last executing test programs: 15m45.046453568s ago: executing program 32 (id=322): syz_emit_ethernet(0x2e, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x81b}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 15m38.569053208s ago: executing program 2 (id=345): socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) socket(0x11, 0x2, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x7, 0x8, 0x4, 0x0, 0xa, 0x21, 0x10000000000}, &(0x7f0000000040)={0x1f, 0xfffffffffffffffd, 0x80000005, 0x0, 0xffffffffffffffe3, 0x7, 0x6}, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15m36.961087102s ago: executing program 2 (id=355): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) unlink(&(0x7f0000000140)='./cgroup\x00') ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x3ffffc, 0xa, "3eccd8000000005f060008100000000401fe00"}) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_usb_connect$uac2(0x4, 0xe5, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x763, 0x2001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd3, 0x3, 0x1, 0x2, 0x0, 0x4, {0x8, 0xb, 0x2, 0x2, 0x1, 0x0, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xf, 0x3, 0x22}, [@effect_unit={0xd, 0x24, 0x7, 0x2, 0x44c7ad00ec93a5de, 0x5, [0x3, 0x0, 0x1]}, @output_terminal={0xc, 0x24, 0x3, 0x3, 0x305, 0x0, 0x1, 0x4, 0x5aea, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x2000, 0x40, 0xe, "a867"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x7}, @as_header={0x10, 0x24, 0x1, 0x5, 0x9, 0x2, 0x4, 0x9, 0x9541, 0x4}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0xc4}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x99, 0x2, 0x5, 0x3, "19fa21", 'J'}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x6, 0x2, 0x8, "ea60063733"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x1, 0x4, 0x3, {0x8, 0x25, 0x1, 0x2, 0x33, 0xf7, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x6, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x5, 0x5, 0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0xf, 0xaa, 0x7, {0x8, 0x25, 0x1, 0x2, 0xc, 0xff, 0xfff}}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x12, 0x1, 0x12, 0xff, 0x1}, 0x73, &(0x7f0000000300)={0x5, 0xf, 0x73, 0x6, [@generic={0x35, 0x10, 0x2, "0773dc1cab6e483cf7f3acc105a56284dafc057132818632759021f943038ae9d5de0f9b2f68f55ec83c427cb37a760cf772"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0xf, 0x40, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x0, 0x8001}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "1f38147abf701f0f68a945130058c329"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xc, 0x9, 0x81}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x1, 0x8}]}, 0x1, [{0x2b, &(0x7f0000000380)=@string={0x2b, 0x3, "36fd3854a7affa1e9527f4d57a6784112642ee1aef44441b3a9fce39c5b0a89ec8e44bfb7d88a3d106"}}]}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x402) syz_emit_ethernet(0x56, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0xff, @local, @local, {[], {{0x8, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x7, 0x1, 0xff, 0x80, 0xf}]}}}}}}}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000400)={0x2c, &(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000540)={r1, &(0x7f0000000100)='\x00', 0x40000, &(0x7f0000000480)={@_ha_fsid={[0x7, 0x401]}, {0x8, 0x1, 0x4, 0x8000}}, 0x2a, &(0x7f00000004c0), &(0x7f0000000500)=0x8001}) syz_open_dev$hidraw(&(0x7f0000000000), 0x65, 0x509180) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4002) 15m36.011171444s ago: executing program 33 (id=358): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x200090c4}], 0x1, 0x40801) recvmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000100)=""/3, 0x3}], 0x1}, 0x10150) 15m34.928134291s ago: executing program 2 (id=364): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x10000008}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000400), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x170) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) readahead(r3, 0x3, 0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000b80)=[{&(0x7f0000000a40)="362cb06af354bcd2d9147e22902bd95362641f803c828980eccd4ce8ae053b1a0efff03e51c31bc2d112dad834d108dc22dfe16faf123547969941cfb5dc3678fda13764dfed5ac12c0bb6b1cc0a17"}, {&(0x7f0000000b40)="6944326325c96b0e258dc3c86974d193ec1f4e62082345e97ffb3991"}, {&(0x7f0000000ac0)="ba4c6538b894b24e7fbc82"}, {&(0x7f0000000840)="bce441350d0df56e5a5cd21f610c7bee8be980a85dca9b342e983bc45be512e7165640e0e5e16898c9badb7a7b7ea0f43ddf7452a7d53d0e329a5841418c6be249ca5c7bbcf45537b77132b21c64c5a684932a95def55bee85638e93194a213d239356bf22c89b72c148595f7fce35639b92f1f18cd23fa2ab47e13e18b5b1514112933e36e79baf68dfc6304d0bdbc50a2778d83d2db661e3460a1510072cd9c2fb7b2a3f714adefcf27b4630080bd82249d7fc719902869fb0730636af41ffae38483f59f62a1f8b"}, {&(0x7f0000000b00)="15b3973999"}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[], 0x2a, 0x0) r6 = add_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000140), &(0x7f0000000540)="d90f2a6fe0930e9ac91c8f6322dbe7ad20ecf4b99e757dcb14131ea39cde42d00492dc6b14f43fab19b66fd17971d8627eeee803e05ea87d56ac13473cd3eee061e9f13d4452bf70", 0x48, 0xfffffffffffffffd) add_key$user(&(0x7f0000000100), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000300)="13", 0x1, r6) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000005c0)={[&(0x7f0000000440)='/\x00', &(0x7f0000000480)='user\x00']}) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r7, &(0x7f0000000600)='dir .', 0x5) write(r7, &(0x7f0000000700)='bind', 0x4) write$FUSE_NOTIFY_STORE(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="2e000000060000000011af00"/33], 0x2e) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000640)}, 0x10) setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, &(0x7f0000000240)={0xffffffffffffffff, 0x4, 0x1, 0x5, @vifc_lcl_addr=@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 15m34.567751641s ago: executing program 2 (id=366): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000280)={[{@favordynmods}, {@subsystem='memory'}, {@subsystem='net'}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0/../file0/file0'}}, {@favordynmods}, {}, {@noprefix}, {@cpuset_v2_mode}], [{@context={'context', 0x3d, 'unconfined_u'}}]}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000180)='./file0\x00', 0x200) 15m34.334546474s ago: executing program 2 (id=368): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES8], 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0xc, 0x0, 0x3}]}, 0x10) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x2008000) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x2008000) mmap$dsp(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3, 0x100010, r0, 0x0) (async) mmap$dsp(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3, 0x100010, r0, 0x0) 15m31.80681755s ago: executing program 2 (id=376): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000280)={[{@favordynmods}, {@subsystem='memory'}, {@subsystem='net'}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0/../file0/file0'}}, {@favordynmods}, {}, {@noprefix}, {@cpuset_v2_mode}], [{@context={'context', 0x3d, 'unconfined_u'}}]}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x200) 15m31.473457642s ago: executing program 34 (id=376): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000280)={[{@favordynmods}, {@subsystem='memory'}, {@subsystem='net'}, {@release_agent={'release_agent', 0x3d, './file0'}}, {@release_agent={'release_agent', 0x3d, './file0/../file0/file0'}}, {@favordynmods}, {}, {@noprefix}, {@cpuset_v2_mode}], [{@context={'context', 0x3d, 'unconfined_u'}}]}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x200) 11m22.20092903s ago: executing program 4 (id=2009): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 11m22.169025303s ago: executing program 4 (id=2010): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x600, 0x0, 0x48817, 0x40103}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x30000000, 0x8}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48840}, 0x70) r0 = socket$kcm(0x29, 0x5, 0x0) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6(0xa, 0x3, 0x84) socket$inet(0x2, 0x1, 0x9) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = getpgrp(0xffffffffffffffff) syz_clone3(&(0x7f0000000140)={0x120006200, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[r2], 0x1}, 0x58) socket$kcm(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="190000000000020000000000000000411de38ed9c6b188877f820000000000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) 11m20.999546126s ago: executing program 4 (id=2015): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0xff00, 0x0, @mcast2}}}, 0x90) 11m20.836678486s ago: executing program 4 (id=2018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0) 11m20.728429868s ago: executing program 4 (id=2021): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x44001}], 0x1, 0x8040) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r4}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, r6, 0x25, 0x2, @void}, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRES16=r4], 0x114}, 0x1, 0x0, 0x0, 0x4c094}, 0x14) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000000440)=""/145, 0x91}], 0x2}, 0x40012001) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000002f00090027bd7000000000ab0b555f0004"], 0x18}, 0x1, 0x0, 0x0, 0x20042884}, 0x10) 11m20.348134283s ago: executing program 4 (id=2025): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x9100, &(0x7f0000000080)={0x81, 0x7a}, 0x20) socket$inet(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) read$FUSE(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) 11m4.917224932s ago: executing program 35 (id=2025): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x9100, &(0x7f0000000080)={0x81, 0x7a}, 0x20) socket$inet(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) read$FUSE(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r4, r3, 0x0, 0x578410eb) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) 10m54.756827638s ago: executing program 8 (id=2116): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1}, 0x4) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000400)={0x30a32c1, 0x1, @ofdm={0x5, 0x1d, 0x19, 0x3, 0x1, 0x6, 0x3}}) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4010, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r1, &(0x7f0000000080)=""/237, 0xed, 0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='acpi-thermal\x00', 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/acpi-thermal/bind\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='pcspkr\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r6, &(0x7f0000000200)='.', 0x1) mkdirat(r6, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff) 10m54.584101576s ago: executing program 8 (id=2169): syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="760a0000a200"/24], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) r0 = io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) readlink(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)=""/30, 0x1e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) waitid(0x1, r6, &(0x7f0000000300), 0x8, &(0x7f0000000380)) r7 = syz_open_dev$vcsn(&(0x7f0000000280), 0x6, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r7, &(0x7f00000002c0)={r4, r4, 0x9}) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000440)={[{@verity_off}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r8 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r8, &(0x7f00000000c0)='./file1\x00', 0x0) unlink(&(0x7f0000000180)='./file1\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) io_uring_enter(r0, 0x1203, 0x109c, 0x16, 0x0, 0xffffffffffffff02) 10m54.271943785s ago: executing program 8 (id=2174): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x0, 0xc9, 0x6}}}, 0x8) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x9, 0x3, 0x10) 10m54.167409204s ago: executing program 8 (id=2176): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb, 0x2}, 0x20) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) socket(0x2a, 0x800, 0x2e) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000180)={&(0x7f0000000140)=[0x0], 0x1, 0x40800, 0x0, 0xffffffffffffffff}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/tracing/instances/A\x00', 0x1ff) r5 = mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x2, 0x2000000, 0x12, r0, 0x20000000) syz_io_uring_setup(0x5377, &(0x7f0000000240)={0x0, 0x53a4, 0x10, 0x3, 0x310, 0x0, r4}, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r5, 0x0, r6, &(0x7f0000000440)=@IORING_OP_OPENAT={0x12, 0x1, 0x0, r2, 0x0, &(0x7f00000003c0)='./sys/kernel/tracing/instances/B/events/eprobes/my_eprobe/enable\x00', 0x2, 0x42, 0x23456}) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/tracing/instances/B\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/kernel/tracing/instances/B/events/eprobes/my_eprobe/enable\x00', 0x2, 0x0) write(r7, 0x0, 0x0) close(0xffffffffffffffff) 10m53.335666668s ago: executing program 8 (id=2179): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fsetxattr$security_capability(r2, &(0x7f0000000200), 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) close_range(r0, r1, 0x0) 10m38.266264749s ago: executing program 36 (id=2179): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fsetxattr$security_capability(r2, &(0x7f0000000200), 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) close_range(r0, r1, 0x0) 3m35.600618493s ago: executing program 1 (id=4019): socket$kcm(0x11, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$kcm(0x11, 0x3, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10}, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_TESTMODE(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)={0x354, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1000, 0x78}}}}, [@NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x35, 0x45, "0fc1e16dd0e455adf3852413cc8cda9967bd1ae351871b88c3413dc393fdecaaa04cc60f668142e78857eaa33daf5643d2"}, @NL80211_ATTR_TESTDATA={0xd5, 0x45, "59d505506a71fb33c36817228e61572d6a9c6ff214f974998ab92a1b8f7ea9028de4bfcbd1c857696a69ecd43beac83e2da6174c330895abd30e06e5370cdae6249222d8b35b1e63176a3a3bfff01913b58d7ee9889700413840e42add7d911c568a2e0e9ed16d97ee12de970eb76db5ba7ce218b4f9e24299c9efcb410480d2b1a75e3a234895b905eb5a73d8efd51929c08c57f41b7bd94ebe280518118fe9572f59ec8a3cdc0b76a911a72122da9066543005bf1f33e21e1410a1ff0b35f54b91f7d398575e12cd71cea8d92b41929a"}, @NL80211_ATTR_TESTDATA={0xb8, 0x45, "bfd088ed47aee7681aa28ddf28d7b216da751c53dc5bda1541a180830aa57ae7582a582d9cc89e4ed359e4cfb4e29668a1798c3499522a95f2edea77e77d573db87729640963e750f86db415630502b4f02ddd0b94d1a9bc29315432d4d314214bd87707a7d28a13f46fc8ab24da04ff97b2de90f23689fa14c6940ae670d331903273d39fa96ebb08514565c90020f34c714313922aad97b13b5d7aff70204234a1353aa200ce5244a8e7ba16b78018b7b4313b"}, @NL80211_ATTR_TESTDATA={0x79, 0x45, "3acbad61ccb19df6fd2b19c1f94f8a5e8a01cdfaba512b7454ffb54eaa238afce6b9fc1181f73a00eefceef4fd9ee72210b422581a724052561d385cf1e411ec237b927ff71d50efdc59a391be570fd69035d4c62f971ac3dfca68ac679658fdcff28032315ede457908f74d7ae9ebdabe6e9424c7"}, @NL80211_ATTR_TESTDATA={0xe3, 0x45, "9f0271155d1ae4d8b2544e6305fd9ec0c7717848e81431944b7d7808debca46a4992bb8dcce1efeb0ecd77cd3d55651d55e1db57bae87035cc9899dbae9d2c0cf5ab1bba7325fd28f96ed7d7fa405835f3c27a2990df6e3aed5c41f1ef0aaf1589425259e122c84f58e567e2409b9af5f8efa5a9375d0ce230244800b9f01cd0bf880a2eb486ab8d39cb75a0e9dc258e7e522893c7661b076679ff80c0c3d33cfcee77146c89742a599b434e90522323b9c8599537a298e49381f3d4ff55aa28cec4ec65b27ff5ca9a1a6036bc3dcc8a9cb1b27824ce4f065db37745022cfa"}]}, 0x354}, 0x1, 0x0, 0x0, 0x21}, 0x20000841) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060084"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc002) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r5, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x1, 0x0, 0x0, 0x2, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ba3000/0x3000)=nil, 0x3000, 0xa}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f00007d4000/0x4000)=nil, 0x4000, 0xfffffffffffffffe}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f00000002c0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 3m34.902720758s ago: executing program 1 (id=4023): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000069c0)=ANY=[@ANYBLOB="2428000041000701feffffffffdbdf25017c0000040042800c00018006000600803500000028"], 0x2824}, 0x1, 0x0, 0x0, 0x400c0c5}, 0x0) 3m34.645029027s ago: executing program 1 (id=4026): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000023c0)=ANY=[@ANYBLOB="14000000010901010e"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc854) pipe2(&(0x7f0000000040), 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r4, 0x40047452, 0xf0ff1f00000000) 3m33.731227014s ago: executing program 1 (id=4029): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000001001800000000ebff0018000000180000000200000000000000beaecfd850a95c5ed497b3007dc09c85d1d2f91100000003000000000372"], 0x0, 0x32, 0x0, 0x1}, 0x28) socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa2006e40afea14a466a4000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$SNDCTL_FM_LOAD_INSTR(0xffffffffffffffff, 0x40285107) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x200000, 0x4000000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r1, 0x0, 0xffff, 0x1, &(0x7f0000000480)='|', 0x5}) 3m33.604971873s ago: executing program 1 (id=4030): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000100)=0x10) symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) finit_module(r3, 0x0, 0x2) finit_module(r3, 0x0, 0x0) mknodat$null(r0, &(0x7f00000000c0)='./file0\x00', 0x200, 0x103) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r5 = msgget$private(0x0, 0x40) msgsnd(r5, &(0x7f0000000000)={0x3, "89f5bf4221b4eab8e298f075c26c0cee0bc1d744d03563e5105826c5b448a570e8505e081bd6e43d0fa36a526b55d54827544e2d3bf1d3aa057eab761386e4dc8e26df007aa9c6cdf0c6f2d37e0a12237de7bfbe6f6c42ec589a67618e0a27466cfd63a1b331cf52016dff5962f5b59352b2ead223b2436172b16a41dd41f20e6a6f099dbcb49ea1e4ec8568c964528b13b718a9ba38ce734ddaec68bc10f4e9d04b8c72699f9db48e778b41b19d2ce5e2133c3ec2a9812dac22e5c78992d87a3428f6565cfa7dc32dfad20fdd056f85869178e90c59a926bab2148185745f25da0e7d4593d886ec9c2b29bc522e95c2cc217622cc6728f30d7b8a99ba11a03f3ebe00d9d9f2c62bfdf1b97e2ac940fdf746c9a1564f81cfbfbdcfb23be65db7c8240c36f2ef7d4baa1b47b4debb2169d8c2918618bca2a9a2d1904055618ce9780c18195b09c9fa33232e4ca4cb261bbb0cc9921f58d3c870021bd8c918ac41ae6ee3c2a66b808d581b19569babc985c6dee6f1b567d0696e9d4de4b0f178948bbefe058aec79dd8c8a515cc6eff215178c917b99e5974075297fcc8f673366d97bbfad559320a5a76ad03b4935a0c1ec91c2ae5151d49c6e9985f6d4c5aba86f82d3f041a6e396db191eca9cd2d086859cb62d35e476bd867022d0ade6c9961130f997d025b6d5a4b71e5942096ede936ce3fa1bfa250343cb3eecbac08c0c3575f7b32d95fdc214d8bfcb60ead6c0c0aae54aa486a82edb1ece5bd41a4b4a1df4e05df84f8ee6e5c3834ef1da2ef1e622a9fae7fd989a22f9833b04ef8dbe3820ddbbb47c60f65da6ec978da1c1f678c552c8bd0f510f9fa3ecddfb1e72af117b4feb470a11b6616077dd44d506b80385b3b4f8095090e57ee1ce9e401bb2d624e702c899a5df0cd9f0b93a863aa0e8d9ec39f75d967f5b370065e2aacb803bf78d0b2560b2880667fdfed7a28bb14d99392f19978078400ecb5e46707c0dbe503376e021a3d60a6df2e7eb8959fd5b5a55f7a385075547455bfc0c8fe03af58e3a73e2d4865baa0cd8ec350072dd4d29dab4d09e9803af9120db6a36f33f2a20df4c99b9afb37ace0cf08ae6a56f1f72b4ba5daec3aae4f9a0485e38640be9b70042442249d628ad2eac61449fd1db95deedb7a1764998f94408c250ff08ff63683dd26eea34c54bb6d56999b159dfae43a923dd6f6d72e740a7a92ee100b4799e2bbb833b4e01582216a63b1c6af6da1da53bc9d9d0733113b3c4a18ccedc10bba5a47655faac2d33bf89c0aaf47568aaffbe6a4348b09c19461bc66fb2ad00f34743c058caa28a83a53108c5878d048aad64f928228a223fc71683e4391f315cdf9b9a25d9945a65670910f642eba541e8deb08a12735852a3d9641ee4bc595fdfe31c6294df99a221ecfea4f8c7870ad4587914fb84"}, 0x401, 0x0) msgctl$IPC_RMID(r5, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) statx(r6, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) r7 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000000000000010902240001000000080904005f01030000000921c1000301222800090581030002030801"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB=' \"(\x00\x00\x00('], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r9 = syz_io_uring_setup(0xef1, &(0x7f0000000440)={0x0, 0x7d00, 0x1, 0x1, 0x9b, 0x0, r1}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) io_uring_register$IORING_UNREGISTER_NAPI(r9, 0x1c, &(0x7f0000000800), 0x1) close_range(r8, 0xffffffffffffffff, 0x200000000000000) 3m30.472342412s ago: executing program 1 (id=4043): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000600)={'bridge0\x00', &(0x7f0000000580)=@ethtool_dump={0x3e, 0x7939529f, 0x5, 0x5b, "d6380091d6e761e0cec2f508f1807ab98b037767f58d5d8d5fb25993d6fbf33c0da3cbbd1909b4d7b26700679a6f68c80111884444cf7c3932f0ac53ace9cfc82d4460ce00faf6f2e8841a445b6562c7a08e7f5a4a5c46053c4b01"}}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000000f1410002dbd7000fcdbdf25080001000000000008000100010000000d0045006f70615f766e6963100000000800030000000000090045006973736d00000000080001000000000008000100010000000800010002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r2, &(0x7f0000000400)={0x50, 0x0, r3, {0x7, 0x1f, 0x2, 0xffffffffd24b2432, 0x6, 0xffff, 0x0, 0x3ff, 0x0, 0x0, 0x80, 0x8001}}, 0x50) r4 = socket(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff0000000085000000aa00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40004}, 0x94) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x42003, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1000000, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) sendto$inet(r8, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) close(r10) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000005c0)={0xa, 0x4e29, 0x0, @private2, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x25}, 0x400c041) 3m15.39700995s ago: executing program 37 (id=4043): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000600)={'bridge0\x00', &(0x7f0000000580)=@ethtool_dump={0x3e, 0x7939529f, 0x5, 0x5b, "d6380091d6e761e0cec2f508f1807ab98b037767f58d5d8d5fb25993d6fbf33c0da3cbbd1909b4d7b26700679a6f68c80111884444cf7c3932f0ac53ace9cfc82d4460ce00faf6f2e8841a445b6562c7a08e7f5a4a5c46053c4b01"}}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000000f1410002dbd7000fcdbdf25080001000000000008000100010000000d0045006f70615f766e6963100000000800030000000000090045006973736d00000000080001000000000008000100010000000800010002000000"], 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r2, &(0x7f0000000400)={0x50, 0x0, r3, {0x7, 0x1f, 0x2, 0xffffffffd24b2432, 0x6, 0xffff, 0x0, 0x3ff, 0x0, 0x0, 0x80, 0x8001}}, 0x50) r4 = socket(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff0000000085000000aa00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40004}, 0x94) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x42003, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0xff, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x2, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1000000, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) sendto$inet(r8, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) r10 = socket$kcm(0x10, 0x2, 0x4) close(r10) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000005c0)={0xa, 0x4e29, 0x0, @private2, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x25}, 0x400c041) 2m50.474764398s ago: executing program 6 (id=4163): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000001300310327bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="02470300016004001400030064756d6d7930000000000000000000001c001a8018000a801400070000000000000000000000ffffe0000001080004000900000017415f4bf88a887649c9233a73891b53fa0f0b3b7745a1d666a4bdd38d7d3135bc528da1ba413f5d44de04e81d356497be46523af191e9017330b2dc4afc078d4cb669909646d02b81675aef779c6da2b8881eb8e7712268b4734a2c5fbd4e6fe671927bcdf4e014466ea098c021093dd36bd1cad91cdef7c2909aface6b5906f37697dffbe795ff1939612f424f8d7c14578bad12fc55c2270315fbb729c6c88ea99a43f58e"], 0x58}}, 0x20040850) io_setup(0x6, &(0x7f00000000c0)=0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_async', 0x183281, 0x4) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000100)='9', 0x20000108}]) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x1, 0x1000000000000, 0x100000000}) splice(r0, &(0x7f0000000040)=0xfffffffffffffffc, r3, &(0x7f0000000200)=0x151200000, 0x3, 0x2) 2m50.209411936s ago: executing program 6 (id=4164): r0 = syz_open_dev$mtd(&(0x7f0000000040), 0x0, 0x1) ioctl$MEMGETBADBLOCK(r0, 0x40084d0b, &(0x7f0000000080)=0x75bcc001) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, &(0x7f0000000000)=0x8001) 2m50.121351378s ago: executing program 6 (id=4165): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x3}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x7) 2m49.992853407s ago: executing program 6 (id=4166): r0 = socket(0x2b, 0x4, 0x3ffffff) syz_open_dev$vim2m(&(0x7f0000000500), 0xfffe, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac3(0x5, 0xa0, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x1, './dev/mapper/control\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000006200)=[{{&(0x7f00000002c0)=@file={0x0, './dev\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000003c0)="08dfcc4180754d656f42c15f00e9cfa923f01b73151c3ee51bb32a9ebbf42279d966621944732166d1b4d2083e62ee2a3180cfaa7a68b440be4dbe5d273b6a1d7f7a947a8527d97af15bcdbbe6bcdf43dc3366a5f13c5f4249112d07cf9b1abf080537e8fe899849b3049b90225fd8e1ed7e33d24cd71dfc91edb9c5d82bf98ac247974d61e43d61517b83f76c4460c51ac0f224a7d974c22c2b4904a9736ba505828f839dd7d1f6bd461f77a129253143d2fe1d0fe71d156e9bc607dc88563db710320caab4518d5e1483adec798c429ac37fa4fb75c69fd4cb7fca", 0xdc}], 0x1, &(0x7f00000026c0)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x20004004}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x16) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000640)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) capget(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000180)={0x9, 0xab22, 0xffffff00, 0x1000, 0x87a, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000001300050026bd7000ffdbdf2507000000", @ANYRES32=r6, @ANYBLOB="00000000000000000c001a800800048004000880"], 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x20000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x8c34a34b7afd2127) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r7, 0x111, 0x4, 0x0, 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r8, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") 2m46.891747139s ago: executing program 6 (id=4179): ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, &(0x7f0000000000)) 2m46.572359801s ago: executing program 6 (id=4180): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x5, 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d12, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000140)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x1006) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1f, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x1ddb442223f98cf1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000080)={{0x2, 0x3, 0x5, 0x2, 0x1}}) 2m46.423354863s ago: executing program 9 (id=4181): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000100000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a010100000000000000000100ffff0900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000005f000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000014080002400000000308000b40000000000900010073797a30"], 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = syz_ublk_setup_io_uring(0x5df8, &(0x7f00000001c0)={0x0, 0xcd49, 0x1, 0x3, 0x322}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) r2 = io_uring_setup(0xf71, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x7, 0xc5, 0x0, r1}) io_uring_enter(r2, 0x2219, 0x1adf, 0x16, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0xc, 0x0, 0xfec00000, 0x0, &(0x7f0000000000/0x1000)=nil}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000100)={0x0, &(0x7f0000000000)=[@code={0xa, 0x18, {"b80000c0fe3acb80"}}], 0xd3}) ioctl$KVM_RUN(r6, 0xae80, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000040), &(0x7f00000000c0)=ANY=[], 0xe3, 0x2) mbind(&(0x7f0000000000/0x1000)=nil, 0xffffffffffffe000, 0x0, &(0x7f0000000000), 0x1b2, 0x0) 2m45.228117201s ago: executing program 9 (id=4183): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x70067ad984724e88, &(0x7f0000000380)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f0000000000)) bpf$MAP_LOOKUP_ELEM(0x4, 0x0, 0x0) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd41, &(0x7f0000000bc0)={@multicast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, '?5\b', 0xd07, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0xb, 0x6, "821276", 0x5, 0x2c, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, [@routing={0x3a, 0x0, 0x2, 0x4}], "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"}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$hidraw(&(0x7f0000000100), 0x3, 0x2000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) r6 = inotify_init() r7 = io_uring_setup(0x7a17, &(0x7f00000003c0)={0x0, 0x5ca3, 0x80, 0x0, 0xc1}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000440)={0x48, r6, 0x1, {0x1, 0xdc64}, 0xff}, 0x1) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) socket$pppl2tp(0x18, 0x1, 0x1) 2m44.561638943s ago: executing program 9 (id=4185): ioctl$MEMGETBADBLOCK(0xffffffffffffffff, 0x40084d0b, &(0x7f0000000080)=0x75bcc001) 2m44.368155401s ago: executing program 9 (id=4187): syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setns(0xc9, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNADDRESOURCE(r0, 0x89ee, 0x0) ioctl$SIOCPNADDRESOURCE(r0, 0x89ee, &(0x7f0000000200)=0x1) 2m43.119651918s ago: executing program 9 (id=4191): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002ebd700e000600001400000018000180140002006e657464657673696d30000000000000050019000000000308001500f1ffff01050018"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f00001f7000/0x1000)=nil, 0x1000, 0x0) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000140)=0x10000008, 0x4) (async) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x5, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4041) (async) sendto$packet(r6, &(0x7f0000000340)="05036d1ee8fe091c6202a0ffffffff00600312000000892f143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x4010, 0xffffffffffffffff, 0xa39ce000) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) write$tun(r1, &(0x7f0000000380)=ANY=[], 0xfdef) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x1013c1) ioctl$USBDEVFS_CONNECTINFO(r8, 0x80045503, &(0x7f0000000280)) (async) epoll_create1(0x80000) (async) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r9 = fsmount(r2, 0x0, 0x2) (async) r10 = syz_clone(0x81000, 0x0, 0xfffffffffffffdc0, 0x0, 0x0, 0x0) setpgid(r10, r10) setpgid(0x0, r10) (async) fchdir(r9) 2m42.83452305s ago: executing program 9 (id=4193): epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mlockall(0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000280)={0x9c0000, 0x6, 0x800, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x990902, 0x0, '\x00', @p_u8=&(0x7f0000000100)=0x10}}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x52, 0xffffffffffffffff, &(0x7f0000000000)=0xa) r4 = semget(0x2, 0x3, 0x33a) semtimedop(r4, 0x0, 0x0, 0x0) semctl$GETVAL(r4, 0x2, 0xc, 0x0) mount$fuseblk(&(0x7f0000000040), 0x0, &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000240)='ubifs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10402, 0x89) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000340)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r6, 0x541c, &(0x7f0000000000)) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f6003e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) 2m31.116824176s ago: executing program 38 (id=4180): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x5, 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d12, 0x0) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000140)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x1006) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1f, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x1ddb442223f98cf1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000080)={{0x2, 0x3, 0x5, 0x2, 0x1}}) 2m29.324647398s ago: executing program 3 (id=4216): socket$key(0xf, 0x3, 0x2) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa1000751) close(0x3) syz_clone(0x253f5a00, 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000000)="10f8658fdba299d983e319c4505f9a0b0509cb9b06e720fbad") open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x6, 0xff}, 0x50) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x80100) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, 0x0) 2m28.38230196s ago: executing program 7 (id=4218): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0xc040) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c000280050001000000000018"], 0x50}}, 0x200040d1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001"], 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0xc0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_clone3(&(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0}}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001c00)=ANY=[@ANYBLOB="28040000", @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3], 0x428}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) sched_setscheduler(r4, 0x3, &(0x7f0000000100)=0x5) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x814) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x4, 0x8, 0x4, 0x2, 0x10000005, 0xfff, 0x2}}, {0x8, 0x2, [0x3a, 0x0]}}, {{0x1c, 0x1, {0x2, 0x1, 0x3, 0x3, 0x2, 0x3, 0x8, 0x2}}, {0x8, 0x2, [0x9, 0x10]}}]}]}, 0x70}}, 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) 2m27.605472937s ago: executing program 3 (id=4220): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r1, 0x0, &(0x7f00002ce000/0x4000)=nil, 0x4000, 0x1020800}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, 0x0, 0x71) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/ports/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r3, &(0x7f0000000c00)='tcp', 0x3) write(0xffffffffffffffff, &(0x7f0000000e00)="02200000", 0x4) 2m27.433637059s ago: executing program 39 (id=4193): epoll_create1(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mlockall(0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000280)={0x9c0000, 0x6, 0x800, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x990902, 0x0, '\x00', @p_u8=&(0x7f0000000100)=0x10}}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x52, 0xffffffffffffffff, &(0x7f0000000000)=0xa) r4 = semget(0x2, 0x3, 0x33a) semtimedop(r4, 0x0, 0x0, 0x0) semctl$GETVAL(r4, 0x2, 0xc, 0x0) mount$fuseblk(&(0x7f0000000040), 0x0, &(0x7f00000000c0), 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000240)='ubifs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10402, 0x89) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCOUTQ(r5, 0x5411, &(0x7f0000000340)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r6, 0x541c, &(0x7f0000000000)) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f6003e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) 2m27.008228465s ago: executing program 3 (id=4222): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x5, 0x0, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d12, &(0x7f00000000c0)=0x7) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000140)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1f, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "be45f415d19a877b", "53a8e8ba641839da93589ef68e3aace9", "d6c25a50", "12b78d5d9ab7ce57"}, 0x28) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x1ddb442223f98cf1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000080)={{0x2, 0x3, 0x5, 0x2, 0x1}}) 2m27.007498939s ago: executing program 7 (id=4223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}}, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) r2 = syz_ublk_setup_io_uring(0x7de7, &(0x7f0000000300)={0x0, 0xfe9c, 0x400, 0x1, 0x38c}, &(0x7f0000000380), &(0x7f0000000440), &(0x7f0000000400)) mmap$IORING_OFF_SQ_RING(0x0, 0x90630, 0x2000008, 0x2010, r2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_newrule={0x44, 0x20, 0x400, 0x4, 0x25dfdbfd, {0xa, 0x80, 0x14, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc}, [@FRA_DST={0x14, 0x1, @local}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x54) 2m26.239833737s ago: executing program 7 (id=4225): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x1) write$binfmt_aout(r0, &(0x7f00000029c0)=ANY=[@ANYBLOB="0b01"], 0x8ad) rmdir(&(0x7f0000000040)='./file1\x00') chdir(&(0x7f0000000000)='./bus\x00') unlink(&(0x7f0000000100)='./file0\x00') 2m25.822838303s ago: executing program 5 (id=4226): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000bd7000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="0c0099000200000025000000080026006c0900000800a0006c090000080027"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) 2m25.282323784s ago: executing program 3 (id=4227): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x2, 0x6, @local}, 0x14) syz_emit_ethernet(0x2e, &(0x7f0000000040)={@random="e90c610faca2", @empty, @val={@void, {0x8100, 0x4, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @local}, {0x0, 0x0, 0x8}}}}}, 0x0) 2m25.055850933s ago: executing program 7 (id=4228): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x11d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x5, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xc1, 0xfe, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x39, 0xc8, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0xa2145bb0cd7033f3, 0x24, 0x28, {0x28, 0x30, "5581e484d8034bdfcfa8dd2f6c76f2ed5870d0581ead2af8b4cf19e5e1573a3dc52f75b7e331"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0xa, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000280)='cpu.pressure\x00', 0x2, 0x0) ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000000480)={r3, &(0x7f00000002c0)='$[-\x00', 0x400100, &(0x7f0000000340)={@align=0x7ff, {0xc, 0x5, 0x0, 0x34}}, 0x7ff, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x5}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x9, 0x4}, 0x2, 0x401a, &(0x7f00000021c0)={{0x6, 0x2, 0x5, 0x40}}, 0x3317, 0x0, 0x8}}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc8836da6a016da2b, 0x13, r2, 0x3c66000) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x24, r4, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x24}}, 0x18) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x48, r7, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff8001}]}]}]}, 0x48}}, 0x400c040) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000300)) 2m24.944238013s ago: executing program 5 (id=4229): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000002280)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000000201010100000000000000000200000814001980"], 0x28}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000100)=r0, 0x4) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x6}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0xc0884113, &(0x7f0000000740)={0x0, 0x7, 0x6a, 0x10001, 0x0, 0x9, 0xd94, 0x0, 0x0, 0x10000009, 0xff7ffffb, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r8, 0xc06c4124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @remote}, {0x2, 0x4e22, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r10, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r10, 0xfffffffffffffffe, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 2m24.611466551s ago: executing program 3 (id=4230): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r1, 0x0, &(0x7f00002ce000/0x4000)=nil, 0x4000, 0x1020800}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r2, 0x0, 0x71) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/ports/1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r3, &(0x7f0000000c00)='tcp', 0x3) write(0xffffffffffffffff, &(0x7f0000000e00)="02200000", 0x4) 2m23.847103413s ago: executing program 3 (id=4231): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) r1 = socket(0x2, 0x1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x5400004) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000100, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="00010004000184000c3600"/29], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f00000000c0), 0x5005) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_WAITACTIVE(r6, 0x5607) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "00e1ffffff00", "5985e81ad0d9585bc175cbecd3f55eb699e3ee0bc206f3ba527c85bde06fbf19", '\x00', '\x00\x00\x00\f\x00'}, 0x38) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x4, 0x0, 0x0) 2m23.404365015s ago: executing program 5 (id=4232): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x4) unshare(0x600) r1 = epoll_create1(0x80000) r2 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) signalfd4(r2, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r3 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x73}, 0x94) quotactl_fd$Q_SYNC(r3, 0xffffffff80000101, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f}}, 0x20}}, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000100001040000000000000000000000000000000000000000000000010000000000000000000000000000000012341234000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000000000000000001000004d23300000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000352f4506000400000000000000000000000000000000000000000000000000000000000000ffffffff0a00000000000000000000004c001400686d616328736861312900000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000194800020063686163"], 0x184}}, 0x0) 2m21.863067089s ago: executing program 7 (id=4233): r0 = socket(0x11, 0x3, 0x300) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bind$llc(r1, &(0x7f0000000140)={0x1a, 0x0, 0xfe, 0x0, 0x2, 0x9}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000200)="01ff07000000000000000000892f", 0xe, 0x8c0, &(0x7f0000000080)={0x11, 0xf8, r3, 0x0, 0x0, 0x0}, 0x14) 2m21.777422834s ago: executing program 5 (id=4234): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/nullb0/queue/rotational\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1\n', 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000140)={0x9d0000, 0x8, 0x80000000, r1, 0x0, &(0x7f00000000c0)={0x9909de, 0x2, '\x00', @p_u32=&(0x7f0000000080)=0x4}}) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x4, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x12, 0x8, 0x6c4b, 0x1, 0x1000, 0xfffffffffffffffa, 0x7, 0x2}, 0x0) 2m21.069992026s ago: executing program 5 (id=4235): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="2f1c0600ff001b0000"], 0x44}}, 0x24008880) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f40100000026aae1cad7e0054a863f3d5cfe6cb55b5bb9fa6935849e010000004e7cb51726b360fbb37b4f", 0x45}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433", 0x3b}], 0x2}], 0x1, 0x40800) mknod$loop(&(0x7f0000000280)='./file0\x00', 0x2480, 0x1) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000400)='ubifs\x00', 0x1808004, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) 2m20.576415083s ago: executing program 7 (id=4236): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7e) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x12, r1, 0x100000000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0xaa, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m20.347349111s ago: executing program 5 (id=4237): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x24008041}, 0x10000800) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time\x00') ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) close(0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000140)="ec", 0x1}], 0x1, 0x9, 0x26d0d5f1) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000000)=0x8, 0x4) mount(&(0x7f0000002200)=@rnullb, 0x0, &(0x7f0000002280)='ecryptfs\x00', 0x40, &(0x7f00000022c0)='&-\\/[/@\'.(\x00') r2 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000002600)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x5, 0x3a, 'nl80211\x00', 0x3a, '\x00', 0x3a, './file0'}, 0x30) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) 2m8.350304785s ago: executing program 40 (id=4231): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, 0x0) r1 = socket(0x2, 0x1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x5400004) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40000100, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="00010004000184000c3600"/29], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f00000000c0), 0x5005) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_WAITACTIVE(r6, 0x5607) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "00e1ffffff00", "5985e81ad0d9585bc175cbecd3f55eb699e3ee0bc206f3ba527c85bde06fbf19", '\x00', '\x00\x00\x00\f\x00'}, 0x38) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x4, 0x0, 0x0) 2m5.320454013s ago: executing program 41 (id=4236): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7e) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x12, r1, 0x100000000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0xaa, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m4.711188029s ago: executing program 42 (id=4237): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002080)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x2}, 0x14}, 0x1, 0x0, 0x0, 0x24008041}, 0x10000800) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/time\x00') ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) close(0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000140)="ec", 0x1}], 0x1, 0x9, 0x26d0d5f1) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000000)=0x8, 0x4) mount(&(0x7f0000002200)=@rnullb, 0x0, &(0x7f0000002280)='ecryptfs\x00', 0x40, &(0x7f00000022c0)='&-\\/[/@\'.(\x00') r2 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000002600)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x5, 0x3a, 'nl80211\x00', 0x3a, '\x00', 0x3a, './file0'}, 0x30) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) 17.307696092s ago: executing program 0 (id=4276): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) r1 = syz_io_uring_setup(0x7463, &(0x7f0000000540)={0x0, 0xd127, 0x800, 0x3, 0x2083, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/73, 0x49}], 0x1) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000002c0)={0x38, &(0x7f0000000040)=[{0x3d, '\x00', @data, 0x4db6}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_SETXATTR={0x2a, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f", 0xa}], 0x1}, 0x40000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f00000024c0)={'filter\x00', 0x0, 0x3, 0xf9, [0x0, 0x4, 0x0, 0x6, 0x0, 0x3], 0x5, &(0x7f0000002340)=[{}, {}, {}, {}, {}], &(0x7f00000023c0)=""/249}, &(0x7f0000002540)=0x78) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0x2040) read$FUSE(r6, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000002240)=""/222) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00'], 0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000002580)=0x1) 15.055061153s ago: executing program 0 (id=4277): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x4, 0xc4}, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)) r0 = getpid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/pid_for_children\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001b00)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000940)=[{&(0x7f0000000440)=""/205, 0xcd}, {&(0x7f0000000540)=""/202, 0xca}, {&(0x7f0000000640)=""/167, 0xa7}, {&(0x7f0000000700)=""/66, 0x42}, {&(0x7f0000000780)=""/151, 0x97}, {&(0x7f0000000840)=""/22, 0x16}, {&(0x7f0000000880)=""/34, 0x22}, {&(0x7f00000008c0)=""/72, 0x48}], 0x8, &(0x7f00000009c0)=""/90, 0x5a}, 0x7}, {{&(0x7f0000000a40)=@rc, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/101, 0x65}], 0x1, &(0x7f0000000b80)=""/101, 0x65}, 0x3}, {{&(0x7f0000001540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000cc0)=""/62, 0x3e}, {&(0x7f0000000d00)=""/7, 0x7}, {&(0x7f0000000d40)=""/118, 0x76}, {&(0x7f0000001d40)=""/216, 0xd8}, {&(0x7f0000000ec0)=""/16, 0x10}, {&(0x7f0000000f00)=""/130, 0x82}, {&(0x7f0000000fc0)=""/170, 0xaa}, {&(0x7f0000001080)=""/215, 0xd7}], 0x8}, 0x1}, {{&(0x7f0000001200)=@can, 0x80, &(0x7f0000001800)=[{&(0x7f0000001280)=""/255, 0xff}, {&(0x7f0000001380)=""/42, 0x2a}, {&(0x7f00000013c0)=""/145, 0x91}, {&(0x7f0000001480)=""/177, 0xb1}, {&(0x7f0000001c40)=""/200, 0xc8}, {&(0x7f0000001640)=""/163, 0xa3}, {&(0x7f0000001700)=""/195, 0xc3}], 0x7}, 0x8}, {{&(0x7f0000001880)=@generic, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001900)=""/184, 0xb8}, {&(0x7f00000019c0)=""/130, 0x82}], 0x2, &(0x7f0000001ac0)=""/23, 0x17}, 0x1}], 0x5, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r5, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}}, 0x0) syz_io_uring_setup(0x44f6, &(0x7f0000004fc0)={0x0, 0xa4e0, 0x1000, 0x0, 0x155}, &(0x7f0000005040), &(0x7f0000005080), 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_vhci(&(0x7f0000001e40)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{}, {0x0, [{@none, 0x6, 0x5, "09ab60", 0x9, 0x0, "ea958353dfd93ef83529fda9dcdb05fce78643216ec7d8ce9ea9700091c1e8f8f42339f7742ac9ac3a0ed7cef868c2e0d3cc317bc87dddb8c0cefc00f64cc546007a2916211d425cafe3b6ab9a53fa14b204e8311e5738a86cce7d3c0b5d4021b9dcdd867550f5d7bfdceb42bd49867bf8f84825911ba89f37f79fcde907ab7807703e8030a2302df132a9d16894ff16758310bd1de0184b99367a46b4acd87377f3c839bbefc1a09a2a6715362ca1738d1ff3da52da33ad82f0643533257920a0e59cc26e5f135f4674bb319e3fc10da634d93867c05f412032e3335438c13e02038dca02a31cff86806b91f2d3e20d"}, {@any, 0x25, 0x7, "ae5e90", 0x6, 0x16, "6a201344f935dd6c1de14e6f2c643835fd1e10f2d9f1b8da30b8fc04a40ec4998d44f6649a7c6db0fd3c05c9907c12655655d5c5b4264ea4670b268e2801119684dbc0fa11da5d54445780c9be149d2ddc3d66ebb627e69781641035b80a13092f654568c54adcae943cb03a328aaf9146e00af0b9e45d6a82ce1d4de30897ced919b89b4b71fc064b547968fe0c9475a5da09faa387451cdaf99b39bcb26053fae06108a9d98d8dde4b326e906da283f166b68deaf202b5d67e9a2e050b664b38a8d55f7d6fa184d16c341e869d26f037d5e16bfac1724621e9b833d7a18484c3b75297dadf2ad5318f5fad027b059a"}]}}}, 0x2) setsockopt(r6, 0x84, 0x9, &(0x7f0000002040)="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", 0x23d) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r10, 0x84, 0x19, &(0x7f0000000040)={0x0, 0x3}, 0x8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r4) 13.04308415s ago: executing program 0 (id=4278): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_QUEUE_FLAGS={0x6}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dummy\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) write(r2, &(0x7f0000001400)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./config/nullb/nullb2/zoned\x00', 0x2, 0x0) write(r4, &(0x7f0000002500)='1\n', 0x2) 11.83539693s ago: executing program 0 (id=4279): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = fsopen(&(0x7f0000000140)='debugfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xa, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000700)="b9d5e01a991e924ccc78cbc0a3ba", 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = fsmount(r0, 0x0, 0xd) fchdir(r4) r5 = open(&(0x7f0000000000)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x8080, 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) lseek(r5, 0xed7, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000080)=ANY=[@ANYRESOCT=r3, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) sendmsg$kcm(r8, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) socket$tipc(0x1e, 0x5, 0x0) sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000380)="d22208d9c2978888ca8d8b0088a8", 0x0, 0xc000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.19806676s ago: executing program 0 (id=4280): gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000640)="36400678700c9f3c2b91fbb27615fae49af3baf5e951a5b00a66ffe083d0b3ca4aace094d73e6beef642e8d565efb65cf44306623933d857405cfe10eeb08a9cf41bd2539453203e9b18a093640e56c2647c96c8b34b581400a4adb562b80513e79025774c940af3957fa160cf571b8724817f4693a16eb2157fe30c1c937c07b3ea0a9fc7ef84afc688f225f3e0c8da1707946b200514d9ccfe9ca7b76f6c93750c67f135bbec4bc154", &(0x7f0000000440)="1b78e24490a8ac62cded907db778e78fed2c8ad2ac35387997aa1f193e14601386ad3d597cd49fd97d5a77968be09035317fe8f635f4b9ffa18c417700adf54a7e63317b61540ede38e2d51fe911e54d17c6d14c6bac322f3c0a6e7116660dbf6ee25bf16487d0fb904914f24748daab4fc64e2b4ba46b62cf5b28292b2fc971c16e79c44e31d682eed6e7484cede67425786ad7f603087bd76c63b58248722ec3bdd9def4f899ac161edd889c1007f3da68218fd4e4925222b584efd884c401d853435929"}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3b1ac372, 0x5}) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r1, 0x1, 0x52, &(0x7f0000000040)=0x92c, 0x4) recvmmsg(r1, &(0x7f0000002400)=[{{0x0, 0x0, 0x0}, 0xfff}], 0x1, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/platform/drivers/vimc/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='vimc.0', 0x6) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xa00, 0x280, 0x1000, 0x40, 0x1, 0x0, {0x0, 0x9}, {0x350, 0x2bfbd6c1, 0xfffffffd}, {0xf4ef, 0xf}, {0x4, 0x2, 0x7fe}, 0x2, 0x1a0, 0xfffffffd, 0xd614, 0x0, 0xe61, 0x35, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3c, 0x2, 0x2, 0x8}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x0, 0x4, 0x4, 0x1000, &(0x7f000027c000/0x1000)=nil}) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfd, 0x8000000}, 0x3f) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x6, &(0x7f0000006680)) openat(0xffffffffffffff9c, 0x0, 0x2d41, 0x6) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 0s ago: executing program 0 (id=4281): r0 = socket(0x26, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000bc0)=@mangle={'mangle\x00', 0x2, 0x6, 0x5d0, 0x1d8, 0xf8, 0x1d8, 0xf8, 0xf8, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv_slave_0\x00', {}, {0xff}, 0x2b, 0x5, 0x1, 0x18}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000010000000}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}, {}, {}, 0x222}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xff], [0xffffff00, 0x0, 0xff], '\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x1], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0x0, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@mcast1, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'hsr0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x3c, r3, 0x2799f5eec7981083, 0x70bd23, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x3c}}, 0x80) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000ff020002000a00000800040001000000", 0x24) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) preadv(r5, &(0x7f0000000480)=[{&(0x7f0000000140)=""/20, 0x14}], 0x2f, 0x0, 0x10000) r6 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0x8000) ioctl$VIDIOC_S_PARM(r6, 0xc0cc5616, &(0x7f0000000180)={0x1, @capture={0x0, 0x1, {0x7c4}, 0xe, 0x4}}) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) readv(r7, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/242, 0xf2}, {&(0x7f00000005c0)=""/7, 0x7}, {&(0x7f0000000600)=""/40, 0x28}], 0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) kernel console output (not intermixed with test programs): device number 58 using dummy_hcd [ 896.918973][T12175] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 896.926984][T20264] usb 10-1: new full-speed USB device number 55 using dummy_hcd [ 896.961295][ T413] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.047019][ T413] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.072131][T20264] usb 10-1: device descriptor read/64, error -71 [ 897.093679][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 897.107365][ T5727] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 897.125500][ T10] usb 6-1: not running at top speed; connect to a high speed hub [ 897.142455][T13836] usb 8-1: new full-speed USB device number 69 using dummy_hcd [ 897.152913][ T5727] snd-usb-audio 7-1:5.0: probe with driver snd-usb-audio failed with error -22 [ 897.177383][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 897.203165][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 897.237267][ T10] usb 6-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 897.265856][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.297147][ T10] usb 6-1: Product: syz [ 897.305575][ T5727] usb 7-1: 2:1 : can't get High Capability descriptor [ 897.312660][T13836] usb 8-1: device descriptor read/64, error -71 [ 897.321687][T20264] usb 10-1: new full-speed USB device number 56 using dummy_hcd [ 897.329525][ T10] usb 6-1: Manufacturer: syz [ 897.351291][ T10] usb 6-1: SerialNumber: syz [ 897.492081][T20264] usb 10-1: device descriptor read/64, error -71 [ 897.532692][ T5727] usb 7-1: USB disconnect, device number 52 [ 897.571798][T13836] usb 8-1: new full-speed USB device number 70 using dummy_hcd [ 897.609429][ T10] usb 6-1: 3:0: failed to get current value for ch 1 (-71) [ 897.643971][T20264] usb usb10-port1: attempt power cycle [ 897.656046][ T10] usb 6-1: 3:0: cannot get min/max values for control 5 (id 3) [ 897.666692][ T413] bridge_slave_1: left allmulticast mode [ 897.686339][ T413] bridge_slave_1: left promiscuous mode [ 897.705996][ T413] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.716338][ T10] usb 6-1: 3:0: cannot get min/max values for control 5 (id 3) [ 897.740509][ T413] bridge_slave_0: left allmulticast mode [ 897.751606][T13836] usb 8-1: device descriptor read/64, error -71 [ 897.766092][ T413] bridge_slave_0: left promiscuous mode [ 897.778961][ T10] usb 6-1: USB disconnect, device number 58 [ 897.806856][ T413] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.883403][T13836] usb usb8-port1: attempt power cycle [ 898.001690][T20264] usb 10-1: new full-speed USB device number 57 using dummy_hcd [ 898.014901][ T29] audit: type=1400 audit(1786542396.183:5205): avc: denied { write } for pid=21340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 898.347630][T20264] usb 10-1: device not accepting address 57, error -71 [ 898.831618][ T5617] Bluetooth: hci2: command tx timeout [ 899.487966][T21364] vxcan0: tx address claim with dlc 0 [ 899.498066][ T29] audit: type=1400 audit(1786542397.663:5206): avc: denied { write } for pid=21354 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 900.476549][ T29] audit: type=1400 audit(1786542397.663:5207): avc: denied { write } for pid=21363 comm="syz.5.4121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 900.734687][ T413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.810519][ T413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.911594][ T5617] Bluetooth: hci2: command tx timeout [ 901.209319][T12171] net_ratelimit: 135 callbacks suppressed [ 901.209334][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 901.502362][ T413] bond0 (unregistering): Released all slaves [ 901.790046][ T29] audit: type=1400 audit(1786542399.963:5208): avc: denied { connect } for pid=21373 comm="syz.6.4123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 901.833650][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 901.861934][T21392] Invalid source name [ 901.873490][T21394] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input46 [ 901.924150][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 902.012834][T12177] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 902.034158][ T5273] 8021q: adding VLAN 0 to HW filter on device eth21 [ 902.071712][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 902.142000][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 902.193151][T12178] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 902.212412][T21391] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 902.240755][T21391] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 902.292565][T21391] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 902.331885][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 902.380640][T12933] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 902.389053][T21391] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 902.562416][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 902.721548][ T5344] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 902.932829][ T5344] usb 8-1: Using ep0 maxpacket: 32 [ 902.977588][ T5344] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 903.063896][ T5344] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 903.165498][ T5344] usb 8-1: config 0 interface 0 has no altsetting 0 [ 903.213173][ T10] usb 7-1: new low-speed USB device number 53 using dummy_hcd [ 903.240076][ T5344] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 903.274392][ T413] hsr_slave_0: left promiscuous mode [ 903.301389][ T5344] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.321037][ T413] hsr_slave_1: left promiscuous mode [ 903.353177][ T413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.370512][ T5344] usb 8-1: Product: syz [ 903.400724][ T5344] usb 8-1: Manufacturer: syz [ 903.422082][ T413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.439188][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 903.458603][ T5344] usb 8-1: SerialNumber: syz [ 903.494245][ T413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.503416][ T10] usb 7-1: config 0 has no interfaces? [ 903.511707][ T5344] usb 8-1: config 0 descriptor?? [ 903.548058][ T10] usb 7-1: string descriptor 0 read error: -22 [ 903.567031][ T413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.577532][ T29] audit: type=1400 audit(1786542401.763:5209): avc: denied { checkpoint_restore } for pid=21426 comm="syz.5.4133" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 903.624382][ T10] usb 7-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=72.1e [ 903.662928][T21428] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4133'. [ 903.690393][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.735223][ T413] veth1_macvtap: left promiscuous mode [ 903.761255][ T10] usb 7-1: config 0 descriptor?? [ 903.777930][ T29] audit: type=1326 audit(1786542401.923:5210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21395 comm="syz.7.4127" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4cf59e0d9 code=0x0 [ 903.818996][ T413] veth0_macvtap: left promiscuous mode [ 903.856869][ T413] veth1_vlan: left promiscuous mode [ 903.885137][ T413] veth0_vlan: left promiscuous mode [ 903.953757][ T29] audit: type=1400 audit(1786542401.933:5211): avc: denied { write } for pid=21409 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 904.079684][ T10] usb 7-1: USB disconnect, device number 53 [ 904.134323][ T29] audit: type=1400 audit(1786542402.213:5212): avc: denied { write } for pid=21434 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 904.272304][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 904.278457][ T5625] Bluetooth: hci4: command 0x0c1a tx timeout [ 904.592088][ T5344] gs_usb 8-1:0.0: Couldn't send data format (err=-110) [ 904.634797][ T5344] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -110 [ 904.807367][ T413] team0 (unregistering): Port device team_slave_1 removed [ 904.888899][ T413] team0 (unregistering): Port device team_slave_0 removed [ 904.899930][T20264] usb 8-1: USB disconnect, device number 72 [ 905.012684][ T5344] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 905.209247][ T5344] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 905.264786][ T5344] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.303768][ T29] audit: type=1400 audit(1786542403.483:5213): avc: denied { create } for pid=21440 comm="syz.7.4135" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 905.348137][ T5344] usb 7-1: Product: syz [ 905.361894][ T5273] 8021q: adding VLAN 0 to HW filter on device eth22 [ 905.385852][ T5344] usb 7-1: Manufacturer: syz [ 905.405393][ T5344] usb 7-1: SerialNumber: syz [ 905.440574][T21443] syz_tun: entered allmulticast mode [ 905.474666][T21443] syz_tun: left allmulticast mode [ 905.893934][T20264] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 905.904280][T21282] bridge0: port 1(bridge_slave_0) entered blocking state [ 905.932655][ T5344] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 905.948108][T21282] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.972028][T21459] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4139'. [ 906.119810][T21282] bridge_slave_0: entered allmulticast mode [ 906.149556][T21282] bridge_slave_0: entered promiscuous mode [ 906.190737][T21282] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.228696][T12933] net_ratelimit: 153 callbacks suppressed [ 906.228709][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 906.245467][T20264] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 906.274042][T21282] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.308544][T20264] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 906.354376][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 906.381926][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 906.391101][T21282] bridge_slave_1: entered allmulticast mode [ 906.425175][T21282] bridge_slave_1: entered promiscuous mode [ 906.437494][T20264] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.458265][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 906.499459][T20264] usb 8-1: config 0 descriptor?? [ 906.531255][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 906.617872][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 906.641089][T21282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 906.681826][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 906.696587][T21282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 906.731629][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 906.792110][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 906.839848][T21282] team0: Port device team_slave_0 added [ 906.871529][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 906.906139][T21282] team0: Port device team_slave_1 added [ 906.934712][T21475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 906.961612][T12177] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 907.014958][T21475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.037305][ T29] audit: type=1400 audit(1786542405.203:5214): avc: denied { write } for pid=21460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 907.081044][T21282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.145071][T21282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.197865][T20264] usbhid 8-1:0.0: can't add hid device: -71 [ 907.224995][T20264] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 907.288954][T20264] usb 8-1: USB disconnect, device number 73 [ 907.316207][ T29] audit: type=1400 audit(1786542405.493:5215): avc: denied { write } for pid=21480 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 907.351149][T21282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.449358][T21282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 907.486808][T21282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.644759][T21282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 907.717790][ T5273] 8021q: adding VLAN 0 to HW filter on device eth23 [ 907.731606][T20264] usb 8-1: new full-speed USB device number 74 using dummy_hcd [ 907.745470][T21484] overlayfs: missing 'lowerdir' [ 907.879221][T21282] hsr_slave_0: entered promiscuous mode [ 907.902732][T20264] usb 8-1: config 8 has an invalid interface number: 177 but max is 0 [ 907.912687][T21282] hsr_slave_1: entered promiscuous mode [ 907.926220][ T29] audit: type=1400 audit(1786542406.093:5216): avc: denied { bind } for pid=21483 comm="syz.9.4141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 907.949917][T20264] usb 8-1: config 8 has no interface number 0 [ 907.965161][T21282] debugfs: 'hsr0' already exists in 'hsr' [ 907.987432][T20264] usb 8-1: config 8 interface 177 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 908.014475][T21282] Cannot create hsr debugfs directory [ 908.065945][T20264] usb 8-1: config 8 interface 177 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 908.079312][ T29] audit: type=1400 audit(1786542406.093:5217): avc: denied { listen } for pid=21483 comm="syz.9.4141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 908.138106][T20264] usb 8-1: config 8 interface 177 has no altsetting 0 [ 908.162783][ T5344] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 908.176762][ T413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 908.189283][T20264] usb 8-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 908.205626][ T5344] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 908.221734][ T29] audit: type=1400 audit(1786542406.093:5218): avc: denied { connect } for pid=21483 comm="syz.9.4141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 908.246903][ T413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.295752][T20264] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.318473][ T5344] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 908.347257][ C0] ir_toy 8-1:8.177: out urb status: -71 [ 908.371619][T13835] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 908.397994][ T5344] usb 7-1: USB disconnect, device number 54 [ 908.432294][ T5625] Bluetooth: hci2: command 0x0c1a tx timeout [ 908.541750][T13835] usb 10-1: Using ep0 maxpacket: 32 [ 908.562505][T13835] usb 10-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 908.601128][T13835] usb 10-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 908.677196][T13835] usb 10-1: config 0 interface 0 has no altsetting 0 [ 908.697938][T13835] usb 10-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 908.738348][T13835] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.801816][T13835] usb 10-1: config 0 descriptor?? [ 908.851730][T20264] ir_toy 8-1:8.177: could not write reset command: -110 [ 908.900723][T20264] ir_toy 8-1:8.177: probe with driver ir_toy failed with error -110 [ 908.976768][T20264] usb 8-1: USB disconnect, device number 74 [ 909.011107][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 909.011119][ T29] audit: type=1400 audit(1786542407.183:5220): avc: denied { write } for pid=21491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 909.299423][ T29] audit: type=1400 audit(1786542407.253:5221): avc: denied { setopt } for pid=21505 comm="syz.6.4145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 909.476228][ T29] audit: type=1400 audit(1786542407.263:5222): avc: denied { ioctl } for pid=21505 comm="syz.6.4145" path="socket:[86975]" dev="sockfs" ino=86975 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 909.643706][T20264] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 909.653589][ T29] audit: type=1400 audit(1786542407.583:5223): avc: denied { write } for pid=21487 comm="syz.9.4142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 910.573739][ T29] audit: type=1400 audit(1786542407.603:5224): avc: denied { write } for pid=21517 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 910.621962][T20264] usb 8-1: device descriptor read/64, error -71 [ 911.232665][T12174] net_ratelimit: 129 callbacks suppressed [ 911.232680][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 911.530850][ T5273] 8021q: adding VLAN 0 to HW filter on device eth24 [ 911.544779][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 911.564812][T13835] usbhid 10-1:0.0: can't add hid device: -71 [ 911.618033][T12174] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 911.626787][T13835] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 911.640227][T21527] Invalid source name [ 911.712672][T13835] usb 10-1: USB disconnect, device number 59 [ 911.742736][T20264] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 911.801552][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 912.577555][T21537] Invalid source name [ 912.582173][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 912.663009][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 912.713458][T21548] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 912.736250][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 912.796537][ T29] audit: type=1400 audit(1786542410.973:5225): avc: denied { write } for pid=21547 comm="syz.7.4154" name="ports" dev="configfs" ino=2040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 912.834224][T12933] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 912.973956][T21548] nvmet: Invalid value ' ' for adrfam [ 912.981974][ T29] audit: type=1400 audit(1786542411.053:5226): avc: denied { bind } for pid=21550 comm="syz.6.4156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 913.001517][T12177] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 913.026993][ T10] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 913.062899][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 913.091989][T21548] nvmet_tcp: address family 255 not supported [ 913.134865][ T29] audit: type=1400 audit(1786542411.073:5227): avc: denied { read write } for pid=21550 comm="syz.6.4156" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 913.244704][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.271081][ T29] audit: type=1400 audit(1786542411.073:5228): avc: denied { open } for pid=21550 comm="syz.6.4156" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 913.310940][ T10] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 913.354529][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.432811][ T10] usb 10-1: config 0 descriptor?? [ 913.447827][ T29] audit: type=1400 audit(1786542411.073:5229): avc: denied { ioctl } for pid=21550 comm="syz.6.4156" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 913.829834][T21579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.891275][T21577] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4158'. [ 913.921144][T21579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.031876][ T10] usbhid 10-1:0.0: can't add hid device: -71 [ 914.071237][ T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 914.154975][ T10] usb 10-1: USB disconnect, device number 60 [ 914.293837][T21587] trusted_key: encrypted_key: insufficient parameters specified [ 914.443266][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 914.443278][ T29] audit: type=1400 audit(1786542412.623:5240): avc: denied { name_bind } for pid=21592 comm="syz.5.4161" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 914.547555][T21587] netlink: 'syz.6.4159': attribute type 10 has an invalid length. [ 914.556022][ T10] usb 10-1: new full-speed USB device number 61 using dummy_hcd [ 914.578465][T21587] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4159'. [ 914.605157][ T29] audit: type=1400 audit(1786542412.713:5241): avc: denied { mounton } for pid=21584 comm="syz.6.4159" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=218 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 914.744334][T13835] usb 6-1: new low-speed USB device number 59 using dummy_hcd [ 914.762924][ T10] usb 10-1: config 8 has an invalid interface number: 177 but max is 0 [ 914.781998][T21591] tunl0: entered promiscuous mode [ 914.787278][ T10] usb 10-1: config 8 has no interface number 0 [ 914.799827][T21591] netlink: 'syz.7.4160': attribute type 4 has an invalid length. [ 914.809538][ T10] usb 10-1: config 8 interface 177 altsetting 9 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 914.830962][T21591] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4160'. [ 914.840217][T20264] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 914.850548][T13836] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 914.867218][ T10] usb 10-1: config 8 interface 177 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 914.879995][ T29] audit: type=1400 audit(1786542413.043:5242): avc: denied { write } for pid=21585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 914.919340][ T10] usb 10-1: config 8 interface 177 has no altsetting 0 [ 914.931728][T13835] usb 6-1: Invalid ep0 maxpacket: 16 [ 914.952775][ T10] usb 10-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 914.985409][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.025414][ C0] ir_toy 10-1:8.177: out urb status: -71 [ 915.031662][ T29] audit: type=1400 audit(1786542413.183:5243): avc: denied { write } for pid=21605 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.058837][T21282] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 915.073055][T20264] usb 8-1: Using ep0 maxpacket: 32 [ 915.081193][T13836] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 915.096022][T13835] usb 6-1: new low-speed USB device number 60 using dummy_hcd [ 915.112016][T13836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.130551][T20264] usb 8-1: config 32 has an invalid interface number: 85 but max is 0 [ 915.142375][T21282] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 915.149980][T20264] usb 8-1: config 32 has no interface number 0 [ 915.156685][T13836] usb 7-1: Product: syz [ 915.161834][T21282] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 915.175052][T13836] usb 7-1: Manufacturer: syz [ 915.180314][T20264] usb 8-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 915.197732][T13836] usb 7-1: SerialNumber: syz [ 915.214277][T21282] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 915.233265][T13836] usb 7-1: config 0 descriptor?? [ 915.245004][T20264] usb 8-1: config 32 interface 85 has no altsetting 0 [ 915.254027][T21282] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 915.264047][T13836] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 915.274486][T13835] usb 6-1: Invalid ep0 maxpacket: 16 [ 915.285888][T13835] usb usb6-port1: attempt power cycle [ 915.301327][T20264] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 915.314385][T21282] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 915.330194][T20264] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.340754][T13836] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 915.354488][T21282] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 915.365462][T20264] usb 8-1: Product: syz [ 915.385430][T20264] usb 8-1: Manufacturer: syz [ 915.390261][T13836] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 915.403200][T20264] usb 8-1: SerialNumber: syz [ 915.411035][T21282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 915.437030][T13836] usb 7-1: media controller created [ 915.489095][T13836] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 915.533566][ T10] ir_toy 10-1:8.177: could not write reset command: -110 [ 915.556682][ T10] ir_toy 10-1:8.177: probe with driver ir_toy failed with error -110 [ 915.609252][ T10] usb 10-1: USB disconnect, device number 61 [ 915.632001][T13835] usb 6-1: new low-speed USB device number 61 using dummy_hcd [ 915.647185][T20264] appletouch 8-1:32.85: Failed to read mode from device. [ 915.665447][T21282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.678177][T13836] DVB: Unable to find symbol mt352_attach() [ 915.692690][T20264] appletouch 8-1:32.85: probe with driver appletouch failed with error -5 [ 915.702180][T13835] usb 6-1: Invalid ep0 maxpacket: 16 [ 915.740301][T21282] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.786852][T12933] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.794034][T12933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.828505][T13836] DVB: Unable to find symbol nxt6000_attach() [ 915.844072][T13835] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 915.865988][T13836] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 915.893188][T12177] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.900333][T12177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.910250][T13835] usb 6-1: Invalid ep0 maxpacket: 16 [ 915.918215][ T29] audit: type=1400 audit(1786542414.103:5244): avc: denied { write } for pid=21607 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 915.945634][T13835] usb usb6-port1: unable to enumerate USB device [ 915.958020][T13836] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input51 [ 916.012867][T13836] dvb-usb: schedule remote query interval to 1000 msecs. [ 916.041372][ T29] audit: type=1400 audit(1786542414.133:5245): avc: denied { bind } for pid=21625 comm="syz.9.4162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 916.075406][T13836] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 916.089744][T20264] usb 8-1: USB disconnect, device number 77 [ 916.109779][T21282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 916.155157][T13836] dvb-usb: bulk message failed: -22 (7/0) [ 916.189902][T13836] dvb-usb: bulk message failed: -22 (7/0) [ 916.207528][ T29] audit: type=1400 audit(1786542414.133:5246): avc: denied { name_bind } for pid=21625 comm="syz.9.4162" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 916.254878][T13836] usb 7-1: USB disconnect, device number 55 [ 916.282461][ T5344] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 916.331610][T12174] net_ratelimit: 115 callbacks suppressed [ 916.331622][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 916.389957][ T29] audit: type=1400 audit(1786542414.133:5247): avc: denied { node_bind } for pid=21625 comm="syz.9.4162" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 916.444272][T12168] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 916.471587][ T5344] usb 10-1: device descriptor read/64, error -71 [ 916.482626][T12168] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 916.506410][T13836] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 916.550398][ T29] audit: type=1400 audit(1786542414.363:5248): avc: denied { write } for pid=21628 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 916.651899][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 916.681334][ T413] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 916.729538][ T29] audit: type=1400 audit(1786542414.603:5249): avc: denied { write } for pid=21634 comm="syz.6.4164" name="mtd0" dev="devtmpfs" ino=704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 916.754152][ T5344] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 916.798307][T21645] netlink: 'syz.7.4167': attribute type 49 has an invalid length. [ 916.849118][T21645] bond0: (slave bond_slave_0): Releasing backup interface [ 916.874319][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 916.912706][ T5344] usb 10-1: device descriptor read/64, error -71 [ 916.924596][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 916.951042][T21645] bond_slave_0: entered promiscuous mode [ 916.969562][T21645] bond_slave_0: entered allmulticast mode [ 916.975941][T12177] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 917.012231][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 917.054325][ T5344] usb usb10-port1: attempt power cycle [ 917.063605][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 917.117916][ T5625] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 917.418942][T21282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 917.427928][ T5344] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 917.488220][ T5344] usb 10-1: device descriptor read/8, error -71 [ 917.573195][T21282] veth0_vlan: entered promiscuous mode [ 917.616630][T21282] veth1_vlan: entered promiscuous mode [ 917.689305][T21282] veth0_macvtap: entered promiscuous mode [ 917.728978][T21282] veth1_macvtap: entered promiscuous mode [ 917.753269][ T5344] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 917.786689][T21282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.799480][ T5344] usb 10-1: device descriptor read/8, error -71 [ 917.834577][T21282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 917.893153][T12171] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.923898][ T5344] usb usb10-port1: unable to enumerate USB device [ 917.931199][T12171] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.982411][T12177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.007709][T12177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.241313][T12168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.339592][T12168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 918.435328][T21689] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 918.457772][ T413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.496171][ T413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.135936][T21704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4102'. [ 919.622305][ T5344] usb 8-1: new high-speed USB device number 78 using dummy_hcd [ 919.750523][T21716] Mass Storage Function, version: 2009/09/11 [ 919.757147][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 919.757160][ T29] audit: type=1400 audit(1786542673.924:5270): avc: denied { write } for pid=21715 comm="syz.9.4177" name="functions" dev="configfs" ino=24328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 919.838158][T21716] LUN: removable file: (no medium) [ 919.916443][ T5344] usb 8-1: unable to get BOS descriptor or descriptor too short [ 919.988954][ T5344] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 920.068865][ T29] audit: type=1400 audit(1786542674.064:5271): avc: denied { write } for pid=21715 comm="syz.9.4177" name="functions" dev="configfs" ino=24328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 920.104616][ T5344] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 920.184603][ T5344] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 920.217564][ T5344] usb 8-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 920.217584][ T5344] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.217596][ T5344] usb 8-1: Product: syz [ 920.217605][ T5344] usb 8-1: Manufacturer: syz [ 920.217614][ T5344] usb 8-1: SerialNumber: syz [ 920.263352][ T29] audit: type=1400 audit(1786542674.064:5273): avc: denied { map } for pid=21717 comm="syz.5.4178" path="socket:[88088]" dev="sockfs" ino=88088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 920.263382][ T29] audit: type=1400 audit(1786542674.064:5274): avc: denied { read } for pid=21717 comm="syz.5.4178" path="socket:[88088]" dev="sockfs" ino=88088 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 920.263417][ T29] audit: type=1400 audit(1786542674.064:5272): avc: denied { remove_name } for pid=21715 comm="syz.9.4177" name="mass_storage.usb0" dev="configfs" ino=88093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 920.263439][ T29] audit: type=1400 audit(1786542674.144:5275): avc: denied { rmdir } for pid=21715 comm="syz.9.4177" name="mass_storage.usb0" dev="configfs" ino=88093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 920.263461][ T29] audit: type=1400 audit(1786542674.184:5276): avc: denied { write } for pid=21694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 920.359602][T21732] netlink: 19 bytes leftover after parsing attributes in process `syz.9.4181'. [ 920.362213][T21732] netlink: 19 bytes leftover after parsing attributes in process `syz.9.4181'. [ 920.416779][ T29] audit: type=1400 audit(1786542674.594:5277): avc: denied { write } for pid=21729 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 920.482571][T14717] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 920.655248][T14717] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 920.655288][T14717] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 920.655305][T14717] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 920.655319][T14717] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 920.655334][T14717] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 920.659569][T14717] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 920.659597][T14717] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 920.659613][T14717] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 920.659641][T14717] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 920.659656][T14717] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 920.665754][T14717] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 920.665781][T14717] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 920.665797][T14717] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 920.665812][T14717] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 920.665840][T14717] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 920.675878][T14717] usb 4-1: string descriptor 0 read error: -22 [ 920.675942][T14717] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 920.675956][T14717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.730616][T14717] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 921.036508][T20262] usb 4-1: USB disconnect, device number 14 [ 921.250640][ T5344] usb 8-1: USB disconnect, device number 78 [ 921.448144][T12168] net_ratelimit: 90 callbacks suppressed [ 921.448160][T12168] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 921.448175][T12168] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 921.553020][T12168] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 921.571602][T12177] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 921.594919][T12177] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 921.594944][T12177] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 921.626420][T21751] udevd[21751]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 921.704231][T12168] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 921.704252][T12168] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 921.812425][T12177] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 921.812449][T12177] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 922.158104][ T29] audit: type=1400 audit(1786542676.304:5278): avc: denied { write } for pid=21740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 923.368887][ T29] audit: type=1400 audit(1786542677.544:5279): avc: denied { name_bind } for pid=21769 comm="syz.3.4188" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 923.891660][T20262] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 924.364877][T21795] No source specified [ 924.384804][T20262] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 924.384823][T20262] usb 4-1: config 0 has no interface number 0 [ 924.384837][T20262] usb 4-1: too many endpoints for config 0 interface 168 altsetting 105: 141, using maximum allowed: 30 [ 924.384857][T20262] usb 4-1: config 0 interface 168 altsetting 105 has 0 endpoint descriptors, different from the interface descriptor's value: 141 [ 924.384873][T20262] usb 4-1: config 0 interface 168 has no altsetting 0 [ 924.384890][T20262] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 924.384904][T20262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.386257][T20262] usb 4-1: config 0 descriptor?? [ 924.689503][T20262] usb 4-1: string descriptor 0 read error: -71 [ 924.690391][T20262] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 924.704389][T20262] gp8psk: usb in 128 operation failed. [ 924.706592][T20262] gp8psk: usb in 137 operation failed. [ 924.706604][T20262] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 924.706621][T20262] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 924.740558][T20262] usb 4-1: USB disconnect, device number 15 [ 925.371240][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 925.371252][ T29] audit: type=1400 audit(1786542679.544:5281): avc: denied { write } for pid=21786 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 925.889804][T21814] No source specified [ 925.890378][ T5625] Bluetooth: hci2: unexpected event for opcode 0x200b [ 926.085151][ T29] audit: type=1400 audit(1786542680.264:5282): avc: denied { write } for pid=21816 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 926.512295][T12933] net_ratelimit: 68 callbacks suppressed [ 926.512310][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 926.512324][T12933] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 926.626045][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 926.626069][T12933] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 926.735261][T12177] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 926.735283][T12177] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 926.872784][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 926.872811][T12933] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 926.989872][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 926.989894][T12171] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 927.537138][ T29] audit: type=1400 audit(1786542681.714:5283): avc: denied { write } for pid=21818 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 927.717023][ T29] audit: type=1400 audit(1786542681.894:5284): avc: denied { getopt } for pid=21843 comm="syz.3.4200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 927.854014][ T29] audit: type=1400 audit(1786542682.034:5285): avc: denied { write } for pid=21846 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 929.377964][T21869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4204'. [ 929.733317][ T29] audit: type=1400 audit(1786542683.914:5286): avc: denied { getopt } for pid=21874 comm="syz.3.4205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 931.363850][T21889] overlayfs: failed to resolve './bus': -2 [ 931.534500][T12171] net_ratelimit: 67 callbacks suppressed [ 931.534516][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 931.534531][T12171] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 931.658074][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 931.658098][T12180] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 931.715324][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.931022][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 931.931044][T12180] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 932.118427][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 932.118453][T12171] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 932.247516][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 932.247537][T12171] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 933.573738][ T29] audit: type=1400 audit(1786542687.754:5287): avc: denied { write } for pid=21864 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 935.026501][T20262] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 935.026731][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 935.232069][T21907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4212'. [ 935.333066][T20262] usb 6-1: device descriptor read/64, error -32 [ 935.701751][T20262] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 935.910503][T20262] usb 6-1: Using ep0 maxpacket: 16 [ 936.008091][T20262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.008113][T20262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.008125][T20262] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 936.008149][T20262] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 936.008162][T20262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.009548][T20262] usb 6-1: config 0 descriptor?? [ 936.357890][ T29] audit: type=1400 audit(1786542690.534:5288): avc: denied { write } for pid=21906 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 936.562616][T20262] hid_parser_main: 453 callbacks suppressed [ 936.562630][T20262] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 936.673016][T12174] net_ratelimit: 60 callbacks suppressed [ 936.673032][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 936.673047][T12174] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 936.725553][T20262] microsoft 0003:045E:07DA.0022: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 936.725576][T20262] microsoft 0003:045E:07DA.0022: no inputs found [ 936.725584][T20262] microsoft 0003:045E:07DA.0022: could not initialize ff, continuing anyway [ 936.745128][T20262] usb 6-1: USB disconnect, device number 64 [ 936.814718][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 936.814742][ T413] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 936.927933][T12168] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 936.927954][T12168] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 937.177505][T21913] Invalid source name [ 937.183352][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 937.183374][T12180] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 937.271739][ T29] audit: type=1400 audit(1786542691.444:5289): avc: denied { write } for pid=21916 comm="syz.7.4215" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 937.302736][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 937.302758][T12933] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 937.328776][T21917] binder: 21916:21917 ioctl 40046210 0 returned -14 [ 937.328820][ T29] audit: type=1400 audit(1786542691.504:5290): avc: denied { ioctl } for pid=21916 comm="syz.7.4215" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x6210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 937.973480][T21914] fido_id[21914]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 938.163043][T21928] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 938.174718][T21928] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 938.176809][T21928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 938.180233][T21928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 938.182203][T21928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 938.501963][T21935] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4218'. [ 938.995467][ T29] audit: type=1400 audit(1786542693.174:5291): avc: denied { getopt } for pid=21937 comm="syz.5.4219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 939.297528][T21953] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 939.428898][ T29] audit: type=1800 audit(1786542693.604:5292): pid=21953 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.4220" name="addr_trtype" dev="configfs" ino=88905 res=0 errno=0 [ 940.195559][T21928] Bluetooth: hci0: command tx timeout [ 940.219432][T21969] Bluetooth: MGMT ver 1.23 [ 941.044245][ T29] audit: type=1400 audit(1786542695.214:5293): avc: denied { write } for pid=21918 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 941.053625][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 941.285658][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 941.290122][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 941.295276][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 941.295921][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 941.408954][ T29] audit: type=1400 audit(1786542695.584:5294): avc: denied { write } for pid=21975 comm="syz.7.4225" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 941.605961][ T29] audit: type=1400 audit(1786542695.784:5295): avc: denied { bind } for pid=21984 comm="syz.3.4227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 941.682851][T12171] net_ratelimit: 60 callbacks suppressed [ 941.682863][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 941.682878][T12171] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 941.798557][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 941.798579][T12171] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 941.831505][ T29] audit: type=1400 audit(1786542696.014:5296): avc: denied { write } for pid=21986 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 941.903726][T12168] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 941.903747][T12168] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 941.972980][T21991] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4229'. [ 941.985027][ T29] audit: type=1400 audit(1786542696.164:5297): avc: denied { setopt } for pid=21990 comm="syz.5.4229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 942.034254][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 942.051786][T12168] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 942.074287][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 942.091569][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 942.100773][ T29] audit: type=1400 audit(1786542696.274:5298): avc: denied { mounton } for pid=21990 comm="syz.5.4229" path="/342/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 942.232741][T22000] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 942.271648][ T5625] Bluetooth: hci0: command tx timeout [ 942.280303][ T29] audit: type=1800 audit(1786542696.454:5299): pid=22000 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.4230" name="addr_trtype" dev="configfs" ino=89104 res=0 errno=0 [ 942.295380][T20264] usb 8-1: new high-speed USB device number 79 using dummy_hcd [ 942.716162][T20264] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 57, changing to 9 [ 942.716185][T20264] usb 8-1: config 0 interface 0 has no altsetting 0 [ 942.716202][T20264] usb 8-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 0.00 [ 942.716215][T20264] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.722594][T20264] usb 8-1: config 0 descriptor?? [ 943.391577][ T5625] Bluetooth: hci5: command tx timeout [ 944.012302][ T29] audit: type=1400 audit(1786542698.194:5300): avc: denied { getopt } for pid=21995 comm="syz.7.4228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 944.142574][T20264] hid-rmi 0003:1532:011D.0023: unknown main item tag 0x3 [ 944.142600][T20264] hid-rmi 0003:1532:011D.0023: unknown global tag 0xe [ 944.142610][T20264] hid-rmi 0003:1532:011D.0023: item 0 0 1 14 parsing failed [ 944.142878][T20264] hid-rmi 0003:1532:011D.0023: parse failed [ 944.142919][T20264] hid-rmi 0003:1532:011D.0023: probe with driver hid-rmi failed with error -22 [ 944.156956][T20264] usb 8-1: USB disconnect, device number 79 [ 944.354185][ T5625] Bluetooth: hci0: command tx timeout [ 944.585512][T22019] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4232'. [ 945.478587][ T5625] Bluetooth: hci5: command tx timeout [ 945.658457][ T29] audit: type=1400 audit(1786542699.834:5301): avc: denied { write } for pid=22003 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 945.705115][T22035] Invalid source name [ 946.432569][ T5625] Bluetooth: hci0: command tx timeout [ 946.794074][T12180] net_ratelimit: 85 callbacks suppressed [ 946.794088][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 946.794103][T12180] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 946.829949][ T29] audit: type=1400 audit(1786542701.004:5302): avc: denied { map } for pid=22039 comm="syz.7.4236" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 946.832907][ T29] audit: type=1400 audit(1786542701.014:5303): avc: denied { link } for pid=22040 comm="syz.5.4237" name="#59" dev="tmpfs" ino=1967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 946.832937][ T29] audit: type=1400 audit(1786542701.014:5304): avc: denied { rename } for pid=22040 comm="syz.5.4237" name="#5a" dev="tmpfs" ino=1967 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 947.469338][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 947.469361][T12171] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 947.551587][T21928] Bluetooth: hci5: command tx timeout [ 947.574858][T12177] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 947.574880][T12177] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 947.849341][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 947.849365][T12178] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 948.056200][T12168] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 948.056222][T12168] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 948.081569][ T29] audit: type=1400 audit(1786542702.254:5305): avc: denied { write } for pid=22038 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 949.301786][T21923] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.301994][T21923] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.302307][T21923] bridge_slave_0: entered allmulticast mode [ 949.303448][T21923] bridge_slave_0: entered promiscuous mode [ 949.306784][T21923] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.306985][T21923] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.307229][T21923] bridge_slave_1: entered allmulticast mode [ 949.316222][T21923] bridge_slave_1: entered promiscuous mode [ 949.449740][T21923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 949.466779][T21923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.632263][T21928] Bluetooth: hci5: command tx timeout [ 949.686169][T21923] team0: Port device team_slave_0 added [ 949.698185][T21923] team0: Port device team_slave_1 added [ 949.981543][T21923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 949.981556][T21923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.981570][T21923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 949.983320][T21923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 949.983329][T21923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 949.983343][T21923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 950.153486][T21923] hsr_slave_0: entered promiscuous mode [ 950.154899][T21923] hsr_slave_1: entered promiscuous mode [ 950.155717][T21923] debugfs: 'hsr0' already exists in 'hsr' [ 950.155729][T21923] Cannot create hsr debugfs directory [ 950.663726][T21973] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.663930][T21973] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.664153][T21973] bridge_slave_0: entered allmulticast mode [ 950.668449][T21973] bridge_slave_0: entered promiscuous mode [ 950.701021][T21973] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.701226][T21973] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.701664][T21973] bridge_slave_1: entered allmulticast mode [ 950.702770][T21973] bridge_slave_1: entered promiscuous mode [ 950.868996][T21973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 950.906460][T21973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.470064][T21973] team0: Port device team_slave_0 added [ 951.501019][T21973] team0: Port device team_slave_1 added [ 951.803929][T12177] net_ratelimit: 109 callbacks suppressed [ 951.803943][T12177] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 951.823363][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 951.841992][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 951.863254][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 951.882407][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 951.913410][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 951.934832][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 951.951625][T12177] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 951.970770][ T29] audit: type=1400 audit(1786542706.144:5306): avc: denied { write } for pid=22070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 951.971701][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 951.999022][T12177] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 952.182805][ T29] audit: type=1400 audit(1786542706.364:5307): avc: denied { write } for pid=22081 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 952.524671][T21973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.524684][T21973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.524699][T21973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.548589][T21973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.548601][T21973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.548616][T21973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.945479][T21973] hsr_slave_0: entered promiscuous mode [ 953.946770][T21973] hsr_slave_1: entered promiscuous mode [ 953.947602][T21973] debugfs: 'hsr0' already exists in 'hsr' [ 953.947614][T21973] Cannot create hsr debugfs directory [ 955.823256][ T29] audit: type=1400 audit(1786542710.004:5308): avc: denied { write } for pid=22087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 956.052990][ T29] audit: type=1400 audit(1786542710.214:5309): avc: denied { write } for pid=22098 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 956.484584][T21923] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 956.501444][T21923] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 956.504011][T21923] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 956.508367][T21923] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 956.823538][T12171] net_ratelimit: 118 callbacks suppressed [ 956.823553][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 956.823567][T12171] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 956.863774][T21923] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 956.875669][T21923] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 956.876684][T21923] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 957.048818][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 957.061604][T12177] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 957.063666][T21923] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 957.082528][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 957.082551][T12180] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 957.191892][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 957.214093][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 957.236937][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 957.251791][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 957.709713][ T29] audit: type=1400 audit(1786542711.894:5310): avc: denied { write } for pid=22100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 958.584679][ T29] audit: type=1400 audit(1786542712.764:5311): avc: denied { write } for pid=22117 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 959.652143][ T5625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 959.654201][ T5625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 959.655060][ T5625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 959.655932][ T5625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 959.656574][ T5625] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 960.579364][T21923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.744664][T21923] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.005376][T12180] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.005425][T12180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.008458][T12180] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.008499][T12180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.271117][ T29] audit: type=1400 audit(1786542715.444:5312): avc: denied { write } for pid=22120 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 961.878264][T12178] net_ratelimit: 114 callbacks suppressed [ 961.878280][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 961.916696][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 961.921589][T21928] Bluetooth: hci7: command tx timeout [ 961.935218][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 961.935238][T12180] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 962.202674][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 962.202697][ T413] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 962.318159][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 962.339235][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 962.339255][T12180] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 962.404415][ T29] audit: type=1400 audit(1786542716.584:5313): avc: denied { recv } for pid=22140 comm="rm" saddr=10.128.0.169 src=47710 daddr=10.128.0.117 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 962.457391][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 962.486676][ T29] audit: type=1400 audit(1786542716.664:5314): avc: denied { write } for pid=22140 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 962.715832][ T5625] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 962.727220][ T5625] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 962.729437][ T5625] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 962.731959][ T5625] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 962.732735][ T5625] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 962.844072][T21973] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 962.878563][T21973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 962.879622][T21973] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 962.957417][T21973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 962.998421][T21928] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 963.009288][T21973] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 963.011546][T21928] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 963.013185][T21928] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 963.015320][T21928] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 963.016963][T21928] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 963.128022][T21973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 963.160381][T21973] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 963.165108][T21973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 963.951964][ T5625] Bluetooth: hci7: command tx timeout [ 964.841281][ T5625] Bluetooth: hci8: command tx timeout [ 965.144584][T21973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.202003][ T5625] Bluetooth: hci9: command tx timeout [ 965.607545][T21973] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.034719][ T5625] Bluetooth: hci7: command tx timeout [ 966.327377][T12180] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.327429][T12180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 966.361344][T12180] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.361422][T12180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 967.022079][ T5625] Bluetooth: hci8: command tx timeout [ 967.028035][ T35] net_ratelimit: 98 callbacks suppressed [ 967.028049][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 967.046057][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 967.062128][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 967.062147][T12171] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 967.260222][T12175] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 967.260382][ T5625] Bluetooth: hci9: command tx timeout [ 967.314793][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 967.331545][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 967.502489][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 967.535781][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 967.570299][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 967.765049][ T29] audit: type=1400 audit(1786542721.944:5315): avc: denied { write } for pid=22155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 968.123988][ T5625] Bluetooth: hci7: command tx timeout [ 968.377708][ T29] audit: type=1400 audit(1786542722.554:5316): avc: denied { write } for pid=22198 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 968.447746][T21923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 968.956459][T21923] veth0_vlan: entered promiscuous mode [ 969.074117][ T5625] Bluetooth: hci8: command tx timeout [ 969.565999][ T5625] Bluetooth: hci9: command tx timeout [ 969.948183][T21923] veth1_vlan: entered promiscuous mode [ 970.327327][T21923] veth0_macvtap: entered promiscuous mode [ 970.447306][T22122] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.447520][T22122] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.447862][T22122] bridge_slave_0: entered allmulticast mode [ 970.448965][T22122] bridge_slave_0: entered promiscuous mode [ 970.528269][T21923] veth1_macvtap: entered promiscuous mode [ 970.554279][T22122] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.554502][T22122] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.554698][T22122] bridge_slave_1: entered allmulticast mode [ 970.592851][T22122] bridge_slave_1: entered promiscuous mode [ 971.152127][ T5625] Bluetooth: hci8: command tx timeout [ 971.395293][T22122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.641801][ T5625] Bluetooth: hci9: command tx timeout [ 971.659493][T21923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.702951][T22122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.718650][T21923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.880609][T12180] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.881457][T12180] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.921583][T12175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.921716][T12175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.925332][T22122] team0: Port device team_slave_0 added [ 971.928785][T22122] team0: Port device team_slave_1 added [ 972.158470][T12178] net_ratelimit: 102 callbacks suppressed [ 972.158485][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 972.171759][T12168] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 972.192729][T12168] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 972.218277][T12168] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 972.232371][T12175] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 972.254350][T12168] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 972.273378][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 972.279251][ T29] audit: type=1400 audit(1786542726.454:5317): avc: denied { write } for pid=22212 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 972.291708][T12175] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 972.310013][T21973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.312271][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 972.333930][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 972.955099][T22122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.955112][T22122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.955126][T22122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.983568][T22122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.983580][T22122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 972.996298][T22122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.112465][ T29] audit: type=1400 audit(1786542727.294:5318): avc: denied { write } for pid=22230 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 973.609376][T22122] hsr_slave_0: entered promiscuous mode [ 973.619266][T22122] hsr_slave_1: entered promiscuous mode [ 973.620158][T22122] debugfs: 'hsr0' already exists in 'hsr' [ 973.620170][T22122] Cannot create hsr debugfs directory [ 973.651914][T21973] veth0_vlan: entered promiscuous mode [ 975.211956][T12180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.211973][T12180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.471998][T21973] veth1_vlan: entered promiscuous mode [ 975.520794][T12174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.520809][T12174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 976.246941][T22145] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.247151][T22145] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.247362][T22145] bridge_slave_0: entered allmulticast mode [ 976.248436][T22145] bridge_slave_0: entered promiscuous mode [ 976.893507][T22145] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.893712][T22145] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.893959][T22145] bridge_slave_1: entered allmulticast mode [ 976.895069][T22145] bridge_slave_1: entered promiscuous mode [ 976.904344][T21973] veth0_macvtap: entered promiscuous mode [ 977.024810][ T29] audit: type=1400 audit(1786542731.204:5319): avc: denied { write } for pid=22235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 977.095802][T22252] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4213'. [ 977.401758][T12175] net_ratelimit: 108 callbacks suppressed [ 977.401772][T12175] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 977.497643][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 977.512587][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 977.536410][T12175] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 977.549931][T21973] veth1_macvtap: entered promiscuous mode [ 977.553983][T12175] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 977.713067][T12168] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 977.741014][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 977.753334][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 977.777567][T12175] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 977.809664][T12168] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 978.100707][ T29] audit: type=1400 audit(1786542732.274:5320): avc: denied { write } for pid=22259 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 978.105752][T22145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.136558][T22145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.001906][T14717] SELinux: failure in sel_netif_sid_slow(), invalid network interface (99) [ 982.421461][T12174] net_ratelimit: 109 callbacks suppressed [ 982.421477][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 982.442846][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 982.486950][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 982.501698][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 982.508236][T12175] team0: Port device bridge0 removed [ 982.701464][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 982.728616][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 982.753424][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 982.792628][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 982.811559][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 982.819549][T12175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.836601][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 982.855494][ T29] audit: type=1400 audit(1786542737.034:5321): avc: denied { write } for pid=22262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 982.977731][T12175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 983.002785][T12175] bond0 (unregistering): Released all slaves [ 983.151065][ T29] audit: type=1400 audit(1786542737.324:5322): avc: denied { create } for pid=22286 comm="syz.0.4245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 983.186630][T12175] bond1 (unregistering): Released all slaves [ 983.702263][ T29] audit: type=1400 audit(1786542737.874:5323): avc: denied { write } for pid=22291 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 983.796947][T21973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.797158][T12175] : left promiscuous mode [ 983.981141][T12175] tipc: Left network mode [ 983.994419][T22145] team0: Port device team_slave_0 added [ 984.010552][T21973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 987.483805][ T413] net_ratelimit: 107 callbacks suppressed [ 987.483821][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 987.605789][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 987.641487][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 987.681555][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 987.704792][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 987.737344][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 987.781516][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 987.801664][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 987.856418][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 987.881513][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 988.046049][T22150] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.046269][T22150] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.046561][T22150] bridge_slave_0: entered allmulticast mode [ 988.047814][T22150] bridge_slave_0: entered promiscuous mode [ 988.059563][T22145] team0: Port device team_slave_1 added [ 988.131493][ T413] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.131532][ T413] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.131567][ T413] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.131599][ T413] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.651959][T22150] bridge0: port 2(bridge_slave_1) entered blocking state [ 988.652165][T22150] bridge0: port 2(bridge_slave_1) entered disabled state [ 988.652405][T22150] bridge_slave_1: entered allmulticast mode [ 988.653520][T22150] bridge_slave_1: entered promiscuous mode [ 988.878020][T22145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 988.878033][T22145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.878047][T22145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 988.879696][T22145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 988.879705][T22145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 988.879719][T22145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.702769][T22150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.706704][T22150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.113506][ T29] audit: type=1400 audit(1786542746.294:5324): avc: denied { write } for pid=22302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 992.523687][T12174] net_ratelimit: 113 callbacks suppressed [ 992.523702][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 992.543850][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 992.568774][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 992.581681][T12168] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 992.606019][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 992.630958][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 992.664106][T12168] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 992.685290][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 992.701924][T12168] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 992.721426][ T29] audit: type=1400 audit(1786542746.884:5325): avc: denied { execute } for pid=22310 comm="syz.0.4248" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=90964 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 992.724632][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 993.158985][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.342806][T22150] team0: Port device team_slave_0 added [ 993.347877][T22145] hsr_slave_0: entered promiscuous mode [ 993.349153][T22145] hsr_slave_1: entered promiscuous mode [ 993.349970][T22145] debugfs: 'hsr0' already exists in 'hsr' [ 993.349981][T22145] Cannot create hsr debugfs directory [ 993.596396][ T29] audit: type=1400 audit(1786542747.774:5326): avc: denied { write } for pid=22320 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 993.629371][T22150] team0: Port device team_slave_1 added [ 994.370544][T22150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.370556][T22150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.370571][T22150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.387088][T22150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.387102][T22150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.387117][T22150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.443636][T22150] hsr_slave_0: entered promiscuous mode [ 997.546514][ T48] net_ratelimit: 127 callbacks suppressed [ 997.546529][ T48] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 997.575112][T12168] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 997.582226][T22150] hsr_slave_1: entered promiscuous mode [ 997.583088][T22150] debugfs: 'hsr0' already exists in 'hsr' [ 997.583100][T22150] Cannot create hsr debugfs directory [ 997.591566][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 997.764779][ T48] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 997.793022][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 997.817040][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 997.837509][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 997.880096][ T48] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 997.933543][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 997.961562][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 998.209553][T12178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.209569][T12178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.467667][ T29] audit: type=1400 audit(1786542752.644:5327): avc: denied { write } for pid=22324 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 999.382499][T12175] hsr_slave_0: left promiscuous mode [ 999.383910][T12175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 999.384580][T12175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 999.385179][T12175] batman_adv: batadv0: Removing interface: dummy0 [ 999.481100][ T29] audit: type=1400 audit(1786542753.654:5328): avc: denied { write } for pid=22349 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 999.940900][T21928] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 999.949787][T21928] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 999.950828][T21928] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 999.957031][T21928] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 999.957638][T21928] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1002.031639][T21928] Bluetooth: hci10: command tx timeout [ 1002.645962][T12933] net_ratelimit: 116 callbacks suppressed [ 1002.645982][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1002.672876][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1002.691727][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1002.716910][T12168] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1002.737228][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1002.790801][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1002.818209][T12168] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1003.010995][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1003.078710][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1003.106670][T12168] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1004.055574][ T29] audit: type=1400 audit(1786542758.234:5329): avc: denied { write } for pid=22352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1004.211490][T21928] Bluetooth: hci10: command tx timeout [ 1004.612155][T12175] team0 (unregistering): Port device team_slave_1 removed [ 1004.850925][T12175] team0 (unregistering): Port device team_slave_0 removed [ 1004.937935][ T29] audit: type=1400 audit(1786542759.114:5330): avc: denied { write } for pid=22368 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1006.271549][T21928] Bluetooth: hci10: command tx timeout [ 1007.658106][T12180] net_ratelimit: 116 callbacks suppressed [ 1007.658122][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1007.671960][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1007.701534][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1007.701561][T12171] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1007.841471][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1007.863533][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1007.897553][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1007.918154][ T48] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1007.918175][ T48] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1008.052284][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1008.356308][T21928] Bluetooth: hci10: command tx timeout [ 1009.167452][T22122] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1009.655432][T22122] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1009.799884][T22122] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1009.905728][T22122] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1009.906754][T22122] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1009.925241][T22122] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1010.078178][T22122] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1010.143297][T22122] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1012.722444][T12171] net_ratelimit: 89 callbacks suppressed [ 1012.722458][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1012.746405][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1012.761737][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1012.788612][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1012.802927][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1012.828310][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1012.845673][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1012.862442][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1012.932125][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1012.995293][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1014.832283][ T29] audit: type=1400 audit(1786542769.014:5331): avc: denied { write } for pid=22376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1015.520599][ T29] audit: type=1400 audit(1786542769.694:5332): avc: denied { write } for pid=22409 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1015.970473][T12175] IPVS: stop unused estimator thread 0... [ 1017.191046][T22429] 9p: Bad value for 'rfdno' [ 1017.794607][ T413] net_ratelimit: 106 callbacks suppressed [ 1017.794620][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1017.821266][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1017.841517][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1017.881476][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1017.923303][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1017.941737][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1017.962101][ T48] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1018.001494][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1018.021546][ T48] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1018.041798][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1020.188582][T12175] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.701092][ T29] audit: type=1400 audit(1786542774.874:5333): avc: denied { write } for pid=22425 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1020.773804][T22437] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.092931][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1021.097916][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1021.098907][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1021.099921][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1021.100546][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1021.229139][ T29] audit: type=1400 audit(1786542775.404:5334): avc: denied { write } for pid=22446 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1021.845432][T22437] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.874486][T12178] net_ratelimit: 120 callbacks suppressed [ 1022.874502][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1022.891824][ T48] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1022.915039][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1023.042100][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1023.061722][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1023.111898][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1023.131643][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1023.319253][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1023.403261][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1023.421728][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1023.634693][ T5625] Bluetooth: hci5: command tx timeout [ 1023.668841][T12175] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.180019][ T5625] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1024.372043][ T5625] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1024.373866][ T5625] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1024.374737][ T5625] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1024.381777][ T5625] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1024.693740][T21928] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1024.697567][T21928] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1024.698498][T21928] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1024.699410][T21928] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1024.699994][T21928] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1025.538389][T22437] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1025.711673][ T5625] Bluetooth: hci5: command tx timeout [ 1026.076578][T22437] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.222938][ T29] audit: type=1400 audit(1786542780.404:5335): avc: denied { write } for pid=22454 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1026.390583][T12175] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.454976][ T5625] Bluetooth: hci7: command tx timeout [ 1026.604842][ T29] audit: type=1400 audit(1786542780.774:5336): avc: denied { write } for pid=22481 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1026.635748][T12175] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1026.913127][ T5625] Bluetooth: hci11: command tx timeout [ 1027.799503][ T5625] Bluetooth: hci5: command tx timeout [ 1027.891536][T12174] net_ratelimit: 116 callbacks suppressed [ 1027.891550][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1027.981646][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1027.981667][T12180] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1028.000823][ T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.151904][T12174] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.167547][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1028.167568][T12180] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1028.167836][T12180] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.167874][T12180] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.271819][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1028.304383][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1028.486189][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1028.530739][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1028.664674][ T48] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1028.678005][ T5625] Bluetooth: hci7: command tx timeout [ 1029.282016][ T5625] Bluetooth: hci11: command tx timeout [ 1029.871468][ T5625] Bluetooth: hci5: command tx timeout [ 1030.971510][ T5625] Bluetooth: hci7: command tx timeout [ 1031.311977][T21928] Bluetooth: hci11: command tx timeout [ 1031.461769][T22498] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.827144][T22498] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.858759][T22498] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.898618][T22498] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.929760][T12180] net_ratelimit: 95 callbacks suppressed [ 1032.929775][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1032.949503][ T48] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1032.962928][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1032.962948][T12933] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1032.991688][T21928] Bluetooth: hci7: command tx timeout [ 1033.071797][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1033.091601][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1033.111518][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1033.132749][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1033.152241][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1033.172787][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1033.401568][T21928] Bluetooth: hci11: command tx timeout [ 1034.540359][ T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.073056][T12180] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.081670][T12180] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.085870][T12180] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.606495][T12175] bridge_slave_1: left allmulticast mode [ 1035.606678][T12175] bridge_slave_1: left promiscuous mode [ 1035.607113][T12175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.609849][T12175] bridge_slave_0: left allmulticast mode [ 1035.610025][T12175] bridge_slave_0: left promiscuous mode [ 1035.610444][T12175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.960203][ T35] net_ratelimit: 126 callbacks suppressed [ 1037.960218][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1038.079382][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1038.091719][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1038.128192][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1038.141665][ T48] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1038.163111][ T48] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1038.182550][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1038.201573][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1038.229420][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1038.241569][ T48] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1038.355175][ T29] audit: type=1400 audit(1786542792.534:5337): avc: denied { connect } for pid=22516 comm="syz.0.4266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1038.401679][ T29] audit: type=1400 audit(1786542792.574:5338): avc: denied { write } for pid=22516 comm="syz.0.4266" path="socket:[92317]" dev="sockfs" ino=92317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1038.411343][T12175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.688321][T12175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.712710][T12175] bond0 (unregistering): Released all slaves [ 1038.737740][T22518] tipc: Started in network mode [ 1038.737754][T22518] tipc: Node identity 2007ff, cluster identity 4711 [ 1038.737763][T22518] tipc: Node number set to 2099199 [ 1041.700385][T22524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4267'. [ 1041.769612][T22525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4267'. [ 1041.942751][T22354] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.942958][T22354] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.943191][T22354] bridge_slave_0: entered allmulticast mode [ 1041.944395][T22354] bridge_slave_0: entered promiscuous mode [ 1041.955358][T22354] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.955564][T22354] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.955791][T22354] bridge_slave_1: entered allmulticast mode [ 1041.959477][T22354] bridge_slave_1: entered promiscuous mode [ 1042.157244][T22354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.166236][T22354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.864075][T22354] team0: Port device team_slave_0 added [ 1042.922812][T22533] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4268'. [ 1042.974733][ T48] net_ratelimit: 108 callbacks suppressed [ 1042.974748][ T48] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1043.161455][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1043.186281][ T48] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1043.201559][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1043.233137][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1043.269789][ T48] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1043.283321][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1043.307370][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1043.324467][ T48] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1043.341995][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1043.348796][T22354] team0: Port device team_slave_1 added [ 1043.579311][T22354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.579323][T22354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1043.579337][T22354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1043.583111][T22354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1043.583123][T22354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1043.583137][T22354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.271168][T22540] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1047.941581][T22354] hsr_slave_0: entered promiscuous mode [ 1047.942978][T22354] hsr_slave_1: entered promiscuous mode [ 1047.943860][T22354] debugfs: 'hsr0' already exists in 'hsr' [ 1047.943871][T22354] Cannot create hsr debugfs directory [ 1047.993426][T12171] net_ratelimit: 68 callbacks suppressed [ 1047.993441][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1048.008226][T22445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.014231][T22445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.014472][T22445] bridge_slave_0: entered allmulticast mode [ 1048.015589][T22445] bridge_slave_0: entered promiscuous mode [ 1048.019975][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1048.031790][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1048.045720][T12175] hsr_slave_0: left promiscuous mode [ 1048.051134][T12175] hsr_slave_1: left promiscuous mode [ 1048.052662][T12175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1048.052760][T12175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.052803][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1048.053769][T12175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1048.053863][T12175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.071710][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1048.101091][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1048.111681][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1048.132130][T12175] veth1_macvtap: left promiscuous mode [ 1048.132422][T12175] veth0_macvtap: left promiscuous mode [ 1048.132959][T12175] veth1_vlan: left promiscuous mode [ 1048.133646][T12175] veth0_vlan: left promiscuous mode [ 1048.134603][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1048.158227][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1048.191447][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1053.090697][ T413] net_ratelimit: 97 callbacks suppressed [ 1053.090713][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1053.214598][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1053.243185][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1053.393823][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1053.451448][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1053.619274][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1053.635988][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1053.717846][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1053.805140][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1053.962250][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1054.596053][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.500019][T12175] team0 (unregistering): Port device team_slave_1 removed [ 1056.828848][T12175] team0 (unregistering): Port device team_slave_0 removed [ 1058.380999][T12174] net_ratelimit: 88 callbacks suppressed [ 1058.381015][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1058.397567][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1058.420768][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1058.543274][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1058.643625][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1058.663706][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1058.731489][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1058.895353][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1058.911494][ T48] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1058.941457][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1059.918059][T22552] fuse: Bad value for 'fd' [ 1059.920046][ T29] audit: type=1400 audit(1786542814.094:5339): avc: denied { execute } for pid=22550 comm="syz.0.4270" path="/30/file0" dev="tmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1060.743222][T22463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.743428][T22463] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.743638][T22463] bridge_slave_0: entered allmulticast mode [ 1060.745110][T22463] bridge_slave_0: entered promiscuous mode [ 1060.813165][T22445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.813371][T22445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.813552][T22445] bridge_slave_1: entered allmulticast mode [ 1060.814767][T22445] bridge_slave_1: entered promiscuous mode [ 1061.071331][T22463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.171084][T22463] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.171600][T22463] bridge_slave_1: entered allmulticast mode [ 1061.293294][T22463] bridge_slave_1: entered promiscuous mode [ 1061.589792][T22560] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1061.595388][T22560] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1061.597402][T22560] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1061.598339][T22560] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1061.599987][T22560] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1061.955360][T22560] Bluetooth: hci0: command 0x0406 tx timeout [ 1062.763973][T22463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.767936][T22463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.402416][T12178] net_ratelimit: 108 callbacks suppressed [ 1063.402431][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1063.422010][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1063.442836][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1063.622204][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1063.653322][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1063.739699][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1063.847724][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1063.867813][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1063.875474][T21928] Bluetooth: hci8: command tx timeout [ 1063.882472][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1063.903766][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1063.929902][T22445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.945159][T22445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1064.565407][T22463] team0: Port device team_slave_0 added [ 1064.569031][T22463] team0: Port device team_slave_1 added [ 1065.506801][T22466] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.507007][T22466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.507179][T22466] bridge_slave_0: entered allmulticast mode [ 1065.749561][T22466] bridge_slave_0: entered promiscuous mode [ 1065.951798][T21928] Bluetooth: hci8: command tx timeout [ 1065.970903][T22463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1065.970917][T22463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1065.970932][T22463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1065.978840][T22466] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.979050][T22466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.979292][T22466] bridge_slave_1: entered allmulticast mode [ 1065.980439][T22466] bridge_slave_1: entered promiscuous mode [ 1066.236174][T22445] team0: Port device team_slave_0 added [ 1066.269307][T22445] team0: Port device team_slave_1 added [ 1066.286271][T22463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1066.286282][T22463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1066.286298][T22463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1066.883824][T22466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1068.032252][T21928] Bluetooth: hci8: command tx timeout [ 1068.441538][T12180] net_ratelimit: 93 callbacks suppressed [ 1068.441553][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1068.474542][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1068.521955][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1068.541949][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1068.678110][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1068.860639][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1068.872487][ T48] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1068.923475][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1068.951520][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1068.971485][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1069.680508][T22466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1069.807350][T22445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.807363][T22445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.807377][T22445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.912287][T22445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.912299][T22445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1069.912313][T22445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.066316][T22463] hsr_slave_0: entered promiscuous mode [ 1070.067673][T22463] hsr_slave_1: entered promiscuous mode [ 1070.068511][T22463] debugfs: 'hsr0' already exists in 'hsr' [ 1070.068523][T22463] Cannot create hsr debugfs directory [ 1070.128419][T21928] Bluetooth: hci8: command tx timeout [ 1070.235164][ T29] audit: type=1400 audit(1786542824.414:5340): avc: denied { write } for pid=22575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1070.984535][T22466] team0: Port device team_slave_0 added [ 1071.655400][ T29] audit: type=1400 audit(1786542825.834:5341): avc: denied { write } for pid=22604 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1071.669616][T22445] hsr_slave_0: entered promiscuous mode [ 1071.790824][T22445] hsr_slave_1: entered promiscuous mode [ 1071.956014][T21928] Bluetooth: hci0: Malformed HCI Event [ 1072.009885][T22445] debugfs: 'hsr0' already exists in 'hsr' [ 1072.009904][T22445] Cannot create hsr debugfs directory [ 1072.061999][T22466] team0: Port device team_slave_1 added [ 1073.461671][T12171] net_ratelimit: 125 callbacks suppressed [ 1073.461686][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1073.481908][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1073.503124][T12178] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1073.568772][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1073.568792][T12174] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1073.780215][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1073.780236][T12174] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1074.011065][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1074.031415][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1074.051500][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1075.342092][T22466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1075.342106][T22466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.342120][T22466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.343902][T22466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.343912][T22466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.343927][T22466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1076.473661][ T29] audit: type=1400 audit(1786542830.654:5342): avc: denied { write } for pid=22613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1078.711727][ T35] net_ratelimit: 80 callbacks suppressed [ 1078.711743][ T35] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1078.733723][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1078.901648][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1078.928822][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1078.943438][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1079.108879][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1079.210053][ T48] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1079.221725][T12180] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1079.241507][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1079.312340][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1082.107879][ T29] audit: type=1400 audit(1786542836.284:5343): avc: denied { write } for pid=22633 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1082.413644][T22560] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1082.425510][T22560] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1082.427523][T22560] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1082.429453][T22560] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1082.430870][T22560] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1083.733927][T12174] net_ratelimit: 97 callbacks suppressed [ 1083.733941][T12174] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1083.763236][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1083.782752][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1083.817378][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1083.832144][T12933] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1083.852419][T12177] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1083.871696][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1083.892519][ T413] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1083.892540][ T413] bond1: (slave ip6gretap2): failed to get link speed/duplex [ 1084.150764][T12171] bond1: (slave ip6gretap2): link status up, enabling it in 0 ms [ 1084.507339][ T29] audit: type=1400 audit(1786542838.684:5344): avc: denied { write } for pid=22641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1084.791580][T21928] Bluetooth: hci9: command tx timeout [ 1085.377936][ T5625] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1085.691596][ T5625] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1085.697192][ T5625] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1085.698125][ T5625] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1085.698732][ T5625] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1086.160464][T22560] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1086.305989][T22560] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1086.583580][T22560] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1086.584522][T22560] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1086.585115][T22560] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1086.864875][ T5625] Bluetooth: hci9: command tx timeout [ 1087.876344][ T30] INFO: task syz.9.4193:21795 blocked for more than 143 seconds. [ 1087.876365][ T30] Tainted: G L syzkaller #0 [ 1087.876372][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1087.876378][ T30] task:syz.9.4193 state:D stack:27688 pid:21795 tgid:21791 ppid:14122 task_flags:0x400140 flags:0x00080002 [ 1087.876411][ T30] Call Trace: [ 1087.876416][ T30] [ 1087.876423][ T30] __schedule+0x125c/0x6730 [ 1087.876444][ T30] ? kernel_text_address+0x8d/0x100 [ 1087.876462][ T30] ? __pfx___schedule+0x10/0x10 [ 1087.876474][ T30] ? find_held_lock+0x2b/0x80 [ 1087.876486][ T30] ? schedule+0x225/0x2c0 [ 1087.876501][ T30] schedule+0xdd/0x2c0 [ 1087.876513][ T30] schedule_timeout+0x1b2/0x280 [ 1087.876532][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1087.876553][ T30] ? __down_common+0x369/0x8b0 [ 1087.876569][ T30] ? rcu_is_watching+0x12/0xc0 [ 1087.876589][ T30] __down_common+0x371/0x8b0 [ 1087.876607][ T30] ? __pfx___down_common+0x10/0x10 [ 1087.876621][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1087.876639][ T30] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1087.876655][ T30] down+0x74/0xa0 [ 1087.876669][ T30] console_lock+0x5b/0xa0 [ 1087.876684][ T30] tioclinux+0x41d/0x640 [ 1087.876700][ T30] vt_ioctl+0x1778/0x3110 [ 1087.876724][ T30] ? __pfx_vt_ioctl+0x10/0x10 [ 1087.876741][ T30] ? find_held_lock+0x2b/0x80 [ 1087.876755][ T30] ? tomoyo_path_number_perm+0x188/0x580 [ 1087.876776][ T30] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1087.876792][ T30] ? __pfx_vt_ioctl+0x10/0x10 [ 1087.876810][ T30] tty_ioctl+0x26a/0x1640 [ 1087.876826][ T30] ? __pfx_tty_ioctl+0x10/0x10 [ 1087.876840][ T30] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1087.876863][ T30] ? __fget_files+0x215/0x3d0 [ 1087.876875][ T30] ? hook_file_ioctl_common+0x140/0x440 [ 1087.876893][ T30] ? selinux_file_ioctl+0x13b/0x290 [ 1087.876910][ T30] ? selinux_file_ioctl+0xb6/0x290 [ 1087.876929][ T30] ? __pfx_tty_ioctl+0x10/0x10 [ 1087.876944][ T30] __x64_sys_ioctl+0x18e/0x210 [ 1087.876962][ T30] do_syscall_64+0x115/0x870 [ 1087.876977][ T30] ? clear_bhb_loop+0x40/0x90 [ 1087.876991][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.877004][ T30] RIP: 0033:0x7f009039e0d9 [ 1087.877014][ T30] RSP: 002b:00007f0091218028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1087.877025][ T30] RAX: ffffffffffffffda RBX: 00007f0090626090 RCX: 00007f009039e0d9 [ 1087.877033][ T30] RDX: 0000200000000000 RSI: 000000000000541c RDI: 0000000000000007 [ 1087.877041][ T30] RBP: 00007f0090435024 R08: 0000000000000000 R09: 0000000000000000 [ 1087.877048][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.877056][ T30] R13: 00007f0090626128 R14: 00007f0090626090 R15: 00007ffe53947a88 [ 1087.877071][ T30] [ 1087.877077][ T30] INFO: task syz.3.4231:22007 blocked for more than 143 seconds. [ 1087.877087][ T30] Tainted: G L syzkaller #0 [ 1087.877093][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1087.877099][ T30] task:syz.3.4231 state:D stack:26440 pid:22007 tgid:22006 ppid:21282 task_flags:0x400140 flags:0x00080002 [ 1087.877129][ T30] Call Trace: [ 1087.877133][ T30] [ 1087.877140][ T30] __schedule+0x125c/0x6730 [ 1087.877156][ T30] ? do_raw_spin_lock+0x128/0x260 [ 1087.877176][ T30] ? __pfx___schedule+0x10/0x10 [ 1087.877188][ T30] ? find_held_lock+0x2b/0x80 [ 1087.877199][ T30] ? schedule+0x225/0x2c0 [ 1087.877214][ T30] schedule+0xdd/0x2c0 [ 1087.877226][ T30] schedule_preempt_disabled+0x13/0x30 [ 1087.877239][ T30] __mutex_lock+0xccc/0x1bd0 [ 1087.877255][ T30] ? tty_open+0x539/0xfa0 [ 1087.877272][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1087.877289][ T30] ? kasan_save_track+0x14/0x30 [ 1087.877305][ T30] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 1087.877324][ T30] ? tty_open+0x139/0xfa0 [ 1087.877341][ T30] ? tty_open+0x539/0xfa0 [ 1087.877355][ T30] tty_open+0x539/0xfa0 [ 1087.877372][ T30] ? __pfx_tty_open+0x10/0x10 [ 1087.877387][ T30] ? chrdev_open+0x10b/0x6a0 [ 1087.877399][ T30] ? chrdev_open+0x10b/0x6a0 [ 1087.877412][ T30] ? __pfx_tty_open+0x10/0x10 [ 1087.877428][ T30] chrdev_open+0x234/0x6a0 [ 1087.877440][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1087.877454][ T30] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1087.877472][ T30] do_dentry_open+0x6ab/0x14d0 [ 1087.877483][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1087.877498][ T30] vfs_open+0x82/0x3f0 [ 1087.877514][ T30] path_openat+0x2873/0x4280 [ 1087.877533][ T30] ? __pfx_path_openat+0x10/0x10 [ 1087.877549][ T30] do_file_open+0x20e/0x430 [ 1087.877563][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1087.877585][ T30] ? alloc_fd+0x471/0x7a0 [ 1087.877598][ T30] ? do_getname+0x191/0x390 [ 1087.877615][ T30] do_sys_openat2+0x10f/0x1e0 [ 1087.877629][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1087.877649][ T30] __x64_sys_openat+0x12d/0x210 [ 1087.877665][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1087.877684][ T30] do_syscall_64+0x115/0x870 [ 1087.877698][ T30] ? clear_bhb_loop+0x40/0x90 [ 1087.877712][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.877728][ T30] RIP: 0033:0x7f7a15b5e90e [ 1087.877737][ T30] RSP: 002b:00007f7a16a05b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1087.877748][ T30] RAX: ffffffffffffffda RBX: 00007f7a16a066c0 RCX: 00007f7a15b5e90e [ 1087.877756][ T30] RDX: 0000000000000002 RSI: 00007f7a16a05c00 RDI: ffffffffffffff9c [ 1087.877763][ T30] RBP: 00007f7a15c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1087.877771][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.877778][ T30] R13: 00007f7a15e26038 R14: 00007f7a15e25fa0 R15: 00007ffd672976d8 [ 1087.877792][ T30] [ 1087.877797][ T30] INFO: task syz.3.4231:22009 blocked for more than 143 seconds. [ 1087.877806][ T30] Tainted: G L syzkaller #0 [ 1087.877813][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1087.877818][ T30] task:syz.3.4231 state:D stack:28776 pid:22009 tgid:22006 ppid:21282 task_flags:0x400040 flags:0x00080002 [ 1087.877846][ T30] Call Trace: [ 1087.877850][ T30] [ 1087.877856][ T30] __schedule+0x125c/0x6730 [ 1087.877873][ T30] ? put_dec_trunc8+0x28b/0x370 [ 1087.877894][ T30] ? __pfx___schedule+0x10/0x10 [ 1087.877906][ T30] ? find_held_lock+0x2b/0x80 [ 1087.877917][ T30] ? schedule+0x225/0x2c0 [ 1087.877931][ T30] schedule+0xdd/0x2c0 [ 1087.877944][ T30] schedule_timeout+0x1b2/0x280 [ 1087.877964][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1087.877986][ T30] ? mark_held_locks+0x40/0x70 [ 1087.878002][ T30] __down_common+0x371/0x8b0 [ 1087.878020][ T30] ? __pfx___down_common+0x10/0x10 [ 1087.878037][ T30] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1087.878052][ T30] down+0x74/0xa0 [ 1087.878067][ T30] console_lock+0x5b/0xa0 [ 1087.878081][ T30] con_install+0x99/0x620 [ 1087.878096][ T30] ? __pfx_con_install+0x10/0x10 [ 1087.878113][ T30] ? __pfx_con_install+0x10/0x10 [ 1087.878127][ T30] tty_init_dev.part.0+0x9e/0x470 [ 1087.878145][ T30] tty_open+0xa63/0xfa0 [ 1087.878162][ T30] ? __pfx_tty_open+0x10/0x10 [ 1087.878177][ T30] ? chrdev_open+0x589/0x6a0 [ 1087.878188][ T30] ? chrdev_open+0x589/0x6a0 [ 1087.878202][ T30] ? __pfx_tty_open+0x10/0x10 [ 1087.878217][ T30] chrdev_open+0x234/0x6a0 [ 1087.878230][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1087.878243][ T30] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1087.878260][ T30] do_dentry_open+0x6ab/0x14d0 [ 1087.878271][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1087.878287][ T30] vfs_open+0x82/0x3f0 [ 1087.878302][ T30] path_openat+0x2873/0x4280 [ 1087.878320][ T30] ? __pfx_path_openat+0x10/0x10 [ 1087.878337][ T30] do_file_open+0x20e/0x430 [ 1087.878350][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1087.878372][ T30] ? alloc_fd+0x471/0x7a0 [ 1087.878386][ T30] ? do_getname+0x191/0x390 [ 1087.878402][ T30] do_sys_openat2+0x10f/0x1e0 [ 1087.878417][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1087.878433][ T30] ? do_raw_spin_lock+0x128/0x260 [ 1087.878449][ T30] ? find_held_lock+0x2b/0x80 [ 1087.878462][ T30] __x64_sys_openat+0x12d/0x210 [ 1087.878477][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1087.878493][ T30] ? kcov_ioctl+0x17a/0x750 [ 1087.878509][ T30] do_syscall_64+0x115/0x870 [ 1087.907516][ T30] ? clear_bhb_loop+0x40/0x90 [ 1087.907540][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.907554][ T30] RIP: 0033:0x7f7a15b5e90e [ 1087.907564][ T30] RSP: 002b:00007f7a169e4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1087.907576][ T30] RAX: ffffffffffffffda RBX: 00007f7a169e56c0 RCX: 00007f7a15b5e90e [ 1087.907584][ T30] RDX: 0000000000000002 RSI: 00007f7a169e4c00 RDI: ffffffffffffff9c [ 1087.907592][ T30] RBP: 00007f7a15c35024 R08: 0000000000000000 R09: 0000000000000000 [ 1087.907600][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1087.907607][ T30] R13: 00007f7a15e26128 R14: 00007f7a15e26090 R15: 00007ffd672976d8 [ 1087.907621][ T30] [ 1087.907647][ T30] [ 1087.907647][ T30] Showing all locks held in the system: [ 1087.907655][ T30] 1 lock held by khungtaskd/30: [ 1087.907662][ T30] #0: ffffffff8ebe8200 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1087.907704][ T30] 3 locks held by kworker/u8:6/413: [ 1087.907710][ T30] #0: ffff88801bc44140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1087.907746][ T30] #1: ffffc9000315fd08 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1087.907775][ T30] #2: ffffffff90aa02c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1087.907823][ T30] 2 locks held by getty/5368: [ 1087.907830][ T30] #0: ffff8880380670a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1087.907859][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 1087.907900][ T30] 6 locks held by kworker/u8:26/12175: [ 1087.907907][ T30] #0: ffff88801ce90940 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1087.907936][ T30] #1: ffffc90004d6fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1087.907967][ T30] #2: ffffffff90a876c8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1087.908000][ T30] #3: ffff88802d826128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x19e/0x370 [ 1087.908030][ T30] #4: ffff88802d823258 (&devlink->lock_key#21){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x1b4/0x370 [ 1087.908064][ T30] #5: ffffffff90aa02c0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x1a6/0x970 [ 1087.908093][ T30] 2 locks held by kworker/u8:28/12177: [ 1087.908099][ T30] #0: ffff88801bc44140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 1087.908128][ T30] #1: ffffc900057ffd08 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 1087.908168][ T30] 6 locks held by syz.6.4180/21727: [ 1087.908176][ T30] 1 lock held by syz.3.4231/22007: [ 1087.908183][ T30] #0: ffffffff8f986e60 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 1087.908214][ T30] 2 locks held by syz.3.4231/22009: [ 1087.908221][ T30] #0: ffffffff8f986e60 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 1087.908251][ T30] #1: ffff8880344221b0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev.part.0+0x39/0x470 [ 1087.908283][ T30] 1 lock held by syz.7.4236/22043: [ 1087.908290][ T30] #0: ffffffff8f986e60 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x360 [ 1087.908321][ T30] 1 lock held by syz-executor/22466: [ 1087.908330][ T30] 2 locks held by syz-executor/22557: [ 1087.908337][ T30] #0: ffffffff90a876c8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x451/0x7c0 [ 1087.908369][ T30] #1: ffffffff90aa02c0 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x50 [ 1087.908401][ T30] 1 lock held by syz-executor/22642: [ 1087.908407][ T30] #0: ffffffff90aa02c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8bb/0x2380 [ 1087.908439][ T30] 1 lock held by syz-executor/22660: [ 1087.908446][ T30] #0: ffffffff90aa02c0 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x30c/0x18b0 [ 1087.908474][ T30] 1 lock held by rm/22668: [ 1087.908480][ T30] 2 locks held by modprobe/22672: [ 1087.908487][ T30] [ 1087.908490][ T30] ============================================= [ 1087.908490][ T30] [ 1087.908496][ T30] NMI backtrace for cpu 0 [ 1087.908506][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1087.908520][ T30] Tainted: [L]=SOFTLOCKUP [ 1087.908524][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1087.908530][ T30] Call Trace: [ 1087.908534][ T30] [ 1087.908538][ T30] dump_stack_lvl+0x100/0x190 [ 1087.908552][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1087.908567][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1087.908583][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 1087.908597][ T30] sys_info+0x141/0x190 [ 1087.908613][ T30] watchdog+0xcb1/0x1030 [ 1087.908629][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1087.908641][ T30] ? __pfx_watchdog+0x10/0x10 [ 1087.908654][ T30] ? __kthread_parkme+0x18c/0x230 [ 1087.908671][ T30] ? kthread+0x13a/0x450 [ 1087.908680][ T30] ? __pfx_watchdog+0x10/0x10 [ 1087.908692][ T30] kthread+0x370/0x450 [ 1087.908702][ T30] ? __pfx_kthread+0x10/0x10 [ 1087.908713][ T30] ret_from_fork+0x72b/0xd50 [ 1087.908734][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1087.908750][ T30] ? __switch_to+0x800/0x10f0 [ 1087.908761][ T30] ? __pfx_kthread+0x10/0x10 [ 1087.908772][ T30] ret_from_fork_asm+0x1a/0x30 [ 1087.908793][ T30] [ 1087.908800][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1087.908808][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1087.908822][ T30] Tainted: [L]=SOFTLOCKUP [ 1087.908826][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1087.908833][ T30] Call Trace: [ 1087.908837][ T30] [ 1087.908841][ T30] dump_stack_lvl+0x100/0x190 [ 1087.908855][ T30] vpanic+0x552/0x970 [ 1087.908865][ T30] ? __pfx_vpanic+0x10/0x10 [ 1087.908876][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 1087.908887][ T30] ? rcu_is_watching+0x12/0xc0 [ 1087.908906][ T30] panic+0xd1/0xe0 [ 1087.908916][ T30] ? __pfx_panic+0x10/0x10 [ 1087.908927][ T30] ? nmi_cpu_backtrace+0x79/0x200 [ 1087.908939][ T30] ? nmi_trigger_cpumask_backtrace+0x203/0x2a0 [ 1087.908950][ T30] ? watchdog.cold+0x1ec/0x234 [ 1087.908962][ T30] ? watchdog+0xcc1/0x1030 [ 1087.908975][ T30] watchdog.cold+0x1fd/0x234 [ 1087.908990][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1087.909002][ T30] ? __pfx_watchdog+0x10/0x10 [ 1087.909015][ T30] ? __kthread_parkme+0x18c/0x230 [ 1087.909032][ T30] ? kthread+0x13a/0x450 [ 1087.909042][ T30] ? __pfx_watchdog+0x10/0x10 [ 1087.909054][ T30] kthread+0x370/0x450 [ 1087.909064][ T30] ? __pfx_kthread+0x10/0x10 [ 1087.909076][ T30] ret_from_fork+0x72b/0xd50 [ 1087.909092][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1087.909108][ T30] ? __switch_to+0x800/0x10f0 [ 1087.909119][ T30] ? __pfx_kthread+0x10/0x10 [ 1087.909130][ T30] ret_from_fork_asm+0x1a/0x30 [ 1087.909152][ T30] [ 1087.909199][ T30] Kernel Offset: disabled