last executing test programs: 18m58.327212118s ago: executing program 32 (id=43): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x1c, r1, 0x301, 0x70bd2c, 0x25dfdc00, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x404c880) 15m51.02675176s ago: executing program 33 (id=2007): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) io_submit(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0x2201, 0x0) 15m42.396321326s ago: executing program 34 (id=2080): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0xe5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xf}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 15m42.291251298s ago: executing program 35 (id=2081): syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1c0000f5000002"], 0xfce) 13m6.816082852s ago: executing program 36 (id=3348): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x86) fchdir(r1) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 11m35.202921344s ago: executing program 6 (id=4126): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000640)) 11m33.97211258s ago: executing program 6 (id=4139): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) getsockopt(r0, 0x1, 0x24, 0x0, &(0x7f0000000300)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff2}, {0xffff, 0x10}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x920, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 11m33.203215229s ago: executing program 6 (id=4149): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) semctl$GETVAL(0x0, 0x2, 0xc, 0x0) 11m32.710007232s ago: executing program 6 (id=4153): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x5040, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 11m32.303936266s ago: executing program 6 (id=4157): bind$inet6(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x4, 0x4) readv(r1, &(0x7f0000003600)=[{&(0x7f0000002340)=""/138, 0x8a}], 0x1) 11m31.00440878s ago: executing program 6 (id=4167): socket(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5842) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2a, 0x8, 0x2, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x309}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x2, 0x20367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 11m30.65464677s ago: executing program 37 (id=4167): socket(0x10, 0x3, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5842) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9e2a, 0x8, 0x2, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x309}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20000, 0x2, 0x20367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x2, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 8m5.236794726s ago: executing program 7 (id=5336): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000080)={0x1d, r3}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x25dfdbfc, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 8m4.548629708s ago: executing program 7 (id=5339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x37, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xffffff9e, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x4, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x480}}}]}]}]}]}], {0x14, 0x10}}, 0xe4}}, 0x0) 8m3.474836743s ago: executing program 7 (id=5341): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 8m2.419686803s ago: executing program 7 (id=5346): syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000003a000100faff07000400000001"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x2) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000700)=""/4109, 0x100d}], 0x20) 8m2.179217538s ago: executing program 7 (id=5349): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x8c, 0x2c, 0xd2f, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x60, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0x54, 0x5, {0x4, 0x8, 0x4, 0x4, 0x2, 0x4, 0x6, 0x769, [{0x40, 0x2, 0x80000000, 0x401}, {0xfffffff9, 0x9, 0x2, 0x8}, {0x7, 0x7, 0x101, 0x2}, {0x1, 0x6, 0xfffffffc, 0xffff}]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 8m1.51014139s ago: executing program 7 (id=5352): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x8}, 0x1c) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 7m46.303020398s ago: executing program 38 (id=5352): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x8}, 0x1c) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 6m7.543345317s ago: executing program 4 (id=5700): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) prlimit64(0x0, 0xe, 0x0, 0x0) 6m5.74524424s ago: executing program 4 (id=5706): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4a046) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002000000", @ANYRES32=0x1], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x99, 0x0, 0x0, 0x10000, 0x1, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6m1.238357301s ago: executing program 4 (id=5714): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1}, 0x2000600d) 5m51.586668964s ago: executing program 4 (id=5744): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324900007f00000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000000)=0x7d8, &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f00000005c0)=""/201, &(0x7f0000000380), &(0x7f0000000300), 0x2, r4}, 0x38) 5m49.87606997s ago: executing program 4 (id=5746): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = epoll_create1(0x80000) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) close(r2) r3 = epoll_create1(0x0) dup2(r1, r0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 5m47.73463413s ago: executing program 4 (id=5756): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sync() socket(0x1, 0x803, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0x7, 0x0, 0x40000000007, 0x6811221d, 0xb, 0x7fffffffffffffff, 0x200000200000003, 0xd}, {0x7, 0xfffffffffffffffd, 0x6, 0x7}, 0x401, 0x0, 0x1, 0x0, 0x6}, {{@in=@loopback, 0x0, 0x6c}, 0xa, @in6=@remote, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 5m31.818801459s ago: executing program 39 (id=5756): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sync() socket(0x1, 0x803, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0x7, 0x0, 0x40000000007, 0x6811221d, 0xb, 0x7fffffffffffffff, 0x200000200000003, 0xd}, {0x7, 0xfffffffffffffffd, 0x6, 0x7}, 0x401, 0x0, 0x1, 0x0, 0x6}, {{@in=@loopback, 0x0, 0x6c}, 0xa, @in6=@remote, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 4m30.828207027s ago: executing program 0 (id=5953): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000000)={0x0, 0xffff, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x20001fe, r2, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) 4m25.37734029s ago: executing program 0 (id=5963): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000004240)={{}, {0x1, 0x5}, [], {0x4, 0x2}, [{0x8, 0x5}], {0x10, 0x5}, {0x20, 0x2}}, 0x2c, 0x3) socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000) openat$sndseq(0xffffffffffffff9c, 0x0, 0xa8c01) getxattr(&(0x7f0000005140)='./file0\x00', &(0x7f0000005180)=@known='system.posix_acl_access\x00', &(0x7f00000051c0)=""/47, 0x2f) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m24.626491226s ago: executing program 0 (id=5965): add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n', @ANYRES32=r7, @ANYBLOB], 0x44}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x60, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 4m23.510521478s ago: executing program 0 (id=5969): unshare(0x6a040000) socket$packet(0x11, 0x2, 0x300) syz_open_dev$sg(0x0, 0x0, 0x401) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000480)={0xa, 0xfffe, 0x6, @dev={0xfe, 0x80, '\x00', 0x21}, 0x5}, 0x1c) r1 = dup2(r0, r0) sendmmsg$unix(r1, &(0x7f0000008380), 0x400000000000174, 0x4008890) r2 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) openat$drirender128(0xffffffffffffff9c, 0x0, 0x515240, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) socket$kcm(0x2, 0xa, 0x2) sendmmsg$inet(r2, &(0x7f0000000f40), 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) 4m17.498493339s ago: executing program 0 (id=5977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0xac}, 0x1, 0x0, 0x0, 0x40488c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {}, {0x4, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80000000, 0x7, 0x3, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200d1eb14120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4m16.088713642s ago: executing program 0 (id=5978): socket(0x1, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x9}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000200)=ANY=[], 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) 4m0.643053071s ago: executing program 40 (id=5978): socket(0x1, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x200, @mcast1, 0x9}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000200)=ANY=[], 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) 1m40.236601008s ago: executing program 9 (id=6270): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x49) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) io_uring_setup(0x25e, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x400, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x1, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x800, 0x1, 0x0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x81000fff, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400"], 0x7c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) 1m29.385791508s ago: executing program 9 (id=6293): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000004000000040000000600000000000000", @ANYRES32, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB='\x00'/28], 0x50) r2 = socket$inet(0x2, 0x3, 0x6) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r2}, 0x20) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x10000388, 0x41d8fda7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000467de9e200c0dd6600fcff182000000000", @ANYRES32=r4, @ANYBLOB="14000200fc00"/20], 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) unshare(0x20000400) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) getsockopt$inet_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000001280)=""/247, &(0x7f0000000200)=0xf7) write$sndseq(r5, &(0x7f0000001100)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5}, {0xff}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x10, 0x0, 0x0, 0x0, @time={0x5, 0x5a8fbae9}, {}, {0x0, 0x80}, @control={0x0, 0x800000}}, {0x0, 0x0, 0x0, 0x0, @tick=0x1, {}, {}, @time=@time={0x8, 0xa}}], 0x70) 1m23.656821212s ago: executing program 9 (id=6302): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(&(0x7f0000000280)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0|\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x14\xcd>i\xe4\xf5\x1dr\x16)Gj\xbf\x99[&u\xad\x93\x8fC\xb6q\xcf\x1f\xbc\xa3\xe5\xa5\xf0\x8b\xa3\xcd\xd5\xd5\xc0Hi\xf0Y\x93#h\x99\x83\xaf\xf6\xee\x91\xb6\xab2\xaa4/!ul\xe1\xa6\xd8\x93\xef9\xea\xb4p\xad\xfeT\x8b\xb7j\xe9\x92\x98#g$\xdee^E\xe1\x88l\x829T\xf9\x85\xb3jC\"\xc3ra\x002\xfe\x8e^\xdc\xc2\xdc\xc8\xf3\xa8@~\xac_\x8bL\xa1\xbde2k\x92\xc3\xc8\xfa\x85u\x9c\xe2\x8e\xa7\xdb\xb9Q=n\xe0]\xa8\x88\xf8\xc9\x8b\xb2\xd5\xfb\x99', 0x1) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) 1m22.545812391s ago: executing program 9 (id=6303): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x368, 0xffffffff, 0x1a0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xffffff00, 0xffffffff, 0xffffffff], [0xffffffff, 0x0, 0xffffff00, 0xffffff00], 'veth0_to_bridge\x00', 'macvlan0\x00', {}, {}, 0x88, 0x40, 0x2}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x2}, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0x0, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0x32, 0xe7, 0x4, 0x44}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@hl={{0x28}, {0x3, 0x80}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) close(r4) getpriority(0x2, 0x0) 1m21.234629808s ago: executing program 9 (id=6307): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x50) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x22080, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) statx(0xffffffffffffff9c, 0x0, 0x800, 0x40, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x50ef, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) close_range(r3, 0xffffffffffffffff, 0x0) 1m19.54600602s ago: executing program 9 (id=6313): socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0xe6cc0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone3(&(0x7f00000004c0)={0x10000000, 0x0, 0x0, 0x0, {0x25}, &(0x7f0000000240), 0x0, &(0x7f0000000400)=""/112, &(0x7f0000000480)=[r1, r1], 0x2, {r0}}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x68002, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x7, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x9, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba54, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x19a2, 0x0, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x0, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x6, 0x100, 0x400003ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0x1, 0x101, 0x0, 0x2, 0x4, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x22, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000001, 0x1000080, 0x8, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x7, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0xf5, 0x2], [0x108e, 0x7fff, 0x3, 0x3, 0x84, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0xc, 0x8a8, 0x2, 0x40, 0x4000007, 0x2, 0x4, 0x10000, 0x12, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x4, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 1m4.022731419s ago: executing program 41 (id=6313): socket(0x2, 0x80805, 0x0) shutdown(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0xe6cc0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(0x0, 0xe, 0x0, 0x0) syz_clone3(&(0x7f00000004c0)={0x10000000, 0x0, 0x0, 0x0, {0x25}, &(0x7f0000000240), 0x0, &(0x7f0000000400)=""/112, &(0x7f0000000480)=[r1, r1], 0x2, {r0}}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x5, 0x8, 0x2, 0x5334, 0x68002, 0x80000000, 0x8ef7, 0x8, 0x0, 0x6, 0xf5, 0x7, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x9, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba54, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0x8, 0x4, 0x2, 0x0, 0x8, 0x1009, 0x1, 0x19a2, 0x0, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x7, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x27, 0xfffffffc, 0x0, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x6, 0x100, 0x400003ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0x1, 0x101, 0x0, 0x2, 0x4, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0xb, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0x34711b8a, 0xcd4, 0xffff, 0x22, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3, 0x1000, 0x2, 0xe, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x7, 0x9, 0x2, 0x20000001, 0x1000080, 0x8, 0xb, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x7, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0xf5, 0x2], [0x108e, 0x7fff, 0x3, 0x3, 0x84, 0x2, 0x6, 0x4, 0x40, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x8e8, 0x5, 0x9, 0x4, 0xe47, 0x4, 0x0, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0xc, 0x8a8, 0x2, 0x40, 0x4000007, 0x2, 0x4, 0x10000, 0x12, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x4, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) write$input_event(r3, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 20.093165548s ago: executing program 2 (id=6433): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x100000, 0x1, &(0x7f0000006680)) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ff9c, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 18.092207628s ago: executing program 3 (id=6435): syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_buf(r0, 0x3a, 0x20, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/4, 0x4}], 0x1}, 0x4}], 0x1, 0x40000121, 0x0) r2 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x90903, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x49875, 0x3}, [@IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) 15.670989635s ago: executing program 8 (id=6437): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x24000, 0x0) mkdirat$cgroup(r3, &(0x7f0000000000)='syz1\x00', 0x1ff) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000003c0)={@llc={0x1a, 0x230, 0x6, 0xee, 0x6, 0xd2, @broadcast}, {&(0x7f0000000280)=""/172, 0xac}, &(0x7f0000000380), 0x10}, 0xa0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) 15.394595554s ago: executing program 2 (id=6438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x5, 0x0, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x404c010) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r2, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) accept(0xffffffffffffffff, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout}]}}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 14.284897861s ago: executing program 5 (id=6440): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x482, 0x0) syz_io_uring_setup(0x2af8, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=[@rthdr_2292={{0x18, 0x29, 0x39, {0xff, 0x0, 0x2, 0x1}}}, @rthdr={{0x28, 0x29, 0x39, {0x33212f25b1bd33bf, 0x2, 0x2, 0x1, 0x0, [@dev={0xfe, 0x80, '\x00', 0xc}]}}}], 0x40}}], 0x1, 0x4040084) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x25dfdbff, {0x0, 0x0, 0x4a00, 0x0, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x45844}, 0x8890) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f00000000c0), 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r3, 0x80047210, &(0x7f0000000100)) 14.283297485s ago: executing program 8 (id=6441): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x8000000, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0xa1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x298, 0xffffffff, 0x168, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0x70, 0x98, 0x0, {0x88000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xd0, 0x0, {0x122}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, {0x0, [0x0, 0x0, 0x0, 0x1]}}}}, {{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x4, 0x2, 0x47}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) close(r0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000000)={0x6, 0x8}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r8, 0x1) 10.606310459s ago: executing program 3 (id=6442): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x28004044, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) syz_open_dev$I2C(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) open_tree(0xffffffffffffffff, 0x0, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r4, r4}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5414, &(0x7f00000000c0)) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) 10.390289669s ago: executing program 3 (id=6443): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, r5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msync(&(0x7f0000ff9000/0x6000)=nil, 0x6000, 0x4) timer_create(0x6, &(0x7f00000010c0)={0x0, 0xd, 0x1, @thr={&(0x7f0000000000)="1a9729bf6dbe50a0ed9d074c5b06844d47d03a1bdbf5eb66176202320dacd7d3bd4eae41c0cfb63d0ed4011d293b568ddf183d39556b6590759eb82b2f15d51b0cc0a7aba9963da369912d383db4e6a8ce02ee6d4967de245f1c9676fe1ef98322829e5c16bda95fd25f3a9976abd4d1772aa69a1622a17ac3836f092966eab5c1d68e4e7d5ebe71c04c2370d7dd8a6c5fd63b763b9fa804af9f", &(0x7f00000000c0)="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"}}, &(0x7f0000001100)) 9.054251338s ago: executing program 3 (id=6444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) unshare(0x2c020400) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) r4 = open$dir(0x0, 0x581, 0x80) mount_setattr(r4, &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f0000000480)={0x70, 0x71, 0xe0000}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x4f, 0x0, [{0x2c5, 0xed}]}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x58, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1c}}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x7}]}}}]}, 0x58}}, 0x0) 8.896410097s ago: executing program 8 (id=6445): socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0xa8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) fcntl$addseals(r1, 0x409, 0x3) close(0x3) open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x1, 0x0, 0x2000}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) pselect6(0x40, &(0x7f0000004f40)={0x9, 0x100000000000, 0x9, 0xa3e8, 0x0, 0x5, 0x7fb, 0x1ac}, 0x0, 0x0, 0x0, 0x0) 8.785987236s ago: executing program 2 (id=6446): socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b///o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 8.655990107s ago: executing program 1 (id=6448): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socket(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f0000000140)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000340)="b92014c222ee", 0x6}], 0x1}}], 0x1, 0x20000840) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x6}) semctl$IPC_RMID(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) 7.754148955s ago: executing program 2 (id=6449): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x49, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000007880)=""/102400, 0x19000) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newtaction={0xb0, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x9, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x48, 0x2, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x3, 0x6, 0xffffffff, 0x3}}]}, {0xfffffd12}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) r2 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000)=0x2, 0x4) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c0000000400000004000000090000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000072d91792fe3514586958b362"], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x8001, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000300)={0x4000000, 0xfffffd18, 0x0, 0x2, 0x80000000}) 7.214536304s ago: executing program 5 (id=6450): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x80000000000000a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x27, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x14000040}, 0x8800) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) setsockopt$inet_group_source_req(r0, 0x0, 0x15, 0x0, 0x0) 6.508012427s ago: executing program 8 (id=6451): mount$bind(0x0, 0x0, 0x0, 0x8bc91, 0x0) userfaultfd(0x801) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_IOAS_UNMAP$ALL(r5, 0x3b86, &(0x7f0000000240)={0x18, r6}) ppoll(&(0x7f0000000040)=[{r4, 0xb00}], 0x1, 0x0, 0x0, 0x0) read$dsp(r4, &(0x7f0000003200)=""/4088, 0x57d) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRESDEC=r4, @ANYBLOB="010003000000000000000100000008000100020000002400048005000500020000000500030001000200050003000200000005000300010000000800020002"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x20000080) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x6008009}, 0x10) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback, 0x2000}, 0x1c) sendto$inet6(r1, &(0x7f0000000300)="285ca302a3ca8c7d1fb12e88faf2d9c8e3f48fdf4b8614f3f92d95cd76526fb96110a6ec1abb78505e403848bfc5c5d1f2490e74e1c87834616f58817739f8471a8d988ec158ef3089616e423133a87ad1c9558caf9098b45599e4aeade83d940fe02b89a0bd0ddd0b3d45471ae53a740f28ce10e3ca98c6ba575ccf03235cc56f2ba5b21f975663b98c4ef352d15c79cfe5de34cddaea3dbd4f5bf8120582a2edf3eeef148ac9e85bd62dc00a7093", 0xaf, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 5.516193473s ago: executing program 5 (id=6452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgid(0xee00) syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') syz_open_procfs(0x0, &(0x7f0000000400)='stat\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = dup3(r5, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840) 5.370007811s ago: executing program 1 (id=6453): bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000240), 0x0, 0x51, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, 0x8) accept4(r1, 0x0, 0x0, 0x80800) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001"], 0x64}}, 0x0) 4.699066793s ago: executing program 2 (id=6454): socket$kcm(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) flock(r1, 0x2) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x20000000) pipe(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000340)=""/234, 0xea) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 4.011728919s ago: executing program 5 (id=6455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0) 3.985650342s ago: executing program 8 (id=6456): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mq_timedreceive(r0, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x200000000000008, 0xa7c7}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.776302638s ago: executing program 2 (id=6457): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000002c0)=0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xfe) futex(&(0x7f000000cffc)=0x3, 0x5, 0xffffffff, 0x0, &(0x7f0000000000)=0x80000003, 0x4fffffe) close(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000010400)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r0, 0x40105870, &(0x7f0000000040)={0x877e, 0x1}) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x800) syz_clone3(&(0x7f0000000080)={0x105824100, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.732034216s ago: executing program 1 (id=6458): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x1e, 0x4, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) socket$packet(0x11, 0x3, 0x300) landlock_create_ruleset(&(0x7f0000000180)={0x8201, 0x3}, 0x30, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x11, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2.529874167s ago: executing program 5 (id=6459): r0 = io_uring_setup(0x6d8d, &(0x7f0000000380)={0x0, 0x552, 0x10, 0x3, 0xc3}) r1 = syz_io_uring_setup(0x34bc, &(0x7f0000000200)={0x0, 0x5410, 0x80, 0x1, 0x80, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000000c0)=0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001040)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c8, 0x0, 0x12, 0x600, 0x0, 0x202, 0x1f8, 0x2e8, 0x2e8, 0x1f8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'team0\x00', {}, {0xff}}, 0x0, 0x108, 0x128, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x800, 0x4, 0x146ee, 0x8b46, 0x9af, 0x24}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x79, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x328) fsync(r5) r7 = socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000cb6fcf20d813200031f7000000010902120001800000000904"], 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r9, 0x1, 0x6, @multicast}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r10, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x658, 0x2, 0x0, 0x355, 0x0, r1}, &(0x7f0000000400)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc94, 0x80000, 0x0, 0x193, 0x0, r1}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfbd6, 0x4, 0x80003, 0x32d, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf8cd, 0x400, 0x2, 0x36e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4e1, 0xa000, 0x2, 0x341, 0x0, r0}}], 0x4, &(0x7f0000001680)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x0, 0x2ba, 0x0, &(0x7f0000001740)=@buf_4k="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"}}, &(0x7f0000001700)) r12 = memfd_secret(0x80000) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x0, {0x4}, 0x0, {0x0, r13}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 2.295445142s ago: executing program 1 (id=6460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x8, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xc, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 1.378640746s ago: executing program 1 (id=6461): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000100)=0x2, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, @void}, 0x10) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000140)={0x6, 0x5, 0xfffffffb, 0x3, 0xd, "4e51d01d5236922570b08e53c9119bbedc290f"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x884, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x8, 0x65, 0x2, 0x4d, {0x1, 0x2, 0x2, 0x3, 0x3, 0x4}, {0x5, 0x0, 0x400, 0xab, 0x0, 0x9}, 0x2, 0x6, 0x8000}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x7fffffff, 0x8, 0x7ff, 0x3, 0x2, 0x1, 0x401, 0xb9, 0xace, 0x0, 0x1, 0x9, 0x43, 0x7, 0x2, 0x0, 0x1ce00000, 0x7, 0x6, 0x103, 0x3, 0x1c000, 0x1ff, 0x2, 0x6, 0x9b16, 0x6, 0x100, 0x15a, 0xe, 0x40, 0x5, 0x4, 0x80000001, 0x4a, 0x1, 0x8, 0x99a9, 0x340d, 0x3, 0x2, 0x7, 0xd, 0x400, 0xfffffffa, 0x6, 0x100, 0x0, 0x5, 0x5, 0x2, 0xffff0001, 0x2, 0xdd1, 0x9, 0xfb, 0x4, 0xf, 0x324, 0x6, 0x3, 0x6, 0xff, 0x8, 0x401, 0x7fffffff, 0x4, 0x5, 0x800, 0x8261, 0x3, 0x6, 0x8, 0x2, 0x9, 0x4, 0x4, 0x6, 0x5, 0xf, 0x9, 0x38c8, 0x80000001, 0x4, 0xa11, 0x6, 0x8, 0x604, 0xfff, 0xab, 0x7, 0x5, 0x8, 0x1, 0x9, 0x401, 0x0, 0x4, 0x1ff, 0x4, 0x17, 0xffffff7f, 0x7c, 0x4, 0x4, 0xa42, 0xfffffff7, 0x4, 0x5b564ea6, 0xaa32, 0x2, 0x2, 0x4000008, 0x1ff, 0x5, 0x3, 0x7, 0x6, 0xfffff000, 0x12aeb60c, 0x4, 0xbb6, 0x1, 0x3, 0x5, 0x2, 0x3, 0x85, 0x10, 0x1, 0x5, 0x1, 0x10004, 0xb, 0xf65, 0x1d7, 0x9, 0x100, 0x0, 0x0, 0xc2, 0x1, 0x3, 0xffffffff, 0x1ff, 0x1, 0x30bb, 0x7, 0x40, 0xfffffff8, 0x5, 0x2, 0x1, 0x8, 0x8000, 0x5, 0x4, 0x31e, 0xffff8001, 0x6, 0xff, 0xa, 0x1ff, 0x9, 0x7, 0x7, 0x2, 0x412, 0x6, 0xf441, 0x6, 0x1, 0x7, 0x89, 0x3, 0x5, 0x0, 0x9, 0x7, 0x1, 0x4, 0x0, 0x4, 0x4, 0x200, 0x1, 0x720a, 0xff7f, 0xfff, 0x9, 0x7fff, 0x8, 0x3ac8efcb, 0x8, 0xf2c, 0x7, 0x80000000, 0x12, 0xfffff802, 0x2e4, 0x7, 0xfffffff9, 0x400, 0x4, 0x30, 0x10000, 0xfd, 0x4, 0x1, 0x5, 0x7, 0x0, 0x7, 0x47, 0x0, 0x0, 0x1, 0x7, 0x0, 0x8, 0x3, 0x6, 0x0, 0x10001, 0x0, 0xe9, 0x5, 0x1, 0x4, 0xaacc, 0x6f, 0x7fffffff, 0x5, 0x6, 0x2, 0xffff, 0x4, 0x10000, 0x9, 0xe, 0x45e8, 0x9, 0xfffffff8, 0x6, 0x100, 0x5, 0xe, 0x73d, 0x31, 0x3, 0x0, 0x2, 0x3, 0xb70, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff7, 0x5, 0x7, 0x4, 0x2, 0x6, 0x1, 0xfb0, 0x8, 0x3, 0x5, 0x3, 0x0, 0x4, 0x9a, 0x9, 0x7, 0xfff, 0x7, 0x40, 0x5, 0x7fff, 0x6c, 0x3, 0x5, 0x7ff, 0x4, 0x2, 0x7, 0x2, 0x83d, 0x2, 0x3b, 0x4, 0x0, 0x4, 0x9, 0xc, 0x1cabbb02, 0x4, 0x4, 0x2, 0x8001, 0x7fff, 0x80000000, 0x10000, 0xffff8906, 0x7fffffff, 0x0, 0x0, 0x9, 0xc0000000, 0x2, 0x6, 0x83, 0x3, 0x10000, 0x3, 0x1, 0x6, 0x0, 0x1, 0x100, 0xcc2, 0x3800, 0x6, 0x18, 0x0, 0xfffffe00, 0x3, 0x6, 0x4, 0x3, 0x7, 0x1, 0xfffffffc, 0x8e4, 0xf5c1, 0x1, 0x5077, 0x3, 0x5, 0x7fff, 0x2, 0x4, 0x2, 0x3, 0x401, 0x6, 0x40, 0x7, 0x95, 0x5, 0x200, 0x1, 0x2, 0x7ff, 0x4, 0x8, 0xb, 0x6, 0x2, 0x0, 0xd266, 0x4, 0x0, 0x10001, 0x2, 0x101, 0x401, 0x200, 0x6, 0x1, 0x4a, 0x8, 0x2, 0xfffffffe, 0x14e, 0x4, 0x3, 0x1, 0x2, 0x94e6, 0xfffffbff, 0x5, 0x2, 0xfffd, 0xc, 0x4, 0x2, 0x40800000, 0x1f, 0x4, 0xffffffff, 0x800, 0x401, 0x3ff, 0x7ff, 0x101, 0x10, 0x5, 0x374, 0xc2f, 0x3, 0xffffff81, 0xfffffff7, 0x6, 0x8000, 0x8, 0x1, 0x1, 0x200, 0xcae, 0xc64, 0xffff, 0x7fff, 0x1, 0x8, 0x3c0, 0x9, 0x0, 0x6d3, 0xfffffff3, 0x9, 0x476b3752, 0xff, 0x0, 0x9, 0x7ff, 0x4, 0x3, 0x4, 0x7, 0x7249, 0x7, 0xffff8001, 0x95f, 0x8, 0x0, 0x1000, 0x800, 0x0, 0xfff, 0xf2, 0x0, 0x3, 0xffff, 0x0, 0x0, 0x8000, 0x9, 0x4, 0xcc6, 0xffe01000, 0x22, 0xd56, 0xfffffff0, 0x3bb8, 0x10, 0x140, 0x81, 0x9, 0x40, 0x2, 0x2, 0x4, 0x3, 0x0, 0x3, 0xf, 0x0, 0xc527, 0x9, 0x8, 0x1, 0xffff86fd, 0x7, 0x2, 0x8, 0x3, 0x9, 0x5, 0x0, 0x4, 0xc12, 0x7f, 0x0, 0x0, 0x80000000, 0x6f3, 0x7, 0x9, 0x7, 0x9, 0x4, 0x2, 0xc9, 0xaf8, 0x3, 0x80000000, 0xad8c, 0x4, 0x2, 0xea9, 0x9a1, 0x5, 0x1, 0x4, 0x8, 0x5, 0x10000, 0x3, 0x7fb, 0xdbbb, 0x4, 0x2]}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 1.042784612s ago: executing program 3 (id=6462): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x0, 0x0, 0x3f8, 0x1, 0x32, 0x0, 0x7}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)='X', 0x1, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0xffffffff, 0x3, 0x5, 0x0, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) readlinkat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) sched_rr_get_interval(0x0, &(0x7f0000000300)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1000000017142d71"], 0x10}}, 0x80) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x83, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x1000000000000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0xc020) 272.079697ms ago: executing program 1 (id=6463): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000001b00)={0xffffffff, 0x48574653, 0x1, @discrete={0x1, 0x100}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket(0x1d, 0x2, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 16.17784ms ago: executing program 8 (id=6464): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5e7b000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04140601c9"], 0x9) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r0, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r4, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a0878"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 0s ago: executing program 3 (id=6465): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) setreuid(0xffffffffffffffff, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x1) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f045, 0x2000}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x7e, 0x2, 0x3, 0x80000000, 0x20000006, 0x4f, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x8000024, 0xd, 0x7, 0xfffffffc, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x88, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x1006, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bc, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0xd, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x80000, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x10000, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0xc, 0x9, 0x8, 0x9, 0x6, 0x43, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x6, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x63fa0f21, 0x7, 0x5, 0xfffffffe, 0xfe, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0x100b, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x27ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0x100, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7b, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x223, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0xdd3, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000140)={@empty, @empty, 0x0, "1c6804d4a58b85e13e66ab6fafd10df8ab973be71cc99e43030305633956c3c4", 0xfffffc00, 0x9, 0xfffff536, 0xde5}, 0x3c) kernel console output (not intermixed with test programs): enabling it in 0 ms [ 970.496682][ T9292] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 971.167150][T16090] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 971.229728][T16069] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 971.244666][ T29] audit: type=1400 audit(1784035746.149:1716): avc: denied { write } for pid=24279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 971.393953][T16069] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 971.737568][ T47] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 971.747538][ T47] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 971.870069][T24341] : renamed from bond_slave_0 (while UP) [ 971.871167][ T47] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 973.332289][ T29] audit: type=1400 audit(1784035748.239:1717): avc: denied { write } for pid=24344 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 973.770894][ T5273] 8021q: adding VLAN 0 to HW filter on device eth12 [ 974.844841][ T1162] net_ratelimit: 35 callbacks suppressed [ 974.844861][ T1162] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 974.859906][T24369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5994'. [ 974.908217][T24369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5994'. [ 974.946122][ T1162] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 974.996415][T16074] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 975.036487][T16090] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 975.086151][T16074] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 975.136019][T16090] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 975.188545][T16090] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 975.245982][T16069] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 975.289232][T24358] 8021q: adding VLAN 0 to HW filter on device team0 [ 975.316036][T16069] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 975.349747][T24358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 975.377425][T16050] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 976.868105][ C0] bridge0: port 3(dummy0) entered forwarding state [ 976.874637][ C0] bridge0: topology change detected, propagating [ 977.933273][T24358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.025384][T24358] veth1_macvtap: left promiscuous mode [ 978.044062][T24358] veth0_macvtap: left promiscuous mode [ 978.167048][T24358] veth0_macvtap: entered promiscuous mode [ 978.184225][T24358] veth1_macvtap: entered promiscuous mode [ 978.214241][T24358] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 978.311032][T24392] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6002'. [ 978.591953][T24358] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 978.635221][T24358] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 978.681621][T24358] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 979.352272][T24358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 979.369517][T24358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 979.404520][T24358] 8021q: adding VLAN 0 to HW filter on device bond2 [ 979.448312][T24358] 8021q: adding VLAN 0 to HW filter on device bond3 [ 979.484498][T24358] 8021q: adding VLAN 0 to HW filter on device bond4 [ 979.524284][T24358] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 979.660028][T24358] bridge2: left promiscuous mode [ 979.777441][T24358] 8021q: adding VLAN 0 to HW filter on device bond5 [ 979.808036][T24358] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 979.850612][T16080] net_ratelimit: 94 callbacks suppressed [ 979.850644][T16080] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 979.872802][T24358] 8021q: adding VLAN 0 to HW filter on device bond6 [ 979.878057][T24407] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 979.882618][T24358] bridge0: port 4(vlan2) entered blocking state [ 979.893186][T24358] bridge0: port 4(vlan2) entered forwarding state [ 979.917405][T24407] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 979.923222][T24358] 8021q: adding VLAN 0 to HW filter on device bond7 [ 979.931293][T16082] bond6: (slave bridge3): link status up again after 0 ms [ 979.940054][T22009] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 979.943151][T24407] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 979.963682][T22009] syú2: Port: 1 Link ACTIVE [ 979.983545][ T1162] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 980.012894][T24407] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 980.020603][T16080] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 980.032592][T24407] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 980.036493][T16094] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 980.053293][ T5798] bridge2: entered promiscuous mode [ 980.084062][ T9292] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.094395][ T9292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.176807][ T1162] bond6: (slave bridge3): link status up again after 0 ms [ 980.188730][ T9292] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.195918][ T9292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.203913][T16082] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 980.225966][T16080] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 980.238502][ T1162] bond6: (slave bridge3): link status up again after 0 ms [ 980.256155][T16080] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 980.421984][ T9292] bridge4: port 1(veth15) entered blocking state [ 980.428480][ T9292] bridge4: port 1(veth15) entered forwarding state [ 980.485496][ T9292] bridge4: port 2(veth17) entered blocking state [ 980.491990][ T9292] bridge4: port 2(veth17) entered forwarding state [ 980.562720][ T9292] bridge0: port 3(team0) entered blocking state [ 980.569139][ T9292] bridge0: port 3(team0) entered forwarding state [ 980.645017][T16098] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.670591][T16098] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.705667][T16098] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 980.872353][T16098] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 980.912037][T16098] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.934844][T16098] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 982.227411][ T5627] Bluetooth: hci2: command tx timeout [ 982.441504][T16074] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.485773][T16074] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.524235][T16074] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 982.642980][T16074] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 982.703524][T16074] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.935159][T16074] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 983.920269][T24450] syzkaller0: entered promiscuous mode [ 983.954115][T24450] syzkaller0: entered allmulticast mode [ 984.306114][ T5627] Bluetooth: hci2: command tx timeout [ 984.624857][T24461] netlink: 'syz.8.6017': attribute type 12 has an invalid length. [ 984.654086][T24470] macsec0: entered promiscuous mode [ 984.686596][T24473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6018'. [ 984.730136][T24460] macsec0: left promiscuous mode [ 984.878380][ C0] net_ratelimit: 202 callbacks suppressed [ 984.878403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 984.878825][T16050] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 984.885113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 984.980565][ T9292] bond6: (slave bridge3): failed to get link speed/duplex [ 985.046659][T16098] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 985.085362][T16098] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 985.285067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 985.298765][T16098] bond6: (slave bridge3): failed to get link speed/duplex [ 985.316967][T16090] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 985.328037][T16090] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 986.446386][ T5627] Bluetooth: hci2: command tx timeout [ 987.823322][T24494] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6023'. [ 988.796612][T24505] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 988.811395][T24505] Error validating options; rc = [-22] [ 989.105018][ T5627] Bluetooth: hci2: command tx timeout [ 989.528755][T24511] overlayfs: conflicting lowerdir path [ 989.918364][T16074] net_ratelimit: 254 callbacks suppressed [ 989.918384][T16074] bond6: (slave bridge3): failed to get link speed/duplex [ 989.936199][T16050] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 990.003059][T16084] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 990.022294][ T29] audit: type=1400 audit(1784035764.919:1718): avc: denied { write } for pid=24474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 990.063900][T16084] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 990.085565][T24405] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 990.196087][ T9292] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 990.228717][T16074] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 990.256757][T16050] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 990.296730][T16050] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 990.326802][T16084] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 990.357144][T16084] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 990.628839][T24523] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6029'. [ 990.661447][T24405] lo speed is unknown, defaulting to 1000 [ 991.099579][ T29] audit: type=1400 audit(1784035766.009:1719): avc: denied { write } for pid=24521 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 992.117337][T24532] netlink: 'syz.9.6031': attribute type 1 has an invalid length. [ 992.911614][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.393957][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.967926][T24532] 8021q: adding VLAN 0 to HW filter on device bond8 [ 994.301956][T24540] gretap1: entered promiscuous mode [ 994.359166][T24540] bond8: (slave gretap1): making interface the new active one [ 994.369702][T24540] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 994.399849][T24543] macvlan0: entered promiscuous mode [ 994.406612][T24543] macvlan0: entered allmulticast mode [ 994.971815][T16084] net_ratelimit: 48 callbacks suppressed [ 994.971834][T16084] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 995.066208][T16084] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 996.766109][ T9292] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 996.808364][T16069] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 996.847230][T16069] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 996.896262][T16098] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 996.956533][T16098] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 997.008221][T16084] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 997.043637][T24543] bond8: entered promiscuous mode [ 997.049064][T16050] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 997.072022][T24543] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 997.096194][T16050] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 997.117677][T24543] bond8: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 997.151643][T24543] bond8: left promiscuous mode [ 999.092672][ T29] audit: type=1400 audit(1784035773.999:1720): avc: denied { write } for pid=24572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 999.419086][ T29] audit: type=1400 audit(1784035774.309:1721): avc: denied { write } for pid=24604 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 999.980986][T16087] net_ratelimit: 78 callbacks suppressed [ 999.981048][T16087] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1000.352457][ T9292] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1000.738208][T16084] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1001.017070][T16074] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1001.575111][T16069] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1001.767257][T16069] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1001.919794][T16074] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1001.961522][T16069] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1001.997141][T16069] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1002.026648][ T1162] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1004.087166][T24668] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1004.499000][T21420] bond2: (slave syz_tun): Removing an active aggregator [ 1004.513414][T21420] bond2: (slave syz_tun): Releasing backup interface [ 1004.986334][ T47] net_ratelimit: 64 callbacks suppressed [ 1004.986349][ T47] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1005.364458][ T47] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1005.406347][ T47] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1005.445919][ T47] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1005.475966][T16069] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1005.495958][ T47] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1005.516604][ T47] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1005.536991][ T47] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1005.556837][ T47] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1005.586092][T16069] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1006.967649][ T29] audit: type=1400 audit(1784035781.879:1722): avc: denied { write } for pid=24678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1009.783921][T24405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.791657][T24405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.799767][T24405] bridge_slave_0: entered allmulticast mode [ 1009.832249][T24405] bridge_slave_0: entered promiscuous mode [ 1009.911631][T24405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.974289][T24405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.008921][T16090] net_ratelimit: 95 callbacks suppressed [ 1010.008955][T16090] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1010.025958][ T29] audit: type=1400 audit(1784035784.909:1723): avc: denied { write } for pid=24714 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1010.074613][T24405] bridge_slave_1: entered allmulticast mode [ 1010.121354][T24405] bridge_slave_1: entered promiscuous mode [ 1010.156531][T16050] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1010.679301][T16098] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1010.749096][T16098] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1010.794510][T16098] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 1010.956599][T16094] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1010.995941][T12104] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1011.046039][T16094] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1011.096454][T16094] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1011.146077][T16094] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1011.372359][T24741] bridge0: port 4(vlan2) entered disabled state [ 1011.381342][T24741] bridge0: port 3(team0) entered disabled state [ 1011.392416][T24741] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.400025][T24741] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.954310][T24775] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6072'. [ 1014.126502][T24776] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6071'. [ 1014.135505][T24776] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6071'. [ 1014.769780][T24741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1014.869626][T24780] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1015.016102][T16080] net_ratelimit: 88 callbacks suppressed [ 1015.016121][T16080] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1015.071265][T16098] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1015.101116][ T9292] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1015.136171][T16080] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1015.167287][T16080] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1015.468812][T24768] Bluetooth: hci6: command 0x0406 tx timeout [ 1015.506083][T24786] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1015.516001][T16080] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1015.546250][T16080] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1015.566235][T16080] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1015.587061][T16080] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1015.640408][T16050] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1015.676304][T24786] usb 3-1: Using ep0 maxpacket: 32 [ 1015.689024][T24786] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1015.698190][T24786] usb 3-1: config 0 has no interface number 0 [ 1015.704366][T24786] usb 3-1: config 0 interface 89 altsetting 225 bulk endpoint 0x82 has invalid maxpacket 6 [ 1015.715641][T24786] usb 3-1: config 0 interface 89 has no altsetting 0 [ 1015.729767][T24786] usb 3-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 1015.740082][T24786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.748815][T24786] usb 3-1: Product: syz [ 1015.771627][T24786] usb 3-1: Manufacturer: syz [ 1015.785249][T24786] usb 3-1: SerialNumber: syz [ 1015.798438][T24786] usb 3-1: config 0 descriptor?? [ 1015.804269][T24780] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1015.839037][T24786] hub 3-1:0.89: bad descriptor, ignoring hub [ 1015.853902][T24786] hub 3-1:0.89: probe with driver hub failed with error -5 [ 1015.879429][T24786] option 3-1:0.89: GSM modem (1-port) converter detected [ 1015.908871][T24786] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1016.170622][T24741] bridge4: port 2(veth17) entered disabled state [ 1016.178737][T24741] bridge4: port 1(veth15) entered disabled state [ 1016.469167][T24405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.676870][ T1155] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1016.688412][ T1155] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1016.886937][T24801] usb 3-1: USB disconnect, device number 27 [ 1016.958398][T24801] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1016.975612][T24801] option 3-1:0.89: device disconnected [ 1016.990940][ T5798] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1017.007157][T16098] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.010142][ T5798] syú2: Port: 1 Link DOWN [ 1017.066606][T16098] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.130095][T16098] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1017.169339][T16098] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.196692][T16098] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.226652][T16098] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1017.272252][T24405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1017.288141][T16098] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.312266][T16098] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.339039][T16098] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1017.339865][T24810] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6077'. [ 1017.379134][T16094] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.612688][T16094] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.627118][T16094] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1018.046443][ T1155] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1018.065612][ T1155] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1018.160701][T24810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1018.226944][T24810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1018.673758][ T29] audit: type=1400 audit(1784035793.569:1724): avc: denied { write } for pid=24811 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1019.681628][T24405] team0: Port device team_slave_0 added [ 1019.714038][T24405] team0: Port device team_slave_1 added [ 1020.200226][T16098] net_ratelimit: 115 callbacks suppressed [ 1020.200248][T16098] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1020.391536][T16050] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1020.401648][ T29] audit: type=1400 audit(1784035795.309:1725): avc: denied { read } for pid=24839 comm="syz.9.6081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1020.473440][ T1155] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1020.487384][ T9292] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1020.499819][ T1155] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1020.526448][ T9292] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1020.566588][T16098] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1020.595991][T16098] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1020.623760][ T29] audit: type=1400 audit(1784035795.529:1726): avc: denied { write } for pid=24841 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1020.666252][ T9292] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1020.696013][T16080] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1020.745933][T16094] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1020.782885][T24405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.796608][T16094] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1020.827403][T24405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1020.910605][T24405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.044832][T24843] can0: slcan on ptm0. [ 1021.052571][T24405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1021.093645][T24405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.221617][T24405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1021.282575][ T1155] bridge0: port 3(netdevsim0) entered disabled state [ 1021.371807][ T1155] netdevsim netdevsim7 netdevsim0 (unregistering): left promiscuous mode [ 1021.400927][ T1155] bridge0: port 3(netdevsim0) entered disabled state [ 1021.446846][ T1155] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 1021.473410][ T1155] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1021.708456][T24839] can0 (unregistered): slcan off ptm0. [ 1021.871378][T24405] hsr_slave_0: entered promiscuous mode [ 1022.072447][T24405] hsr_slave_1: entered promiscuous mode [ 1022.097994][T24405] debugfs: 'hsr0' already exists in 'hsr' [ 1022.104316][T24405] Cannot create hsr debugfs directory [ 1022.809423][T24784] IPVS: starting estimator thread 0... [ 1022.945103][T24872] comedi: valid board names for 8255 driver are: [ 1022.952372][T24872] 8255 [ 1022.957767][T24872] comedi: valid board names for vmk80xx driver are: [ 1022.964452][T24872] vmk80xx [ 1022.967602][T24872] comedi: valid board names for usbduxsigma driver are: [ 1022.974613][T24872] usbduxsigma [ 1022.980379][T24872] comedi: valid board names for usbduxfast driver are: [ 1022.987397][T24872] usbduxfast [ 1022.990871][T24872] comedi: valid board names for usbdux driver are: [ 1022.997858][T24872] usbdux [ 1023.000957][T24872] comedi: valid board names for ni6501 driver are: [ 1023.008117][T24872] ni6501 [ 1023.011197][T24872] comedi: valid board names for dt9812 driver are: [ 1023.018041][T24872] dt9812 [ 1023.021086][T24872] comedi: valid board names for ni_labpc_cs driver are: [ 1023.028756][T24872] ni_labpc_cs [ 1023.032266][T24872] comedi: valid board names for ni_daq_700 driver are: [ 1023.039301][T24872] ni_daq_700 [ 1023.042703][T24872] comedi: valid board names for labpc_pci driver are: [ 1023.049673][T24872] labpc_pci [ 1023.052962][T24872] comedi: valid board names for adl_pci9118 driver are: [ 1023.060054][T24872] pci9118dg [ 1023.063382][T24872] pci9118hg [ 1023.069145][T24872] pci9118hr [ 1023.072533][T24872] comedi: valid board names for 8255_pci driver are: [ 1023.079699][T24872] 8255_pci [ 1023.083205][T24872] comedi: valid board names for s526 driver are: [ 1023.089793][T24872] s526 [ 1023.093087][T24872] comedi: valid board names for multiq3 driver are: [ 1023.177220][T24872] multiq3 [ 1023.181951][T24872] comedi: valid board names for pcmuio driver are: [ 1023.188866][T24872] pcmuio48 [ 1023.192076][T24872] pcmuio96 [ 1023.195251][T24872] comedi: valid board names for pcmmio driver are: [ 1023.201872][T24872] pcmmio [ 1023.204852][T24872] comedi: valid board names for pcmda12 driver are: [ 1023.211989][T24872] pcmda12 [ 1023.215085][T24872] comedi: valid board names for pcmad driver are: [ 1023.221656][T24872] pcmad12 [ 1023.224742][T24872] pcmad16 [ 1023.227884][T24872] comedi: valid board names for ni_labpc driver are: [ 1023.234585][T24872] lab-pc-1200 [ 1023.238111][T24872] lab-pc-1200ai [ 1023.241684][T24872] lab-pc+ [ 1023.244766][T24872] comedi: valid board names for atmio16 driver are: [ 1023.254619][T24872] atmio16 [ 1023.259380][T24872] atmio16d [ 1023.263473][T24872] comedi: valid board names for ni_at_ao driver are: [ 1023.270391][T24872] at-ao-6 [ 1023.273441][T24872] at-ao-10 [ 1023.276818][T24872] comedi: valid board names for ni_at_a2150 driver are: [ 1023.283831][T24872] ni_at_a2150 [ 1023.287359][T24872] comedi: valid board names for adq12b driver are: [ 1023.293885][T24872] adq12b [ 1023.296960][T24872] comedi: valid board names for mpc624 driver are: [ 1023.303482][T24872] mpc624 [ 1023.306504][T24872] comedi: valid board names for c6xdigio driver are: [ 1023.313613][T24872] c6xdigio [ 1023.316850][T24872] comedi: valid board names for aio_iiro_16 driver are: [ 1023.323807][T24872] aio_iiro_16 [ 1023.327251][T24872] comedi: valid board names for aio_aio12_8 driver are: [ 1023.334244][T24872] aio_aio12_8 [ 1023.340477][T24872] aio_ai12_8 [ 1023.343864][T24872] aio_ao12_4 [ 1023.350063][T24872] comedi: valid board names for fl512 driver are: [ 1023.356935][T24872] fl512 [ 1023.360343][T24872] comedi: valid board names for dmm32at driver are: [ 1023.367155][T24872] dmm32at [ 1023.370291][T24872] comedi: valid board names for dt282x driver are: [ 1023.376950][T24872] dt2821 [ 1023.380060][T24872] dt2821-f [ 1023.383276][T24872] dt2821-g [ 1023.386558][T24872] dt2823 [ 1023.389696][T24872] dt2824-pgh [ 1023.393120][T24872] dt2824-pgl [ 1023.396577][T24872] dt2825 [ 1023.399557][T24872] dt2827 [ 1023.402530][T24872] dt2828 [ 1023.405519][T24872] dt2829 [ 1023.408633][T24872] dt21-ez [ 1023.412746][T24872] dt23-ez [ 1023.416184][T24872] dt24-ez [ 1023.420086][T24872] dt24-ez-pgl [ 1023.423642][T24872] comedi: valid board names for dt2817 driver are: [ 1023.433187][T24872] dt2817 [ 1023.436881][T24872] comedi: valid board names for dt2815 driver are: [ 1023.443476][T24872] dt2815 [ 1023.444194][T24870] IPVS: using max 36 ests per chain, 86400 per kthread [ 1023.454360][T24872] comedi: valid board names for dt2814 driver are: [ 1023.461229][T24872] dt2814 [ 1023.465859][T24872] comedi: valid board names for dt2811 driver are: [ 1023.472398][T24872] dt2811-pgh [ 1023.478376][T24872] dt2811-pgl [ 1023.481775][T24872] comedi: valid board names for dt2801 driver are: [ 1023.488864][T24872] dt2801 [ 1023.493405][T24872] comedi: valid board names for das6402 driver are: [ 1023.500194][T24872] das6402-12 [ 1023.503733][T24872] das6402-16 [ 1023.507112][T24872] comedi: valid board names for das1800 driver are: [ 1023.513983][T24872] das-1701st [ 1023.517697][T24872] das-1701st-da [ 1023.521394][T24872] das-1702st [ 1023.524742][T24872] das-1702st-da [ 1023.528538][T24872] das-1702hr [ 1023.531946][T24872] das-1702hr-da [ 1023.535641][T24872] das-1701ao [ 1023.539653][T24872] das-1702ao [ 1023.543017][T24872] das-1801st [ 1023.547245][T24872] das-1801st-da [ 1023.550854][T24872] das-1802st [ 1023.554267][T24872] das-1802st-da [ 1023.560234][T24872] das-1802hr [ 1023.563634][T24872] das-1802hr-da [ 1023.567307][T24872] das-1801hc [ 1023.571302][T24872] das-1802hc [ 1023.574811][T24872] das-1801ao [ 1023.578382][T24872] das-1802ao [ 1023.581859][T24872] comedi: valid board names for das800 driver are: [ 1023.590218][T24872] das-800 [ 1023.593428][T24872] cio-das800 [ 1023.597011][T24872] das-801 [ 1023.600071][T24872] cio-das801 [ 1023.603423][T24872] das-802 [ 1023.607026][T24872] cio-das802 [ 1023.610757][T24872] cio-das802/16 [ 1023.616073][T24872] comedi: valid board names for isa-das08 driver are: [ 1023.623106][T24872] isa-das08 [ 1023.626847][T24872] das08-pgm [ 1023.631060][T24872] das08-pgh [ 1023.634413][T24872] das08-pgl [ 1023.637758][T24872] das08-aoh [ 1023.641102][T24872] das08-aol [ 1023.644427][T24872] das08-aom [ 1023.647796][T24872] das08/jr-ao [ 1023.654344][T24872] das08jr-16-ao [ 1023.658175][T24872] pc104-das08 [ 1023.661744][T24872] das08jr/16 [ 1023.665134][T24872] comedi: valid board names for das16m1 driver are: [ 1023.673693][T24872] das16m1 [ 1023.678217][T24872] comedi: valid board names for dac02 driver are: [ 1023.684762][T24872] dac02 [ 1023.688062][T24872] comedi: valid board names for rti802 driver are: [ 1023.696350][T24872] rti802 [ 1023.699697][T24872] comedi: valid board names for rti800 driver are: [ 1023.706533][T24872] rti800 [ 1023.709489][T24872] rti815 [ 1023.712530][T24872] comedi: valid board names for pcm3724 driver are: [ 1023.719392][T24872] pcm3724 [ 1023.722897][T24872] comedi: valid board names for pcl818 driver are: [ 1023.732268][T24872] pcl818l [ 1023.735580][T24872] pcl818h [ 1023.739604][T24872] pcl818hd [ 1023.742988][T24872] pcl818hg [ 1023.746616][T24872] pcl818 [ 1023.749665][T24872] pcl718 [ 1023.752883][T24872] pcm3718 [ 1023.756260][T24872] comedi: valid board names for pcl816 driver are: [ 1023.762983][T24872] pcl816 [ 1023.767069][T24872] pcl814b [ 1023.770238][T24872] comedi: valid board names for pcl812 driver are: [ 1023.777299][T24872] pcl812 [ 1023.780299][T24872] pcl812pg [ 1023.783454][T24872] acl8112pg [ 1023.786866][T24872] acl8112dg [ 1023.790222][T24872] acl8112hg [ 1023.793537][T24872] a821pgl [ 1023.796822][T24872] a821pglnda [ 1023.800255][T24872] a821pgh [ 1023.805611][T24872] a822pgl [ 1023.809012][T24872] a822pgh [ 1023.812250][T24872] a823pgl [ 1023.815433][T24872] a823pgh [ 1023.818785][T24872] pcl813 [ 1023.822166][T24872] pcl813b [ 1023.825484][T24872] acl8113 [ 1023.828837][T24872] iso813 [ 1023.831891][T24872] acl8216 [ 1023.835100][T24872] a826pg [ 1023.838409][T24872] comedi: valid board names for pcl730 driver are: [ 1023.845117][T24872] pcl730 [ 1023.848374][T24872] iso730 [ 1023.851520][T24872] acl7130 [ 1023.854691][T24872] pcm3730 [ 1023.858003][T24872] pcl725 [ 1023.861185][T24872] p8r8dio [ 1023.864309][T24872] acl7225b [ 1023.867803][T24872] p16r16dio [ 1023.871244][T24872] pcl733 [ 1023.874422][T24872] pcl734 [ 1023.877865][T24872] opmm-1616-xt [ 1023.882738][T24872] pearl-mm-p [ 1023.887039][T24872] ir104-pbf [ 1023.890434][T24872] comedi: valid board names for pcl726 driver are: [ 1023.897626][T24872] pcl726 [ 1023.900741][T24872] pcl727 [ 1023.903854][T24872] pcl728 [ 1023.907254][T24872] acl6126 [ 1023.910726][T24872] acl6128 [ 1023.913971][T24872] comedi: valid board names for pcl724 driver are: [ 1023.920852][T24872] pcl724 [ 1023.925556][T24872] pcl722 [ 1023.928809][T24872] pcl731 [ 1023.931922][T24872] acl7122 [ 1023.935047][T24872] acl7124 [ 1023.938410][T24872] pet48dio [ 1023.941669][T24872] pcmio48 [ 1023.945006][T24872] onyx-mm-dio [ 1023.949198][T24872] comedi: valid board names for pcl711 driver are: [ 1023.960485][T24872] pcl711 [ 1023.963580][T24872] pcl711b [ 1023.966873][T24872] acl8112hg [ 1023.970164][T24872] acl8112dg [ 1023.973405][T24872] comedi: valid board names for amplc_pc263 driver are: [ 1023.980551][T24872] pc263 [ 1023.983444][T24872] comedi: valid board names for amplc_pc236 driver are: [ 1023.990587][T24872] pc36at [ 1023.993697][T24872] comedi: valid board names for amplc_dio200 driver are: [ 1024.001008][T24872] pc212e [ 1024.004086][T24872] pc214e [ 1024.007197][T24872] pc215e [ 1024.010508][T24872] pc218e [ 1024.013693][T24872] pc272e [ 1024.016807][T24872] comedi: valid board names for comedi_parport driver are: [ 1024.024149][T24872] comedi_parport [ 1024.028393][T24872] comedi: valid board names for comedi_test driver are: [ 1024.035507][T24872] comedi_test [ 1024.039084][T24872] comedi: valid board names for comedi_bond driver are: [ 1024.046451][T24872] comedi_bond [ 1024.327288][ T29] audit: type=1400 audit(1784035799.109:1727): avc: denied { write } for pid=24880 comm="syz.2.6088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1024.395682][T24885] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6088'. [ 1024.701726][T24890] PKCS7: Unknown OID: [4] 0.0 [ 1024.707920][T24890] PKCS7: Only support pkcs7_signedData type [ 1024.998666][T24885] unsupported nlmsg_type 40 [ 1025.311890][ T9292] net_ratelimit: 90 callbacks suppressed [ 1025.311907][ T9292] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1025.425939][T16080] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1025.507542][T16090] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1025.557309][T16090] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1025.578810][T16106] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1025.626008][T16106] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1025.811897][T16106] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1025.849840][T24901] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1025.861982][T16050] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1025.969622][T16050] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1026.029399][ T9292] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1026.081973][ T1155] bridge_slave_1: left allmulticast mode [ 1026.103418][ T1155] bridge_slave_1: left promiscuous mode [ 1026.112523][T24913] netlink: 'syz.3.6097': attribute type 4 has an invalid length. [ 1026.121926][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.134531][T24913] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6097'. [ 1026.319879][T24922] overlayfs: failed to clone upperpath [ 1026.503549][ T1155] bridge_slave_0: left allmulticast mode [ 1027.164603][ T1155] bridge_slave_0: left promiscuous mode [ 1027.179551][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.247333][ T29] audit: type=1400 audit(1784035802.159:1728): avc: denied { write } for pid=24903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1029.266562][ T29] audit: type=1400 audit(1784035804.169:1729): avc: denied { write } for pid=24944 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1030.327291][T16050] net_ratelimit: 71 callbacks suppressed [ 1030.327314][T16050] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1030.366196][T16050] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1030.420555][T16087] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1030.456962][T16087] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1030.486002][T16058] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1030.515925][T16050] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1030.536710][T16058] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1030.556062][T16050] bond6: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1030.633261][ T1155] batman_adv: batadv0: Interface deactivated: gretap1 [ 1030.945370][ T1155] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 1031.019175][T24956] /dev/nullb0: Can't lookup blockdev [ 1031.124343][ T1155] bond6 (unregistering): (slave ip6gretap1): Releasing active interface [ 1032.054572][ T1155] bond5 (unregistering): (slave erspan1): Releasing active interface [ 1032.407373][ T1155] batman_adv: batadv0: Removing interface: gretap1 [ 1032.472857][ T1155] bond9 (unregistering): (slave gretap2): Releasing backup interface [ 1032.554346][ T1155] bond13 (unregistering): (slave geneve3): Releasing active interface [ 1032.565341][ T1155] geneve3 (unregistering): left allmulticast mode [ 1032.581813][ T1155] bond7 (unregistering): (slave geneve2): Releasing active interface [ 1032.765111][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1032.789867][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1032.812114][ T1155] bond0 (unregistering): Released all slaves [ 1032.893751][ T1155] bond1 (unregistering): Released all slaves [ 1033.287644][ T1155] bond2 (unregistering): Released all slaves [ 1033.331522][ T1155] bond3 (unregistering): (slave veth5): Releasing active interface [ 1033.351959][ T1155] bond3 (unregistering): Released all slaves [ 1033.383918][ T1155] bond4 (unregistering): (slave ): Releasing active interface [ 1033.416086][ T1155] bond4 (unregistering): Released all slaves [ 1033.458463][ T1155] bond5 (unregistering): Released all slaves [ 1033.512373][ T1155] bond6 (unregistering): Released all slaves [ 1033.539348][ T1155] bond7 (unregistering): Released all slaves [ 1033.569940][ T1155] bond8 (unregistering): (slave veth1): Releasing active interface [ 1033.618119][ T1155] batadv1: entered promiscuous mode [ 1033.649526][ T1155] bond8 (unregistering): (slave batadv1): Releasing active interface [ 1033.669838][ T1155] bond8 (unregistering): Released all slaves [ 1033.701685][ T1155] bond9 (unregistering): (slave bond10): Releasing backup interface [ 1033.875298][ T1155] bond9 (unregistering): Released all slaves [ 1033.899159][ T1155] bond10 (unregistering): Released all slaves [ 1033.914987][ T1155] bond11 (unregistering): Released all slaves [ 1033.934175][ T1155] bond12 (unregistering): Released all slaves [ 1034.569034][ T1155] bond13 (unregistering): Released all slaves [ 1034.586435][ T1155] bond14 (unregistering): Released all slaves [ 1034.610628][ T1155] bond15 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1034.621697][ T1155] bond15 (unregistering): Released all slaves [ 1034.655553][ T5273] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1034.790212][T24971] tipc: Enabling of bearer rejected, failed to enable media [ 1036.928114][ T1155] tipc: Left network mode [ 1036.956376][T25017] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6114'. [ 1037.050451][ T1155] IPVS: stopping backup sync thread 15315 ... [ 1037.061881][T25017] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6114'. [ 1037.272025][T25010] bridge0: port 3(dummy0) entered disabled state [ 1037.278599][T25010] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.285775][T25010] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.764598][T25016] syz.2.6113 (25016): drop_caches: 2 [ 1037.894113][T25010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.046381][ T29] audit: type=1400 audit(1784035812.929:1730): avc: denied { write } for pid=25023 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1038.339437][ T29] audit: type=1400 audit(1784035813.249:1731): avc: denied { write } for pid=25038 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1038.712470][T25010] macsec1: left promiscuous mode [ 1038.725167][T25010] macsec1: left allmulticast mode [ 1038.735638][T25017] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 1038.941317][T16058] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.031916][T16058] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.048933][T16058] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1039.058677][T16058] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.068015][T16058] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.077234][T16058] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1039.089962][ T5273] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1039.099994][T25049] netlink: 60 bytes leftover after parsing attributes in process `syz.9.6117'. [ 1039.239133][T16058] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1039.277358][T16058] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1039.291014][T16058] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1040.079278][T16058] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1040.120042][T16058] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.151651][T16058] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1040.167415][T24768] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1040.182939][T24768] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1040.193912][T24768] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1040.207813][T24768] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1040.223073][T24768] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1041.791715][T25054] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1041.828438][T25054] lo speed is unknown, defaulting to 1000 [ 1042.211864][ T29] audit: type=1400 audit(1784035816.979:1732): avc: denied { connect } for pid=25080 comm="syz.9.6122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1042.334642][ T29] audit: type=1400 audit(1784035816.989:1733): avc: denied { getopt } for pid=25080 comm="syz.9.6122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1042.435984][T24768] Bluetooth: hci1: command tx timeout [ 1042.990468][ T29] audit: type=1400 audit(1784035817.889:1734): avc: denied { write } for pid=25096 comm="syz.9.6124" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1043.232738][ T29] audit: type=1800 audit(1784035818.019:1735): pid=25099 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.9.6124" name="file0" dev="overlay" ino=2744 res=0 errno=0 [ 1043.809682][ T29] audit: type=1400 audit(1784035818.719:1736): avc: denied { write } for pid=25074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1045.146096][T24768] Bluetooth: hci1: command tx timeout [ 1045.382256][ T29] audit: type=1400 audit(1784035820.289:1737): avc: denied { write } for pid=25107 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1045.641504][ T5273] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1046.072476][ T1155] hsr_slave_0: left promiscuous mode [ 1046.095068][ T1155] hsr_slave_1: left promiscuous mode [ 1046.102952][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1046.122209][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.143511][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1046.163433][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.183082][ T1155] veth1_macvtap: left promiscuous mode [ 1046.195981][ T1155] veth0_macvtap: left promiscuous mode [ 1046.206623][ T1155] veth1_vlan: left promiscuous mode [ 1046.222087][ T1155] veth0_vlan: left promiscuous mode [ 1046.426742][ T29] audit: type=1326 audit(1784035821.329:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25119 comm="syz.3.6129" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a35d9de59 code=0x7ffc0000 [ 1046.518034][ T29] audit: type=1326 audit(1784035821.329:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25119 comm="syz.3.6129" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a35d9de59 code=0x7ffc0000 [ 1046.579472][ T29] audit: type=1326 audit(1784035821.339:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25119 comm="syz.3.6129" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f3a35d9de59 code=0x7ffc0000 [ 1046.656683][ T29] audit: type=1326 audit(1784035821.529:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25119 comm="syz.3.6129" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a35d9de59 code=0x7ffc0000 [ 1046.720017][ T29] audit: type=1326 audit(1784035821.529:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25119 comm="syz.3.6129" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a35d9de59 code=0x7ffc0000 [ 1047.071840][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 1047.109826][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 1047.186092][T24768] Bluetooth: hci1: command tx timeout [ 1047.398286][T25059] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1047.631709][T25059] lo speed is unknown, defaulting to 1000 [ 1048.249219][T25134] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 1048.255775][T25134] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1048.363653][T25134] vhci_hcd vhci_hcd.0: Device attached [ 1048.489873][ T53] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1048.606070][T24782] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 1048.688854][ T53] usb 10-1: Using ep0 maxpacket: 16 [ 1048.747237][ T29] audit: type=1400 audit(1784035823.649:1743): avc: denied { write } for pid=25127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1049.208074][T24782] usb 51-1: device descriptor read/64, error -71 [ 1049.244834][ T29] audit: type=1400 audit(1784035824.149:1744): avc: denied { write } for pid=25152 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1049.269067][T24768] Bluetooth: hci1: command tx timeout [ 1049.279185][ T1155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1049.340627][ T53] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1049.347429][T25137] vhci_hcd: connection closed [ 1049.363989][T16090] vhci_hcd vhci_hcd.9: stop threads [ 1049.365960][ T53] usb 10-1: no configurations [ 1049.377390][T16090] vhci_hcd vhci_hcd.9: release socket [ 1049.402986][T16090] vhci_hcd vhci_hcd.9: disconnect device [ 1049.406863][ T53] usb 10-1: can't read configurations, error -22 [ 1049.504647][ T5273] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1049.793073][ T1155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1051.320594][T25177] siw: device registration error -23 [ 1051.714835][ T29] audit: type=1400 audit(1784035826.609:1745): avc: denied { write } for pid=25157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1051.788978][T25183] xt_hashlimit: size too large, truncated to 1048576 [ 1051.841880][T24782] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 1051.986843][ T1155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.055609][T24782] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1052.072822][T25190] netlink: 'syz.8.6138': attribute type 27 has an invalid length. [ 1052.097293][T24782] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1052.155031][T24782] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1052.211916][T25188] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1052.222249][T24782] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.273528][T24782] usb 10-1: Product: syz [ 1052.311196][T24782] usb 10-1: Manufacturer: syz [ 1052.343569][ T29] audit: type=1400 audit(1784035827.249:1746): avc: denied { write } for pid=25189 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1052.369850][T24782] usb 10-1: SerialNumber: syz [ 1052.426525][T24782] usb 10-1: config 0 descriptor?? [ 1052.460049][T24782] hub 10-1:0.0: bad descriptor, ignoring hub [ 1052.501152][T24782] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1052.508370][ T53] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1052.624950][T24782] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input60 [ 1052.673627][ T53] usb 3-1: Using ep0 maxpacket: 16 [ 1052.758927][ T53] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1052.843307][ T53] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1052.929858][ T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.203641][ T53] usb 3-1: config 0 descriptor?? [ 1053.238296][ T1155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.416957][T25059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.443327][T25059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.496221][T25059] bridge_slave_0: entered allmulticast mode [ 1053.539249][T25059] bridge_slave_0: entered promiscuous mode [ 1053.583193][T25059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.625312][T25059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.656295][T25059] bridge_slave_1: entered allmulticast mode [ 1053.683116][T25208] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6141'. [ 1053.683299][T25059] bridge_slave_1: entered promiscuous mode [ 1053.993017][T25059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.564909][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.571403][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.091467][T25059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.516537][T25230] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6144'. [ 1055.971543][ T29] audit: type=1400 audit(1784035830.879:1747): avc: denied { write } for pid=25195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1055.995499][T25224] vlan3: entered promiscuous mode [ 1056.007968][T25224] hsr0: entered promiscuous mode [ 1056.019845][T25224] vlan3: entered allmulticast mode [ 1056.034753][T25224] hsr0: entered allmulticast mode [ 1056.049294][T25224] hsr_slave_0: entered allmulticast mode [ 1056.069369][T25224] hsr_slave_1: entered allmulticast mode [ 1056.279084][ T29] audit: type=1400 audit(1784035831.189:1748): avc: denied { write } for pid=25235 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1056.342714][T25059] team0: Port device team_slave_0 added [ 1056.587821][T25230] hsr_slave_1 (unregistering): left promiscuous mode [ 1059.553311][ T53] usbhid 3-1:0.0: can't add hid device: -32 [ 1059.586145][ T53] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1059.627310][T25059] team0: Port device team_slave_1 added [ 1060.164269][T25059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.204646][T25059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.306689][T24782] usb 3-1: USB disconnect, device number 28 [ 1060.333804][T25059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.471029][T25059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.512633][T25059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1060.765900][T25059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1061.840485][ T1155] bridge_slave_1: left allmulticast mode [ 1061.848448][ T1155] bridge_slave_1: left promiscuous mode [ 1061.870998][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.915435][ T1155] bridge_slave_0: left allmulticast mode [ 1061.939966][ T1155] bridge_slave_0: left promiscuous mode [ 1061.946436][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.043876][ T1155] bridge_slave_1: left allmulticast mode [ 1062.070157][ T1155] bridge_slave_1: left promiscuous mode [ 1062.090719][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.132297][ T1155] bridge_slave_0: left allmulticast mode [ 1062.148916][ T1155] bridge_slave_0: left promiscuous mode [ 1062.446156][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.488016][ T29] audit: type=1400 audit(1784035837.398:1749): avc: denied { write } for pid=25246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1062.501636][ T1155] erspan0: left allmulticast mode [ 1062.517720][ T1155] erspan0: left promiscuous mode [ 1062.536889][ T1155] bridge2: port 1(erspan0) entered disabled state [ 1063.006570][T24801] usb 10-1: USB disconnect, device number 24 [ 1063.184078][ T29] audit: type=1400 audit(1784035838.088:1750): avc: denied { write } for pid=25292 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1064.255645][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.271369][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.283907][ T1155] bond0 (unregistering): Released all slaves [ 1064.422072][ T1155] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 1064.580271][ T1155] bond6 (unregistering): (slave ip6gretap2): Releasing active interface [ 1064.858795][ T1155] bond5 (unregistering): (slave bridge1): Releasing backup interface [ 1064.917912][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.939069][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.968131][ T1155] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1064.992138][ T1155] bond0 (unregistering): Released all slaves [ 1065.024384][ T1155] bond1 (unregistering): Released all slaves [ 1065.047555][ T1155] bond2 (unregistering): Released all slaves [ 1065.078817][ T1155] bond3 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1065.089935][ T1155] veth0_to_bond: left promiscuous mode [ 1065.095578][ T1155] veth0_to_bond: left allmulticast mode [ 1065.105393][ T1155] bond3 (unregistering): Released all slaves [ 1065.137767][ T1155] bond4 (unregistering): (slave lo): Releasing backup interface [ 1065.149045][ T1155] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1065.161544][ T1155] bond4 (unregistering): Released all slaves [ 1065.178212][ T1155] bond5 (unregistering): Released all slaves [ 1065.201637][ T1155] bond6 (unregistering): Released all slaves [ 1065.303311][T25059] hsr_slave_0: entered promiscuous mode [ 1065.311812][T25059] hsr_slave_1: entered promiscuous mode [ 1065.320203][T25059] debugfs: 'hsr0' already exists in 'hsr' [ 1065.327823][T25059] Cannot create hsr debugfs directory [ 1065.426615][T25326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6162'. [ 1065.927377][T25326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26979 sclass=netlink_route_socket pid=25326 comm=syz.2.6162 [ 1066.328362][T25335] fuse: fd is not a fuse device [ 1066.849789][ T1155] : left promiscuous mode [ 1070.081402][T25363] netlink: 'syz.3.6166': attribute type 10 has an invalid length. [ 1070.894433][ T29] audit: type=1400 audit(1784035845.798:1751): avc: denied { write } for pid=25344 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1071.182795][ T29] audit: type=1400 audit(1784035846.088:1752): avc: denied { write } for pid=25375 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1072.595458][T25391] overlayfs: failed to clone upperpath [ 1072.888428][T25059] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1072.967928][T25059] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1073.424417][ T29] audit: type=1400 audit(1784035848.328:1753): avc: denied { write } for pid=25377 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1073.674004][T25059] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1073.781862][T25059] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1073.850673][T25059] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1073.913501][ T29] audit: type=1400 audit(1784035848.818:1754): avc: denied { write } for pid=25410 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1073.971029][T25059] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1074.005801][T25059] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1074.057306][T25059] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1074.107609][T25417] 9p: Bad value for 'rfdno' [ 1075.007775][T25418] mac80211_hwsim hwsim22 wlan0: left promiscuous mode [ 1075.138122][T25418] bond7: left promiscuous mode [ 1075.172096][T25418] bridge4: left promiscuous mode [ 1075.218438][T25418] macvtap1: left allmulticast mode [ 1075.493879][T25418] gretap1: left promiscuous mode [ 1076.387702][T25059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1076.444110][T25456] dummy0: left allmulticast mode [ 1076.468453][T25456] dummy0: left promiscuous mode [ 1076.485173][T25456] bridge0: port 3(dummy0) entered disabled state [ 1076.572683][T25456] bond0: (slave batadv0): Releasing backup interface [ 1076.627764][T25456] bridge_slave_0: left allmulticast mode [ 1076.673634][T25456] bridge_slave_0: left promiscuous mode [ 1076.688174][ T29] audit: type=1400 audit(1784035851.588:1755): avc: denied { write } for pid=25423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1076.713541][T25456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.762114][T25456] bridge_slave_1: left allmulticast mode [ 1076.787291][T25456] bridge_slave_1: left promiscuous mode [ 1076.830829][T25456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.904837][T25456] bond0: (slave 30): Releasing backup interface [ 1076.991304][T25456] team0: Port device team_slave_0 removed [ 1077.047300][T25456] team0: Port device team_slave_1 removed [ 1077.065268][T25456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1077.148601][T25456] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1077.209031][ T29] audit: type=1400 audit(1784035852.118:1756): avc: denied { write } for pid=25459 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1077.374403][T25059] 8021q: adding VLAN 0 to HW filter on device team0 [ 1077.435715][T16058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.443818][T16058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1077.566058][T16080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.573237][T16080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1078.376179][T25484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6191'. [ 1078.749628][ T1155] hsr_slave_0: left promiscuous mode [ 1078.812740][ T1155] hsr_slave_1: left promiscuous mode [ 1078.838258][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1078.858217][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1078.899957][ T1155] hsr_slave_0: left promiscuous mode [ 1078.923492][ T1155] hsr_slave_1: left promiscuous mode [ 1079.411994][ T1155] veth1_macvtap: left promiscuous mode [ 1079.447526][ T1155] veth0_macvtap: left promiscuous mode [ 1079.542047][ T29] audit: type=1400 audit(1784035854.388:1757): avc: denied { write } for pid=25466 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1079.568879][T20579] Process accounting resumed [ 1079.624561][ T1155] veth1_vlan: left promiscuous mode [ 1079.642847][T25502] netlink: 'syz.2.6194': attribute type 2 has an invalid length. [ 1079.651462][T25502] netlink: 'syz.2.6194': attribute type 1 has an invalid length. [ 1079.815852][ T1155] veth0_vlan: left promiscuous mode [ 1080.755143][ T29] audit: type=1400 audit(1784035855.658:1758): avc: denied { write } for pid=25506 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1081.226570][T24444] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1081.433291][T24444] usb 3-1: not running at top speed; connect to a high speed hub [ 1081.466278][T24444] usb 3-1: config 159 has an invalid interface number: 137 but max is 0 [ 1081.477937][T24444] usb 3-1: config 159 has no interface number 0 [ 1081.831194][T24444] usb 3-1: config 159 interface 137 has no altsetting 0 [ 1081.852538][T24444] usb 3-1: New USB device found, idVendor=06be, idProduct=0800, bcdDevice=c3.a8 [ 1081.886944][T24444] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.917902][T24444] usb 3-1: Product: syz [ 1081.932649][T24444] usb 3-1: Manufacturer: К [ 1081.948904][T24444] usb 3-1: SerialNumber: syz [ 1082.081420][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 1082.135242][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 1082.205692][T24444] gspca_main: spca500-2.14.0 probing 06be:0800 [ 1082.299979][T24444] usb 3-1: USB disconnect, device number 29 [ 1085.153327][ T29] audit: type=1400 audit(1784035860.048:1759): avc: denied { write } for pid=25511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1087.008760][ T29] audit: type=1400 audit(1784035861.918:1760): avc: denied { write } for pid=25545 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1087.565595][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 1088.043785][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 1088.111598][ T29] audit: type=1400 audit(1784035863.018:1761): avc: denied { write } for pid=25552 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1088.384850][ T29] audit: type=1400 audit(1784035863.288:1762): avc: denied { write } for pid=25569 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1088.675887][T24784] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 1088.771295][T25584] netlink: 'syz.2.6206': attribute type 1 has an invalid length. [ 1088.897586][T25590] SELinux: Context system_u:object_r:pam_console_exec_t:s0 is not valid (left unmapped). [ 1088.918031][T24784] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.925545][ T29] audit: type=1400 audit(1784035863.828:1763): avc: denied { relabelto } for pid=25589 comm="syz.8.6207" name="file0" dev="tmpfs" ino=5234 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:pam_console_exec_t:s0" [ 1088.964372][ T29] audit: type=1400 audit(1784035863.868:1764): avc: denied { associate } for pid=25589 comm="syz.8.6207" name="file0" dev="tmpfs" ino=5234 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:pam_console_exec_t:s0" [ 1088.981426][T24784] usb 10-1: config 0 has no interfaces? [ 1089.072651][T24784] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1089.088398][T25584] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6206'. [ 1089.117816][T24784] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.167817][T25591] bond1: (slave geneve2): making interface the new active one [ 1089.186018][T24784] usb 10-1: config 0 descriptor?? [ 1089.218719][T25591] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1089.234053][T16098] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1089.254383][T16098] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1089.479928][ T29] audit: type=1400 audit(1784035864.378:1765): avc: denied { write } for pid=25580 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1091.318755][ T29] audit: type=1400 audit(1784035866.228:1766): avc: denied { write } for pid=25620 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1091.383659][T16098] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1091.422351][T16098] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1091.956187][ T53] usb 10-1: USB disconnect, device number 25 [ 1093.063225][T25059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1093.678161][ T1155] IPVS: stop unused estimator thread 0... [ 1093.971629][T25059] veth0_vlan: entered promiscuous mode [ 1094.772236][T25059] veth1_vlan: entered promiscuous mode [ 1095.000194][T25059] veth0_macvtap: entered promiscuous mode [ 1095.068167][T25059] veth1_macvtap: entered promiscuous mode [ 1095.184006][T25059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.250699][T25059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.730684][T16106] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.750180][T25656] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6216'. [ 1095.764536][T16106] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.777579][T16098] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.792544][ T29] audit: type=1400 audit(1784035870.688:1767): avc: denied { write } for pid=25626 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1095.894403][T16098] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.975984][T20579] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1096.576599][T25665] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1096.648888][T25665] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1096.656142][T25665] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 1096.664596][T25665] audit: backlog limit exceeded [ 1096.669739][T25665] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1096.676357][T25665] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 1096.686643][T25665] audit: backlog limit exceeded [ 1096.692576][T25665] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1096.699228][T25665] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 1096.707057][T25665] audit: backlog limit exceeded [ 1096.711945][T25665] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1097.860959][T20579] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.938070][T20579] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1098.093951][T20579] usb 10-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1098.188328][T20579] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.237056][T16094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.302710][T16094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.330045][T20579] usb 10-1: config 0 descriptor?? [ 1098.360120][T20579] usb 10-1: can't set config #0, error -71 [ 1098.391718][T20579] usb 10-1: USB disconnect, device number 26 [ 1098.509683][T16050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1098.544122][T16050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1098.577484][T25671] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6219'. [ 1099.746071][T25671] batman_adv: batadv0: Removing interface: dummy0 [ 1099.798534][T25677] netlink: 'syz.9.6219': attribute type 10 has an invalid length. [ 1099.827875][T25671] bridge5: port 1(dummy0) entered blocking state [ 1099.876714][T25677] netlink: 40 bytes leftover after parsing attributes in process `syz.9.6219'. [ 1099.889030][T25671] bridge5: port 1(dummy0) entered disabled state [ 1099.933731][T25671] dummy0: entered allmulticast mode [ 1099.980457][T25671] dummy0: entered promiscuous mode [ 1100.072011][T25677] bridge5: port 1(dummy0) entered blocking state [ 1100.080576][T25677] bridge5: port 1(dummy0) entered forwarding state [ 1100.140136][T25677] dummy0: left allmulticast mode [ 1100.189269][T25696] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input61 [ 1100.202415][T25677] bridge5: port 1(dummy0) entered disabled state [ 1100.284881][T25700] netlink: 'syz.3.6224': attribute type 1 has an invalid length. [ 1100.953799][T25700] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1101.248038][T25715] netlink: 'syz.8.6228': attribute type 9 has an invalid length. [ 1102.360813][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 1102.360829][ T29] audit: type=1326 audit(1784035877.188:1836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25718 comm="syz.2.6218" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6358d9de59 code=0x7ffc0000 [ 1102.565424][ T29] audit: type=1326 audit(1784035877.188:1837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25718 comm="syz.2.6218" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6358d9de59 code=0x7ffc0000 [ 1103.083497][T25704] bond9: (slave veth1): Enslaving as an active interface with a down link [ 1103.128197][ T29] audit: type=1326 audit(1784035877.188:1838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25718 comm="syz.2.6218" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6358d9de59 code=0x7ffc0000 [ 1103.163659][ T29] audit: type=1326 audit(1784035877.188:1839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25718 comm="syz.2.6218" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6358d9de59 code=0x7ffc0000 [ 1103.211298][ T29] audit: type=1326 audit(1784035877.238:1840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25718 comm="syz.2.6218" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6358d9de59 code=0x7ffc0000 [ 1103.242550][T25706] bond9: (slave dummy0): making interface the new active one [ 1103.273633][ T29] audit: type=1326 audit(1784035877.238:1841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25718 comm="syz.2.6218" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6358d9de59 code=0x7ffc0000 [ 1103.289145][T25733] netlink: 'syz.8.6230': attribute type 2 has an invalid length. [ 1103.302872][T25706] dummy0: entered promiscuous mode [ 1103.338458][T25706] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 1103.349703][ T29] audit: type=1326 audit(1784035877.238:1842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25718 comm="syz.2.6218" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6358d9de59 code=0x7ffc0000 [ 1103.400026][T25733] netlink: 'syz.8.6230': attribute type 2 has an invalid length. [ 1103.410797][T25707] bond9 (unregistering): (slave veth1): Releasing active interface [ 1103.453491][ T29] audit: type=1326 audit(1784035877.238:1843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25718 comm="syz.2.6218" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6358d9de59 code=0x7ffc0000 [ 1103.507231][T25707] bond9 (unregistering): (slave dummy0): Releasing active interface [ 1103.633205][ T29] audit: type=1326 audit(1784035877.238:1844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25718 comm="syz.2.6218" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6358d9de59 code=0x7ffc0000 [ 1103.661741][ T29] audit: type=1326 audit(1784035877.268:1845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25718 comm="syz.2.6218" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6358d9de59 code=0x7ffc0000 [ 1103.705203][T25707] bond9 (unregistering): Released all slaves [ 1104.669226][T25742] kthread_run failed with err -4 [ 1104.808189][T25746] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 1104.850871][T25748] netlink: 'syz.8.6234': attribute type 2 has an invalid length. [ 1106.900432][T25768] ip6erspan0: entered allmulticast mode [ 1107.302204][T25774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6238'. [ 1107.553685][T25784] sctp: [Deprecated]: syz.8.6241 (pid 25784) Use of int in maxseg socket option. [ 1107.553685][T25784] Use struct sctp_assoc_value instead [ 1107.695938][T24444] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1107.818263][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 1107.818281][ T29] audit: type=1400 audit(1784035882.728:1915): avc: denied { write } for pid=25754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1107.886340][T24444] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1107.925414][T24444] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1107.990694][T24444] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1108.034212][T24444] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.482121][T25781] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1108.550830][T24444] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1108.578301][ T29] audit: type=1400 audit(1784035883.488:1916): avc: denied { write } for pid=25796 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1108.769270][T25781] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1109.494886][T24444] usb 3-1: USB disconnect, device number 30 [ 1109.612188][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1111.736146][T25844] netlink: 160 bytes leftover after parsing attributes in process `syz.8.6252'. [ 1111.746276][T25844] netlink: 160 bytes leftover after parsing attributes in process `syz.8.6252'. [ 1112.321888][T25844] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1112.701025][T25855] openvswitch: netlink: Actions may not be safe on all matching packets [ 1115.722343][ T29] audit: type=1400 audit(1784035890.628:1917): avc: denied { getopt } for pid=25868 comm="syz.9.6258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1115.762856][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.770427][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.220889][ T29] audit: type=1400 audit(1784035892.128:1918): avc: denied { write } for pid=25834 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1117.307398][T25882] overlayfs: failed to clone upperpath [ 1118.296081][ T29] audit: type=1400 audit(1784035893.208:1919): avc: denied { write } for pid=25892 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1118.627920][ T5273] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1118.844728][T25902] TC_ACT_REPEAT abuse ? [ 1119.623521][ T29] audit: type=1400 audit(1784035894.528:1920): avc: denied { write } for pid=25899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1119.993641][ T29] audit: type=1400 audit(1784035894.898:1921): avc: denied { write } for pid=25925 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1121.413131][T25942] /dev/nullb0: Can't open blockdev [ 1123.321416][ T29] audit: type=1400 audit(1784035898.228:1922): avc: denied { getopt } for pid=25950 comm="syz.3.6275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1123.927137][T25970] trusted_key: encrypted_key: key trusted:syz not found [ 1126.079740][ T29] audit: type=1400 audit(1784035900.988:1923): avc: denied { write } for pid=25944 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1126.606535][ T29] audit: type=1400 audit(1784035901.478:1924): avc: denied { write } for pid=25992 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1126.697455][T25995] overlayfs: failed to clone upperpath [ 1127.548958][ T5273] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1128.591359][T26017] netlink: 132732 bytes leftover after parsing attributes in process `syz.8.6288'. [ 1129.884170][T26036] netlink: 'syz.1.6291': attribute type 1 has an invalid length. [ 1129.892065][T26036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6291'. [ 1131.436793][ T29] audit: type=1400 audit(1784035906.336:1925): avc: denied { write } for pid=26010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.106081][T26063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6296'. [ 1133.218549][ T29] audit: type=1400 audit(1784035908.116:1926): avc: denied { write } for pid=26054 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.396033][T26063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6296'. [ 1133.406584][T26063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6296'. [ 1133.421819][T26063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6296'. [ 1133.432657][T26063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6296'. [ 1133.442980][T26063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6296'. [ 1133.453542][T26063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6296'. [ 1134.176499][ T5273] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1134.545352][T26078] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6298'. [ 1134.708669][T26084] netlink: 'syz.2.6298': attribute type 27 has an invalid length. [ 1134.733722][T26084] netlink: 'syz.2.6298': attribute type 3 has an invalid length. [ 1135.916335][T24797] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 1136.466376][T24797] usb 3-1: No LPM exit latency info found, disabling LPM. [ 1136.491428][T24797] usb 3-1: config 16 has an invalid interface number: 3 but max is 2 [ 1136.518846][T24797] usb 3-1: config 16 has an invalid interface number: 107 but max is 2 [ 1136.687505][ T29] audit: type=1400 audit(1784035911.596:1927): avc: denied { write } for pid=26067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1136.731361][T24797] usb 3-1: config 16 has 2 interfaces, different from the descriptor's value: 3 [ 1136.742371][T24797] usb 3-1: config 16 has no interface number 0 [ 1136.749626][T24797] usb 3-1: config 16 has no interface number 1 [ 1136.755851][T24797] usb 3-1: config 16 interface 3 has no altsetting 0 [ 1136.763989][T24797] usb 3-1: config 16 interface 107 has no altsetting 0 [ 1137.138805][T24797] usb 3-1: string descriptor 0 read error: -22 [ 1137.152446][T24797] usb 3-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=72.1e [ 1137.165760][T24797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.207078][T24797] usb 3-1: unknown number of interfaces: 2 [ 1137.318971][ T29] audit: type=1400 audit(1784035912.226:1928): avc: denied { write } for pid=26105 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1137.704241][T24797] usb 3-1: USB disconnect, device number 31 [ 1137.759546][T26110] netlink: 199836 bytes leftover after parsing attributes in process `syz.8.6304'. [ 1138.485998][T24797] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1138.537961][T26123] fuse: fd is not a fuse device [ 1138.622389][ T29] audit: type=1400 audit(1784035913.526:1929): avc: denied { write } for pid=26122 comm="syz.8.6306" name="file0" dev="tmpfs" ino=5376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1138.657875][T24797] usb 3-1: Using ep0 maxpacket: 32 [ 1138.778039][T24797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.839196][T24797] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1138.868003][ T29] audit: type=1400 audit(1784035913.526:1930): avc: denied { open } for pid=26122 comm="syz.8.6306" path="/1015/file0" dev="tmpfs" ino=5376 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1138.894998][T24797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.955909][T24797] usb 3-1: Product: syz [ 1138.971805][T24797] usb 3-1: Manufacturer: syz [ 1138.995203][T24797] usb 3-1: SerialNumber: syz [ 1139.024308][T24797] usb 3-1: config 0 descriptor?? [ 1139.305158][T20579] libceph: connect (1)[c::]:6789 error -101 [ 1139.957995][T24797] quatech2 3-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1139.967811][T20579] libceph: mon0 (1)[c::]:6789 connect error [ 1139.992233][T26136] ceph: No mds server is up or the cluster is laggy [ 1139.993083][T20579] libceph: connect (1)[c::]:6789 error -101 [ 1140.006961][T20579] libceph: mon0 (1)[c::]:6789 connect error [ 1140.103340][ T29] audit: type=1400 audit(1784035914.986:1931): avc: denied { getopt } for pid=26147 comm="syz.8.6310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1140.123214][ T29] audit: type=1400 audit(1784035914.986:1932): avc: denied { ioctl } for pid=26147 comm="syz.8.6310" path="socket:[98965]" dev="sockfs" ino=98965 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1140.266906][T20579] libceph: connect (1)[c::]:6789 error -101 [ 1140.276264][T20579] libceph: mon0 (1)[c::]:6789 connect error [ 1140.278491][ T29] audit: type=1400 audit(1784035915.186:1933): avc: denied { write } for pid=26107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1140.808862][T26159] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6314'. [ 1141.107931][ T29] audit: type=1400 audit(1784035916.016:1934): avc: denied { write } for pid=26158 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1141.958902][T24797] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1141.983208][T26163] input: syz1 as /devices/virtual/input/input62 [ 1141.983315][T24797] quatech2 3-1:0.0: probe with driver quatech2 failed with error -71 [ 1142.120276][T24797] usb 3-1: USB disconnect, device number 32 [ 1146.166043][ T29] audit: type=1326 audit(1784035920.786:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26180 comm="syz.3.6319" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a35d9de59 code=0x0 [ 1146.864485][T24781] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1147.087849][T24781] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1147.170248][T24781] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1147.218614][T24781] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1147.261105][T24781] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1147.288638][T24781] usb 2-1: Product: syz [ 1147.304379][T24781] usb 2-1: Manufacturer: syz [ 1147.325030][T24781] usb 2-1: SerialNumber: syz [ 1147.358563][T24781] usb 2-1: config 0 descriptor?? [ 1147.406858][T24781] usb 2-1: selecting invalid altsetting 0 [ 1147.492504][ T29] audit: type=1400 audit(1784035922.396:1936): avc: denied { write } for pid=26184 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1147.615028][T26193] 9p: Bad value for 'wfdno' [ 1147.720880][T24781] usb 2-1: USB disconnect, device number 35 [ 1147.955539][ T29] audit: type=1400 audit(1784035922.856:1937): avc: denied { write } for pid=26215 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1151.409062][ T29] audit: type=1400 audit(1784035926.316:1938): avc: denied { write } for pid=26222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1151.690350][ T29] audit: type=1400 audit(1784035926.596:1939): avc: denied { write } for pid=26242 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1151.776277][T26245] netlink: 120 bytes leftover after parsing attributes in process `syz.8.6322'. [ 1152.396825][ T29] audit: type=1400 audit(1784035927.296:1940): avc: denied { getattr } for pid=26247 comm="syz.1.6329" name="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1152.558259][T26251] team_slave_1: Caught tx_queue_len zero misconfig [ 1153.181927][T26257] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6331'. [ 1153.203304][T26257] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6331'. [ 1153.226721][ T29] audit: type=1400 audit(1784035928.126:1941): avc: denied { mount } for pid=26247 comm="syz.1.6329" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 1154.070972][ T29] audit: type=1804 audit(1784035928.976:1942): pid=26248 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.6329" name="/newroot/21/file0" dev="tmpfs" ino=131 res=1 errno=0 [ 1154.153977][T26269] bond0: entered promiscuous mode [ 1154.159681][T26269] bond_slave_0: entered promiscuous mode [ 1154.166234][T26269] bond_slave_1: entered promiscuous mode [ 1154.177985][T26269] batadv0: entered promiscuous mode [ 1155.192073][T26275] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6334'. [ 1156.683226][ T29] audit: type=1400 audit(1784035931.586:1943): avc: denied { write } for pid=26246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1157.343090][ T29] audit: type=1400 audit(1784035932.236:1944): avc: denied { accept } for pid=26296 comm="syz.1.6341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1157.689059][ T29] audit: type=1400 audit(1784035932.596:1945): avc: denied { write } for pid=26306 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1157.690857][T24407] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1157.735493][T24407] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1157.744557][T24407] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1157.766140][T24407] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1157.778850][T24407] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1159.826154][T24768] Bluetooth: hci2: command tx timeout [ 1159.870637][T26345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6350'. [ 1160.047040][T26348] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1160.184058][ T29] audit: type=1400 audit(1784035935.086:1946): avc: denied { write } for pid=26318 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1160.529904][ T29] audit: type=1400 audit(1784035935.436:1947): avc: denied { write } for pid=26352 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1161.022303][T24407] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1161.035038][T24407] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1161.047648][T24407] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1161.060133][T24407] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1161.067858][T24407] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1161.234872][T26310] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1161.262202][T26310] lo speed is unknown, defaulting to 1000 [ 1161.593797][T26345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6350'. [ 1161.907230][T24768] Bluetooth: hci2: command tx timeout [ 1163.192232][T24768] Bluetooth: hci1: command tx timeout [ 1163.986291][T24768] Bluetooth: hci2: command tx timeout [ 1165.175181][T26416] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1165.189989][T26416] Error validating options; rc = [-22] [ 1165.216592][T26416] netlink: 'syz.8.6357': attribute type 21 has an invalid length. [ 1165.225906][T26416] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6357'. [ 1165.266049][T24768] Bluetooth: hci1: command tx timeout [ 1165.730477][T26360] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1165.758461][T26360] lo speed is unknown, defaulting to 1000 [ 1165.840850][T26310] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.848085][T26310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.855806][T26310] bridge_slave_0: entered allmulticast mode [ 1165.882486][T26310] bridge_slave_0: entered promiscuous mode [ 1165.930491][T26310] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.966128][T26310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.986411][T26310] bridge_slave_1: entered allmulticast mode [ 1166.011835][T26310] bridge_slave_1: entered promiscuous mode [ 1166.068809][T24768] Bluetooth: hci2: command tx timeout [ 1166.088092][T26424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6359'. [ 1166.127976][T26310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1166.175459][T26310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1166.251657][T26310] team0: Port device team_slave_0 added [ 1166.273243][T26310] team0: Port device team_slave_1 added [ 1166.347593][T26310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1166.355217][T26310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.384654][T26310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1166.422524][T26310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1166.429918][T26310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.459006][T26310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1166.898529][T26310] hsr_slave_0: entered promiscuous mode [ 1166.905194][T26310] hsr_slave_1: entered promiscuous mode [ 1166.911967][T26310] debugfs: 'hsr0' already exists in 'hsr' [ 1166.918518][T26310] Cannot create hsr debugfs directory [ 1167.346158][T24768] Bluetooth: hci1: command tx timeout [ 1168.505561][T26310] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1168.518397][T26310] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.689056][T26360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1168.702368][T26360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.713899][T26360] bridge_slave_0: entered allmulticast mode [ 1168.724937][T26360] bridge_slave_0: entered promiscuous mode [ 1168.734940][T26360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.743816][T26360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.781448][T26360] bridge_slave_1: entered allmulticast mode [ 1168.792290][T26360] bridge_slave_1: entered promiscuous mode [ 1169.038724][T26310] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1169.100045][T26310] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.227918][T26360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.294690][ T29] audit: type=1400 audit(1784035944.196:1948): avc: denied { getopt } for pid=26470 comm="syz.8.6371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1169.317759][T26310] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1169.328253][T26310] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.368151][T26360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.377767][ T53] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1169.427167][T24768] Bluetooth: hci1: command tx timeout [ 1169.491754][T26310] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1169.505417][T26310] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.554682][ T53] usb 3-1: Using ep0 maxpacket: 8 [ 1169.555180][T26360] team0: Port device team_slave_0 added [ 1169.580351][ T53] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1169.580840][T26360] team0: Port device team_slave_1 added [ 1169.614000][ T53] usb 3-1: config 0 has no interface number 0 [ 1169.642545][ T53] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1169.658833][ T53] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1169.671790][ T53] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1169.691604][ T53] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1169.710958][ T53] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1169.719632][T26360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.721736][ T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.740134][T26360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.789370][ T53] usb 3-1: config 0 descriptor?? [ 1169.836315][T26360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.858233][ T53] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1169.868612][T26360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.884955][T26360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.925085][T26360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1170.080086][T26360] hsr_slave_0: entered promiscuous mode [ 1170.088423][T26360] hsr_slave_1: entered promiscuous mode [ 1170.094774][T26360] debugfs: 'hsr0' already exists in 'hsr' [ 1170.101521][T26360] Cannot create hsr debugfs directory [ 1170.472840][T26310] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1170.495000][T26310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1170.811484][T26310] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1170.871154][T26310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1170.927353][T26310] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1170.937141][ T5805] usb 3-1: USB disconnect, device number 33 [ 1170.946881][ T5805] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1170.967010][T26310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1170.981345][T26490] fuse: fd is not a fuse device [ 1171.001480][ T29] audit: type=1400 audit(1784035945.906:1949): avc: denied { ioctl } for pid=26489 comm="syz.8.6375" path="/1037/file0" dev="tmpfs" ino=5492 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1171.046906][T26310] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1171.054079][ T29] audit: type=1400 audit(1784035945.906:1950): avc: denied { append } for pid=26489 comm="syz.8.6375" name="file0" dev="tmpfs" ino=5492 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1171.104350][T26310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1171.251003][T26498] netlink: 'syz.8.6378': attribute type 1 has an invalid length. [ 1171.281636][T26498] netlink: 'syz.8.6378': attribute type 2 has an invalid length. [ 1171.467347][T26360] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.736749][T26360] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.175954][ T5798] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1173.201409][T26360] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.245108][T26310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1173.344521][ T29] audit: type=1400 audit(1784035948.246:1951): avc: denied { getopt } for pid=26530 comm="syz.8.6384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1173.422614][ T5798] usb 3-1: Using ep0 maxpacket: 8 [ 1173.546544][ T5798] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1173.577903][ T5798] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1173.615294][ T5798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1173.643278][T26360] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.662577][ T5798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1173.690750][T26536] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6386'. [ 1173.698125][ T5798] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1173.742717][ T5798] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1173.761525][ T29] audit: type=1400 audit(1784035948.666:1952): avc: denied { create } for pid=26534 comm="syz.8.6386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1173.762226][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.639128][ T5798] usb 3-1: Product: syz [ 1174.646595][ T5798] usb 3-1: Manufacturer: syz [ 1174.651270][ T5798] usb 3-1: SerialNumber: syz [ 1174.788198][ T5798] usb 3-1: config 0 descriptor?? [ 1174.825236][ T29] audit: type=1400 audit(1784035949.726:1953): avc: denied { write } for pid=26517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1175.145589][T26310] 8021q: adding VLAN 0 to HW filter on device team0 [ 1175.192830][T16082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.199991][T16082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1175.261317][T16082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.268501][T16082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1175.319165][ T29] audit: type=1326 audit(1784035950.226:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26557 comm="syz.3.6390" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a35d9de59 code=0x0 [ 1175.472275][ T29] audit: type=1400 audit(1784035950.376:1955): avc: denied { write } for pid=26559 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1177.188424][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.194763][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.245115][T26360] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1177.300452][T26360] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1177.342620][T26360] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1177.391386][T26360] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1177.430587][T26360] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1177.473784][T26360] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1177.501027][T26360] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1177.552558][T26360] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1178.978403][T26360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1179.437752][ T29] audit: type=1400 audit(1784035954.346:1956): avc: denied { write } for pid=26574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1179.521200][T26360] 8021q: adding VLAN 0 to HW filter on device team0 [ 1179.552237][T16098] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.559395][T16098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1179.603744][T16098] bridge0: port 2(bridge_slave_1) entered blocking state [ 1179.610908][T16098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1179.633797][ T29] audit: type=1400 audit(1784035954.536:1957): avc: denied { write } for pid=26605 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1179.734670][T26599] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1179.757834][T26599] lo speed is unknown, defaulting to 1000 [ 1180.038475][ T5798] usb 3-1: can't set config #0, error -110 [ 1181.152773][ T5805] libceph: connect (1)[c::]:6789 error -99 [ 1181.173725][ T5805] libceph: mon0 (1)[c::]:6789 connect error [ 1181.384476][T26623] ceph: No mds server is up or the cluster is laggy [ 1181.436139][ T5805] libceph: connect (1)[c::]:6789 error -99 [ 1181.443285][ T5805] libceph: mon0 (1)[c::]:6789 connect error [ 1181.660545][T26360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1181.838963][T26360] veth0_vlan: entered promiscuous mode [ 1181.887916][T26360] veth1_vlan: entered promiscuous mode [ 1182.089789][T26310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1182.120859][T26360] veth0_macvtap: entered promiscuous mode [ 1182.176212][T26360] veth1_macvtap: entered promiscuous mode [ 1182.304742][T26360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1182.335325][ T29] audit: type=1400 audit(1784035957.236:1958): avc: denied { write } for pid=26626 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1182.432866][T26654] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6399'. [ 1182.498642][T26360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1182.581787][T16087] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.651862][T16087] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.725221][T16087] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.830099][T16087] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1182.908409][ T29] audit: type=1400 audit(1784035957.816:1959): avc: denied { write } for pid=26658 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1183.434234][T16087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.493241][T16087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.758920][T16098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.768212][T16098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1184.385188][T26664] netlink: 'syz.3.6402': attribute type 3 has an invalid length. [ 1184.463425][T26310] veth0_vlan: entered promiscuous mode [ 1184.498032][T26310] veth1_vlan: entered promiscuous mode [ 1184.573180][T26310] veth0_macvtap: entered promiscuous mode [ 1184.604230][T26310] veth1_macvtap: entered promiscuous mode [ 1184.648773][T24797] usb 3-1: USB disconnect, device number 34 [ 1184.708746][T26310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1184.912751][T26310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1184.928431][T16082] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.956817][T16082] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.968977][T16082] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.495378][T16082] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.975135][T16084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.052699][T16084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1187.852369][T26709] macvlan0: entered promiscuous mode [ 1188.138702][T26712] netdevsim netdevsim1: Direct firmware load for . [ 1188.138702][T26712] failed with error -2 [ 1188.217486][T26712] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1188.217486][T26712] [ 1188.249607][ T29] audit: type=1400 audit(1784035963.146:1960): avc: denied { write } for pid=26666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1188.416697][T16080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.455913][T16080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1189.111428][ T29] audit: type=1400 audit(1784035964.016:1961): avc: denied { write } for pid=26729 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1189.643960][T26737] overlayfs: failed to clone upperpath [ 1191.931484][T26745] tipc: Enabling of bearer rejected, failed to enable media [ 1192.735882][T26763] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1192.749729][T26763] lo speed is unknown, defaulting to 1000 [ 1195.490697][ T29] audit: type=1326 audit(1784035970.376:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26782 comm="syz.2.6424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6358d9de59 code=0x7ffc0000 [ 1195.580332][T26787] netlink: 'syz.2.6424': attribute type 1 has an invalid length. [ 1195.588412][T26787] netlink: 756 bytes leftover after parsing attributes in process `syz.2.6424'. [ 1195.759985][ T29] audit: type=1326 audit(1784035970.386:1963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26782 comm="syz.2.6424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6358d9de59 code=0x7ffc0000 [ 1195.844761][T26780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6423'. [ 1196.527227][ T29] audit: type=1326 audit(1784035970.386:1964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26782 comm="syz.2.6424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6358d9de59 code=0x7ffc0000 [ 1196.742176][ T29] audit: type=1326 audit(1784035970.386:1965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26782 comm="syz.2.6424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f6358d9de59 code=0x7ffc0000 [ 1196.806023][ T29] audit: type=1326 audit(1784035970.386:1966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26782 comm="syz.2.6424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6358d9de59 code=0x7ffc0000 [ 1196.869686][ T29] audit: type=1326 audit(1784035970.386:1967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26782 comm="syz.2.6424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6358d9de59 code=0x7ffc0000 [ 1196.914002][ T29] audit: type=1326 audit(1784035970.386:1968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26782 comm="syz.2.6424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6358d9de59 code=0x7ffc0000 [ 1196.943114][ T29] audit: type=1326 audit(1784035970.396:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26782 comm="syz.2.6424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6358d9de59 code=0x7ffc0000 [ 1196.995603][ T29] audit: type=1326 audit(1784035970.396:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26782 comm="syz.2.6424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6358d9de59 code=0x7ffc0000 [ 1197.048930][ T29] audit: type=1326 audit(1784035970.396:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26782 comm="syz.2.6424" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6358d9de59 code=0x7ffc0000 [ 1205.201127][ T53] IPVS: starting estimator thread 0... [ 1205.749454][T26858] IPVS: using max 33 ests per chain, 79200 per kthread [ 1206.857971][T26868] fuse: fd is not a fuse device [ 1206.866814][T26868] ipt_REJECT: ECHOREPLY no longer supported. [ 1208.008152][T26850] 8021q: adding VLAN 0 to HW filter on device team0 [ 1208.600856][T26850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1208.665349][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 1208.665366][ T29] audit: type=1400 audit(1784035983.566:2033): avc: denied { write } for pid=26833 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1208.718387][T26850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1208.738978][T26850] virt_wifi0: left promiscuous mode [ 1208.796310][T26850] veth1_macvtap: left promiscuous mode [ 1208.811264][T26850] veth0_macvtap: left promiscuous mode [ 1208.841461][T26850] veth0_macvtap: entered promiscuous mode [ 1208.852834][ T29] audit: type=1400 audit(1784035983.756:2034): avc: denied { write } for pid=26882 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1208.892230][T26850] veth1_macvtap: entered promiscuous mode [ 1208.954669][T26850] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1208.974671][T26850] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1208.984161][T26850] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1208.993487][T26850] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1209.035926][T26850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1209.051910][T26850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1209.068006][T26850] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1209.082019][T26850] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1209.092805][T26850] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1209.103280][T26850] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1209.112898][T26850] bridge2: left promiscuous mode [ 1209.145030][T26850] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1209.155227][T26850] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1209.178280][T26850] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1209.206561][T26850] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1209.214219][T26850] virt_wifi0: entered promiscuous mode [ 1209.223477][T26850] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1209.237892][T24801] ±ÿª¨úrBº“ speed is unknown, defaulting to 1000 [ 1209.246493][ T53] bridge2: entered promiscuous mode [ 1209.253260][T24801] syú2: Port: 1 Link ACTIVE [ 1209.276214][T16050] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.283663][T16050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1209.293630][T16087] bond6: (slave bridge3): link status up again after 0 ms [ 1209.311077][T16050] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.318516][T16050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1209.326695][ T9292] bond6: (slave bridge3): link status up again after 0 ms [ 1209.346642][ T9292] bond6: (slave bridge3): link status up again after 0 ms [ 1209.354735][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 1209.375989][T16106] bond6: (slave bridge3): link status up again after 0 ms [ 1209.408024][T16106] bond6: (slave bridge3): link status up again after 0 ms [ 1209.412795][T16050] bridge0: port 4(vlan2) entered blocking state [ 1209.422333][T16050] bridge0: port 4(vlan2) entered forwarding state [ 1209.426121][T16087] bond6: (slave bridge3): link status up again after 0 ms [ 1209.455945][T16106] bond6: (slave bridge3): link status up again after 0 ms [ 1209.471811][T16050] bridge4: port 1(veth15) entered blocking state [ 1209.477337][T16106] bond6: (slave bridge3): link status up again after 0 ms [ 1209.480152][T16050] bridge4: port 1(veth15) entered forwarding state [ 1209.496107][T16106] bond6: (slave bridge3): link status up again after 0 ms [ 1209.499638][T16050] bridge4: port 2(veth17) entered blocking state [ 1209.510224][T16050] bridge4: port 2(veth17) entered forwarding state [ 1209.626852][T16050] bridge0: port 3(team0) entered blocking state [ 1209.633833][T16050] bridge0: port 3(team0) entered forwarding state [ 1211.086030][T16098] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1211.118078][T16098] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.143979][T16098] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1211.203395][T16098] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1211.265136][T16098] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.306448][T16098] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1211.354811][T16098] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1211.544878][T16098] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.553717][T16098] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1211.576199][T16098] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1211.584968][T16098] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.594748][T16098] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1214.376806][T16080] net_ratelimit: 52 callbacks suppressed [ 1214.376826][T16080] bond6: (slave bridge3): failed to get link speed/duplex [ 1214.657314][T16094] bond6: (slave bridge3): failed to get link speed/duplex [ 1215.286774][T16084] bond6: (slave bridge3): failed to get link speed/duplex [ 1215.350409][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1) [ 1215.420594][T16050] bond6: (slave bridge3): failed to get link speed/duplex [ 1215.474108][T26934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6453'. [ 1215.709736][T16106] bond6: (slave bridge3): failed to get link speed/duplex [ 1216.073370][T16084] bond6: (slave bridge3): failed to get link speed/duplex [ 1216.312300][T16058] bond6: (slave bridge3): failed to get link speed/duplex [ 1216.623404][T16084] bond6: (slave bridge3): failed to get link speed/duplex [ 1217.148363][T16090] bond6: (slave bridge3): failed to get link speed/duplex [ 1217.295603][ T29] audit: type=1400 audit(1784035992.196:2035): avc: denied { write } for pid=26893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1217.621575][T16080] Bluetooth: hci3: Frame reassembly failed (-84) [ 1217.636162][ T29] audit: type=1400 audit(1784035992.536:2036): avc: denied { write } for pid=26954 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1217.675491][T24407] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1217.792552][T26957] Cannot find add_set index 0 as target [ 1217.821770][T26960] syzkaller0: entered promiscuous mode [ 1217.848447][T26960] syzkaller0: entered allmulticast mode [ 1218.086370][T26960] tipc: Started in network mode [ 1218.091337][T26960] tipc: Node identity 6262a7f5459b, cluster identity 4711 [ 1218.099362][T26960] tipc: Enabled bearer , priority 0 [ 1218.116554][T24797] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1218.488248][T26959] tipc: Resetting bearer [ 1218.532193][T26959] tipc: Disabling bearer [ 1218.646001][T24797] usb 6-1: Using ep0 maxpacket: 32 [ 1218.657528][T24797] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1218.668021][T24797] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.440906][T16084] net_ratelimit: 14 callbacks suppressed [ 1219.440944][T16084] bond6: (slave bridge3): failed to get link speed/duplex [ 1219.667369][T24407] Bluetooth: hci3: command 0x1003 tx timeout [ 1219.677537][T24768] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1219.764619][T24797] usb 6-1: selecting invalid altsetting 3 [ 1219.771876][T24797] comedi comedi5: could not set alternate setting 3 in high speed [ 1219.780338][T16094] bond6: (slave bridge3): failed to get link speed/duplex [ 1219.780684][T24797] usbduxsigma 6-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 1219.850476][T24797] usbduxsigma 6-1:128.0: probe with driver usbduxsigma failed with error -22 [ 1219.891353][T24797] usb 6-1: USB disconnect, device number 42 [ 1219.926747][T16058] bond6: (slave bridge3): failed to get link speed/duplex [ 1220.058339][T16080] bond6: (slave bridge3): failed to get link speed/duplex [ 1220.245680][ T9292] bond6: (slave bridge3): failed to get link speed/duplex [ 1220.270093][T26982] siw: device registration error -23 [ 1220.279910][T26982] smc: removing ib device syz1 [ 1220.439760][T26982] smbdirect: ib_dev[syz1] removed [ 1221.586994][T26982] ------------[ cut here ]------------ [ 1221.592479][T26982] !xa_empty(&pool->xa) [ 1221.592496][T26982] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#0: syz.8.6464/26982 [ 1221.610609][T26982] Modules linked in: [ 1221.614796][T26982] CPU: 0 UID: 0 PID: 26982 Comm: syz.8.6464 Tainted: G L syzkaller #0 PREEMPT(full) [ 1221.625805][T26982] Tainted: [L]=SOFTLOCKUP [ 1221.630160][T26982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1221.640372][T26982] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 1221.645880][T26982] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 a6 a4 26 f9 5b c3 cc cc cc cc e8 9b a4 26 f9 90 <0f> 0b 90 e8 92 a4 26 f9 5b e9 4c 59 d9 02 e8 47 1e 97 f9 eb d0 0f [ 1221.666422][T26982] RSP: 0018:ffffc900056bf180 EFLAGS: 00010246 [ 1221.672492][T26982] RAX: 0000000000080000 RBX: ffff888035801398 RCX: ffffc90011334000 [ 1221.681168][T26982] RDX: 0000000000080000 RSI: ffffffff88e33805 RDI: ffff888035801418 [ 1221.689195][T26982] RBP: ffffffff88e19230 R08: 0000000000000005 R09: 0000000000000001 [ 1221.697209][T26982] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888035800698 [ 1221.705174][T26982] R13: ffff8880357fffe0 R14: ffff8880357fffe0 R15: ffff8880358010f8 [ 1221.713187][T26982] FS: 00007f5eddabf6c0(0000) GS:ffff888123de8000(0000) knlGS:0000000000000000 [ 1221.722138][T26982] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1221.728776][T26982] CR2: 00007f6358fed2f8 CR3: 000000007e4d5000 CR4: 00000000003526f0 [ 1221.736780][T26982] Call Trace: [ 1221.740050][T26982] [ 1221.742971][T26982] rxe_dealloc+0x25/0xc0 [ 1221.747579][T26982] ib_dealloc_device+0x49/0x230 [ 1221.752556][T26982] __ib_unregister_device+0x396/0x480 [ 1221.757995][T26982] ib_unregister_device_and_put+0x5a/0x80 [ 1221.765054][T26982] nldev_dellink+0x308/0x430 [ 1221.769803][T26982] ? __pfx_nldev_dellink+0x10/0x10 [ 1221.774917][T26982] ? unwind_get_return_address+0x59/0xa0 [ 1221.780715][T26982] ? rcu_is_watching+0x12/0xc0 [ 1221.785501][T26982] ? cap_capable+0x107/0x430 [ 1221.790198][T26982] ? bpf_lsm_capable+0x9/0x10 [ 1221.794878][T26982] ? security_capable+0x80/0x260 [ 1221.799933][T26982] ? ns_capable+0xd2/0xf0 [ 1221.804264][T26982] ? __pfx_nldev_dellink+0x10/0x10 [ 1221.809424][T26982] rdma_nl_rcv_msg+0x392/0x6f0 [ 1221.814260][T26982] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1221.819621][T26982] ? __lock_acquire+0x49f/0x1a40 [ 1221.824570][T26982] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 1221.831706][T26982] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1221.838730][T26982] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1221.844130][T26982] netlink_unicast+0x585/0x850 [ 1221.848944][T26982] ? __pfx_netlink_unicast+0x10/0x10 [ 1221.854235][T26982] ? __pfx_sock_has_perm+0x10/0x10 [ 1221.859447][T26982] netlink_sendmsg+0x8b0/0xda0 [ 1221.865641][T26982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1221.871005][T26982] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1221.876640][T26982] ____sys_sendmsg+0xa4d/0xbe0 [ 1221.881498][T26982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1221.886834][T26982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1221.892144][T26982] ___sys_sendmsg+0x190/0x1e0 [ 1221.896872][T26982] ? __pfx____sys_sendmsg+0x10/0x10 [ 1221.902079][T26982] ? __lock_acquire+0x49f/0x1a40 [ 1221.907098][T26982] __sys_sendmsg+0x160/0x210 [ 1221.911689][T26982] ? __pfx___sys_sendmsg+0x10/0x10 [ 1221.916860][T26982] do_syscall_64+0x115/0x870 [ 1221.921462][T26982] ? clear_bhb_loop+0x40/0x90 [ 1221.926206][T26982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.932098][T26982] RIP: 0033:0x7f5edcb9de59 [ 1221.936564][T26982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1221.956232][T26982] RSP: 002b:00007f5eddabf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1221.964646][T26982] RAX: ffffffffffffffda RBX: 00007f5edce25fa0 RCX: 00007f5edcb9de59 [ 1221.974022][T26982] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1221.982039][T26982] RBP: 00007f5edcc33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1221.990257][T26982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1221.998266][T26982] R13: 00007f5edce26038 R14: 00007f5edce25fa0 R15: 00007ffc7a5f4e28 [ 1222.006283][T26982] [ 1222.009312][T26982] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1222.016587][T26982] CPU: 0 UID: 0 PID: 26982 Comm: syz.8.6464 Tainted: G L syzkaller #0 PREEMPT(full) [ 1222.027533][T26982] Tainted: [L]=SOFTLOCKUP [ 1222.031840][T26982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/10/2026 [ 1222.041885][T26982] Call Trace: [ 1222.045157][T26982] [ 1222.048078][T26982] dump_stack_lvl+0x100/0x190 [ 1222.052761][T26982] vpanic+0x552/0x970 [ 1222.056736][T26982] ? __pfx_vpanic+0x10/0x10 [ 1222.061246][T26982] panic+0xd1/0xe0 [ 1222.064961][T26982] ? __pfx_panic+0x10/0x10 [ 1222.069390][T26982] check_panic_on_warn.cold+0x19/0x34 [ 1222.074764][T26982] ? rxe_pool_cleanup+0x46/0x60 [ 1222.079621][T26982] __warn.cold+0x191/0x318 [ 1222.084041][T26982] __report_bug+0x30f/0x440 [ 1222.088682][T26982] ? rxe_pool_cleanup+0x46/0x60 [ 1222.093540][T26982] ? __pfx___report_bug+0x10/0x10 [ 1222.098569][T26982] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1222.104413][T26982] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1222.110230][T26982] ? __flush_workqueue+0x426/0x1200 [ 1222.115440][T26982] ? rxe_pool_cleanup+0x46/0x60 [ 1222.120296][T26982] report_bug+0xb2/0x220 [ 1222.124545][T26982] ? rxe_pool_cleanup+0x46/0x60 [ 1222.129399][T26982] handle_bug+0x16a/0x2a0 [ 1222.133724][T26982] exc_invalid_op+0x17/0x50 [ 1222.138220][T26982] asm_exc_invalid_op+0x1a/0x20 [ 1222.143065][T26982] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 1222.148527][T26982] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 a6 a4 26 f9 5b c3 cc cc cc cc e8 9b a4 26 f9 90 <0f> 0b 90 e8 92 a4 26 f9 5b e9 4c 59 d9 02 e8 47 1e 97 f9 eb d0 0f [ 1222.168130][T26982] RSP: 0018:ffffc900056bf180 EFLAGS: 00010246 [ 1222.174196][T26982] RAX: 0000000000080000 RBX: ffff888035801398 RCX: ffffc90011334000 [ 1222.182167][T26982] RDX: 0000000000080000 RSI: ffffffff88e33805 RDI: ffff888035801418 [ 1222.190146][T26982] RBP: ffffffff88e19230 R08: 0000000000000005 R09: 0000000000000001 [ 1222.198119][T26982] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888035800698 [ 1222.206085][T26982] R13: ffff8880357fffe0 R14: ffff8880357fffe0 R15: ffff8880358010f8 [ 1222.214056][T26982] ? __pfx_rxe_dealloc+0x10/0x10 [ 1222.219012][T26982] ? rxe_pool_cleanup+0x45/0x60 [ 1222.223873][T26982] rxe_dealloc+0x25/0xc0 [ 1222.228119][T26982] ib_dealloc_device+0x49/0x230 [ 1222.232974][T26982] __ib_unregister_device+0x396/0x480 [ 1222.238357][T26982] ib_unregister_device_and_put+0x5a/0x80 [ 1222.244079][T26982] nldev_dellink+0x308/0x430 [ 1222.248672][T26982] ? __pfx_nldev_dellink+0x10/0x10 [ 1222.253783][T26982] ? unwind_get_return_address+0x59/0xa0 [ 1222.259512][T26982] ? rcu_is_watching+0x12/0xc0 [ 1222.264282][T26982] ? cap_capable+0x107/0x430 [ 1222.268873][T26982] ? bpf_lsm_capable+0x9/0x10 [ 1222.273545][T26982] ? security_capable+0x80/0x260 [ 1222.278485][T26982] ? ns_capable+0xd2/0xf0 [ 1222.282813][T26982] ? __pfx_nldev_dellink+0x10/0x10 [ 1222.287927][T26982] rdma_nl_rcv_msg+0x392/0x6f0 [ 1222.292693][T26982] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1222.297987][T26982] ? __lock_acquire+0x49f/0x1a40 [ 1222.302931][T26982] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 1222.309352][T26982] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1222.316303][T26982] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1222.321599][T26982] netlink_unicast+0x585/0x850 [ 1222.326379][T26982] ? __pfx_netlink_unicast+0x10/0x10 [ 1222.331669][T26982] ? __pfx_sock_has_perm+0x10/0x10 [ 1222.336786][T26982] netlink_sendmsg+0x8b0/0xda0 [ 1222.341559][T26982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1222.346852][T26982] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1222.352404][T26982] ____sys_sendmsg+0xa4d/0xbe0 [ 1222.357169][T26982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1222.362462][T26982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1222.367765][T26982] ___sys_sendmsg+0x190/0x1e0 [ 1222.372449][T26982] ? __pfx____sys_sendmsg+0x10/0x10 [ 1222.377650][T26982] ? __lock_acquire+0x49f/0x1a40 [ 1222.382635][T26982] __sys_sendmsg+0x160/0x210 [ 1222.387227][T26982] ? __pfx___sys_sendmsg+0x10/0x10 [ 1222.392350][T26982] do_syscall_64+0x115/0x870 [ 1222.396947][T26982] ? clear_bhb_loop+0x40/0x90 [ 1222.401634][T26982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.407523][T26982] RIP: 0033:0x7f5edcb9de59 [ 1222.411933][T26982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.431535][T26982] RSP: 002b:00007f5eddabf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1222.439942][T26982] RAX: ffffffffffffffda RBX: 00007f5edce25fa0 RCX: 00007f5edcb9de59 [ 1222.447910][T26982] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1222.455873][T26982] RBP: 00007f5edcc33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1222.463833][T26982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1222.471796][T26982] R13: 00007f5edce26038 R14: 00007f5edce25fa0 R15: 00007ffc7a5f4e28 [ 1222.479783][T26982] [ 1222.483111][T26982] Kernel Offset: disabled [ 1222.487427][T26982] Rebooting in 86400 seconds..