last executing test programs: 19m56.844318913s ago: executing program 32 (id=134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000580)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x8b, 0x100000500) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000001840), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b00001400"], 0x6c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r5, @ANYBLOB="00042dbd7000fcdbdf25020000001c0007", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0c000400020000000000000013000a002f6465762f6370752f232f6d737200000c00030008000000000000000c000200ff030000000000003c00078008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08c969b5a160a63b000100", @ANYRES32=r6, @ANYBLOB], 0xa4}, 0x1, 0x0, 0x0, 0x4000005}, 0x80) 17m25.767134779s ago: executing program 33 (id=447): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x800008, 0x4000010, 0xffffffffffffffff, 0xa41f4000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$kvm(0xffffffffffffff9c, 0x0, 0x406000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x410000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000003180)=""/102400, 0x19000) mkdir(0x0, 0x8) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0, 0x5, 0x0, 0x0, r2}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0xfffffea2}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 14m19.847251556s ago: executing program 5 (id=812): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x3, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$incfs(0xffffffffffffff9c, 0x0, 0x802442, 0x0) ioctl$FICLONE(r4, 0x40049409, r4) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000200)={0x4, @raw_data="8cf9ec01b6e03ae2acbb567add1ccd9967ce97a3ec11c94ee7e3a7706234211010ed1d6e02b4fcc84ebdbdbab022e7429e137670f9d6a06693bbfa3142ed3209e4cea962dfde4e178d3fdbb70a24ee2ff971a8f41d281c1f361ffdae9669e2fd167694725d0cade6e86af8804e77abb9cab505784e6859a772f8cfc004256f9edfc8794798ea1e80aaa4acc2a4c8bc9050670d63a5338e76a4ee15eb8b02c7cc30b91357a9204625630945acbf0ffad697e6dc423ca9012e98fd8046c82821afe40d594c5584125d"}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$FUSE_DEV_IOC_CLONE(r7, 0x8004e500, &(0x7f0000000080)=r7) 14m17.638528101s ago: executing program 5 (id=817): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc811}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000600)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="070600000000000000002d0000000c000500000000000000000008002f000000000005002b00030000000a0001007770616e3100000005002e00000000000c002d"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001800dd8d000000000000000002"], 0x38}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) syz_emit_vhci(&(0x7f0000002a80)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x8, 0xc8, @none, 0x2, 0x4, 0x6d, 0x3, 0xe79, 0xea}}}, 0x14) r8 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x24, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0}, 0x44080) 14m16.544044834s ago: executing program 5 (id=823): fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000003c0)='/dev/i2c-#\x00', &(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c) syz_open_dev$I2C(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioperm(0xc210, 0x4, 0x5) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r2 = fsopen(&(0x7f0000000940)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000300)=""/132, 0x84) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040800}, 0x800) openat$nvme_fabrics(0xffffff9c, 0x0, 0x141000, 0x0) 14m11.725107226s ago: executing program 5 (id=834): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={@multicast1, @remote}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x5, 0xfffffffb, 0x8) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffd8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0x3e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb380018000000000000007c000000d600000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000080000000000900000000000000000000000902"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct, @struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x8001, [{0x6, 0x4, 0x5}]}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000007a0000000000089500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14, 0x0, @void, @value}, 0x90) 13m54.580221002s ago: executing program 34 (id=834): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={@multicast1, @remote}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x802c550a, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x5, 0xfffffffb, 0x8) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffd8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1}, {0x0, 0x86dd, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0x3e) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb380018000000000000007c000000d600000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000080000000000900000000000000000000000902"], 0x0, 0x96, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct, @struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x8001, [{0x6, 0x4, 0x5}]}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000007a0000000000089500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2, 0x0, 0x0, 0x1d6225b, 0x0, 0x0, 0x14, 0x0, @void, @value}, 0x90) 13m8.427892514s ago: executing program 3 (id=953): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r6 = dup(r1) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f0000001ac0)={r8, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 13m5.457920363s ago: executing program 3 (id=957): r0 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) set_mempolicy_home_node(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000180)=0x3, 0x12) r5 = openat(0xffffffffffffff9c, 0x0, 0x141842, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400a1}, 0x20010084) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_io_uring_setup(0x110, &(0x7f00000004c0)={0x0, 0x2b7a, 0x80, 0x1, 0x8}, &(0x7f0000000240)=0x0, &(0x7f0000000800)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x1a, 0x0, r5, 0x0, 0x0, 0x264}) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) 13m3.292471078s ago: executing program 3 (id=963): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0xef699000) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x129480, 0x0) io_uring_setup(0x70f7, &(0x7f0000000940)={0x0, 0x924e, 0x800, 0x0, 0x8000}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) mount$afs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[]) munlockall() socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r4) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) 13m1.312514759s ago: executing program 3 (id=965): signalfd(0xffffffffffffffff, &(0x7f0000000740)={[0x1]}, 0x8) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfff, 0x182) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x6, {0x9, 0x6, 0x0, 0x5}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x3) r2 = dup3(r0, 0xffffffffffffffff, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x1000000, &(0x7f0000000500)="d674"}) getpid() r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) sendfile(r4, r5, 0x0, 0x8000002b) keyctl$update(0x2, 0x0, 0x0, 0x0) 13m0.304516777s ago: executing program 3 (id=971): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) truncate(&(0x7f0000000080)='./file0\x00', 0x101000) landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getpgid(0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000300000008000000fd7f"], 0x48) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 12m57.329288867s ago: executing program 3 (id=977): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) pipe2$9p(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x0, {0x0, 0x0, 0x0, 0xffff, 0x369, 0x0, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, 0x0) 12m41.061134255s ago: executing program 35 (id=977): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) pipe2$9p(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000000)=0x1) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x0, {0x0, 0x0, 0x0, 0xffff, 0x369, 0x0, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1}, 0x50) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, 0x0) 7m17.96310534s ago: executing program 6 (id=1628): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, r4, 0x0, 0x0, 0xdead, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r3, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f00000001c0)={0x8}) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000340)={0x8, r4}) ioctl$IOMMU_DESTROY$stdev(r3, 0x3b80, &(0x7f0000000400)={0x8}) 7m16.453973337s ago: executing program 6 (id=1632): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$session_to_parent(0x12) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x1000}) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000340)=""/167, 0xa7}], 0x1, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x101, 0x1) mmap(&(0x7f000033e000/0x2000)=nil, 0x2000, 0xe, 0x1010, r4, 0x3248000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000003d000900000000000000000001000000040000000c0001800800108004000b0008000200", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') 7m14.967487043s ago: executing program 6 (id=1634): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000001f80), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, 0x0) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r4, 0x0, &(0x7f0000000240), 0x0, 0x1c}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r4, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000340)={0x18, r4, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r4, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f00000003c0)={0x12, r4}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r4, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000500)={0x18, r5, 0x3, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r3, 0x3b86, &(0x7f0000000580)={0x18, r4}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) 7m14.423741496s ago: executing program 6 (id=1638): syz_open_dev$sndpcmc(&(0x7f0000001080), 0x0, 0x800) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) umount2(&(0x7f0000000500)='./bus\x00', 0x9) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r4, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x3, 0x2060e3, 0x36f3fc}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000200)={0x18, r2}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f0000000400)=&(0x7f00000003c0)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0xfff) syz_emit_ethernet(0x52, &(0x7f0000000740)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x4, 0x0, 0x9, {[@exp_fastopen={0xfe, 0x7, 0xf989, "8e98ee"}]}}}}}}}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r9) 7m10.918218276s ago: executing program 6 (id=1643): stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xc, 0xa3, 0x8f, 0x40, 0x13d8, 0x11, 0xd062, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa6, 0x1, 0x56}}]}}]}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="dc2000003d0007010000000000000000017c0000040000000c00018006000600800a0000b8200280b1200680d80001"], 0x20dc}}, 0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r7, 0x0, 0x3}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) mount$9p_fd(0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESHEX, @ANYBLOB="7569a326", @ANYRESHEX=r0]) r8 = fsopen(&(0x7f0000000340)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) 7m7.438272543s ago: executing program 6 (id=1650): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8000) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x83, &(0x7f00000003c0)={0x0, 0x2}, 0x8) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000180), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000000)=0x8, 0x4) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x4000) close_range(r6, 0xffffffffffffffff, 0x0) 6m51.128721343s ago: executing program 36 (id=1650): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8000) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x83, &(0x7f00000003c0)={0x0, 0x2}, 0x8) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000180), 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000000)=0x8, 0x4) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x4000) close_range(r6, 0xffffffffffffffff, 0x0) 3m25.25464101s ago: executing program 7 (id=2085): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000200037800b0001006261746164760000100002800c0001004241544d414e5f5608000a00"], 0x48}}, 0x840) 3m24.317377382s ago: executing program 7 (id=2087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) getpid() socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) setresuid(0x0, 0xffffffffffffffff, 0xee00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x0, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) setsockopt$inet_buf(r1, 0x0, 0x9, &(0x7f00000001c0)="374d59cb1c2035b037a2904abdd7ff96de8f4e989ffc6be757bbc5fefcf67e618210ade7e8e90017f7bf0eb8b69ae32bfb249ae103cc05d012ed07e3cc44236fd8a802a55b49c10ca7e4a83ba473", 0x4e) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_setup(0x10, &(0x7f0000000240)={0x0, 0x5a7b, 0x800, 0x3, 0x34a, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x0, 0x0, 0x0, 0x4) ioctl$SNDCTL_SEQ_NRSYNTHS(r6, 0xc004510e, &(0x7f0000001b80)) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 3m23.069339803s ago: executing program 7 (id=2089): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff0000}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) connect$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x3, {0x1, 0xff, 0x4}}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r7 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r6, &(0x7f0000000100)='./file1\x00', r7, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x9, 0x12) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_usb_connect(0x0, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) r9 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) accept4(r9, 0x0, 0x0, 0x80000) 3m17.443577972s ago: executing program 7 (id=2101): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40c0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="280f0000", @ANYRES16=0x0, @ANYBLOB="0102000000000000000003002600140006007369743000"/34], 0x28}, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24000090) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1\xd1\x11\xf0\xc2Gj+kV\x00'/179, 0x2) ftruncate(r4, 0xfbff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000080)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000000c0)=0x5) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f000000000005000000", @ANYRES32=r7], 0x4c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x17, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002940)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_pedit={0xe60, 0x4, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}]}]}, @TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x3, 0x9, 0x3, 0x6}, 0x6, 0x1}, [{0x10000, 0x4, 0x7, 0x6, 0x0, 0x4}, {0x3, 0x8, 0x1285, 0x401, 0xb0d0, 0x9}, {0x6, 0x7f, 0x4, 0x800, 0x4, 0x8}, {0x5, 0x0, 0xa08c, 0x81, 0x4}, {0x800, 0x200, 0x800, 0x4, 0x3, 0x2}, {0xffff, 0xfffffffc, 0x8001, 0x17, 0x4, 0x1}, {0xfffffffd, 0x4, 0x0, 0x4, 0x75, 0x8001}, {0x6, 0x200, 0xffffff00, 0x4, 0x7, 0x1}, {0x6, 0x4, 0x14ba, 0x0, 0x5, 0x5}, {0x9, 0xd, 0x8000, 0x125ee151, 0xffff, 0x2}, {0x9e39, 0x4000, 0x7fffffff, 0x4, 0x0, 0x3ff}, {0x0, 0x5, 0x9, 0x3ff, 0x7, 0x2}, {0x5, 0x8001, 0x7, 0x1000, 0x6, 0x4}, {0x0, 0x1, 0x8, 0x6, 0xfffffffc, 0x6}, {0x2, 0x9, 0x8, 0x9, 0x0, 0x40}, {0x80003, 0x1ff, 0x7, 0x2, 0x6}, {0x1, 0x3, 0x5, 0x5, 0x9, 0x9}, {0x3, 0x80000007, 0x4, 0xfffffffd, 0x9, 0x2}, {0xee4b, 0x1, 0x7f, 0xc494, 0x3, 0x5409}, {0x0, 0xb, 0x3, 0xa, 0x6, 0x7f}, {0x5, 0x401000, 0x0, 0x2, 0x1, 0x9}, {0xa, 0x7, 0x2, 0x8, 0x8, 0xc8}, {0x4, 0x5b90, 0x7f, 0x9, 0x7, 0x7}, {0x7, 0x7fff, 0x3, 0x6, 0x9, 0x5}, {0x2000000, 0x0, 0x3, 0x7, 0x1, 0x9}, {0x4, 0x0, 0x9, 0x80000001, 0x3b, 0x6}, {0x1ff, 0x1, 0x0, 0x2, 0x2, 0x458c}, {0x469, 0xcfe, 0x4, 0xff, 0xf9, 0x1}, {0x2, 0x9, 0x2, 0xa122, 0x8, 0x8001}, {0x80000001, 0x10, 0x81, 0x6, 0x8}, {0x91a, 0xb2, 0x9, 0xd30, 0x401, 0x8001}, {0xfa8f, 0x0, 0x8, 0x8, 0xffff, 0x8001}, {0xcf7, 0x416ad2ec, 0x401, 0x30000, 0x5, 0xd12}, {0x1, 0x2, 0x7, 0x10, 0xfffffff1, 0x275dca9e}, {0x0, 0xffffff44, 0x7ff, 0x7, 0x0, 0x6}, {0xffff, 0x7fff, 0x1fa, 0x8, 0x8, 0x7fffffff}, {0x8, 0x4, 0x100, 0x6, 0x5, 0xfff}, {0xd, 0x2, 0xf38, 0x8, 0x80000001, 0x4}, {0x4, 0x8000, 0x8, 0xddd, 0x1, 0x5}, {0xa, 0x6, 0x7, 0x8, 0x100, 0x400}, {0xc, 0x625f, 0x3, 0x1ff, 0xffff, 0x9}, {0x9, 0x400, 0x8, 0x1000, 0x6, 0x81}, {0x1ff, 0x9, 0xe39, 0x2, 0x5, 0x1004}, {0x80, 0xfffff001, 0x5, 0x1c00000, 0x5, 0x9}, {0x8, 0x6, 0x2, 0x3, 0xacc, 0xffff}, {0x9, 0x7fffffff, 0x8, 0x3, 0x0, 0x3}, {0x2015, 0x0, 0x6c9, 0x3, 0xffffcd26, 0x3}, {0x1, 0x4, 0x3, 0x80, 0x2eba, 0xff}, {0x6, 0x0, 0x401, 0x2, 0x9, 0x3}, {0x93, 0x3, 0x2, 0x4, 0x9, 0xaef6}, {0x3, 0xb3, 0x7, 0x6, 0x800, 0x4}, {0xb, 0x806, 0x5, 0x2, 0xde4, 0x2}, {0x9, 0x4, 0x0, 0x401000, 0xfff}, {0x1, 0x6, 0xc5, 0x401, 0x6}, {0x5, 0x3, 0x9, 0xb6c9, 0xfffffffa, 0xff}, {0x10000, 0x5, 0x9, 0xfffffffa, 0x7, 0x6}, {0x7, 0x6, 0x10000000, 0x4, 0x8, 0xfffffff7}, {0x0, 0xfffffff9, 0x1, 0xfffffffa, 0x3}, {0x1, 0x4, 0x9, 0x5, 0x3, 0xa}, {0x3, 0x0, 0x81, 0x5, 0x7f, 0x2}, {0x3, 0x4, 0x1, 0x802, 0x2, 0xfffffff3}, {0x1cff, 0x1, 0x2, 0x8, 0x3f, 0x5e}, {0x3, 0xffff, 0x4, 0x22, 0x9, 0x59}, {0x3, 0x8, 0xd31, 0x1, 0x5002, 0xbf53}, {0x4, 0x100, 0x5, 0x5, 0x9, 0x9}, {0x1, 0x7, 0x5, 0x0, 0x3}, {0x4, 0x40, 0xfffffffc, 0x9, 0x9aad, 0xdac1}, {0xa1, 0x9, 0x7fffffff, 0x3, 0x800, 0x1}, {0x3, 0x7, 0x1, 0x8, 0x3, 0x6b10165f}, {0xfffffffb, 0xd, 0x6, 0x3, 0x8, 0x56}, {0x3, 0xd2, 0x1, 0x100, 0x0, 0x2}, {0xb, 0x5, 0x200, 0x7fffffff, 0xe, 0xffff}, {0x7f, 0x9, 0x12e842f4, 0x693, 0x5, 0x400}, {0x4, 0x8, 0x0, 0x7, 0x1000, 0x7}, {0xfff, 0x0, 0x3, 0x3, 0x81}, {0x5, 0x9, 0x8, 0x400, 0x401, 0x6}, {0x2, 0x16, 0xdae, 0x4, 0xfffffffc, 0xb9a}, {0x101, 0x8001, 0xff, 0x7, 0x600, 0x5eb}, {0x2, 0x1, 0x6aa8, 0x4000, 0x0, 0x5}, {0x4, 0x6, 0x0, 0x0, 0x2, 0x7}, {0x4008, 0xb4a9, 0x339, 0xfffffff7, 0x8, 0x7}, {0x0, 0x8ef, 0x8000008, 0x7, 0x7, 0x3}, {0x4, 0xe, 0x8, 0x3, 0x3, 0x101}, {0xa, 0x2, 0x4, 0x6, 0x200, 0xfffffffc}, {0x8, 0x498, 0xffffff3a, 0xc000000, 0x4, 0x3633}, {0x1, 0xb7, 0xf, 0xfff, 0x9, 0x3}, {0x6, 0x0, 0x4, 0x6, 0x2000000, 0x4c5}, {0x8, 0x1, 0x6, 0xff, 0xffffffff, 0x3ff}, {0x4b, 0x4, 0x7, 0x1, 0x8, 0x200}, {0x81, 0xfffffffa, 0x9, 0x7892, 0x4}, {0x8, 0x800, 0x1, 0x4, 0x7, 0x101}, {0x6, 0x9, 0x80000001, 0x3, 0x21, 0xf49}, {0x0, 0x7, 0x1, 0x6, 0xba6d, 0x8}, {0x5, 0x4a9, 0x1, 0x3, 0xe, 0x5}, {0x3, 0x0, 0x6, 0x2, 0x5, 0x7}, {0x2, 0x40, 0x9bf, 0x3, 0x80, 0x9}, {0x400, 0x3, 0x84f, 0x0, 0x7, 0x7}, {0x0, 0x4, 0x81, 0x8001, 0x8, 0x74}, {0x1ff, 0x0, 0x10000, 0x7, 0xff, 0x5}, {0x8bf, 0x8, 0x200, 0xfffffffb, 0x5, 0x6}, {0x6, 0xac2, 0x5, 0x2, 0x7ff, 0xfffffff8}, {0x1, 0x5, 0x7fffffff, 0x43, 0xfffff001, 0xfb}, {0xe, 0x8cd6, 0x5, 0x0, 0xa, 0x8}, {0x4, 0x0, 0x1, 0x2, 0x101, 0x9}, {0xd, 0x7, 0x3, 0x4, 0x1, 0x4}, {0x8, 0x1, 0x8, 0x8, 0x1, 0x1}, {0xd1b, 0x7f, 0x6, 0x6, 0x4}, {0x1, 0xffff, 0x80000000, 0x800, 0x0, 0x8}, {0x5, 0x0, 0x101, 0x3, 0x3ff, 0xc0e}, {0xc, 0x9, 0xb, 0x8, 0xe00, 0x80000000}, {0x6c4e, 0xf, 0x1, 0x6, 0x2, 0x1}, {0x6, 0x2, 0x8, 0xad2, 0x6, 0x400}, {0x40, 0x8001, 0x9, 0x9, 0x5, 0xffff}, {0x4, 0x5d24, 0x5, 0xf, 0x772, 0x100}, {0x10, 0x5, 0x0, 0x4, 0x6, 0x1}, {0x7, 0x3, 0x800, 0x250, 0x100, 0x9}, {0x6, 0x7f, 0x100, 0x6, 0x8, 0x4}, {0xb61, 0x7, 0x7fff, 0x2, 0xc3, 0x2}, {0x0, 0x9, 0x8, 0xec30, 0x4, 0x2}, {0x10, 0x2000000, 0xd1bcbe4, 0x10000, 0x0, 0x1}, {0x49f, 0x6, 0x3, 0x9, 0x9, 0xffffff01}, {0x4b0, 0x445a3bbc, 0xf39, 0xc0, 0x3ff, 0x5}, {0x80000000, 0x6, 0x4b4, 0xf3, 0x5, 0x4}, {0x9, 0x0, 0x4, 0x0, 0x5, 0xffffffff}, {0x5388, 0x80000001, 0xfffffff9, 0x1, 0x4f, 0x76d}, {0x8, 0x3, 0x4, 0xe, 0x151, 0x2}, {0x2, 0x7224, 0x8, 0xfffff90e, 0x0, 0x7d6a7490}, {0x2b93, 0x0, 0x8, 0x7, 0x0, 0x7}], [{}, {}, {0x5}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x4}, {}, {0x3}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x1, 0x1}, {}, {}, {0x4}, {0x3}, {0x5}, {0x3}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {}, {0x5}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x8, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x2}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x3}, {0x5}, {0x5}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x3}, {0x4}, {0x5}, {}, {}, {}, {0x5, 0x1cbd97c212d608d4}, {0x7, 0x1}, {0x1, 0x1}, {0x0, 0xffcf6d4e6fee8093}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x2}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}, 0x1, 0x0, 0x0, 0x4004044}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3m13.296407618s ago: executing program 7 (id=2109): openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) openat$drirender128(0xffffffffffffff9c, 0x0, 0x92902, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x114, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) io_uring_setup(0x536d, &(0x7f0000000380)={0x0, 0x2cf6, 0x8, 0x3, 0x56}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="a8090000", @ANYRES16=r1, @ANYBLOB="00042cbd7000fddbdf254a0000000e00a80066697273746e616d650000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00a8007365636f6e646e616d65000008000300020000000f00a8007365636f6e646e616d650000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0xa8}}, 0x4000001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000340)=0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0xc0800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000440), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x20000000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) 3m11.1165698s ago: executing program 7 (id=2113): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000000000000100004001"]) ptrace$setregs(0x1a, r2, 0xc, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) socket$kcm(0x11, 0xa, 0x300) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000300)=0x40) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000380)='cifs.idmap\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000480)={0x0, @aes128, 0x0, @desc3}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@binder={0x73622a85, 0x1009, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/206, 0xce}, @fda={0x66646185, 0x5, 0x1, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 3m1.770296547s ago: executing program 2 (id=2128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x381182, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000001c0)) openat$sndseq(0xffffffffffffff9c, 0x0, 0x80) ioperm(0x8000000000, 0x8001, 0x9) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='highspeed\x00', 0xa) r5 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0xf, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd10080f8785d730001000000000400040000000000005e6c8eb7f63ef67fa41a2a25650f004200000000000000003800affddb0d5511a300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177de7458d0000000000000000000000000000000000004000", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000]}}) r7 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000616268f10004000074db38717a737475767778797a30313233343560"], 0x29, r7) add_key$user(&(0x7f00000001c0), 0x0, &(0x7f0000000240)='P', 0x1, r7) keyctl$read(0xb, r7, &(0x7f0000002e40)=""/72, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x480) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x14, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x100000, 0xfff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m59.746306253s ago: executing program 2 (id=2129): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="10001700000000001c0037800b0001006970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'hsr0\x00', 0x7101}) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x801, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0) r9 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0xb4, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x67d}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x2}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xffff}, {0x8}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x60000}, 0x804) keyctl$search(0xa, r9, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000240)='syz0\x00', r9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000300)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x900, 0x90, [0x5]}}) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000040), 0x4) syz_open_dev$sndmidi(0x0, 0x4, 0x640a00) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) 2m57.83572829s ago: executing program 2 (id=2132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r2 = socket(0x200000000000011, 0x2, 0x9b) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f0000000980)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_inet_SIOCDARP(r2, 0x8953, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) r5 = io_uring_setup(0xde1, &(0x7f0000000280)={0x0, 0x2, 0x802, 0x0, 0x15}) io_uring_register$IORING_REGISTER_FILES2(r5, 0x8, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x30, 0x0, 0x1, 0x0, 0x20, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5c7}]}]}, 0x30}}, 0x8000) 2m53.331103835s ago: executing program 37 (id=2113): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000000000000100004001"]) ptrace$setregs(0x1a, r2, 0xc, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x0) socket$kcm(0x11, 0xa, 0x300) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000300)=0x40) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000380)='cifs.idmap\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000480)={0x0, @aes128, 0x0, @desc3}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000880)={@flat=@binder={0x73622a85, 0x1009, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000a40)=""/206, 0xce}, @fda={0x66646185, 0x5, 0x1, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 2m52.131867611s ago: executing program 2 (id=2142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r5, @ANYBLOB="10001700000000001c0037800b0001006970768a616e08000c0002"], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'hsr0\x00', 0x7101}) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x801, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0) r9 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)={0xb4, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x67d}, {0x6, 0x16, 0x2}, {0x5}, {0x6, 0x11, 0x2}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xffff}, {0x8}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x60000}, 0x804) keyctl$search(0xa, r9, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000240)='syz0\x00', r9) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000300)={'bridge_slave_1\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x37, 0x900, 0x90, [0x5]}}) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000040), 0x4) syz_open_dev$sndmidi(&(0x7f0000000380), 0x4, 0x640a00) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) 2m49.537709459s ago: executing program 2 (id=2148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r3, 0x0, 0x401}, 0x18) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x9e966e64318092aa, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000800)=0x8000000) setreuid(0xee01, 0xee01) r5 = getpgrp(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r7 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r6, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) io_uring_enter(r7, 0x27e2, 0x0, 0x0, 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000100)={0x2, r5}) socket(0x11, 0x800000003, 0x0) 2m48.169524055s ago: executing program 2 (id=2150): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2000000000000c1, 0x129000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1fffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x800, 0x0) fstatfs(r0, &(0x7f00000006c0)=""/189) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/sctp\x00') writev(r2, &(0x7f0000000480)=[{&(0x7f0000000080)='4', 0x1}], 0x1) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x199}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b34, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sync() sync() 2m31.833780495s ago: executing program 38 (id=2150): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x2000000000000c1, 0x129000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1fffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/custom0\x00', 0x800, 0x0) fstatfs(r0, &(0x7f00000006c0)=""/189) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/sctp\x00') writev(r2, &(0x7f0000000480)=[{&(0x7f0000000080)='4', 0x1}], 0x1) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x17) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x199}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) bind$can_j1939(r4, 0x0, 0x0) sendmsg$can_j1939(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8b34, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sync() sync() 9.289580537s ago: executing program 4 (id=2636): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$can_raw(0x1d, 0x3, 0x1) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="b8d1f5e2a35a5f3511772cc7bf", 0xd}], 0x1, 0x401, 0xd) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rxrpc_local\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) read$FUSE(r7, &(0x7f0000001f80)={0x2020}, 0x2020) r8 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x6, 0x8080) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r8, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, '\x00', @raw_data=[0xcf77, 0x7, 0xdd59, 0x400, 0x7, 0x33a, 0x4c28, 0xfffff89f, 0x10008, 0x9, 0xc, 0x3, 0x7fffffff, 0x3, 0x10be, 0x80, 0x3, 0xa9, 0x7, 0xfffffffd, 0xffffffff, 0xfffff060, 0x1, 0x100, 0x5, 0x5, 0x2, 0x8, 0xffff, 0xfffffffa, 0x70000000, 0x240000]}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', r7}, 0x18) write$P9_RREADLINK(r7, &(0x7f0000000180)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$TIOCSETD(r6, 0x5423, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/176, 0xb0}], 0x1}, 0x6e}], 0x1, 0x2, 0x0) 7.275071062s ago: executing program 1 (id=2641): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="11000000040000000400000002"], 0x48) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000140)}, 0x10) 7.136299078s ago: executing program 1 (id=2643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x200000000000011, 0x2, 0x9b) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r4, &(0x7f0000000980)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_inet_SIOCDARP(r4, 0x8953, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) r8 = io_uring_setup(0xde1, &(0x7f0000000280)={0x0, 0x2, 0x802, 0x0, 0x15}) io_uring_register$IORING_REGISTER_FILES2(r8, 0x8, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x400c814) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x30, r7, 0x1, 0x0, 0x20, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5c7}]}]}, 0x30}}, 0x8000) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) 5.900493245s ago: executing program 4 (id=2647): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x410, 0x3d8, 0x3d8, 0x410, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x20, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x8, 0xb3c738a26429eda, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x1, [0xc1, 0x3ff, 0x1000, 0x9, 0x9, 0x6, 0x7ff, 0x8, 0x945, 0x1, 0x6, 0x9, 0x632, 0x8, 0x3], 0x5}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x7, 0xaa, {0xb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 5.705780777s ago: executing program 4 (id=2651): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904340102d469e7000905", @ANYRES32], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.481020154s ago: executing program 9 (id=2655): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000071c0)={0x24, 0x40, 0x9, 0xffffffff, 0x25dfdbfd, {0x2}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x131, 0x0, 0x1, [@nested={0x4, 0xe5}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 5.329934879s ago: executing program 9 (id=2656): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f00000019c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0xfffffffffffffd5d, &(0x7f00000009c0)="0000ffffff8d00f03f0100000001", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.862514621s ago: executing program 4 (id=2657): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x24008000) 4.571068957s ago: executing program 4 (id=2658): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$can_raw(0x1d, 0x3, 0x1) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="b8d1f5e2a35a5f3511772cc7bf", 0xd}], 0x1, 0x401, 0xd) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rxrpc_local\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) read$FUSE(r7, &(0x7f0000001f80)={0x2020}, 0x2020) r8 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x6, 0x8080) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r8, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, '\x00', @raw_data=[0xcf77, 0x7, 0xdd59, 0x400, 0x7, 0x33a, 0x4c28, 0xfffff89f, 0x10008, 0x9, 0xc, 0x3, 0x7fffffff, 0x3, 0x10be, 0x80, 0x3, 0xa9, 0x7, 0xfffffffd, 0xffffffff, 0xfffff060, 0x1, 0x100, 0x5, 0x5, 0x2, 0x8, 0xffff, 0xfffffffa, 0x70000000, 0x240000]}) unshare(0x6a040000) write$P9_RREADLINK(r7, &(0x7f0000000180)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$TIOCSETD(r6, 0x5423, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/176, 0xb0}], 0x1}, 0x6e}], 0x1, 0x2, 0x0) 3.490402205s ago: executing program 9 (id=2659): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00') preadv(r0, &(0x7f0000000100), 0x0, 0x3c, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000200)={0x0, 0x80000000, 0x2, {0x6, @win={{0x5043, 0x9c, 0x6, 0x1}, 0x2, 0x3, 0x0, 0x6, 0x0, 0x8}}, 0x65c}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) 3.489714507s ago: executing program 0 (id=2660): r0 = syz_open_dev$video4linux(&(0x7f0000000240), 0x145, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x9, 0x300c, 0x8, 0x4, 0x8, 0x1, 0xe7}}) 3.350633635s ago: executing program 8 (id=2662): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0xa}, @TCA_CT_PARMS={0x18, 0x1, {0xfdb}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000000) 2.748944665s ago: executing program 0 (id=2663): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, &(0x7f00000005c0)) 2.709995746s ago: executing program 1 (id=2664): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, 0x0) 2.67553036s ago: executing program 8 (id=2665): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, "00186371ae9b1c03"}}}}}, 0x0) 2.597549182s ago: executing program 0 (id=2666): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@local}, {@in6=@remote, 0x0, 0x33}, @in=@local, {0x0, 0x6}, {}, {0x4}, 0x0, 0x0, 0x2, 0x4}, [@algo_auth_trunc={0x5b, 0x14, {{'cmac(aes)\x00'}, 0x78, 0x0, "3509fe8fd57fd44aa5074c50bc700e"}}]}, 0x14c}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x52}, &(0x7f00000001c0)=0x9c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010001e0000000000000000000000000a40000000060a010400000000000000000206000000000000000001800b00010064796e7365740000180002000900010073797a30000000000800044000000000140000001100010000000000000000040000000a"], 0x68}}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r3], 0x44}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) socket(0x28, 0x3, 0xdaef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x44) fcntl$setlease(r6, 0x400, 0x1) creat(&(0x7f0000000200)='./file1\x00', 0x4) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r7, &(0x7f0000001440)=""/126, 0x7e, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 2.542639831s ago: executing program 1 (id=2667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r8, 0x1, 0x0, 0x10000, {0x5}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 2.490619212s ago: executing program 9 (id=2668): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$netlink(r0, 0x10e, 0x6, 0x0, &(0x7f00000002c0)=0xfffffffffffffefb) 2.337402215s ago: executing program 8 (id=2669): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socket$isdn(0x22, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) mount$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f61636c2c00847fda14df3dd509ec67af59c80628616cf850a9eef778"]) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ae, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0xc0045003, &(0x7f0000001100)) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x14, 0x0, 0x511}, 0x14}}, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0205647, &(0x7f00000000c0)={0x0, 0x0, "bf5dff0f5a2572ce1ced49e8981e103268fadc1433ae00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x40000000]}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x7, 0x7], &(0x7f0000000500)=[0x2], 0x0, 0x2}}, 0x3c) 1.876806963s ago: executing program 9 (id=2670): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f00000001c0)=@v2={0x3, 0x2, 0xc}, 0x9, 0x0) 903.595506ms ago: executing program 9 (id=2671): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/75, 0x8e, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r5}, 0x0, 0x0, 0x3}, 0x20) eventfd(0x100) r6 = syz_open_dev$vcsu(&(0x7f0000000180), 0x29, 0x0) read$alg(r6, &(0x7f00000001c0)=""/68, 0x44) unshare(0x20060000) 773.429213ms ago: executing program 0 (id=2672): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f00000000c0)) 772.600781ms ago: executing program 8 (id=2673): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x460, 0x210, 0x98, 0x178, 0x300, 0x98, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'bond_slave_0\x00', 'veth0_to_bond\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'pim6reg0\x00', 'dummy0\x00'}, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ah={{0x30}}]}, @TTL={0x28}}, {{@ip={@remote, @local, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_hsr\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) 733.314877ms ago: executing program 1 (id=2674): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000200)={0x0, 'vxcan1\x00', {0x3}, 0x4506}) 585.440332ms ago: executing program 4 (id=2675): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='statm\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/56, 0x38}], 0x1, 0x3c, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000200)={0x0, 0x80000000, 0x2, {0x6, @win={{0x5043, 0x9c, 0x6, 0x1}, 0x2, 0x3, 0x0, 0x6, 0x0, 0x8}}, 0x65c}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x0) 421.415322ms ago: executing program 8 (id=2676): r0 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000fc0)=[{}, {}]}) 254.375664ms ago: executing program 0 (id=2677): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r0, 0x0, &(0x7f0000003b40)) 102.677481ms ago: executing program 0 (id=2678): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0xa888, 0x31}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000000)="b8b28225ea772f0daee8c7c98100e05188fb", 0x12}], 0x1}, 0x0) 41.464047ms ago: executing program 8 (id=2679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x200000000000011, 0x2, 0x9b) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r4, &(0x7f0000000980)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$sock_inet_SIOCDARP(r4, 0x8953, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) r6 = io_uring_setup(0xde1, &(0x7f0000000280)={0x0, 0x2, 0x802, 0x0, 0x15}) io_uring_register$IORING_REGISTER_FILES2(r6, 0x8, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x400c814) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) 0s ago: executing program 1 (id=2680): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$can_raw(0x1d, 0x3, 0x1) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="b8d1f5e2a35a5f3511772cc7bf", 0xd}], 0x1, 0x401, 0xd) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rxrpc_local\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) read$FUSE(r7, &(0x7f0000001f80)={0x2020}, 0x2020) r8 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x6, 0x8080) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r8, 0xc0905664, &(0x7f0000000200)={0x0, 0x0, '\x00', @raw_data=[0xcf77, 0x7, 0xdd59, 0x400, 0x7, 0x33a, 0x4c28, 0xfffff89f, 0x10008, 0x9, 0xc, 0x3, 0x7fffffff, 0x3, 0x10be, 0x80, 0x3, 0xa9, 0x7, 0xfffffffd, 0xffffffff, 0xfffff060, 0x1, 0x100, 0x5, 0x5, 0x2, 0x8, 0xffff, 0xfffffffa, 0x70000000, 0x240000]}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', r7}, 0x18) write$P9_RREADLINK(r7, &(0x7f0000000180)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) ioctl$TIOCSETD(r6, 0x5423, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/176, 0xb0}], 0x1}, 0x6e}], 0x1, 0x2, 0x0) kernel console output (not intermixed with test programs): :1630): avc: denied { write } for pid=15834 comm="syz.8.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1162.877280][ T29] audit: type=1400 audit(2000000543.914:1631): avc: denied { read } for pid=15834 comm="syz.8.2122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1162.922252][ T5056] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1163.131150][ T5056] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1163.261335][ T5056] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1163.276963][ T29] audit: type=1400 audit(2000000544.615:1632): avc: denied { setopt } for pid=15841 comm="syz.2.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1163.329132][ T29] audit: type=1400 audit(2000000544.662:1633): avc: denied { bind } for pid=15841 comm="syz.2.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1164.867518][ T29] audit: type=1400 audit(2000000546.093:1634): avc: denied { read } for pid=15855 comm="syz.9.2127" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1164.993981][ T29] audit: type=1400 audit(2000000546.102:1635): avc: denied { open } for pid=15855 comm="syz.9.2127" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1165.734909][T12983] net_ratelimit: 7 callbacks suppressed [ 1165.734929][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1165.783093][ T29] audit: type=1400 audit(2000000546.346:1636): avc: denied { name_bind } for pid=15856 comm="syz.2.2128" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1165.806981][ T29] audit: type=1400 audit(2000000546.346:1637): avc: denied { node_bind } for pid=15856 comm="syz.2.2128" saddr=::1 src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1165.902130][T15863] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2127'. [ 1165.911068][T15863] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2127'. [ 1165.920130][T15863] netlink: 'syz.9.2127': attribute type 11 has an invalid length. [ 1165.928041][T15863] netlink: 'syz.9.2127': attribute type 13 has an invalid length. [ 1166.033071][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1166.444875][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1166.661924][T12973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1166.864761][T15871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2129'. [ 1166.874661][T15871] netlink: 'syz.2.2129': attribute type 1 has an invalid length. [ 1166.882388][T15871] netlink: 'syz.2.2129': attribute type 2 has an invalid length. [ 1167.250488][T15872] ubi1: attaching mtd0 [ 1167.254585][T15872] ubi1 error: ubi_attach_mtd_dev: bad VID header (5) or data offsets (69) [ 1168.291349][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1168.291363][ T29] audit: type=1400 audit(2000000548.871:1639): avc: denied { connect } for pid=15868 comm="syz.9.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1168.323722][T15878] netdevsim netdevsim9: Direct firmware load for ./file0 failed with error -2 [ 1168.334192][T15878] netdevsim netdevsim9: Falling back to sysfs fallback for: ./file0 [ 1168.339650][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1168.509977][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1168.520132][ T29] audit: type=1400 audit(2000000548.955:1640): avc: denied { read } for pid=15868 comm="syz.9.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1168.615388][T15883] IPVS: Error joining to the multicast group [ 1168.752677][T12973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1168.843818][ T29] audit: type=1400 audit(2000000548.965:1641): avc: denied { shutdown } for pid=15868 comm="syz.9.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1169.012144][T12973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1169.698554][T12973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1169.829100][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1169.921373][ T29] audit: type=1400 audit(2000000550.770:1642): avc: denied { ioctl } for pid=15901 comm="syz.4.2136" path="socket:[40069]" dev="sockfs" ino=40069 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1170.804981][ T29] audit: type=1400 audit(2000000550.770:1643): avc: denied { create } for pid=15901 comm="syz.4.2136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1171.113440][ T29] audit: type=1400 audit(2000000551.790:1644): avc: denied { name_bind } for pid=15907 comm="syz.8.2137" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1172.124432][T12985] net_ratelimit: 3 callbacks suppressed [ 1172.124446][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1172.141808][ T29] audit: type=1400 audit(2000000551.967:1645): avc: denied { bind } for pid=15905 comm="syz.9.2138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1172.161395][ T29] audit: type=1400 audit(2000000551.967:1646): avc: denied { name_bind } for pid=15905 comm="syz.9.2138" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 1172.270074][T15915] VFS: unable to find oldfs superblock on device nullb0 [ 1172.307972][ T29] audit: type=1400 audit(2000000551.967:1647): avc: denied { node_bind } for pid=15905 comm="syz.9.2138" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 1172.329294][ T29] audit: type=1400 audit(2000000551.967:1648): avc: denied { connect } for pid=15905 comm="syz.9.2138" lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1172.614025][T12973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1172.821965][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1172.946901][T12973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1173.062457][T15919] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2141'. [ 1173.363130][T15923] erofs (device nullb0): cannot find valid erofs superblock [ 1174.071415][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1174.077851][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1174.336810][T12973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1174.642190][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1175.233543][T15937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2142'. [ 1175.599273][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1175.599309][ T29] audit: type=1400 audit(2000000556.149:1651): avc: denied { map } for pid=15932 comm="syz.4.2145" path="socket:[39877]" dev="sockfs" ino=39877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1175.744457][T15943] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2145'. [ 1175.766052][T15943] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2145'. [ 1176.205053][T15933] IPVS: Error joining to the multicast group [ 1176.252508][T15937] netlink: 'syz.2.2142': attribute type 1 has an invalid length. [ 1176.260179][ T29] audit: type=1400 audit(2000000556.149:1652): avc: denied { accept } for pid=15932 comm="syz.4.2145" path="socket:[39877]" dev="sockfs" ino=39877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1176.284418][T15937] netlink: 'syz.2.2142': attribute type 2 has an invalid length. [ 1176.324511][ T5056] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.654273][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1176.930148][ T29] audit: type=1400 audit(2000000557.355:1653): avc: denied { getopt } for pid=15946 comm="syz.4.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1177.869041][ T29] audit: type=1400 audit(2000000558.253:1654): avc: denied { read } for pid=15956 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1177.869523][T12984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1177.907386][ T29] audit: type=1400 audit(2000000558.253:1655): avc: denied { open } for pid=15956 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1177.936580][ T5821] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1177.966993][T10724] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1177.976546][T10724] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1177.985400][T10724] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1178.033538][T10724] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1178.042248][T10724] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1178.082017][ T29] audit: type=1400 audit(2000000558.440:1656): avc: denied { mounton } for pid=15956 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1179.090428][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1179.254234][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1179.466478][T15956] lo speed is unknown, defaulting to 1000 [ 1179.500481][T15956] »»»»»» speed is unknown, defaulting to 1000 [ 1179.546673][T15973] infiniband syz1: set active [ 1180.192147][T12984] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1180.205577][T12984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1180.240449][T15187] Bluetooth: hci6: command tx timeout [ 1180.252062][ T29] audit: type=1400 audit(2000000559.937:1657): avc: denied { read } for pid=15967 comm="syz.9.2151" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1180.287971][ T29] audit: type=1400 audit(2000000559.946:1658): avc: denied { open } for pid=15967 comm="syz.9.2151" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1180.312958][ T29] audit: type=1400 audit(2000000559.946:1659): avc: denied { ioctl } for pid=15967 comm="syz.9.2151" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1180.425089][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1180.475465][T15979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2153'. [ 1181.250962][T15985] netlink: 'syz.9.2155': attribute type 10 has an invalid length. [ 1181.259276][T15985] netlink: 55 bytes leftover after parsing attributes in process `syz.9.2155'. [ 1182.006645][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1182.735177][ T29] audit: type=1400 audit(2000000562.303:1660): avc: denied { read write } for pid=15981 comm="syz.9.2155" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1182.758699][ C0] vkms_vblank_simulate: vblank timer overrun [ 1182.766252][ T29] audit: type=1400 audit(2000000562.303:1661): avc: denied { open } for pid=15981 comm="syz.9.2155" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1182.790247][ T29] audit: type=1400 audit(2000000562.453:1662): avc: denied { setopt } for pid=15981 comm="syz.9.2155" lport=36852 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1182.811751][ C0] vkms_vblank_simulate: vblank timer overrun [ 1182.818770][T15187] Bluetooth: hci6: command tx timeout [ 1183.433068][ T29] audit: type=1400 audit(2000000563.342:1663): avc: denied { accept } for pid=15999 comm="syz.8.2157" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1183.710416][T15996] infiniband syz1: set active [ 1183.761222][T12973] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1183.778629][T12973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1183.978285][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1185.124334][ T29] audit: type=1400 audit(2000000564.174:1664): avc: denied { create } for pid=16006 comm="syz.4.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1185.356009][ T29] audit: type=1400 audit(2000000564.174:1665): avc: denied { setopt } for pid=16006 comm="syz.4.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1185.589455][ T29] audit: type=1400 audit(2000000564.174:1666): avc: denied { connect } for pid=16006 comm="syz.4.2158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1185.632200][T12984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1185.734323][T15187] Bluetooth: hci6: command tx timeout [ 1185.775452][T15956] chnl_net:caif_netlink_parms(): no params data found [ 1185.789884][ T29] audit: type=1400 audit(2000000565.344:1667): avc: denied { create } for pid=16008 comm="syz.8.2159" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1186.424877][T16020] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2160'. [ 1186.451213][T16023] netlink: 'syz.8.2162': attribute type 10 has an invalid length. [ 1186.460069][T16023] netlink: 55 bytes leftover after parsing attributes in process `syz.8.2162'. [ 1187.022145][T16031] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1187.036398][T16031] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1187.924452][T15187] Bluetooth: hci6: command tx timeout [ 1188.547281][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1188.921159][T16032] bridge0: port 3(erspan0) entered blocking state [ 1188.928088][T16032] bridge0: port 3(erspan0) entered disabled state [ 1188.934802][T16032] erspan0: entered allmulticast mode [ 1188.941817][T16032] erspan0: entered promiscuous mode [ 1188.949526][T16032] bridge0: port 3(erspan0) entered blocking state [ 1188.956046][T16032] bridge0: port 3(erspan0) entered forwarding state [ 1189.028022][ T5056] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1189.480429][T16046] overlayfs: failed to resolve './file1': -2 [ 1190.387217][ T29] audit: type=1400 audit(2000000569.104:1668): avc: denied { mounton } for pid=16039 comm="syz.8.2164" path="/230/file0" dev="tmpfs" ino=1258 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1190.665588][T15956] bridge0: port 1(bridge_slave_0) entered blocking state [ 1191.278390][T15956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.301214][T15956] bridge_slave_0: entered allmulticast mode [ 1191.384253][T15956] bridge_slave_0: entered promiscuous mode [ 1191.397023][T15956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1191.407709][T15956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.415525][T15956] bridge_slave_1: entered allmulticast mode [ 1191.425678][T15956] bridge_slave_1: entered promiscuous mode [ 1191.461363][ T29] audit: type=1326 audit(2000000570.002:1669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe7d85d29 code=0x7ffc0000 [ 1191.489218][ T29] audit: type=1326 audit(2000000570.002:1670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe7d85d29 code=0x7ffc0000 [ 1191.538242][ T29] audit: type=1326 audit(2000000570.002:1671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f8fe7d85d29 code=0x7ffc0000 [ 1191.561698][ C0] vkms_vblank_simulate: vblank timer overrun [ 1191.622902][ T29] audit: type=1326 audit(2000000570.002:1672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe7d85d29 code=0x7ffc0000 [ 1191.660104][ T29] audit: type=1326 audit(2000000570.002:1673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe7d85d29 code=0x7ffc0000 [ 1191.694820][T16059] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2167'. [ 1191.708369][ T29] audit: type=1326 audit(2000000570.002:1674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f8fe7d85d29 code=0x7ffc0000 [ 1191.739508][ T29] audit: type=1326 audit(2000000570.002:1675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe7d85d29 code=0x7ffc0000 [ 1191.768092][ T29] audit: type=1326 audit(2000000570.002:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe7d85d29 code=0x7ffc0000 [ 1191.791573][ C0] vkms_vblank_simulate: vblank timer overrun [ 1191.806165][T15956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1191.834677][ T29] audit: type=1326 audit(2000000570.002:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16043 comm="syz.4.2163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f8fe7d85d29 code=0x7ffc0000 [ 1192.279427][T15956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.308496][T15956] team0: Port device team_slave_0 added [ 1192.341612][T15956] team0: Port device team_slave_1 added [ 1192.377664][T15956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1192.394808][T15956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1192.420708][ C0] vkms_vblank_simulate: vblank timer overrun [ 1192.428783][T15956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1192.441708][T15956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1192.449214][T15956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1192.475112][ C0] vkms_vblank_simulate: vblank timer overrun [ 1192.481695][T15956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1192.582298][T15956] hsr_slave_0: entered promiscuous mode [ 1192.597442][T15956] hsr_slave_1: entered promiscuous mode [ 1192.617955][T15956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1192.630541][T15956] Cannot create hsr debugfs directory [ 1193.008125][ T5056] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1197.569991][T12973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1197.642723][T10724] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1197.655655][T10724] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1197.670432][T10724] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1197.730248][T10724] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1197.738748][T10724] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1197.745966][T10724] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1198.657010][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 1198.657029][ T29] audit: type=1400 audit(2000000577.691:1748): avc: denied { write } for pid=16078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1705 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1198.710642][ T29] audit: type=1400 audit(2000000577.691:1749): avc: denied { add_name } for pid=16078 comm="dhcpcd-run-hook" name="resolv.conf.lapb10.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1198.740875][ T29] audit: type=1400 audit(2000000577.691:1750): avc: denied { create } for pid=16078 comm="dhcpcd-run-hook" name="resolv.conf.lapb10.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1198.923803][ T29] audit: type=1400 audit(2000000577.691:1751): avc: denied { write } for pid=16078 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.lapb10.link" dev="tmpfs" ino=7605 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1198.951240][ T29] audit: type=1400 audit(2000000577.691:1752): avc: denied { append } for pid=16078 comm="dhcpcd-run-hook" name="resolv.conf.lapb10.link" dev="tmpfs" ino=7605 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1198.979476][ T29] audit: type=1400 audit(2000000577.812:1753): avc: denied { write } for pid=16112 comm="syz.8.2176" name="sg0" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:gpg_agent_exec_t:s0" [ 1199.539550][T16124] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2177'. [ 1200.036255][ T29] audit: type=1400 audit(2000000578.261:1754): avc: denied { mounton } for pid=16112 comm="syz.8.2176" path="/234/file0" dev="tmpfs" ino=1283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1200.047519][T10724] Bluetooth: hci3: command tx timeout [ 1200.059463][ C0] vkms_vblank_simulate: vblank timer overrun [ 1200.068802][ T29] audit: type=1400 audit(2000000578.261:1755): avc: denied { mount } for pid=16112 comm="syz.8.2176" name="/" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1200.433875][ T29] audit: type=1400 audit(2000000579.262:1756): avc: denied { remove_name } for pid=16120 comm="rm" name="resolv.conf.lapb10.link" dev="tmpfs" ino=7605 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1200.458493][ T29] audit: type=1400 audit(2000000579.262:1757): avc: denied { unlink } for pid=16120 comm="rm" name="resolv.conf.lapb10.link" dev="tmpfs" ino=7605 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1200.600816][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1201.009413][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1201.866739][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1201.885256][T16104] lo speed is unknown, defaulting to 1000 [ 1201.894089][T16104] »»»»»» speed is unknown, defaulting to 1000 [ 1202.110862][T12973] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1202.634659][T10724] Bluetooth: hci3: command tx timeout [ 1202.999932][T12983] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.113258][T16163] erofs (device nullb0): cannot find valid erofs superblock [ 1203.130583][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1203.186494][T16154] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2183'. [ 1203.317159][T16158] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2183'. [ 1205.027977][T10724] Bluetooth: hci3: command tx timeout [ 1205.039821][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1205.039835][ T29] audit: type=1400 audit(2000000583.472:1765): avc: denied { write } for pid=16178 comm="syz.9.2187" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1205.954484][ T29] audit: type=1400 audit(2000000584.033:1766): avc: denied { bind } for pid=16188 comm="syz.4.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1206.307056][T12983] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.413494][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1206.559093][T12984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1206.748223][T12983] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1206.953974][T12984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1207.164614][T12983] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.242465][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1207.252261][T10724] Bluetooth: hci3: command tx timeout [ 1207.290850][T16216] /dev/nullb0: Can't lookup blockdev [ 1207.403131][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1207.441613][T12983] erspan0: left allmulticast mode [ 1207.450238][T12983] erspan0: left promiscuous mode [ 1207.460390][T12983] bridge0: port 3(erspan0) entered disabled state [ 1207.483245][T12983] bridge_slave_1: left allmulticast mode [ 1207.493530][T12983] bridge_slave_1: left promiscuous mode [ 1207.503930][T12983] bridge0: port 2(bridge_slave_1) entered disabled state [ 1207.527065][T12983] bridge_slave_0: left allmulticast mode [ 1207.533548][T12983] bridge_slave_0: left promiscuous mode [ 1207.539675][T12983] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.687299][ T5865] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1208.462074][ T5865] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.476651][ T5865] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1208.492763][ T5865] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.683511][ T5865] usb 9-1: config 0 descriptor?? [ 1209.142135][ T29] audit: type=1400 audit(2000000587.522:1767): avc: denied { ioctl } for pid=16220 comm="syz.8.2191" path="socket:[41418]" dev="sockfs" ino=41418 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1209.203123][ T29] audit: type=1400 audit(2000000587.578:1768): avc: denied { write } for pid=16238 comm="syz.9.2194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1209.243035][T16250] warn_alloc: 1 callbacks suppressed [ 1209.248869][T16250] syz.8.2191: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1209.268210][T16250] CPU: 0 UID: 0 PID: 16250 Comm: syz.8.2191 Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 1209.268239][T16250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1209.268262][T16250] Call Trace: [ 1209.268270][T16250] [ 1209.268280][T16250] dump_stack_lvl+0x16c/0x1f0 [ 1209.268322][T16250] warn_alloc+0x24d/0x3a0 [ 1209.268354][T16250] ? __pfx_warn_alloc+0x10/0x10 [ 1209.268374][T16250] ? __pfx_stack_trace_save+0x10/0x10 [ 1209.268417][T16250] ? kasan_save_stack+0x42/0x60 [ 1209.268441][T16250] ? kasan_save_stack+0x33/0x60 [ 1209.268464][T16250] ? kasan_save_track+0x14/0x30 [ 1209.268487][T16250] ? __kasan_kmalloc+0xaa/0xb0 [ 1209.268509][T16250] ? xskq_create+0x52/0x1d0 [ 1209.268531][T16250] ? do_sock_setsockopt+0x222/0x480 [ 1209.268558][T16250] ? __sys_setsockopt+0x1a0/0x230 [ 1209.268588][T16250] ? __x64_sys_setsockopt+0xbd/0x160 [ 1209.268632][T16250] __vmalloc_node_range_noprof+0x10df/0x1530 [ 1209.268669][T16250] ? xskq_create+0xfb/0x1d0 [ 1209.268699][T16250] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1209.268734][T16250] ? xskq_create+0xfb/0x1d0 [ 1209.268759][T16250] vmalloc_user_noprof+0x6b/0x90 [ 1209.268785][T16250] ? xskq_create+0xfb/0x1d0 [ 1209.268807][T16250] xskq_create+0xfb/0x1d0 [ 1209.268831][T16250] xsk_setsockopt+0x757/0xa10 [ 1209.268853][T16250] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1209.268884][T16250] ? selinux_socket_setsockopt+0x6a/0x80 [ 1209.268913][T16250] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1209.268935][T16250] do_sock_setsockopt+0x222/0x480 [ 1209.268960][T16250] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1209.268988][T16250] ? lock_acquire+0x2f/0xb0 [ 1209.269036][T16250] __sys_setsockopt+0x1a0/0x230 [ 1209.269077][T16250] __x64_sys_setsockopt+0xbd/0x160 [ 1209.269110][T16250] ? do_syscall_64+0x91/0x250 [ 1209.269140][T16250] ? lockdep_hardirqs_on+0x7c/0x110 [ 1209.269167][T16250] do_syscall_64+0xcd/0x250 [ 1209.269196][T16250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.269226][T16250] RIP: 0033:0x7f4eb5385d29 [ 1209.269246][T16250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1209.269266][T16250] RSP: 002b:00007f4eb61d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1209.269290][T16250] RAX: ffffffffffffffda RBX: 00007f4eb5576080 RCX: 00007f4eb5385d29 [ 1209.269306][T16250] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 1209.269322][T16250] RBP: 00007f4eb5401b08 R08: 0000000000000020 R09: 0000000000000000 [ 1209.269338][T16250] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1209.269354][T16250] R13: 0000000000000001 R14: 00007f4eb5576080 R15: 00007ffd96e8f8d8 [ 1209.269385][T16250] [ 1209.274342][T16250] Mem-Info: [ 1209.274356][T16250] active_anon:26235 inactive_anon:0 isolated_anon:0 [ 1209.274356][T16250] active_file:20651 inactive_file:39382 isolated_file:0 [ 1209.274356][T16250] unevictable:5727 dirty:434 writeback:0 [ 1209.274356][T16250] slab_reclaimable:7556 slab_unreclaimable:117492 [ 1209.274356][T16250] mapped:45219 shmem:21119 pagetables:962 [ 1209.274356][T16250] sec_pagetables:0 bounce:0 [ 1209.274356][T16250] kernel_misc_reclaimable:0 [ 1209.274356][T16250] free:1236064 free_pcp:3534 free_cma:0 [ 1209.274420][T16250] Node 0 active_anon:104940kB inactive_anon:0kB active_file:82524kB inactive_file:157372kB unevictable:21372kB isolated(anon):0kB isolated(file):0kB mapped:180864kB dirty:1732kB writeback:0kB shmem:82940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13244kB pagetables:3848kB sec_pagetables:0kB all_unreclaimable? no [ 1209.274500][T16250] Node 1 active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:156kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1209.274554][T16250] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1209.274614][T16250] lowmem_reserve[]: 0 2459 2459 0 0 [ 1209.274687][T16250] Node 0 DMA32 free:1030640kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:104940kB inactive_anon:0kB active_file:82524kB inactive_file:157280kB unevictable:21372kB writepending:1728kB present:3129332kB managed:2547144kB mlocked:0kB bounce:0kB free_pcp:2284kB local_pcp:816kB free_cma:0kB [ 1209.274754][T16250] lowmem_reserve[]: 0 0 0 0 0 [ 1209.274819][T16250] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1209.274876][T16250] lowmem_reserve[]: 0 0 0 0 0 [ 1209.274945][T16250] Node 1 Normal free:3898256kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:80kB inactive_file:156kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:11836kB local_pcp:10144kB free_cma:0kB [ 1209.275004][T16250] lowmem_reserve[]: 0 0 0 0 0 [ 1209.275037][T16250] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1209.291406][T16250] Node 0 DMA32: 256*4kB (UME) 460*8kB (UME) 397*16kB (UME) 307*32kB (ME) 148*64kB (ME) 118*128kB (UME) 68*256kB (UME) 42*512kB (UME) 12*1024kB (ME) 8*2048kB (UME) 224*4096kB (M) = 1030544kB [ 1209.291662][T16250] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1209.291796][T16250] Node 1 Normal: 248*4kB (UME) 69*8kB (UME) 41*16kB (UME) 197*32kB (UME) 105*64kB (UME) 29*128kB (UME) 18*256kB (UME) 8*512kB (UME) 4*1024kB (UM) 4*2048kB (UE) 942*4096kB (M) = 3898360kB [ 1209.292017][T16250] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1209.292037][T16250] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 1209.292055][T16250] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1209.292094][T16250] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1209.292114][T16250] 86110 total pagecache pages [ 1209.292123][T16250] 0 pages in swap cache [ 1209.292132][T16250] Free swap = 124312kB [ 1209.292141][T16250] Total swap = 124996kB [ 1209.292150][T16250] 2097051 pages RAM [ 1209.292158][T16250] 0 pages HighMem/MovableOnly [ 1209.292166][T16250] 428607 pages reserved [ 1209.292174][T16250] 0 pages cma reserved [ 1209.293548][T12983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1209.319952][T12983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1209.321747][T12983] bond0 (unregistering): Released all slaves [ 1209.335494][T16104] chnl_net:caif_netlink_parms(): no params data found [ 1209.953094][ T29] audit: type=1400 audit(2000000588.270:1769): avc: denied { create } for pid=16220 comm="syz.8.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1210.121011][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1210.209194][ T29] audit: type=1400 audit(2000000588.270:1770): avc: denied { write } for pid=16220 comm="syz.8.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1210.209237][ T29] audit: type=1400 audit(2000000588.270:1771): avc: denied { nlmsg_read } for pid=16220 comm="syz.8.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1210.209270][ T29] audit: type=1400 audit(2000000588.280:1772): avc: denied { write } for pid=16220 comm="syz.8.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1210.314881][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1210.342801][T12983] tipc: Left network mode [ 1210.342921][T15956] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1210.432252][T15956] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1210.448098][T15956] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1210.525089][T15956] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1210.526016][T12983] IPVS: stopping backup sync thread 13259 ... [ 1210.561373][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1211.310153][T16104] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.310208][T16104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.310352][T16104] bridge_slave_0: entered allmulticast mode [ 1211.311276][T16104] bridge_slave_0: entered promiscuous mode [ 1211.312825][T16104] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.312909][T16104] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.313034][T16104] bridge_slave_1: entered allmulticast mode [ 1211.313981][T16104] bridge_slave_1: entered promiscuous mode [ 1211.478736][T16104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.484428][T16104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1211.880455][T16104] team0: Port device team_slave_0 added [ 1211.900139][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1211.976298][T16276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1211.976517][T16276] IPv6: NLM_F_CREATE should be set when creating new route [ 1211.976567][T16276] IPv6: NLM_F_CREATE should be set when creating new route [ 1212.868454][T12984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1213.260049][T16104] team0: Port device team_slave_1 added [ 1213.607210][T16276] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1213.694219][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1213.806119][ T5865] usbhid 9-1:0.0: can't add hid device: -71 [ 1213.827667][ T5865] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1213.877869][ T5865] usb 9-1: USB disconnect, device number 6 [ 1213.992009][T15956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.437362][ T29] audit: type=1400 audit(2000000592.451:1773): avc: denied { getopt } for pid=16296 comm="syz.9.2198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 1214.953788][T16297] pim6reg: entered allmulticast mode [ 1214.959975][T16104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1214.981533][T16104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1215.014105][T16104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1215.044387][T16104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1215.059244][T16104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1215.094853][T16104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.191669][T12969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1215.261174][T16303] pim6reg: left allmulticast mode [ 1215.521673][T16295] delete_channel: no stack [ 1215.762023][ T5865] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1216.385871][T16104] hsr_slave_0: entered promiscuous mode [ 1216.392805][ T5865] usb 10-1: Using ep0 maxpacket: 32 [ 1216.402707][ T5865] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.402940][T16104] hsr_slave_1: entered promiscuous mode [ 1216.425830][ T5865] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1216.435044][ T5865] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1216.435051][T16104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1216.435071][ T5865] usb 10-1: Product: syz [ 1216.462969][ T5865] usb 10-1: Manufacturer: syz [ 1216.468077][ T5865] usb 10-1: SerialNumber: syz [ 1216.473793][T16104] Cannot create hsr debugfs directory [ 1216.475234][ T5865] usb 10-1: config 0 descriptor?? [ 1216.712234][T12983] hsr_slave_0: left promiscuous mode [ 1216.741688][T12983] hsr_slave_1: left promiscuous mode [ 1216.869692][T12983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1216.976664][T12983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1217.065130][T12983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1217.087714][T12983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1217.149214][T12983] veth0_macvtap: left promiscuous mode [ 1217.296248][T15754] usb 10-1: USB disconnect, device number 3 [ 1218.506925][T16361] erofs (device nullb0): cannot find valid erofs superblock [ 1218.884459][ T29] audit: type=1400 audit(2000000596.623:1774): avc: denied { write } for pid=16372 comm="syz.9.2208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1219.663527][T12983] team0 (unregistering): Port device team_slave_1 removed [ 1220.120043][T16381] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1220.174564][ T29] audit: type=1400 audit(2000000597.624:1775): avc: denied { read } for pid=16375 comm="syz.9.2209" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1220.492197][ T29] audit: type=1400 audit(2000000597.624:1776): avc: denied { open } for pid=16375 comm="syz.9.2209" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1220.546208][T12983] team0 (unregistering): Port device team_slave_0 removed [ 1221.108097][ T29] audit: type=1400 audit(2000000598.700:1777): avc: denied { ioctl } for pid=16390 comm="syz.8.2212" path="/dev/vhost-net" dev="devtmpfs" ino=1274 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1221.221920][ T29] audit: type=1400 audit(2000000598.812:1778): avc: denied { listen } for pid=16390 comm="syz.8.2212" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1221.895160][T16398] fuse: Unknown parameter 'fd0x000000000000000a' [ 1222.371580][ T29] audit: type=1400 audit(2000000599.467:1779): avc: denied { ioctl } for pid=16393 comm="syz.9.2213" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1224.549462][T15956] 8021q: adding VLAN 0 to HW filter on device team0 [ 1224.581087][T15956] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1224.586154][T10302] »»»»»» speed is unknown, defaulting to 1000 [ 1224.604860][T15956] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1224.609010][T10302] infiniband syz2: ib_query_port failed (-19) [ 1224.656072][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1224.837945][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.845090][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1224.878078][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.885176][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1225.455029][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1225.725837][ T5866] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1225.735344][T12969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1226.174966][T16431] netlink: 'syz.4.2219': attribute type 1 has an invalid length. [ 1226.872248][ T5866] usb 10-1: config 162 has an invalid interface number: 63 but max is 1 [ 1226.879109][ T6882] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1226.889112][ T5866] usb 10-1: config 162 has an invalid interface number: 172 but max is 1 [ 1227.359513][ T5866] usb 10-1: config 162 has no interface number 0 [ 1227.366219][ T5866] usb 10-1: config 162 has no interface number 1 [ 1227.372988][ T5866] usb 10-1: config 162 interface 63 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1227.386306][ T5866] usb 10-1: config 162 interface 172 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1227.397530][ T5866] usb 10-1: config 162 interface 172 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1227.409004][ T5866] usb 10-1: config 162 interface 172 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1227.421153][ T5866] usb 10-1: config 162 interface 172 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 1227.432747][ T5866] usb 10-1: config 162 interface 172 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1227.446325][ T5866] usb 10-1: config 162 interface 63 has no altsetting 0 [ 1227.453446][ T5866] usb 10-1: config 162 interface 172 has no altsetting 0 [ 1227.614210][ T5866] usb 10-1: New USB device found, idVendor=0557, idProduct=2008, bcdDevice=cf.0b [ 1227.637732][ T5866] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.649242][ T5866] usb 10-1: Product: syz [ 1227.653821][ T5866] usb 10-1: Manufacturer: syz [ 1227.658521][ T5866] usb 10-1: SerialNumber: syz [ 1227.792566][T16441] IPVS: Error joining to the multicast group [ 1227.821976][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1227.880716][T12983] IPVS: stop unused estimator thread 0... [ 1227.884316][T15956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1227.940200][ T5866] pl2303 10-1:162.63: required endpoints missing [ 1227.978186][ T5866] pl2303 10-1:162.172: required interrupt-in endpoint missing [ 1228.006265][ T5866] usb 10-1: USB disconnect, device number 4 [ 1228.195720][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1228.346662][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1228.531799][T15956] veth0_vlan: entered promiscuous mode [ 1228.556878][T15956] veth1_vlan: entered promiscuous mode [ 1228.657285][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1228.778709][T15956] veth0_macvtap: entered promiscuous mode [ 1229.394356][ T29] audit: type=1400 audit(2000000606.454:1780): avc: denied { mount } for pid=16474 comm="syz.9.2226" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1229.511912][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1229.535386][T15956] veth1_macvtap: entered promiscuous mode [ 1229.631934][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1229.879055][T16104] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1230.741966][T16104] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1230.771757][ T29] audit: type=1400 audit(2000000607.698:1781): avc: denied { ioctl } for pid=16484 comm="syz.9.2228" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64be scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1230.840587][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1230.855643][T16485] capability: warning: `syz.9.2228' uses 32-bit capabilities (legacy support in use) [ 1230.905508][T15956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1230.944656][T15956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.002951][T15956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.049627][T15956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.070301][T15956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.082497][T15956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.137992][T15956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1231.264401][T15956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.446026][T15956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1231.605107][T16104] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1231.652905][T15956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.671311][T15956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.682445][T15956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.694000][T15956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.735591][T15956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1231.764401][T15956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1231.821152][T15956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1231.828585][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1231.871952][T16104] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1231.919585][T15956] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.971764][T15956] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.981755][T15956] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.991710][T15956] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.008643][T16507] infiniband syz1: set active [ 1232.021667][T12983] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1232.068234][ T61] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1232.111305][T12969] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1232.268989][ T6243] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1232.408790][T12984] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1232.430076][T12984] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1232.451079][T12984] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1232.472791][ T6882] bond1: (slave ip6gretap1): link status up again after 0 ms [ 1232.671361][ T29] audit: type=1400 audit(2000000609.522:1782): avc: denied { write } for pid=16518 comm="syz.8.2234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1232.698333][T12984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.706190][T12984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.765235][T16104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1232.806052][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.838622][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.891690][T16104] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.927868][ T29] audit: type=1400 audit(2000000609.765:1783): avc: denied { mounton } for pid=15956 comm="syz-executor" path="/root/syzkaller.uuSmM1/syz-tmp" dev="sda1" ino=1961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1232.988614][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.995772][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1233.038625][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.045735][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.060490][ T29] audit: type=1400 audit(2000000609.802:1784): avc: denied { mount } for pid=15956 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1233.082475][ C1] vkms_vblank_simulate: vblank timer overrun [ 1233.234380][T16533] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2244'. [ 1233.252777][ T29] audit: type=1400 audit(2000000609.802:1785): avc: denied { mounton } for pid=15956 comm="syz-executor" path="/root/syzkaller.uuSmM1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1233.279546][ C1] vkms_vblank_simulate: vblank timer overrun [ 1233.962435][ T29] audit: type=1400 audit(2000000609.802:1786): avc: denied { mounton } for pid=15956 comm="syz-executor" path="/root/syzkaller.uuSmM1/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=42649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1233.990618][ T29] audit: type=1400 audit(2000000609.811:1787): avc: denied { mounton } for pid=15956 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1234.013932][ T29] audit: type=1400 audit(2000000609.840:1789): avc: denied { connect } for pid=16521 comm="syz.9.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1234.033768][ T29] audit: type=1326 audit(2000000609.840:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16521 comm="syz.9.2233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9be1b85d29 code=0x0 [ 1234.269817][T16104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1234.411240][T16104] veth0_vlan: entered promiscuous mode [ 1234.578460][T16104] veth1_vlan: entered promiscuous mode [ 1234.599843][T16104] veth0_macvtap: entered promiscuous mode [ 1234.608438][T16104] veth1_macvtap: entered promiscuous mode [ 1234.622286][T16104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1234.632818][T16104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.642802][T16104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1234.653283][T16104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.663369][T16104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1234.673930][T16104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.683765][T16104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1234.694288][T16104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.704821][T16104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1234.716108][T16104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.727211][T16104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1234.736716][T16104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1234.747324][T16104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.757198][T16104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1234.768293][T16104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.810404][T16104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1234.821128][T16104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.831336][T16104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1234.841843][T16104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1234.852708][T16104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1234.862542][T16104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.871331][T16104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.880090][T16104] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.888960][T16104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.337797][ T25] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1235.790631][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1235.790650][ T29] audit: type=1400 audit(2000000612.440:1792): avc: denied { write } for pid=16576 comm="syz.9.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1235.868143][ T25] usb 9-1: New USB device found, idVendor=0424, idProduct=7505, bcdDevice=74.82 [ 1235.878268][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.891022][ T25] usb 9-1: Product: syz [ 1235.896140][ T25] usb 9-1: Manufacturer: syz [ 1235.918514][ T25] usb 9-1: SerialNumber: syz [ 1236.177773][ T25] usb 9-1: config 0 descriptor?? [ 1236.210275][T12983] net_ratelimit: 22 callbacks suppressed [ 1236.210318][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1236.428150][T12984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.453008][ T25] smsc75xx v1.0.0 [ 1236.463640][T12984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.481337][ T25] smsc75xx 9-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1236.572214][ T25] smsc75xx 9-1:0.0: probe with driver smsc75xx failed with error -22 [ 1236.576653][T12969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1236.628266][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1236.638421][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.708555][T14134] usb 9-1: USB disconnect, device number 7 [ 1236.741541][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1236.879830][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1236.899797][T15754] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1237.059951][ T29] audit: type=1400 audit(2000000613.562:1793): avc: denied { nlmsg_read } for pid=16595 comm="syz.0.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1237.088410][T15754] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1237.102409][T15754] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1237.148735][T15754] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1237.150517][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1237.180306][T15754] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1237.283840][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1237.298231][T15754] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1237.417088][T15754] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1237.435532][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1237.437304][T15754] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1237.518342][T15754] usb 10-1: Product: syz [ 1237.522651][T15754] usb 10-1: Manufacturer: syz [ 1237.609872][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1237.690474][T15754] cdc_wdm 10-1:1.0: skipping garbage [ 1237.695845][T15754] cdc_wdm 10-1:1.0: skipping garbage [ 1237.727292][T16604] erofs (device nullb0): cannot find valid erofs superblock [ 1237.806835][T12969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1237.827160][T15754] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1237.834338][T15754] cdc_wdm 10-1:1.0: Unknown control protocol [ 1238.904858][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.912124][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.943436][T12969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1239.102358][T16615] bridge0: port 4(syz_tun) entered blocking state [ 1239.108875][T16615] bridge0: port 4(syz_tun) entered disabled state [ 1239.116412][T16615] syz_tun: entered allmulticast mode [ 1239.123525][T16615] syz_tun: entered promiscuous mode [ 1239.127539][ T29] audit: type=1326 audit(2000000615.555:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.4.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe7d85d29 code=0x7fc00000 [ 1239.426257][ T29] audit: type=1326 audit(2000000615.555:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.4.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe7d85d29 code=0x7fc00000 [ 1239.569954][ T29] audit: type=1326 audit(2000000615.555:1796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.4.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe7d85d29 code=0x7fc00000 [ 1239.593680][ T29] audit: type=1326 audit(2000000615.555:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.4.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe7d85d29 code=0x7fc00000 [ 1239.618051][ T29] audit: type=1326 audit(2000000615.555:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.4.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe7d85d29 code=0x7fc00000 [ 1239.642125][ T29] audit: type=1326 audit(2000000615.555:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.4.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe7d85d29 code=0x7fc00000 [ 1239.666178][ T29] audit: type=1326 audit(2000000615.555:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.4.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe7d85d29 code=0x7fc00000 [ 1239.689877][ T29] audit: type=1326 audit(2000000615.555:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16605 comm="syz.4.2251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fe7d85d29 code=0x7fc00000 [ 1240.315634][T16636] lo speed is unknown, defaulting to 1000 [ 1240.781080][T16625] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1240.787639][T16625] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1240.796742][T16625] vhci_hcd vhci_hcd.0: Device attached [ 1240.868228][T16642] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 1241.066465][T16647] cgroup: release_agent respecified [ 1241.082843][T15754] vhci_hcd: vhci_device speed not set [ 1241.087287][T16647] CUSE: info not properly terminated [ 1241.527173][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 1241.527188][ T29] audit: type=1326 audit(2000000617.819:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16645 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0d16d85d29 code=0x7ffc0000 [ 1241.609001][T15754] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 1241.613783][ T29] audit: type=1326 audit(2000000617.847:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16645 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d16d85d29 code=0x7ffc0000 [ 1241.791970][T12984] net_ratelimit: 15 callbacks suppressed [ 1241.791991][T12984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1241.870858][ T29] audit: type=1326 audit(2000000617.847:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16645 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d16d85d29 code=0x7ffc0000 [ 1242.319934][T16656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2259'. [ 1242.571684][T15199] usb 10-1: USB disconnect, device number 5 [ 1242.576702][T16647] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 1242.694341][ T29] audit: type=1326 audit(2000000617.847:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16645 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0d16d85d29 code=0x7ffc0000 [ 1242.734331][ T29] audit: type=1400 audit(2000000617.847:1872): avc: denied { name_bind } for pid=16645 comm="syz.1.2258" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1242.759857][ T29] audit: type=1326 audit(2000000617.847:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16645 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d16d85d29 code=0x7ffc0000 [ 1242.783623][ T29] audit: type=1326 audit(2000000617.847:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16645 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d16d85d29 code=0x7ffc0000 [ 1242.807892][ T29] audit: type=1326 audit(2000000617.847:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16645 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0d16d85d29 code=0x7ffc0000 [ 1242.832041][ T29] audit: type=1326 audit(2000000617.847:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16645 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d16d85d29 code=0x7ffc0000 [ 1242.949057][ T29] audit: type=1326 audit(2000000617.847:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16645 comm="syz.1.2258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d16d85d29 code=0x7ffc0000 [ 1243.049671][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1243.175963][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1243.354469][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1243.394211][T16676] erofs (device nullb0): cannot find valid erofs superblock [ 1243.495017][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1243.655205][ T6882] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1243.777815][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1243.827812][T16633] vhci_hcd: connection reset by peer [ 1244.513607][ T1101] vhci_hcd: stop threads [ 1244.520495][ T1101] vhci_hcd: release socket [ 1244.536340][ T1101] vhci_hcd: disconnect device [ 1244.554964][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1244.702684][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1244.836669][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1245.614174][T16701] overlayfs: failed to clone upperpath [ 1245.680478][T16702] lo speed is unknown, defaulting to 1000 [ 1245.713367][T16702] lo speed is unknown, defaulting to 1000 [ 1245.998982][T16702] lo speed is unknown, defaulting to 1000 [ 1246.270645][T16702] infiniband sz1: set active [ 1246.276271][T16702] infiniband sz1: added lo [ 1246.281339][T16702] sz1: rxe_create_cq: returned err = -12 [ 1246.288539][T16702] infiniband sz1: Couldn't create ib_mad CQ [ 1246.295252][T16702] infiniband sz1: Couldn't open port 1 [ 1246.350018][T16702] RDS/IB: sz1: added [ 1246.354080][T16702] smc: adding ib device sz1 with port count 1 [ 1246.361178][T16702] smc: ib device sz1 port 1 has pnetid [ 1246.371713][T10302] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1246.433432][T16705] bridge1: entered promiscuous mode [ 1246.442686][T16705] bridge1: entered allmulticast mode [ 1246.519211][T16705] team0: Port device bridge1 added [ 1246.530287][T14134] lo speed is unknown, defaulting to 1000 [ 1246.541926][T10302] usb 1-1: Using ep0 maxpacket: 32 [ 1246.559597][T10302] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.587894][T10302] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1246.691443][T10302] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1246.705717][T16711] befs: (nullb0): No write support. Marking filesystem read-only [ 1246.718103][T16702] lo speed is unknown, defaulting to 1000 [ 1246.742851][T16711] befs: (nullb0): invalid magic header [ 1246.769033][ T5867] lo speed is unknown, defaulting to 1000 [ 1246.811756][T16702] lo speed is unknown, defaulting to 1000 [ 1246.833827][T10302] usb 1-1: config 0 interface 0 has no altsetting 1 [ 1246.877459][T16702] lo speed is unknown, defaulting to 1000 [ 1246.934426][T16702] lo speed is unknown, defaulting to 1000 [ 1246.990169][T16702] lo speed is unknown, defaulting to 1000 [ 1247.047170][T16702] lo speed is unknown, defaulting to 1000 [ 1247.102097][T16702] lo speed is unknown, defaulting to 1000 [ 1247.157469][T16702] lo speed is unknown, defaulting to 1000 [ 1247.212273][T16702] lo speed is unknown, defaulting to 1000 [ 1247.508689][T10302] usb 1-1: New USB device found, idVendor=0582, idProduct=0012, bcdDevice=8e.57 [ 1247.511535][ T12] net_ratelimit: 4 callbacks suppressed [ 1247.511552][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1247.518643][T10302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.544346][T10302] usb 1-1: Product: syz [ 1247.549389][T10302] usb 1-1: Manufacturer: syz [ 1247.554002][T10302] usb 1-1: SerialNumber: syz [ 1247.560709][T10302] usb 1-1: config 0 descriptor?? [ 1247.569755][T10302] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1247.577982][T15754] vhci_hcd: vhci_device speed not set [ 1247.584176][T10302] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1247.616624][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2273'. [ 1247.661339][T10302] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1247.696461][T16715] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1247.806471][T15894] udevd[15894]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1247.822663][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1247.915067][T10302] usb 1-1: USB disconnect, device number 7 [ 1247.973362][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1248.112839][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1249.586590][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1249.641346][T16734] erofs (device nullb0): cannot find valid erofs superblock [ 1251.095431][ T6882] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1251.217911][ T6882] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1251.343886][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1251.558044][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1251.694846][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1251.814797][T15754] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1251.907966][T14134] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1252.008168][T15754] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1252.074530][T15754] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1252.162177][T15754] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1252.355504][T15754] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1252.419623][T15754] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1252.439718][T14134] usb 10-1: config index 0 descriptor too short (expected 63186, got 210) [ 1252.456314][T14134] usb 10-1: config 0 has an invalid interface number: 106 but max is 0 [ 1252.491428][T15754] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1252.511098][T14134] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.538563][T15754] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1252.578144][T14134] usb 10-1: config 0 has no interface number 0 [ 1252.593149][T15754] usb 1-1: Product: syz [ 1252.602742][T14134] usb 10-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1252.613980][T15754] usb 1-1: Manufacturer: syz [ 1252.886725][ T1101] net_ratelimit: 8 callbacks suppressed [ 1252.886768][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1253.018934][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1253.232735][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1253.236717][T14134] usb 10-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 208, setting to 64 [ 1253.257419][T14134] usb 10-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 1253.271609][T14134] usb 10-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1253.366678][T14134] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.372532][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1253.406546][T15754] cdc_wdm 1-1:1.0: skipping garbage [ 1253.411966][T15754] cdc_wdm 1-1:1.0: skipping garbage [ 1253.419235][T14134] usb 10-1: config 0 descriptor?? [ 1253.426269][T16759] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1253.440407][T15754] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1253.449457][T14134] usb 10-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1253.460224][T15754] cdc_wdm 1-1:1.0: Unknown control protocol [ 1253.470029][T16794] befs: (nullb0): No write support. Marking filesystem read-only [ 1253.478279][T16794] befs: (nullb0): invalid magic header [ 1253.554266][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1253.813879][ T6882] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1254.531897][T12969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1254.577781][T12983] usb 10-1: Failed to submit usb control message: -110 [ 1254.692953][T12983] usb 10-1: unable to send the bmi data to the device: -110 [ 1254.708785][T12983] usb 10-1: unable to get target info from device [ 1254.715272][T12983] usb 10-1: could not get target info (-110) [ 1254.879815][T12983] usb 10-1: could not probe fw (-110) [ 1254.921707][ T6882] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1254.945634][T15754] usb 10-1: USB disconnect, device number 6 [ 1255.806699][T16811] lo speed is unknown, defaulting to 1000 [ 1255.880441][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1256.004184][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1256.228356][T16811] lo speed is unknown, defaulting to 1000 [ 1256.339576][T16823] erofs (device nullb0): cannot find valid erofs superblock [ 1256.696742][T16831] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1256.884109][T16224] usb 1-1: USB disconnect, device number 8 [ 1257.033138][T16832] syz.8.2300 (16832): drop_caches: 2 [ 1257.209206][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 1257.209249][ T29] audit: type=1400 audit(2000000632.467:1907): avc: denied { getopt } for pid=16836 comm="syz.0.2302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1257.384993][T16832] syz.8.2300 (16832): drop_caches: 2 [ 1257.464124][ T29] audit: type=1400 audit(2000000632.701:1908): avc: denied { listen } for pid=16839 comm="syz.9.2301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1257.776074][T16847] netlink: 156 bytes leftover after parsing attributes in process `syz.9.2301'. [ 1259.024709][T16829] syz.8.2300 (16829): drop_caches: 2 [ 1259.391417][T12983] net_ratelimit: 10 callbacks suppressed [ 1259.391438][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1259.608070][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1260.717922][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1262.007217][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1262.489140][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1262.626030][T12969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1262.926330][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1263.079377][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1263.208745][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1263.444983][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1263.666907][T15199] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1263.694096][ T29] audit: type=1400 audit(2000000638.547:1909): avc: denied { setopt } for pid=16918 comm="syz.1.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1263.793218][T16905] erofs (device nullb0): cannot find valid erofs superblock [ 1263.988765][T15199] usb 1-1: Using ep0 maxpacket: 32 [ 1264.061267][T15199] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1264.072619][T15199] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1264.082465][T15199] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1264.091628][T15199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.125501][T15199] hub 1-1:4.0: USB hub found [ 1264.413767][T15199] hub 1-1:4.0: 30 ports detected [ 1264.419056][T15199] usb 1-1: selecting invalid altsetting 1 [ 1264.424943][T15199] hub 1-1:4.0: Using single TT (err -22) [ 1264.460552][T15199] hub 1-1:4.0: insufficient power available to use all downstream ports [ 1264.778988][T16953] lo speed is unknown, defaulting to 1000 [ 1265.230307][T16953] lo speed is unknown, defaulting to 1000 [ 1265.444498][T12985] net_ratelimit: 10 callbacks suppressed [ 1265.444516][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1265.466774][T15199] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 1265.473957][T15199] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 1265.564423][T15199] usb 1-1: USB disconnect, device number 9 [ 1265.609998][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1265.746574][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1265.902701][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1266.041364][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1266.230703][T12969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1266.523132][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1266.704067][ T6882] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1266.792984][T16989] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 1267.095851][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1267.259875][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1268.938032][ T29] audit: type=1400 audit(2000000643.430:1910): avc: denied { nlmsg_write } for pid=17013 comm="syz.8.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1269.559993][T17028] /dev/nullb0: Can't lookup blockdev [ 1270.086453][T17001] erofs (device nullb0): cannot find valid erofs superblock [ 1270.339758][T17037] infiniband sz1: set active [ 1270.347961][T17037] infiniband syz1: set active [ 1270.373774][T15754] lo speed is unknown, defaulting to 1000 [ 1270.609239][ T5866] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1270.807988][ T5866] usb 9-1: Using ep0 maxpacket: 8 [ 1270.836780][ T5866] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1270.847744][ T5866] usb 9-1: config 179 has no interface number 0 [ 1270.890966][ T5866] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1270.986148][ T5866] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1270.990557][T11255] net_ratelimit: 17 callbacks suppressed [ 1270.990576][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1271.000784][ T5866] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1271.054126][ T5866] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1271.072632][ T5866] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1271.122956][ T5866] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1271.142043][ T5866] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.176083][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1271.184543][T17033] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1271.195217][ T5866] xpad 9-1:179.65: probe with driver xpad failed with error -5 [ 1271.334132][T12969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1271.487830][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1271.586014][ T5866] usb 9-1: USB disconnect, device number 8 [ 1271.620534][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1271.721582][T17083] netlink: 'syz.9.2347': attribute type 2 has an invalid length. [ 1271.739084][T12969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1271.751141][T17083] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2347'. [ 1271.966984][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1272.149659][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1272.337943][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1272.487390][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1273.786384][T17112] xt_CT: No such helper "snmp" [ 1274.496712][ T5866] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1274.721550][ T5866] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1274.730279][ T5866] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1274.800303][ T5866] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1274.869712][ T5866] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1274.954150][ T5866] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1275.037208][ T5866] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1275.075375][ T5866] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1275.122928][ T5866] usb 10-1: Product: syz [ 1275.143972][T17146] infiniband sz1: set active [ 1275.152897][T17146] infiniband syz1: set active [ 1275.153762][ T5866] usb 10-1: Manufacturer: syz [ 1275.261163][T15754] lo speed is unknown, defaulting to 1000 [ 1275.302598][ T5866] cdc_wdm 10-1:1.0: skipping garbage [ 1275.307935][ T5866] cdc_wdm 10-1:1.0: skipping garbage [ 1275.371519][ T5866] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1275.382293][ T5866] cdc_wdm 10-1:1.0: Unknown control protocol [ 1275.645134][T17160] infiniband sz1: set active [ 1275.654703][T17160] infiniband syz1: set active [ 1275.722479][T15754] lo speed is unknown, defaulting to 1000 [ 1275.954528][T17164] lo speed is unknown, defaulting to 1000 [ 1276.388879][T17164] lo speed is unknown, defaulting to 1000 [ 1276.528660][T15199] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1276.542427][ T12] net_ratelimit: 23 callbacks suppressed [ 1276.542444][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1276.702246][T15199] usb 9-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1276.704493][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1276.711431][T15199] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.711457][T15199] usb 9-1: Product: syz [ 1276.711475][T15199] usb 9-1: Manufacturer: syz [ 1276.711492][T15199] usb 9-1: SerialNumber: syz [ 1276.823418][T15199] usb 9-1: config 0 descriptor?? [ 1276.859595][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1277.019901][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1277.067681][T15199] usb-storage 9-1:0.0: USB Mass Storage device detected [ 1277.189365][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1277.318482][T12969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1277.362513][T15199] usb 9-1: USB disconnect, device number 9 [ 1277.399900][T17198] netlink: 'syz.1.2377': attribute type 2 has an invalid length. [ 1277.476246][T17198] : entered promiscuous mode [ 1277.494131][T12969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1277.619522][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1277.767063][ T8] usb 10-1: USB disconnect, device number 7 [ 1277.789708][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1278.541399][ T29] audit: type=1326 audit(2000000652.382:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17203 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d16d85d29 code=0x7fc00000 [ 1278.601859][ T29] audit: type=1326 audit(2000000652.382:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17203 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0d16d85d29 code=0x7fc00000 [ 1278.625888][ T29] audit: type=1326 audit(2000000652.382:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17203 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d16d85d29 code=0x7fc00000 [ 1278.649725][ T29] audit: type=1326 audit(2000000652.382:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17203 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d16d85d29 code=0x7fc00000 [ 1278.673485][ T29] audit: type=1326 audit(2000000652.382:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17203 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d16d85d29 code=0x7fc00000 [ 1278.674545][T17208] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2379'. [ 1278.712503][T17210] bridge0: port 3(syz_tun) entered blocking state [ 1278.719932][T17210] bridge0: port 3(syz_tun) entered disabled state [ 1278.726572][T17210] syz_tun: entered allmulticast mode [ 1278.734289][T17210] syz_tun: entered promiscuous mode [ 1278.740165][T17210] bridge0: port 3(syz_tun) entered blocking state [ 1278.746964][T17210] bridge0: port 3(syz_tun) entered forwarding state [ 1278.754236][ T29] audit: type=1326 audit(2000000652.391:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17203 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d16d85d29 code=0x7fc00000 [ 1278.777899][ T29] audit: type=1326 audit(2000000652.391:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17203 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d16d85d29 code=0x7fc00000 [ 1278.801447][ T29] audit: type=1326 audit(2000000652.391:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17203 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d16d85d29 code=0x7fc00000 [ 1278.825505][ T29] audit: type=1326 audit(2000000652.391:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17203 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d16d85d29 code=0x7fc00000 [ 1278.830114][T12969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1278.849780][ T29] audit: type=1326 audit(2000000652.391:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17203 comm="syz.1.2378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d16d85d29 code=0x7fc00000 [ 1278.880719][ C1] vkms_vblank_simulate: vblank timer overrun [ 1282.018910][ T12] net_ratelimit: 10 callbacks suppressed [ 1282.018929][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1282.084070][T17268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2395'. [ 1282.139960][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1282.280205][T17277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2399'. [ 1282.346701][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1282.472438][ T5867] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1282.505312][ T6882] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1283.517154][T12969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1283.782256][ T5867] usb 2-1: Using ep0 maxpacket: 32 [ 1283.790193][ T5867] usb 2-1: config 0 has an invalid interface number: 58 but max is 0 [ 1283.806133][ T5867] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.817186][ T5867] usb 2-1: config 0 has no interface number 0 [ 1283.824176][ T5867] usb 2-1: config 0 interface 58 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1283.834710][ T5867] usb 2-1: config 0 interface 58 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1283.850846][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1284.780715][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 1284.780734][ T29] audit: type=1400 audit(2000000658.190:1978): avc: denied { map } for pid=17292 comm="syz.0.2403" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1284.780777][ T29] audit: type=1400 audit(2000000658.190:1979): avc: denied { execute } for pid=17292 comm="syz.0.2403" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1284.788358][ T5867] usb 2-1: New USB device found, idVendor=0959, idProduct=2bd0, bcdDevice=7c.4f [ 1284.864868][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1284.973801][ T5867] usb 2-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 1284.983679][ T5867] usb 2-1: Product: syz [ 1284.987874][ T5867] usb 2-1: Manufacturer: syz [ 1284.992503][ T5867] usb 2-1: SerialNumber: syz [ 1285.012371][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1285.038916][ T5867] usb 2-1: config 0 descriptor?? [ 1285.232910][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1285.276218][ T5867] HFC-S_USB 2-1:0.58: probe with driver HFC-S_USB failed with error -5 [ 1285.321189][ T29] audit: type=1400 audit(2000000658.770:1980): avc: denied { create } for pid=17309 comm="syz.9.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1285.366686][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1285.464725][T17320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2407'. [ 1285.746531][ T29] audit: type=1400 audit(2000000659.154:1981): avc: denied { getopt } for pid=17309 comm="syz.9.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1285.912184][ T5867] usb 2-1: USB disconnect, device number 5 [ 1286.160911][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2411'. [ 1287.369712][T13935] net_ratelimit: 10 callbacks suppressed [ 1287.369732][T13935] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1287.984154][T13935] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1288.079650][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1288.151822][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1288.279327][ T6882] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1288.394064][T13935] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1288.508593][ T8] usb 2-1: config 0 has an invalid interface number: 224 but max is 0 [ 1288.517125][ T8] usb 2-1: config 0 has no interface number 0 [ 1288.535087][ T6882] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1288.555534][ T8] usb 2-1: New USB device found, idVendor=049f, idProduct=ffff, bcdDevice=41.67 [ 1288.567717][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1288.592525][ T8] usb 2-1: Product: syz [ 1288.596733][ T8] usb 2-1: Manufacturer: syz [ 1288.642497][ T8] usb 2-1: SerialNumber: syz [ 1288.679865][ T8] usb 2-1: config 0 descriptor?? [ 1288.686332][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1288.711050][ T8] safe_serial 2-1:0.224: safe_serial converter detected [ 1288.726661][ T8] safe_serial 2-1:0.224: probe with driver safe_serial failed with error -22 [ 1288.854814][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1288.956414][ T8] usb 2-1: USB disconnect, device number 6 [ 1288.983053][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1288.993493][T15754] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1289.137094][ T6882] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1289.156866][T15754] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1289.165795][T15754] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1289.267719][T15754] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1289.286578][T15754] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1289.358291][T15754] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1289.411215][T15754] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1289.428668][T15754] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1290.035033][T15754] usb 9-1: Product: syz [ 1290.039250][T15754] usb 9-1: Manufacturer: syz [ 1290.049917][T15754] cdc_wdm 9-1:1.0: skipping garbage [ 1290.089741][T15754] cdc_wdm 9-1:1.0: skipping garbage [ 1290.159010][T15754] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1290.167239][T15754] cdc_wdm 9-1:1.0: Unknown control protocol [ 1290.700485][T17435] lo speed is unknown, defaulting to 1000 [ 1291.118381][T17435] lo speed is unknown, defaulting to 1000 [ 1291.375811][ T29] audit: type=1400 audit(2000000664.430:1982): avc: denied { getopt } for pid=17424 comm="syz.1.2434" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1292.004395][ T29] audit: type=1400 audit(2000000665.028:1983): avc: denied { read } for pid=17443 comm="syz.0.2438" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1292.054581][ T29] audit: type=1400 audit(2000000665.028:1984): avc: denied { open } for pid=17443 comm="syz.0.2438" path="/dev/usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1292.125358][T17455] usb usb1: check_ctrlrecip: process 17455 (syz.1.2441) requesting ep 01 but needs 81 [ 1292.154672][T17455] usb usb1: usbfs: process 17455 (syz.1.2441) did not claim interface 0 before use [ 1292.681904][ T5867] usb 9-1: USB disconnect, device number 10 [ 1293.304972][ T5867] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1293.443031][T11255] net_ratelimit: 19 callbacks suppressed [ 1293.443052][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1293.477185][ T5867] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 1293.499108][ T5867] usb 2-1: config 5 has no interface number 0 [ 1293.573570][ T5867] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1293.613047][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1293.640127][ T29] audit: type=1400 audit(2000000666.544:1985): avc: denied { write } for pid=5171 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.715390][ T5867] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1293.729908][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1293.854340][ T5867] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x89 has invalid maxpacket 50313, setting to 64 [ 1293.877192][ T29] audit: type=1400 audit(2000000666.544:1986): avc: denied { remove_name } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1293.903640][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1293.966575][ T5867] usb 2-1: config 5 interface 123 has no altsetting 0 [ 1294.025510][ T5867] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1294.039632][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1294.065816][ T29] audit: type=1400 audit(2000000666.544:1987): avc: denied { rename } for pid=5171 comm="syslogd" name="messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1294.119428][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1294.175765][ T5867] usb 2-1: Product: syz [ 1294.205425][ T5867] usb 2-1: Manufacturer: syz [ 1294.212350][T13935] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1294.259035][ T5867] usb 2-1: SerialNumber: syz [ 1294.270772][ T29] audit: type=1400 audit(2000000666.544:1988): avc: denied { add_name } for pid=5171 comm="syslogd" name="messages.0" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1294.332550][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1294.436047][T17483] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1294.740095][ T5867] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1294.836848][ T5867] usb 2-1: USB disconnect, device number 7 [ 1294.895101][ T29] audit: type=1400 audit(2000000666.544:1989): avc: denied { unlink } for pid=5171 comm="syslogd" name="messages.0" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1295.044409][T12969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1295.062841][ T29] audit: type=1400 audit(2000000666.544:1990): avc: denied { create } for pid=5171 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1295.230423][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1295.386943][T12969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1295.638353][ T29] audit: type=1400 audit(2000000668.424:1991): avc: denied { read write } for pid=17496 comm="syz.8.2451" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 1297.021270][T16224] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1297.182027][T16224] usb 10-1: Using ep0 maxpacket: 16 [ 1297.214457][T16224] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1297.241175][T16224] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1297.308652][T16224] usb 10-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 1297.341623][T16224] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 1297.387875][T16224] usb 10-1: Product: syz [ 1297.392177][T16224] usb 10-1: Manufacturer: syz [ 1297.421075][T16224] usb 10-1: SerialNumber: syz [ 1297.498661][T16224] usb 10-1: config 0 descriptor?? [ 1297.522605][T16224] usb 10-1: NFC: intf ffff88807a5fd000 id ffffffff8f103a80 [ 1298.325829][T16224] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1298.456343][ T8] usb 10-1: USB disconnect, device number 8 [ 1298.593286][T16224] usb 2-1: Using ep0 maxpacket: 32 [ 1298.611898][T16224] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1299.262632][T12985] net_ratelimit: 20 callbacks suppressed [ 1299.262650][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1299.407892][T16224] usb 2-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe [ 1299.431688][T16224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.454799][T13935] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1299.475442][T16224] usb 2-1: Product: syz [ 1299.479628][T16224] usb 2-1: Manufacturer: syz [ 1299.559394][T16224] usb 2-1: SerialNumber: syz [ 1299.575041][T16224] usb 2-1: config 0 descriptor?? [ 1299.598043][T13935] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1299.719826][T13935] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1299.828137][T16224] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input18 [ 1299.854137][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1299.854164][ T29] audit: type=1400 audit(2000000672.362:1993): avc: denied { read } for pid=5174 comm="acpid" name="mouse1" dev="devtmpfs" ino=3495 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1299.882881][ T29] audit: type=1400 audit(2000000672.362:1994): avc: denied { open } for pid=5174 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3495 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1299.895565][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1300.019775][T17601] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2480'. [ 1300.062117][T16224] usb 2-1: USB disconnect, device number 8 [ 1300.111818][T13935] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1300.261413][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1300.425520][T13935] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1300.584597][T13935] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1300.785388][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1302.046781][ T29] audit: type=1400 audit(2000000674.401:1995): avc: denied { ioctl } for pid=17637 comm="syz.1.2488" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1302.427385][T17649] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2491'. [ 1302.538699][ T29] audit: type=1400 audit(2000000674.878:1996): avc: denied { ioctl } for pid=17651 comm="syz.9.2492" path="socket:[46195]" dev="sockfs" ino=46195 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1304.145335][T17675] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2498'. [ 1304.297067][T17679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2500'. [ 1304.498451][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1304.505853][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.743688][ T61] net_ratelimit: 22 callbacks suppressed [ 1304.743708][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1304.986773][ T5867] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1305.180436][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1305.308780][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1305.382171][ T5867] usb 9-1: Using ep0 maxpacket: 32 [ 1305.389200][ T5867] usb 9-1: config 0 has an invalid interface number: 183 but max is 0 [ 1305.398416][ T5867] usb 9-1: config 0 has no interface number 0 [ 1305.404711][T17707] erofs (device nullb0): cannot find valid erofs superblock [ 1305.413072][ T5867] usb 9-1: config 0 interface 183 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 528 [ 1305.427100][ T5867] usb 9-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=70.f8 [ 1305.437129][ T5867] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.445151][ T5867] usb 9-1: Product: syz [ 1305.462962][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1305.475552][ T5867] usb 9-1: Manufacturer: syz [ 1305.496964][ T5867] usb 9-1: SerialNumber: syz [ 1305.543438][ T5867] usb 9-1: config 0 descriptor?? [ 1305.556913][T17681] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1305.638800][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1305.755629][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1305.859942][T17681] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1305.873246][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1305.890855][ T5867] net1080 9-1:0.183 usb0: register 'net1080' at usb-dummy_hcd.8-1, NetChip TurboCONNECT, b2:70:3b:07:be:dd [ 1305.907343][ T29] audit: type=1400 audit(2000000678.030:1997): avc: denied { append } for pid=17715 comm="syz.1.2508" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1305.997278][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1306.155138][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1306.159482][ T8] usb 9-1: USB disconnect, device number 11 [ 1306.184086][ T8] net1080 9-1:0.183 usb0: unregister 'net1080' usb-dummy_hcd.8-1, NetChip TurboCONNECT [ 1306.281932][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1306.493162][T16224] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1307.189566][T16224] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1307.198414][T16224] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1307.220179][T16224] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1307.229171][T16224] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1307.313371][T16224] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1307.341388][T16224] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1307.355832][T16224] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1307.410778][T16224] usb 2-1: Product: syz [ 1307.415780][T16224] usb 2-1: Manufacturer: syz [ 1307.437154][T16224] cdc_wdm 2-1:1.0: skipping garbage [ 1307.442390][T16224] cdc_wdm 2-1:1.0: skipping garbage [ 1307.449913][T16224] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1307.458620][T16224] cdc_wdm 2-1:1.0: Unknown control protocol [ 1308.075001][T17758] lo speed is unknown, defaulting to 1000 [ 1308.209867][T17758] lo speed is unknown, defaulting to 1000 [ 1310.483042][T11255] net_ratelimit: 18 callbacks suppressed [ 1310.483062][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1311.284249][T16224] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 1311.304963][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1311.491761][T16224] usb 9-1: config 9 has an invalid interface number: 6 but max is 1 [ 1311.563067][T16224] usb 9-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.664571][T16224] usb 9-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 1311.684003][T16224] usb 9-1: config 9 has no interface number 0 [ 1311.690292][T16224] usb 9-1: config 9 interface 6 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1311.703483][T15199] usb 2-1: USB disconnect, device number 9 [ 1311.710681][T16224] usb 9-1: config 9 interface 6 has no altsetting 0 [ 1311.767435][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1311.777418][T16224] usb 9-1: New USB device found, idVendor=0421, idProduct=003a, bcdDevice=9f.b4 [ 1311.793554][T16224] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.802430][T16224] usb 9-1: Product: syz [ 1311.806849][T16224] usb 9-1: Manufacturer: syz [ 1311.811520][T16224] usb 9-1: SerialNumber: syz [ 1311.914445][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1312.019382][T17780] erofs (device nullb0): cannot find valid erofs superblock [ 1312.072629][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1312.333896][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1312.353207][T16224] usb 9-1: USB disconnect, device number 12 [ 1312.524896][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1312.627264][T15187] Bluetooth: hci6: command 0x0406 tx timeout [ 1312.652914][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1312.791413][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1313.018202][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1313.156255][T17812] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2525'. [ 1313.258278][ T29] audit: type=1400 audit(2000000684.896:1998): avc: denied { create } for pid=17809 comm="syz.0.2524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1313.936066][ T29] audit: type=1400 audit(2000000685.467:1999): avc: denied { setopt } for pid=17809 comm="syz.0.2524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1315.220787][T17849] netlink: 'syz.0.2532': attribute type 21 has an invalid length. [ 1315.228818][T17849] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2532'. [ 1315.237915][T17849] netlink: 'syz.0.2532': attribute type 5 has an invalid length. [ 1315.246958][T17849] netlink: 'syz.0.2532': attribute type 6 has an invalid length. [ 1315.256006][T17849] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2532'. [ 1316.005134][T12983] net_ratelimit: 7 callbacks suppressed [ 1316.005153][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1316.277050][ T6882] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1316.399578][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1317.105917][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1317.489525][T12969] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1317.614033][T17881] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2538'. [ 1317.648899][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1317.806458][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1317.932942][ T6882] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1317.933840][ T5867] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1318.094028][ T6882] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1318.166361][ T5867] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1318.183105][ T5867] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1318.221528][ T5867] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1318.243457][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1318.250190][ T5867] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1318.350013][ T5867] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1318.796138][ T5867] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1318.860974][ T5867] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1318.883145][ T5867] usb 10-1: Product: syz [ 1318.891943][ T5867] usb 10-1: Manufacturer: syz [ 1318.922667][ T5867] cdc_wdm 10-1:1.0: skipping garbage [ 1318.930027][ T5867] cdc_wdm 10-1:1.0: skipping garbage [ 1318.954000][ T5867] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1318.973840][ T5867] cdc_wdm 10-1:1.0: Unknown control protocol [ 1319.236671][T17916] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2547'. [ 1319.245661][T17916] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2547'. [ 1319.912066][T17921] lo speed is unknown, defaulting to 1000 [ 1320.294723][T17921] lo speed is unknown, defaulting to 1000 [ 1321.419834][T11255] net_ratelimit: 14 callbacks suppressed [ 1321.419855][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1321.596830][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1321.724590][T15199] usb 10-1: USB disconnect, device number 9 [ 1322.025065][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1322.110498][T17966] IPVS: Error joining to the multicast group [ 1322.495475][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1322.699496][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1323.064484][T12983] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1323.278571][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1323.470876][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1323.645978][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1324.432609][ T6882] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1324.624012][T18004] /dev/nullb0: Can't lookup blockdev [ 1324.914807][ T5867] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 1325.631920][ T5867] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1325.641979][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1325.650481][ T5867] usb 2-1: Product: syz [ 1325.656585][ T5867] usb 2-1: Manufacturer: syz [ 1325.662430][ T5867] usb 2-1: SerialNumber: syz [ 1325.680452][ T5867] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1325.746868][ C1] hrtimer: interrupt took 48209 ns [ 1326.187401][ T5867] vp7045: USB control message 'in' went wrong. [ 1326.200047][ T5867] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1326.265306][ T5867] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1326.352963][ T5867] usb 2-1: USB disconnect, device number 10 [ 1326.844655][T12984] net_ratelimit: 13 callbacks suppressed [ 1326.844681][T12984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1326.950308][T18049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2579'. [ 1327.072809][T16224] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1327.076976][ T29] audit: type=1400 audit(2000000697.823:2000): avc: denied { ioctl } for pid=18055 comm="syz.0.2581" path="socket:[47214]" dev="sockfs" ino=47214 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1327.119730][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1327.133061][T18056] netdevsim netdevsim0: Direct firmware load for . [ 1327.133061][T18056] failed with error -2 [ 1327.167810][T18056] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1327.167810][T18056] [ 1327.233170][T16224] usb 10-1: Using ep0 maxpacket: 32 [ 1327.242390][T16224] usb 10-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1327.267304][T16224] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.287410][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1327.301163][T16224] usb 10-1: config 0 descriptor?? [ 1327.417506][T12984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1327.553754][T16224] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1327.554641][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1327.587597][T16224] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1327.645246][T16224] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1327.655693][T16224] usb 10-1: media controller created [ 1327.702884][T16224] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1327.725694][T12984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1327.789637][T16224] az6027: usb out operation failed. (-71) [ 1327.801606][T16224] az6027: usb out operation failed. (-71) [ 1327.807382][T16224] stb0899_attach: Driver disabled by Kconfig [ 1327.844714][ T6882] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1327.859387][ T29] audit: type=1400 audit(2000000698.562:2001): avc: denied { create } for pid=18074 comm="syz.8.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1327.878381][T16224] az6027: no front-end attached [ 1327.878381][T16224] [ 1327.908515][ T29] audit: type=1400 audit(2000000698.590:2002): avc: denied { write } for pid=18074 comm="syz.8.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1327.929095][T16224] az6027: usb out operation failed. (-71) [ 1327.929115][T16224] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1327.930447][T16224] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input21 [ 1327.963255][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1327.989618][T18079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2586'. [ 1328.133784][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1328.170400][T16224] dvb-usb: schedule remote query interval to 400 msecs. [ 1328.177463][T16224] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1328.198515][T16224] usb 10-1: USB disconnect, device number 10 [ 1328.227308][ T29] audit: type=1400 audit(2000000698.871:2003): avc: denied { ioctl } for pid=5174 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3518 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1328.259670][ T29] audit: type=1400 audit(2000000698.918:2004): avc: denied { setopt } for pid=18083 comm="syz.8.2587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1328.282088][T12984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1328.859143][T15187] Bluetooth: hci3: command 0x0406 tx timeout [ 1328.931713][T16224] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1329.226652][T18109] netlink: 'syz.1.2595': attribute type 3 has an invalid length. [ 1329.235444][T18109] netlink: 'syz.1.2595': attribute type 1 has an invalid length. [ 1329.244396][T18109] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2595'. [ 1329.255001][T18109] NCSI netlink: No device for ifindex 33022 [ 1329.670129][ T29] audit: type=1400 audit(2000000700.255:2005): avc: denied { ioctl } for pid=18128 comm="syz.1.2605" path="socket:[47308]" dev="sockfs" ino=47308 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1329.800360][T16224] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1330.072097][T16224] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1330.082871][T16224] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1330.285969][T16224] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1330.360296][T16224] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1330.581737][T16224] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1330.597693][T16224] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1330.607047][T16224] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1330.628017][T16224] usb 1-1: Product: syz [ 1330.632228][T16224] usb 1-1: Manufacturer: syz [ 1330.641728][T16224] cdc_wdm 1-1:1.0: skipping garbage [ 1330.647097][T16224] cdc_wdm 1-1:1.0: skipping garbage [ 1330.757624][T18149] lo speed is unknown, defaulting to 1000 [ 1331.136183][T18149] lo speed is unknown, defaulting to 1000 [ 1331.267132][T16224] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1331.273082][T16224] cdc_wdm 1-1:1.0: Unknown control protocol [ 1331.768559][T18158] lo speed is unknown, defaulting to 1000 [ 1332.180767][T18158] lo speed is unknown, defaulting to 1000 [ 1332.337844][ T12] net_ratelimit: 21 callbacks suppressed [ 1332.337862][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1332.494505][ T61] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1332.612395][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1332.728818][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1332.846309][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1332.975866][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1333.105347][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1333.144962][ T5865] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1333.232361][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1333.307098][ T5865] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1333.333650][ T5865] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1333.348851][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1333.382057][ T5865] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1333.405913][ T5865] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1333.433591][ T5865] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1333.473502][ T5865] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1333.477204][ T6882] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1333.521745][ T5865] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1333.552023][ T5865] usb 10-1: Product: syz [ 1333.566153][ T5865] usb 10-1: Manufacturer: syz [ 1333.583912][ T5865] cdc_wdm 10-1:1.0: skipping garbage [ 1333.599617][ T5865] cdc_wdm 10-1:1.0: skipping garbage [ 1333.660005][ T25] usb 1-1: USB disconnect, device number 10 [ 1333.978399][ T5865] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1334.689640][ T5865] cdc_wdm 10-1:1.0: Unknown control protocol [ 1336.159009][ T5865] usb 10-1: USB disconnect, device number 11 [ 1336.678964][ T29] audit: type=1400 audit(2000000706.813:2006): avc: denied { setopt } for pid=18240 comm="syz.1.2633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1336.840728][ T29] audit: type=1400 audit(2000000706.934:2007): avc: denied { write } for pid=18248 comm="syz.9.2632" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1338.604743][T12984] net_ratelimit: 17 callbacks suppressed [ 1338.604764][T12984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1338.983710][ T6882] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1339.271476][ T6882] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1339.522982][T11255] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1339.761814][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1340.045574][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1340.103670][ T29] audit: type=1400 audit(2000000710.012:2008): avc: denied { read } for pid=18293 comm="syz.0.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1340.179457][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1340.313167][ T6243] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1340.385598][T18303] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2648'. [ 1340.479666][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1340.628258][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1341.460885][T18337] netlink: 'syz.4.2657': attribute type 10 has an invalid length. [ 1342.077840][T18346] lo speed is unknown, defaulting to 1000 [ 1342.497269][T18346] lo speed is unknown, defaulting to 1000 [ 1342.767200][T18356] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2661'. [ 1343.575526][T18368] binder: 18366:18368 ioctl 40046210 0 returned -14 [ 1343.783096][ T29] audit: type=1400 audit(2000000713.463:2009): avc: denied { getopt } for pid=18375 comm="syz.9.2668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1343.975156][T12985] net_ratelimit: 19 callbacks suppressed [ 1343.975176][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1344.124158][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1344.263157][ T12] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1345.106204][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1345.228690][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1345.462429][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1345.561074][T18398] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1345.610138][T12984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1346.060173][T12985] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1346.197084][T12984] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1346.231514][ T30] INFO: task syz.2.2150:15963 blocked for more than 143 seconds. [ 1346.240081][ T30] Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 1346.297194][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1346.371105][ T30] task:syz.2.2150 state:D stack:27504 pid:15963 tgid:15962 ppid:5831 flags:0x00004004 [ 1346.380856][ T1101] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 1346.381642][ T30] Call Trace: [ 1346.394211][ T30] [ 1346.401356][ T30] __schedule+0xe58/0x5ad0 [ 1346.421843][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1346.440569][ T30] ? __pfx___lock_acquire+0x1/0x10 [ 1346.485038][ T30] ? __pfx___schedule+0x10/0x10 [ 1346.866541][ T30] ? schedule+0x298/0x350 [ 1346.978535][ T973] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1347.022019][ T30] ? __pfx_lock_release+0x10/0x10 [ 1347.039215][ T30] ? lock_acquire+0x2f/0xb0 [ 1347.058431][ T30] ? schedule+0x1fd/0x350 [ 1347.071601][ T30] schedule+0xe7/0x350 [ 1347.092243][ T30] schedule_preempt_disabled+0x13/0x30 [ 1347.105134][ T30] rwsem_down_read_slowpath+0x61e/0xb20 [ 1347.115914][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1347.135169][ T30] ? super_lock+0x31a/0x3f0 [ 1347.143977][ T30] ? lock_acquire+0x2f/0xb0 [ 1347.148526][ T30] ? super_lock+0x31a/0x3f0 [ 1347.164872][ T30] down_read+0x124/0x330 [ 1347.173356][ T973] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1347.184192][ T973] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1347.194429][ T30] ? __pfx_down_read+0x10/0x10 [ 1347.200403][ T973] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1347.205797][ T30] ? sync_inodes_sb+0x6c4/0xa50 [ 1347.221084][ T973] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1347.230349][ T30] ? __pfx___might_resched+0x10/0x10 [ 1347.243032][ T973] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1347.248993][ T30] super_lock+0x31a/0x3f0 [ 1347.267937][ T30] ? __pfx_super_lock+0x10/0x10 [ 1347.272858][ T30] ? __pfx_lock_release+0x10/0x10 [ 1347.277745][ T973] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1347.278762][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 1347.287616][ T973] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1347.292742][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1347.306440][ T30] ? lock_acquire+0x2f/0xb0 [ 1347.311794][ T30] ? iterate_supers+0x11d/0x240 [ 1347.316677][ T30] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 1347.323161][ T30] iterate_supers+0xb9/0x240 [ 1347.327782][ T30] ksys_sync+0x8a/0x150 [ 1347.332473][ T973] usb 2-1: Product: syz [ 1347.332495][ T973] usb 2-1: Manufacturer: syz [ 1347.337986][ T973] cdc_wdm 2-1:1.0: skipping garbage [ 1347.341956][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 1347.353827][ T30] ? rcu_is_watching+0x12/0xc0 [ 1347.358627][ T30] ? do_syscall_64+0x91/0x250 [ 1347.364197][ T30] __do_sys_sync+0xe/0x20 [ 1347.368564][ T30] do_syscall_64+0xcd/0x250 [ 1347.373091][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.375911][ T973] cdc_wdm 2-1:1.0: skipping garbage [ 1347.379891][ T30] RIP: 0033:0x7f016b985d29 [ 1347.389513][ T30] RSP: 002b:00007f016c883038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1347.397831][ T973] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1347.398797][ T30] RAX: ffffffffffffffda RBX: 00007f016bb75fa0 RCX: 00007f016b985d29 [ 1347.412469][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1347.417164][ T973] cdc_wdm 2-1:1.0: Unknown control protocol [ 1347.420505][ T30] RBP: 00007f016bb75fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1347.434543][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1347.443653][ T30] R13: 0000000000000000 R14: 00007f016bb75fa0 R15: 00007ffcf070b148 [ 1347.452715][ T30] [ 1347.456226][ T30] INFO: task syz.2.2150:15968 blocked for more than 144 seconds. [ 1347.464903][ T30] Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 1347.472688][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1347.482364][ T30] task:syz.2.2150 state:D stack:28608 pid:15968 tgid:15962 ppid:5831 flags:0x00004004 [ 1347.577248][ T30] Call Trace: [ 1347.581526][ T30] [ 1347.584568][ T30] __schedule+0xe58/0x5ad0 [ 1347.590082][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1347.609451][ T30] ? __pfx___lock_acquire+0x1/0x10 [ 1347.627305][ T30] ? __pfx___schedule+0x10/0x10 [ 1347.713177][ T30] ? schedule+0x298/0x350 [ 1347.724512][ T30] ? __pfx_lock_release+0x10/0x10 [ 1347.737229][ T30] ? lock_acquire+0x2f/0xb0 [ 1347.746837][ T30] ? schedule+0x1fd/0x350 [ 1347.758356][ T30] schedule+0xe7/0x350 [ 1347.770511][ T30] schedule_preempt_disabled+0x13/0x30 [ 1347.789104][ T30] rwsem_down_read_slowpath+0x61e/0xb20 [ 1347.815597][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1347.841855][ T30] ? super_lock+0x31a/0x3f0 [ 1347.861988][ T30] ? lock_acquire+0x2f/0xb0 [ 1347.881092][ T30] ? super_lock+0x31a/0x3f0 [ 1347.885750][ T30] down_read+0x124/0x330 [ 1348.058227][ T30] ? __pfx_down_read+0x10/0x10 [ 1348.063930][ T30] ? sync_inodes_sb+0x6c4/0xa50 [ 1348.104282][ T30] ? __pfx___might_resched+0x10/0x10 [ 1348.164503][ T30] super_lock+0x31a/0x3f0 [ 1348.229907][ T30] ? __pfx_super_lock+0x10/0x10 [ 1348.338207][ T30] ? __pfx_lock_release+0x10/0x10 [ 1348.408147][ T30] ? do_raw_spin_lock+0x12d/0x2c0 [ 1348.422559][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1348.428646][ T30] ? lock_acquire+0x2f/0xb0 [ 1348.434454][ T30] ? iterate_supers+0x11d/0x240 [ 1348.440605][ T30] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 1348.470719][ T30] iterate_supers+0xb9/0x240 [ 1348.481336][ T30] ksys_sync+0x8a/0x150 [ 1348.485607][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 1348.495020][ T30] ? do_user_addr_fault+0x83d/0x13f0 [ 1348.507084][ T30] ? do_syscall_64+0x91/0x250 [ 1348.515330][ T30] __do_sys_sync+0xe/0x20 [ 1348.525504][ T30] do_syscall_64+0xcd/0x250 [ 1348.533682][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.541361][ T30] RIP: 0033:0x7f016b985d29 [ 1348.545883][ T30] RSP: 002b:00007f016c862038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1348.555733][ T30] RAX: ffffffffffffffda RBX: 00007f016bb76080 RCX: 00007f016b985d29 [ 1348.564988][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1348.573094][ T30] RBP: 00007f016bb76080 R08: 0000000000000000 R09: 0000000000000000 [ 1348.581087][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1348.589192][ T30] R13: 0000000000000001 R14: 00007f016bb76080 R15: 00007ffcf070b148 [ 1348.597928][ T30] [ 1348.601084][ T30] [ 1348.601084][ T30] Showing all locks held in the system: [ 1348.645037][ T30] 1 lock held by khungtaskd/30: [ 1348.763985][ T30] #0: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 1348.775745][ T30] 3 locks held by kworker/u8:4/61: [ 1348.780924][ T30] #0: ffff8880b863ebd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 1348.792049][ T30] #1: ffffc9000212fd80 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1348.805888][ T30] #2: ffffffff9aa18c88 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x13b/0x370 [ 1348.816610][ T30] 4 locks held by kworker/u8:6/1101: [ 1348.822054][ T30] #0: ffff888141ed3948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1348.833123][ T30] #1: ffffc90003effd80 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1348.845237][ T30] #2: ffff888032ed20e0 (&type->s_umount_key#51){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 1348.856226][ T30] #3: ffff888032ed4b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b3/0x820 [ 1348.869227][ T30] 1 lock held by dhcpcd/5483: [ 1348.874073][ T30] #0: ffffffff8fedcec8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x26e/0x1f50 [ 1348.884829][ T30] 2 locks held by getty/5572: [ 1348.889559][ T30] #0: ffff8880360a20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1348.899500][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 1348.909727][ T30] 1 lock held by syz-executor/5816: [ 1348.915196][ T30] #0: ffff88803200a0e0 (&type->s_umount_key#78){++++}-{4:4}, at: deactivate_super+0xd6/0x100 [ 1348.925645][ T30] 5 locks held by kworker/u8:5/11255: [ 1348.931065][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1348.941530][ T30] #1: ffffc9001518fd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1348.951582][ T30] #2: ffffffff8fec72d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xbb/0xbd0 [ 1348.965726][ T30] #3: ffffffff8fedcec8 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0x8c/0xae0 [ 1348.976294][ T30] #4: ffffffff8e1c7238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a4/0x3b0 [ 1348.994272][ T30] 1 lock held by syz.2.2150/15963: [ 1348.999496][ T30] #0: ffff88803200a0e0 (&type->s_umount_key#78){++++}-{4:4}, at: super_lock+0x31a/0x3f0 [ 1349.009433][ T30] 1 lock held by syz.2.2150/15968: [ 1349.014711][ T30] #0: ffff88803200a0e0 (&type->s_umount_key#78){++++}-{4:4}, at: super_lock+0x31a/0x3f0 [ 1349.024719][ T30] [ 1349.027082][ T30] ============================================= [ 1349.027082][ T30] [ 1349.042836][ T30] NMI backtrace for cpu 0 [ 1349.047219][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 1349.057739][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1349.067823][ T30] Call Trace: [ 1349.071121][ T30] [ 1349.074072][ T30] dump_stack_lvl+0x116/0x1f0 [ 1349.078871][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1349.083836][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1349.089843][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1349.095853][ T30] watchdog+0xf14/0x1240 [ 1349.100180][ T30] ? __pfx_watchdog+0x10/0x10 [ 1349.104886][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1349.110110][ T30] ? __kthread_parkme+0x148/0x220 [ 1349.115147][ T30] ? __pfx_watchdog+0x10/0x10 [ 1349.119828][ T30] kthread+0x2c1/0x3a0 [ 1349.123899][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1349.129093][ T30] ? __pfx_kthread+0x10/0x10 [ 1349.133682][ T30] ret_from_fork+0x45/0x80 [ 1349.138102][ T30] ? __pfx_kthread+0x10/0x10 [ 1349.142690][ T30] ret_from_fork_asm+0x1a/0x30 [ 1349.147463][ T30] [ 1349.151214][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1349.156517][ C1] NMI backtrace for cpu 1 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 1349.173790][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1349.180662][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00046-g0b7958fa05d5 #0 [ 1349.191175][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1349.201251][ T30] Call Trace: [ 1349.204539][ T30] [ 1349.207478][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1349.212088][ T30] panic+0x71d/0x800 [ 1349.216002][ T30] ? __pfx_panic+0x10/0x10 [ 1349.220440][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1349.225832][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1349.231838][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1349.237236][ T30] ? watchdog+0xd7e/0x1240 [ 1349.241680][ T30] ? watchdog+0xd71/0x1240 [ 1349.246120][ T30] watchdog+0xd8f/0x1240 [ 1349.250387][ T30] ? __pfx_watchdog+0x10/0x10 [ 1349.255078][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1349.260275][ T30] ? __kthread_parkme+0x148/0x220 [ 1349.265291][ T30] ? __pfx_watchdog+0x10/0x10 [ 1349.269967][ T30] kthread+0x2c1/0x3a0 [ 1349.274050][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1349.279261][ T30] ? __pfx_kthread+0x10/0x10 [ 1349.283871][ T30] ret_from_fork+0x45/0x80 [ 1349.288299][ T30] ? __pfx_kthread+0x10/0x10 [ 1349.292908][ T30] ret_from_fork_asm+0x1a/0x30 [ 1349.297715][ T30] [ 1349.300949][ T30] Kernel Offset: disabled [ 1349.305257][ T30] Rebooting in 86400 seconds..