last executing test programs: 18m32.441134757s ago: executing program 3 (id=1064): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getrlimit(0x10, &(0x7f0000000000)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x102000, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)='.', 0x1}], 0x1}}], 0x2, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x3, 0x1, [0x2]}, 0xa) 18m31.052738762s ago: executing program 3 (id=1067): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x2, &(0x7f0000000040)=[{0x6, 0x7, 0x7, 0x7ffc0001}, {0x404b, 0x9, 0x6, 0x7}]}) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r1, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x1, 0x6, 0xd, @broadcast}, 0x10) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='source', 0x0, r2) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180)=0x0, &(0x7f0000000240)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8000, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r5]) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1/../file0/file0\x00', 0x0, 0x0) lstat(&(0x7f00000000c0)='./file0/file1/../file0/file0\x00', 0x0) syz_fuse_handle_req(r4, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001480)={&(0x7f0000000480)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x441410, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20, 0xfffffffb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000008840)="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", 0x2000, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x90, 0x0, 0x0, {0x200004, 0x0, 0x7, 0x2, 0x0, 0x400000, {0x0, 0x3, 0x5, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8000, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/fib_triestat\x00') 18m27.712315831s ago: executing program 3 (id=1083): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140100001a0007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000800002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc"], 0x114}}, 0x4000084) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) fsopen(&(0x7f0000000000)='pipefs\x00', 0x1) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d2", 0x9}], 0x1}, 0x200a4800) recvmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x12060) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) r4 = socket$alg(0x26, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) open(&(0x7f0000000280)='./file1\x00', 0x10b040, 0xc9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee1, 0x50, 0xffffffffffffffff, 0xb4e02000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x8) ftruncate(0xffffffffffffffff, 0x100000f) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f80)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r2, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a2800018008000100000000001c0003800800020002000000060001000003dc00060003005d550000050002"], 0x64}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0x70bc2c, 0x0, {{@in=@private=0xa010101, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0xecdf, 0x4e22, 0x0, 0x2, 0x20, 0x80}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x1, 0x0, 0x0, 0x740f, 0x9}, {0x1, 0x400800, 0x9, 0x40}, {0x1000}, 0x70bd2a, 0x0, 0xa, 0x4, 0x0, 0x2c}}, 0xf0}, 0x1, 0x0, 0x0, 0x24000040}, 0x44050) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) 18m27.039820188s ago: executing program 3 (id=1085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x6, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1949adaf", @ANYRES16, @ANYRESOCT=0x0], 0x44}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100002, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xa35408, 0x0) mount$bind(0x0, &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x880021, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) creat(&(0x7f0000010280)='./file0\x00', 0x2) mount(&(0x7f0000000340)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') io_uring_setup(0x2022688, &(0x7f0000000540)={0x0, 0x600, 0x4, 0x8001002, 0x3d7}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r5 = accept(r3, 0x0, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000080)=0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r5}, 0x20) 18m25.55711548s ago: executing program 3 (id=1091): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000580)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000600)=0x14) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x40, 0x0, "88bc9122e989532d"}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @loopback}}]}, 0x60}, 0x1, 0x7}, 0x0) close(r1) 18m23.460244763s ago: executing program 3 (id=1095): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140100001a0007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000800002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc"], 0x114}}, 0x4000084) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) fsopen(&(0x7f0000000000)='pipefs\x00', 0x1) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d2", 0x9}], 0x1}, 0x200a4800) recvmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x12060) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) r4 = socket$alg(0x26, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) open(&(0x7f0000000280)='./file1\x00', 0x10b040, 0xc9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee1, 0x50, 0xffffffffffffffff, 0xb4e02000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x8) ftruncate(0xffffffffffffffff, 0x100000f) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f80)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r2, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a2800018008000100000000001c0003800800020002000000060001000003dc00060003005d550000050002"], 0x64}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0x70bc2c, 0x0, {{@in=@private=0xa010101, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0xecdf, 0x4e22, 0x0, 0x2, 0x20, 0x80}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x1, 0x0, 0x0, 0x740f, 0x9}, {0x1, 0x400800, 0x9, 0x40}, {0x1000}, 0x70bd2a, 0x0, 0xa, 0x4, 0x0, 0x2c}}, 0xf0}, 0x1, 0x0, 0x0, 0x24000040}, 0x44050) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) 18m23.155647045s ago: executing program 32 (id=1095): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140100001a0007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000800002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc"], 0x114}}, 0x4000084) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) fsopen(&(0x7f0000000000)='pipefs\x00', 0x1) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d2", 0x9}], 0x1}, 0x200a4800) recvmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x12060) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18) r4 = socket$alg(0x26, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) open(&(0x7f0000000280)='./file1\x00', 0x10b040, 0xc9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee1, 0x50, 0xffffffffffffffff, 0xb4e02000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x8) ftruncate(0xffffffffffffffff, 0x100000f) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000f80)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r2, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a2800018008000100000000001c0003800800020002000000060001000003dc00060003005d550000050002"], 0x64}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0x70bc2c, 0x0, {{@in=@private=0xa010101, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0xecdf, 0x4e22, 0x0, 0x2, 0x20, 0x80}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x1, 0x0, 0x0, 0x740f, 0x9}, {0x1, 0x400800, 0x9, 0x40}, {0x1000}, 0x70bd2a, 0x0, 0xa, 0x4, 0x0, 0x2c}}, 0xf0}, 0x1, 0x0, 0x0, 0x24000040}, 0x44050) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r6) 7m26.369030378s ago: executing program 0 (id=3194): syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) socket$packet(0x11, 0x3, 0x300) socket$alg(0x26, 0x5, 0x0) unshare(0x20040400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 7m26.363735525s ago: executing program 0 (id=3195): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, 0x0, 0x910, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xffffffffffffffb1) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r2) mkdirat(r2, &(0x7f0000000340)='./file1\x00', 0x120) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r4, 0x0) read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) socket(0x10, 0x803, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000080)=0xfffffffb, 0x2dbd995001e3ca0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x30, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 7m26.333983361s ago: executing program 0 (id=3196): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x2, 0x10}, 0xc) r3 = dup(r1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) write$FUSE_INIT(r3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r4, 0x0, r1, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 7m25.412776979s ago: executing program 0 (id=3200): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000030000000700000000000000", @ANYRES32, @ANYBLOB="2e74e6dc710e840cc687a380a1eb03487c352155bc10757950c6859f80f4b3aa9ad737cc67921fee6e0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x2, 0x400, 0x0, 0x37d}, &(0x7f00000001c0), &(0x7f0000000080), 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) timerfd_create(0x9, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r1, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) 7m25.292647207s ago: executing program 0 (id=3201): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x7f9c, 0x2000, 0x400002, 0x31b}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ptype\x00') r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000700)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000009c0)=[{{&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000400)="e079ef7c689a50eae4189a29d904fd2f58223f8291136d6a095456b7be2bc69bd745d54096e69aee12c44afaa57024b674b0927c2c7e6ef204ee8cc4eb5058e4b856ed2e90de456701825607f0a32c", 0x4f}], 0x1, &(0x7f0000000900)=[@rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r2, r3, r0, r4, r3, r1]}}, @rights={{0x28, 0x1, 0x1, [r3, r2, r0, 0xffffffffffffffff, r0, r3]}}, @cred={{0x1c}}], 0x88, 0x4c451}}], 0x1, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) poll(&(0x7f0000000140)=[{r3, 0xd113}], 0x1, 0x8000007) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, 0x0}, 0x40}], 0x1, 0x2, 0x0) close(0xffffffffffffffff) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000300)={0x5, @output={0x1000, 0x0, {0xc0, 0x2}, 0x4, 0x4}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r1, @ANYRESDEC=r1, @ANYRESHEX=r6, @ANYRES8=r3], 0x64}, 0x1, 0x0, 0x0, 0x8800}, 0xc) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB], 0x20}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="04000000d01fb79b60f278a74c4b2ebcd2e94005dfe59b1bfc451af821f31ed03c24794d1197c6b56411329944c76309b8ee35eba0f159abc166acae3d2e55ef988a0d1a67267690ba7aa1354e7dd929018d4d0e278877e06489e25b6c419e8df638796d861354926cbf754403458bcab897550e6f32a90cb298a661c293535c5989e5dfb9a5735e5387749b"], 0xc4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0xff00) 7m23.61661477s ago: executing program 0 (id=3212): openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpgid(0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x300, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x804, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x8070b926, 0x80100, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc020}, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r4, 0x800000000000) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x0, 0x10000019, 0x8001, 0x0, 0x4, 0x10, 0x806, 0x5, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_SYNTH_MEMAVL(r4, 0xc004510e, &(0x7f00000003c0)=0xca) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000380)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x4004054}, 0x20000800) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001740)=""/4097, 0x1001}], 0x1, 0x0, 0x56}, 0x2622) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0xa010) 7m7.473819416s ago: executing program 33 (id=3212): openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpgid(0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x300, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x8, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x804, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4084}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x8070b926, 0x80100, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc020}, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, r4, 0x800000000000) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x0, 0x10000019, 0x8001, 0x0, 0x4, 0x10, 0x806, 0x5, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDCTL_SYNTH_MEMAVL(r4, 0xc004510e, &(0x7f00000003c0)=0xca) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000380)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x4004054}, 0x20000800) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r7, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @broadcast}, 0x10) sendmsg$inet(r7, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001740)=""/4097, 0x1001}], 0x1, 0x0, 0x56}, 0x2622) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0xa010) 34.747316768s ago: executing program 4 (id=5092): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000100)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket(0x2c, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, 0x0, &(0x7f0000000080)=@tcp6, 0x1}, 0x20) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 34.635850512s ago: executing program 4 (id=5093): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x31, 0x0, &(0x7f0000000040)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='yeah', 0x4) 34.533191039s ago: executing program 4 (id=5095): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req={0xfffff741, 0x10, 0xa96, 0x2}, 0x10) unshare(0x20060400) fsync(0xffffffffffffffff) r4 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(r5, &(0x7f0000000100)='./file2\x00', 0x181) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r6) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) fcntl$getown(r0, 0x9) 34.435537931s ago: executing program 4 (id=5097): r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000680)) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000080)=""/230, 0xe6) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000780)={0x99, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x4000000, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000600)={@host, 0x2}) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000", @ANYRES16=r7, @ANYBLOB="00012bbd7000ffdbdf254a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080001007063690011000200303030303a30303a31302e30000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000e00a80066697273746e616d65000000"], 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x4000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r8, 0x7a4, &(0x7f0000000700)={{@local, 0x938}, 0x4, 0xa2, 0x7, 0x3}) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd6914008000482f0020010000000000000000000000000001ff0200000000000000000000000000010c2088be00000800080086dd3a28080088be00200104162cfcfb010000000000007f080022eb0000000129019309020000486316870800c418120800655800000001000000000000"], 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000080)=[0xfffffffe, 0x4, 0x1, 0x4, 0x2fac, 0xd4, 0x801, 0x2]) socketpair(0x2c, 0x80000, 0x200, &(0x7f0000000640)) 33.904442897s ago: executing program 4 (id=5099): sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a0000000000000000000000140001"], 0x3c}}, 0x0) socket$kcm(0x10, 0x2, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xcc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x240040c0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00 ', @ANYRES8=0x0], 0x30}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8000, 0x0, 0x7a4e, 0xfffffffffffffffa, 0xffffbe0000000001, 0xf4, 0x9c11}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x420, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x130, 0x178, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df250200"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) ioctl$XFS_IOC_FSCOUNTS(r3, 0x80205871, &(0x7f00000000c0)) socket(0x10, 0x2, 0x2) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(0x0, 0x10) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0x85, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x7d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x0, 0x48, 0xf3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x4, 0x4, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x6, 0x7, '-rs'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x3, 0x7f, {0x7, 0x25, 0x1, 0xc, 0x0, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x6, 0x3, {0x7, 0x25, 0x1, 0x4, 0x9, 0xa4b8}}}}}}}}]}}, 0x0) 32.184248242s ago: executing program 4 (id=5105): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000005000f000006"], 0x50) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xb, 0xc4}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004000000010000000900eccb000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) (async) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) (async) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x2, 0x3, 0x0, 0x3}) 31.833491902s ago: executing program 34 (id=5105): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e0000000000000005000f000006"], 0x50) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0xb, 0xc4}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004000000010000000900eccb000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) (async) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) (async) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x8004, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x100000001, 0x2, 0x3, 0x0, 0x3}) 9.316805833s ago: executing program 7 (id=5212): getsockopt(0xffffffffffffffff, 0x3, 0x9, 0x0, 0x0) socket$inet(0x2, 0x2, 0xfff) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) msgsnd(0x0, &(0x7f0000002500)={0x7db6fe032bfedfa8}, 0x8, 0x0) setuid(0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000008300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = getpgid(r0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x3, 0x0, r2, r3, r4, 0xa6, 0x8}, 0x0, 0x0, 0xffff, 0x5, 0x1, 0x48c, 0x8, 0x8, 0x800, 0x7, r0, r5}) write$dsp(r1, &(0x7f0000000040)='\x00', 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) 8.813768222s ago: executing program 1 (id=5214): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) r4 = socket$kcm(0x10, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c820200000000000000b9c295472000", @ANYRES16=0x0, @ANYBLOB="0000fdffffffffdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x7e9840, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) r8 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) preadv(r8, 0x0, 0x0, 0x6, 0x0) close(r0) 8.12544121s ago: executing program 7 (id=5216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r3 = syz_open_dev$loop(&(0x7f0000000140), 0x65, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000180)="c657", 0x2}], 0x2, 0x8000, 0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r6 = socket$netlink(0x10, 0x3, 0x0) preadv(r4, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x3e8, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000000)="18", 0x1) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000400)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x942, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00de2b7fb0000e60080b8785d96202100000000020000ffffffffff01fffe00", "2809e8dbe108598948224ad54afaba1d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xa, 0x4}, {0x6, 0x2}, {0x4, 0x4}]}]}}, 0x0, 0x3e, 0x0, 0x1, 0x0, 0x10000, @value=r5}, 0x28) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r1, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="9800028040000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000500"], 0xb4}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 7.8370305s ago: executing program 7 (id=5221): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x98010) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x8, &(0x7f0000006680)) r3 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='8'], 0x38}}, 0x20000000) r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x0) fchdir(r5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000240)={0x0, 0xfff, 0x7, 0x0, 0x1000}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$KVM_SET_FPU(r8, 0x41a0ae8d, &(0x7f00000006c0)={'\x00', 0x0, 0x1, 0xcc, 0x0, 0xfe00, 0x6000, 0xeeef0000, '\x00', 0x8}) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000080)=0x3, 0x12) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x406}}}, 0x7) 7.737723302s ago: executing program 5 (id=5222): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x0, 0x0) getpgrp(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x483) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r3, 0xe503, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) linkat(r2, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400) socket$packet(0x11, 0x2, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)='.\x00\x00\x00', 0x4}], 0x1}, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000080)={&(0x7f00007ee000/0x2000)=nil, 0x2000}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x5, 0x8, 0xd, 0x2200, 0xffffffffffffffff, 0x9, '\x00', 0x0, r2, 0x4, 0x0, 0x0, 0x4}, 0x50) r5 = getpid() syz_pidfd_open(r5, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000140)='net/tcp6\x00') preadv(r6, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/4096, 0x1000}], 0x1, 0x141, 0x0) 7.624637305s ago: executing program 5 (id=5223): r0 = epoll_create1(0xcb839ad2e0de0990) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x200, 0x8000, 0x3}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x3, 0x3a}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000080)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, r2, 0x1, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000000c0)={{0x0, 0x10000, 0x2, 0x6, 0x6, 0xbc4a, 0x1, 0xffff, 0x10000, 0x4, 0x4, 0x4, 0xb421, 0x6, 0x5}}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000010c0)={r3, 0x8000000000000000}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f00000020c0)={0x2, 0x5, 0x5, 0x5, '\x00', 0xe4e4}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002100)={'wlan1\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002180), r1) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x2c, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x26f}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002280), 0x101000, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendto$x25(r6, &(0x7f00000022c0)="cedafd27ead80b79d5aba9b5899f1a6fd821f8cc18b4d637ce49e425efa533726bce41e04e32870bf38e209d0513f2d172ee9870f14e39089ed517cf59443d74f49c2507d04076b4acd11ecc88c299c525b56e1cd09e2e39c5f4ea65151b9216013757e274a92d4882b98b18128966dd33901141563983edcfc63042126448efcdd6a90d2f0f420f44b40df097ddb8591a3043a8e5225551acfb13b74af9", 0x9e, 0x1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000002380)={0x8, 0x1}) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, &(0x7f0000002ac0)={{&(0x7f0000002a40)={'Accelerator\x00', {&(0x7f0000002640)=@adf_str={@format={'Cy', '2', 'NumConcurrentAsymRequests\x00'}, {"7601c0da1b9a23ede9c814d2523703b1aa85fda47016c78356ca456b1e3cfaca39c110cc7f5b30a1e8440a3504195b0c83b62344d5736a62ed709791a5835bb1"}, {&(0x7f0000002580)=@adf_str={@bank={'Bank', '5', 'InterruptCoalescingTimerNs\x00'}, {"17a2c56b49689b35cae98a27e0579d4468ed088ab17ab7a68f4e68dcb0db6f8fb915bc94d326ad5f41b44a2ac1067877978a209c7caf08b14fb80a655536a606"}, {&(0x7f00000024c0)=@adf_dec={@format={'Cy', '2', 'BankNumber\x00'}, {0x2722f097}}}}}}}, {&(0x7f00000029c0)={'Accelerator0\x00', {}, {&(0x7f0000002940)={'Accelerator\x00', {&(0x7f0000002880)=@adf_hex={@bank={'Bank', '1', 'InterruptCoalescingTimerNs\x00'}, {0x5}, {&(0x7f00000027c0)=@adf_hex={@bank={'Bank', '1', 'CoreAffinity\x00'}, {0x1}, {&(0x7f0000002700)=@adf_str={@format={'Dc', '4', 'NumConcurrentAsymRequests\x00'}, {"d43371998eb10e96a1d8f1872ab8de3a9de5e25a9b5b046d22ad5868a2cd7259f0a9ba8ad8c097fa658c278fa5304e795f9da22b2e4e689826a27d4e22857a47"}}}}}}}}}}}}}, 0x4}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000002b00)=0x0) kcmp(r2, r7, 0x0, r0, r5) r8 = accept$netrom(r1, 0x0, &(0x7f0000002b40)) quotactl_fd$Q_QUOTAON(r8, 0xffffffff80000200, 0xffffffffffffffff, &(0x7f0000002b80)='./file0\x00') r9 = syz_open_dev$MSR(&(0x7f0000002bc0), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000002c00)={0x4}) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000002c40)={0x200, 0x5, 0x3, 0x80000001, 0xa, 0x0, [{0x4, 0x9, 0xffffffff, '\x00', 0x1800}, {0x1, 0x10000000, 0x8000000000000001, '\x00', 0x2200}, {0x9, 0xea0c, 0xd, '\x00', 0x800}, {0xa, 0x1, 0x5, '\x00', 0x4}, {0xffffffffffffffff, 0x0, 0x80}, {0x0, 0xb, 0x8, '\x00', 0x2}, {0xcd5, 0x4d92, 0xf68f, '\x00', 0x2100}, {0x8, 0x2, 0x6, '\x00', 0xa01}, {0x5f9, 0x7ff, 0x5, '\x00', 0xdb7bfcc6f7575a5c}, {0x2, 0xfffffffffffffffb}]}) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000002f80)={&(0x7f0000002ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x400005c) fchmod(r9, 0x20) close_range(r8, r0, 0x0) bind$bt_sco(r1, &(0x7f0000002fc0), 0x8) pipe2$watch_queue(&(0x7f0000003000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$TIOCGPTPEER(r10, 0x5441, 0xfffffffffffffff7) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000030c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x0, 0x260, 0x168, 0x0, 0xa0, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000003040), {[{{@ip={@rand_addr=0x64010101, @empty, 0xff000000, 0x0, 'pim6reg1\x00', 'team0\x00', {0xff}, {}, 0x2, 0x3, 0x82}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x3, @empty, 0x4e22}}}, {{@ip={@rand_addr=0x64010101, @multicast2, 0xff, 0xff, 'netdevsim0\x00', 'ip6gretap0\x00', {0xff}, {0xff}, 0x32, 0x3, 0x7}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x9, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x306, 0x30, 0x0, 0x1}}, @common=@ah={{0x30}, {[0x7ff, 0x1000]}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x7, 0x1}}}, {{@ip={@local, @private=0xa010100, 0xff, 0xff, 'netpci0\x00', 'macvtap0\x00', {0xff}, {}, 0xff, 0x3, 0x68}, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0xffff, @ipv4=@dev={0xac, 0x14, 0x14, 0xd}, 0x4e22}}}, {{@ip={@multicast2, @empty, 0xff, 0x0, 'tunl0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x6c, 0x2, 0x40}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x6, 0x6, @rand_addr=0x64010100, 0x4e22}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 7.587057906s ago: executing program 2 (id=5224): r0 = semget$private(0x0, 0x4, 0x96) r1 = socket$nl_generic(0x10, 0x3, 0x10) semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f0000000100)=""/22) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r2) sendmsg$NLBL_UNLABEL_C_LIST(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r4, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) syz_open_dev$tty1(0xc, 0x4, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xe) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$session_to_parent(0x12) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x21, 0x2, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='quota']) r8 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETNEXTQUOTA(r8, 0xffffffff80000901, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.004816265s ago: executing program 6 (id=5225): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x7, 0x23, 0x200, &(0x7f0000000400)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309002500000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc60efd680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca512b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413fcea0ce9ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3f303a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a3cff46591ccaff3075b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a2b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293e37966611602f297de6ff5408777d7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f63520cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c909cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f80000000000000000000000000000000000000000000000000200"}) r2 = socket(0x10, 0x803, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f0000000400)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,u']) r3 = syz_io_uring_setup(0x38, &(0x7f0000000580)={0x0, 0xbbda, 0x13500}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r3, 0x21, &(0x7f0000000440), 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60c6dd0000103afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800fe002cff3344c4a8000041"], 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="83000400000000001800128008000100736974000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4840) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x100001, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r6, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0x1, 0x9ee, 0x7ac, 0x100000000000003, 0x8, 0xfc, 0xfffffffffffffffc, 0x100fff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lstat(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000840)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 6.921105023s ago: executing program 7 (id=5226): mknodat$null(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x103) syz_init_net_socket$llc(0x1a, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/../file0\x00', 0x119) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000000e0c0)=""/102400, 0x19000) sched_setattr(0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) tkill(0x0, 0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x7}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'security.', 'securi\x12\xfe\xf814\xa3Q\x1cp)\xb4TM\xa3Kty.s\t\x827\xe6ux\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r5, 0x701, 0x0, 0xffffffff, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',access=A']) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)) 6.606738691s ago: executing program 2 (id=5227): getsockopt(0xffffffffffffffff, 0x3, 0x9, 0x0, 0x0) socket$inet(0x2, 0x2, 0xfff) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) msgsnd(0x0, &(0x7f0000002500)={0x7db6fe032bfedfa8}, 0x8, 0x0) setuid(0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000008300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = getpgid(r0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{0x3, 0x0, r2, r3, r4, 0xa6, 0x8}, 0x0, 0x0, 0xffff, 0x5, 0x1, 0x48c, 0x8, 0x8, 0x800, 0x7, r0, r5}) write$dsp(r1, &(0x7f0000000040)='\x00', 0x1) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r1, 0x0) 6.364196717s ago: executing program 6 (id=5228): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008020}, 0x8880) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xe, 0x1b, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a40)='GPL\x00', 0x3ff, 0xa7, &(0x7f0000000a80)=""/167, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x5, 0xfffff801, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000c00), 0x10, 0x8d}, 0x94) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r4, 0x601, 0x0, 0x2000000, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x800) sendmsg$NFT_BATCH(r2, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000780)=0x101, 0x4) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r8 = dup3(r6, r7, 0x0) ioctl$MON_IOCG_STATS(r8, 0xc0109207, &(0x7f0000000180)) socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ldst={0x2, 0x0, 0x0, 0x6, 0x1, 0x8, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x339d63c8d6513bfd, 0xb, 0x3, 0x18, 0x1}, @alu={0x4, 0x1, 0x8, 0xb, 0x2, 0x80, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x885}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x87, &(0x7f00000004c0)=""/135, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000680)=[{0x0, 0x1, 0x2, 0x5}, {0x2, 0x1, 0x2, 0x4}, {0x5, 0x5, 0x2, 0x1}], 0x10, 0xde}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 6.304881401s ago: executing program 5 (id=5229): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008020}, 0x8880) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xe, 0x1b, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a40)='GPL\x00', 0x3ff, 0xa7, &(0x7f0000000a80)=""/167, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x5, 0xfffff801, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000c00), 0x10, 0x8d}, 0x94) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r4, 0x601, 0x0, 0x2000000, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x800) sendmsg$NFT_BATCH(r2, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000780)=0x101, 0x4) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r8 = dup3(r6, r7, 0x0) ioctl$MON_IOCG_STATS(r8, 0xc0109207, &(0x7f0000000180)) socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ldst={0x2, 0x0, 0x0, 0x6, 0x1, 0x8, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x339d63c8d6513bfd, 0xb, 0x3, 0x18, 0x1}, @alu={0x4, 0x1, 0x8, 0xb, 0x2, 0x80, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x885}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x87, &(0x7f00000004c0)=""/135, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000680)=[{0x0, 0x1, 0x2, 0x5}, {0x2, 0x1, 0x2, 0x4}, {0x5, 0x5, 0x2, 0x1}], 0x10, 0xde}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 5.744896696s ago: executing program 2 (id=5230): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 5.699078496s ago: executing program 7 (id=5231): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) r2 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = gettid() unshare(0x6a040000) (async) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) (async) pipe2$watch_queue(0x0, 0x80) socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) (async) rt_sigtimedwait(&(0x7f0000000080)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) tkill(r4, 0x7) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x7000, 0x29, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bcc"}}}}}}}, 0x4f) (async) write$tun(r0, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x7000, 0x29, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bcc"}}}}}}}, 0x4f) 5.558310104s ago: executing program 1 (id=5232): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000500000000000000560e00009500007d8a0f000085100000020000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) syz_emit_vhci(0x0, 0x1d) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) mkdir(&(0x7f0000000040)='./bus\x00', 0xa0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000240)='./file1\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f00000003c0)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1ff, 0x1000, 0x1, {0x6, 0xfd, 0x20ff, 0x8, 0xe, 0xf33a, 0x9, 0x4, 0xfffffffc, 0x6000, 0x6, 0x0, 0x0, 0x5, 0x8}}, {0x0, 0x13}}}, 0xa0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000e11e21b982bb5b35c2f3cddf", @ANYRES32=r3, @ANYBLOB="000004000a000200aaaaaaaaaa0c0000"], 0x28}}, 0x4040080) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44014) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 5.393165914s ago: executing program 6 (id=5233): ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x1, 0x400000, 0x14, "3eccd8fd0000000000000010000000040100"}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0x0, 0x9, 0x9, 0x80000001, 0x7fffffff, 0x0}) ptrace$ARCH_SHSTK_DISABLE(0x1e, r2, 0x1, 0x5002) syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) mount$binderfs(0x0, 0x0, 0x0, 0x4847, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f30deec0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x53}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b22, &(0x7f0000000040)) 5.390792795s ago: executing program 5 (id=5234): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1f9) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x800080, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRES16=r0, @ANYRES64=0x0, @ANYBLOB="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", @ANYBLOB="2cb312e21661133d", @ANYRESHEX=r0, @ANYRES64=r0]) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4004030) r1 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001800011306007000000000000a001400fe04ff06"], 0x1c}, 0x1, 0x0, 0x0, 0x40885}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r2, 0x1, 0xa) close(0x3) fchdir(r4) r5 = socket$inet6(0xa, 0x3, 0x4000fc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0xa) mmap(&(0x7f0000a35000/0x2000)=nil, 0x2000, 0xb635773f06ebbee4, 0x10, r1, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getrandom(0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18) connect$inet6(r5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) 5.153737246s ago: executing program 1 (id=5235): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe2a02) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[], 0x50) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], &(0x7f0000001540)=[0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={@private=0xa010100, 0x0, 0x0, 0x30, 0x0, [{@remote}, {@private}, {@broadcast}]}}) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRESDEC=r0, @ANYRES32, @ANYRESHEX=r0, @ANYRES64]) 4.609933606s ago: executing program 1 (id=5236): poll(0x0, 0x0, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$RTC_AIE_ON(r0, 0x7001) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000080)=[{&(0x7f0000000400)="0021ff00a707000000004306000000000000000000001c", 0x17}], 0x1, 0x3e3e, 0x407ff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.533079609s ago: executing program 2 (id=5237): r0 = syz_io_uring_complete(0x0, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r0, 0x4068aea3, &(0x7f00000004c0)) write$P9_RAUTH(r0, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x0, 0x0, 0x5}}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_getres(0xfffffffffffffffb, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x20, 0x0, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x20000034) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r5) recvfrom(r6, 0x0, 0x0, 0x40002062, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000008c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x40080}, 0x44000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 4.30903784s ago: executing program 5 (id=5238): socket$netlink(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fanotify_init(0x10, 0x101000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) ptrace$pokeuser(0x6, 0x0, 0x118, 0x0) r6 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r7 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e", 0x7a, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r7}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) fcntl$setlease(r8, 0x400, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) 3.705298869s ago: executing program 6 (id=5239): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) 3.553737099s ago: executing program 6 (id=5240): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) close(0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0xc3b, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6200}}, 0x20}, 0x1, 0x0, 0x0, 0x180}, 0x40080c0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x40010122}) io_uring_enter(r3, 0x1, 0xeed, 0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x5, @empty, 0xa}, {0xa, 0x4e24, 0xfd, @empty, 0xb}, r7, 0x6}}, 0x48) 3.50813965s ago: executing program 1 (id=5241): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x160, 0x1170, 0x1398, 0x160, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [0x0, 0x0, 0xff000000, 0xffffff00], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6, 0x0, 0x2}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10, 0x61}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x16, 0x3f, 0x1, 0xe, 0x7d, 0x376d, 0x8}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x62b}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e25, 0x2, @empty, 0x40003ff}, 0x1b) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[], 0x0, 0x28, 0x0, 0x0, 0xffffff45}, 0x28) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000380), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a000006090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r6, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRES8=r1], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f0000000240)={'ni_at_a2150\x00', [0xb013, 0x7, 0x3, 0xdd6, 0x88d7, 0x8f, 0xffffffff, 0x8012, 0x1006, 0xffffffff, 0x40008, 0x7, 0x1000000b, 0x3, 0x0, 0xfffffffd, 0x8, 0x6, 0x9, 0x57, 0x4, 0x3, 0x7, 0xa, 0x4, 0x1, 0xb0c4, 0x800, 0x20004, 0x400002, 0x22]}) 3.506481528s ago: executing program 2 (id=5242): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES8=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000640)=""/193, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) chroot(&(0x7f0000000100)='./file0\x00') recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x4008}, 0x4080) close_range(0xffffffffffffffff, r5, 0x2) syz_genetlink_get_family_id$nl80211(0x0, r5) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r5) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000001bc0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000000c0)='~', 0x1}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x20, @empty}, 0x10, &(0x7f0000000600)=[{&(0x7f0000002300)='\x00', 0x1}], 0x1}}], 0x2, 0x1005) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000180)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0x2}, 0x6) write$bt_hci(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8) unlink(&(0x7f0000000280)='./file0\x00') ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1) 2.744553828s ago: executing program 5 (id=5243): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008020}, 0x8880) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0xe, 0x1b, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff8}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a40)='GPL\x00', 0x3ff, 0xa7, &(0x7f0000000a80)=""/167, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x5, 0xfffff801, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000bc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000c00), 0x10, 0x8d}, 0x94) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r4, 0x601, 0x0, 0x2000000, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x800) sendmsg$NFT_BATCH(r2, 0x0, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000780)=0x101, 0x4) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r8 = dup3(r6, r7, 0x0) ioctl$MON_IOCG_STATS(r8, 0xc0109207, &(0x7f0000000180)) socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ldst={0x2, 0x0, 0x0, 0x6, 0x1, 0x8, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x339d63c8d6513bfd, 0xb, 0x3, 0x18, 0x1}, @alu={0x4, 0x1, 0x8, 0xb, 0x2, 0x80, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x885}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000480)='syzkaller\x00', 0x5, 0x87, &(0x7f00000004c0)=""/135, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000680)=[{0x0, 0x1, 0x2, 0x5}, {0x2, 0x1, 0x2, 0x4}, {0x5, 0x5, 0x2, 0x1}], 0x10, 0xde}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 2.677267178s ago: executing program 2 (id=5244): syz_usb_connect(0x5, 0x2d, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000a, 0x2010, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_usb_connect$cdc_ncm(0x3, 0x76, &(0x7f0000000300)=ANY=[@ANYBLOB="12010003020000202505a1a440018000000109026400020108100f0904000001020d00000524060001052400060000000600e7af0606241a00001008241c7f0001f7ff0905810300020c020f0904010000020d00000904010102020d000009058202390000fa0409050302ff03040400d7c05decb28d1ce005d2a82ed58bc37eade0619f38733eaf6caf4ae60d73e42f3d776c0275c9109dd757b3ddd49ccf0183cd0d4236ff6fee0bad0c4b8dbd859d9cdafe"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) r8 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0xe8c00) ioctl$IOC_PR_PREEMPT(r8, 0x40046109, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 2.661758691s ago: executing program 6 (id=5245): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000500000000000000560e00009500007d8a0f000085100000020000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) syz_emit_vhci(0x0, 0x1d) socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) ioprio_set$uid(0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102384, 0x18ff0) mkdir(&(0x7f0000000040)='./bus\x00', 0xa0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000240)='./file1\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r1, &(0x7f00000003c0)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1ff, 0x1000, 0x1, {0x6, 0xfd, 0x20ff, 0x8, 0xe, 0xf33a, 0x9, 0x4, 0xfffffffc, 0x6000, 0x6, 0x0, 0x0, 0x5, 0x8}}, {0x0, 0x13}}}, 0xa0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000e11e21b982bb5b35c2f3cddf", @ANYRES32=r3, @ANYBLOB="000004000a000200aaaaaaaaaa0c0000"], 0x28}}, 0x4040080) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x81044804, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44014) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 100.830918ms ago: executing program 1 (id=5246): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026, r1}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x3, 0x18}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x2000000, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)=ANY=[@ANYBLOB="20000000240000012ebd7000fbdbdf25027c00000cb9fd72c32d9e5e2fa29c79"], 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8000000000000a, 0x5, 0x0, 0xb84f, 0x2], 0x26000, 0x202}) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0x100000, 0xdddd1000, 0x0, 0x2, 0x81, 0x10, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x8080000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x7, 0xbf}, {0xb000, 0x8080000, 0xc, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0xd, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x76, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0xeeee8000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x2, 0x50000, 0xc, 0x3, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0x40000, 0x80f3}, 0xddf8ffd3, 0x0, 0x0, 0x110, 0xe, 0xf001, 0xd000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 0s ago: executing program 7 (id=5247): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000030000000700000000000000", @ANYRES32, @ANYBLOB="2e74e6dc710e840cc687a380a1eb03487c352155bc10757950c6859f80f4b3aa9ad737cc67921fee6e0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x2, 0x400, 0x0, 0x37d}, &(0x7f00000001c0), &(0x7f0000000080), 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) timerfd_create(0x9, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r1, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) kernel console output (not intermixed with test programs): 7-1:0.0: probe with driver usbhid failed with error -71 [ 1360.510819][ T793] usb 7-1: USB disconnect, device number 29 [ 1360.640508][T26146] bridge_slave_0: left allmulticast mode [ 1360.647126][T26146] bridge_slave_0: left promiscuous mode [ 1360.653829][T26146] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.670390][T26146] bridge_slave_1: left allmulticast mode [ 1360.676986][T26146] bridge_slave_1: left promiscuous mode [ 1360.683490][T26146] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.696341][ T30] audit: type=1400 audit(2000000092.758:2509): avc: denied { bind } for pid=26144 comm="syz.2.4222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1360.696793][T26146] bond0: (slave bond_slave_0): Releasing backup interface [ 1360.745030][T26146] bond0: (slave bond_slave_1): Releasing backup interface [ 1360.768624][T26146] team0: Port device team_slave_0 removed [ 1360.779395][T26146] team0: Port device team_slave_1 removed [ 1360.785703][T26146] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1360.793534][T26146] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1360.801704][T26146] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1360.809062][T26146] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.819757][T26146] net_ratelimit: 12 callbacks suppressed [ 1360.819768][T26146] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1361.312387][ T9867] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1361.424759][T26169] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26169 comm=syz.4.4227 [ 1361.494475][ T9867] usb 7-1: Using ep0 maxpacket: 32 [ 1361.508591][ T9867] usb 7-1: config 8 has an invalid interface number: 111 but max is 0 [ 1361.522674][ T9867] usb 7-1: config 8 has an invalid descriptor of length 39, skipping remainder of the config [ 1361.555083][ T9867] usb 7-1: config 8 has no interface number 0 [ 1361.677044][ T9867] usb 7-1: config 8 interface 111 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1361.709357][ T9867] usb 7-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=4b.99 [ 1361.723884][ T9867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.792464][T26175] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4229'. [ 1362.709397][ T9867] usb 7-1: Product: syz [ 1362.713730][ T9867] usb 7-1: Manufacturer: syz [ 1362.718315][ T9867] usb 7-1: SerialNumber: syz [ 1362.795252][T26177] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4230'. [ 1363.252494][T26183] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1363.298159][T26183] overlayfs: failed to set xattr on upper [ 1363.771432][ T9867] usb 7-1: USB disconnect, device number 30 [ 1363.782402][T26183] overlayfs: ...falling back to redirect_dir=nofollow. [ 1363.791271][T26183] overlayfs: ...falling back to index=off. [ 1364.248472][ T30] audit: type=1400 audit(2000000096.069:2510): avc: denied { create } for pid=26189 comm="syz.4.4233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1364.288922][ T30] audit: type=1400 audit(2000000096.069:2511): avc: denied { bind } for pid=26189 comm="syz.4.4233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1364.427205][T26183] overlayfs: ...falling back to uuid=null. [ 1364.622339][T26183] overlayfs: maximum fs stacking depth exceeded [ 1365.880390][T26224] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1366.065314][ T30] audit: type=1400 audit(2000000097.772:2512): avc: denied { watch } for pid=26227 comm="syz.6.4241" path="/proc/480/task/481/net" dev="proc" ino=83910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1366.475976][T19580] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1366.649523][T19580] usb 7-1: Using ep0 maxpacket: 32 [ 1366.660657][T19580] usb 7-1: config 2 has an invalid interface number: 88 but max is 0 [ 1366.676973][T19580] usb 7-1: config 2 has no interface number 0 [ 1366.689711][T19580] usb 7-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 1366.712129][T19580] usb 7-1: config 2 interface 88 has no altsetting 0 [ 1366.725328][T19580] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 1366.736265][T19580] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1366.746899][T19580] usb 7-1: Product: syz [ 1366.751149][T19580] usb 7-1: Manufacturer: syz [ 1366.757733][T19580] usb 7-1: SerialNumber: syz [ 1366.770977][T26235] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1367.001199][T26235] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1367.108137][ T30] audit: type=1400 audit(2000000098.754:2513): avc: denied { listen } for pid=26249 comm="syz.1.4246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1367.214712][T26255] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1367.221697][T26255] overlayfs: failed to set xattr on upper [ 1367.227527][T26255] overlayfs: ...falling back to redirect_dir=nofollow. [ 1367.234377][T26255] overlayfs: ...falling back to index=off. [ 1367.240251][T26255] overlayfs: ...falling back to uuid=null. [ 1367.246080][T26255] overlayfs: maximum fs stacking depth exceeded [ 1367.662651][ T30] audit: type=1400 audit(2000000099.268:2514): avc: denied { bind } for pid=26271 comm="syz.2.4252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1367.705649][ T30] audit: type=1400 audit(2000000099.287:2515): avc: denied { node_bind } for pid=26271 comm="syz.2.4252" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1367.758844][ T30] audit: type=1400 audit(2000000099.306:2516): avc: denied { create } for pid=26271 comm="syz.2.4252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1367.791025][ T30] audit: type=1400 audit(2000000099.315:2517): avc: denied { ioctl } for pid=26271 comm="syz.2.4252" path="socket:[84436]" dev="sockfs" ino=84436 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1367.884230][T26279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4254'. [ 1368.117367][T19580] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1368.134514][T19580] asix 7-1:2.88: probe with driver asix failed with error -71 [ 1368.148518][T19580] usb 7-1: USB disconnect, device number 31 [ 1368.800615][ T30] audit: type=1800 audit(2000000100.335:2518): pid=26302 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.4258" name="nullb0" dev="tmpfs" ino=1897 res=0 errno=0 [ 1369.113985][T26323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4263'. [ 1369.803362][T26323] veth2: entered promiscuous mode [ 1369.808483][T26323] veth2: entered allmulticast mode [ 1370.282030][T26323] veth3: entered promiscuous mode [ 1370.289483][T26323] veth3: entered allmulticast mode [ 1370.392378][ T30] audit: type=1400 audit(2000000101.822:2519): avc: denied { setopt } for pid=26352 comm="syz.6.4270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1370.430636][ T30] audit: type=1400 audit(2000000101.859:2520): avc: denied { ioctl } for pid=26352 comm="syz.6.4270" path="socket:[84531]" dev="sockfs" ino=84531 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1371.828928][T26374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4277'. [ 1372.782040][T26390] ptrace attach of "./syz-executor exec"[10335] was attempted by "./syz-executor exec"[26390] [ 1374.341520][T26407] sctp: [Deprecated]: syz.4.4286 (pid 26407) Use of int in max_burst socket option deprecated. [ 1374.341520][T26407] Use struct sctp_assoc_value instead [ 1374.658913][T26414] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4289'. [ 1374.799904][T26427] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4287'. [ 1375.985877][T26443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4296'. [ 1376.621969][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1376.635545][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1376.684632][T26468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4300'. [ 1377.154995][T26477] syzkaller0: entered promiscuous mode [ 1377.183976][T26477] syzkaller0: entered allmulticast mode [ 1378.225249][ T30] audit: type=1400 audit(2000000109.146:2521): avc: denied { getopt } for pid=26509 comm="syz.1.4313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1378.685057][T26521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1378.706840][T26521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.261857][T19580] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1379.411588][T19580] usb 7-1: device descriptor read/64, error -71 [ 1380.016214][T19580] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1380.224600][ T29] page_pool_release_retry() stalled pool shutdown: id 90, 1 inflight 60 sec [ 1380.245413][T19580] usb 7-1: device descriptor read/64, error -71 [ 1380.681371][T19580] usb usb7-port1: attempt power cycle [ 1381.517817][T19580] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1381.546412][T19580] usb 7-1: device descriptor read/8, error -71 [ 1382.512422][T26579] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1382.519402][T26579] overlayfs: failed to set xattr on upper [ 1382.525161][T26579] overlayfs: ...falling back to redirect_dir=nofollow. [ 1382.531979][T26579] overlayfs: ...falling back to index=off. [ 1382.537790][T26579] overlayfs: ...falling back to uuid=null. [ 1382.543668][T26579] overlayfs: maximum fs stacking depth exceeded [ 1382.588512][T26585] netlink: 'syz.2.4330': attribute type 11 has an invalid length. [ 1383.702921][T26624] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4336'. [ 1383.889420][T26631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4337'. [ 1384.129081][T26637] dvmrp0: entered allmulticast mode [ 1384.249988][T26641] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1384.257199][T26641] overlayfs: failed to set xattr on upper [ 1384.262903][T26641] overlayfs: ...falling back to redirect_dir=nofollow. [ 1384.269803][T26641] overlayfs: ...falling back to index=off. [ 1384.275594][T26641] overlayfs: ...falling back to uuid=null. [ 1384.281424][T26641] overlayfs: maximum fs stacking depth exceeded [ 1384.325240][T17909] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 1384.334860][T17909] CPU: 0 UID: 0 PID: 17909 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 1384.334879][T17909] Tainted: [L]=SOFTLOCKUP [ 1384.334883][T17909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1384.334892][T17909] Workqueue: hci2 hci_rx_work [ 1384.334912][T17909] Call Trace: [ 1384.334917][T17909] [ 1384.334922][T17909] dump_stack_lvl+0x100/0x190 [ 1384.334943][T17909] sysfs_warn_dup.cold+0x1c/0x28 [ 1384.334960][T17909] sysfs_create_dir_ns+0x24b/0x2b0 [ 1384.334972][T17909] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1384.334983][T17909] ? find_held_lock+0x2b/0x80 [ 1384.334998][T17909] ? kobject_add_internal+0x25f/0x930 [ 1384.335013][T17909] ? kobject_add_internal+0x25f/0x930 [ 1384.335029][T17909] ? do_raw_spin_unlock+0x145/0x1e0 [ 1384.335047][T17909] kobject_add_internal+0x2c8/0x930 [ 1384.335070][T17909] kobject_add+0x16a/0x1e0 [ 1384.335089][T17909] ? __pfx_kobject_add+0x10/0x10 [ 1384.335102][T17909] ? class_to_subsys+0x10f/0x150 [ 1384.335119][T17909] ? kobject_put+0xb9/0x640 [ 1384.335135][T17909] ? _raw_spin_unlock+0x28/0x50 [ 1384.335169][T17909] device_add+0x294/0x1950 [ 1384.335192][T17909] ? __pfx_dev_set_name+0x10/0x10 [ 1384.335216][T17909] ? __pfx_device_add+0x10/0x10 [ 1384.335230][T17909] ? mgmt_send_event_skb+0x2fb/0x460 [ 1384.335251][T17909] hci_conn_add_sysfs+0x1a3/0x260 [ 1384.335263][T17909] le_conn_complete_evt+0x11eb/0x1f60 [ 1384.335289][T17909] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1384.335310][T17909] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1384.335327][T17909] ? skb_pull_data+0x15f/0x1e0 [ 1384.335343][T17909] hci_le_meta_evt+0x34a/0x5f0 [ 1384.335362][T17909] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1384.335381][T17909] hci_event_packet+0x51c/0xcd0 [ 1384.335399][T17909] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1384.335417][T17909] ? __pfx_hci_event_packet+0x10/0x10 [ 1384.335435][T17909] ? kcov_remote_start+0x374/0x660 [ 1384.335453][T17909] ? lockdep_hardirqs_on+0x78/0x100 [ 1384.335468][T17909] hci_rx_work+0x451/0xfc0 [ 1384.335487][T17909] process_one_work+0xa23/0x19a0 [ 1384.335506][T17909] ? __pfx_process_one_work+0x10/0x10 [ 1384.335523][T17909] ? __pfx_hci_rx_work+0x10/0x10 [ 1384.335540][T17909] worker_thread+0x5ef/0xe50 [ 1384.335556][T17909] ? __pfx_worker_thread+0x10/0x10 [ 1384.335569][T17909] ? kthread+0x13a/0x450 [ 1384.335579][T17909] ? __pfx_worker_thread+0x10/0x10 [ 1384.335590][T17909] kthread+0x370/0x450 [ 1384.335601][T17909] ? __pfx_kthread+0x10/0x10 [ 1384.335613][T17909] ret_from_fork+0x754/0xd80 [ 1384.335626][T17909] ? __pfx_ret_from_fork+0x10/0x10 [ 1384.335639][T17909] ? __switch_to+0x7b4/0x1120 [ 1384.335653][T17909] ? __pfx_kthread+0x10/0x10 [ 1384.335665][T17909] ret_from_fork_asm+0x1a/0x30 [ 1384.335686][T17909] [ 1384.335700][T17909] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1384.614949][T17909] Bluetooth: hci2: failed to register connection device [ 1384.686310][T26644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4341'. [ 1384.773543][T26644] nbd: socks must be embedded in a SOCK_ITEM attr [ 1384.791622][T26562] block nbd64: NBD_DISCONNECT [ 1386.012292][T26667] netlink: 'syz.6.4345': attribute type 4 has an invalid length. [ 1386.024554][T26562] udevd[26562]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1386.100765][T26669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4346'. [ 1386.472014][T26674] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4347'. [ 1386.702028][T26677] Invalid option length (1047658) for dns_resolver key [ 1386.979450][T26679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4349'. [ 1387.051208][T26687] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1387.059134][T26687] overlayfs: failed to set xattr on upper [ 1387.064832][T26687] overlayfs: ...falling back to redirect_dir=nofollow. [ 1387.072155][T26687] overlayfs: ...falling back to index=off. [ 1387.077995][T26687] overlayfs: ...falling back to uuid=null. [ 1387.083788][T26687] overlayfs: maximum fs stacking depth exceeded [ 1387.277559][T26695] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4355'. [ 1388.378209][T26712] syz_tun: entered allmulticast mode [ 1388.413342][T26712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4360'. [ 1388.501438][T26712] syz_tun (unregistering): left allmulticast mode [ 1388.781866][ T30] audit: type=1400 audit(2000000119.024:2522): avc: denied { watch } for pid=26710 comm="syz.5.4359" path="/509/net_prio.prioidx" dev="tmpfs" ino=2776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1388.881486][T26730] overlayfs: failed to clone upperpath [ 1389.235883][ T30] audit: type=1400 audit(2000000119.445:2523): avc: denied { watch_sb watch_reads } for pid=26710 comm="syz.5.4359" path="/509/net_prio.prioidx" dev="tmpfs" ino=2776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1389.266082][T26729] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1389.273100][T26729] overlayfs: failed to set xattr on upper [ 1389.278804][T26729] overlayfs: ...falling back to redirect_dir=nofollow. [ 1389.285703][T26729] overlayfs: ...falling back to index=off. [ 1389.291929][T26729] overlayfs: ...falling back to uuid=null. [ 1389.297737][T26729] overlayfs: maximum fs stacking depth exceeded [ 1392.749641][T16698] libceph: connect (1)[c::]:6789 error -101 [ 1392.755745][T16698] libceph: mon0 (1)[c::]:6789 connect error [ 1393.948873][T16698] libceph: connect (1)[c::]:6789 error -101 [ 1393.955021][T16698] libceph: mon0 (1)[c::]:6789 connect error [ 1393.999031][T26739] ceph: No mds server is up or the cluster is laggy [ 1395.886892][T26788] overlayfs: failed to clone upperpath [ 1396.138277][ T30] audit: type=1400 audit(2000000125.893:2524): avc: denied { bind } for pid=26784 comm="syz.4.4378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1396.872499][T26803] sctp: [Deprecated]: syz.4.4382 (pid 26803) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1396.872499][T26803] Use struct sctp_sack_info instead [ 1399.492726][ T30] audit: type=1400 audit(2000000129.046:2525): avc: denied { ioctl } for pid=26843 comm="syz.6.4390" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1400.409893][T26872] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26872 comm=syz.1.4396 [ 1400.665669][T17909] Bluetooth: hci0: unexpected event for opcode 0x042c [ 1400.756701][T22537] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1400.776576][T22537] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.799778][T22537] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1400.830314][T22537] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.868561][T22537] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1400.891130][T22537] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.910923][T22537] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1400.937983][T22537] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1401.370395][T17909] Bluetooth: hci1: unexpected event 0x17 length: 4 < 6 [ 1401.549269][T26914] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1401.632357][ T30] audit: type=1400 audit(2000000131.047:2526): avc: denied { setopt } for pid=26911 comm="syz.6.4407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1402.040211][T26921] overlayfs: missing 'workdir' [ 1403.361377][T26927] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1403.368758][T26927] overlayfs: failed to set xattr on upper [ 1403.374642][T26927] overlayfs: ...falling back to redirect_dir=nofollow. [ 1403.381675][T26927] overlayfs: ...falling back to index=off. [ 1403.387532][T26927] overlayfs: ...falling back to uuid=null. [ 1403.394065][T26927] overlayfs: maximum fs stacking depth exceeded [ 1403.711638][ T30] audit: type=1400 audit(2000000132.984:2527): avc: denied { create } for pid=26936 comm="syz.6.4415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1403.754082][ T30] audit: type=1400 audit(2000000133.012:2528): avc: denied { ioctl } for pid=26936 comm="syz.6.4415" path="socket:[87135]" dev="sockfs" ino=87135 ioctlcmd=0x89fe scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1404.042929][ T29] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1404.147903][T26949] netlink: 840 bytes leftover after parsing attributes in process `syz.4.4413'. [ 1404.158185][T26949] overlay: Bad value for 'index' [ 1404.225654][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 1404.235661][ T29] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1404.249954][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.258194][ T29] usb 7-1: Product: syz [ 1404.262432][ T29] usb 7-1: Manufacturer: syz [ 1404.267022][ T29] usb 7-1: SerialNumber: syz [ 1404.285346][ T29] usb 7-1: config 0 descriptor?? [ 1404.517538][ T29] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1404.701191][T26962] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26962 comm=syz.1.4421 [ 1404.727922][ T30] audit: type=1400 audit(2000000133.947:2529): avc: denied { bind } for pid=26936 comm="syz.6.4415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1404.748261][T26964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4422'. [ 1405.754180][T26964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4422'. [ 1405.763282][T26964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4422'. [ 1405.772294][T26964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4422'. [ 1406.156439][ T30] audit: type=1400 audit(2000000133.947:2530): avc: denied { node_bind } for pid=26936 comm="syz.6.4415" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1406.212060][T26977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4425'. [ 1406.773534][ T29] usb write operation failed. (-71) [ 1406.817510][ T29] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1406.867386][ T29] dvbdev: DVB: registering new adapter (Terratec H7) [ 1406.876932][ T29] usb 7-1: media controller created [ 1406.882521][ T29] usb read operation failed. (-71) [ 1406.888943][ T29] usb write operation failed. (-71) [ 1406.901692][ T29] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1406.919621][ T29] usb 7-1: USB disconnect, device number 36 [ 1407.933656][T27041] fuse: Bad value for 'fd' [ 1410.126861][T27072] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1410.146451][T27072] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4440'. [ 1410.153609][ T9867] libceph: connect (1)[c::]:6789 error -101 [ 1410.172759][ T9867] libceph: mon0 (1)[c::]:6789 connect error [ 1410.523818][T27082] openvswitch: netlink: Missing key (keys=800040, expected=2000) [ 1410.935320][ T9867] libceph: connect (1)[c::]:6789 error -101 [ 1410.951903][ T9867] libceph: mon0 (1)[c::]:6789 connect error [ 1411.754084][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 1411.807229][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 1412.071416][T26859] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1412.162114][ T30] audit: type=1400 audit(2000000140.897:2531): avc: denied { ioctl } for pid=27105 comm="syz.1.4449" path="socket:[87386]" dev="sockfs" ino=87386 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1412.253519][T26859] usb 7-1: Using ep0 maxpacket: 8 [ 1412.270683][T26859] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1412.281711][T26859] usb 7-1: config 0 has an invalid interface number: 122 but max is 0 [ 1412.290398][T26859] usb 7-1: config 0 has no interface number 0 [ 1412.309301][T26859] usb 7-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 1412.335847][T26859] usb 7-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 1412.361975][T26859] usb 7-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 1412.453985][T26859] usb 7-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1412.464875][T26859] usb 7-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid maxpacket 12408, setting to 1024 [ 1412.476956][T26859] usb 7-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 1024 [ 1412.634345][T26859] usb 7-1: config 0 interface 122 has no altsetting 0 [ 1412.646441][T26859] usb 7-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 1413.210423][T26859] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.220585][T26859] usb 7-1: Product: syz [ 1413.225122][T26859] usb 7-1: Manufacturer: syz [ 1413.231005][T26859] usb 7-1: SerialNumber: syz [ 1413.238332][T26859] usb 7-1: config 0 descriptor?? [ 1413.253258][T27093] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1413.261302][T27093] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1413.269358][T27093] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1413.324381][ T9867] libceph: connect (1)[c::]:6789 error -101 [ 1413.335999][ T9867] libceph: mon0 (1)[c::]:6789 connect error [ 1413.425359][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 1413.431592][T27070] ceph: No mds server is up or the cluster is laggy [ 1413.456111][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 1413.502426][T26859] pl2303 7-1:0.122: pl2303 converter detected [ 1413.534438][T26859] pl2303 7-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 1413.543404][T26859] pl2303 7-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 1413.552233][T26859] pl2303 7-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 1413.561092][T26859] pl2303 7-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 1413.569935][T26859] pl2303 7-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 1413.578398][T26859] pl2303 7-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 1413.636963][T26859] pl2303 7-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 1413.670020][T26859] pl2303 7-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 1413.684573][T26859] pl2303 7-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 1414.153245][T26859] pl2303 7-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 1414.161851][T26859] pl2303 7-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 1414.175666][T26859] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 1414.194399][T26859] usb 7-1: USB disconnect, device number 37 [ 1414.217517][T26859] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 1414.237188][T26859] pl2303 7-1:0.122: device disconnected [ 1414.323490][ T30] audit: type=1326 audit(2000000142.918:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27155 comm="syz.6.4458" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc64d59c819 code=0x0 [ 1414.636878][T27166] C: renamed from team_slave_0 (while UP) [ 1415.044276][T27166] netlink: 'syz.4.4462': attribute type 2 has an invalid length. [ 1415.053316][T27166] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4462'. [ 1415.063964][T27166] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1415.120608][T27170] overlayfs: missing 'lowerdir' [ 1415.136046][ T30] audit: type=1400 audit(2000000143.675:2533): avc: denied { accept } for pid=27171 comm="syz.4.4463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1415.199066][T27155] delete_channel: no stack [ 1416.772009][T27196] overlayfs: failed to resolve './file2': -2 [ 1417.395406][T27204] bridge0: port 4(syz_tun) entered blocking state [ 1417.402204][T27204] bridge0: port 4(syz_tun) entered disabled state [ 1417.410696][T27204] syz_tun: entered allmulticast mode [ 1417.423573][T27204] syz_tun: entered promiscuous mode [ 1417.430519][T27204] bridge0: port 4(syz_tun) entered blocking state [ 1417.437027][T27204] bridge0: port 4(syz_tun) entered forwarding state [ 1417.454872][T27204] netlink: 'syz.4.4471': attribute type 10 has an invalid length. [ 1417.463553][T27204] bridge0: port 4(syz_tun) entered disabled state [ 1417.470150][T27204] bridge0: port 3(dummy0) entered disabled state [ 1417.476610][T27204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.483895][T27204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.504321][T27204] bridge0: port 4(syz_tun) entered blocking state [ 1417.510871][T27204] bridge0: port 4(syz_tun) entered forwarding state [ 1417.517691][T27204] bridge0: port 3(dummy0) entered blocking state [ 1417.524114][T27204] bridge0: port 3(dummy0) entered forwarding state [ 1417.530799][T27204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.537922][T27204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1417.545322][T27204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.552433][T27204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.572236][T27204] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1419.022976][ T30] audit: type=1800 audit(2000000147.305:2534): pid=27218 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.4477" name="bus" dev="ramfs" ino=87499 res=0 errno=0 [ 1419.356728][T27222] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4478'. [ 1420.138585][T27234] netlink: 'syz.6.4481': attribute type 1 has an invalid length. [ 1420.146563][T27234] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4481'. [ 1421.735675][T26859] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1421.927568][T26859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1421.949734][T26859] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1422.002501][T26859] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1422.037024][T26859] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1422.059731][T26859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1422.080584][T26859] usb 7-1: config 0 descriptor?? [ 1422.400576][T27278] SET target dimension over the limit! [ 1422.780100][T26859] usbhid 7-1:0.0: can't add hid device: -71 [ 1422.788295][T26859] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1422.806647][T26859] usb 7-1: USB disconnect, device number 38 [ 1424.727632][ T30] audit: type=1400 audit(2000000152.543:2535): avc: denied { ioctl } for pid=27306 comm="syz.1.4501" path="socket:[87613]" dev="sockfs" ino=87613 ioctlcmd=0x5864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1425.213437][T27310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4500'. [ 1426.287929][T27331] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4507'. [ 1426.938122][T17909] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 1428.227365][ T30] audit: type=1400 audit(2000000155.929:2536): avc: denied { ioctl } for pid=27366 comm="syz.6.4516" path="socket:[86725]" dev="sockfs" ino=86725 ioctlcmd=0x8b32 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1428.465224][ T30] audit: type=1400 audit(2000000156.144:2537): avc: denied { ioctl } for pid=27372 comm="syz.6.4517" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1428.959231][T27378] kAFS: unable to lookup cell '({^@' [ 1429.104882][T27385] tipc: Enabling of bearer rejected, failed to enable media [ 1429.307602][T27397] 9p: Unknown access argument A: -22 [ 1430.597737][T27411] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1432.767719][T27448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4537'. [ 1432.952098][ T30] audit: type=1400 audit(2000000160.269:2538): avc: denied { unmount } for pid=27442 comm="syz.6.4538" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1433.371999][T27455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4540'. [ 1433.912415][T27463] netlink: 'syz.2.4542': attribute type 12 has an invalid length. [ 1433.963590][T27463] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4542'. [ 1435.961326][T27525] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4548'. [ 1435.978562][T27501] xt_CT: No such helper "snmp_trap" [ 1436.495647][T27533] 9p: Bad value for 'rfdno' [ 1437.263981][T27539] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4550'. [ 1437.399130][T27546] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 1437.412592][T27546] bond1 (unregistering): Released all slaves [ 1438.266706][T27627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4555'. [ 1438.578468][T27636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4558'. [ 1438.668389][ T30] audit: type=1400 audit(2000000165.685:2539): avc: denied { name_bind } for pid=27620 comm="syz.5.4554" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1440.043603][T27666] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4564'. [ 1440.155947][T27666] netlink: 'syz.6.4564': attribute type 10 has an invalid length. [ 1440.311488][T27666] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1440.594465][T27654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1441.383659][T27709] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1441.390687][T27709] overlayfs: failed to set xattr on upper [ 1441.396473][T27709] overlayfs: ...falling back to redirect_dir=nofollow. [ 1441.403293][T27709] overlayfs: ...falling back to index=off. [ 1441.409097][T27709] overlayfs: ...falling back to uuid=null. [ 1441.414882][T27709] overlayfs: maximum fs stacking depth exceeded [ 1442.233242][ T30] audit: type=1400 audit(2000000169.025:2540): avc: denied { open } for pid=27716 comm="syz.6.4576" path="/dev/ptyr0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1442.261297][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1442.262797][ T30] audit: type=1400 audit(2000000169.053:2541): avc: denied { read } for pid=27716 comm="syz.6.4576" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1442.267701][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1442.290754][ T30] audit: type=1400 audit(2000000169.053:2542): avc: denied { open } for pid=27716 comm="syz.6.4576" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1442.688955][T27735] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1442.696945][T27735] overlayfs: failed to set xattr on upper [ 1442.702732][T27735] overlayfs: ...falling back to redirect_dir=nofollow. [ 1442.709566][T27735] overlayfs: ...falling back to index=off. [ 1442.715503][T27735] overlayfs: ...falling back to uuid=null. [ 1442.721340][T27735] overlayfs: maximum fs stacking depth exceeded [ 1442.785514][ T29] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1442.911259][T27745] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1442.918580][T27745] overlayfs: failed to set xattr on upper [ 1442.924308][T27745] overlayfs: ...falling back to redirect_dir=nofollow. [ 1442.931164][T27745] overlayfs: ...falling back to index=off. [ 1442.936972][T27745] overlayfs: ...falling back to uuid=null. [ 1442.942756][T27745] overlayfs: maximum fs stacking depth exceeded [ 1442.967349][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 1442.981168][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1442.991385][ T29] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1443.007481][ T29] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1443.017217][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.025409][ T29] usb 7-1: Product: syz [ 1443.029720][ T29] usb 7-1: Manufacturer: syz [ 1443.034584][ T29] usb 7-1: SerialNumber: syz [ 1443.046357][ T29] usb 7-1: config 0 descriptor?? [ 1443.271737][ T30] audit: type=1326 audit(2000000169.997:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27719 comm="syz.6.4577" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc64d59c819 code=0x0 [ 1443.352170][ T30] audit: type=1326 audit(2000000170.063:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27757 comm="syz.1.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdf59c819 code=0x7ffc0000 [ 1443.377762][ T30] audit: type=1326 audit(2000000170.100:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27757 comm="syz.1.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdf59c819 code=0x7ffc0000 [ 1443.407157][ T30] audit: type=1326 audit(2000000170.100:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27757 comm="syz.1.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdf59c819 code=0x7ffc0000 [ 1443.431700][ T30] audit: type=1326 audit(2000000170.100:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27757 comm="syz.1.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdf59c819 code=0x7ffc0000 [ 1443.456502][ T30] audit: type=1326 audit(2000000170.119:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27757 comm="syz.1.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdbdf59c819 code=0x7ffc0000 [ 1444.891600][T10969] Bluetooth: hci3: Opcode 0x206a failed: -110 [ 1444.898037][T10969] Bluetooth: hci3: command 0x0406 tx timeout [ 1445.412463][ T30] kauditd_printk_skb: 149 callbacks suppressed [ 1445.412481][ T30] audit: type=1400 audit(2000000171.999:2698): avc: denied { mount } for pid=27781 comm="syz.2.4593" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1445.455891][T27782] dvmrp1: entered allmulticast mode [ 1445.465971][T27781] dvmrp1: left allmulticast mode [ 1446.048820][ T29] usb 7-1: USB disconnect, device number 39 [ 1446.663838][T27811] could not allocate digest TFM handle sha224-generic [ 1447.185583][ T30] audit: type=1400 audit(2000000173.655:2699): avc: denied { write } for pid=27824 comm="syz.6.4603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1447.538847][T27837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1447.546594][T27837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1447.566212][T27837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1447.586477][T27837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1447.645867][ T30] audit: type=1400 audit(2000000174.085:2700): avc: denied { write } for pid=27818 comm="syz.5.4601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1448.142186][T27837] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1448.149273][T27837] batman_adv: batadv0: Removing interface: ip6gretap1 [ 1448.223327][ T30] audit: type=1400 audit(2000000174.628:2701): avc: denied { ioctl } for pid=27818 comm="syz.5.4601" path="socket:[88259]" dev="sockfs" ino=88259 ioctlcmd=0x54d5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1448.304105][ T30] audit: type=1400 audit(2000000174.703:2702): avc: denied { read } for pid=27850 comm="syz.4.4608" path="socket:[89288]" dev="sockfs" ino=89288 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1449.175318][T17909] Bluetooth: Wrong link type (-22) [ 1449.550801][ T30] audit: type=1400 audit(2000000175.862:2703): avc: denied { relabelfrom } for pid=27858 comm="syz.6.4610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1449.743002][ T30] audit: type=1400 audit(2000000175.862:2704): avc: denied { relabelto } for pid=27858 comm="syz.6.4610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1449.763156][ T30] audit: type=1400 audit(2000000175.862:2705): avc: denied { connect } for pid=27858 comm="syz.6.4610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1449.783441][ T30] audit: type=1400 audit(2000000175.862:2706): avc: denied { setopt } for pid=27858 comm="syz.6.4610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1449.803306][ T30] audit: type=1400 audit(2000000175.900:2707): avc: denied { read } for pid=5473 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1449.898124][ T9867] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1450.065962][ T9867] usb 7-1: Using ep0 maxpacket: 16 [ 1450.082627][ T9867] usb 7-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1450.135467][ T9867] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1450.212426][ T9867] usb 7-1: Product: syz [ 1450.251985][ T9867] usb 7-1: Manufacturer: syz [ 1450.275487][ T9867] usb 7-1: SerialNumber: syz [ 1450.302415][ T9867] usb 7-1: config 0 descriptor?? [ 1450.324661][T27882] fuse: Bad value for 'rootmode' [ 1450.332093][T27882] 9p: Bad value for 'rfdno' [ 1450.340656][T27882] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1450.554402][ T9867] peak_usb 7-1:0.0: PEAK-System PCAN-Chip USB v32 fw v221.86.173 (1 channels) [ 1450.667826][T27894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4615'. [ 1450.685884][T27894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4615'. [ 1450.791027][ T9867] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1450.804004][ T9867] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1450.814162][ T9867] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 1451.895107][ T9867] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22 [ 1451.916457][ T9867] usb 7-1: USB disconnect, device number 40 [ 1452.038471][T27927] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1452.045550][T27927] overlayfs: failed to set xattr on upper [ 1452.051264][T27927] overlayfs: ...falling back to redirect_dir=nofollow. [ 1452.058224][T27927] overlayfs: ...falling back to index=off. [ 1452.063996][T27927] overlayfs: ...falling back to uuid=null. [ 1452.069814][T27927] overlayfs: maximum fs stacking depth exceeded [ 1452.149968][T27933] 9p: Bad value for 'rfdno' [ 1452.301066][T27940] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4625'. [ 1453.776418][T27956] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1455.710418][ T793] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1455.870802][ T793] usb 7-1: device descriptor read/64, error -71 [ 1456.490851][ T793] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1456.630410][ T793] usb 7-1: device descriptor read/64, error -71 [ 1456.679997][T28007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4643'. [ 1456.835668][ T793] usb usb7-port1: attempt power cycle [ 1456.939239][T28013] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1457.217864][ T793] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1457.240475][ T30] audit: type=1400 audit(2000000183.065:2708): avc: denied { ioctl } for pid=28011 comm="syz.5.4645" path="socket:[89422]" dev="sockfs" ino=89422 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1457.272289][ T30] audit: type=1400 audit(2000000183.093:2709): avc: denied { setopt } for pid=28011 comm="syz.5.4645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1457.303922][ T793] usb 7-1: device descriptor read/8, error -71 [ 1457.592029][ T793] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1457.635261][ T793] usb 7-1: device descriptor read/8, error -71 [ 1457.752761][ T793] usb usb7-port1: unable to enumerate USB device [ 1457.793407][ T30] audit: type=1400 audit(2000000183.579:2710): avc: denied { getopt } for pid=28024 comm="syz.5.4646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1459.049938][T28054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1459.068712][ T30] audit: type=1400 audit(2000000184.767:2711): avc: denied { connect } for pid=28053 comm="syz.2.4656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1459.161481][T28061] xt_hashlimit: size too large, truncated to 1048576 [ 1459.750299][T28087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4666'. [ 1460.436829][T28107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4669'. [ 1460.446606][T28107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1460.460845][T28107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1460.674574][ T9867] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1461.303795][ T9867] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 1461.328786][ T9867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1461.339004][T28128] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4674'. [ 1461.373395][ T9867] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1461.390272][ T9867] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1461.401474][ T9867] usb 7-1: Manufacturer: syz [ 1461.421695][ T9867] usb 7-1: config 0 descriptor?? [ 1461.611711][ T9867] rc_core: IR keymap rc-hauppauge not found [ 1461.617651][ T9867] Registered IR keymap rc-empty [ 1461.801924][ T9867] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1461.821495][ T9867] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input62 [ 1461.835899][ T30] audit: type=1400 audit(2000000186.360:2712): avc: denied { read } for pid=5163 comm="acpid" name="event4" dev="devtmpfs" ino=4215 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1461.877225][ T30] audit: type=1400 audit(2000000186.360:2713): avc: denied { open } for pid=5163 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4215 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1461.927113][ T30] audit: type=1400 audit(2000000186.360:2714): avc: denied { ioctl } for pid=5163 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=4215 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1462.034947][T28145] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4677'. [ 1463.020571][ T9867] usb 7-1: USB disconnect, device number 45 [ 1463.407695][ T9867] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 1463.557713][T28184] trusted_key: encrypted_key: insufficient parameters specified [ 1463.591046][ T9867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1463.602447][ T9867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1463.613803][ T9867] usb 7-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1463.648948][ T9867] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1463.657017][ T9867] usb 7-1: Manufacturer: syz [ 1463.668410][ T9867] usb 7-1: config 0 descriptor?? [ 1463.766249][ T30] audit: type=1400 audit(2000000188.166:2715): avc: denied { ioctl } for pid=28185 comm="syz.5.4687" path="socket:[89634]" dev="sockfs" ino=89634 ioctlcmd=0x8932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1465.017735][ T9867] cougar 0003:060B:700A.0024: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.6-1/input0 [ 1465.055746][T28200] overlayfs: failed to clone upperpath [ 1465.210541][T28208] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4691'. [ 1465.241533][ T30] audit: type=1400 audit(2000000189.541:2716): avc: denied { accept } for pid=28211 comm="syz.2.4694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1465.248124][T28213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4694'. [ 1465.284204][T28208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.443334][T28219] netlink: 'syz.1.4693': attribute type 10 has an invalid length. [ 1465.456152][ T9867] usb 7-1: USB disconnect, device number 46 [ 1465.925600][T28236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4697'. [ 1466.434191][T28244] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4699'. [ 1467.117481][T26838] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1467.697355][T26838] usb 7-1: Using ep0 maxpacket: 32 [ 1467.735207][T26838] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1467.832454][T28261] overlayfs: failed to clone upperpath [ 1467.839207][T26838] usb 7-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1467.850144][T26838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.860672][T26838] usb 7-1: Product: syz [ 1467.864930][T26838] usb 7-1: Manufacturer: syz [ 1467.871331][T26838] usb 7-1: SerialNumber: syz [ 1467.927306][T26838] snd-ua101 7-1:1.1: invalid format type [ 1467.939652][T26838] snd-ua101 7-1:1.0: invalid num_altsetting [ 1467.976389][T28273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4708'. [ 1467.994212][T28273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4708'. [ 1468.033956][T28276] netlink: 'syz.5.4707': attribute type 1 has an invalid length. [ 1468.277622][T28282] bond1: entered promiscuous mode [ 1468.285497][T28282] bond1: entered allmulticast mode [ 1468.290990][T28282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1468.321046][T28276] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4707'. [ 1468.357618][T28276] bond1 (unregistering): Released all slaves [ 1468.650221][ T30] audit: type=1400 audit(2000000192.740:2717): avc: denied { create } for pid=28397 comm="syz.5.4712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1468.887499][T28402] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4712'. [ 1468.896867][T28402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1469.287285][T28402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1469.557744][T28416] 8021q: VLANs not supported on lo [ 1469.597580][ T30] audit: type=1400 audit(2000000193.619:2718): avc: denied { mount } for pid=28420 comm="syz.4.4716" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1470.096796][ T9867] usb 7-1: USB disconnect, device number 47 [ 1470.614829][T28449] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1470.621964][T28449] overlayfs: failed to set xattr on upper [ 1470.627792][T28449] overlayfs: ...falling back to redirect_dir=nofollow. [ 1470.634730][T28449] overlayfs: ...falling back to index=off. [ 1470.640594][T28449] overlayfs: ...falling back to uuid=null. [ 1470.646510][T28449] overlayfs: maximum fs stacking depth exceeded [ 1471.701390][T28466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4724'. [ 1472.050261][T28473] xt_TCPMSS: Only works on TCP SYN packets [ 1472.056247][ T30] audit: type=1400 audit(2000000195.920:2719): avc: denied { ioctl } for pid=28472 comm="syz.6.4728" path="/dev/sg0" dev="devtmpfs" ino=788 ioctlcmd=0x2271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1472.104185][ T30] audit: type=1400 audit(2000000195.920:2720): avc: denied { append } for pid=28472 comm="syz.6.4728" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1472.204659][T28484] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2304 sclass=netlink_xfrm_socket pid=28484 comm=syz.5.4727 [ 1472.377101][ T793] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1472.563468][T28491] netlink: 'syz.1.4733': attribute type 1 has an invalid length. [ 1472.601637][ T793] usb 7-1: Using ep0 maxpacket: 16 [ 1472.610897][T28493] netlink: 'syz.1.4734': attribute type 4 has an invalid length. [ 1472.611686][ T793] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1472.632181][T28493] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4734'. [ 1472.632215][ T793] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1472.654064][ T793] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1472.669447][ T793] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1472.680401][ T793] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1472.703657][ T793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.717765][ T793] usb 7-1: config 0 descriptor?? [ 1472.866223][T28494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4734'. [ 1472.878714][T28500] SET target dimension over the limit! [ 1472.998751][T28512] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4739'. [ 1474.379728][T28525] IPv6: NLM_F_CREATE should be specified when creating new route [ 1474.388018][T28525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1474.395555][T28525] IPv6: NLM_F_CREATE should be set when creating new route [ 1474.592134][T28529] netlink: 'syz.2.4744': attribute type 21 has an invalid length. [ 1474.602473][T28529] 9p: Bad value for 'wfdno' [ 1475.462223][ T30] audit: type=1326 audit(2000000199.110:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28537 comm="syz.1.4746" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbdf59c819 code=0x0 [ 1475.496277][ T793] hid (null): global environment stack underflow [ 1475.518335][ T793] hid (null): global environment stack underflow [ 1475.544397][ T793] hid (null): unknown global tag 0xe [ 1475.559404][ T793] hid (null): unknown global tag 0x11 [ 1475.583020][ T793] hid (null): global environment stack underflow [ 1475.594305][ T793] hid (null): global environment stack underflow [ 1475.602420][ T793] hid (null): global environment stack underflow [ 1475.611390][ T793] hid (null): usage index exceeded [ 1475.617497][ T793] hid (null): unknown global tag 0xc [ 1475.623021][ T793] hid (null): unknown global tag 0xd [ 1475.630950][ T793] hid (null): global environment stack underflow [ 1475.637598][ T793] hid (null): global environment stack underflow [ 1475.649297][ T793] hid (null): unknown global tag 0xc [ 1475.851814][ T793] usb 7-1: USB disconnect, device number 48 [ 1478.850495][T28567] kAFS: unable to lookup cell '({^@' [ 1480.611108][T28583] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4757'. [ 1481.100991][ T793] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1481.307220][ T793] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1481.326119][ T793] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1481.735229][ T793] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1481.745094][ T793] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 1481.789057][ T793] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1481.798236][ T793] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.806631][ T793] usb 7-1: Product: syz [ 1481.810864][ T793] usb 7-1: Manufacturer: syz [ 1481.815457][ T793] usb 7-1: SerialNumber: syz [ 1481.831997][ T793] usb 7-1: config 0 descriptor?? [ 1481.842353][T28583] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1481.864562][ T793] usb 7-1: ucan: probing device on interface #0 [ 1481.881013][ T793] usb 7-1: ucan: invalid in_ep MaxPacketSize [ 1481.891914][ T793] usb 7-1: ucan: probe failed; try to update the device firmware [ 1482.161580][ T9867] usb 7-1: USB disconnect, device number 49 [ 1484.217450][T28652] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1485.141562][T28662] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4758'. [ 1485.744345][T28666] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4779'. [ 1485.783163][T28666] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4779'. [ 1486.250884][T28680] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4778'. [ 1486.319559][T28680] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1486.340307][T28680] macvlan2: entered promiscuous mode [ 1486.350105][T28680] macvlan2: entered allmulticast mode [ 1486.361179][T28680] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 1487.835747][T16698] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 1487.974696][T16698] usb 7-1: device descriptor read/64, error -71 [ 1488.256145][T16698] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 1488.438148][T16698] usb 7-1: device descriptor read/64, error -71 [ 1488.562978][T16698] usb usb7-port1: attempt power cycle [ 1489.359991][T16698] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 1489.568005][T16698] usb 7-1: device descriptor read/8, error -71 [ 1489.591935][T28768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=28768 comm=syz.2.4800 [ 1489.610565][T28768] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=28768 comm=syz.2.4800 [ 1489.731253][T28774] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1489.732451][ T30] audit: type=1400 audit(2000000212.458:2722): avc: denied { connect } for pid=28771 comm="syz.2.4802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1490.288902][T16698] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 1490.337800][T16698] usb 7-1: device descriptor read/8, error -71 [ 1490.352535][T28783] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1490.359527][T28783] overlayfs: failed to set xattr on upper [ 1490.365216][T28783] overlayfs: ...falling back to redirect_dir=nofollow. [ 1490.372175][T28783] overlayfs: ...falling back to index=off. [ 1490.377948][T28783] overlayfs: ...falling back to uuid=null. [ 1490.383957][T28783] overlayfs: maximum fs stacking depth exceeded [ 1490.465408][T16698] usb usb7-port1: unable to enumerate USB device [ 1492.179426][ T30] audit: type=1400 audit(2000000214.750:2723): avc: denied { accept } for pid=28812 comm="syz.1.4812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 1492.743273][T28826] overlayfs: failed to clone upperpath [ 1493.470014][ T9867] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 1493.634444][ T9867] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 13961, setting to 64 [ 1493.828341][ T9867] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1493.835719][ T9867] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1493.845312][T28843] overlayfs: failed to clone upperpath [ 1493.845848][ T9867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.861502][ T9867] usb 7-1: config 0 descriptor?? [ 1493.867511][T28830] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1494.360814][ T9867] hid_parser_main: 473 callbacks suppressed [ 1494.360835][ T9867] creative-sb0540 0003:041E:3100.0026: unknown main item tag 0x0 [ 1494.389797][ T9867] creative-sb0540 0003:041E:3100.0026: unknown main item tag 0x0 [ 1494.397578][ T9867] creative-sb0540 0003:041E:3100.0026: unknown main item tag 0x0 [ 1494.431919][ T9867] creative-sb0540 0003:041E:3100.0026: unknown main item tag 0x0 [ 1494.435187][T28861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4824'. [ 1494.439689][ T9867] creative-sb0540 0003:041E:3100.0026: unknown main item tag 0x0 [ 1494.474584][ T9867] creative-sb0540 0003:041E:3100.0026: unknown main item tag 0x0 [ 1494.496574][ T9867] creative-sb0540 0003:041E:3100.0026: unexpected long global item [ 1494.505002][ T9867] creative-sb0540 0003:041E:3100.0026: parse failed [ 1494.512757][ T30] audit: type=1800 audit(2000000216.920:2724): pid=28861 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.4824" name="file1" dev="tmpfs" ino=2691 res=0 errno=0 [ 1494.545695][ T9867] creative-sb0540 0003:041E:3100.0026: probe with driver creative-sb0540 failed with error -22 [ 1494.578074][ T9867] usb 7-1: USB disconnect, device number 54 [ 1495.056235][ T30] audit: type=1326 audit(2000000217.434:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28876 comm="syz.1.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdf59c819 code=0x7ffc0000 [ 1495.097349][ T30] audit: type=1326 audit(2000000217.434:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28876 comm="syz.1.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdf59c819 code=0x7ffc0000 [ 1495.127473][ T30] audit: type=1326 audit(2000000217.462:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28876 comm="syz.1.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdf59c819 code=0x7ffc0000 [ 1495.151534][ T30] audit: type=1326 audit(2000000217.462:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28876 comm="syz.1.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdf59c819 code=0x7ffc0000 [ 1495.179449][ T30] audit: type=1326 audit(2000000217.462:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28876 comm="syz.1.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fdbdf59c819 code=0x7ffc0000 [ 1495.204884][ T30] audit: type=1326 audit(2000000217.462:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28876 comm="syz.1.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdf59c819 code=0x7ffc0000 [ 1495.229686][ T30] audit: type=1326 audit(2000000217.462:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28876 comm="syz.1.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdf59c819 code=0x7ffc0000 [ 1495.254088][ T30] audit: type=1326 audit(2000000217.462:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28876 comm="syz.1.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdf59c819 code=0x7ffc0000 [ 1495.279902][ T30] audit: type=1326 audit(2000000217.462:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28876 comm="syz.1.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbdf59c819 code=0x7ffc0000 [ 1495.307684][ T30] audit: type=1326 audit(2000000217.462:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28876 comm="syz.1.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdbdf59c819 code=0x7ffc0000 [ 1495.331497][ T30] audit: type=1326 audit(2000000217.462:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28876 comm="syz.1.4827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdbdf59c582 code=0x7ffc0000 [ 1496.208898][T28888] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1497.099835][T28910] overlayfs: failed to clone upperpath [ 1497.176762][T28912] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1498.571996][T28934] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1500.343815][ T5943] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1500.654887][ T5943] usb 7-1: Using ep0 maxpacket: 16 [ 1500.672398][ T5943] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1500.727498][ T5943] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1500.772066][ T5943] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1500.806476][ T5943] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1500.830462][ T5943] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1500.865167][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1500.902964][ T5943] usb 7-1: config 0 descriptor?? [ 1501.440428][ T30] kauditd_printk_skb: 184 callbacks suppressed [ 1501.440446][ T30] audit: type=1400 audit(2000000223.411:2920): avc: denied { ioctl } for pid=29023 comm="syz.2.4856" path="/494/file0" dev="tmpfs" ino=2648 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1501.521488][T29024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4856'. [ 1501.534203][T29024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4856'. [ 1501.576808][T29027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4856'. [ 1502.501425][ T5943] hid (null): global environment stack underflow [ 1502.522092][ T5943] hid (null): global environment stack underflow [ 1502.537528][ T5943] hid (null): unknown global tag 0xe [ 1502.960194][ T5943] hid (null): unknown global tag 0x11 [ 1502.967529][ T5943] hid (null): global environment stack underflow [ 1502.974063][ T5943] hid (null): global environment stack underflow [ 1502.980577][ T5943] hid (null): global environment stack underflow [ 1502.988863][ T5943] hid (null): usage index exceeded [ 1502.994015][ T5943] hid (null): unknown global tag 0xc [ 1503.004484][ T5943] hid (null): unknown global tag 0xd [ 1503.010340][ T5943] hid (null): global environment stack underflow [ 1503.017326][ T5943] hid (null): global environment stack underflow [ 1503.029182][ T5943] hid (null): unknown global tag 0xc [ 1503.072310][ T5943] usb 7-1: USB disconnect, device number 55 [ 1503.597017][T29069] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1503.604002][T29069] overlayfs: failed to set xattr on upper [ 1503.609828][T29069] overlayfs: ...falling back to redirect_dir=nofollow. [ 1503.616793][T29069] overlayfs: ...falling back to index=off. [ 1503.705530][T29070] overlayfs: failed to clone upperpath [ 1503.784913][T29071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29071 comm=syz.2.4862 [ 1504.630636][T29069] overlayfs: ...falling back to uuid=null. [ 1504.636476][T29069] overlayfs: maximum fs stacking depth exceeded [ 1505.869106][T29095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=29095 comm=syz.2.4871 [ 1506.115278][ T30] audit: type=1400 audit(2000000227.780:2921): avc: denied { name_bind } for pid=29096 comm="syz.6.4872" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1506.516855][T17909] Bluetooth: hci2: Unknown advertising packet type: 0x73 [ 1506.516880][T17909] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1506.575807][T29097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1506.583023][T29097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1506.593354][T29103] xt_hashlimit: size too large, truncated to 1048576 [ 1506.761443][T29097] batman_adv: batadv0: Interface deactivated: dummy0 [ 1506.779975][T17909] Bluetooth: hci5: unexpected event for opcode 0x1001 [ 1507.227131][T29097] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1507.245782][T29097] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1507.324442][T29114] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1507.331599][T29114] overlayfs: failed to set xattr on upper [ 1507.337578][T29114] overlayfs: ...falling back to redirect_dir=nofollow. [ 1507.344664][T29114] overlayfs: ...falling back to index=off. [ 1507.350530][T29114] overlayfs: ...falling back to uuid=null. [ 1507.356322][T29114] overlayfs: maximum fs stacking depth exceeded [ 1507.392613][T29097] batman_adv: batadv0: Interface deactivated: netdevsim0 [ 1507.462530][T22547] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.488137][T22547] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.497406][T22547] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.506289][T22547] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1507.977435][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1507.983826][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1508.254153][T29132] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4881'. [ 1508.893151][T29152] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1508.900341][T29152] overlayfs: failed to set xattr on upper [ 1508.906071][T29152] overlayfs: ...falling back to redirect_dir=nofollow. [ 1508.913002][T29152] overlayfs: ...falling back to index=off. [ 1508.918818][T29152] overlayfs: ...falling back to uuid=null. [ 1508.924605][T29152] overlayfs: maximum fs stacking depth exceeded [ 1509.802038][T29160] binder: 29158:29160 ioctl c0306201 2000000001c0 returned -14 [ 1509.818931][T29156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4887'. [ 1510.210549][T29173] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4890'. [ 1511.139720][T17909] Bluetooth: Wrong link type (-22) [ 1511.179947][ T5876] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1511.356613][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.367650][ T5876] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1511.377511][ T5876] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1511.804051][ T5876] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1511.813134][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.829801][ T5876] usb 7-1: config 0 descriptor?? [ 1511.868904][ T30] audit: type=1326 audit(2000000233.168:2922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29202 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274479c819 code=0x7ffc0000 [ 1511.892924][ T30] audit: type=1326 audit(2000000233.168:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29202 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274479c819 code=0x7ffc0000 [ 1511.918119][ T30] audit: type=1326 audit(2000000233.168:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29202 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f274479c819 code=0x7ffc0000 [ 1511.942491][ T30] audit: type=1326 audit(2000000233.168:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29202 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274479c819 code=0x7ffc0000 [ 1511.966112][ T30] audit: type=1326 audit(2000000233.168:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29202 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274479c819 code=0x7ffc0000 [ 1511.992578][ T30] audit: type=1326 audit(2000000233.168:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29202 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f274479c819 code=0x7ffc0000 [ 1512.027106][ T30] audit: type=1326 audit(2000000233.168:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29202 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274479c819 code=0x7ffc0000 [ 1512.062778][ T30] audit: type=1326 audit(2000000233.168:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29202 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274479c819 code=0x7ffc0000 [ 1512.113785][ T30] audit: type=1326 audit(2000000233.168:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29202 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f274479c819 code=0x7ffc0000 [ 1512.167503][ T30] audit: type=1326 audit(2000000233.168:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29202 comm="syz.2.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274479c819 code=0x7ffc0000 [ 1512.245340][T29205] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4902'. [ 1512.298000][ T5876] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1513.193613][T29213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4903'. [ 1513.268542][ T5876] usb 7-1: USB disconnect, device number 56 [ 1513.294839][T29216] fido_id[29216]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1513.738362][T17909] Bluetooth: Wrong link type (-22) [ 1513.864248][T29263] netlink: 'syz.2.4910': attribute type 1 has an invalid length. [ 1513.875037][T29263] netlink: 'syz.2.4910': attribute type 2 has an invalid length. [ 1515.312611][T26838] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 1515.483203][T26838] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1515.502380][T26838] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1515.514929][T26838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1515.530779][T26838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1515.541004][T26838] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1515.557205][T26838] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1515.566477][T26838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1515.629238][T26838] usb 7-1: Product: syz [ 1515.639828][T26838] usb 7-1: Manufacturer: syz [ 1515.655213][T26838] usb 7-1: SerialNumber: syz [ 1515.666441][T26838] usb 7-1: config 0 descriptor?? [ 1515.758925][T29300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4916'. [ 1515.768381][T29300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1516.526993][T29300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1516.743116][T26838] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1516.760596][T26838] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1516.807814][T29314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4921'. [ 1516.888902][T29317] netlink: 'syz.1.4922': attribute type 2 has an invalid length. [ 1516.957056][T26838] radio-si470x 7-1:0.0: software version 77, hardware version 44 [ 1516.964842][T26838] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1517.173470][T26838] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 1517.582323][T29331] overlayfs: failed to resolve './file2': -2 [ 1517.626842][T29333] 9p: Unknown access argument AylGvr! ^&J?=\l[[i5`N|&`{O50H: -22 [ 1518.413105][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 1518.413172][ T30] audit: type=1400 audit(2000000239.201:2999): avc: denied { mounton } for pid=29279 comm="syz.6.4914" path="/proc/834/task" dev="proc" ino=91771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1518.595233][T26838] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1518.604203][T26838] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -22 [ 1518.619108][T26838] usb 7-1: USB disconnect, device number 57 [ 1518.900608][T29363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4931'. [ 1519.415179][T29361] 9p: Unknown access argument AW_ [ 1519.415179][T29361] !#cW_ [ 1519.415179][T29361] !#cW_ [ 1519.415179][T29361] !#cW_ [ 1519.415179][T29361] !#: -22 [ 1519.744209][T29395] netlink: 'syz.1.4940': attribute type 1 has an invalid length. [ 1519.821191][T29395] bond0: (slave bridge3): making interface the new active one [ 1519.831264][T29395] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 1519.851607][T29395] macvlan1: entered promiscuous mode [ 1519.857914][T29395] macvlan1: entered allmulticast mode [ 1519.864069][T29395] bond0: entered promiscuous mode [ 1519.869627][T29395] bridge3: entered promiscuous mode [ 1519.875935][T29395] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 1519.884030][T29395] bond0: (slave macvlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1519.901627][T29395] bond0: left promiscuous mode [ 1519.906516][T29395] bridge3: left promiscuous mode [ 1521.366400][ T30] audit: type=1400 audit(2000000242.045:3000): avc: denied { mount } for pid=29471 comm="syz.2.4951" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1522.036141][T29482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4955'. [ 1523.202305][T29500] netlink: 'syz.2.4960': attribute type 7 has an invalid length. [ 1523.232329][ T30] audit: type=1400 audit(2000000243.766:3001): avc: denied { accept } for pid=29499 comm="syz.2.4960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1524.164857][T29520] random: crng reseeded on system resumption [ 1524.674942][T29538] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2634 sclass=netlink_route_socket pid=29538 comm=syz.1.4970 [ 1525.036170][T26838] libceph: connect (1)[c::]:6789 error -101 [ 1525.046746][T26838] libceph: mon0 (1)[c::]:6789 connect error [ 1525.194638][T29539] ceph: No mds server is up or the cluster is laggy [ 1525.579826][T29555] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4974'. [ 1525.762102][T29555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1526.372489][ T5943] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1526.535685][ T5943] usb 7-1: Using ep0 maxpacket: 32 [ 1526.547070][ T5943] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1526.561184][ T5943] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1526.579811][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.596328][ T5943] usb 7-1: Product: syz [ 1526.601504][ T5943] usb 7-1: Manufacturer: syz [ 1526.606781][ T5943] usb 7-1: SerialNumber: syz [ 1526.614721][ T5943] usb 7-1: config 0 descriptor?? [ 1526.621918][T29586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=485 sclass=netlink_route_socket pid=29586 comm=syz.4.4982 [ 1526.634599][ T5943] smsc75xx 7-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1526.644784][ T5943] smsc75xx 7-1:0.0: probe with driver smsc75xx failed with error -22 [ 1526.753726][T29592] kAFS: unable to lookup cell '.,' [ 1527.313039][T17909] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1527.691167][T29616] overlayfs: failed to clone upperpath [ 1528.656019][T26838] usb 7-1: USB disconnect, device number 58 [ 1529.566616][ T30] audit: type=1400 audit(2000000249.715:3002): avc: denied { ioctl } for pid=29643 comm="syz.6.4997" path="pid:[4026532963]" dev="nsfs" ino=4026532963 ioctlcmd=0xb707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1529.595434][T17909] Bluetooth: Wrong link type (-22) [ 1530.687083][ T30] audit: type=1400 audit(2000000250.772:3003): avc: denied { name_bind } for pid=29662 comm="syz.2.5003" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1530.946781][T29678] fuse: Bad value for 'fd' [ 1533.618640][ T30] audit: type=1800 audit(2000000253.475:3004): pid=29695 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.5010" name="file1" dev="overlay" ino=1433 res=0 errno=0 [ 1534.148366][T17909] Bluetooth: Wrong link type (-22) [ 1534.497815][T17909] Bluetooth: Wrong link type (-22) [ 1534.734237][T29743] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1534.741256][T29743] overlayfs: failed to set xattr on upper [ 1534.747059][T29743] overlayfs: ...falling back to redirect_dir=nofollow. [ 1534.753875][T29743] overlayfs: ...falling back to index=off. [ 1534.759904][T29743] overlayfs: ...falling back to uuid=null. [ 1534.765817][T29743] overlayfs: maximum fs stacking depth exceeded [ 1534.817796][T17909] Bluetooth: Wrong link type (-22) [ 1535.158452][T29753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5027'. [ 1535.490690][T29757] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5028'. [ 1535.681497][T29767] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=29767 comm=syz.1.5034 [ 1535.795887][T29776] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1535.802973][T29776] overlayfs: failed to set xattr on upper [ 1535.808735][T29776] overlayfs: ...falling back to redirect_dir=nofollow. [ 1535.815590][T29776] overlayfs: ...falling back to index=off. [ 1535.821367][T29776] overlayfs: ...falling back to uuid=null. [ 1535.827210][T29776] overlayfs: maximum fs stacking depth exceeded [ 1535.868789][T29777] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1535.950586][T29782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2634 sclass=netlink_route_socket pid=29782 comm=syz.4.5038 [ 1537.035845][T17909] Bluetooth: Wrong link type (-22) [ 1537.164824][T29791] overlayfs: failed to clone upperpath [ 1537.752010][T29807] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5039'. [ 1537.786540][T29809] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5044'. [ 1537.835752][T26838] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1537.996056][T26838] usb 7-1: Using ep0 maxpacket: 16 [ 1538.003407][T26838] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1538.014763][T26838] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1538.025278][T26838] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1538.038841][T26838] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1538.046027][T26838] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1538.056355][T26838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1538.164363][T26838] usb 7-1: config 0 descriptor?? [ 1538.530410][T29822] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1538.537639][T29822] overlayfs: failed to set xattr on upper [ 1538.543464][T29822] overlayfs: ...falling back to redirect_dir=nofollow. [ 1538.550297][T29822] overlayfs: ...falling back to index=off. [ 1538.556120][T29822] overlayfs: ...falling back to uuid=null. [ 1538.561931][T29822] overlayfs: maximum fs stacking depth exceeded [ 1538.637302][T29827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2634 sclass=netlink_route_socket pid=29827 comm=syz.2.5050 [ 1540.050266][T26838] hid (null): global environment stack underflow [ 1540.056648][T26838] hid (null): global environment stack underflow [ 1540.149692][T26838] hid (null): unknown global tag 0xe [ 1540.167874][T26838] hid (null): unknown global tag 0x11 [ 1540.174421][T26838] hid (null): global environment stack underflow [ 1540.183999][T26838] hid (null): global environment stack underflow [ 1540.191617][T26838] hid (null): global environment stack underflow [ 1540.199704][T26838] hid (null): usage index exceeded [ 1540.204937][T26838] hid (null): unknown global tag 0xc [ 1540.211241][T26838] hid (null): unknown global tag 0xd [ 1540.216659][T26838] hid (null): global environment stack underflow [ 1540.223739][T26838] hid (null): global environment stack underflow [ 1540.230192][T26838] hid (null): unknown global tag 0xc [ 1540.249630][T26838] usb 7-1: USB disconnect, device number 59 [ 1540.498691][T29876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5058'. [ 1540.819831][T29868] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5060'. [ 1542.131261][T29888] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1542.860610][ T30] audit: type=1400 audit(2000000262.156:3005): avc: denied { read } for pid=29913 comm="syz.6.5072" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1542.886585][ T30] audit: type=1400 audit(2000000262.156:3006): avc: denied { open } for pid=29913 comm="syz.6.5072" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1542.917300][ T30] audit: type=1400 audit(2000000262.174:3007): avc: denied { ioctl } for pid=29913 comm="syz.6.5072" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1542.953030][ T30] audit: type=1400 audit(2000000262.240:3008): avc: denied { append } for pid=29913 comm="syz.6.5072" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1543.815654][T29930] dummy0: entered promiscuous mode [ 1543.821939][T29930] dummy0: left promiscuous mode [ 1544.178318][T29941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5077'. [ 1544.851006][ T29] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1544.929076][T29957] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 1545.002699][T29958] overlayfs: failed to clone lowerpath [ 1545.025295][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1545.045583][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1545.066190][ T29] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1545.127873][ T29] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1545.185038][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.212972][ T29] usb 7-1: config 0 descriptor?? [ 1546.170941][T29976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5085'. [ 1546.492509][ T29] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1546.717207][ T29] usb 7-1: USB disconnect, device number 60 [ 1547.886220][ T30] audit: type=1400 audit(2000000266.851:3009): avc: denied { connect } for pid=30011 comm="syz.6.5090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1549.314856][T30045] loop5: detected capacity change from 0 to 7 [ 1549.327832][T30045] Dev loop5: unable to read RDB block 7 [ 1549.333755][T30045] loop5: unable to read partition table [ 1549.340156][T30045] loop5: partition table beyond EOD, truncated [ 1549.346365][T30045] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 1549.662797][T30020] bridge0: port 4(syz_tun) entered disabled state [ 1549.790348][T30020] syz_tun (unregistering): left allmulticast mode [ 1549.802723][T30020] syz_tun (unregistering): left promiscuous mode [ 1549.811999][T30020] bridge0: port 4(syz_tun) entered disabled state [ 1550.764012][T30063] netlink: 'syz.6.5104': attribute type 3 has an invalid length. [ 1550.782371][T30063] netlink: 'syz.6.5104': attribute type 3 has an invalid length. [ 1550.790130][T30063] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5104'. [ 1550.929942][T30068] netlink: 'syz.2.5098': attribute type 4 has an invalid length. [ 1551.671009][T30014] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1551.683902][T30014] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1551.692311][T30014] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1551.699957][T30014] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1551.707735][T30014] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1551.731985][ T30] audit: type=1400 audit(2000000269.453:3010): avc: denied { mounton } for pid=30084 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1551.994366][T30084] chnl_net:caif_netlink_parms(): no params data found [ 1552.096712][T30084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.108107][T30084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.115500][T30084] bridge_slave_0: entered allmulticast mode [ 1552.123185][T30084] bridge_slave_0: entered promiscuous mode [ 1552.139588][T30084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.148393][T30084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.155642][T30084] bridge_slave_1: entered allmulticast mode [ 1552.165065][T30084] bridge_slave_1: entered promiscuous mode [ 1552.200559][T30084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1552.213071][T30084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1552.262522][T30084] team0: Port device team_slave_0 added [ 1552.274689][T30084] team0: Port device team_slave_1 added [ 1552.308680][T30084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1552.316346][T30084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.346406][T30084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1552.366952][T30084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1552.373968][T30084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1552.402815][T30084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1552.549066][T30084] hsr_slave_0: entered promiscuous mode [ 1552.556063][T30084] hsr_slave_1: entered promiscuous mode [ 1552.563456][T30084] debugfs: 'hsr0' already exists in 'hsr' [ 1552.570216][T30084] Cannot create hsr debugfs directory [ 1553.925088][T30014] Bluetooth: hci2: command tx timeout [ 1553.992616][T30376] netlink: 'syz.1.5116': attribute type 27 has an invalid length. [ 1554.351928][T30076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1554.373574][T30084] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1554.441367][T30084] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1554.505839][T30084] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1554.562163][T30385] sch_tbf: peakrate 5120 is lower than or equals to rate 5120 ! [ 1554.581585][T30382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5117'. [ 1554.602770][T30084] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1554.872801][T30416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5126'. [ 1554.889800][T30084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1554.925101][T30084] 8021q: adding VLAN 0 to HW filter on device team0 [ 1554.953853][T22540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1554.960993][T22540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1554.977330][T22542] bridge0: port 2(bridge_slave_1) entered blocking state [ 1554.984429][T22542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1555.540521][T30428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5129'. [ 1555.561011][ T5876] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1555.581338][T30084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1555.727157][T30084] veth0_vlan: entered promiscuous mode [ 1555.732911][ T5876] usb 7-1: Using ep0 maxpacket: 16 [ 1555.744959][T30084] veth1_vlan: entered promiscuous mode [ 1555.752355][ T5876] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1555.770863][ T5876] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1555.789564][ T5876] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1555.805466][T30084] veth0_macvtap: entered promiscuous mode [ 1555.813510][ T5876] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1555.820842][ T30] audit: type=1326 audit(2000000273.279:3011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30435 comm="syz.2.5130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274479c819 code=0x7ffc0000 [ 1555.847197][T30084] veth1_macvtap: entered promiscuous mode [ 1555.853030][ T5876] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1555.870267][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.882656][T30084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1555.890448][ T30] audit: type=1326 audit(2000000273.279:3012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30435 comm="syz.2.5130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f274479c819 code=0x7ffc0000 [ 1555.921030][T30084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1555.928669][T30436] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5130'. [ 1555.930261][ T5876] usb 7-1: config 0 descriptor?? [ 1555.951560][T22537] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.956405][ T30] audit: type=1326 audit(2000000273.279:3013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30435 comm="syz.2.5130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274479c819 code=0x7ffc0000 [ 1555.985316][T30436] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5130'. [ 1555.994871][T22537] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.003769][ T30] audit: type=1326 audit(2000000273.279:3014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30435 comm="syz.2.5130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274479c819 code=0x7ffc0000 [ 1556.033613][T22537] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.035392][ T30] audit: type=1326 audit(2000000273.279:3015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30435 comm="syz.2.5130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f274479c819 code=0x7ffc0000 [ 1556.053990][T22537] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1556.069548][ T30] audit: type=1326 audit(2000000273.279:3016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30435 comm="syz.2.5130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274479c819 code=0x7ffc0000 [ 1556.103145][ T30] audit: type=1326 audit(2000000273.279:3017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30435 comm="syz.2.5130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f274479c819 code=0x7ffc0000 [ 1556.142863][ T30] audit: type=1326 audit(2000000273.279:3018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30435 comm="syz.2.5130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f274479c819 code=0x7ffc0000 [ 1556.185875][T30014] Bluetooth: hci2: command tx timeout [ 1556.247131][T22542] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1556.257737][T22542] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1556.813289][ T30] audit: type=1326 audit(2000000273.279:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30435 comm="syz.2.5130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f274479c819 code=0x7ffc0000 [ 1556.824473][T22548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1556.880975][T30461] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5134'. [ 1556.897559][T22548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1558.007724][T30475] binder: Binderfs stats mode cannot be changed during a remount [ 1558.081736][T17909] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1558.101448][ T5876] hid (null): global environment stack underflow [ 1558.111621][T17909] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1558.123068][T17909] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1558.123739][ T5876] hid (null): global environment stack underflow [ 1558.148301][T17909] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1558.161983][T17909] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1558.186067][ T5876] hid (null): unknown global tag 0xe [ 1558.218956][ T5876] hid (null): unknown global tag 0x11 [ 1558.256519][ T5876] hid (null): global environment stack underflow [ 1558.285307][ T5876] hid (null): global environment stack underflow [ 1558.325418][ T5876] hid (null): global environment stack underflow [ 1558.410786][T17909] Bluetooth: hci2: command tx timeout [ 1558.426644][ T5876] hid (null): usage index exceeded [ 1558.442643][ T5876] hid (null): unknown global tag 0xc [ 1558.468643][ T5876] hid (null): unknown global tag 0xd [ 1558.916075][ T5876] hid (null): global environment stack underflow [ 1558.922788][ T5876] hid (null): global environment stack underflow [ 1558.929241][ T5876] hid (null): unknown global tag 0xc [ 1558.940773][ T5876] usb 7-1: USB disconnect, device number 61 [ 1559.199331][T30515] netlink: 212356 bytes leftover after parsing attributes in process `syz.6.5143'. [ 1559.742416][T30535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5145'. [ 1559.760081][T30535] team_slave_0: entered promiscuous mode [ 1559.766231][T30535] team_slave_1: entered promiscuous mode [ 1559.774744][T30535] team0: Device macsec1 is already an upper device of the team interface [ 1559.816460][T30535] team_slave_0: left promiscuous mode [ 1559.822009][T30535] team_slave_1: left promiscuous mode [ 1560.034222][T30476] chnl_net:caif_netlink_parms(): no params data found [ 1560.089372][T30592] 9p: Bad value for 'rfdno' [ 1560.105424][T21975] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1560.303150][T21975] usb 7-1: Using ep0 maxpacket: 16 [ 1560.330300][T21975] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.339988][T17909] Bluetooth: hci4: command tx timeout [ 1560.361500][T21975] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1560.450474][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1560.450505][ T30] audit: type=1400 audit(2000000277.601:3033): avc: denied { append } for pid=30632 comm="syz.7.5151" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1560.748091][T21975] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1560.748967][T17909] Bluetooth: hci2: command tx timeout [ 1560.774908][T30476] bridge0: port 1(bridge_slave_0) entered blocking state [ 1560.782888][T30476] bridge0: port 1(bridge_slave_0) entered disabled state [ 1560.790849][T30476] bridge_slave_0: entered allmulticast mode [ 1560.795003][T21975] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1560.798140][T30476] bridge_slave_0: entered promiscuous mode [ 1560.810293][T21975] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1560.820961][T21975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.828105][T30476] bridge0: port 2(bridge_slave_1) entered blocking state [ 1560.836421][T30476] bridge0: port 2(bridge_slave_1) entered disabled state [ 1560.840449][T21975] usb 7-1: config 0 descriptor?? [ 1560.843746][T30476] bridge_slave_1: entered allmulticast mode [ 1560.845078][T30476] bridge_slave_1: entered promiscuous mode [ 1560.901133][T30476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1560.914889][T30476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1560.958217][T30476] team0: Port device team_slave_0 added [ 1560.966454][T30476] team0: Port device team_slave_1 added [ 1561.004230][T30476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1561.011234][T30476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1561.039972][T30476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1561.058201][T30476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1561.065193][T30476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1561.112612][T30476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1561.321966][T30476] hsr_slave_0: entered promiscuous mode [ 1561.330384][T30476] hsr_slave_1: entered promiscuous mode [ 1561.340110][T21975] hid (null): global environment stack underflow [ 1561.347054][T30476] debugfs: 'hsr0' already exists in 'hsr' [ 1561.352776][T30476] Cannot create hsr debugfs directory [ 1561.358379][T21975] hid (null): unknown global tag 0xd [ 1561.363667][T21975] hid (null): unknown global tag 0xc [ 1561.498574][T30476] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.512178][T30745] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1561.552231][T30745] mkiss: ax0: crc mode is auto. [ 1561.562023][ T29] usb 7-1: USB disconnect, device number 62 [ 1561.571867][ T30] audit: type=1400 audit(2000000278.658:3034): avc: denied { search } for pid=5473 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1561.608263][ T30] audit: type=1400 audit(2000000278.686:3035): avc: denied { search } for pid=5473 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1561.634667][ T30] audit: type=1400 audit(2000000278.686:3036): avc: denied { search } for pid=5473 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1561.635897][T30476] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.665552][ T30] audit: type=1400 audit(2000000278.686:3037): avc: denied { search } for pid=5473 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1561.691985][ T30] audit: type=1400 audit(2000000278.686:3038): avc: denied { search } for pid=5473 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1561.715151][ T30] audit: type=1400 audit(2000000278.686:3039): avc: denied { search } for pid=5473 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1561.737775][ T30] audit: type=1400 audit(2000000278.686:3040): avc: denied { read } for pid=5473 comm="dhcpcd" name="n130" dev="tmpfs" ino=12108 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1561.760558][ T30] audit: type=1400 audit(2000000278.686:3041): avc: denied { open } for pid=5473 comm="dhcpcd" path="/run/udev/data/n130" dev="tmpfs" ino=12108 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1561.786303][ T30] audit: type=1400 audit(2000000278.686:3042): avc: denied { getattr } for pid=5473 comm="dhcpcd" path="/run/udev/data/n130" dev="tmpfs" ino=12108 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1561.812310][T30476] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1561.888213][T30476] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.122712][T30476] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1562.155993][T30476] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1562.188783][T30476] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1562.289538][T30863] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5158'. [ 1562.370487][T30476] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1562.453666][T30476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1562.471514][T30476] 8021q: adding VLAN 0 to HW filter on device team0 [ 1562.508938][T30476] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1562.520607][T30476] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1562.557558][T22555] bridge0: port 1(bridge_slave_0) entered blocking state [ 1562.564776][T22555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1562.574386][T17909] Bluetooth: hci4: command tx timeout [ 1562.596448][T22555] bridge0: port 2(bridge_slave_1) entered blocking state [ 1562.603640][T22555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1562.943856][T30476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1563.584472][T30894] 9p: Bad value for 'wfdno' [ 1563.786092][T30476] veth0_vlan: entered promiscuous mode [ 1563.817863][T30476] veth1_vlan: entered promiscuous mode [ 1563.890424][T30476] veth0_macvtap: entered promiscuous mode [ 1563.906740][T30476] veth1_macvtap: entered promiscuous mode [ 1563.925124][T30476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1563.944739][T30476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1563.965464][T22548] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.980306][T22548] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.007098][T22548] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.042120][T22548] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1564.113262][ T5943] usb 7-1: new low-speed USB device number 63 using dummy_hcd [ 1564.286895][T22537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1564.306593][T22537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1564.644420][T22556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1564.656239][T22556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1564.695648][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1564.721987][ T5943] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1564.743909][ T5943] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1564.768045][ T5943] usb 7-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 1564.786670][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1564.786964][T17909] Bluetooth: hci4: command tx timeout [ 1564.836544][ T5943] usb 7-1: config 0 descriptor?? [ 1564.886108][T30909] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1564.889961][T30932] tmpfs: Bad value for 'mpol' [ 1565.423534][ T5943] elecom 0003:056E:00FB.002D: reserved main item tag 0xe [ 1565.436069][T30944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5170'. [ 1565.447133][ T5943] elecom 0003:056E:00FB.002D: unknown main item tag 0x0 [ 1565.472108][ T5943] elecom 0003:056E:00FB.002D: unknown main item tag 0x0 [ 1565.486650][ T5943] elecom 0003:056E:00FB.002D: unknown main item tag 0x0 [ 1565.502707][ T5943] elecom 0003:056E:00FB.002D: unknown main item tag 0x0 [ 1565.517508][ T5943] elecom 0003:056E:00FB.002D: unknown main item tag 0x0 [ 1565.541325][ T5943] elecom 0003:056E:00FB.002D: unknown main item tag 0x0 [ 1565.551032][ T5943] elecom 0003:056E:00FB.002D: unknown main item tag 0x0 [ 1565.566022][ T5943] elecom 0003:056E:00FB.002D: unknown main item tag 0x0 [ 1565.583774][ T5943] elecom 0003:056E:00FB.002D: unknown main item tag 0x0 [ 1565.616513][ T5943] elecom 0003:056E:00FB.002D: unknown main item tag 0x0 [ 1565.675318][ T5943] elecom 0003:056E:00FB.002D: hidraw0: USB HID v0.08 Device [HID 056e:00fb] on usb-dummy_hcd.6-1/input0 [ 1566.159343][T30966] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1566.258729][T30968] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5175'. [ 1566.524701][T30978] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5173'. [ 1566.600988][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1566.601004][ T30] audit: type=1400 audit(2000000283.363:3047): avc: denied { map_create } for pid=30980 comm="syz.5.5178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1567.532747][T17909] Bluetooth: hci4: command tx timeout [ 1567.574953][ T30] audit: type=1400 audit(2000000283.456:3048): avc: denied { create } for pid=30973 comm="syz.2.5177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1567.607406][ T30] audit: type=1400 audit(2000000283.456:3049): avc: denied { write } for pid=30973 comm="syz.2.5177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1567.628479][ T30] audit: type=1400 audit(2000000283.456:3050): avc: denied { bpf } for pid=30973 comm="syz.2.5177" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1567.730512][ T30] audit: type=1400 audit(2000000283.456:3051): avc: denied { create } for pid=30973 comm="syz.2.5177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1567.750540][ T30] audit: type=1400 audit(2000000283.456:3052): avc: denied { bind } for pid=30973 comm="syz.2.5177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1567.774575][ T30] audit: type=1400 audit(2000000283.466:3053): avc: denied { setopt } for pid=30973 comm="syz.2.5177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1567.797195][ T30] audit: type=1400 audit(2000000283.466:3054): avc: denied { accept } for pid=30973 comm="syz.2.5177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1567.827684][ T30] audit: type=1400 audit(2000000283.681:3055): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.169 src=30006 daddr=10.128.0.206 dest=58824 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1567.853774][ T30] audit: type=1400 audit(2000000284.251:3056): avc: denied { map_read map_write } for pid=30980 comm="syz.5.5178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1568.191599][T30989] 9p: Unknown access argument AylGvr! ^&J?=\l[[i5`N|&`{O50H: -22 [ 1568.628499][ T29] usb 7-1: USB disconnect, device number 63 [ 1569.176736][T31031] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5187'. [ 1569.187100][ T5943] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1569.430326][ T5943] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1569.447799][ T5943] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1569.457561][ T5943] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1569.477260][ T5943] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1569.486463][ T5943] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.495955][ T5943] usb 8-1: Product: syz [ 1569.500150][ T5943] usb 8-1: Manufacturer: syz [ 1569.504779][ T5943] usb 8-1: SerialNumber: syz [ 1569.544032][ T5943] hub 8-1:1.0: bad descriptor, ignoring hub [ 1569.544115][ T5943] hub 8-1:1.0: probe with driver hub failed with error -5 [ 1569.627881][T31037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5189'. [ 1569.788629][ T5943] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1569.971666][T30595] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1570.121505][T26838] usb 8-1: USB disconnect, device number 2 [ 1570.146009][T31059] 9p: Unknown access argument AylGvr! ^&J?=\l[[i5`N|&`{O50H: -22 [ 1570.159770][T26838] usblp0: removed [ 1570.195236][T30595] usb 7-1: Using ep0 maxpacket: 32 [ 1570.214289][T30595] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1570.267061][T30595] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1570.313375][T30595] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.332383][T30595] usb 7-1: Product: syz [ 1570.343165][T30595] usb 7-1: Manufacturer: syz [ 1570.353946][T30595] usb 7-1: SerialNumber: syz [ 1570.393898][T30595] usb 7-1: config 0 descriptor?? [ 1570.412229][T30595] smsc75xx 7-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1570.442499][T30595] smsc75xx 7-1:0.0: probe with driver smsc75xx failed with error -22 [ 1570.475278][T31073] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5195'. [ 1570.832117][T31089] overlayfs: missing 'lowerdir' [ 1571.393981][T26838] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1571.556139][T31111] netlink: 'syz.2.5205': attribute type 10 has an invalid length. [ 1571.565171][T26838] usb 6-1: Using ep0 maxpacket: 16 [ 1571.572280][T26838] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1572.005195][T26838] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1572.015773][T26838] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1572.029047][T26838] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1572.041692][T26838] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1572.081588][T26838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.115562][T26838] usb 6-1: config 0 descriptor?? [ 1572.210868][T31127] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5207'. [ 1572.361872][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 1572.361884][ T30] audit: type=1400 audit(2000000288.751:3116): avc: denied { create } for pid=31130 comm="syz.2.5208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1572.477330][ T30] audit: type=1400 audit(2000000288.788:3117): avc: denied { setopt } for pid=31130 comm="syz.2.5208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1572.555567][ T5943] usb 7-1: USB disconnect, device number 64 [ 1572.581353][ T30] audit: type=1400 audit(2000000288.788:3118): avc: denied { connect } for pid=31130 comm="syz.2.5208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1572.622705][ T30] audit: type=1400 audit(2000000288.994:3119): avc: denied { write } for pid=31132 comm="syz.7.5209" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1572.680240][ T30] audit: type=1400 audit(2000000289.041:3120): avc: denied { read } for pid=31143 comm="syz.6.5211" path="socket:[95737]" dev="sockfs" ino=95737 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1572.754177][ T30] audit: type=1400 audit(2000000289.115:3121): avc: denied { create } for pid=31132 comm="syz.7.5209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1572.795037][ T30] audit: type=1400 audit(2000000289.115:3122): avc: denied { map } for pid=31132 comm="syz.7.5209" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=95810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1572.850777][ T30] audit: type=1400 audit(2000000289.115:3123): avc: denied { read write } for pid=31132 comm="syz.7.5209" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=95810 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1573.350336][ T30] audit: type=1400 audit(2000000289.555:3124): avc: denied { read append } for pid=31143 comm="syz.6.5211" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1573.433577][ T30] audit: type=1400 audit(2000000289.555:3125): avc: denied { open } for pid=31143 comm="syz.6.5211" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1573.598592][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1573.604961][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1573.639496][T26838] hid (null): global environment stack underflow [ 1573.658979][T26838] hid (null): global environment stack underflow [ 1573.691171][T26838] hid (null): unknown global tag 0xe [ 1573.707328][T26838] hid (null): unknown global tag 0x11 [ 1573.724468][T26838] hid (null): global environment stack underflow [ 1573.746266][T26838] hid (null): global environment stack underflow [ 1573.774235][T31154] netlink: 'syz.2.5210': attribute type 21 has an invalid length. [ 1573.782478][T26838] hid (null): global environment stack underflow [ 1573.793686][T26838] hid (null): usage index exceeded [ 1573.799017][T31154] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5210'. [ 1573.808107][T26838] hid (null): unknown global tag 0xc [ 1573.833162][T26838] hid (null): unknown global tag 0xd [ 1573.838482][T26838] hid (null): global environment stack underflow [ 1573.850217][T31154] netlink: 'syz.2.5210': attribute type 21 has an invalid length. [ 1573.869666][T26838] hid (null): global environment stack underflow [ 1573.876745][T31154] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5210'. [ 1573.892964][T26838] hid (null): unknown global tag 0xc [ 1574.138224][T26838] usb 6-1: USB disconnect, device number 33 [ 1574.312770][T31184] netlink: 'syz.1.5214': attribute type 10 has an invalid length. [ 1574.321233][T31184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.328515][T31184] bridge0: port 1(1x9) entered disabled state [ 1574.925678][T31201] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5216'. [ 1574.943995][T31201] netlink: 84 bytes leftover after parsing attributes in process `syz.7.5216'. [ 1574.952994][T31201] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5216'. [ 1576.053029][T31235] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5225'. [ 1576.128679][T31235] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (at-a2150c) [ 1576.176160][T31235] overlayfs: conflicting lowerdir path [ 1576.258614][T31226] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1576.318130][T31226] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1576.380307][T31226] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1576.388459][T31226] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1576.397117][T31226] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1576.406902][T31226] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1576.427799][T31226] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1576.432796][T31243] 9p: Unknown access argument AylGvr! ^&J?=\l[[i5`N|&`{O50H: -22 [ 1576.479631][T31226] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1576.508921][T31226] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1576.520278][T31226] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1576.528859][T31226] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1576.543031][T31226] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1576.768178][T31254] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5229'. [ 1576.784860][T31255] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5228'. [ 1577.493707][T31276] overlayfs: failed to clone upperpath [ 1577.615621][T17909] Bluetooth: hci5: command 0x0406 tx timeout [ 1577.624479][T31280] fuse: Bad value for 'fd' [ 1578.563976][T30014] Bluetooth: hci3: command 0x0406 tx timeout [ 1578.570230][T17909] Bluetooth: hci1: command 0x0406 tx timeout [ 1578.642032][T17909] Bluetooth: hci2: command 0x0c1a tx timeout [ 1578.727349][T17909] Bluetooth: hci4: command 0x0c1a tx timeout [ 1578.768432][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1578.768448][ T30] audit: type=1400 audit(2000000294.747:3148): avc: denied { create } for pid=31320 comm="syz.2.5237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1579.268915][ T30] audit: type=1400 audit(2000000295.214:3149): avc: denied { read write } for pid=31362 comm="syz.6.5239" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1579.309152][ T30] audit: type=1400 audit(2000000295.214:3150): avc: denied { open } for pid=31362 comm="syz.6.5239" path="/dev/ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1579.333075][ T30] audit: type=1400 audit(2000000295.242:3151): avc: denied { ioctl } for pid=31362 comm="syz.6.5239" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x7446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1579.484023][ T30] audit: type=1400 audit(2000000295.411:3152): avc: denied { create } for pid=31366 comm="syz.1.5241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1579.545221][T31367] netlink: 'syz.1.5241': attribute type 2 has an invalid length. [ 1580.137662][T17909] Bluetooth: hci5: command 0x0406 tx timeout [ 1580.137734][ T30] audit: type=1400 audit(2000000295.411:3153): avc: denied { bind } for pid=31366 comm="syz.1.5241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1580.195721][T31372] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5242'. [ 1580.420745][T31389] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5243'. [ 1580.423604][ T30] audit: type=1400 audit(2000000296.290:3154): avc: denied { mount } for pid=31383 comm="syz.6.5245" name="/" dev="overlay" ino=1624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1581.000543][T17909] Bluetooth: hci1: command 0x0406 tx timeout [ 1581.038224][T30014] Bluetooth: hci3: command 0x0406 tx timeout [ 1581.044307][T30014] Bluetooth: hci2: command 0x0c1a tx timeout [ 1581.050680][T30014] Bluetooth: hci4: command 0x0c1a tx timeout [ 1582.012780][ T30] audit: type=1800 audit(2000000296.327:3155): pid=31388 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.5245" name="file1" dev="overlay" ino=1632 res=0 errno=0 [ 1583.021771][ T30] audit: type=1400 audit(2000000298.722:3156): avc: denied { create } for pid=31402 comm="syz.1.5246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1583.041639][T31403] siw: device registration error -23 [ 1583.052665][T31403] smc: removing ib device syz2 [ 1583.726911][T31403] ------------[ cut here ]------------ [ 1583.732427][T31403] !xa_empty(&pool->xa) [ 1583.732436][T31403] WARNING: drivers/infiniband/sw/rxe/rxe_pool.c:116 at rxe_pool_cleanup+0x46/0x60, CPU#1: syz.1.5246/31403 [ 1583.747854][T31403] Modules linked in: [ 1583.752228][T31403] CPU: 1 UID: 0 PID: 31403 Comm: syz.1.5246 Tainted: G L syzkaller #0 PREEMPT(full) [ 1583.763670][T31403] Tainted: [L]=SOFTLOCKUP [ 1583.767997][T31403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1583.778511][T31403] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 1583.784501][T31403] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 56 5a 4e f9 5b c3 cc cc cc cc e8 4b 5a 4e f9 90 <0f> 0b 90 e8 42 5a 4e f9 5b c3 cc cc cc cc e8 17 f1 ba f9 eb d0 0f [ 1583.804143][T31403] RSP: 0018:ffffc900056bf1a0 EFLAGS: 00010246 [ 1583.810229][T31403] RAX: 0000000000080000 RBX: ffff88804f31d3b8 RCX: ffffc9000de21000 [ 1583.818218][T31403] RDX: 0000000000080000 RSI: ffffffff88ba9e75 RDI: ffff88804f31d438 [ 1583.826192][T31403] RBP: ffffffff88b90100 R08: 0000000000000005 R09: 0000000000000001 [ 1583.834195][T31403] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88804f31c6b0 [ 1583.842344][T31403] R13: ffff88804f31bfe0 R14: ffff88804f31bfe0 R15: ffff88804f31d118 [ 1583.850404][T31403] FS: 00007fdbe05166c0(0000) GS:ffff888124435000(0000) knlGS:0000000000000000 [ 1583.861702][T31403] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1583.868620][T31403] CR2: 000020000002c000 CR3: 0000000077efe000 CR4: 00000000003526f0 [ 1583.876819][T31403] Call Trace: [ 1583.880137][T31403] [ 1583.883050][T31403] rxe_dealloc+0x25/0xc0 [ 1583.887279][T31403] ib_dealloc_device+0x49/0x230 [ 1583.892145][T31403] __ib_unregister_device+0x396/0x480 [ 1583.897503][T31403] ib_unregister_device_and_put+0x5a/0x80 [ 1583.903233][T31403] nldev_dellink+0x226/0x320 [ 1583.907801][T31403] ? __pfx_nldev_dellink+0x10/0x10 [ 1583.912940][T31403] ? rcu_is_watching+0x12/0xc0 [ 1583.917682][T31403] ? cap_capable+0x107/0x460 [ 1583.922258][T31403] ? bpf_lsm_capable+0x9/0x10 [ 1583.926933][T31403] ? security_capable+0x80/0x260 [ 1583.931863][T31403] ? ns_capable+0xd2/0xf0 [ 1583.936198][T31403] ? __pfx_nldev_dellink+0x10/0x10 [ 1583.941289][T31403] rdma_nl_rcv_msg+0x38a/0x6e0 [ 1583.946087][T31403] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1583.951354][T31403] ? __lock_acquire+0x4a5/0x2630 [ 1583.956307][T31403] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 1583.962734][T31403] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1583.969880][T31403] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1583.975419][T31403] netlink_unicast+0x5aa/0x870 [ 1583.980358][T31403] ? __pfx_netlink_unicast+0x10/0x10 [ 1583.985643][T31403] netlink_sendmsg+0x8b0/0xda0 [ 1583.990439][T31403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1583.995705][T31403] ? __might_fault+0xb0/0x140 [ 1584.000420][T31403] ____sys_sendmsg+0x9e1/0xb70 [ 1584.005166][T31403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1584.010480][T31403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1584.015758][T31403] ? __pfx_futex_wake_mark+0x10/0x10 [ 1584.021073][T31403] ___sys_sendmsg+0x190/0x1e0 [ 1584.025828][T31403] ? __pfx____sys_sendmsg+0x10/0x10 [ 1584.031061][T31403] __sys_sendmsg+0x170/0x220 [ 1584.035640][T31403] ? __pfx___sys_sendmsg+0x10/0x10 [ 1584.040764][T31403] ? __x64_sys_futex+0x34f/0x4d0 [ 1584.045688][T31403] do_syscall_64+0x106/0xf80 [ 1584.050260][T31403] ? clear_bhb_loop+0x40/0x90 [ 1584.054952][T31403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.060826][T31403] RIP: 0033:0x7fdbdf59c819 [ 1584.065246][T31403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1584.085033][T10969] Bluetooth: hci2: command 0x0c1a tx timeout [ 1584.085082][T31392] Bluetooth: hci4: command 0x0c1a tx timeout [ 1584.098236][T31403] RSP: 002b:00007fdbe0516028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1584.106735][T31403] RAX: ffffffffffffffda RBX: 00007fdbdf815fa0 RCX: 00007fdbdf59c819 [ 1584.114729][T31403] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 1584.122781][T31403] RBP: 00007fdbdf632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1584.131203][T31403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1584.139249][T31403] R13: 00007fdbdf816038 R14: 00007fdbdf815fa0 R15: 00007ffc9336ac18 [ 1584.147251][T31403] [ 1584.150365][T31403] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1584.157643][T31403] CPU: 1 UID: 0 PID: 31403 Comm: syz.1.5246 Tainted: G L syzkaller #0 PREEMPT(full) [ 1584.168565][T31403] Tainted: [L]=SOFTLOCKUP [ 1584.172872][T31403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1584.182909][T31403] Call Trace: [ 1584.186172][T31403] [ 1584.189086][T31403] dump_stack_lvl+0x100/0x190 [ 1584.193772][T31403] vpanic+0x552/0x970 [ 1584.197738][T31403] ? __pfx_vpanic+0x10/0x10 [ 1584.202230][T31403] panic+0xd1/0xe0 [ 1584.205936][T31403] ? __pfx_panic+0x10/0x10 [ 1584.210341][T31403] check_panic_on_warn.cold+0x19/0x34 [ 1584.215700][T31403] ? rxe_pool_cleanup+0x46/0x60 [ 1584.220539][T31403] __warn.cold+0x191/0x348 [ 1584.224937][T31403] __report_bug+0x296/0x3d0 [ 1584.229434][T31403] ? rxe_pool_cleanup+0x46/0x60 [ 1584.234271][T31403] ? __pfx___report_bug+0x10/0x10 [ 1584.239289][T31403] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1584.245086][T31403] ? flush_workqueue_prep_pwqs+0x2e9/0x510 [ 1584.250886][T31403] ? __flush_workqueue+0x426/0x1200 [ 1584.256064][T31403] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1584.261682][T31403] ? rxe_pool_cleanup+0x46/0x60 [ 1584.266521][T31403] report_bug+0xb2/0x220 [ 1584.270755][T31403] ? rxe_pool_cleanup+0x46/0x60 [ 1584.275594][T31403] handle_bug+0x16a/0x2a0 [ 1584.279912][T31403] exc_invalid_op+0x17/0x50 [ 1584.284398][T31403] asm_exc_invalid_op+0x1a/0x20 [ 1584.289231][T31403] RIP: 0010:rxe_pool_cleanup+0x46/0x60 [ 1584.294676][T31403] Code: ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 29 48 83 bb 80 00 00 00 00 75 0b e8 56 5a 4e f9 5b c3 cc cc cc cc e8 4b 5a 4e f9 90 <0f> 0b 90 e8 42 5a 4e f9 5b c3 cc cc cc cc e8 17 f1 ba f9 eb d0 0f [ 1584.314278][T31403] RSP: 0018:ffffc900056bf1a0 EFLAGS: 00010246 [ 1584.320329][T31403] RAX: 0000000000080000 RBX: ffff88804f31d3b8 RCX: ffffc9000de21000 [ 1584.328283][T31403] RDX: 0000000000080000 RSI: ffffffff88ba9e75 RDI: ffff88804f31d438 [ 1584.336236][T31403] RBP: ffffffff88b90100 R08: 0000000000000005 R09: 0000000000000001 [ 1584.344189][T31403] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88804f31c6b0 [ 1584.352140][T31403] R13: ffff88804f31bfe0 R14: ffff88804f31bfe0 R15: ffff88804f31d118 [ 1584.360096][T31403] ? __pfx_rxe_dealloc+0x10/0x10 [ 1584.365022][T31403] ? rxe_pool_cleanup+0x45/0x60 [ 1584.369862][T31403] rxe_dealloc+0x25/0xc0 [ 1584.374089][T31403] ib_dealloc_device+0x49/0x230 [ 1584.378929][T31403] __ib_unregister_device+0x396/0x480 [ 1584.384295][T31403] ib_unregister_device_and_put+0x5a/0x80 [ 1584.390003][T31403] nldev_dellink+0x226/0x320 [ 1584.394580][T31403] ? __pfx_nldev_dellink+0x10/0x10 [ 1584.399730][T31403] ? rcu_is_watching+0x12/0xc0 [ 1584.404654][T31403] ? cap_capable+0x107/0x460 [ 1584.409236][T31403] ? bpf_lsm_capable+0x9/0x10 [ 1584.413906][T31403] ? security_capable+0x80/0x260 [ 1584.418831][T31403] ? ns_capable+0xd2/0xf0 [ 1584.423162][T31403] ? __pfx_nldev_dellink+0x10/0x10 [ 1584.428261][T31403] rdma_nl_rcv_msg+0x38a/0x6e0 [ 1584.433015][T31403] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1584.438303][T31403] ? __lock_acquire+0x4a5/0x2630 [ 1584.443230][T31403] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 1584.449637][T31403] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1584.456569][T31403] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1584.461845][T31403] netlink_unicast+0x5aa/0x870 [ 1584.466605][T31403] ? __pfx_netlink_unicast+0x10/0x10 [ 1584.471881][T31403] netlink_sendmsg+0x8b0/0xda0 [ 1584.476632][T31403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1584.481901][T31403] ? __might_fault+0xb0/0x140 [ 1584.486577][T31403] ____sys_sendmsg+0x9e1/0xb70 [ 1584.491328][T31403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1584.496600][T31403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1584.501874][T31403] ? __pfx_futex_wake_mark+0x10/0x10 [ 1584.507150][T31403] ___sys_sendmsg+0x190/0x1e0 [ 1584.511830][T31403] ? __pfx____sys_sendmsg+0x10/0x10 [ 1584.517046][T31403] __sys_sendmsg+0x170/0x220 [ 1584.521631][T31403] ? __pfx___sys_sendmsg+0x10/0x10 [ 1584.526734][T31403] ? __x64_sys_futex+0x34f/0x4d0 [ 1584.531667][T31403] do_syscall_64+0x106/0xf80 [ 1584.536239][T31403] ? clear_bhb_loop+0x40/0x90 [ 1584.540902][T31403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.546779][T31403] RIP: 0033:0x7fdbdf59c819 [ 1584.551177][T31403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1584.570779][T31403] RSP: 002b:00007fdbe0516028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1584.579174][T31403] RAX: ffffffffffffffda RBX: 00007fdbdf815fa0 RCX: 00007fdbdf59c819 [ 1584.587130][T31403] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000009 [ 1584.595110][T31403] RBP: 00007fdbdf632c91 R08: 0000000000000000 R09: 0000000000000000 [ 1584.603065][T31403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1584.611019][T31403] R13: 00007fdbdf816038 R14: 00007fdbdf815fa0 R15: 00007ffc9336ac18 [ 1584.618985][T31403] [ 1584.622506][T31403] Kernel Offset: disabled [ 1584.626808][T31403] Rebooting in 86400 seconds..