b077aae287f9e3e1e30a96e81386fb0bae099713"}], 0x1d8}}], 0x2, 0x80) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r15, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r16 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r16, 0x400448c8, &(0x7f0000000280)={r15, r15, 0x0, 0x0, 0x0, 0x0, 0xbd, 0xa, 0x5677, 0xc3c8, 0x0, 0x7, 'syz0\x00'}) sendmsg$L2TP_CMD_SESSION_DELETE(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x40, r10, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xffffffffffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x44) 1.249680669s ago: executing program 6 (id=429): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) ioctl$BTRFS_IOC_DEV_REPLACE(r0, 0xca289435, 0x0) setns(0xc9, 0x0) r1 = socket(0x2a, 0x2, 0xa) shmctl$IPC_RMID(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000002900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000000)={0x24, r3, 0xbb34a96d50fa80b5, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40004) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x3ffd, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="7c0000001c00010029bd7000ffdbdf2502000000", @ANYRES32=r7, @ANYRES32, @ANYBLOB="08000700000000000a00010043ff729de29b6a7ac21fca8b66b3f5066c032a060310412ff7af8a846ea49665d5d64ffec1e65cf6fdd7a801e3dcb9bb3b6b1900ef953f5b5ae336cf11460a0879a4a13a69c02913a6c40725db33d0a7e710112baf339d6d9f525f46d3d47b32db77cb88ed91"], 0x7c}}, 0x4008910) bind$inet(r1, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={r9, @remote, @broadcast}, 0xc) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x8, 0x3, 0x2f8, 0x0, 0xffffffff, 0xffffffff, 0x130, 0xffffffff, 0x260, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@local}}, @common=@addrtype={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'dummy0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x2, 0xffffffff, 0x40, 0x700000, 0x5}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000003c0), &(0x7f00000004c0)=0x4) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x170, 0xa, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_EXPRESSIONS={0x154, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x12c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x11c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xd, 0x1, 'CLASSIFY\x00'}, @NFTA_TARGET_INFO={0xd1, 0x3, "9f90a5826b8c43f1298b0d96d8eeb2368cce27da57e10d6311c632ffe3dc1f65d2ae1ff643c3db6c784627db372071b0e0b2f911177761e953f4a96c50f2b7f0d24f0174a270145eb17e6c284af511b052e41bfcaeafcf9840be923e577be189c5c73293eaf868129cef8da7f4a18557a22694186103b3f4bbadcb5b60f34f468a9c19df0cfea6286b396c5c3d827bcf3ef6e07a1ed7c3870c95092236ab691e0e1ae145c02fd42271f3b9fbff31d8019e54b239f7c24ae1c2158eb6129195e3b47ff5ca851f464c47eb217d2e"}, @NFTA_TARGET_INFO={0x34, 0x3, "3f7d41118b4a206019baaca154a0e657dfe3525f9bb8109fc9e56be6bae6c253b5d8fd67476bf689d370683b61214f76"}]}}}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3f}]}, 0x170}, 0x1, 0x0, 0x0, 0x4}, 0x20000010) 1.248753062s ago: executing program 4 (id=430): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r2, &(0x7f0000000180)='10000', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) write(r3, &(0x7f0000000200), 0x0) r5 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "00d703500200"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x3c, r7, 0x801, 0x2, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x3c}}, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r10, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x25, 0x0) write(r6, &(0x7f0000000280)='0', 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="0000fc00", @void, {@ipv4={0x86dd, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x16, 0x7c, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a05000000000000000000050000040900020073797a3100000000080005400000001108000f40000000240900010073797a300000000008000a4000000003140000001100010000000000000000000500000a"], 0x6c}}, 0x4044) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'devgroup\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x18, 0x3, "0400"/20}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xfc}}, 0x0) 396.49137ms ago: executing program 0 (id=431): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000280)=@secondary) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000780)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b54", 0x403, r0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) 249.852714ms ago: executing program 7 (id=432): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/bonding_masters\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='+bo', 0x3) 171.826062ms ago: executing program 6 (id=433): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r0, 0xffffffffffffffff, 0x0) 100.61917ms ago: executing program 0 (id=434): syz_open_procfs(0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) close(0x3) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = creat(0x0, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r2, 0x80045700, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f00000002c0)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r4, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0x4, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) timer_create(0x7, &(0x7f0000000540)={0x0, 0x28, 0x0, @thr={&(0x7f00000003c0)="0a468a164e2d555af6462262043937c78497d990476357721db8dfb6b4c39ae33d9fa5f35e81092783cf511e83b4705b09fa1a891f6caf052280f3fd56dce87eb37a0baeef1d2696456f5883bc361bb9f5a830db431b34c4cd9dea7f4427407df68456bc0d180b85e421b09154d86d3e9b9e02a876d5003b61ad017c00c432f65caa314a2d6005b648b1a7edfd5ce4d7c84138a66daf1fe45fccce3da14128122bcbf7e48143a1437ce39477e762d321cf18e52c98876a2abb9e9693a1996927d98cf4645302ef054d", &(0x7f00000004c0)="dba03867bee89c0694311ec90165ec2dd2abeb271c15cb59a8cda504df84ab1c43746a2b05ca959ab94937404f384b5adc2ac9f0a5afbe55e530d1f6232c9b00169ae2172d7bfd3e6dd9f9cd8f590847dcfec37502b60f904a8fb6e2d7898acb5b87077a47e2bc4e148aefeb956765"}}, &(0x7f0000000580)) 0s ago: executing program 6 (id=435): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000500)={'#! ', './config', [{0x20, '/dev/snd/midiC#D#\x00'}, {0x20, '/dev/sequencer\x00'}, {0x20, '/dev/sequencer\x00'}, {}, {0x20, '/dev/bus/usb/00#/00#\x00'}, {0x20, '/dev/bus/usb/00#/00#\x00'}, {0x20, '/dev/sequencer\x00'}, {0x20, '-(:'}], 0xa, "492521b5e0acd0a3e9e1e99aa423424b83c1f11897e40b41e9b7c56df4f2263361a781d283a924b59eb43cc80a015528d92a8c65116985fe71b3fac4ea9376f0a76fe7c624f78840dee1acf1cb742a283980a4303d9db9597d61d0ed9bece53240a4409be93c4c79dd75f13090d93b4f9c5880899449e977e61e2e7a3317899ae4f097e6090438067f392165d0ed680667df19c2bda5a5bfe06764c8eb99f455ed007899ea14a9da6af057409802fffc8f09383c1b331480761d59512b4b5e0a065f0ff70ba2c045f4d91c01b25df6"}, 0x14f) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) syz_emit_ethernet(0x30, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000100)='./config\x00', 0x850e856b79c500b0) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000), 0x4) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r7, r6, &(0x7f0000000500)={0x0, 0x1, 0x1, 0x3, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2100, 0x20c, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3382, 0x8000, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x2000000, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfe95, 0x40000, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) kernel console output (not intermixed with test programs): 4] block device autoloading is deprecated and will be removed. [ 106.519972][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.565033][ T47] usb 3-1: config 0 descriptor?? [ 106.646738][ T6216] netlink: 32 bytes leftover after parsing attributes in process `syz.0.128'. [ 106.716631][ T6217] tipc: Started in network mode [ 106.741595][ T6217] tipc: Node identity 9e95087813bb, cluster identity 4711 [ 106.776375][ T6217] tipc: Enabled bearer , priority 10 [ 106.813381][ T29] audit: type=1400 audit(1787265059.990:363): avc: denied { ioctl } for pid=6214 comm="syz.4.127" path="socket:[10849]" dev="sockfs" ino=10849 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.934436][ T5692] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 106.946752][ T6217] kvm: user requested TSC rate below hardware speed [ 106.974232][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.127'. [ 106.989177][ T5692] usb 4-1: USB disconnect, device number 2 [ 107.165632][ T6214] tipc: Resetting bearer [ 107.226828][ T6214] tipc: Disabling bearer [ 107.341425][ T6222] gadgetfs: bound to dummy_udc driver [ 107.364446][ T6203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.373708][ T6203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.779646][ T47] usbhid 3-1:0.0: can't add hid device: -71 [ 107.785783][ T47] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 107.844865][ T47] usb 3-1: USB disconnect, device number 6 [ 107.948202][ T5612] Bluetooth: hci0: Malformed Event: 0x2f [ 107.949133][ T6230] ip_tables: iptables: counters copy to user failed while replacing table [ 108.266602][ T5692] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 108.409479][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 108.409495][ T29] audit: type=1400 audit(1787265061.478:369): avc: denied { write } for pid=6233 comm="syz.3.132" name="001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 108.625193][ T5692] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 109.877520][ T29] audit: type=1400 audit(1787265061.561:370): avc: denied { create } for pid=6233 comm="syz.3.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 109.899555][ T5692] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 109.911506][ T5692] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 109.922650][ T29] audit: type=1400 audit(1787265061.737:371): avc: denied { create } for pid=6229 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 109.942301][ T5692] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 109.952664][ T5692] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 109.962881][ T29] audit: type=1400 audit(1787265061.765:372): avc: denied { ioctl } for pid=6229 comm="syz.0.131" path="socket:[10021]" dev="sockfs" ino=10021 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 109.987455][ T5692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.002105][ T6228] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 110.011170][ T29] audit: type=1400 audit(1787265061.792:373): avc: denied { create } for pid=6229 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 110.035224][ T29] audit: type=1400 audit(1787265061.811:374): avc: denied { write } for pid=6229 comm="syz.0.131" path="socket:[10022]" dev="sockfs" ino=10022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 110.203529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.328903][ T29] audit: type=1400 audit(1787265063.242:375): avc: denied { write } for pid=6245 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 110.450757][ T29] audit: type=1400 audit(1787265063.242:376): avc: denied { read } for pid=6245 comm="syz.0.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 110.452609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.485086][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.506791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.528597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.587900][ T29] audit: type=1400 audit(1787265063.270:377): avc: denied { mount } for pid=6250 comm="syz.1.137" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 110.678521][ T6254] netlink: 76 bytes leftover after parsing attributes in process `syz.0.138'. [ 110.931786][ T29] audit: type=1400 audit(1787265063.806:378): avc: denied { unmount } for pid=5603 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 111.005306][ T47] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.765947][ T5985] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.124785][ T6266] netlink: 44 bytes leftover after parsing attributes in process `syz.1.141'. [ 112.134721][ T6266] netlink: 59 bytes leftover after parsing attributes in process `syz.1.141'. [ 112.149025][ T6266] netlink: 59 bytes leftover after parsing attributes in process `syz.1.141'. [ 112.162104][ T6266] netlink: 'syz.1.141': attribute type 10 has an invalid length. [ 112.177368][ T6266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.186955][ T6266] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 112.251670][ T47] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 112.262086][ T6268] bond0: no command found in slaves file - use +ifname or -ifname [ 112.277247][ T47] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 112.290465][ T47] usb 4-1: Product: syz [ 112.296318][ T47] usb 4-1: SerialNumber: syz [ 112.320512][ T47] usb 4-1: config 0 descriptor?? [ 112.360161][ T6228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.391106][ T6228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.467473][ T5707] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 112.665726][ T5707] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 112.666859][ T5707] usb 2-1: config index 0 descriptor too short (expected 63186, got 210) [ 112.666883][ T5707] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 112.666902][ T5707] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.666950][ T5707] usb 2-1: config 0 has no interface number 0 [ 112.666980][ T5707] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 112.666996][ T5707] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 112.667008][ T5707] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 12398, setting to 1023 [ 112.667023][ T5707] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 112.667058][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.696997][ T5707] usb 2-1: config 0 descriptor?? [ 112.950018][ T5707] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 112.957454][ T152] usb 2-1: Failed to submit usb control message: -71 [ 112.957507][ T152] usb 2-1: unable to send the bmi data to the device: -71 [ 112.957523][ T152] usb 2-1: unable to get target info from device [ 112.957536][ T152] usb 2-1: could not get target info (-71) [ 112.958026][ T152] usb 2-1: could not probe fw (-71) [ 112.966891][ T5692] ims_pcu 5-1:1.0: Failed to set line coding, error: -71 [ 112.967083][ C0] ims_pcu 5-1:1.0: ims_pcu_irq - usb_submit_urb failed with result -1 [ 112.968934][ T5692] ims_pcu 5-1:1.0: probe with driver ims_pcu failed with error -71 [ 113.413645][ T5692] usb 5-1: USB disconnect, device number 6 [ 113.428740][ T5707] usb 2-1: USB disconnect, device number 6 [ 113.811339][ T6287] ovs-system: entered promiscuous mode [ 114.589407][ T47] usb 4-1: USB disconnect, device number 3 [ 114.604580][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 114.604594][ T29] audit: type=1400 audit(1787265067.345:380): avc: denied { accept } for pid=6295 comm="syz.1.148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 114.675848][ T29] audit: type=1400 audit(1787265067.416:381): avc: denied { create } for pid=6297 comm="syz.1.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 114.801268][ T29] audit: type=1400 audit(1787265067.548:382): avc: denied { cmd } for pid=6301 comm="iou-wrk-6302" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 114.893747][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.151'. [ 114.904172][ T6309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.151'. [ 114.917846][ T29] audit: type=1400 audit(1787265067.630:383): avc: denied { read write } for pid=6308 comm="syz.1.153" name="frontend0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 115.022708][ T29] audit: type=1400 audit(1787265067.630:384): avc: denied { open } for pid=6308 comm="syz.1.153" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 115.351564][ T29] audit: type=1400 audit(1787265067.721:385): avc: denied { create } for pid=6308 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 115.473893][ T29] audit: type=1400 audit(1787265067.742:386): avc: denied { write } for pid=6301 comm="syz.4.149" name="sg0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 115.569679][ T5692] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 115.642157][ T29] audit: type=1400 audit(1787265067.874:387): avc: denied { ioctl } for pid=6308 comm="syz.1.153" path="/dev/dvb/adapter0/demux0" dev="devtmpfs" ino=928 ioctlcmd=0x6f2c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 115.758523][ T29] audit: type=1400 audit(1787265068.285:388): avc: denied { read } for pid=6324 comm="syz.2.154" name="idVendor" dev="configfs" ino=11395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 115.770557][ T5692] usb 5-1: Using ep0 maxpacket: 32 [ 115.823629][ T5692] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 115.835929][ T5692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 115.847173][ T5692] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 115.853944][ T29] audit: type=1400 audit(1787265068.285:389): avc: denied { write } for pid=6293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.859476][ T5692] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 115.952203][ T5753] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.004015][ T5692] usb 5-1: Product: syz [ 116.015566][ T5692] usb 5-1: Manufacturer: syz [ 116.043247][ T5692] usb 5-1: SerialNumber: syz [ 116.088392][ T5692] usb 5-1: config 0 descriptor?? [ 116.101510][ T5692] hub 5-1:0.0: bad descriptor, ignoring hub [ 116.110594][ T5692] hub 5-1:0.0: probe with driver hub failed with error -5 [ 116.120080][ T5753] usb 4-1: Using ep0 maxpacket: 8 [ 116.129282][ T5753] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 116.153529][ T5753] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.170295][ T5753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.186502][ T5753] usb 4-1: config 0 descriptor?? [ 116.332121][ T6307] program syz.4.149 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.770211][ T5753] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 116.809261][ T6329] overlayfs: missing 'lowerdir' [ 116.975884][ T5753] usb 4-1: USB disconnect, device number 4 [ 117.102697][ T5692] usb 5-1: USB disconnect, device number 7 [ 117.210417][ T6370] netlink: 180 bytes leftover after parsing attributes in process `syz.1.164'. [ 117.496440][ T6379] netlink: 20 bytes leftover after parsing attributes in process `syz.1.167'. [ 117.547696][ T47] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 117.775094][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 117.815812][ T47] usb 3-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 117.894488][ T47] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.007952][ T47] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 118.142166][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.222629][ T47] usb 3-1: Product: syz [ 118.272083][ T47] usb 3-1: Manufacturer: syz [ 118.331232][ T47] usb 3-1: SerialNumber: syz [ 118.933881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 119.046592][ T47] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 119.576097][ T47] usb 3-1: USB disconnect, device number 7 [ 119.611717][ T5612] Bluetooth: hci1: Malformed Event: 0x13 [ 119.758023][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 119.758038][ T29] audit: type=1400 audit(1787265072.419:405): avc: denied { bind } for pid=6397 comm="syz.1.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.813038][ T6406] vivid-001: ================= START STATUS ================= [ 119.832086][ T6406] vivid-001: RDS Tx I/O Mode: Controls [ 119.838560][ T6406] vivid-001: RDS Program ID: 32904 [ 119.872266][ T29] audit: type=1400 audit(1787265072.450:406): avc: denied { read } for pid=6397 comm="syz.1.172" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 119.901313][ T6406] vivid-001: RDS Program Type: 3 [ 119.908455][ T6406] vivid-001: RDS PS Name: VIVID-TX [ 119.914429][ T6406] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 119.927414][ T29] audit: type=1400 audit(1787265072.534:407): avc: denied { write } for pid=6397 comm="syz.1.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 119.949820][ T6406] vivid-001: RDS Stereo: true [ 119.955390][ T6406] vivid-001: RDS Artificial Head: false [ 119.965815][ T6406] vivid-001: RDS Compressed: false [ 119.973238][ T6406] vivid-001: RDS Dynamic PTY: false [ 120.031685][ T6406] vivid-001: RDS Traffic Announcement: false [ 120.497606][ T6406] vivid-001: RDS Traffic Program: true [ 120.503421][ T6406] vivid-001: RDS Music: true [ 120.510255][ T6406] vivid-001: ================== END STATUS ================== [ 120.523494][ T29] audit: type=1400 audit(1787265073.208:408): avc: denied { mount } for pid=6411 comm="syz.3.175" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 120.578408][ T29] audit: type=1400 audit(1787265073.249:409): avc: denied { setopt } for pid=6411 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.819108][ T29] audit: type=1400 audit(1787265073.503:410): avc: denied { read } for pid=6423 comm="syz.4.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.144791][ T6438] syz.1.181 uses obsolete (PF_INET,SOCK_PACKET) [ 122.169057][ T6438] netlink: 28 bytes leftover after parsing attributes in process `syz.1.181'. [ 122.652084][ T6447] trusted_key: encrypted_key: key user:syz not found [ 123.622022][ T6455] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 124.194370][ T29] audit: type=1400 audit(1787265076.829:411): avc: denied { write } for pid=6463 comm="syz.3.189" name="configs" dev="configfs" ino=10738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.223707][ T29] audit: type=1400 audit(1787265076.858:412): avc: denied { write } for pid=6463 comm="syz.3.189" name="c.1" dev="configfs" ino=12358 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.248886][ T29] audit: type=1400 audit(1787265076.877:413): avc: denied { create } for pid=6463 comm="syz.3.189" name="uac2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 124.425164][ T5669] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 124.713172][ T5669] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 124.898128][ T29] audit: type=1400 audit(1787265077.488:414): avc: denied { mount } for pid=6471 comm="syz.4.190" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 124.927832][ T5669] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 124.944741][ T5669] usb 1-1: Product: syz [ 124.948976][ T5669] usb 1-1: SerialNumber: syz [ 124.958520][ T5669] usb 1-1: config 0 descriptor?? [ 124.982570][ T29] audit: type=1400 audit(1787265077.583:415): avc: denied { watch } for pid=6473 comm="syz.2.191" path="/47/file1" dev="tmpfs" ino=283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 125.009525][ T29] audit: type=1400 audit(1787265077.583:416): avc: denied { watch_sb watch_reads } for pid=6473 comm="syz.2.191" path="/47/file1" dev="tmpfs" ino=283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 125.050091][ T29] audit: type=1400 audit(1787265077.640:417): avc: denied { read write } for pid=6473 comm="syz.2.191" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 125.076771][ T29] audit: type=1400 audit(1787265077.640:418): avc: denied { open } for pid=6473 comm="syz.2.191" path="/dev/dri/renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 125.405093][ T5669] usb 1-1: USB disconnect, device number 7 [ 125.464749][ T29] audit: type=1400 audit(1787265078.031:419): avc: denied { unmount } for pid=5593 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 125.824914][ T5707] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 125.913468][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 125.932638][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 125.999483][ T5707] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 126.032675][ T5707] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 126.059944][ T5707] usb 2-1: Product: syz [ 126.072482][ T6492] bond0: no command found in slaves file - use +ifname or -ifname [ 126.074948][ T5707] usb 2-1: SerialNumber: syz [ 126.121147][ T5707] usb 2-1: config 0 descriptor?? [ 126.825423][ T6507] Zero length message leads to an empty skb [ 127.499617][ T6520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 127.572870][ T6521] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 127.679394][ T5707] usb 2-1: USB disconnect, device number 7 [ 128.303155][ T29] audit: type=1400 audit(1787265080.700:420): avc: denied { bind } for pid=6527 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 128.431599][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.3.207'. [ 128.440895][ T6532] bridge_slave_1: left allmulticast mode [ 128.446615][ T6532] bridge_slave_1: left promiscuous mode [ 128.454238][ T6532] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.489568][ T6535] mmap: syz.3.207 (6535) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 128.645272][ T29] audit: type=1400 audit(1787265080.952:421): avc: denied { write } for pid=6527 comm="syz.0.206" name="functions" dev="configfs" ino=10737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 128.853332][ T6532] bridge_slave_0: left allmulticast mode [ 128.861120][ T6532] bridge_slave_0: left promiscuous mode [ 128.870560][ T6532] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.057466][ T29] audit: type=1400 audit(1787265081.409:422): avc: denied { ioctl } for pid=6537 comm="syz.1.210" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 129.106429][ T29] audit: type=1400 audit(1787265081.446:423): avc: denied { bind } for pid=6537 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 129.486389][ T5707] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 129.704540][ T5707] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 129.709095][ T6546] tmpfs: Unknown parameter '' [ 129.771845][ T5707] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 129.781109][ T5707] usb 5-1: Product: syz [ 129.785309][ T5707] usb 5-1: SerialNumber: syz [ 129.793830][ T5707] usb 5-1: config 0 descriptor?? [ 130.105930][ T6561] netlink: 'syz.0.215': attribute type 2 has an invalid length. [ 130.121973][ T6558] overlay: Unknown parameter 'euid>00000000000000000000' [ 130.129324][ T6561] netlink: 224 bytes leftover after parsing attributes in process `syz.0.215'. [ 130.377492][ T5707] usb 5-1: USB disconnect, device number 8 [ 130.398837][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 130.398876][ T29] audit: type=1400 audit(1787265082.656:435): avc: denied { setopt } for pid=6537 comm="syz.1.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 130.526279][ T29] audit: type=1400 audit(1787265082.777:436): avc: denied { write } for pid=6573 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.677246][ T6580] trusted_key: encrypted_key: key user:syz not found [ 131.521773][ T5669] IPVS: starting estimator thread 0... [ 131.900856][ T6596] IPVS: using max 44 ests per chain, 105600 per kthread [ 132.076471][ T29] audit: type=1400 audit(1787265084.242:437): avc: denied { unmount } for pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 133.151406][ T29] audit: type=1400 audit(1787265085.343:438): avc: denied { write } for pid=6585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.162086][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.169987][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.274724][ T5692] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 134.453966][ T5692] usb 4-1: Using ep0 maxpacket: 16 [ 134.505828][ T5692] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 134.593795][ T5692] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 134.647304][ T5692] usb 4-1: config 0 has no interface number 0 [ 134.699631][ T5692] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 134.777901][ T5692] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 134.802006][ T29] audit: type=1400 audit(1787265087.053:439): avc: denied { write } for pid=6626 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.867967][ T5692] usb 4-1: config 0 interface 41 has no altsetting 0 [ 134.917553][ T5692] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.942113][ T5692] usb 4-1: Product: syz [ 134.954495][ T5692] usb 4-1: Manufacturer: syz [ 134.959504][ T5753] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 135.078066][ T5692] usb 4-1: SerialNumber: syz [ 135.392261][ T6647] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.407803][ T6652] trusted_key: encrypted_key: key user:syz not found [ 135.902588][ T5753] usb 5-1: device descriptor read/64, error -71 [ 135.971423][ T5692] usb 4-1: config 0 descriptor?? [ 135.977258][ T6632] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 135.985258][ T6632] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 136.133593][ T29] audit: type=1400 audit(1787265088.390:440): avc: denied { create } for pid=6655 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.163141][ T29] audit: type=1400 audit(1787265088.420:441): avc: denied { bind } for pid=6655 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.204117][ T6632] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 136.211783][ T5753] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 136.228193][ T29] audit: type=1400 audit(1787265088.420:442): avc: denied { accept } for pid=6655 comm="syz.0.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.248500][ T6632] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 136.334596][ T29] audit: type=1400 audit(1787265088.598:443): avc: denied { setopt } for pid=6659 comm="syz.1.239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 136.357431][ T6660] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 136.407991][ T5753] usb 5-1: device descriptor read/64, error -71 [ 136.419589][ T6660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.239'. [ 136.519116][ T5753] usb usb5-port1: attempt power cycle [ 136.669444][ T5692] sr9700 4-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 136.688169][ T29] audit: type=1400 audit(1787265088.945:444): avc: denied { create } for pid=6628 comm="syz.3.232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 136.699799][ T5692] usb 4-1: USB disconnect, device number 5 [ 136.736132][ T29] audit: type=1400 audit(1787265088.994:445): avc: denied { ioctl } for pid=6628 comm="syz.3.232" path="socket:[11924]" dev="sockfs" ino=11924 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 136.865476][ T5753] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 136.932410][ T6666] Process accounting resumed [ 137.000285][ T5753] usb 5-1: device descriptor read/8, error -71 [ 137.674402][ T5721] IPVS: starting estimator thread 0... [ 138.037648][ T5669] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 138.133334][ T6677] IPVS: using max 39 ests per chain, 93600 per kthread [ 138.178260][ T29] audit: type=1400 audit(1787265090.423:446): avc: denied { write } for pid=6686 comm="syz.3.246" name="instances" dev="tracefs" ino=3082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 138.267331][ T29] audit: type=1400 audit(1787265090.454:447): avc: denied { add_name } for pid=6686 comm="syz.3.246" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 138.311006][ T29] audit: type=1400 audit(1787265090.475:448): avc: denied { create } for pid=6686 comm="syz.3.246" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 138.362829][ T5669] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 138.374005][ T5669] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 138.383492][ T5669] usb 3-1: config 1 has no interface number 0 [ 138.390485][ T5669] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 138.402379][ T5669] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 138.474353][ T6696] trusted_key: encrypted_key: key user:syz not found [ 138.979593][ T5669] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.032807][ T5669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.041106][ T5669] usb 3-1: Product: syz [ 139.107237][ T5669] usb 3-1: Manufacturer: syz [ 139.132121][ T5669] usb 3-1: SerialNumber: syz [ 139.176121][ T6673] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 139.414908][ T6673] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 140.153201][ T29] audit: type=1400 audit(1787265092.459:449): avc: denied { bind } for pid=6671 comm="syz.2.241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.153559][ T6704] Bluetooth: MGMT ver 1.23 [ 140.252743][ T6708] vivid-003: ================= START STATUS ================= [ 140.272969][ T6708] vivid-003: RDS Tx I/O Mode: Controls [ 140.281359][ T6704] Bluetooth: hci1: expected 8706 bytes, got 2 bytes [ 140.289660][ T6711] vivid-001: ================= START STATUS ================= [ 140.291823][ T6708] vivid-003: RDS Program ID: 32904 [ 140.434219][ T5669] sierra_net 3-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 140.448861][ T6708] vivid-003: RDS Program Type: 3 [ 140.453916][ T6708] vivid-003: RDS PS Name: VIVID-TX [ 140.459377][ T6711] vivid-001: RDS Tx I/O Mode: Controls [ 140.462059][ T6708] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 140.476536][ T6711] vivid-001: RDS Program ID: 32904 [ 140.560751][ T6719] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.180552][ T6708] vivid-003: RDS Stereo: true [ 141.182398][ T6711] vivid-001: RDS Program Type: [ 141.190323][ T6708] [ 141.211245][ T6708] vivid-003: RDS Artificial Head: false [ 141.225225][ T6708] vivid-003: RDS Compressed: false [ 141.236582][ T6711] 3 [ 141.238288][ T6708] vivid-003: RDS Dynamic PTY: false [ 141.258959][ T6708] vivid-003: RDS Traffic Announcement: false [ 141.266659][ T6711] vivid-001: RDS PS Name: VIVID-TX [ 141.279713][ T6708] vivid-003: RDS Traffic Program: true [ 141.294840][ T6708] vivid-003: RDS Music: true [ 141.301680][ T6711] vivid-001: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 141.306341][ T6708] vivid-003: ================== END STATUS ================== [ 141.370090][ T6711] vivid-001: RDS Stereo: true [ 141.406735][ T6711] vivid-001: RDS Artificial Head: false [ 141.418290][ T6711] vivid-001: RDS Compressed: false [ 141.442417][ T6711] vivid-001: RDS Dynamic PTY: false [ 141.475743][ T6711] vivid-001: RDS Traffic Announcement: false [ 141.505794][ T6711] vivid-001: RDS Traffic Program: true [ 141.540945][ T6711] vivid-001: RDS Music: true [ 141.558832][ T6711] vivid-001: ================== END STATUS ================== [ 141.774445][ T6728] tmpfs: Unknown parameter '' [ 143.227976][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 143.228000][ T29] audit: type=1400 audit(1787265095.534:451): avc: denied { read } for pid=6732 comm="syz.4.257" dev="sockfs" ino=12075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.259460][ T5669] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 143.290826][ T5669] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 143.344130][ T5669] sierra_net 3-1:1.7 wwan0: Submit SYNC failed -71 [ 143.377284][ T5669] sierra_net 3-1:1.7 wwan0: Send SYNC failed, status -71 [ 143.402357][ T5669] usb 3-1: USB disconnect, device number 8 [ 143.431436][ T5669] sierra_net 3-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem [ 143.976206][ T5669] sierra_net 3-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 144.049545][ T29] audit: type=1400 audit(1787265096.348:452): avc: denied { create } for pid=6740 comm="syz.3.260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 144.095688][ T29] audit: type=1400 audit(1787265096.377:453): avc: denied { sys_admin } for pid=6740 comm="syz.3.260" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 144.179653][ T29] audit: type=1400 audit(1787265096.463:454): avc: denied { setopt } for pid=6743 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.480422][ T6761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.854787][ T6757] netlink: 14 bytes leftover after parsing attributes in process `syz.0.265'. [ 145.546017][ T6777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 146.091750][ T5753] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 146.100913][ T29] audit: type=1400 audit(1787265098.294:455): avc: denied { bind } for pid=6783 comm="syz.1.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 146.305810][ T5753] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 146.328480][ T5753] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 146.352775][ T5753] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.407219][ T5753] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 146.419643][ T5707] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 146.456068][ T5753] usb 3-1: Manufacturer: syz [ 146.477217][ T5753] usb 3-1: config 0 descriptor?? [ 146.567972][ T5707] usb 1-1: device descriptor read/64, error -71 [ 146.621277][ T5753] rc_core: IR keymap rc-hauppauge not found [ 146.634419][ T6794] 9p: Bad value for 'rfdno' [ 146.641042][ T5753] Registered IR keymap rc-empty [ 146.685037][ T5753] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 146.716158][ T5753] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 146.777288][ T29] audit: type=1400 audit(1787265098.936:456): avc: denied { read } for pid=4950 comm="acpid" name="event4" dev="devtmpfs" ino=2864 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.857279][ T29] audit: type=1400 audit(1787265098.936:457): avc: denied { open } for pid=4950 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2864 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 146.896843][ T5707] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 146.940825][ T29] audit: type=1400 audit(1787265098.964:458): avc: denied { ioctl } for pid=4950 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2864 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 147.056482][ T5707] usb 1-1: device descriptor read/64, error -71 [ 147.186655][ T5669] usb 3-1: USB disconnect, device number 9 [ 147.206116][ T5707] usb usb1-port1: attempt power cycle [ 147.475539][ T29] audit: type=1400 audit(1787265099.593:459): avc: denied { write } for pid=6797 comm="syz.3.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 147.589289][ T5707] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 147.621770][ T5707] usb 1-1: device descriptor read/8, error -71 [ 147.891531][ T5707] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 147.911361][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.276'. [ 147.941541][ T5707] usb 1-1: device descriptor read/8, error -71 [ 148.065239][ T6809] netlink: 180 bytes leftover after parsing attributes in process `syz.2.280'. [ 148.070704][ T5707] usb usb1-port1: unable to enumerate USB device [ 148.176749][ T5699] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 148.189925][ T1078] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.323851][ T1078] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.381363][ T5699] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 148.415930][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 148.427476][ T5699] usb 5-1: Product: syz [ 148.431688][ T5699] usb 5-1: SerialNumber: syz [ 148.448421][ T5699] usb 5-1: config 0 descriptor?? [ 148.459043][ T1078] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.479659][ T5612] Bluetooth: hci4: hcon ffff8880313d8000 sent 1 < count 2 [ 148.489103][ T5612] Bluetooth: hci4: link tx timeout [ 148.494457][ T5612] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 148.504262][ T5612] Bluetooth: hci4: link tx timeout [ 148.620513][ T1078] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.691760][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.705482][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.713487][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.724402][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.733856][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.918066][ T6821] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 148.945565][ T6821] CIFS: Attempting to mount //127.0.0.1/share [ 149.020652][ T6821] CIFS: VFS: Error connecting to socket. Aborting operation. [ 149.028595][ T6821] CIFS: VFS: cifs_mount failed w/return code = -111 [ 149.301492][ T5692] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 149.429788][ T29] audit: type=1400 audit(1787265101.415:460): avc: denied { read } for pid=5260 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 149.516195][ T5692] usb 3-1: Using ep0 maxpacket: 16 [ 149.593537][ T5692] usb 3-1: New USB device found, idVendor=1fac, idProduct=0151, bcdDevice=e5.f2 [ 149.743746][ T5692] usb 3-1: config 2 has an invalid interface number: 151 but max is 0 [ 149.920491][ T5692] usb 3-1: config 2 has no interface number 0 [ 150.062278][ T5692] usb 3-1: config 2 interface 151 altsetting 79 endpoint 0xF has invalid maxpacket 29288, setting to 64 [ 150.312399][ T5692] usb 3-1: config 2 interface 151 altsetting 79 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.602976][ T5692] usb 3-1: config 2 interface 151 has no altsetting 0 [ 150.706160][ T5613] Bluetooth: hci4: command 0x0406 tx timeout [ 150.855567][ T5692] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.939480][ T5692] usb 3-1: Product: 갬♶æ¯å•¿ç´ŒèŒˆè£“뾑ꪵࣩ렭婦ﾤé‚ëšï‰œà²î€¾ì„¤ç¤½ê‹á¯¾ä»Žâ˜±å»µæ°¼ã¸‘噚漣롮蕰⫦秥빕㹔艆垧蒼╷愚äˆä¼‹è­’ᅵᕔí‘䷅휕å£ë©³ë‡”è¯ [ 150.968277][ T5612] Bluetooth: hci2: command tx timeout [ 151.022578][ T5692] usb 3-1: Manufacturer: Ðœ [ 151.032729][ T5692] usb 3-1: SerialNumber: 㩨얛 [ 151.085110][ T29] audit: type=1400 audit(1787265102.950:461): avc: denied { listen } for pid=6832 comm="syz.0.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 151.250175][ T6838] netlink: 44 bytes leftover after parsing attributes in process `syz.1.285'. [ 151.304654][ T6838] netlink: 59 bytes leftover after parsing attributes in process `syz.1.285'. [ 151.481743][ T6838] netlink: 59 bytes leftover after parsing attributes in process `syz.1.285'. [ 151.524292][ T6838] netlink: 'syz.1.285': attribute type 10 has an invalid length. [ 151.543480][ T29] audit: type=1400 audit(1787265103.386:462): avc: denied { write } for pid=6819 comm="syz.2.283" name="kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 151.592905][ T29] audit: type=1400 audit(1787265103.386:463): avc: denied { open } for pid=6819 comm="syz.2.283" path="/65/dev/kmsg" dev="proc" ino=4026532047 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kmsg_t tclass=file permissive=1 [ 151.671913][ T29] audit: type=1400 audit(1787265103.497:464): avc: denied { write } for pid=6827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.887663][ T1078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.926206][ T29] audit: type=1400 audit(1787265103.739:465): avc: denied { write } for pid=6852 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.948450][ T5789] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 151.976728][ T1078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.994605][ T1078] bond0 (unregistering): Released all slaves [ 152.042328][ T5699] usb 5-1: USB disconnect, device number 13 [ 152.143251][ T5789] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 152.160053][ T5789] usb 2-1: config index 0 descriptor too short (expected 63186, got 210) [ 152.184687][ T5789] usb 2-1: config 0 has an invalid interface number: 106 but max is 0 [ 152.215124][ T5789] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.252825][ T5789] usb 2-1: config 0 has no interface number 0 [ 152.273068][ T5789] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 152.297191][ T5789] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 152.303426][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 152.319846][ T5789] usb 2-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 12398, setting to 1023 [ 152.344616][ T5789] usb 2-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 152.382750][ T5789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.414395][ T5789] usb 2-1: config 0 descriptor?? [ 152.475867][ T5789] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 152.627439][ T1078] hsr_slave_0: left promiscuous mode [ 152.643120][ T1078] hsr_slave_1: left promiscuous mode [ 152.670253][ T1078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.678413][ T12] usb 2-1: Failed to submit usb control message: -71 [ 152.687586][ T9] usb 2-1: USB disconnect, device number 8 [ 152.710435][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.760575][ T12] usb 2-1: unable to send the bmi data to the device: -71 [ 152.776377][ T1078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.818197][ T12] usb 2-1: unable to get target info from device [ 152.819816][ T5692] qcaux 3-1:2.151: qcaux converter detected [ 152.841755][ T1078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.858569][ T12] usb 2-1: could not get target info (-71) [ 152.875262][ T12] usb 2-1: could not probe fw (-71) [ 152.881457][ T1078] batman_adv: batadv0: Interface deactivated: veth0 [ 152.897377][ T5692] usb 3-1: qcaux converter now attached to ttyUSB0 [ 152.899191][ T1078] batman_adv: batadv0: Removing interface: veth0 [ 153.079204][ T1078] veth1_macvtap: left promiscuous mode [ 153.092080][ T5692] usb 3-1: USB disconnect, device number 10 [ 153.109039][ T1078] veth0_macvtap: left promiscuous mode [ 153.135649][ T1078] veth1_vlan: left promiscuous mode [ 153.212134][ T5612] Bluetooth: hci2: command tx timeout [ 153.222936][ T1078] veth0_vlan: left promiscuous mode [ 153.243047][ T5692] qcaux ttyUSB0: qcaux converter now disconnected from ttyUSB0 [ 153.516434][ T5692] qcaux 3-1:2.151: device disconnected [ 153.707673][ T29] audit: type=1400 audit(1787265105.388:466): avc: denied { write } for pid=6865 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.016417][ T29] audit: type=1400 audit(1787265105.674:467): avc: denied { write } for pid=6898 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.242538][ T6905] vivid-003: ================= START STATUS ================= [ 154.754739][ T6905] vivid-003: RDS Tx I/O Mode: Controls [ 154.765121][ T6905] vivid-003: RDS Program ID: 32904 [ 154.770494][ T6905] vivid-003: RDS Program Type: 3 [ 154.776047][ T6905] vivid-003: RDS PS Name: VIVID-TX [ 154.782726][ T6905] vivid-003: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 154.803894][ T6905] vivid-003: RDS Stereo: true [ 154.835106][ T6905] vivid-003: RDS Artificial Head: false [ 154.892958][ T6905] vivid-003: RDS Compressed: false [ 154.920592][ T6905] vivid-003: RDS Dynamic PTY: false [ 154.971272][ T6905] vivid-003: RDS Traffic Announcement: false [ 155.002972][ T6905] vivid-003: RDS Traffic Program: true [ 155.084387][ T6905] vivid-003: RDS Music: true [ 155.091281][ T6905] vivid-003: ================== END STATUS ================== [ 155.221387][ T1078] team0 (unregistering): Port device team_slave_1 removed [ 155.249893][ T1078] team0 (unregistering): Port device team_slave_0 removed [ 155.448333][ T5612] Bluetooth: hci2: command tx timeout [ 155.500661][ T6913] bond0: no command found in slaves file - use +ifname or -ifname [ 155.554313][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 155.584017][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.295'. [ 157.709671][ T5612] Bluetooth: hci2: command tx timeout [ 158.337620][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 158.544467][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 158.559852][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 158.571088][ T9] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 158.585196][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 158.612364][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 158.638237][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 158.653618][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 158.661751][ T9] usb 1-1: Product: syz [ 158.675799][ T9] usb 1-1: Manufacturer: syz [ 158.696712][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 158.719405][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 158.842708][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 158.866656][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 158.902448][ T1078] IPVS: stop unused estimator thread 0... [ 159.123144][ T29] audit: type=1400 audit(1787265110.398:468): avc: denied { write } for pid=6936 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.312033][ T29] audit: type=1400 audit(1787265110.573:469): avc: denied { connect } for pid=6963 comm="syz.4.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 159.404027][ T29] audit: type=1400 audit(1787265110.647:470): avc: denied { write } for pid=6966 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 159.512701][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 159.571837][ T5669] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 159.604154][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 159.754081][ T6816] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.762367][ T5669] usb 2-1: Using ep0 maxpacket: 32 [ 159.779038][ T9] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 159.783864][ T5669] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 159.801677][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.813690][ T29] audit: type=1400 audit(1787265111.035:471): avc: denied { name_bind } for pid=6971 comm="syz.2.305" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 159.851653][ T9] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 159.868984][ T6816] bridge_slave_0: entered allmulticast mode [ 159.878863][ T9] usb 5-1: Product: syz [ 159.879014][ T5669] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.886148][ T29] audit: type=1400 audit(1787265111.035:472): avc: denied { node_bind } for pid=6971 comm="syz.2.305" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 159.913841][ T9] usb 5-1: SerialNumber: syz [ 159.931511][ T9] usb 5-1: config 0 descriptor?? [ 159.941417][ T6816] bridge_slave_0: entered promiscuous mode [ 159.973538][ T5669] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.985837][ T6816] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.008718][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.028192][ T5669] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.045827][ T6816] bridge_slave_1: entered allmulticast mode [ 160.045903][ T5669] usb 2-1: Product: syz [ 160.089759][ T5669] usb 2-1: Manufacturer: syz [ 160.107678][ T6816] bridge_slave_1: entered promiscuous mode [ 160.118952][ T5669] usb 2-1: SerialNumber: syz [ 160.167514][ T9] hso 5-1:0.0: Failed to find INT IN ep [ 160.348550][ T6816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.409288][ T6816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.569551][ T5707] usb 5-1: USB disconnect, device number 14 [ 160.694700][ T5669] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 160.718644][ T6816] team0: Port device team_slave_0 added [ 160.736516][ T5669] usb 2-1: USB disconnect, device number 9 [ 160.766400][ T6816] team0: Port device team_slave_1 added [ 160.912703][ T6816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.945317][ T6816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.989974][ T29] audit: type=1400 audit(1787265112.079:473): avc: denied { write } for pid=6975 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.015898][ T6816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.064004][ T5669] usb 1-1: USB disconnect, device number 12 [ 161.079542][ T6816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.123281][ T6816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.154185][ T29] audit: type=1400 audit(1787265112.273:474): avc: denied { write } for pid=6987 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.193498][ T6816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.578398][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4 [ 161.673200][ T7000] o2cb: This node has not been configured. [ 161.679164][ T7000] o2cb: Cluster check failed. Fix errors before retrying. [ 161.687670][ T7000] (syz.2.307,7000,0):user_dlm_register:674 ERROR: status = -22 [ 161.695382][ T7000] (syz.2.307,7000,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file1" [ 161.994154][ T29] audit: type=1400 audit(1787265112.744:475): avc: denied { write } for pid=6992 comm="syz.2.307" name="/" dev="ocfs2_dlmfs" ino=13490 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.503063][ T5669] IPVS: starting estimator thread 0... [ 162.569613][ T6816] hsr_slave_0: entered promiscuous mode [ 162.636316][ T7002] IPVS: using max 84 ests per chain, 201600 per kthread [ 162.645145][ T29] audit: type=1400 audit(1787265112.744:476): avc: denied { add_name } for pid=6992 comm="syz.2.307" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 162.746980][ T29] audit: type=1400 audit(1787265112.744:477): avc: denied { create } for pid=6992 comm="syz.2.307" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 162.835025][ T6816] hsr_slave_1: entered promiscuous mode [ 162.939520][ T6816] debugfs: 'hsr0' already exists in 'hsr' [ 162.988129][ T6816] Cannot create hsr debugfs directory [ 163.246268][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 163.804192][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 164.264803][ T7011] Bluetooth: MGMT ver 1.23 [ 164.349301][ T9] usb 1-1: config 1 has an invalid descriptor of length 72, skipping remainder of the config [ 164.575109][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.851264][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 164.869584][ T9] usb 1-1: SerialNumber: syz [ 164.915419][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 164.915453][ T29] audit: type=1400 audit(1787265115.952:482): avc: denied { create } for pid=7018 comm="syz.4.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 165.013666][ T29] audit: type=1400 audit(1787265115.993:483): avc: denied { accept } for pid=7018 comm="syz.4.313" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 166.547632][ T9] usb 1-1: 0:2 : does not exist [ 166.552847][ T9] usb 1-1: unit 5: unexpected type 0x0a [ 166.743094][ T9] usb 1-1: USB disconnect, device number 13 [ 166.751785][ T7036] No such timeout policy "syz1" [ 166.863192][ T29] audit: type=1400 audit(1787265117.878:484): avc: denied { watch_reads } for pid=7037 comm="syz.0.317" path="/66" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 166.927340][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.091667][ T6816] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 167.199780][ T6816] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.232814][ T6816] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 167.272909][ T6816] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.305829][ T6816] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.341257][ T6816] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.368484][ T6816] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.410846][ T6816] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.833233][ T7064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.969504][ T9] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 168.241354][ T9] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 168.249982][ T6816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.293501][ T6816] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.348015][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.355233][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.366173][ T9] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 168.375929][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.383039][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.405509][ T9] usb 3-1: config 0 has no interface number 0 [ 168.419616][ T9] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 168.436020][ T9] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 168.448264][ T9] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 168.456693][ T9] usb 3-1: Manufacturer: syz [ 168.462937][ T9] usb 3-1: SerialNumber: syz [ 168.477048][ T9] usb 3-1: config 0 descriptor?? [ 168.503649][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.563567][ T7067] Process accounting paused [ 168.771128][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.795801][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 168.807110][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 168.856581][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 168.866669][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 168.874750][ T5613] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 168.941147][ T5669] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 168.995836][ T29] audit: type=1400 audit(1787265119.912:485): avc: denied { write } for pid=7073 comm="syz.0.329" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.242694][ T5669] usb 5-1: Using ep0 maxpacket: 32 [ 169.279577][ T5669] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 169.305028][ T5669] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.320153][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.323489][ T5669] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.371300][ T5669] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.380654][ T5669] usb 5-1: Product: syz [ 169.384965][ T5669] usb 5-1: Manufacturer: syz [ 169.390425][ T5669] usb 5-1: SerialNumber: syz [ 169.406087][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.435488][ T9] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.214/input/input6 [ 169.667117][ T5707] usb 3-1: USB disconnect, device number 11 [ 169.863028][ T5669] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 169.866397][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.330'. [ 169.888923][ T5669] usb 5-1: USB disconnect, device number 15 [ 169.944376][ T12] bridge_slave_1: left allmulticast mode [ 169.963903][ T12] bridge_slave_1: left promiscuous mode [ 169.980317][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.025418][ T12] bridge_slave_0: left allmulticast mode [ 170.038850][ T12] bridge_slave_0: left promiscuous mode [ 170.046919][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.426025][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.469511][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.543903][ T12] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 170.581367][ T12] bond0 (unregistering): Released all slaves [ 170.694967][ T29] audit: type=1400 audit(1787265121.674:486): avc: denied { write } for pid=7102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 170.898865][ T5612] Bluetooth: hci3: command tx timeout [ 170.923473][ T6816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.201807][ T29] audit: type=1400 audit(1787265122.189:487): avc: denied { write } for pid=7126 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 171.418293][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 171.810442][ T12] hsr_slave_0: left promiscuous mode [ 172.314407][ T12] hsr_slave_1: left promiscuous mode [ 172.320492][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.335182][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.352814][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.365555][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.479859][ T29] audit: type=1400 audit(1787265123.454:488): avc: denied { create } for pid=7142 comm="syz.4.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.513196][ T12] veth1_macvtap: left promiscuous mode [ 172.530964][ T12] veth0_macvtap: left promiscuous mode [ 172.548207][ T12] veth1_vlan: left promiscuous mode [ 172.549707][ T29] audit: type=1400 audit(1787265123.465:489): avc: denied { setopt } for pid=7142 comm="syz.4.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.565501][ T12] veth0_vlan: left promiscuous mode [ 172.602827][ T29] audit: type=1400 audit(1787265123.465:490): avc: denied { bind } for pid=7142 comm="syz.4.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.622840][ T5613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 172.632391][ T29] audit: type=1400 audit(1787265123.465:491): avc: denied { write } for pid=7142 comm="syz.4.338" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.656115][ T29] audit: type=1400 audit(1787265123.465:492): avc: denied { connect } for pid=7142 comm="syz.4.338" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 172.680017][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 172.687919][ T29] audit: type=1400 audit(1787265123.538:493): avc: denied { create } for pid=7142 comm="syz.4.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 172.708629][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 172.719667][ T5613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 172.727842][ T5613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 172.740027][ T29] audit: type=1400 audit(1787265123.758:494): avc: denied { write } for pid=7142 comm="syz.4.338" path="socket:[13833]" dev="sockfs" ino=13833 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 173.054835][ T5612] Bluetooth: hci3: command tx timeout [ 173.216747][ T5789] IPVS: starting estimator thread 0... [ 173.334136][ T7158] IPVS: using max 40 ests per chain, 96000 per kthread [ 174.116215][ T12] team0 (unregistering): Port device team_slave_1 removed [ 174.135617][ T12] team0 (unregistering): Port device team_slave_0 removed [ 174.347153][ T7171] comedi comedi1: dt2814: I/O base address not correctly aligned [ 174.912722][ T5612] Bluetooth: hci4: command tx timeout [ 175.051196][ T5612] Bluetooth: hci3: command tx timeout [ 175.205275][ T29] audit: type=1400 audit(1787265126.265:495): avc: denied { ioctl } for pid=7176 comm="syz.4.346" path="socket:[15295]" dev="sockfs" ino=15295 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 175.429772][ T6816] veth0_vlan: entered promiscuous mode [ 175.483056][ T6816] veth1_vlan: entered promiscuous mode [ 175.611478][ T6816] veth0_macvtap: entered promiscuous mode [ 175.627689][ T12] IPVS: stop unused estimator thread 0... [ 175.677136][ T6816] veth1_macvtap: entered promiscuous mode [ 175.750191][ T5699] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 175.775452][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.787618][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.794854][ T7075] bridge_slave_0: entered allmulticast mode [ 175.805453][ T7075] bridge_slave_0: entered promiscuous mode [ 175.819245][ T29] audit: type=1400 audit(1787265126.898:496): avc: denied { write } for pid=7188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.865649][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.890070][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.898765][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.906086][ T7075] bridge_slave_1: entered allmulticast mode [ 175.908424][ T29] audit: type=1400 audit(1787265126.978:497): avc: denied { write } for pid=7211 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.914246][ T7075] bridge_slave_1: entered promiscuous mode [ 175.945411][ T5699] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 175.961232][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 175.969617][ T5699] usb 1-1: Product: syz [ 175.973817][ T5699] usb 1-1: SerialNumber: syz [ 175.992054][ T5699] usb 1-1: config 0 descriptor?? [ 176.004018][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.041188][ T6816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.075486][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 176.112495][ T6816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.155022][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.195877][ T7075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.241806][ T7075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.319965][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.350457][ T7075] team0: Port device team_slave_0 added [ 176.379458][ T7075] team0: Port device team_slave_1 added [ 176.408708][ T5699] usb 1-1: USB disconnect, device number 14 [ 176.510714][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.522204][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.549120][ T7075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.562104][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.569476][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.595820][ T7075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.891283][ T29] audit: type=1400 audit(1787265127.943:498): avc: denied { write } for pid=7232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.011600][ T29] audit: type=1400 audit(1787265128.012:499): avc: denied { write } for pid=7249 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.056357][ T5612] Bluetooth: hci4: command tx timeout [ 177.074849][ T5260] 8021q: adding VLAN 0 to HW filter on device eth7 [ 177.084912][ T6032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.092778][ T6032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.118877][ T7075] hsr_slave_0: entered promiscuous mode [ 177.159712][ T5612] Bluetooth: hci3: command tx timeout [ 177.249359][ T7075] hsr_slave_1: entered promiscuous mode [ 177.262254][ T7075] debugfs: 'hsr0' already exists in 'hsr' [ 177.283235][ T7075] Cannot create hsr debugfs directory [ 177.574940][ T7174] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.582155][ T29] audit: type=1400 audit(1787265128.612:500): avc: denied { map } for pid=7254 comm="syz.0.352" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 177.613179][ T12] netdevsim netdevsim10 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.788706][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.797906][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.820706][ T152] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.975455][ T7148] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.996574][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.014315][ T29] audit: type=1400 audit(1787265129.038:501): avc: denied { mounton } for pid=6816 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 178.041124][ T7148] bridge_slave_0: entered allmulticast mode [ 178.065607][ T7148] bridge_slave_0: entered promiscuous mode [ 178.091976][ T12] bridge_slave_1: left allmulticast mode [ 178.100469][ T12] bridge_slave_1: left promiscuous mode [ 178.114674][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.135516][ T12] bridge_slave_0: left allmulticast mode [ 178.159898][ T12] bridge_slave_0: left promiscuous mode [ 178.186031][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.218789][ T12] pim6reg: left allmulticast mode [ 178.454716][ T29] audit: type=1400 audit(1787265129.440:502): avc: denied { write } for pid=7271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.518782][ T29] audit: type=1400 audit(1787265129.516:503): avc: denied { write } for pid=7288 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.555343][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.585821][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.600848][ T12] bond0 (unregistering): Released all slaves [ 178.613202][ T7282] bond0: no command found in slaves file - use +ifname or -ifname [ 178.641205][ T7148] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.658407][ T7148] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.667556][ T7148] bridge_slave_1: entered allmulticast mode [ 178.682569][ T7148] bridge_slave_1: entered promiscuous mode [ 178.758774][ T5260] 8021q: adding VLAN 0 to HW filter on device eth8 [ 178.920870][ T7148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.483474][ T5612] Bluetooth: hci4: command tx timeout [ 179.945868][ T7148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.959437][ T3321] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.959964][ T3321] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.084513][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 180.207230][ T7304] : renamed from bond_slave_0 (while UP) [ 180.290154][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 180.315247][ T9] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 180.340147][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.365864][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.401666][ T9] gspca_main: spca501-2.14.0 probing 0000:0000 [ 180.439094][ T7316] loop9: detected capacity change from 0 to 2640 [ 180.447194][ T7316] buffer_io_error: 321 callbacks suppressed [ 180.447210][ T7316] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.463285][ T7316] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.473366][ T7316] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.481278][ T7316] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.489131][ T7316] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.497605][ T7316] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.505549][ T7316] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.513900][ T7316] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.521827][ T7316] ldm_validate_partition_table(): Disk read failed. [ 180.528927][ T7316] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.536842][ T7316] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.544905][ T7316] Dev loop9: unable to read RDB block 0 [ 180.550634][ T7316] loop9: unable to read partition table [ 180.556501][ T7316] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 180.667489][ T12] hsr_slave_0: left promiscuous mode [ 180.673685][ T9] gspca_spca501: reg write: error -71 [ 180.679605][ T9] spca501 6-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 180.681156][ T12] hsr_slave_1: left promiscuous mode [ 180.686622][ T9] spca501 6-1:1.0: probe with driver spca501 failed with error -22 [ 180.696847][ T9] uvcvideo 6-1:1.0: Found UVC 1.00 device (0000:0000) [ 180.717745][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.724334][ T9] uvcvideo 6-1:1.0: No streaming interface found for terminal 32770. [ 180.732121][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.742036][ T29] audit: type=1400 audit(1787265131.631:504): avc: denied { write } for pid=7322 comm="syz.4.368" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 180.742446][ T7326] random: crng reseeded on system resumption [ 180.772839][ T9] usb 6-1: string descriptor 0 read error: -71 [ 180.773827][ T29] audit: type=1400 audit(1787265131.631:505): avc: denied { open } for pid=7322 comm="syz.4.368" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 180.810365][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.810553][ T9] usb 6-1: USB disconnect, device number 2 [ 180.828474][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.846261][ T12] veth1_macvtap: left promiscuous mode [ 180.851931][ T12] veth0_macvtap: left promiscuous mode [ 180.857511][ T12] veth1_vlan: left promiscuous mode [ 180.867612][ T12] veth0_vlan: left promiscuous mode [ 181.081763][ T12] team0 (unregistering): Port device team_slave_1 removed [ 181.102823][ T12] team0 (unregistering): Port device team_slave_0 removed [ 181.216444][ T7148] team0: Port device team_slave_0 added [ 181.256384][ T7148] team0: Port device team_slave_1 added [ 181.354927][ T7148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.387844][ T7148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.425235][ T7148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.515464][ T7148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.533239][ T7148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.584490][ T7148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.599808][ T7075] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 181.633730][ T7075] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 181.647155][ T7075] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 181.683878][ T7075] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 181.723624][ T29] audit: type=1400 audit(1787265132.541:506): avc: denied { write } for pid=7331 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.778663][ T5612] Bluetooth: hci4: command tx timeout [ 181.803708][ T7075] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 181.852156][ T7075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 181.858632][ T29] audit: type=1400 audit(1787265132.672:507): avc: denied { write } for pid=7352 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.881057][ T5593] cgroup: fork rejected by pids controller in /syz4 [ 181.920738][ T7075] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 181.953708][ T7075] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 181.989328][ T7148] hsr_slave_0: entered promiscuous mode [ 182.008256][ T7148] hsr_slave_1: entered promiscuous mode [ 182.023121][ T7148] debugfs: 'hsr0' already exists in 'hsr' [ 182.029898][ T7148] Cannot create hsr debugfs directory [ 182.113597][ T29] audit: type=1400 audit(1787265132.916:508): avc: denied { ioctl } for pid=7356 comm="syz.5.374" path="socket:[16619]" dev="sockfs" ino=16619 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 182.140672][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 182.994055][ T12] IPVS: stop unused estimator thread 0... [ 183.403111][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.542934][ T29] audit: type=1400 audit(1787265134.240:509): avc: denied { write } for pid=7364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.685430][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.746892][ T29] audit: type=1400 audit(1787265134.435:510): avc: denied { write } for pid=7388 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.847564][ T5613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.847717][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.878229][ T5613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.892836][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.902210][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.915311][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.964513][ T7075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.995402][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.998052][ T5707] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 184.038580][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 184.180231][ T5707] usb 6-1: Using ep0 maxpacket: 32 [ 184.189963][ T5707] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 184.191762][ T7075] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.209277][ T7148] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 184.215220][ T5707] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.231157][ T7148] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.240659][ T5707] usb 6-1: config 0 descriptor?? [ 184.248563][ T5707] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 184.255321][ T7148] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 184.274525][ T7148] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.288012][ T7148] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 184.307350][ T7148] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 184.324877][ T29] audit: type=1400 audit(1787265134.975:511): avc: denied { write } for pid=7397 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.330855][ T7148] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 184.375524][ T7148] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 184.417727][ T47] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 184.458488][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.465672][ T3321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.480567][ T29] audit: type=1400 audit(1787265135.114:512): avc: denied { write } for pid=7418 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 184.501337][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.509538][ T3321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.552543][ T5707] gspca_vc032x: reg_r err -71 [ 184.561005][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.585539][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.593312][ T47] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 184.615049][ T47] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 184.625386][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.639027][ T47] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 184.651762][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.664600][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.671500][ T47] usb 1-1: config 8 has no interface number 0 [ 184.678092][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.683530][ T47] usb 1-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 184.699310][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.704634][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.710328][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.715655][ T47] usb 1-1: config 8 interface 177 has no altsetting 0 [ 184.727641][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.738132][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.748134][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.755055][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.766597][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.779164][ T47] ir_toy 1-1:8.177: required endpoints not found [ 184.786157][ T12] bridge_slave_1: left allmulticast mode [ 184.788668][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.797571][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.802882][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.803870][ T12] bridge_slave_1: left promiscuous mode [ 184.813006][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.819654][ T5707] gspca_vc032x: I2c Bus Busy Wait 00 [ 184.824958][ T5707] gspca_vc032x: Unknown sensor... [ 184.830881][ T5707] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 184.840758][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.842322][ T5707] usb 6-1: USB disconnect, device number 3 [ 184.862108][ T12] bridge_slave_0: left allmulticast mode [ 184.868018][ T12] bridge_slave_0: left promiscuous mode [ 184.874121][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.974460][ T29] audit: type=1400 audit(1787265135.579:513): avc: denied { write } for pid=7428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.051254][ T12] bond0 (unregistering): (slave 30): Releasing backup interface [ 185.061470][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.081276][ T12] bond0 (unregistering): Released all slaves [ 185.081711][ T29] audit: type=1400 audit(1787265135.671:514): avc: denied { write } for pid=7439 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.091757][ T12] bond1 (unregistering): Released all slaves [ 185.234294][ T12] tipc: Left network mode [ 185.369364][ T7444] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 186.162940][ T5612] Bluetooth: hci1: command tx timeout [ 187.363795][ T24] usb 1-1: USB disconnect, device number 15 [ 187.402064][ T7148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.462302][ T12] hsr_slave_0: left promiscuous mode [ 187.471356][ T12] hsr_slave_1: left promiscuous mode [ 187.477199][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.488005][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.496266][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 187.509456][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 187.517559][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 187.527615][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 187.535344][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 187.549686][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.557282][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.580149][ T12] veth1_macvtap: left promiscuous mode [ 187.585681][ T12] veth0_macvtap: left promiscuous mode [ 187.591505][ T12] veth1_vlan: left promiscuous mode [ 187.596777][ T12] veth0_vlan: left promiscuous mode [ 187.720231][ T29] audit: type=1400 audit(1787265138.127:515): avc: denied { write } for pid=7443 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.824955][ T29] audit: type=1400 audit(1787265138.210:516): avc: denied { write } for pid=7465 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.849024][ T12] team0 (unregistering): Port device team_slave_1 removed [ 187.876421][ T12] team0 (unregistering): Port device team_slave_0 removed [ 188.101048][ T7148] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.216683][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.223878][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.269176][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 188.301018][ T5985] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.308182][ T5985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.423286][ T5612] Bluetooth: hci1: command tx timeout [ 188.453860][ T24] usb 1-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 188.465295][ T7391] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.476520][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.480319][ T12] IPVS: stop unused estimator thread 0... [ 188.483706][ T7391] bridge_slave_0: entered allmulticast mode [ 188.498547][ T7391] bridge_slave_0: entered promiscuous mode [ 188.512999][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 188.515815][ T7391] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.546134][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.550658][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 188.561032][ T7391] bridge_slave_1: entered allmulticast mode [ 188.586332][ T7391] bridge_slave_1: entered promiscuous mode [ 188.589568][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 188.610133][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.621067][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.645799][ T29] audit: type=1400 audit(1787265138.978:517): avc: denied { write } for pid=7479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.672129][ T7391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.679633][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.698033][ T7471] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 188.720126][ T7471] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 188.739359][ T7391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.749664][ T7471] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 188.776385][ T24] mos7720 1-1:1.0: Moschip 2 port adapter converter detected [ 188.797044][ T29] audit: type=1400 audit(1787265139.117:518): avc: denied { write } for pid=7502 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 188.873604][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.902168][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 188.912146][ T7391] team0: Port device team_slave_0 added [ 188.920105][ T7391] team0: Port device team_slave_1 added [ 188.977338][ T7075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.020265][ T7391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.022727][ T29] audit: type=1400 audit(1787265139.320:519): avc: denied { map } for pid=7470 comm="syz.0.384" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 189.032009][ T7391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.078463][ T7391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.113797][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.144353][ T24] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 189.176805][ T7471] bridge1: entered promiscuous mode [ 189.183431][ T7471] bridge1: entered allmulticast mode [ 189.191705][ T24] usb 1-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 189.204728][ T7391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.217232][ T7391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.244264][ T7391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.330750][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.424551][ T5753] usb 1-1: USB disconnect, device number 16 [ 189.424612][ C1] usb 1-1: mos7720_interrupt_callback - Error -19 submitting control urb [ 189.454746][ T7391] hsr_slave_0: entered promiscuous mode [ 189.478746][ T7391] hsr_slave_1: entered promiscuous mode [ 189.489899][ T5753] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 189.532278][ T5753] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 189.553916][ T5753] mos7720 1-1:1.0: device disconnected [ 189.606426][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.794073][ T5612] Bluetooth: hci2: command tx timeout [ 189.899480][ T29] audit: type=1400 audit(1787265140.134:520): avc: denied { write } for pid=7518 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.041169][ T29] audit: type=1400 audit(1787265140.263:521): avc: denied { write } for pid=7537 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 190.103562][ T7075] veth0_vlan: entered promiscuous mode [ 190.233461][ T12] bridge_slave_1: left allmulticast mode [ 190.239368][ T12] bridge_slave_1: left promiscuous mode [ 190.245173][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.269413][ T12] bridge_slave_0: left allmulticast mode [ 190.275948][ T12] bridge_slave_0: left promiscuous mode [ 190.282062][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.410359][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.420727][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.434671][ T12] bond0 (unregistering): Released all slaves [ 190.446452][ T5260] 8021q: adding VLAN 0 to HW filter on device eth11 [ 190.471023][ T7454] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.479631][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.490642][ T7454] bridge_slave_0: entered allmulticast mode [ 190.510312][ T7454] bridge_slave_0: entered promiscuous mode [ 190.521821][ T7454] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.529092][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.536619][ T7454] bridge_slave_1: entered allmulticast mode [ 190.552525][ T7454] bridge_slave_1: entered promiscuous mode [ 190.564352][ T7148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.635700][ T7075] veth1_vlan: entered promiscuous mode [ 190.659564][ T5612] Bluetooth: hci1: command tx timeout [ 190.723003][ T7454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.760773][ T7454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.886826][ T7454] team0: Port device team_slave_0 added [ 190.907817][ T12] hsr_slave_0: left promiscuous mode [ 190.917078][ T12] hsr_slave_1: left promiscuous mode [ 190.925253][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.933070][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.941645][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.949122][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.977480][ T12] veth1_macvtap: left promiscuous mode [ 190.983059][ T12] veth0_macvtap: left promiscuous mode [ 190.989230][ T12] veth1_vlan: left promiscuous mode [ 190.994755][ T12] veth0_vlan: left promiscuous mode [ 191.246363][ T12] team0 (unregistering): Port device team_slave_1 removed [ 191.273092][ T12] team0 (unregistering): Port device team_slave_0 removed [ 191.428894][ T7454] team0: Port device team_slave_1 added [ 191.502893][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.524435][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.568852][ T7454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.588339][ T7075] veth0_macvtap: entered promiscuous mode [ 191.616865][ T7075] veth1_macvtap: entered promiscuous mode [ 191.649699][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.664509][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 191.691284][ T7454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.833749][ T29] audit: type=1400 audit(1787265141.927:522): avc: denied { write } for pid=7561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.871936][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.897175][ T7148] veth0_vlan: entered promiscuous mode [ 191.927349][ T29] audit: type=1400 audit(1787265142.001:523): avc: denied { write } for pid=7575 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.045259][ T5612] Bluetooth: hci2: command tx timeout [ 192.079233][ T5260] 8021q: adding VLAN 0 to HW filter on device eth12 [ 192.234118][ T7454] hsr_slave_0: entered promiscuous mode [ 192.252620][ T7454] hsr_slave_1: entered promiscuous mode [ 192.263565][ T7454] debugfs: 'hsr0' already exists in 'hsr' [ 192.271786][ T7454] Cannot create hsr debugfs directory [ 192.392696][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.830892][ T7391] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 192.872908][ T7391] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 192.888961][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.920593][ T5612] Bluetooth: hci1: command tx timeout [ 193.044804][ T7148] veth1_vlan: entered promiscuous mode [ 193.076665][ T7391] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 193.111335][ T7391] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 193.229824][ T7391] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 193.256594][ T7391] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 193.346218][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.391523][ T7391] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 193.423786][ T7391] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 193.495175][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.766054][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.189695][ T7148] veth0_macvtap: entered promiscuous mode [ 194.268629][ T7148] veth1_macvtap: entered promiscuous mode [ 194.295780][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.305195][ T5612] Bluetooth: hci2: command tx timeout [ 194.325157][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.549450][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.569327][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.588875][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.391'. [ 194.604793][ T7148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.646057][ T7148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.664150][ T7454] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 194.679809][ T7454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 194.690629][ T7454] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 194.700845][ T7454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 194.721711][ T152] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.744469][ T7454] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 194.770224][ T7454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 194.780888][ T29] audit: type=1400 audit(1787265144.642:524): avc: denied { write } for pid=7590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 194.818428][ T7454] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 194.834221][ T7454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 194.868970][ T7391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.009910][ T152] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.102595][ T42] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 195.120846][ T78] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.176647][ T7391] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.239176][ T6032] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.328428][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.335576][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.519024][ T29] audit: type=1400 audit(1787265145.326:525): avc: denied { write } for pid=7610 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 195.763075][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.770259][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.875711][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.917898][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.948010][ T5260] 8021q: adding VLAN 0 to HW filter on device eth13 [ 195.987409][ T42] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 195.998282][ T42] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 196.009361][ T5985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.021622][ T5985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.034074][ T42] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 196.048889][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.060227][ T42] usb 1-1: Product: syz [ 196.072217][ T42] usb 1-1: Manufacturer: syz [ 196.079580][ T42] usb 1-1: SerialNumber: syz [ 196.097150][ T7622] kvm: vcpu 0: requested 148514 ns lapic timer period limited to 200000 ns [ 196.108922][ T7622] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 196.110751][ T42] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 196.153035][ T7454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.206461][ T7454] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.214274][ T42] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 196.222647][ T7622] netlink: 16 bytes leftover after parsing attributes in process `syz.6.393'. [ 196.249350][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.256591][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.265827][ T42] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 196.281346][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.288593][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.568678][ T5612] Bluetooth: hci2: command tx timeout [ 197.495713][ T7391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.736116][ T29] audit: type=1400 audit(1787265147.376:526): avc: denied { write } for pid=7635 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.741237][ T7671] netlink: 44 bytes leftover after parsing attributes in process `syz.7.396'. [ 197.870864][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.7.396'. [ 197.891637][ T7671] netlink: 59 bytes leftover after parsing attributes in process `syz.7.396'. [ 197.951048][ T7675] netlink: 'syz.7.396': attribute type 10 has an invalid length. [ 197.954264][ T7671] netlink: 59 bytes leftover after parsing attributes in process `syz.7.396'. [ 197.985996][ T7454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.002131][ T29] audit: type=1400 audit(1787265147.625:527): avc: denied { write } for pid=7678 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.026884][ T7675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.061894][ T7675] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 198.111705][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.118366][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.171726][ T7391] veth0_vlan: entered promiscuous mode [ 198.187977][ T5260] 8021q: adding VLAN 0 to HW filter on device eth18 [ 198.218119][ T7391] veth1_vlan: entered promiscuous mode [ 198.291435][ T7391] veth0_macvtap: entered promiscuous mode [ 198.309195][ T7391] veth1_macvtap: entered promiscuous mode [ 198.352558][ T7391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.353572][ T47] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 198.382739][ T7391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.433452][ T5985] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.553267][ T47] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 198.555143][ T5985] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.577979][ T7454] veth0_vlan: entered promiscuous mode [ 198.584072][ T47] usb 8-1: config index 0 descriptor too short (expected 63186, got 210) [ 198.596793][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.605948][ T47] usb 8-1: config 0 has an invalid interface number: 106 but max is 0 [ 198.614618][ T5985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.635554][ T5985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.639592][ T47] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.646153][ T7454] veth1_vlan: entered promiscuous mode [ 198.686152][ T47] usb 8-1: config 0 has no interface number 0 [ 198.702633][ T47] usb 8-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 198.706067][ T6032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.734034][ T7454] veth0_macvtap: entered promiscuous mode [ 198.740039][ T47] usb 8-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 198.743154][ T6032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.764775][ T47] usb 8-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 12398, setting to 1023 [ 198.766361][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.788901][ T47] usb 8-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 198.809536][ T7454] veth1_macvtap: entered promiscuous mode [ 198.817292][ T47] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.854225][ T47] usb 8-1: config 0 descriptor?? [ 198.858155][ T7454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.880991][ T7454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.911491][ T47] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 198.976020][ T152] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.998022][ T7702] program syz.4.377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.000660][ T29] audit: type=1400 audit(1787265148.539:528): avc: denied { write } for pid=7687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.137242][ T5985] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.156028][ T5985] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.160868][ T5707] usb 8-1: USB disconnect, device number 2 [ 199.169722][ T6032] usb 8-1: Failed to submit usb control message: -71 [ 199.189328][ T6032] usb 8-1: unable to send the bmi data to the device: -71 [ 199.206315][ T6032] usb 8-1: unable to get target info from device [ 199.238264][ T29] audit: type=1400 audit(1787265148.751:529): avc: denied { write } for pid=7709 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.263265][ T6032] usb 8-1: could not get target info (-71) [ 199.276215][ T6032] usb 8-1: could not probe fw (-71) [ 199.286846][ T58] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.293865][ T6032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.304657][ T29] audit: type=1400 audit(1787265148.788:530): avc: denied { append } for pid=7707 comm="syz.4.398" name="comedi3" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 199.332128][ T6032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.579740][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.590750][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.977286][ T7605] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 200.361725][ T5613] Bluetooth: hci0: command 0x0406 tx timeout [ 200.752424][ T7605] Process accounting resumed [ 200.794165][ T47] usb 1-1: USB disconnect, device number 17 [ 200.990956][ T47] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 201.637850][ T47] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 201.650144][ T47] ti_usb_3410_5052 1-1:2.0: device disconnected [ 201.856860][ T29] audit: type=1400 audit(1787265151.274:531): avc: denied { write } for pid=7721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.188646][ T29] audit: type=1400 audit(1787265151.682:532): avc: denied { write } for pid=7759 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.272526][ T5260] 8021q: adding VLAN 0 to HW filter on device eth19 [ 202.990434][ T7765] trusted_key: encrypted_key: key user:syz not found [ 203.433828][ T29] audit: type=1400 audit(1787265152.952:533): avc: denied { name_connect } for pid=7771 comm="syz.0.410" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 203.992618][ T29] audit: type=1400 audit(1787265153.510:534): avc: denied { accept } for pid=7771 comm="syz.0.410" lport=39731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 204.307000][ T5789] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 204.512092][ T5789] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.634801][ T5789] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.851675][ T5789] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 205.013012][ T5789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 205.130278][ T5789] usb 1-1: SerialNumber: syz [ 205.362082][ T5789] hub 1-1:1.0: bad descriptor, ignoring hub [ 205.450491][ T5789] hub 1-1:1.0: probe with driver hub failed with error -5 [ 205.589372][ T5789] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 205.660564][ T5789] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 205.800499][ T5789] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 205.866019][ T29] audit: type=1400 audit(1787265155.348:535): avc: denied { write } for pid=7770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.552302][ T29] audit: type=1400 audit(1787265156.002:536): avc: denied { write } for pid=7800 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.651899][ T29] audit: type=1400 audit(1787265156.107:537): avc: denied { name_bind } for pid=7805 comm="syz.4.417" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 206.804068][ T7810] netlink: 44 bytes leftover after parsing attributes in process `syz.7.418'. [ 206.806172][ T29] audit: type=1400 audit(1787265156.136:538): avc: denied { mounton } for pid=7805 comm="syz.4.417" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 206.837930][ T7810] netlink: 59 bytes leftover after parsing attributes in process `syz.7.418'. [ 206.843616][ T5260] 8021q: adding VLAN 0 to HW filter on device eth20 [ 207.345993][ T7810] netlink: 59 bytes leftover after parsing attributes in process `syz.7.418'. [ 207.397011][ T29] audit: type=1400 audit(1787265156.335:539): avc: denied { map } for pid=7805 comm="syz.4.417" path="/dev/comedi4" dev="devtmpfs" ino=1277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 207.436522][ T7810] netlink: 'syz.7.418': attribute type 10 has an invalid length. [ 207.741994][ T5708] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 207.827562][ T5692] usb 1-1: USB disconnect, device number 18 [ 207.990290][ T29] audit: type=1400 audit(1787265157.370:540): avc: denied { write } for pid=7815 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.028934][ T5708] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 208.061844][ T5708] usb 8-1: config index 0 descriptor too short (expected 63186, got 210) [ 208.116070][ T5708] usb 8-1: config 0 has an invalid interface number: 106 but max is 0 [ 208.241376][ T5708] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.355353][ T5708] usb 8-1: config 0 has no interface number 0 [ 208.484015][ T5708] usb 8-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 208.484248][ T7840] xt_hashlimit: size too large, truncated to 1048576 [ 208.509401][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.538962][ T5708] usb 8-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 208.556031][ T5708] usb 8-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 12398, setting to 1023 [ 208.587389][ T5708] usb 8-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 208.588504][ T29] audit: type=1400 audit(1787265157.936:541): avc: denied { read } for pid=7833 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.678831][ T5708] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.706829][ T29] audit: type=1400 audit(1787265158.059:542): avc: denied { write } for pid=7844 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.728555][ T5708] usb 8-1: config 0 descriptor?? [ 208.857794][ T5708] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 208.862911][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.985738][ T29] audit: type=1400 audit(1787265158.312:543): avc: denied { setopt } for pid=7853 comm="syz.6.429" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 209.055578][ T29] audit: type=1400 audit(1787265158.369:544): avc: denied { ioctl } for pid=7853 comm="syz.6.429" path="socket:[19298]" dev="sockfs" ino=19298 ioctlcmd=0x9435 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 209.061129][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.091558][ T5753] usb 8-1: USB disconnect, device number 3 [ 209.093307][ T3321] usb 8-1: Failed to submit usb control message: -71 [ 209.121853][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.130469][ T3321] usb 8-1: unable to send the bmi data to the device: -71 [ 209.141739][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.143724][ T3321] usb 8-1: unable to get target info from device [ 209.159186][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.166780][ T3321] usb 8-1: could not get target info (-71) [ 209.178880][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.179006][ T7861] netlink: 76 bytes leftover after parsing attributes in process `syz.6.429'. [ 209.199046][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.201309][ T7860] syz.4.430 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 209.221609][ T3321] usb 8-1: could not probe fw (-71) [ 209.222553][ T29] audit: type=1400 audit(1787265158.537:545): avc: denied { bind } for pid=7853 comm="syz.6.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 209.229527][ T7860] CPU: 0 UID: 0 PID: 7860 Comm: syz.4.430 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.229553][ T7860] Tainted: [L]=SOFTLOCKUP [ 209.229559][ T7860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 209.229569][ T7860] Call Trace: [ 209.229574][ T7860] [ 209.229581][ T7860] dump_stack_lvl+0x100/0x190 [ 209.229605][ T7860] dump_header+0xfb/0x606 [ 209.229624][ T7860] oom_kill_process.cold+0xd/0x330 [ 209.229643][ T7860] out_of_memory+0x340/0x14f0 [ 209.229667][ T7860] ? __pfx_out_of_memory+0x10/0x10 [ 209.229690][ T7860] mem_cgroup_out_of_memory+0xc6/0x130 [ 209.229711][ T7860] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 209.229730][ T7860] ? find_held_lock+0x2b/0x80 [ 209.229750][ T7860] ? do_raw_spin_unlock+0x145/0x1e0 [ 209.229766][ T7860] ? _raw_spin_unlock+0x28/0x50 [ 209.229788][ T7860] try_charge_memcg+0x6e1/0xdf0 [ 209.229807][ T7860] ? __pfx_try_charge_memcg+0x10/0x10 [ 209.229823][ T7860] ? find_held_lock+0x2b/0x80 [ 209.229838][ T7860] ? rcu_read_unlock+0x17/0x60 [ 209.229853][ T7860] ? rcu_read_unlock+0x17/0x60 [ 209.229876][ T7860] __memcg_slab_post_alloc_hook+0x46c/0x1160 [ 209.229905][ T7860] ? kasan_unpoison+0x27/0x60 [ 209.229928][ T7860] __kmalloc_cache_noprof+0x590/0x6b0 [ 209.229948][ T7860] ? nf_tables_newtable+0xd0a/0x1a90 [ 209.229977][ T7860] nf_tables_newtable+0xd0a/0x1a90 [ 209.230007][ T7860] ? __pfx_nf_tables_newtable+0x10/0x10 [ 209.230036][ T7860] ? __nla_parse+0x40/0x60 [ 209.230063][ T7860] nfnetlink_rcv_batch+0x1410/0x2880 [ 209.230092][ T7860] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 209.230109][ T7860] ? find_held_lock+0x2b/0x80 [ 209.230138][ T7860] ? avc_has_perm_noaudit+0x145/0x3b0 [ 209.230182][ T7860] ? __nla_parse+0x40/0x60 [ 209.230209][ T7860] nfnetlink_rcv+0x3bd/0x440 [ 209.230226][ T7860] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 209.230248][ T7860] netlink_unicast+0x585/0x850 [ 209.230272][ T7860] ? __pfx_netlink_unicast+0x10/0x10 [ 209.230300][ T7860] netlink_sendmsg+0x8b0/0xda0 [ 209.230328][ T7860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.230351][ T7860] ? selinux_socket_sendmsg+0x198/0x2f0 [ 209.230379][ T7860] ____sys_sendmsg+0xa4d/0xbe0 [ 209.230397][ T7860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.230420][ T7860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.230450][ T7860] ___sys_sendmsg+0x190/0x1e0 [ 209.230476][ T7860] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.230497][ T7860] ? futex_wait+0x11e/0x370 [ 209.230525][ T7860] ? find_held_lock+0x2b/0x80 [ 209.230556][ T7860] __sys_sendmsg+0x160/0x210 [ 209.230572][ T7860] ? __pfx___sys_sendmsg+0x10/0x10 [ 209.230600][ T7860] do_syscall_64+0x123/0x790 [ 209.230624][ T7860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.230640][ T7860] RIP: 0033:0x7f762499e0d9 [ 209.230655][ T7860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.230669][ T7860] RSP: 002b:00007f7625847028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.230685][ T7860] RAX: ffffffffffffffda RBX: 00007f7624c26090 RCX: 00007f762499e0d9 [ 209.230695][ T7860] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 209.230705][ T7860] RBP: 00007f7624a35024 R08: 0000000000000000 R09: 0000000000000000 [ 209.230714][ T7860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.230723][ T7860] R13: 00007f7624c26128 R14: 00007f7624c26090 R15: 00007ffca6714818 [ 209.230745][ T7860] [ 209.230794][ T7860] memory: usage 8kB, limit 8kB, failcnt 21 [ 209.458463][ T7857] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 209.552865][ T7860] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 209.556880][ T29] audit: type=1400 audit(1787265158.810:546): avc: denied { getopt } for pid=7853 comm="syz.6.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 209.607969][ T7860] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 209.677299][ T7860] Memory cgroup stats for /syz4/test: [ 209.679132][ T7860] cache 0 [ 209.746511][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.757065][ T7860] rss 0 [ 209.757080][ T7860] rss_huge 0 [ 209.757088][ T7860] shmem 0 [ 209.757096][ T7860] mapped_file 0 [ 209.757103][ T7860] dirty 0 [ 209.757110][ T7860] writeback 0 [ 209.757118][ T7860] workingset_refault_anon 0 [ 209.757126][ T7860] workingset_refault_file 0 [ 209.757134][ T7860] swap 0 [ 209.757141][ T7860] swapcached 0 [ 209.757148][ T7860] pgpgin 0 [ 209.757155][ T7860] pgpgout 0 [ 209.757163][ T7860] pgfault 0 [ 209.757170][ T7860] pgmajfault 0 [ 209.757177][ T7860] inactive_anon 0 [ 209.757185][ T7860] active_anon 0 [ 209.757192][ T7860] inactive_file 0 [ 209.757200][ T7860] active_file 0 [ 209.757207][ T7860] unevictable 0 [ 209.757215][ T7860] hierarchical_memory_limit 8192 [ 209.757223][ T7860] hierarchical_memsw_limit 9223372036854771712 [ 209.757232][ T7860] total_cache 0 [ 209.757239][ T7860] total_rss 0 [ 209.757295][ T7860] total_rss_huge 0 [ 209.757304][ T7860] total_shmem 0 [ 209.757311][ T7860] total_mapped_file 0 [ 209.757319][ T7860] total_dirty 0 [ 209.757326][ T7860] total_writeback 0 [ 209.757333][ T7860] total_workingset_refault_anon 0 [ 209.757342][ T7860] total_workingset_refault_file 0 [ 209.757351][ T7860] total_swap 0 [ 209.757358][ T7860] total_swapcached 0 [ 209.757365][ T7860] total_pgpgin 0 [ 209.757373][ T7860] total_pgpgout 0 [ 209.938054][ T7880] bonding: bo is being created... [ 209.946024][ T7860] total_pgfault 0 [ 209.952932][ T7860] total_pgmajfault 0 [ 209.966806][ T7860] total_inactive_anon 0 [ 209.970999][ T7860] total_active_anon 0 [ 209.995237][ T7860] total_inactive_file 0 [ 210.018631][ T7860] total_active_file 0 [ 210.034544][ T7860] total_unevictable 0 [ 210.051965][ T7860] anon_cost 0 [ 210.068869][ T7860] file_cost 0 [ 210.086924][ T7860] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.430,pid=7851,uid=0 [ 210.118581][ T7328] ================================================================== [ 210.126668][ T7328] BUG: KASAN: slab-use-after-free in _raw_spin_lock_bh+0x33/0x40 [ 210.134397][ T7328] Read of size 1 at addr ffff8880556165a0 by task syz.0.369/7328 [ 210.142117][ T7328] [ 210.144445][ T7328] CPU: 0 UID: 0 PID: 7328 Comm: syz.0.369 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.144471][ T7328] Tainted: [L]=SOFTLOCKUP [ 210.144476][ T7328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 210.144485][ T7328] Call Trace: [ 210.144491][ T7328] [ 210.144497][ T7328] dump_stack_lvl+0x100/0x190 [ 210.144530][ T7328] print_report+0x13d/0x4b0 [ 210.144554][ T7328] ? __virt_addr_valid+0x239/0x430 [ 210.144578][ T7328] ? _raw_spin_lock_bh+0x33/0x40 [ 210.144599][ T7328] kasan_report+0xdf/0x1c0 [ 210.144625][ T7328] ? _raw_spin_lock_bh+0x33/0x40 [ 210.144647][ T7328] ? _raw_spin_lock_bh+0x33/0x40 [ 210.144666][ T7328] __kasan_check_byte+0x36/0x50 [ 210.144690][ T7328] lock_acquire+0x132/0x370 [ 210.144712][ T7328] ? do_raw_spin_lock+0x128/0x260 [ 210.144727][ T7328] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 210.144744][ T7328] _raw_spin_lock_bh+0x33/0x40 [ 210.144763][ T7328] ? bt_accept_unlink+0x64/0x370 [ 210.144782][ T7328] bt_accept_unlink+0x64/0x370 [ 210.144800][ T7328] ? __local_bh_enable_ip+0xa5/0x120 [ 210.144824][ T7328] l2cap_sock_teardown_cb+0x1a3/0x3f0 [ 210.144851][ T7328] l2cap_chan_del+0xa6/0x920 [ 210.144872][ T7328] l2cap_conn_del+0x34f/0x6b0 [ 210.144892][ T7328] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 210.144911][ T7328] l2cap_disconn_cfm+0x9f/0x100 [ 210.144930][ T7328] hci_conn_hash_flush+0x10e/0x280 [ 210.144958][ T7328] hci_dev_close_sync+0x5cf/0x13c0 [ 210.144976][ T7328] ? find_held_lock+0x2b/0x80 [ 210.144995][ T7328] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 210.145014][ T7328] hci_dev_do_close+0x2e/0xb0 [ 210.145038][ T7328] hci_unregister_dev+0x23f/0x690 [ 210.145063][ T7328] vhci_release+0x17d/0x230 [ 210.145082][ T7328] ? __pfx_vhci_release+0x10/0x10 [ 210.145099][ T7328] __fput+0x3ff/0xb50 [ 210.145125][ T7328] task_work_run+0x150/0x240 [ 210.145147][ T7328] ? __pfx_task_work_run+0x10/0x10 [ 210.145167][ T7328] ? free_uts_ns+0x16e/0x330 [ 210.145189][ T7328] do_exit+0x951/0x2ae0 [ 210.145207][ T7328] ? __pfx_do_exit+0x10/0x10 [ 210.145223][ T7328] ? cgroup_update_frozen_flag+0x125/0x240 [ 210.145241][ T7328] ? find_held_lock+0x2b/0x80 [ 210.145258][ T7328] ? get_signal+0x184f/0x21e0 [ 210.145284][ T7328] do_group_exit+0xd5/0x2a0 [ 210.145302][ T7328] get_signal+0x1ec7/0x21e0 [ 210.145327][ T7328] ? __pfx_get_signal+0x10/0x10 [ 210.145349][ T7328] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 210.145371][ T7328] arch_do_signal_or_restart+0x91/0x7e0 [ 210.145390][ T7328] ? get_timespec64+0x147/0x240 [ 210.145412][ T7328] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 210.145435][ T7328] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 210.145459][ T7328] exit_to_user_mode_loop+0x139/0x700 [ 210.145484][ T7328] ? rcu_is_watching+0x13/0xc0 [ 210.145501][ T7328] do_syscall_64+0x661/0x790 [ 210.145533][ T7328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.145551][ T7328] RIP: 0033:0x7fa39e55e90e [ 210.145564][ T7328] Code: Unable to access opcode bytes at 0x7fa39e55e8e4. [ 210.145572][ T7328] RSP: 002b:00007fa39f473f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 210.145589][ T7328] RAX: fffffffffffffdfc RBX: 00007fa39f4746c0 RCX: 00007fa39e55e90e [ 210.145600][ T7328] RDX: 00007fa39f473fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.145611][ T7328] RBP: 00007fa39e635024 R08: 0000000000000000 R09: 0000000000000000 [ 210.145620][ T7328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.145630][ T7328] R13: 00007fa39e826038 R14: 00007fa39e825fa0 R15: 00007ffc220fb868 [ 210.145647][ T7328] [ 210.145653][ T7328] [ 210.482351][ T7328] Allocated by task 9: [ 210.486397][ T7328] kasan_save_stack+0x30/0x50 [ 210.491064][ T7328] kasan_save_track+0x14/0x30 [ 210.495725][ T7328] __kasan_kmalloc+0xaa/0xb0 [ 210.500297][ T7328] __kmalloc_node_track_caller_noprof+0x333/0x830 [ 210.506711][ T7328] kmalloc_reserve+0xe8/0x350 [ 210.511369][ T7328] __alloc_skb+0x185/0x710 [ 210.515772][ T7328] mld_newpack.isra.0+0x18e/0xa20 [ 210.520796][ T7328] add_grhead+0x299/0x340 [ 210.525112][ T7328] add_grec+0x1389/0x1930 [ 210.529426][ T7328] mld_send_initial_cr+0x156/0x320 [ 210.534524][ T7328] mld_dad_work+0x32/0x1f0 [ 210.538924][ T7328] process_one_work+0xa23/0x1940 [ 210.543843][ T7328] worker_thread+0x5ef/0xe50 [ 210.548415][ T7328] kthread+0x373/0x450 [ 210.552476][ T7328] ret_from_fork+0x730/0xd60 [ 210.557063][ T7328] ret_from_fork_asm+0x1a/0x30 [ 210.561813][ T7328] [ 210.564113][ T7328] Freed by task 9: [ 210.567813][ T7328] kasan_save_stack+0x30/0x50 [ 210.572475][ T7328] kasan_save_track+0x14/0x30 [ 210.577136][ T7328] kasan_save_free_info+0x3b/0x70 [ 210.582145][ T7328] __kasan_slab_free+0x5f/0x80 [ 210.586898][ T7328] kfree+0x22b/0x6c0 [ 210.590774][ T7328] skb_free_head+0xb9/0x160 [ 210.595260][ T7328] skb_release_data+0x6c5/0x8e0 [ 210.600096][ T7328] sk_skb_reason_drop+0x102/0x1b0 [ 210.605100][ T7328] ip6_mc_input+0x832/0xf50 [ 210.609589][ T7328] ipv6_rcv+0x34c/0x3d0 [ 210.613728][ T7328] __netif_receive_skb_one_core+0x12d/0x1e0 [ 210.619617][ T7328] __netif_receive_skb+0x1f/0x120 [ 210.624628][ T7328] process_backlog+0x487/0x1600 [ 210.629464][ T7328] __napi_poll.constprop.0+0xaf/0x450 [ 210.634819][ T7328] net_rx_action+0xa40/0xf20 [ 210.639406][ T7328] handle_softirqs+0x1e6/0x9d0 [ 210.644166][ T7328] do_softirq+0xaf/0xf0 [ 210.648312][ T7328] __local_bh_enable_ip+0xff/0x120 [ 210.653423][ T7328] __dev_queue_xmit+0xa27/0x4970 [ 210.658368][ T7328] ip6_finish_output2+0xfd4/0x1ce0 [ 210.663468][ T7328] __ip6_finish_output+0x357/0xdf0 [ 210.668570][ T7328] ip6_output+0x2aa/0xa60 [ 210.672887][ T7328] NF_HOOK.constprop.0+0x115/0x5a0 [ 210.677992][ T7328] mld_sendpack+0x8f7/0xec0 [ 210.682503][ T7328] mld_send_initial_cr+0x219/0x320 [ 210.687612][ T7328] mld_dad_work+0x32/0x1f0 [ 210.692011][ T7328] process_one_work+0xa23/0x1940 [ 210.696941][ T7328] worker_thread+0x5ef/0xe50 [ 210.701518][ T7328] kthread+0x373/0x450 [ 210.705568][ T7328] ret_from_fork+0x730/0xd60 [ 210.710141][ T7328] ret_from_fork_asm+0x1a/0x30 [ 210.714897][ T7328] [ 210.717228][ T7328] The buggy address belongs to the object at ffff888055616000 [ 210.717228][ T7328] which belongs to the cache kmalloc-2k of size 2048 [ 210.731271][ T7328] The buggy address is located 1440 bytes inside of [ 210.731271][ T7328] freed 2048-byte region [ffff888055616000, ffff888055616800) [ 210.745217][ T7328] [ 210.747521][ T7328] The buggy address belongs to the physical page: [ 210.753906][ T7328] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888055610000 pfn:0x55610 [ 210.763944][ T7328] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 210.772423][ T7328] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 210.780904][ T7328] page_type: f5(slab) [ 210.784864][ T7328] raw: 00fff00000000240 ffff88801c022000 ffffea0001f75a10 ffffea0001fcb010 [ 210.793425][ T7328] raw: ffff888055610000 0000000800080003 00000000f5000000 0000000000000000 [ 210.801991][ T7328] head: 00fff00000000240 ffff88801c022000 ffffea0001f75a10 ffffea0001fcb010 [ 210.810644][ T7328] head: ffff888055610000 0000000800080003 00000000f5000000 0000000000000000 [ 210.819305][ T7328] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 210.827956][ T7328] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 210.836599][ T7328] page dumped because: kasan: bad access detected [ 210.843161][ T7328] page_owner tracks the page as allocated [ 210.848848][ T7328] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4954, tgid 4954 (klogd), ts 73106804939, free_ts 21174878996 [ 210.869847][ T7328] post_alloc_hook+0xfd/0x120 [ 210.874509][ T7328] get_page_from_freelist+0xf46/0x3500 [ 210.879949][ T7328] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 210.885824][ T7328] new_slab+0xa2/0x660 [ 210.889888][ T7328] refill_objects+0xe3/0x410 [ 210.894466][ T7328] __pcs_replace_empty_main+0x372/0x680 [ 210.899991][ T7328] __kmalloc_cache_noprof+0x47b/0x6b0 [ 210.905342][ T7328] syslog_print+0xf8/0x620 [ 210.909743][ T7328] do_syslog+0x5bd/0x6d0 [ 210.913981][ T7328] __x64_sys_syslog+0x74/0xb0 [ 210.918654][ T7328] do_syscall_64+0x123/0x790 [ 210.923239][ T7328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.929116][ T7328] page last free pid 1 tgid 1 stack trace: [ 210.934893][ T7328] free_pages_prepare+0x586/0xd80 [ 210.939912][ T7328] __free_contig_range_common+0x14f/0x250 [ 210.945624][ T7328] destroy_args+0xa8/0x7a0 [ 210.950022][ T7328] debug_vm_pgtable+0x1d69/0x3490 [ 210.955028][ T7328] do_one_initcall+0x11c/0x6f0 [ 210.959774][ T7328] kernel_init_freeable+0x6ea/0x7b0 [ 210.964955][ T7328] kernel_init+0x21/0x1e0 [ 210.969265][ T7328] ret_from_fork+0x730/0xd60 [ 210.973840][ T7328] ret_from_fork_asm+0x1a/0x30 [ 210.978590][ T7328] [ 210.980893][ T7328] Memory state around the buggy address: [ 210.986597][ T7328] ffff888055616480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 210.994635][ T7328] ffff888055616500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.002684][ T7328] >ffff888055616580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.010759][ T7328] ^ [ 211.015857][ T7328] ffff888055616600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.023903][ T7328] ffff888055616680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 211.031949][ T7328] ================================================================== [ 211.040092][ T7328] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 211.047299][ T7328] CPU: 0 UID: 0 PID: 7328 Comm: syz.0.369 Tainted: G L syzkaller #0 PREEMPT(full) [ 211.058068][ T7328] Tainted: [L]=SOFTLOCKUP [ 211.062396][ T7328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 211.072448][ T7328] Call Trace: [ 211.075722][ T7328] [ 211.078645][ T7328] dump_stack_lvl+0x100/0x190 [ 211.083325][ T7328] vpanic+0x553/0x970 [ 211.087302][ T7328] ? __pfx_vpanic+0x10/0x10 [ 211.091813][ T7328] ? mark_held_locks+0x40/0x70 [ 211.096580][ T7328] ? irqentry_exit+0x24d/0xa10 [ 211.101342][ T7328] ? _raw_spin_lock_bh+0x33/0x40 [ 211.106287][ T7328] panic+0xd1/0xe0 [ 211.110001][ T7328] ? __pfx_panic+0x10/0x10 [ 211.114402][ T7328] check_panic_on_warn.cold+0x19/0x34 [ 211.119768][ T7328] end_report.part.0+0x3a/0x90 [ 211.124522][ T7328] kasan_report.cold+0xe/0x18 [ 211.129198][ T7328] ? _raw_spin_lock_bh+0x33/0x40 [ 211.134137][ T7328] ? _raw_spin_lock_bh+0x33/0x40 [ 211.139080][ T7328] __kasan_check_byte+0x36/0x50 [ 211.143966][ T7328] lock_acquire+0x132/0x370 [ 211.148479][ T7328] ? do_raw_spin_lock+0x128/0x260 [ 211.153586][ T7328] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 211.158957][ T7328] _raw_spin_lock_bh+0x33/0x40 [ 211.163706][ T7328] ? bt_accept_unlink+0x64/0x370 [ 211.168630][ T7328] bt_accept_unlink+0x64/0x370 [ 211.173385][ T7328] ? __local_bh_enable_ip+0xa5/0x120 [ 211.178658][ T7328] l2cap_sock_teardown_cb+0x1a3/0x3f0 [ 211.184028][ T7328] l2cap_chan_del+0xa6/0x920 [ 211.188621][ T7328] l2cap_conn_del+0x34f/0x6b0 [ 211.193286][ T7328] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 211.198728][ T7328] l2cap_disconn_cfm+0x9f/0x100 [ 211.203573][ T7328] hci_conn_hash_flush+0x10e/0x280 [ 211.208676][ T7328] hci_dev_close_sync+0x5cf/0x13c0 [ 211.213780][ T7328] ? find_held_lock+0x2b/0x80 [ 211.218440][ T7328] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 211.223967][ T7328] hci_dev_do_close+0x2e/0xb0 [ 211.228641][ T7328] hci_unregister_dev+0x23f/0x690 [ 211.233659][ T7328] vhci_release+0x17d/0x230 [ 211.238149][ T7328] ? __pfx_vhci_release+0x10/0x10 [ 211.243170][ T7328] __fput+0x3ff/0xb50 [ 211.247332][ T7328] task_work_run+0x150/0x240 [ 211.251922][ T7328] ? __pfx_task_work_run+0x10/0x10 [ 211.257026][ T7328] ? free_uts_ns+0x16e/0x330 [ 211.261622][ T7328] do_exit+0x951/0x2ae0 [ 211.265777][ T7328] ? __pfx_do_exit+0x10/0x10 [ 211.270373][ T7328] ? cgroup_update_frozen_flag+0x125/0x240 [ 211.276173][ T7328] ? find_held_lock+0x2b/0x80 [ 211.280841][ T7328] ? get_signal+0x184f/0x21e0 [ 211.285505][ T7328] do_group_exit+0xd5/0x2a0 [ 211.289991][ T7328] get_signal+0x1ec7/0x21e0 [ 211.294486][ T7328] ? __pfx_get_signal+0x10/0x10 [ 211.299334][ T7328] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 211.304791][ T7328] arch_do_signal_or_restart+0x91/0x7e0 [ 211.310321][ T7328] ? get_timespec64+0x147/0x240 [ 211.315169][ T7328] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 211.321320][ T7328] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 211.327124][ T7328] exit_to_user_mode_loop+0x139/0x700 [ 211.332485][ T7328] ? rcu_is_watching+0x13/0xc0 [ 211.337247][ T7328] do_syscall_64+0x661/0x790 [ 211.341831][ T7328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.347708][ T7328] RIP: 0033:0x7fa39e55e90e [ 211.352111][ T7328] Code: Unable to access opcode bytes at 0x7fa39e55e8e4. [ 211.359204][ T7328] RSP: 002b:00007fa39f473f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 211.367600][ T7328] RAX: fffffffffffffdfc RBX: 00007fa39f4746c0 RCX: 00007fa39e55e90e [ 211.375555][ T7328] RDX: 00007fa39f473fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 211.383521][ T7328] RBP: 00007fa39e635024 R08: 0000000000000000 R09: 0000000000000000 [ 211.391476][ T7328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.399454][ T7328] R13: 00007fa39e826038 R14: 00007fa39e825fa0 R15: 00007ffc220fb868 [ 211.407414][ T7328] [ 211.410689][ T7328] Kernel Offset: disabled [ 211.414990][ T7328] Rebooting in 86400 seconds..