last executing test programs: 2m41.576702756s ago: executing program 0 (id=1144): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000700001002abd7000fbdbdf2507000000", @ANYRES32=r1, @ANYBLOB="0c000180"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x7, 0x23, 0x200, &(0x7f0000000400)="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"}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x4, &(0x7f0000000840)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x4, r7, 0x0, &(0x7f00000006c0)) fcntl$setownex(r6, 0xf, &(0x7f0000000100)={0x0, r7}) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 2m40.956410862s ago: executing program 0 (id=1157): setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000340)=0x20, 0x4) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x15) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000004c40)={0x0, 0x0, &(0x7f00000047c0), 0x0, 0x0, 0x0, 0x5}, 0xc0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0600000004000000070000000800000000400000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008ea8f19a460a2c334f0a26e580d3d92c5c1c0a937b10631f369e35b83c621f932af241775a9ce0d9f60dfb679325d2bc59fb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xd, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf5, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0xfffffffe, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x4, 0x8, 0x7, 0x1, 0x1, 0x8000001, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x3}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0857f9f582f03000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) open$dir(0x0, 0x1, 0x19d) r10 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r10, 0x4020565a, &(0x7f0000000100)={0x3, 0x980900}) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) 2m37.389760328s ago: executing program 0 (id=1150): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000700001002abd7000fbdbdf2507000000", @ANYRES32=r1, @ANYBLOB="0c000180"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x7, 0x23, 0x200, &(0x7f0000000400)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309002500000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc60efd680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca512b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413fcea0ce9ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3f303a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a3cff46591ccaff3075b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a2b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293e37966611602f297de6ff5408777d7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f63520cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c909cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f80000000000000000000000000000000000000000000000000200"}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0189436, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f0000000780)={0x30, r6, 0x0, 0x0, 0x0, 0x0, 0xec8, 0x0}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x4, &(0x7f0000000840)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) close(r8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x4, r10, 0x0, &(0x7f00000006c0)) fcntl$setownex(r9, 0xf, &(0x7f0000000100)={0x0, r10}) ioctl$sock_FIOGETOWN(r9, 0x8903, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 2m36.265064975s ago: executing program 0 (id=1153): r0 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x58}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x10044050) socket(0x8, 0x3, 0x0) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x100000500) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0xb, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x7fffffff, 0x8}}}}]}, 0x44}}, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) 2m34.814638766s ago: executing program 0 (id=1155): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) socket$inet6(0xa, 0x3, 0x2) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000003c0)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) futex_waitv(&(0x7f0000001e40)=[{0x1edf, &(0x7f0000000440)=0x7, 0x2}], 0x1, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000040)=@tcp6=r1}, 0x20) sendmmsg$inet6(r1, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) sendto$inet6(r1, &(0x7f0000000200)="9000", 0xc3ff, 0x844, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) 2m29.791344684s ago: executing program 4 (id=1169): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r4, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r3, 0x7) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r6, r0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r7, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 2m28.93966932s ago: executing program 4 (id=1170): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x5, 0x0}}, 0x10) getsockname$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r2 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) r4 = openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a826bd209da8ffa6a26e3b3f8075784a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261dac62da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f80000000000000000", 0xc5}], 0x1135}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001600)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f817", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240), 0x1}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000400)="1f63ee18656cecd47c93feee4a80738d387be1a9f50e2fbcadd19cb323be2b9cba239fd8052be58c6cd3d60e67e70038315075ac2889365b522531e1210ff695ebe663446fcad493d72f847f907493aaf5671e01cce3274daba36e7ee0d974433e40b8785471d83e4f35cf08221fcca72b23dbdfc61dc9937e739603c7a8f50f6fe230732daaae6145caf22af0727370fc56d6379ecc61d3d6ff65a652cb319aed287876ebbce9154a57", 0xaa}, {&(0x7f0000000500)="c606e6a4dd2077a92b1133dea76e7478b5927a7bfee4dc877e9462fab3845e6afc26e82742fbaacbbf339a9a0c8e981ab3bb7ba7772d132f03ace043bc585765b2be2de7", 0x44}, {&(0x7f00000005c0)="5eba26cb973750f92c7433947cdb998008a16c97f545ad1cddd1bbce737e8bc24513a15b01405fff37c9b9a90b11bae7e31e", 0x32}, {&(0x7f0000000740)="6c4f5b0d70b374a17a34b7952f3fef376d7da70fdcab792560e758d2da30f86ee1dd9f02840e2abc364e3f60fa4f4eb47b83b997f7dde7e3b2488bd3480a5ab015e1361a4cb20504f52149e0751592a90bd9b0d3473fa72cc517286893fd86796a98bd10ad8bf97068152c8181b7574f2a746a7f8c82dc6b3f6da453d26f5b5cae13a5d68420047d28fefd5ca2e9589b1931c669e062c1bb05686560839643d6a311a13888f390db581f7e72f07a8a3c7bfb9cba367d56393cee682d772d6cb7", 0xc0}, {&(0x7f0000000840)="1879e2c2c2dbee067e01526f0c2af9f142b218a4f0dc86d73d0d2a3730d7ea", 0x1f}], 0x5}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000580)=0xdfa, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) shmctl$SHM_LOCK(0x0, 0xb) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xb, 0x9}, {}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2m28.65823495s ago: executing program 4 (id=1171): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0xd}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff1}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x2) fchdir(r7) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0x80049367, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="0015b3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x19, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, &(0x7f0000000040)) read$char_usb(r10, &(0x7f0000000300)=""/219, 0xdb) 2m28.301013429s ago: executing program 0 (id=1173): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r6}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x44, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe51, 0xb, 0x8001}, {0x6, 0x11, 0x40}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd0, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9609}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80c}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) socket(0x2b, 0xa, 0x7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r10, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 2m26.921467059s ago: executing program 32 (id=1173): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r6}) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x44, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffe51, 0xb, 0x8001}, {0x6, 0x11, 0x40}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd0, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9609}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80c}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) socket(0x2b, 0xa, 0x7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r10, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 2m24.549757306s ago: executing program 4 (id=1179): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040010}, 0x30) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000003c0)={{0xa, 0x6, 0x6, 0x0, 'syz1\x00', 0x401}, 0x3, 0x20000000, 0x6, r1, 0x0, 0x3, 'syz0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140), 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20004014) epoll_create(0x89a) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x600, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7}, 0x8) syz_open_procfs$namespace(0x0, &(0x7f0000000bc0)='ns/net\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r6, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r5, {0x1a1}}, './file0\x00'}) r7 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x2) ppoll(&(0x7f0000000200)=[{r7, 0x1000}, {0xffffffffffffffff, 0x2401}], 0x2, &(0x7f0000000280), 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 2m23.796153527s ago: executing program 4 (id=1180): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) socket(0x10, 0x3, 0xd1f) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c00001800378013000300"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r6, 0x0, &(0x7f0000561000/0x1000)=nil, 0x1000, 0x1004000}) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, 0x0, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="00000000a527394dbf9a0f36bf38859fd8a04ccb9fef046155a1cfff1b04fa6baa5bb431f924ba2519561249a09601ff462f76d04d3628456d12382ea6521869870e45e9d30c4cf403c38875c0076bf00c0dad116f2ca34a878822bb71ccfcd34f212e75b6c02a943f1688b44b454395b14ef85c25df1573c7a68713d2e048c6b212c36720ef6ead32", @ANYRES16=r8, @ANYBLOB="000127bd7000fbdbdf2543000000", @ANYRES32=r9, @ANYBLOB='\f\x00X\x00l\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00\v\x00\x00\x00\x00\x00\x00\x00\f\x00X\x00J\x00\x00\x00\x00\x00\x00\x00'], 0x40}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 2m23.193605253s ago: executing program 4 (id=1181): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xd, &(0x7f0000000000)={0xffffffffffffffff, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="0002020100000000ff02000000000000000000000000000179526ca58e11f0c9b8fcc2f5b9b8783b7af855f343388e2e6c9a40568b4d9fcca3315dc12e8ff91e8b05e5e59ef7ffddd126"], 0x18) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000020601020000000000000000000000000900020073797a3000000000050004000000000005000500020000000d009dda0a84463203006c6973743a"], 0x54}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r6}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) sendmsg$NFT_BATCH(r1, 0x0, 0x24000000) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000041) unshare(0x6a040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) 2m8.070234655s ago: executing program 33 (id=1181): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xd, &(0x7f0000000000)={0xffffffffffffffff, 0x3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="0002020100000000ff02000000000000000000000000000179526ca58e11f0c9b8fcc2f5b9b8783b7af855f343388e2e6c9a40568b4d9fcca3315dc12e8ff91e8b05e5e59ef7ffddd126"], 0x18) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000020601020000000000000000000000000900020073797a3000000000050004000000000005000500020000000d009dda0a84463203006c6973743a"], 0x54}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x7d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r6}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) sendmsg$NFT_BATCH(r1, 0x0, 0x24000000) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000041) unshare(0x6a040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) 29.824544694s ago: executing program 1 (id=1354): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0x0, 0x7, 0xfffbffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2a000000400007012bbd700000000000017c0000040001800c00028005001780b0000000d31a8554928225ac036f2e22ba12b2dd4ed786ce0a9f977a3c90823f9d96bd4fd67c64e58aede0ac6a1819fb7ac1a1cfab413c1766972c2cddd27352bb1c6846839bd10fed0551f7c65feb2eb85cb2763b428bb315ba515895b1a85c612d6960364d5257dc816fa8a6dcdf5901cef48158753112a0a70290797ee340c015d50e6f3a98d9"], 0x24}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000200)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dvb_frontend(&(0x7f0000000740), 0x0, 0x2) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e21, @empty}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080), 0x18) 23.239908243s ago: executing program 3 (id=1367): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, &(0x7f0000000300)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f00000000000000000000006a3f7860d3ee6eb4b2c5f9c5d04b88356fa0a922c422cc23ac16635b1024517a42fc1dd3ece66beee92cf5132e4b382ddcd6244bcc7ba5f912ac24968e", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r2, 0x0, 0x25, 0x11, @val=@tcx={@void, @value=r2, @void, @void, r6}}, 0x1c) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 18.896726778s ago: executing program 3 (id=1374): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001e80)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x1e0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xa70, 0xa70, 0xa70, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast2, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1, 0x28}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc048aeca, &(0x7f0000000480)={0x6, 0x0, [{0xbf9, 0x0, 0xffffffffffffff9f}, {0x2b2, 0x0, 0xab40}, {0x9c8, 0x0, 0xfffffffffffffffa}, {0x581, 0x0, 0x81}, {0x636, 0x0, 0x9}, {0xbc1, 0x0, 0x82}]}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000100)=@req={0x0, 0x2, 0xc, 0x9}, 0xc) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) r9 = syz_open_dev$media(&(0x7f0000000380), 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r9, 0xc0487c04, &(0x7f00000005c0)={0x0, 0x7, 0x0, &(0x7f0000001040)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000c80)=[{}, {}], 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f00000004c0)}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r10, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) ioctl$FBIO_WAITFORVSYNC(r8, 0x40044620, 0x0) r11 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x3fd, @empty, 0x3}, 0x1c) 18.716121906s ago: executing program 1 (id=1375): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ff", 0x1, 0xfffffffffffffffe) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000"], 0x0, 0x56}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)={0x24, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x12b, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @uid}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x20000000) 17.299750127s ago: executing program 1 (id=1376): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1], 0x50) socket$kcm(0x10, 0x7, 0x0) mlock2(&(0x7f00008d2000/0x1000)=nil, 0x1000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) fsopen(0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x141442, 0x98) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x190) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file1\x00') bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000500)="d7") 15.973863232s ago: executing program 1 (id=1379): socket$kcm(0x2d, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000480)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@euid_lt={'euid<', r4}}, {@pcr={'pcr', 0x3d, 0x15}}, {@euid_eq}, {@euid_lt}, {@fowner_eq}]}}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r6, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r6, &(0x7f00000003c0), &(0x7f0000000300)=@tcp=r7, 0x1}, 0x20) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 12.096677002s ago: executing program 5 (id=1389): r0 = socket(0x400000000010, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="2e010000ed454210cd0c99009bf4000203010902120001000000000904"], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) name_to_handle_at(0xffffffffffffffff, 0x0, &(0x7f0000000340)=ANY=[], &(0x7f0000001500), 0x200) unshare(0x2c020400) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000e80)=@nat={'nat\x00', 0x670, 0x5, 0x668, 0x470, 0x0, 0xfeffffff, 0x348, 0x470, 0x5f8, 0x5f8, 0xffffffff, 0x5f8, 0x5f8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6, 0x0, 0x42}, 0x0, 0x308, 0x348, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {}, 0xe, 0x45da745f41602387}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x3c, "672aa37433823e2ec551dffef2f50b7e14d5905c77d37ba9f2eb3a8b53e8"}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x6, 0x1], 0x0, 0x3}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id, @port=0xfffe}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@multicast1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6c8) socket(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000300)={0x1a, 0x0, 0x8, 0xff, 0x2, 0x9, @local}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001e00010002000000fddbdf35020500000000000000000000080001005407d660080006"], 0x34}, 0x1, 0x0, 0x0, 0x4c806}, 0x20004000) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200), 0xc0040, 0x0) r7 = syz_open_dev$dri(0x0, 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r7, 0xc008640a, &(0x7f0000000300)={r8}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000240)={r8, 0x80000}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x6, 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) 11.261439806s ago: executing program 3 (id=1391): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000040000701feffffff0000000042801400018006000600800a0000080003000000001e0000000026ef00ba1f1490fdd5c08ee1f268a83e96fd07a0", @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14) r1 = socket(0x28, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2b, 0x80000, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) listen(r2, 0x204) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x4c, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040), 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000000000000000000b556a705251e6182149a08c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c1504bb918689d9193e9bd1c1b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000001100)=ANY=[@ANYBLOB="1c0000f5000000000000000000000004000045"], 0x58) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() 11.25792512s ago: executing program 2 (id=1392): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0x0, 0x7, 0xfffbffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0xc8, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_PEERS={0x98, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9959076f17a3df260c32673333152e018f4fbe8eca2b76a7ccc30541f025a77c"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, &(0x7f0000000200)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 9.588769853s ago: executing program 6 (id=1395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="0000000008290400240012800b000100697036746e6c0000140002800600120000000000060012", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x24008888}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={r7, 0xffffffffffffffff, 0xfffffb6e}) r8 = socket$rds(0x15, 0x5, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x2c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff3}, {}, {0x7, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20041090}, 0x40000) bind$rds(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r8, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x20000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r10, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) 9.434320628s ago: executing program 2 (id=1396): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000004900)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x2, @mcast1, 0xa3d7}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@hoplimit={{0x14}}], 0x18}}], 0x1, 0x8c0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x40000, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, r1) sendto$inet6(r6, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x27a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e000"], 0xdc}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x2c}}, 0x40085) pipe2(&(0x7f0000000000), 0x80000) 8.330376692s ago: executing program 6 (id=1397): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'mpc624\x00', [0x0, 0xff, 0x2, 0x9, 0x14000000, 0x800, 0xfffffffc, 0x7, 0xfff, 0x7ffe, 0x3, 0x3, 0x400, 0x94f, 0x13, 0x10000104, 0xd, 0x7, 0xe0e8, 0x1, 0x3ff, 0x9, 0x200, 0x7, 0xaa14, 0x5, 0x1, 0x0, 0x1, 0xf58, 0x80000001]}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) r1 = syz_open_dev$sndctrl(0x0, 0x84, 0x40) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x5, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x45, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000080)={0x84, @local, 0x15, 0x3, 'sh\x00', 0x28, 0x5, 0x1}, 0x2c) r5 = socket$kcm(0xa, 0x2, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x73, @remote, 0x4e24, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xf, 0x2}}, 0x44) sendmsg$sock(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r2], 0x2c}, 0x1, 0x0, 0x0, 0x10040047}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x4814) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) syz_usb_connect(0x4, 0x2d, &(0x7f0000001080)=ANY=[], 0x0) alarm(0x64) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) 8.326514195s ago: executing program 2 (id=1398): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = gettid() r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x7, 0x0, &(0x7f0000000900)="e02742e8680d85", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) cachestat(r7, &(0x7f0000000240)={0x3, 0x8}, &(0x7f0000000280), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r8 = syz_open_dev$sndctrl(&(0x7f00000002c0), 0x9, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r8, 0xc1105511, &(0x7f0000000680)={{0x4, 0x2, 0x6, 0xc3b, 'syz1\x00', 0x8}, 0x4, 0x100, 0x7f, r5, 0x4, 0x3, 'syz1\x00', &(0x7f0000000300)=['\x00', '\x00', 'system.posix_acl_access\x00', 'system.posix_acl_access\x00'], 0x32}) r9 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r9, &(0x7f0000002700)=""/102392, 0x18ff8) r10 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_mreqn(r10, 0x0, 0x20, 0x0, 0x300) socket$kcm(0x10, 0x2, 0x0) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mmap(&(0x7f0000fa3000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r11, 0xdd81000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40), 0x4) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) setsockopt$MRT6_TABLE(r3, 0x29, 0xcf, &(0x7f0000000080)=0xfc, 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 8.26854667s ago: executing program 5 (id=1399): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="ff", 0x1, 0xfffffffffffffffe) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000"], 0x0, 0x56}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)={0x24, 0x46, 0x107, 0x70bd28, 0x0, {0x1, 0x7c}, [@nested={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x12b, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @uid}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x20000000) 7.715487568s ago: executing program 3 (id=1400): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x81f}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x7, &(0x7f0000000300)=[{0x2, 0x7, 0x95, 0x4584}, {0x3ff, 0x10, 0x6, 0xd}, {0x0, 0xb, 0x5, 0xe66}, {0x0, 0xf, 0x36, 0x7fff}, {0x0, 0x4a, 0x4, 0xd649}, {0x6, 0x78, 0x2, 0x401}, {0xf13c, 0x7, 0x2, 0x8001}]}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001200010000000000000000000a00000000004e2100000000ffffffff0000000000000000feffffff000000000000000000000000dfe01daf2215441e2ae4c7b81603158d13a460e04aa48aad311933615a35945a2f97e078b020976e61aaa94dd1facf1b69d2863201cfe193f8c5db5d4e9103e43a58025bf2a7cca3575c001dbf7889eeaf8926cde76c038ebe9d1b05f77466b6b0f169f466b6ea5508ffc89c55a204b0c0083c7122b1e198b7bb1eddda27b25feab64872c3346b2c00824609975f8c9cfdde7d1b3afbbfd2f62041e53b818e02b69b145f5de26b6feefd7e2ab908f0675f3cbb20332a03815e286f13cffb871cdef45578ca34dd360db3706f77c629b1dd073c4a23aefe0f7338000000000000000000000000977c4b7670886e11262c602a8a62d1c684441e936e5da4c1e9d24ef91efcc900f15f5a1dedd5b78127589ec27a08913b0c41a1ee184c83c6387094357089ba0f7d372b40215138ffce92c64bdf27e373b8c3ca81e6a0379d7e0cb4a4ccf1a21dd7a1f401772bfb32bf6ee3f423ce891bc33c6de92a2a16b521c43ef6c56bb0f5367a6c109ea15ca0a5618e3e22a5a30d9849a068ed4a5a0d7613056cbed428d417fe7d729fc1108825608de7bc9b34e851ef8dc14a69843109a782013c9dc387cf987263dbf0fbb2c3950ade369278ca2ba0c3895640bc324afa729c3464990300"/526, @ANYRES32=0x0, @ANYBLOB="010000000300000000000000000000000800030011000000f02ffe9ec85fa5769442fddca420151904df28cf570c9571a9c43a52fbd3fd7253938a15b43b4a91dc36cb01dbbd3a5f35f9eaa1bbed44fa23987073aa524c1c2f1aea7d46317f4ed1a28f0abf59d57fad5b474ec47a4af94f482a438eca44cc1d8f32452b97b84fd3c2dfa4bff9a668005fcc6911", @ANYRES8=r5], 0x54}, 0x1, 0x0, 0x0, 0x44044}, 0x20004010) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b01"], 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) unshare(0x40020000) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x40000072, 0x0, 0x7ff}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}]}, 0x50}}, 0x40080) 7.665441766s ago: executing program 2 (id=1401): openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001e80)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x1e0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xa70, 0xa70, 0xa70, 0xffffffff, 0x4, 0x0, {[{{@ip={@multicast2, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1, 0x28}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc048aeca, &(0x7f0000000480)={0x6, 0x0, [{0xbf9, 0x0, 0xffffffffffffff9f}, {0x2b2, 0x0, 0xab40}, {0x9c8, 0x0, 0xfffffffffffffffa}, {0x581, 0x0, 0x81}, {0x636, 0x0, 0x9}, {0xbc1, 0x0, 0x82}]}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000100)=@req={0x0, 0x2, 0xc, 0x9}, 0xc) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) r9 = syz_open_dev$media(&(0x7f0000000380), 0x3, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r9, 0xc0487c04, &(0x7f00000005c0)={0x0, 0x7, 0x0, &(0x7f0000001040)=[{}, {}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000c80)=[{}, {}], 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f00000004c0)}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r10, 0x0, 0x0, 0x20000010, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) ioctl$FBIO_WAITFORVSYNC(r8, 0x40044620, 0x0) r11 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x3fd, @empty, 0x3}, 0x1c) 7.273351472s ago: executing program 1 (id=1402): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000700001002abd7000fbdbdf2507000000", @ANYRES32=r1, @ANYBLOB="0c000180"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x7, 0x23, 0x200, &(0x7f0000000400)="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"}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0xc0189436, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r4, 0x3b8c, &(0x7f0000000780)={0x30, r7, 0x0, 0x0, 0x0, 0x0, 0xec8, 0x0}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r8, &(0x7f0000000140)=""/15, 0xf, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x4, &(0x7f0000000840)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x40, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) close(r9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x4, r11, 0x0, &(0x7f00000006c0)) fcntl$setownex(r10, 0xf, &(0x7f0000000100)={0x0, r11}) ioctl$sock_FIOGETOWN(r10, 0x8903, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 6.753997374s ago: executing program 5 (id=1403): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "9005451377480361", "bbad434d19477339418b5b79f10c141a", "dc717b03", "72f2ea1a3290afcc"}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, &(0x7f0000000300)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r6, 0x9, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0xffffffff, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) sendmsg$nl_route_sched(r4, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f00000000000000000000006a3f7860d3ee6eb4b2c5f9c5d04b88356fa0a922c422cc23ac16635b1024517a42fc1dd3ece66beee92cf5132e4b382ddcd6244bcc7ba5f912ac24968ee3031f62673a", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r2, 0x0, 0x25, 0x11, @val=@tcx={@void, @value=r2, @void, @void, r7}}, 0x1c) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) 6.741308614s ago: executing program 6 (id=1404): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e21, @empty}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 6.623661139s ago: executing program 6 (id=1405): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5601, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) fsopen(0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x6a040000) unshare(0x26020400) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1cb201, 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000040)=0x7c, 0x4) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x1f, 0x7ffdd000, 0x8000}], 0x320000) r7 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'veth1_to_batadv\x00', 0x2000}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={r7, 0x20, &(0x7f00000006c0)={&(0x7f0000000580)=""/223, 0xdf, 0x0, &(0x7f0000000680)=""/30, 0x1e}}, 0x10) kexec_load(0x9, 0x3, &(0x7f0000000480)=[{&(0x7f0000000080)="4c2a9e5fdbbd6e10d17cae3b91d35d734a99bc6074fb67a79fbdcb93ec0c7a03c7d6f538e40ee641013705c91365cb8a8e2da00766d6417883cab2493185e9a69c488747e20a6c377387c3223f906091c88dca43d7a411499dd0a227a1cd89882e9ac2206832b884c8684edc1d19693da78b49aa82d1749b89889d8bbc950d8ba4ef9d694141a5f2aa8a8c3ebe9f0d434ee5ec3354d99ff87422614e48c8d1b9f78f63e6203ad18ea2bb0721b3084e3dcd6ce355313c00", 0xb7, 0x3, 0x2}, {&(0x7f0000000300)="6f41ef45fa2f2450f87d7e2b6c1ae801543bb75994f1e23667ddc6a2f4a6539f2404e05055d3378ff541ab127306ce02b2dff74b04f91c15e5c22ec8c861e33124855a4e1de9028c3afc5fbfd3237e994f440c91be5c670a33755184c05a507f0c47f0dd34e9", 0x66, 0x7, 0x7}, {&(0x7f0000000380)="61f8fb96502a1318bc137c7855723d2dc34890dfd1dbbbeec24e41f8386edf7944ed6d9b1f29bb612f794345e594cd19772e3521fad011da0ae3fcb6db3964fe67b497dc91b3d7a11bbb8e868e29ee155ee77d53a8e22a67836c3b41ef1f4ca634d8f89678ed593a1a16a84441bea75789a9b5d5cfab3c67eef9d2b18bdef5ba4b6abcba3bb3b4987250ff4ac9f26cb3a2f88db50a0e896e6f32e587f637b2a4130f54cdbf11ec3ab10f0d155654ae2a4e1697820f8929e0dac0bfd1f51ba9b058264333f6ff5c51624cb1d88a4ea4f85ca65a6065d61b223dd17fc5a166", 0xde, 0xfa, 0x7}], 0x150000) writev(r6, &(0x7f0000000540)=[{&(0x7f0000001680)='0', 0x1}], 0x1) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x8, 0x73, 0x0, @local, @local, {[@fragment={0x2f, 0x0, 0x7, 0x1, 0x0, 0x9, 0x66}]}}}}}, 0x0) 4.392288488s ago: executing program 5 (id=1406): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x101000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, 0x0) io_submit(0x0, 0x0, &(0x7f0000001300)) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) io_setup(0x4, &(0x7f0000000100)) r3 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x80000) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r5 = fsmount(r4, 0x0, 0x8) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) fchmodat(r5, 0x0, 0xffffffd3) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x706) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={0x0}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000100)=0x13) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000040)={0x13, 0x6, 0x9, 0x0, 0x1, "100056f200"}) bind$ax25(r1, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 4.387212117s ago: executing program 6 (id=1407): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='\x00') close(r3) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400)=""/211, 0xd3}}, {{0x0, 0x0, &(0x7f0000004600), 0x2}}, {{0x0, 0x0, &(0x7f0000005c40)=[{0x0, 0x7}], 0x1}}], 0x3, 0x0, &(0x7f0000005ec0)={0x0, 0x3938700}) ioctl$SIOCSIFHWADDR(r3, 0x8b14, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) r7 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, 0x0) unshare(0x62000280) syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[], 0x0) mount$9p_tcp(&(0x7f00000002c0), &(0x7f0000000300)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000004c0), 0xe090, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) socket$alg(0x26, 0x5, 0x0) 4.196643329s ago: executing program 3 (id=1408): r0 = socket(0x2, 0x80805, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f00000001c0), &(0x7f0000000200)=0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x74}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) pipe(0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000000c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r5) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}]}, @NFT_MSG_DELFLOWTABLE={0x190, 0x18, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x9c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9b21}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa8}]}, @NFTA_FLOWTABLE_HOOK={0x98, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14}}, 0x228}}, 0x20004081) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x70bd25, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.memory_spread_slab\x00', 0x2, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000300)={0x3, 0x1, 0x7fffffffffffffff, 0x18000000000000, r3}) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026ca7000fbdbdf2505000000280001800d0001007564703a73797a320000000014000280080003008a"], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) lseek(0xffffffffffffffff, 0x3, 0x1) ioctl$XFS_IOC_FSGROWFSDATA(0xffffffffffffffff, 0x4010586e, &(0x7f0000000040)={0x6, 0x6}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)}], 0x1}}, {{&(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10, &(0x7f0000000b40)=[{&(0x7f0000000500)="b5", 0x1}], 0x1}}], 0x3, 0x0) 4.11711743s ago: executing program 1 (id=1409): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000480)=[@nested_amd_vmload={0x182, 0x18, 0x3}, @wr_drn={0x68, 0x20, {0x3, 0xc4}}, @nested_amd_invlpga={0x17d, 0x20, {0x0, 0xdaae}}, @out_dx={0x6a, 0x28, {0x1581, 0x0, 0x1}}, @code={0xa, 0x56, {"f20f108100680000470f0966b808018ed80f2043410f01d166ba400066ed66baa100b000eec744240051000000c74424020d000000ff1c242ef30fc7b680ffffff410f01f8"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x457, 0x10, 0xffff, 0x2}}, @uexit={0x0, 0x18, 0x2}, @enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x56, 0x2, 0x4, 0x2}}], 0x176}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @exit], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r4 = dup(r3) io_setup(0x2017, &(0x7f00000009c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0x100005) read$FUSE(r4, &(0x7f0000005380)={0x2020}, 0x2020) r6 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$USBDEVFS_REAPURB(r8, 0x4008550c, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r6, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 3.456544858s ago: executing program 5 (id=1410): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x78082, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000080)=0x3ba, 0x5, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000040)=0x1, 0x5, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r5, 0x80044940, &(0x7f0000000600)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB="0000200000000000faff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x40, 0x0, "88bc9122e989532d"}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0) close(r5) 2.98917821s ago: executing program 3 (id=1411): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x42) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000280)) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000240)={{&(0x7f0000666000/0x2000)=nil, 0x2000}}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0b080510"], 0xe) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'veth1_virt_wifi\x00', 0x0}) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2000) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x1, 0x0, &(0x7f0000000140)) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r7, 0x103, 0x7, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='ipvlan1\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) socket$inet6(0xa, 0x3, 0x1d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1}, 0x94) 1.603231189s ago: executing program 5 (id=1412): socket$kcm(0x2d, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000480)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@euid_lt={'euid<', r4}}, {@pcr={'pcr', 0x3d, 0x15}}, {@euid_eq}, {@euid_lt}, {@fowner_eq}]}}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r6, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r6, &(0x7f00000003c0), &(0x7f0000000300)=@tcp=r7, 0x1}, 0x20) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 938.119296ms ago: executing program 2 (id=1413): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000100)={0x1, 0x1, 0xfb, 0x0, 0x223c}, 0xc) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f00000008c0)) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0, 0x0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) preadv(r2, &(0x7f00000004c0), 0x0, 0xa3, 0xd) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r2, 0x89f3, &(0x7f0000000000)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[], 0x6a) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="7475b8a6d357162cb50845d44bcb4824e272610e0000ef000000003e0892fb89f46f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYBLOB=',debug=0x0000000000000005,\x00']) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 196.528089ms ago: executing program 6 (id=1414): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) poll(0x0, 0x0, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000003340), 0x4001) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_vhci(0x0, 0xe) syz_emit_ethernet(0x3e, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x3, 0xd}}}, 0x24}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@delchain={0x2c, 0x65, 0x100, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0xe}, {0xfff3}, {0x3, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004884}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip_vti0\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(0xffffffffffffffff, 0x90001) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c900"], 0x16) 0s ago: executing program 2 (id=1415): ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e21, @empty}, 0x0, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) kernel console output (not intermixed with test programs): smsc75xx 2-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 607.554541][ T5938] smsc75xx 2-1:0.0: probe with driver smsc75xx failed with error -22 [ 607.662762][ T30] audit: type=1400 audit(2000000382.582:1178): avc: denied { ioctl } for pid=10520 comm="syz.4.962" path="socket:[34225]" dev="sockfs" ino=34225 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 607.944407][T10544] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 608.128229][ T30] audit: type=1400 audit(2000000383.062:1179): avc: denied { call } for pid=10538 comm="syz.0.965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 608.397677][ T5938] usb 2-1: USB disconnect, device number 7 [ 608.515179][ T30] audit: type=1400 audit(2000000383.352:1180): avc: denied { listen } for pid=10540 comm="syz.2.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 609.345621][T10564] ceph: No mds server is up or the cluster is laggy [ 611.118055][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.970'. [ 611.273149][T10584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 612.013772][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.982'. [ 612.405588][T10605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.973'. [ 612.816143][T10601] Bluetooth: hci0: invalid len left 7, exp >= 116 [ 612.933313][T10610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 613.295758][ T30] audit: type=1326 audit(2000000388.152:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10614 comm="syz.4.976" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6743f9c819 code=0x0 [ 615.224722][T10633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.981'. [ 615.763665][T10639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 616.895049][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 617.850810][ T24] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 617.867707][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 617.885939][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 617.906019][ T24] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 617.954857][ T24] usb 3-1: Product: syz [ 617.959063][ T24] usb 3-1: Manufacturer: syz [ 617.986967][ T24] usb 3-1: SerialNumber: syz [ 618.012626][ T24] usb 3-1: config 0 descriptor?? [ 618.092785][ T30] audit: type=1400 audit(2000000393.022:1182): avc: denied { write } for pid=10659 comm="syz.0.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 618.187737][ T24] usb 3-1: selecting invalid altsetting 0 [ 618.354642][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 618.408601][ T24] usb 3-1: USB disconnect, device number 5 [ 618.861462][T10200] udevd[10200]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 618.863199][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 619.039515][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 619.145798][ T10] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 619.190221][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.228722][ T10] usb 1-1: Product: syz [ 619.261238][ T10] usb 1-1: Manufacturer: syz [ 619.292073][ T10] usb 1-1: SerialNumber: syz [ 619.326634][ T10] usb 1-1: config 0 descriptor?? [ 620.215078][T10688] 9pnet_virtio: no channels available for device syz [ 620.446278][T10688] siw: device registration error -23 [ 620.480732][T10688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.988'. [ 621.379249][ T10] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 621.971930][ T30] audit: type=1326 audit(2000000396.902:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.3.991" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f248939c819 code=0x0 [ 622.024758][T10703] dummy0: entered allmulticast mode [ 622.118856][ T30] audit: type=1400 audit(2000000396.932:1184): avc: denied { read write } for pid=10692 comm="syz.4.989" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 622.150233][ T30] audit: type=1400 audit(2000000396.932:1185): avc: denied { open } for pid=10692 comm="syz.4.989" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 622.374794][ T7186] usb 1-1: Failed to submit usb control message: -110 [ 622.480731][ T7186] usb 1-1: unable to send the bmi data to the device: -110 [ 622.595164][ T7186] usb 1-1: unable to get target info from device [ 622.601537][ T7186] usb 1-1: could not get target info (-110) [ 622.619810][ T10] usb 1-1: USB disconnect, device number 9 [ 622.633879][ T7186] usb 1-1: could not probe fw (-110) [ 622.705957][ T30] audit: type=1400 audit(2000000396.942:1186): avc: denied { ioctl } for pid=10692 comm="syz.4.989" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 622.737523][ T30] audit: type=1400 audit(2000000396.962:1187): avc: denied { ioctl } for pid=10692 comm="syz.4.989" path="socket:[35158]" dev="sockfs" ino=35158 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 622.910811][T10704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10704 comm=syz.2.990 [ 622.944123][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.993'. [ 623.061563][ T30] audit: type=1400 audit(2000000397.832:1188): avc: denied { create } for pid=10696 comm="syz.2.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 623.259257][T10715] netlink: 104 bytes leftover after parsing attributes in process `syz.1.994'. [ 623.288893][ T30] audit: type=1400 audit(2000000398.032:1189): avc: denied { bind } for pid=10696 comm="syz.2.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 623.353940][T10711] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 623.834701][ T30] audit: type=1400 audit(2000000398.192:1190): avc: denied { nlmsg_read } for pid=10714 comm="syz.1.994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 623.992266][ T30] audit: type=1400 audit(2000000398.612:1191): avc: denied { shutdown } for pid=10714 comm="syz.1.994" laddr=fc02:: lport=45682 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 624.175436][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.181981][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.294946][ T30] audit: type=1804 audit(2000000399.202:1192): pid=10725 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.995" name="/newroot/193/file1" dev="fuse" ino=1 res=1 errno=0 [ 624.514834][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.996'. [ 624.652857][T10728] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 625.275265][T10734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.999'. [ 626.278923][T10734] nbd: socks must be embedded in a SOCK_ITEM attr [ 627.196707][T10749] 9pnet_virtio: no channels available for device syz [ 627.240249][T10749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1001'. [ 628.710380][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 628.710397][ T30] audit: type=1400 audit(2000000403.642:1196): avc: denied { name_bind } for pid=10753 comm="syz.3.1003" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 628.788586][T10177] udevd[10177]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 628.999399][T10758] netlink: 'syz.3.1003': attribute type 4 has an invalid length. [ 629.087702][T10759] netlink: 'syz.3.1003': attribute type 4 has an invalid length. [ 629.418379][ T5938] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 629.427138][ T30] audit: type=1326 audit(2000000404.242:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10751 comm="syz.2.1004" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ec239c819 code=0x0 [ 629.442342][T10172] udevd[10172]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 630.055117][T10776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 630.403044][ T5938] usb 5-1: device not accepting address 11, error -71 [ 630.520814][T10776] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 630.945115][ T5812] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 631.719732][ T30] audit: type=1400 audit(2000000406.652:1198): avc: denied { mounton } for pid=10790 comm="syz.3.1010" path="/syzcgroup/unified/syz3" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 632.174982][ T30] audit: type=1400 audit(2000000406.652:1199): avc: denied { mount } for pid=10790 comm="syz.3.1010" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 632.208527][ T30] audit: type=1400 audit(2000000406.732:1200): avc: denied { watch_sb watch_reads } for pid=10790 comm="syz.3.1010" path="/196/file0" dev="tmpfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 632.254532][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1011'. [ 632.360530][T10796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 632.972755][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1014'. [ 633.225962][T10805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1012'. [ 633.403171][T10806] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 633.711001][ T30] audit: type=1400 audit(2000000408.642:1201): avc: denied { getopt } for pid=10797 comm="syz.3.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 634.150121][T10811] kAFS: unable to lookup cell 'ÿ' [ 634.218579][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1015'. [ 634.257019][T10816] comedi comedi0: No hardware detected at I/O base 0x4f27 [ 634.662244][ T30] audit: type=1326 audit(2000000409.592:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10812 comm="syz.2.1017" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2ec239c819 code=0x0 [ 635.108273][ T5812] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 635.117110][ T5812] Bluetooth: hci3: Injecting HCI hardware error event [ 635.128288][ T5812] Bluetooth: hci3: hardware error 0x00 [ 635.183342][ T30] audit: type=1326 audit(2000000410.072:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10809 comm="syz.0.1016" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9244d9c819 code=0x0 [ 635.232844][T10821] kAFS: unable to lookup cell '(,c¾Ì' [ 635.621253][T10831] fuse: Unknown parameter 'euid<00000000000000000000' [ 636.021302][ T5938] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 636.323012][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 636.432669][ T5938] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 636.452631][ T5938] usb 3-1: config 0 interface 0 has no altsetting 0 [ 636.473184][ T5938] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 636.485892][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 636.501043][ T5938] usb 3-1: Product: syz [ 636.505716][ T5938] usb 3-1: Manufacturer: syz [ 636.510404][ T5938] usb 3-1: SerialNumber: syz [ 636.532749][ T5938] usb 3-1: config 0 descriptor?? [ 636.546530][ T5938] usb 3-1: selecting invalid altsetting 0 [ 636.583105][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 636.607813][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 636.633687][ T10] usb 1-1: config 1 has no interface number 1 [ 636.647602][ T10] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 636.664987][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 636.693215][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 636.706829][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 636.724541][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.736752][ T10] usb 1-1: Product: syz [ 636.740937][ T10] usb 1-1: Manufacturer: syz [ 636.746113][ T10] usb 1-1: SerialNumber: syz [ 636.758684][ T5938] usb 3-1: USB disconnect, device number 6 [ 637.158579][ T30] audit: type=1400 audit(2000000412.072:1204): avc: denied { append } for pid=10839 comm="syz.3.1022" name="frontend0" dev="devtmpfs" ino=926 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 637.290046][T10844] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 637.303571][T10842] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 637.313337][T10844] block device autoloading is deprecated and will be removed. [ 637.333075][ T5812] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 637.363025][T10842] block device autoloading is deprecated and will be removed. [ 637.496793][T10847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.820436][T10842] md: md2 stopped. [ 638.494357][ T5812] Bluetooth: hci4: unexpected event 0x08 length: 9 > 4 [ 639.007821][ T10] usb 1-1: failed to enable PITCH for EP 0x82 [ 639.033987][ T10] usb 1-1: 2:1: cannot set freq 11994917 to ep 0x82 [ 639.212288][ T10] usb 1-1: USB disconnect, device number 10 [ 639.488606][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1026'. [ 639.499527][T10863] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1026'. [ 640.269938][T10200] udevd[10200]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.387870][T10879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1031'. [ 641.861865][ T30] audit: type=1400 audit(2000000416.792:1205): avc: denied { watch_mount } for pid=10877 comm="syz.3.1030" path="/200" dev="tmpfs" ino=1091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 642.637429][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1033'. [ 643.052231][T10901] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 643.473343][ T30] audit: type=1400 audit(2000000418.392:1206): avc: denied { write } for pid=10904 comm="syz.1.1037" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 643.550762][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 643.641378][T10909] dns_resolver: Unsupported content type (152) [ 644.441311][T10912] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 644.558239][ T30] audit: type=1400 audit(2000000419.262:1207): avc: denied { mount } for pid=10904 comm="syz.1.1037" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 645.544785][ T30] audit: type=1400 audit(2000000419.292:1208): avc: denied { mounton } for pid=10904 comm="syz.1.1037" path="/218/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 645.574262][T10915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 646.278047][ T30] audit: type=1400 audit(2000000421.202:1209): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 646.585432][ T30] audit: type=1400 audit(2000000421.502:1210): avc: denied { mount } for pid=10916 comm="syz.4.1039" name="/" dev="autofs" ino=35743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 647.366406][ T30] audit: type=1400 audit(2000000421.512:1211): avc: denied { read } for pid=10916 comm="syz.4.1039" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 647.472047][ T30] audit: type=1400 audit(2000000421.512:1212): avc: denied { open } for pid=10916 comm="syz.4.1039" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 647.567580][T10926] fuse: Unknown parameter 'euid<00000000000000000000' [ 647.721328][ T30] audit: type=1400 audit(2000000421.512:1213): avc: denied { ioctl } for pid=10916 comm="syz.4.1039" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9379 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 647.803944][ T30] audit: type=1400 audit(2000000422.232:1214): avc: denied { unmount } for pid=5807 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 648.355500][ T30] audit: type=1400 audit(2000000422.702:1215): avc: denied { map } for pid=10933 comm="syz.2.1044" path="socket:[35775]" dev="sockfs" ino=35775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 648.383661][ T30] audit: type=1400 audit(2000000422.702:1216): avc: denied { read accept } for pid=10933 comm="syz.2.1044" path="socket:[35775]" dev="sockfs" ino=35775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 648.423857][ T5938] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 648.445864][T10940] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1044'. [ 648.814626][ T5938] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 648.844751][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.878753][ T30] audit: type=1400 audit(2000000423.802:1217): avc: denied { write } for pid=10933 comm="syz.2.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 648.913061][ T5938] usb 1-1: config 0 descriptor?? [ 650.737178][T10958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1046'. [ 650.868901][ T5938] usb 1-1: Cannot read MAC address [ 650.938351][ T30] audit: type=1400 audit(2000000425.692:1218): avc: denied { setattr } for pid=10954 comm="syz.2.1046" name="NETLINK" dev="sockfs" ino=36054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 651.104084][ T5938] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 651.755728][ T5938] usb 1-1: USB disconnect, device number 11 [ 651.767573][T10969] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 651.776891][T10964] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'. [ 651.789057][ T30] audit: type=1400 audit(2000000426.052:1219): avc: denied { watch_mount } for pid=10961 comm="syz.3.1049" path="/204/file1" dev="tmpfs" ino=1116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 652.044520][T10972] tipc: Enabling of bearer rejected, failed to enable media [ 652.198259][ T30] audit: type=1400 audit(2000000426.142:1220): avc: denied { map } for pid=10959 comm="syz.0.1048" path="socket:[36071]" dev="sockfs" ino=36071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 652.498088][T10977] comedi comedi2: dt2815: I/O port conflict (0xfffffffffffffffd,2) [ 653.154254][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 653.154273][ T30] audit: type=1800 audit(2000000427.812:1222): pid=10982 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1051" name="file0" dev="overlay" ino=1236 res=0 errno=0 [ 653.369535][T10986] hub 1-0:1.0: USB hub found [ 653.375975][T10986] hub 1-0:1.0: 1 port detected [ 654.075257][ T30] audit: type=1326 audit(2000000428.752:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10988 comm="syz.1.1053" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f208179c819 code=0x0 [ 656.206200][ T30] audit: type=1400 audit(2000000431.142:1224): avc: denied { write } for pid=10999 comm="syz.0.1056" name="file0" dev="tmpfs" ino=1132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 656.229235][T11004] blktrace: Concurrent blktraces are not allowed on loop0 [ 656.239374][ T30] audit: type=1400 audit(2000000431.142:1225): avc: denied { open } for pid=10999 comm="syz.0.1056" path="/205/file0" dev="tmpfs" ino=1132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 656.460561][ T30] audit: type=1400 audit(2000000431.162:1226): avc: denied { ioctl } for pid=10999 comm="syz.0.1056" path="/205/file0" dev="tmpfs" ino=1132 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 656.996171][ T30] audit: type=1400 audit(2000000431.482:1227): avc: denied { connect } for pid=11007 comm="syz.4.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 657.627149][T11028] xt_nfacct: accounting object `syz0' does not exist [ 657.800988][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'. [ 659.703929][ T30] audit: type=1400 audit(2000000434.582:1228): avc: denied { create } for pid=11039 comm="syz.0.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 659.731194][T11046] netlink: 'syz.1.1066': attribute type 1 has an invalid length. [ 659.740749][T11046] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1066'. [ 659.750567][ T30] audit: type=1400 audit(2000000434.582:1229): avc: denied { accept } for pid=11039 comm="syz.0.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 659.843411][T11047] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65305 sclass=netlink_route_socket pid=11047 comm=syz.1.1066 [ 660.076361][ T30] audit: type=1400 audit(2000000434.952:1230): avc: denied { read } for pid=11045 comm="syz.1.1066" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 660.243337][T11054] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 660.310599][ T30] audit: type=1400 audit(2000000434.952:1231): avc: denied { open } for pid=11045 comm="syz.1.1066" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 660.550121][ T30] audit: type=1400 audit(2000000434.952:1232): avc: denied { ioctl } for pid=11045 comm="syz.1.1066" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 662.382060][ T5948] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 662.529994][T11076] lo speed is unknown, defaulting to 1000 [ 662.538072][T11076] lo speed is unknown, defaulting to 1000 [ 662.552090][T11076] lo speed is unknown, defaulting to 1000 [ 662.691920][T11076] infiniband sy0: RDMA CMA: cma_listen_on_dev, error -98 [ 662.832303][T11077] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 662.880629][T11076] lo speed is unknown, defaulting to 1000 [ 662.888248][T11076] lo speed is unknown, defaulting to 1000 [ 662.895474][T11076] lo speed is unknown, defaulting to 1000 [ 662.902250][T11076] lo speed is unknown, defaulting to 1000 [ 662.909026][T11076] lo speed is unknown, defaulting to 1000 [ 662.946003][ T5948] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 662.965620][ T5948] usb 1-1: config 0 interface 0 has no altsetting 0 [ 662.977424][ T5948] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 662.988570][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 663.006937][ T5948] usb 1-1: Product: syz [ 663.018494][ T5948] usb 1-1: Manufacturer: syz [ 663.206727][ T5948] usb 1-1: SerialNumber: syz [ 663.237575][ T5948] usb 1-1: config 0 descriptor?? [ 663.428524][ T5948] usb 1-1: selecting invalid altsetting 0 [ 664.126051][ T5948] usb 1-1: USB disconnect, device number 12 [ 664.763559][ T30] audit: type=1400 audit(2000000439.302:1233): avc: denied { map } for pid=11082 comm="syz.2.1073" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 664.864879][ T30] audit: type=1400 audit(2000000439.302:1234): avc: denied { execute } for pid=11082 comm="syz.2.1073" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 664.888489][T10200] udevd[10200]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.186830][T11096] trusted_key: encrypted_key: insufficient parameters specified [ 665.205844][T11095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1074'. [ 666.772679][ T30] audit: type=1400 audit(2000000441.702:1235): avc: denied { bind } for pid=11111 comm="syz.0.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 667.242560][T11123] 9p: Bad value for 'rfdno' [ 667.705291][ T30] audit: type=1400 audit(2000000442.272:1236): avc: denied { append } for pid=11120 comm="syz.2.1080" name="uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 667.741199][ T30] audit: type=1400 audit(2000000442.272:1237): avc: denied { ioctl } for pid=11120 comm="syz.2.1080" path="/dev/uinput" dev="devtmpfs" ino=920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 668.644100][T11116] wg1 speed is unknown, defaulting to 1000 [ 669.179267][T11141] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 669.919759][T11116] lo speed is unknown, defaulting to 1000 [ 670.429270][ T30] audit: type=1400 audit(2000000445.082:1238): avc: denied { ioctl } for pid=11145 comm="syz.2.1085" path="socket:[37368]" dev="sockfs" ino=37368 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 670.628707][T11150] can0: slcan on ttyS3. [ 670.935239][T11150] can0 (unregistered): slcan off ttyS3. [ 671.155232][T11158] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 671.165544][ T30] audit: type=1400 audit(2000000446.082:1239): avc: denied { setopt } for pid=11153 comm="syz.4.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 671.266657][ T30] audit: type=1400 audit(2000000446.192:1240): avc: denied { write } for pid=11153 comm="syz.4.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 671.481448][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'. [ 671.831112][ T24] libceph: connect (1)[c::]:6789 error -101 [ 671.849650][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 672.172847][T11166] ceph: No mds server is up or the cluster is laggy [ 672.420683][T11165] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 672.540332][T11175] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1090'. [ 672.740282][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'. [ 672.754293][ T30] audit: type=1400 audit(2000000447.662:1241): avc: denied { read write } for pid=11172 comm="syz.1.1090" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 672.872978][ T30] audit: type=1400 audit(2000000447.662:1242): avc: denied { open } for pid=11172 comm="syz.1.1090" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 672.922961][ T30] audit: type=1400 audit(2000000447.672:1243): avc: denied { bind } for pid=11172 comm="syz.1.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 673.367185][T11186] tipc: Failed to remove unknown binding: 66,0,0/0:2114643315/2114643316 [ 673.385679][T11186] tipc: Failed to remove unknown binding: 66,0,0/0:2114643315/2114643316 [ 673.534293][ T30] audit: type=1400 audit(2000000448.202:1244): avc: denied { mounton } for pid=11179 comm="syz.2.1093" path="/syzcgroup/unified/syz2" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 673.865038][T11188] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 674.030773][T11177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'. [ 674.175096][T11192] team0: entered allmulticast mode [ 674.180298][T11192] team_slave_0: entered allmulticast mode [ 674.187978][T11192] team_slave_1: entered allmulticast mode [ 674.196307][T11192] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 674.400539][ T30] audit: type=1400 audit(2000000449.232:1245): avc: denied { mount } for pid=11193 comm="syz.2.1094" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 674.477420][T11197] kAFS: unable to lookup cell 'ÿ' [ 674.530365][T11201] kAFS: unable to lookup cell '(,c¾Ì' [ 674.538090][T11197] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 674.554782][ T30] audit: type=1400 audit(2000000449.492:1246): avc: denied { write } for pid=11198 comm="syz.3.1095" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 674.578916][T11197] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 674.694874][T11197] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 674.702486][ T30] audit: type=1400 audit(2000000449.632:1247): avc: denied { firmware_load } for pid=11193 comm="syz.2.1094" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 674.733100][T11192] libceph: resolve '0..' (ret=-3): failed [ 675.680253][T11221] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 675.766502][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1098'. [ 675.809160][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 675.850667][ T30] audit: type=1326 audit(2000000450.772:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11206 comm="syz.1.1096" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f208179c819 code=0x0 [ 676.639367][T11222] nbd: socks must be embedded in a SOCK_ITEM attr [ 677.127997][ T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 678.738380][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 678.750217][ T10] usb 4-1: string descriptor 0 read error: -71 [ 678.757113][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 678.766379][ T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 678.779263][ T10] usb 4-1: config 0 descriptor?? [ 678.784837][ T10] usb 4-1: can't set config #0, error -71 [ 678.794290][ T10] usb 4-1: USB disconnect, device number 13 [ 678.900500][T10173] udevd[10173]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 678.978818][T11239] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 678.979952][T11241] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 1, id = 0 [ 679.158833][T10172] udevd[10172]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 679.242155][T11246] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 679.260370][T11246] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 680.482446][T11257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1108'. [ 680.733212][T11265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 681.362075][T11263] netlink: 'syz.3.1105': attribute type 6 has an invalid length. [ 681.946264][T11275] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1107'. [ 681.973698][T11275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'. [ 682.699720][T11290] comedi comedi0: No hardware detected at I/O base 0x4f27 [ 683.025335][T11287] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1111'. [ 683.580589][ T30] audit: type=1400 audit(2000000458.512:1249): avc: denied { bind } for pid=11296 comm="syz.4.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 683.768623][T11303] loop6: detected capacity change from 0 to 2640 [ 683.777300][T11303] buffer_io_error: 6 callbacks suppressed [ 683.777316][T11303] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.792702][T11303] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.802247][T11303] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.810995][T11303] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.818948][T11303] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.827953][T11303] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.838018][T11303] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.848040][T11303] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.857984][T11303] ldm_validate_partition_table(): Disk read failed. [ 683.866985][T11303] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.876984][T11303] Buffer I/O error on dev loop6, logical block 0, async page read [ 683.887051][T11303] Dev loop6: unable to read RDB block 0 [ 683.892811][T11303] loop6: unable to read partition table [ 683.900964][T11303] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 683.931727][T11303] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 683.944107][T11303] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 683.955755][T11303] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 683.967601][T11303] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 1 [ 683.980134][T11303] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 1 [ 683.992036][T11303] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 1 [ 684.004441][T11303] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 1 [ 684.016460][T11303] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 1 [ 684.494790][ T30] audit: type=1400 audit(2000000458.572:1250): avc: denied { ioctl } for pid=11296 comm="syz.4.1112" path="socket:[37764]" dev="sockfs" ino=37764 ioctlcmd=0x582c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 684.629545][ T30] audit: type=1400 audit(2000000458.582:1251): avc: denied { getopt } for pid=11296 comm="syz.4.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 684.806892][ T30] audit: type=1400 audit(2000000458.582:1252): avc: denied { write } for pid=11296 comm="syz.4.1112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 686.104979][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.182426][T11320] trusted_key: encrypted_key: insufficient parameters specified [ 689.710020][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1123'. [ 690.081986][T11360] SELinux: policydb version -188086128 does not match my version range 15-35 [ 690.091746][T11360] SELinux: failed to load policy [ 690.107644][T11360] veth0: entered promiscuous mode [ 690.147059][ T30] audit: type=1400 audit(2000000465.012:1253): avc: denied { load_policy } for pid=11357 comm="syz.4.1124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 690.624315][T11357] veth0: left promiscuous mode [ 691.758212][ T30] audit: type=1400 audit(2000000466.192:1254): avc: denied { setopt } for pid=11362 comm="syz.4.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 691.804568][ T30] audit: type=1400 audit(2000000466.292:1255): avc: denied { create } for pid=11362 comm="syz.4.1125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 692.036967][ T30] audit: type=1400 audit(2000000466.342:1256): avc: denied { sys_admin } for pid=11362 comm="syz.4.1125" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 694.002541][T11391] netlink: 556 bytes leftover after parsing attributes in process `syz.3.1129'. [ 694.385531][ T5948] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 694.483606][ T30] audit: type=1800 audit(2000000469.392:1257): pid=11386 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1117" name="bus" dev="ramfs" ino=38954 res=0 errno=0 [ 694.586384][ T5948] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 694.605404][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.707609][ T5948] usb 5-1: config 0 descriptor?? [ 696.652407][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'. [ 696.823400][T11407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 697.694755][ T5948] usb 5-1: Cannot read MAC address [ 697.700161][ T5948] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 697.737060][ T5948] usb 5-1: USB disconnect, device number 13 [ 697.805939][T10673] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 697.880604][T11418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1136'. [ 698.552965][T11428] comedi comedi2: dt2815: I/O port conflict (0xfffffffffffffffd,2) [ 698.603889][ T5812] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 699.175926][T11432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.184720][T11432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.299311][T11431] wg1 speed is unknown, defaulting to 1000 [ 699.411129][T11431] lo speed is unknown, defaulting to 1000 [ 699.462422][ T30] audit: type=1400 audit(2000000473.812:1258): avc: denied { bind } for pid=11409 comm="syz.3.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 699.548107][ T30] audit: type=1400 audit(2000000473.832:1259): avc: denied { connect } for pid=11409 comm="syz.3.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 699.579225][ T30] audit: type=1400 audit(2000000473.842:1260): avc: denied { accept } for pid=11409 comm="syz.3.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 699.628975][ T30] audit: type=1400 audit(2000000473.852:1261): avc: denied { write } for pid=11409 comm="syz.3.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 699.681640][ T30] audit: type=1400 audit(2000000473.852:1262): avc: denied { read } for pid=11409 comm="syz.3.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 699.905766][T11425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 700.055051][ T30] audit: type=1400 audit(2000000473.862:1263): avc: denied { ioctl } for pid=11409 comm="syz.3.1134" path="socket:[38206]" dev="sockfs" ino=38206 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 700.221210][T11437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1139'. [ 700.840332][T10673] usb 4-1: unable to get BOS descriptor or descriptor too short [ 701.451339][T10673] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 701.485195][T10673] usb 4-1: can't read configurations, error -71 [ 701.666090][T11451] netlink: 556 bytes leftover after parsing attributes in process `syz.1.1141'. [ 702.490453][ T30] audit: type=1804 audit(2000000477.212:1264): pid=11454 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1142" name="/newroot/222/file1" dev="fuse" ino=1 res=1 errno=0 [ 702.556134][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1144'. [ 702.606838][ T30] audit: type=1800 audit(2000000477.212:1265): pid=11454 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1142" name="/" dev="fuse" ino=1 res=0 errno=0 [ 702.693265][T11459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 702.724250][ T30] audit: type=1800 audit(2000000477.212:1266): pid=11454 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1142" name="/" dev="fuse" ino=1 res=0 errno=0 [ 703.321945][T11468] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1157'. [ 703.552365][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1146'. [ 703.769399][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 704.071111][T11486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 704.748993][T11477] nbd: socks must be embedded in a SOCK_ITEM attr [ 706.805497][T11416] udevd[11416]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 706.817275][T11497] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 706.966950][T11499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 706.996170][T11416] udevd[11416]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 707.524685][T11501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 709.384235][ T30] audit: type=1400 audit(2000000484.312:1267): avc: denied { write } for pid=11509 comm="syz.1.1154" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 709.676238][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1158'. [ 709.765858][ T30] audit: type=1400 audit(2000000484.682:1268): avc: denied { getopt } for pid=11509 comm="syz.1.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 710.164227][T11524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 710.774525][ T30] audit: type=1326 audit(2000000485.702:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11531 comm="syz.1.1162" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f208179c819 code=0x0 [ 712.016818][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1164'. [ 712.664885][T11546] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 713.658235][T11563] fuse: Unknown parameter '0x0000000000000008' [ 714.084288][T11557] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1167'. [ 714.446966][T10673] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 714.634834][T10673] usb 1-1: Using ep0 maxpacket: 16 [ 714.790342][T10673] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 714.824332][ T30] audit: type=1804 audit(2000000489.562:1270): pid=11571 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.4.1169" name="/newroot/247/file1" dev="fuse" ino=1 res=1 errno=0 [ 714.904012][T10673] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 714.959600][ T30] audit: type=1800 audit(2000000489.562:1271): pid=11571 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1169" name="/" dev="fuse" ino=1 res=0 errno=0 [ 714.982125][T10673] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 715.004816][T10673] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 715.029341][ T30] audit: type=1800 audit(2000000489.562:1272): pid=11571 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1169" name="/" dev="fuse" ino=1 res=0 errno=0 [ 715.057219][T10673] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 715.080030][T10673] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.145154][T10673] usb 1-1: config 0 descriptor?? [ 715.375571][ T30] audit: type=1400 audit(2000000490.312:1273): avc: denied { bind } for pid=11573 comm="syz.4.1170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 715.497169][T10673] usbhid 1-1:0.0: can't add hid device: -71 [ 715.544468][T10673] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 715.621421][T10673] usb 1-1: USB disconnect, device number 13 [ 715.773036][ T5938] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 715.880615][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.918390][T11578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1172'. [ 716.323619][ T5938] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 716.332258][ T5938] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 716.392948][ T5938] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 716.427852][ T5938] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 716.578540][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.585122][ T5938] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 717.042678][ T5938] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 717.125061][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.138879][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 717.154111][ T5938] usb 5-1: Product: syz [ 717.158317][ T5938] usb 5-1: Manufacturer: syz [ 717.170561][ T5938] cdc_wdm 5-1:1.0: skipping garbage [ 717.184201][ T5938] cdc_wdm 5-1:1.0: skipping garbage [ 717.209961][ T5938] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 717.232382][ T5938] cdc_wdm 5-1:1.0: Unknown control protocol [ 717.254840][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.441194][ T5132] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 717.461234][ T5132] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 717.474522][ T5132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 717.482608][ T5132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 717.493940][ T5132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 717.509473][ T30] audit: type=1400 audit(2000000492.442:1274): avc: denied { mounton } for pid=11592 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 717.567095][T10673] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 717.583444][ T5938] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 717.632018][ T12] batadv0: left promiscuous mode [ 717.643127][ T12] bridge0: port 3(batadv0) entered disabled state [ 717.686935][ T12] bridge_slave_1: left allmulticast mode [ 717.692669][ T12] bridge_slave_1: left promiscuous mode [ 717.713298][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.726371][T10673] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 717.736151][T10673] usb 3-1: config 0 has no interface number 0 [ 717.754830][T10673] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 717.775375][ T5938] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 717.778613][T10673] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 717.788225][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.822792][T10673] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 717.823819][ T12] bridge_slave_0: left allmulticast mode [ 717.843922][ T5938] usb 2-1: config 0 descriptor?? [ 717.848999][T10673] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.859655][ T12] bridge_slave_0: left promiscuous mode [ 717.861293][ T5938] cp210x 2-1:0.0: cp210x converter detected [ 717.876206][T10673] usb 3-1: config 0 descriptor?? [ 717.884617][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.887185][T11590] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 717.921730][T10673] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 718.015079][ T30] audit: type=1400 audit(2000000492.942:1275): avc: denied { read write } for pid=11575 comm="syz.4.1171" name="cdc-wdm0" dev="devtmpfs" ino=3019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 718.069333][ T5938] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 718.116956][ T30] audit: type=1400 audit(2000000492.942:1276): avc: denied { open } for pid=11575 comm="syz.4.1171" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3019 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 718.279557][ T5938] cp210x 2-1:0.0: querying part number failed [ 718.328437][ T5930] usb 5-1: USB disconnect, device number 14 [ 718.335153][T11590] cdc_wdm 5-1:1.0: Error submitting int urb - -19 [ 718.453241][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'. [ 718.467796][ T5938] usb 2-1: cp210x converter now attached to ttyUSB0 [ 718.529801][T11605] xt_hashlimit: size too large, truncated to 1048576 [ 718.853611][T11590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.927159][T11590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.405732][ T30] audit: type=1326 audit(2000000494.272:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec239c819 code=0x7ffc0000 [ 719.564810][ T5812] Bluetooth: hci0: command tx timeout [ 719.576880][ T30] audit: type=1326 audit(2000000494.272:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec239c819 code=0x7ffc0000 [ 720.011305][ T30] audit: type=1326 audit(2000000494.272:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f2ec239c819 code=0x7ffc0000 [ 720.063179][T11627] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 720.172177][ T30] audit: type=1326 audit(2000000494.272:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec239c819 code=0x7ffc0000 [ 720.307484][ T30] audit: type=1326 audit(2000000494.282:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ec235d04e code=0x7ffc0000 [ 720.361114][ T30] audit: type=1326 audit(2000000494.282:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec239c819 code=0x7ffc0000 [ 720.416456][ T30] audit: type=1326 audit(2000000494.282:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2ec239c819 code=0x7ffc0000 [ 720.823976][ T30] audit: type=1326 audit(2000000494.282:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec239c819 code=0x7ffc0000 [ 720.869163][ T30] audit: type=1326 audit(2000000494.282:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec239c819 code=0x7ffc0000 [ 720.927837][ T30] audit: type=1326 audit(2000000494.282:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f2ec239c819 code=0x7ffc0000 [ 720.954115][ T30] audit: type=1326 audit(2000000494.282:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ec239c819 code=0x7ffc0000 [ 720.979131][ T30] audit: type=1326 audit(2000000494.282:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11589 comm="syz.2.1177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2ec239c819 code=0x7ffc0000 [ 721.071839][T11634] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1181'. [ 721.337670][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 721.356205][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 721.368971][ T12] bond0 (unregistering): Released all slaves [ 721.407353][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1178'. [ 722.692826][ T5812] Bluetooth: hci0: command tx timeout [ 722.835226][ T10] usb 2-1: USB disconnect, device number 8 [ 722.909504][T11641] tipc: Enabling of bearer rejected, already enabled [ 722.976994][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 723.003475][ T10] cp210x 2-1:0.0: device disconnected [ 723.441087][ T8921] usb 3-1: USB disconnect, device number 7 [ 723.873965][T11654] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 724.022104][T11658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1186'. [ 724.773275][ T5812] Bluetooth: hci0: command tx timeout [ 724.856654][T11671] trusted_key: encrypted_key: insufficient parameters specified [ 724.889068][T11671] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 724.964635][T11592] wg1 speed is unknown, defaulting to 1000 [ 725.623113][ T8921] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 725.822559][ T8921] usb 4-1: Using ep0 maxpacket: 32 [ 725.834687][ T8921] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 725.855667][ T8921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.897735][ T8921] usb 4-1: config 0 descriptor?? [ 726.014322][ T8921] as10x_usb: device has been detected [ 726.039502][ T8921] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 726.123348][T11592] lo speed is unknown, defaulting to 1000 [ 726.195915][ T8921] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 726.226261][T11634] wg1 speed is unknown, defaulting to 1000 [ 726.472501][ T8921] as10x_usb: error during firmware upload part1 [ 726.495001][ T8921] Registered device nBox DVB-T Dongle [ 726.844197][ T5812] Bluetooth: hci0: command tx timeout [ 727.628610][ T8921] usb 4-1: USB disconnect, device number 16 [ 728.042739][ T8921] Unregistered device nBox DVB-T Dongle [ 728.049302][T11695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 728.069473][ T8921] as10x_usb: device has been disconnected [ 728.633952][T11699] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 731.102959][T11592] chnl_net:caif_netlink_parms(): no params data found [ 731.343313][T11634] lo speed is unknown, defaulting to 1000 [ 731.362977][T11592] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.382009][T11592] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.550325][T11592] bridge_slave_0: entered allmulticast mode [ 731.763746][T11728] zonefs (nullb0) ERROR: Not a zoned block device [ 732.003647][T11592] bridge_slave_0: entered promiscuous mode [ 732.308121][T11592] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.323106][T11592] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.333739][T11592] bridge_slave_1: entered allmulticast mode [ 732.421752][T11592] bridge_slave_1: entered promiscuous mode [ 733.049832][T11592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.099297][ T12] hsr_slave_0: left promiscuous mode [ 733.136695][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 733.154869][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 733.205750][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 733.234864][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.270538][ T12] batman_adv: batadv0: Interface deactivated: macsec1 [ 733.298187][T11741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 733.375014][ T12] batman_adv: batadv0: Removing interface: macsec1 [ 734.805128][ T12] veth1_macvtap: left promiscuous mode [ 734.825151][ T12] veth0_macvtap: left promiscuous mode [ 735.467756][ T12] veth1_vlan: left promiscuous mode [ 735.486784][ T12] veth0_vlan: left promiscuous mode [ 736.424550][T11773] xt_ecn: cannot match TCP bits for non-tcp packets [ 736.843691][T11775] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 737.149865][ T5132] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 737.161776][ T5132] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 737.170863][ T5132] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 737.181121][ T5132] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 737.189342][ T5132] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 737.307898][ T12] team_slave_1 (unregistering): left allmulticast mode [ 737.320170][ T12] team0 (unregistering): Port device team_slave_1 removed [ 737.335925][ T12] team_slave_0 (unregistering): left allmulticast mode [ 737.344555][ T12] team0 (unregistering): Port device team_slave_0 removed [ 737.376750][ T1172] smc: removing ib device syz2 [ 737.600912][T11592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.624266][ T5948] syz2: Port: 1 Link DOWN [ 737.630293][T11771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1203'. [ 737.898377][T11592] team0: Port device team_slave_0 added [ 737.945462][T11786] fuse: Unknown parameter 'euid<00000000000000000000' [ 738.040710][T11592] team0: Port device team_slave_1 added [ 738.309755][T11592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.317606][T11592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.529921][T11592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.577144][T11592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.594642][T11592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 738.773847][T11592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.957597][T11776] wg1 speed is unknown, defaulting to 1000 [ 739.131930][T11793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1207'. [ 739.301906][ T5812] Bluetooth: hci5: command tx timeout [ 740.187011][T11592] hsr_slave_0: entered promiscuous mode [ 740.277132][T11592] hsr_slave_1: entered promiscuous mode [ 740.355740][T11592] debugfs: 'hsr0' already exists in 'hsr' [ 740.361515][T11592] Cannot create hsr debugfs directory [ 740.661060][T11806] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 741.322993][ T5812] Bluetooth: hci5: command tx timeout [ 741.685221][T11811] fuse: Unknown parameter 'euid<00000000000000000000' [ 743.892603][ T5812] Bluetooth: hci5: command tx timeout [ 743.898608][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 743.898620][ T30] audit: type=1400 audit(2000000518.022:1312): avc: denied { ioctl } for pid=11813 comm="syz.3.1211" path="socket:[41149]" dev="sockfs" ino=41149 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 744.524026][T11825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1213'. [ 744.532990][T11825] openvswitch: netlink: Flow actions attr not present in new flow. [ 745.274679][T11830] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 745.813011][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'. [ 745.974938][ T5812] Bluetooth: hci5: command tx timeout [ 746.096146][T11776] lo speed is unknown, defaulting to 1000 [ 746.115511][T11839] Bluetooth: MGMT ver 1.23 [ 746.444916][T11846] fuse: Unknown parameter 'euid<00000000000000000000' [ 746.503787][T11847] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 746.739378][ T12] IPVS: stop unused estimator thread 0... [ 747.006043][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.498712][T11592] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 747.535394][T11592] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 747.592820][T11592] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 747.622422][T11776] chnl_net:caif_netlink_parms(): no params data found [ 747.645904][T11592] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 748.789844][T11776] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.826257][T11776] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.841748][T11776] bridge_slave_0: entered allmulticast mode [ 748.922051][T11876] block device autoloading is deprecated and will be removed. [ 748.954854][T11776] bridge_slave_0: entered promiscuous mode [ 749.143615][ T30] audit: type=1800 audit(2000000524.062:1313): pid=11878 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1221" name="bus" dev="ramfs" ino=40595 res=0 errno=0 [ 749.206019][T11776] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.304466][T11776] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.319180][T11776] bridge_slave_1: entered allmulticast mode [ 749.343632][T11776] bridge_slave_1: entered promiscuous mode [ 749.551826][T11776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.604649][T11776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.713106][T11885] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1222'. [ 749.753360][ T30] audit: type=1400 audit(2000000524.672:1314): avc: denied { write } for pid=11882 comm="syz.3.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 749.917295][T11776] team0: Port device team_slave_0 added [ 749.939764][T11776] team0: Port device team_slave_1 added [ 750.029820][T11776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.046350][T11776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.086679][T11776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.100066][T11776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 750.107705][T11776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 750.187350][T11889] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 750.214977][T11776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.618768][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.631953][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.743859][T10673] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 750.762409][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 750.841799][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.936348][T10673] usb 2-1: config 0 has no interfaces? [ 750.949760][T10673] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 750.964745][T10673] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.012118][T10673] usb 2-1: config 0 descriptor?? [ 751.030829][T11592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.080270][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 751.091363][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.511409][T11776] hsr_slave_0: entered promiscuous mode [ 753.348107][T11776] hsr_slave_1: entered promiscuous mode [ 754.455471][T11776] debugfs: 'hsr0' already exists in 'hsr' [ 754.519652][T11776] Cannot create hsr debugfs directory [ 754.628886][ T5948] usb 2-1: USB disconnect, device number 9 [ 754.818662][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 754.845661][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.712673][T11592] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.726815][ T7186] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.733974][ T7186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.767362][ T30] audit: type=1400 audit(2000000531.702:1315): avc: denied { create } for pid=11923 comm="syz.2.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 757.119324][ T7167] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.126599][ T7167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.562972][ T30] audit: type=1400 audit(2000000532.452:1316): avc: denied { connect } for pid=11936 comm="syz.1.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 758.247261][ T30] audit: type=1800 audit(2000000533.182:1317): pid=11945 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1231" name="bus" dev="ramfs" ino=40812 res=0 errno=0 [ 758.351380][ T60] bridge_slave_1: left allmulticast mode [ 758.357254][ T60] bridge_slave_1: left promiscuous mode [ 758.377168][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.449486][ T60] bridge_slave_0: left allmulticast mode [ 758.458817][ T60] bridge_slave_0: left promiscuous mode [ 758.469246][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.926509][ T30] audit: type=1400 audit(2000000534.792:1318): avc: denied { mount } for pid=11965 comm="syz.2.1233" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 760.165868][ T30] audit: type=1400 audit(2000000534.812:1319): avc: denied { remount } for pid=11965 comm="syz.2.1233" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 761.428640][ T30] audit: type=1400 audit(2000000536.342:1320): avc: denied { unmount } for pid=5813 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 761.878854][T11978] netlink: 'syz.2.1235': attribute type 1 has an invalid length. [ 761.889801][T11978] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1235'. [ 762.183033][ T30] audit: type=1400 audit(2000000536.962:1321): avc: denied { connect } for pid=11975 comm="syz.2.1235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 762.225538][ T60] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.236173][ T60] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.268809][ T60] .` (unregistering): Released all slaves [ 762.434976][ T60] : left promiscuous mode [ 762.665932][ T30] audit: type=1800 audit(2000000537.592:1322): pid=11987 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1237" name="bus" dev="ramfs" ino=40884 res=0 errno=0 [ 764.847870][T11776] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 765.332080][ T60] IPVS: stopping master sync thread 8878 ... [ 765.360897][T12007] ip6t_srh: unknown srh match flags 4000 [ 765.372501][ T60] IPVS: stopping backup sync thread 11241 ... [ 765.389337][T12013] tipc: Started in network mode [ 765.394694][T12013] tipc: Node identity 4, cluster identity 4711 [ 765.400862][T12013] tipc: Node number set to 4 [ 765.411308][T11776] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 765.498177][T11776] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 765.993214][T12024] 9p: Bad value for 'rfdno' [ 766.406129][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1243'. [ 766.420542][T11776] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 766.625570][T11592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.353697][ T30] audit: type=1400 audit(2000000542.252:1323): avc: denied { name_connect } for pid=12038 comm="syz.3.1244" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 767.728271][ T30] audit: type=1400 audit(2000000542.262:1324): avc: denied { accept } for pid=12038 comm="syz.3.1244" lport=37968 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 767.772576][ T30] audit: type=1400 audit(2000000542.262:1325): avc: denied { write } for pid=12038 comm="syz.3.1244" lport=37968 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 767.777013][T12051] Non-string source [ 767.860839][T12053] qnx4: no qnx4 filesystem (no root dir). [ 767.875926][ T30] audit: type=1400 audit(2000000542.262:1326): avc: denied { setopt } for pid=12038 comm="syz.3.1244" lport=37968 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 769.272525][T11776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 769.316081][T11776] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.414910][ T7186] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.422066][ T7186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.550279][ T30] audit: type=1800 audit(2000000544.382:1327): pid=12072 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1247" name="bus" dev="ramfs" ino=42292 res=0 errno=0 [ 769.577984][ T30] audit: type=1800 audit(2000000544.512:1328): pid=12073 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1248" name="bus" dev="ramfs" ino=42293 res=0 errno=0 [ 769.599165][ T5948] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 769.618181][ T7186] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.625371][ T7186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.314016][T12086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 770.323325][T12086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 770.650738][T12085] wg1 speed is unknown, defaulting to 1000 [ 770.808654][T12085] lo speed is unknown, defaulting to 1000 [ 771.020702][T11592] veth0_vlan: entered promiscuous mode [ 771.122089][T11592] veth1_vlan: entered promiscuous mode [ 771.315557][T11592] veth0_macvtap: entered promiscuous mode [ 771.378680][T11592] veth1_macvtap: entered promiscuous mode [ 771.506822][T11776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 771.556804][T11592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 771.621584][ T60] hsr_slave_0: left promiscuous mode [ 771.653607][ T60] hsr_slave_1: left promiscuous mode [ 771.671976][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.702126][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.738573][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.772451][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.793088][ T60] batman_adv: batadv0: Interface deactivated: macsec1 [ 771.809298][ T60] batman_adv: batadv0: Removing interface: macsec1 [ 771.888380][ T60] veth1_macvtap: left promiscuous mode [ 771.909582][ T60] veth0_macvtap: left promiscuous mode [ 771.921040][ T60] veth1_vlan: left promiscuous mode [ 771.928975][ T60] veth0_vlan: left promiscuous mode [ 772.236790][ T30] audit: type=1400 audit(2000000547.172:1329): avc: denied { setopt } for pid=12104 comm="syz.1.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 772.386718][T12113] overlayfs: failed to resolve './file0/file0': -2 [ 772.868165][ T30] audit: type=1400 audit(2000000547.242:1330): avc: denied { read } for pid=12100 comm="syz.3.1250" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 772.898664][ T5948] usb 3-1: unable to get BOS descriptor or descriptor too short [ 772.921594][ T5948] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 772.930936][ T5948] usb 3-1: can't read configurations, error -71 [ 773.256456][ T30] audit: type=1400 audit(2000000548.142:1331): avc: denied { read } for pid=12115 comm="syz.2.1252" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 773.286171][ T30] audit: type=1400 audit(2000000548.152:1332): avc: denied { open } for pid=12115 comm="syz.2.1252" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 773.542429][ T30] audit: type=1400 audit(2000000548.282:1333): avc: denied { ioctl } for pid=12115 comm="syz.2.1252" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x9428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 773.614854][ T30] audit: type=1400 audit(2000000548.292:1334): avc: denied { mounton } for pid=12115 comm="syz.2.1252" path="/" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 773.822826][ T60] team0 (unregistering): Port device team_slave_1 removed [ 773.850890][ T60] team0 (unregistering): Port device team_slave_0 removed [ 774.666346][T11592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 774.732140][ T7167] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.774680][ T7167] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.958482][ T7167] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.970554][ T7167] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.122773][T12137] fuse: Bad value for 'fd' [ 775.133182][ T8921] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 775.154631][T12137] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1255'. [ 775.249223][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.282608][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.325399][ T8921] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 775.345688][ T8921] usb 4-1: config 0 interface 0 has no altsetting 0 [ 775.467955][ T60] IPVS: stop unused estimator thread 0... [ 775.497025][ T7167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.498478][T11776] veth0_vlan: entered promiscuous mode [ 775.541408][ T8921] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 775.587116][T12146] netlink: 'syz.1.1256': attribute type 8 has an invalid length. [ 775.598332][T12146] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1256'. [ 776.007495][ T7167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.012355][T11776] veth1_vlan: entered promiscuous mode [ 776.029949][ T8921] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 776.075572][ T30] audit: type=1400 audit(2000000551.012:1335): avc: denied { mounton } for pid=11592 comm="syz-executor" path="/root/syzkaller.P7cE6F/syz-tmp" dev="sda1" ino=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 776.082939][ T8921] usb 4-1: Product: syz [ 776.219388][ T30] audit: type=1400 audit(2000000551.052:1336): avc: denied { mounton } for pid=11592 comm="syz-executor" path="/root/syzkaller.P7cE6F/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=43423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 776.241110][ T8921] usb 4-1: Manufacturer: syz [ 776.289193][ T8921] usb 4-1: SerialNumber: syz [ 776.294779][ T30] audit: type=1400 audit(2000000551.072:1337): avc: denied { mounton } for pid=11592 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 776.320333][ T8921] usb 4-1: config 0 descriptor?? [ 776.335812][T11776] veth0_macvtap: entered promiscuous mode [ 776.352111][ T8921] usb 4-1: selecting invalid altsetting 0 [ 776.356501][ T30] audit: type=1400 audit(2000000551.082:1338): avc: denied { mount } for pid=11592 comm="syz-executor" name="/" dev="gadgetfs" ino=7147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 776.387811][T11776] veth1_macvtap: entered promiscuous mode [ 776.448021][T11776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 776.470855][ T30] audit: type=1400 audit(2000000551.082:1339): avc: denied { mounton } for pid=11592 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 776.502476][T11776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 776.559913][ T7183] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 776.659507][ T7183] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.231941][ T8921] usb 4-1: USB disconnect, device number 17 [ 777.506292][ T7183] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.562486][ T7183] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 777.802067][T12164] bridge0: port 3(syz_tun) entered blocking state [ 777.844876][T12164] bridge0: port 3(syz_tun) entered disabled state [ 777.862694][T12164] syz_tun: entered allmulticast mode [ 777.930161][T12164] syz_tun: entered promiscuous mode [ 777.955503][T12164] bridge0: port 3(syz_tun) entered blocking state [ 777.962512][T12164] bridge0: port 3(syz_tun) entered forwarding state [ 778.307129][ T7183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.359187][ T7183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.171335][T12205] IPv6: NLM_F_REPLACE set, but no existing node found! [ 779.337078][T12201] tipc: Started in network mode [ 779.341983][T12201] tipc: Node identity 4004, cluster identity 4711 [ 779.348926][T12201] tipc: Node number set to 16388 [ 779.433011][ T8921] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 779.455009][T12230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.462854][T12230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.733404][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 779.783829][ T8921] usb 6-1: Using ep0 maxpacket: 8 [ 779.803364][ T8921] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 779.861190][T12236] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 779.890617][ T8921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 779.937584][ T8921] usb 6-1: Product: syz [ 779.948459][ T8921] usb 6-1: Manufacturer: syz [ 779.975027][ T8921] usb 6-1: SerialNumber: syz [ 779.989049][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 780.036685][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.052355][ T8921] usb 6-1: config 0 descriptor?? [ 780.088085][ T8921] gspca_main: sq905-2.14.0 probing 2770:9120 [ 780.100251][ T10] usb 4-1: config 0 descriptor?? [ 780.209243][T12243] fuse: Unknown parameter 'euid<00000000000000000000' [ 780.773647][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 780.773665][ T30] audit: type=1400 audit(2000000555.492:1344): avc: denied { ioctl } for pid=12244 comm="syz.2.1263" path="socket:[43655]" dev="sockfs" ino=43655 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 781.186125][ T5132] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 781.233714][ T8921] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 781.241198][ T8921] sq905 6-1:0.0: probe with driver sq905 failed with error -110 [ 781.337228][ T10] ath6kl: Failed to submit usb control message: -110 [ 781.344197][ T10] ath6kl: unable to send the bmi data to the device: -110 [ 781.353023][ T10] ath6kl: Unable to send get target info: -110 [ 781.377351][ T10] ath6kl: Failed to init ath6kl core: -110 [ 781.384588][ T10] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 783.007391][ T5888] usb 6-1: USB disconnect, device number 2 [ 783.575453][T12263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1266'. [ 783.906068][ T30] audit: type=1804 audit(2000000558.722:1345): pid=12264 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.1266" name="/newroot/2/file1" dev="fuse" ino=1 res=1 errno=0 [ 784.028263][ T30] audit: type=1800 audit(2000000558.732:1346): pid=12264 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1266" name="/" dev="fuse" ino=1 res=0 errno=0 [ 784.088912][ T30] audit: type=1800 audit(2000000558.732:1347): pid=12264 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1266" name="/" dev="fuse" ino=1 res=0 errno=0 [ 784.111024][ T24] usb 4-1: USB disconnect, device number 18 [ 784.927462][T12283] netlink: zone id is out of range [ 784.932618][T12283] netlink: zone id is out of range [ 784.939587][T12283] netlink: zone id is out of range [ 784.946527][T12283] netlink: zone id is out of range [ 784.951795][T12283] netlink: zone id is out of range [ 785.585629][T12284] genirq: Flags mismatch irq 3. 00200000 (pcl812) vs. 00200000 (pcl818) [ 787.615818][ T30] audit: type=1400 audit(2000000562.452:1348): avc: denied { kexec_image_load } for pid=12278 comm="syz.1.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 788.448032][ T30] audit: type=1400 audit(2000000563.372:1349): avc: denied { connect } for pid=12287 comm="syz.3.1271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 789.214742][ T30] audit: type=1800 audit(2000000564.132:1350): pid=12301 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1273" name="bus" dev="ramfs" ino=43730 res=0 errno=0 [ 789.689433][ T30] audit: type=1400 audit(2000000564.622:1351): avc: denied { sqpoll } for pid=12306 comm="syz.5.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 790.404924][T12333] vivid-007: ================= START STATUS ================= [ 790.470775][T12318] netlink: 'syz.5.1274': attribute type 1 has an invalid length. [ 790.520086][T12333] vivid-007: Enable Output Cropping: true grabbed [ 790.547917][T12333] vivid-007: Enable Output Composing: true grabbed [ 790.559263][T12333] vivid-007: Enable Output Scaler: true grabbed [ 790.677245][T12333] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 790.711652][T12333] vivid-007: Transmit Mode: HDMI grabbed [ 791.078409][T12342] netlink: 'syz.6.1276': attribute type 15 has an invalid length. [ 791.098061][T12333] vivid-007: Hotplug Present: 0x00000000 [ 791.103972][T12333] vivid-007: RxSense Present: 0x00000000 [ 791.109789][T12333] vivid-007: EDID Present: 0x00000000 [ 791.115347][T12333] vivid-007: ================== END STATUS ================== [ 791.139367][T12342] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1276'. [ 791.241891][T12310] ucma_write: process 14 (syz.6.1276) changed security contexts after opening file descriptor, this is not allowed. [ 791.379218][T12314] zonefs (nullb0) ERROR: Not a zoned block device [ 791.633651][T12350] fuse: Bad value for 'fd' [ 792.790544][T12366] openvswitch: netlink: Flow actions attr not present in new flow. [ 792.901032][ T30] audit: type=1400 audit(2000000567.812:1352): avc: denied { mount } for pid=12360 comm="syz.5.1279" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 792.934050][T12368] ipvlan2: entered allmulticast mode [ 793.057476][T12375] comedi comedi2: pcl812: I/O port conflict (0x8001,16) [ 793.064689][T12368] batadv_slave_1: entered allmulticast mode [ 793.094257][T12368] batman_adv: batadv0: Adding interface: ipvlan2 [ 793.104514][T12368] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 793.158117][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.185336][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.196372][T12368] batman_adv: batadv0: Interface activated: ipvlan2 [ 793.364774][T10673] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 793.606935][T10673] usb 3-1: unable to get BOS descriptor or descriptor too short [ 793.617253][T10673] usb 3-1: config 129 has an invalid interface number: 135 but max is 0 [ 793.629630][T10673] usb 3-1: config 129 has an invalid interface number: 5 but max is 0 [ 793.817696][T12382] blktrace: Concurrent blktraces are not allowed on loop2 [ 794.105274][T10673] usb 3-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 794.121571][T10673] usb 3-1: config 129 has no interface number 0 [ 794.135339][T10673] usb 3-1: config 129 has no interface number 1 [ 794.160686][T10673] usb 3-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 794.224158][T10673] usb 3-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 794.237907][T10673] usb 3-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 794.255147][T10673] usb 3-1: config 129 interface 135 has no altsetting 0 [ 794.264688][T10673] usb 3-1: config 129 interface 5 has no altsetting 0 [ 794.347302][T10673] usb 3-1: string descriptor 0 read error: -22 [ 794.360998][T10673] usb 3-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 794.380623][T10673] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.421733][T10673] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 794.445041][T10673] usb 3-1: MIDIStreaming interface descriptor not found [ 794.824410][ T5812] Bluetooth: hci2: unexpected event 0x08 length: 9 > 4 [ 795.319527][T12390] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1285'. [ 795.464015][T10673] usb 3-1: USB disconnect, device number 10 [ 795.486369][T12395] nvme_fabrics: missing parameter 'transport=%s' [ 795.492794][T12395] nvme_fabrics: missing parameter 'nqn=%s' [ 796.118163][T12403] overlayfs: failed to clone upperpath [ 796.854811][ T5132] Bluetooth: hci2: command 0x0406 tx timeout [ 797.123884][ T30] audit: type=1400 audit(2000000572.062:1353): avc: denied { open } for pid=12407 comm="syz.6.1289" path="/dev/ptyr0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 797.260641][ T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 797.658895][ T30] audit: type=1400 audit(2000000572.592:1354): avc: denied { ioctl } for pid=12407 comm="syz.6.1289" path="/dev/ptyr0" dev="devtmpfs" ino=135 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 797.826825][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 797.840090][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 797.971081][T12417] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 797.989625][T12417] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 798.331807][ T24] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 798.379645][ T24] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 798.406318][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.417815][ T24] usb 6-1: Product: syz [ 798.422189][ T24] usb 6-1: Manufacturer: syz [ 798.428596][ T24] usb 6-1: SerialNumber: syz [ 798.461881][ T24] usb 6-1: config 0 descriptor?? [ 798.487775][T12406] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 798.512077][T12406] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 798.645209][ T24] usb 6-1: ucan: probing device on interface #0 [ 799.043503][T10673] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 799.663987][T10673] usb 4-1: Using ep0 maxpacket: 16 [ 799.672128][T10673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 799.716896][T10673] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 799.729240][T10673] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.752859][T10673] usb 4-1: Product: syz [ 799.767997][T10673] usb 4-1: Manufacturer: syz [ 799.781324][T10673] usb 4-1: SerialNumber: syz [ 799.845749][T10673] usb 4-1: config 0 descriptor?? [ 799.860118][T10673] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 799.871111][T10673] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 800.086481][T12433] netlink: 'syz.2.1293': attribute type 23 has an invalid length. [ 800.550617][ T24] usb 6-1: ucan: failed to retrieve device info [ 800.607995][ T24] usb 6-1: ucan: probe failed; try to update the device firmware [ 800.621467][ T30] audit: type=1400 audit(2000000575.542:1355): avc: denied { read } for pid=12436 comm="syz.6.1295" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 801.110069][T12441] Invalid source name [ 801.114367][T12441] UBIFS error (pid: 12441): cannot open "./file0", error -22 [ 801.331041][T10673] em28xx 4-1:0.0: chip ID is em2882/3 [ 801.515964][ T30] audit: type=1400 audit(2000000576.352:1356): avc: denied { wake_alarm } for pid=12436 comm="syz.6.1295" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 801.516204][ T24] usb 6-1: USB disconnect, device number 3 [ 802.674266][T10673] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 802.852812][T10673] em28xx 4-1:0.0: board has no eeprom [ 802.964910][T10673] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 803.886928][ T5812] Bluetooth: hci2: command 0x0406 tx timeout [ 803.920787][T12439] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 804.427066][T10673] em28xx 4-1:0.0: dvb set to bulk mode. [ 804.483138][ T30] audit: type=1400 audit(2000000579.382:1357): avc: denied { mount } for pid=12460 comm="syz.1.1300" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 804.884020][ T30] audit: type=1400 audit(2000000579.712:1358): avc: denied { mounton } for pid=12460 comm="syz.1.1300" path="/" dev="autofs" ino=45069 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 804.911364][T12439] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 804.965967][T12464] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 805.012780][T12439] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 805.027244][T11368] em28xx 4-1:0.0: Binding DVB extension [ 805.047373][T12439] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 805.058056][T10673] usb 4-1: USB disconnect, device number 19 [ 805.119224][T10673] em28xx 4-1:0.0: Disconnecting em28xx [ 805.131537][T12439] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 805.912588][T11368] em28xx 4-1:0.0: Registering input extension [ 805.971306][ T30] audit: type=1800 audit(2000000580.892:1359): pid=12480 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1301" name="bus" dev="ramfs" ino=45086 res=0 errno=0 [ 806.364275][T11368] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 806.448820][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 806.456771][T11368] Registered IR keymap rc-empty [ 806.467774][T11368] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 806.482587][T11368] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14 [ 806.504320][T11368] em28xx 4-1:0.0: Input extension successfully initialized [ 806.511769][T10673] em28xx 4-1:0.0: Closing input extension [ 806.659195][T12499] fuse: Unknown parameter 'euid<00000000000000000000' [ 806.854016][T12501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 806.912478][T10673] em28xx 4-1:0.0: Freeing device [ 807.086490][ T5812] Bluetooth: hci5: command 0x0c1a tx timeout [ 807.435056][T12506] tipc: Started in network mode [ 807.439960][T12506] tipc: Node identity ac14140f, cluster identity 4711 [ 807.447658][T12506] tipc: New replicast peer: 255.255.255.255 [ 807.455088][T12506] tipc: Enabled bearer , priority 10 [ 807.464835][T12506] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1307'. [ 807.908843][T12515] netlink: 'syz.5.1308': attribute type 10 has an invalid length. [ 807.989711][T12516] loop5: detected capacity change from 0 to 7 [ 808.040825][T12516] Dev loop5: unable to read RDB block 7 [ 808.047006][T12516] loop5: AHDI p1 [ 808.050670][T12516] loop5: partition table partially beyond EOD, truncated [ 808.058520][T12517] netlink: 'syz.5.1308': attribute type 10 has an invalid length. [ 808.066485][T12517] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1308'. [ 808.356436][T12515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 808.364900][T12515] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 808.374082][T12517] batadv0: entered promiscuous mode [ 808.379329][T12517] batadv0: entered allmulticast mode [ 808.718745][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.798532][T12517] bond0: (slave batadv0): Releasing backup interface [ 808.826961][T12517] bridge0: port 4(batadv0) entered blocking state [ 808.833555][T12517] bridge0: port 4(batadv0) entered disabled state [ 808.852115][T11368] tipc: Node number set to 2886997007 [ 809.166170][ T5812] Bluetooth: hci5: command 0x0c1a tx timeout [ 809.421174][T12218] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 809.431495][T12218] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 810.511397][T12564] overlayfs: failed to resolve './file0': -2 [ 810.572085][T12567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1312'. [ 810.711450][T12567] veth0_macvtap: left promiscuous mode [ 811.324817][ T5812] Bluetooth: hci5: command 0x0c1a tx timeout [ 811.896490][ T30] audit: type=1400 audit(2000000586.822:1360): avc: denied { connect } for pid=12579 comm="syz.5.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 812.153126][ T30] audit: type=1326 audit(2000000587.082:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.5.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 812.241896][ T30] audit: type=1326 audit(2000000587.082:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.5.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 812.362836][ T30] audit: type=1326 audit(2000000587.112:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.5.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 812.503301][ T30] audit: type=1326 audit(2000000587.112:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.5.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 812.529923][ T30] audit: type=1326 audit(2000000587.112:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.5.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 812.983961][ T30] audit: type=1326 audit(2000000587.112:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.5.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f29b5d04e code=0x7ffc0000 [ 813.007747][ T30] audit: type=1326 audit(2000000587.112:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.5.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 813.031370][ T30] audit: type=1326 audit(2000000587.112:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.5.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 813.183080][ T30] audit: type=1326 audit(2000000587.122:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12579 comm="syz.5.1314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 814.074005][T12623] netlink: 'syz.1.1320': attribute type 4 has an invalid length. [ 814.084500][T12623] netlink: 'syz.1.1320': attribute type 4 has an invalid length. [ 814.106749][T12623] xt_CT: You must specify a L4 protocol and not use inversions on it [ 814.151965][ T10] lo speed is unknown, defaulting to 1000 [ 814.160019][ T10] sy0: Port: 1 Link ACTIVE [ 817.747864][ T5948] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 818.008962][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 818.155710][ T5948] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 818.202207][ T5948] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 818.249078][ T5948] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.290445][ T5948] usb 6-1: Product: syz [ 818.341050][ T5948] usb 6-1: Manufacturer: syz [ 818.361285][ T5948] usb 6-1: SerialNumber: syz [ 818.425042][ T5948] usb 6-1: config 0 descriptor?? [ 818.658001][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 818.658015][ T30] audit: type=1400 audit(2000000593.592:1388): avc: denied { remount } for pid=12667 comm="syz.5.1335" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 818.700373][T12669] wg1 speed is unknown, defaulting to 1000 [ 818.891319][T12673] veth3: entered promiscuous mode [ 818.898091][T12673] veth3: entered allmulticast mode [ 818.905187][T12669] lo speed is unknown, defaulting to 1000 [ 820.812140][ T5948] usb 6-1: USB disconnect, device number 4 [ 821.070076][T11352] udevd[11352]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 821.830099][ T5888] libceph: connect (1)[c::]:6789 error -101 [ 821.836664][ T5888] libceph: mon0 (1)[c::]:6789 connect error [ 821.860539][T12695] ceph: No mds server is up or the cluster is laggy [ 822.338147][T12711] fuse: Unknown parameter 'euid<00000000000000000000' [ 823.566911][T12723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1333'. [ 823.896526][T12723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 825.623964][T12743] netlink: 'syz.2.1338': attribute type 4 has an invalid length. [ 828.340855][T12760] atomic_op ffff88805d2a3998 conn xmit_atomic 0000000000000000 [ 828.755655][T12761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1341'. [ 828.785368][ T30] audit: type=1400 audit(2000000603.722:1389): avc: denied { ioctl } for pid=12762 comm="syz.6.1343" path="socket:[44859]" dev="sockfs" ino=44859 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 829.326439][T12763] netlink: 'syz.6.1343': attribute type 2 has an invalid length. [ 829.372306][T12763] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1343'. [ 830.142426][T12780] syz_tun: left allmulticast mode [ 830.166910][T12780] syz_tun: left promiscuous mode [ 830.186739][T12780] bridge0: port 3(syz_tun) entered disabled state [ 830.245947][T12780] bridge0: port 4(batadv0) entered disabled state [ 830.291666][T12780] bridge_slave_0: left allmulticast mode [ 830.299032][T12780] bridge_slave_0: left promiscuous mode [ 830.306358][T12780] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.491155][ T30] audit: type=1400 audit(2000000605.302:1390): avc: denied { audit_write } for pid=12779 comm="syz.5.1347" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 830.781751][T12787] fuse: Unknown parameter 'euid<00000000000000000000' [ 830.898389][T12780] bridge_slave_1: left allmulticast mode [ 830.921807][T12780] bridge_slave_1: left promiscuous mode [ 830.959661][T12780] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.266404][T12794] netlink: 'syz.6.1348': attribute type 8 has an invalid length. [ 831.320077][T12795] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1348'. [ 831.569978][T12780] bond0: (slave bond_slave_0): Releasing backup interface [ 831.614292][T12780] bond0: (slave bond_slave_1): Releasing backup interface [ 831.699873][T12780] team0: Port device team_slave_0 removed [ 831.722621][T12780] team0: Port device team_slave_1 removed [ 831.741910][T12780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 831.886422][T12780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.918228][T12780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 831.949964][T12780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.110473][T12780] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 832.283835][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1349'. [ 832.359098][ T30] audit: type=1400 audit(2000000607.292:1391): avc: denied { ioctl } for pid=12796 comm="syz.6.1349" path="/dev/uhid" dev="devtmpfs" ino=1273 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 832.644490][ T30] audit: type=1326 audit(2000000607.582:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12797 comm="syz.1.1359" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f208179c819 code=0x0 [ 832.824878][ T5948] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 832.865342][T12803] veth0_macvtap: left promiscuous mode [ 833.559660][ T5948] usb 3-1: Using ep0 maxpacket: 16 [ 833.568466][ T5948] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.580395][ T5948] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.591164][ T5948] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 833.601358][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.848299][ T30] audit: type=1326 audit(2000000608.782:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12813 comm="syz.6.1352" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec2539c819 code=0x0 [ 834.219787][ T5948] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 834.516215][ T5948] usb 3-1: USB disconnect, device number 11 [ 834.533116][ T5938] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 834.618424][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1356'. [ 834.813325][ T5938] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 834.831221][ T5938] usb 6-1: config 0 has no interface number 0 [ 834.916728][ T5938] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 835.002970][ T5938] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 835.027039][ T5938] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 835.052879][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.066707][ T5938] usb 6-1: config 0 descriptor?? [ 835.074693][T12818] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 835.088347][ T5938] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 835.304931][T12818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 835.325366][T12818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 835.381080][T12842] netlink: 'syz.6.1357': attribute type 1 has an invalid length. [ 835.474128][ T30] audit: type=1326 audit(2000000610.402:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.5.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 835.504902][ T30] audit: type=1326 audit(2000000610.402:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.5.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 835.542800][ T30] audit: type=1326 audit(2000000610.442:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.5.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 835.580169][ T30] audit: type=1326 audit(2000000610.442:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.5.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 835.764118][T12848] netlink: 'syz.3.1355': attribute type 15 has an invalid length. [ 835.773057][T12848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1355'. [ 836.152146][ T30] audit: type=1326 audit(2000000610.442:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.5.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f29b5d04e code=0x7ffc0000 [ 836.176702][ T30] audit: type=1326 audit(2000000610.462:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.5.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 836.221290][ T30] audit: type=1326 audit(2000000610.472:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.5.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 836.298936][ T30] audit: type=1326 audit(2000000610.472:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.5.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 836.323361][ T30] audit: type=1326 audit(2000000610.512:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12817 comm="syz.5.1353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 836.398058][T12837] zonefs (nullb0) ERROR: Not a zoned block device [ 837.960856][ T5948] usb 6-1: USB disconnect, device number 5 [ 838.348069][T12863] netlink: 'syz.5.1361': attribute type 8 has an invalid length. [ 838.402261][T12864] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1361'. [ 838.727599][T12866] loop7: detected capacity change from 0 to 16384 [ 839.543079][T12867] loop7: detected capacity change from 16384 to 0 [ 839.886899][T12881] netlink: 'syz.5.1364': attribute type 4 has an invalid length. [ 840.067460][T12909] netlink: 'syz.5.1364': attribute type 4 has an invalid length. [ 840.374524][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 840.374542][ T30] audit: type=1326 audit(2000000615.302:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12910 comm="syz.6.1365" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec2539c819 code=0x0 [ 840.811192][T12920] fuse: Unknown parameter 'euid<00000000000000000000' [ 842.051837][T12932] netlink: 'syz.2.1369': attribute type 10 has an invalid length. [ 842.062461][T12932] batadv0: left allmulticast mode [ 842.069437][T12932] batadv0: left promiscuous mode [ 842.077073][T12932] bridge0: port 3(batadv0) entered disabled state [ 842.113659][T12933] loop5: detected capacity change from 0 to 7 [ 842.138944][T12932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 842.158055][T12932] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 842.238168][T12932] netlink: 'syz.2.1369': attribute type 10 has an invalid length. [ 842.247894][T12932] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1369'. [ 842.258664][T12932] batadv0: entered promiscuous mode [ 842.264869][T12932] batadv0: entered allmulticast mode [ 842.278886][T12932] bond0: (slave batadv0): Releasing backup interface [ 842.300219][T12933] Dev loop5: unable to read RDB block 7 [ 842.307734][T12933] loop5: AHDI p1 [ 842.311703][T12933] loop5: partition table partially beyond EOD, truncated [ 842.578811][T12932] bridge0: port 3(batadv0) entered blocking state [ 842.586402][T12932] bridge0: port 3(batadv0) entered disabled state [ 842.816721][T12938] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1371'. [ 842.975891][ T7186] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 842.985499][ T7186] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 845.164168][ T5888] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 845.191200][T11352] udevd[11352]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 845.210210][T11416] udevd[11416]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 845.312013][ T30] audit: type=1326 audit(2000000620.242:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12953 comm="syz.5.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 845.373943][ T5888] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 845.401059][ T5888] usb 3-1: config 0 interface 0 has no altsetting 0 [ 845.402841][T12961] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 845.426182][ T30] audit: type=1326 audit(2000000620.272:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12953 comm="syz.5.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 845.592257][ T5888] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 846.556304][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 846.566078][ T30] audit: type=1326 audit(2000000620.272:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12953 comm="syz.5.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 846.590001][ T5888] usb 3-1: Product: syz [ 846.778429][ T5888] usb 3-1: Manufacturer: syz [ 846.783783][ T5888] usb 3-1: SerialNumber: syz [ 846.815752][ T5888] usb 3-1: config 0 descriptor?? [ 846.879053][ T30] audit: type=1326 audit(2000000620.272:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12953 comm="syz.5.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 846.915546][ T5888] usb 3-1: can't set config #0, error -71 [ 846.936578][ T5888] usb 3-1: USB disconnect, device number 12 [ 846.987223][ T30] audit: type=1326 audit(2000000620.272:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12953 comm="syz.5.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 847.031865][ T30] audit: type=1326 audit(2000000620.272:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12953 comm="syz.5.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f29b5d04e code=0x7ffc0000 [ 847.083323][ T30] audit: type=1326 audit(2000000620.272:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12953 comm="syz.5.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 847.107988][ T30] audit: type=1326 audit(2000000620.272:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12953 comm="syz.5.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 847.185385][ T30] audit: type=1326 audit(2000000620.272:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12953 comm="syz.5.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 848.018764][ T30] audit: type=1326 audit(2000000620.282:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12953 comm="syz.5.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 848.480504][ T30] audit: type=1326 audit(2000000620.282:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12953 comm="syz.5.1373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f29b9c819 code=0x7ffc0000 [ 848.727321][T12984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1380'. [ 848.754677][T12984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 850.232042][T13005] netlink: 'syz.6.1385': attribute type 2 has an invalid length. [ 850.337438][T13006] netlink: 'syz.6.1385': attribute type 2 has an invalid length. [ 850.388001][T13006] netlink: 'syz.6.1385': attribute type 1 has an invalid length. [ 852.482981][ T30] kauditd_printk_skb: 234 callbacks suppressed [ 852.483001][ T30] audit: type=1326 audit(2000000627.302:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13024 comm="syz.6.1390" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec2539c819 code=0x0 [ 852.870892][T13035] fuse: Unknown parameter 'euid<00000000000000000000' [ 852.936479][T13038] netlink: 'syz.3.1391': attribute type 2 has an invalid length. [ 853.002075][T13039] netlink: 'syz.3.1391': attribute type 2 has an invalid length. [ 854.484703][T13047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1395'. [ 856.074443][T13060] batman_adv: batadv0: Adding interface: macsec1 [ 856.080853][T13060] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem. [ 856.106978][T13060] batman_adv: batadv0: Interface activated: macsec1 [ 856.294949][T13059] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20004 [ 856.310364][ T24] IPVS: starting estimator thread 0... [ 856.433178][T13061] IPVS: using max 31 ests per chain, 74400 per kthread [ 856.586538][T13070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 857.385009][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 857.425043][ T30] audit: type=1326 audit(2000000632.362:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13082 comm="syz.5.1403" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f29b9c819 code=0x0 [ 857.546464][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 857.693492][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 857.709845][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 857.727591][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.927960][T13091] wg1 speed is unknown, defaulting to 1000 [ 858.405197][T13092] random: crng reseeded on system resumption [ 858.659561][T13092] Restarting kernel threads ... [ 858.667017][ T30] audit: type=1400 audit(2000000633.592:1671): avc: denied { ioctl } for pid=13088 comm="syz.6.1405" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 858.667428][T13092] Done restarting kernel threads. [ 858.718264][ T24] usb 4-1: Product: syz [ 858.722480][ T24] usb 4-1: Manufacturer: syz [ 859.201507][T13091] lo speed is unknown, defaulting to 1000 [ 859.262134][ T24] usb 4-1: SerialNumber: syz [ 859.285253][ T24] usb 4-1: config 0 descriptor?? [ 859.776557][ T24] usb 4-1: USB disconnect, device number 20 [ 859.950195][T11352] udevd[11352]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 860.245103][ T5948] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 860.375714][T13106] tipc: Bearer : already 2 bearers with priority 10 [ 860.385128][T13106] tipc: Bearer : trying with adjusted priority [ 860.397414][T13106] tipc: New replicast peer: 255.255.255.255 [ 860.406667][T13106] tipc: Enabled bearer , priority 9 [ 860.441901][T13106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1408'. [ 861.627226][T13114] wg1 speed is unknown, defaulting to 1000 [ 862.108903][T13115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.109373][T13115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.292042][T13114] lo speed is unknown, defaulting to 1000 [ 862.724956][ T30] audit: type=1400 audit(2000000637.652:1672): avc: denied { read } for pid=13124 comm="syz.3.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 862.746883][ T5132] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 863.039085][ T30] audit: type=1400 audit(2000000637.662:1673): avc: denied { setopt } for pid=13124 comm="syz.3.1411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 863.067784][T13131] fuse: Bad value for 'fd' [ 863.822366][ T5948] usb 7-1: unable to get BOS descriptor or descriptor too short [ 863.920206][ T5948] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 863.935041][ T5948] usb 7-1: can't read configurations, error -71 [ 864.398954][ T5132] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 864.410330][ T5132] CPU: 1 UID: 0 PID: 5132 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 864.410364][ T5132] Tainted: [L]=SOFTLOCKUP [ 864.410372][ T5132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 864.410388][ T5132] Workqueue: hci5 hci_rx_work [ 864.410413][ T5132] Call Trace: [ 864.410420][ T5132] [ 864.410426][ T5132] dump_stack_lvl+0x100/0x190 [ 864.410449][ T5132] sysfs_warn_dup.cold+0x1c/0x28 [ 864.410465][ T5132] sysfs_create_dir_ns+0x24b/0x2b0 [ 864.410485][ T5132] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 864.410503][ T5132] ? preempt_schedule_common+0x42/0xc0 [ 864.410522][ T5132] ? preempt_schedule_thunk+0x16/0x30 [ 864.410542][ T5132] kobject_add_internal+0x2c8/0x930 [ 864.410559][ T5132] kobject_add+0x16a/0x1e0 [ 864.410573][ T5132] ? __pfx_kobject_add+0x10/0x10 [ 864.410585][ T5132] ? preempt_schedule_thunk+0x16/0x30 [ 864.410604][ T5132] ? kobject_put+0xb9/0x640 [ 864.410615][ T5132] ? _raw_spin_unlock+0x3e/0x50 [ 864.410635][ T5132] device_add+0x294/0x1950 [ 864.410650][ T5132] ? __pfx_dev_set_name+0x10/0x10 [ 864.410665][ T5132] ? __pfx_device_add+0x10/0x10 [ 864.410679][ T5132] ? mgmt_send_event_skb+0x2fb/0x460 [ 864.410702][ T5132] hci_conn_add_sysfs+0x1a3/0x260 [ 864.410722][ T5132] le_conn_complete_evt+0x11eb/0x1f60 [ 864.410743][ T5132] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 864.410759][ T5132] ? irqentry_exit+0x180/0x670 [ 864.410770][ T5132] ? lockdep_hardirqs_on+0x78/0x100 [ 864.410783][ T5132] hci_le_conn_complete_evt+0x23c/0x3a0 [ 864.410800][ T5132] ? skb_pull_data+0x15f/0x1e0 [ 864.410815][ T5132] hci_le_meta_evt+0x34a/0x5f0 [ 864.410834][ T5132] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 864.410866][ T5132] hci_event_packet+0x51c/0xcd0 [ 864.410898][ T5132] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 864.410921][ T5132] ? __pfx_hci_event_packet+0x10/0x10 [ 864.410941][ T5132] ? kcov_remote_start+0x384/0x660 [ 864.410960][ T5132] hci_rx_work+0x451/0xfc0 [ 864.410980][ T5132] process_one_work+0xa23/0x19a0 [ 864.411001][ T5132] ? __pfx_process_one_work+0x10/0x10 [ 864.411019][ T5132] ? __pfx_hci_rx_work+0x10/0x10 [ 864.411036][ T5132] worker_thread+0x5ef/0xe50 [ 864.411055][ T5132] ? kthread+0x13a/0x450 [ 864.411066][ T5132] ? __pfx_worker_thread+0x10/0x10 [ 864.411078][ T5132] kthread+0x370/0x450 [ 864.411089][ T5132] ? __pfx_kthread+0x10/0x10 [ 864.411102][ T5132] ret_from_fork+0x754/0xd80 [ 864.411115][ T5132] ? __pfx_ret_from_fork+0x10/0x10 [ 864.411129][ T5132] ? __switch_to+0x7b4/0x1120 [ 864.411144][ T5132] ? __pfx_kthread+0x10/0x10 [ 864.411157][ T5132] ret_from_fork_asm+0x1a/0x30 [ 864.411186][ T5132] [ 864.411368][ T5132] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 864.716094][ T5132] Bluetooth: hci5: failed to register connection device [ 864.763782][ C0] ------------[ cut here ]------------ [ 864.769845][ C0] ODEBUG: free active (active state 0) object: ffff888078aa0090 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 864.782799][ C0] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: swapper/0/0 [ 864.792593][ C0] Modules linked in: [ 864.797060][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 864.807639][ C0] Tainted: [L]=SOFTLOCKUP [ 864.811970][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 864.822133][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 864.828070][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d c2 0c e5 0b 41 56 48 8b 14 dd 60 30 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ac ca da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 864.847778][ C0] RSP: 0018:ffffc90000007a38 EFLAGS: 00010246 [ 864.853902][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 864.861921][ C0] RDX: ffffffff8c1b2fa0 RSI: ffffffff8c1b2bc0 RDI: ffffffff90e45010 [ 864.869963][ C0] RBP: 0000000000000001 R08: ffff888078aa0090 R09: ffffffff8bb2bba0 [ 864.878148][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2bc0 [ 864.886232][ C0] R13: ffffffff8bb2bbe0 R14: ffffffff8a7cfd80 R15: ffffc90000007b38 [ 864.894295][ C0] FS: 0000000000000000(0000) GS:ffff888124338000(0000) knlGS:0000000000000000 [ 864.903286][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 864.909899][ C0] CR2: 00007fec253e9f00 CR3: 0000000075f6f000 CR4: 00000000003526f0 [ 864.917991][ C0] Call Trace: [ 864.921299][ C0] [ 864.924224][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 864.929929][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 864.935847][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 864.941488][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 864.947671][ C0] ? mark_held_locks+0x40/0x70 [ 864.952482][ C0] ? kasan_quarantine_put+0x104/0x240 [ 864.958026][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 864.963369][ C0] ? rose_timer_expiry+0x53f/0x630 [ 864.968573][ C0] kfree+0x38f/0x6b0 [ 864.972557][ C0] rose_timer_expiry+0x53f/0x630 [ 864.977611][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 864.983191][ C0] call_timer_fn+0x19a/0x670 [ 864.987840][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 864.993113][ C0] ? __run_timers+0x747/0xb30 [ 864.997837][ C0] ? rcu_is_watching+0x12/0xc0 [ 865.002646][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 865.008266][ C0] __run_timers+0x757/0xb30 [ 865.012817][ C0] ? __pfx___run_timers+0x10/0x10 [ 865.017964][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 865.023074][ C0] run_timer_base+0x114/0x190 [ 865.027805][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 865.033092][ C0] run_timer_softirq+0x1a/0x50 [ 865.037889][ C0] handle_softirqs+0x1eb/0x9e0 [ 865.042708][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 865.048122][ C0] __irq_exit_rcu+0xef/0x150 [ 865.052780][ C0] irq_exit_rcu+0x9/0x30 [ 865.057135][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 865.062821][ C0] [ 865.065823][ C0] [ 865.068787][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 865.074845][ C0] RIP: 0010:sched_core_balance+0x9f/0xe20 [ 865.080623][ C0] Code: 79 7e 8e e8 73 fd 0d 00 e8 5e 48 ba 09 41 5a 85 c0 0f 85 28 0a 00 00 4c 89 ef e8 fc 2c ff ff e8 97 ef 39 00 fb 48 63 44 24 50 <48> c7 c3 c0 31 10 94 48 89 dd 48 89 44 24 08 48 83 f8 08 0f 83 4c [ 865.100349][ C0] RSP: 0018:ffffffff8e407b70 EFLAGS: 00000206 [ 865.106509][ C0] RAX: 0000000000000000 RBX: ffff8880b843b1c0 RCX: 0000000000000000 [ 865.114551][ C0] RDX: 0000000000000000 RSI: ffffffff8de7b1c9 RDI: ffffffff8c1b1ea0 [ 865.122544][ C0] RBP: ffffffff8e407c88 R08: 0000000000000001 R09: 0000000000000000 [ 865.130599][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8e4975c0 [ 865.138690][ C0] R13: ffff8880b843b1c0 R14: 0000000000000000 R15: dffffc0000000000 [ 865.146778][ C0] ? lock_acquire+0x1cf/0x380 [ 865.151524][ C0] ? __pfx___perf_event_task_sched_out+0x10/0x10 [ 865.158011][ C0] finish_task_switch.isra.0+0x446/0xb80 [ 865.163794][ C0] __schedule+0xff6/0x6120 [ 865.168270][ C0] ? try_to_wake_up+0x160/0x1a80 [ 865.173314][ C0] ? __pfx___schedule+0x10/0x10 [ 865.178222][ C0] ? rcu_is_watching+0x12/0xc0 [ 865.183127][ C0] schedule_idle+0x54/0x80 [ 865.187586][ C0] do_idle+0x2dd/0x590 [ 865.191703][ C0] ? __pfx_do_idle+0x10/0x10 [ 865.196390][ C0] cpu_startup_entry+0x4f/0x60 [ 865.201198][ C0] rest_init+0x251/0x260 [ 865.205552][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 865.211150][ C0] start_kernel+0x47f/0x480 [ 865.215837][ C0] x86_64_start_reservations+0x24/0x30 [ 865.221360][ C0] x86_64_start_kernel+0x12b/0x130 [ 865.226667][ C0] common_startup_64+0x13e/0x148 [ 865.231665][ C0] [ 865.234773][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 865.242047][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 865.252543][ C0] Tainted: [L]=SOFTLOCKUP [ 865.256861][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 865.266904][ C0] Call Trace: [ 865.270171][ C0] [ 865.273013][ C0] dump_stack_lvl+0x100/0x190 [ 865.277712][ C0] vpanic+0x552/0x970 [ 865.281681][ C0] ? __pfx_vpanic+0x10/0x10 [ 865.286171][ C0] panic+0xd1/0xe0 [ 865.289873][ C0] ? __pfx_panic+0x10/0x10 [ 865.294297][ C0] ? check_panic_on_warn+0x1f/0x90 [ 865.299424][ C0] check_panic_on_warn.cold+0x19/0x34 [ 865.304873][ C0] ? debug_print_object+0x18e/0x2a0 [ 865.310061][ C0] __warn.cold+0x191/0x348 [ 865.314470][ C0] __report_bug+0x296/0x3d0 [ 865.318986][ C0] ? debug_print_object+0x18e/0x2a0 [ 865.324183][ C0] ? __pfx___report_bug+0x10/0x10 [ 865.329221][ C0] ? lock_acquire+0x1cf/0x380 [ 865.333900][ C0] ? mark_held_locks+0x40/0x70 [ 865.338666][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 865.344467][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 865.349668][ C0] report_bug_entry+0xe1/0x290 [ 865.354425][ C0] ? debug_print_object+0x19b/0x2a0 [ 865.359639][ C0] handle_bug+0x1cd/0x2a0 [ 865.363979][ C0] exc_invalid_op+0x17/0x50 [ 865.368485][ C0] asm_exc_invalid_op+0x1a/0x20 [ 865.373321][ C0] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 865.379137][ C0] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d c2 0c e5 0b 41 56 48 8b 14 dd 60 30 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ac ca da 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 865.398759][ C0] RSP: 0018:ffffc90000007a38 EFLAGS: 00010246 [ 865.404820][ C0] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 865.412779][ C0] RDX: ffffffff8c1b2fa0 RSI: ffffffff8c1b2bc0 RDI: ffffffff90e45010 [ 865.420742][ C0] RBP: 0000000000000001 R08: ffff888078aa0090 R09: ffffffff8bb2bba0 [ 865.428711][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2bc0 [ 865.436676][ C0] R13: ffffffff8bb2bbe0 R14: ffffffff8a7cfd80 R15: ffffc90000007b38 [ 865.444645][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 865.450293][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 865.455911][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 865.461721][ C0] debug_check_no_obj_freed+0x4da/0x630 [ 865.467269][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 865.473337][ C0] ? mark_held_locks+0x40/0x70 [ 865.478107][ C0] ? kasan_quarantine_put+0x104/0x240 [ 865.483491][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 865.488692][ C0] ? rose_timer_expiry+0x53f/0x630 [ 865.493793][ C0] kfree+0x38f/0x6b0 [ 865.497694][ C0] rose_timer_expiry+0x53f/0x630 [ 865.502618][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 865.508117][ C0] call_timer_fn+0x19a/0x670 [ 865.512792][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 865.517907][ C0] ? __run_timers+0x747/0xb30 [ 865.522761][ C0] ? rcu_is_watching+0x12/0xc0 [ 865.527526][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 865.532994][ C0] __run_timers+0x757/0xb30 [ 865.537554][ C0] ? __pfx___run_timers+0x10/0x10 [ 865.542589][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 865.547678][ C0] run_timer_base+0x114/0x190 [ 865.552373][ C0] ? __pfx_run_timer_base+0x10/0x10 [ 865.557570][ C0] run_timer_softirq+0x1a/0x50 [ 865.562338][ C0] handle_softirqs+0x1eb/0x9e0 [ 865.567114][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 865.572407][ C0] __irq_exit_rcu+0xef/0x150 [ 865.577007][ C0] irq_exit_rcu+0x9/0x30 [ 865.581260][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 865.586915][ C0] [ 865.589839][ C0] [ 865.592760][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 865.598738][ C0] RIP: 0010:sched_core_balance+0x9f/0xe20 [ 865.604462][ C0] Code: 79 7e 8e e8 73 fd 0d 00 e8 5e 48 ba 09 41 5a 85 c0 0f 85 28 0a 00 00 4c 89 ef e8 fc 2c ff ff e8 97 ef 39 00 fb 48 63 44 24 50 <48> c7 c3 c0 31 10 94 48 89 dd 48 89 44 24 08 48 83 f8 08 0f 83 4c [ 865.624173][ C0] RSP: 0018:ffffffff8e407b70 EFLAGS: 00000206 [ 865.630247][ C0] RAX: 0000000000000000 RBX: ffff8880b843b1c0 RCX: 0000000000000000 [ 865.638208][ C0] RDX: 0000000000000000 RSI: ffffffff8de7b1c9 RDI: ffffffff8c1b1ea0 [ 865.646179][ C0] RBP: ffffffff8e407c88 R08: 0000000000000001 R09: 0000000000000000 [ 865.654144][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8e4975c0 [ 865.662210][ C0] R13: ffff8880b843b1c0 R14: 0000000000000000 R15: dffffc0000000000 [ 865.670194][ C0] ? lock_acquire+0x1cf/0x380 [ 865.674872][ C0] ? __pfx___perf_event_task_sched_out+0x10/0x10 [ 865.681197][ C0] finish_task_switch.isra.0+0x446/0xb80 [ 865.686828][ C0] __schedule+0xff6/0x6120 [ 865.691237][ C0] ? try_to_wake_up+0x160/0x1a80 [ 865.696180][ C0] ? __pfx___schedule+0x10/0x10 [ 865.701022][ C0] ? rcu_is_watching+0x12/0xc0 [ 865.705775][ C0] schedule_idle+0x54/0x80 [ 865.710180][ C0] do_idle+0x2dd/0x590 [ 865.714247][ C0] ? __pfx_do_idle+0x10/0x10 [ 865.718875][ C0] cpu_startup_entry+0x4f/0x60 [ 865.723644][ C0] rest_init+0x251/0x260 [ 865.727898][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 865.733469][ C0] start_kernel+0x47f/0x480 [ 865.738030][ C0] x86_64_start_reservations+0x24/0x30 [ 865.743500][ C0] x86_64_start_kernel+0x12b/0x130 [ 865.748628][ C0] common_startup_64+0x13e/0x148 [ 865.753576][ C0] [ 865.757009][ C0] Kernel Offset: disabled [ 865.761326][ C0] Rebooting in 86400 seconds..