last executing test programs: 13.66906269s ago: executing program 0 (id=54): r0 = socket(0x10, 0x2, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x100102, 0x50) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x4008000) sendfile(r1, r0, 0x0, 0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x0, 0x0, 0x2, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5a) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004805) bind$inet(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x80000) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x4, 0xffffffffffffffff, 0x80000}) syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') write$cgroup_int(r3, &(0x7f0000000180)=0xfe5f, 0x12) read$FUSE(0xffffffffffffffff, &(0x7f0000004a00)={0x2020}, 0x2020) 10.115511154s ago: executing program 0 (id=64): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000002000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1, r0}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000bc0), 0x0}, 0x20) socket(0x0, 0x2, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) link(0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r7 = dup2(r6, r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000120"], 0xfc}}, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) ioctl$BLKTRACESTOP(r7, 0x1275, 0x0) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000000440)="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") 7.421361222s ago: executing program 4 (id=72): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="b36315ecd04550d3abe8cd56cee3", 0x0, 0x2000, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x8000, 0x7800, 0x7, 0xbb, {{0x17, 0x4, 0x1, 0x29, 0x5c, 0x66, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0x8e, 0x3, 0xc, [{@private=0xa010100, 0x63d4}, {@multicast1, 0x401}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x27ad}, {@dev={0xac, 0x14, 0x14, 0xb}, 0x400}]}, @rr={0x7, 0x17, 0x7d, [@local, @empty, @empty, @multicast2, @private=0xa010101]}, @ra={0x94, 0x4, 0x1}]}}}}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x24) statx(r2, &(0x7f00000000c0)='./file0\x00', 0x4000, 0x100, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x8, 0x4e22, 0xdb, 0x2, 0xc0, 0x20, 0x2b, 0x0, r4}, {0x6, 0x7fffffff, 0x11, 0x9, 0xfffffffffffffff9, 0xd, 0x9, 0xd9e}, {0x4, 0xd2b, 0x10001, 0x8000}, 0x100, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x1}, 0x2, @in=@multicast1, 0x3505, 0x1, 0x3, 0x3, 0x0, 0xfffffff7}}, 0xe8) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f00000002c0)='f2fs\x00', 0x1800, &(0x7f0000000000)='discard') getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000040), &(0x7f00000000c0)=0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000240)={0xfffffffe, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0x5}, 0x8) 7.216759639s ago: executing program 4 (id=74): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x4, 0x20, 0x9, 0xc0000000000000}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x9514, 0x8000, 0x2, 0x1, r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x10, 0x1, 0xfffffffd, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xffff, 0x1}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0x0) 7.20382249s ago: executing program 0 (id=76): unshare(0x6a040000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x1, 0x2, 0x0, 0xd, 0x4101}, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async, rerun: 64) setitimer(0x0, &(0x7f0000000180)={{0x77359400}}, &(0x7f00000001c0)) (async, rerun: 64) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async, rerun: 32) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) (async, rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) (rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004700)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x94) (async) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x1010, r2, 0x42795000) r3 = socket$kcm(0xa, 0x2, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) (async) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010106, 0x4e22, 0x3, 'lc\x00', 0x1, 0x9d3d, 0x6c}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x5e20, 0x10000, 0xcd}}, 0x44) (async) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[], 0x9) io_setup(0x6, &(0x7f00000002c0)=0x0) io_pgetevents(r6, 0x4f3, 0x7, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r7, 0x0, 0x0) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 6.872914409s ago: executing program 4 (id=77): r0 = io_uring_setup(0x519, &(0x7f0000000640)={0x0, 0x3cb4, 0x2, 0xd01fa, 0x8100014e}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x2000, 0x4, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43e}}, 0x0, 0x0}, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000280)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0x36f, 0x0, 0x106, 0xfffffff8, 0x3d}}, 0x4ce200) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0xa) close_range(r0, 0xffffffffffffffff, 0x0) 6.728876617s ago: executing program 2 (id=79): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000001500000000006"], 0x14}], 0x1}, 0x0) 6.509326251s ago: executing program 2 (id=81): r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x1a7) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000040)={0x4, 0xfffffffffffffd80, 0xfa00, {0xffffffffffffffff, 0xd}}, 0xfffffe01) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x40) (async) io_setup(0x8, &(0x7f0000000180)=0x0) io_submit(r3, 0x3, &(0x7f0000000b00)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x200, r0, 0x0, 0x0, 0xf6, 0x0, 0x0, r0}, 0x0, 0x0]) 5.625102459s ago: executing program 2 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002a00)=""/4106, 0x679}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x2}, 0x100) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_extract_tcp_res$synack(&(0x7f00000001c0)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa7ddd6000000000380600fe880000000000000000000000000001fc01000000000000000000000000000000004e22", @ANYRES32=r3, @ANYRES32=0x41424344, @ANYBLOB="e40000009078000013123432d50049a01b5156c2f44c038e91ba1d12d2b653e0c9d32072c19dd6ca814b7d7b"], 0x0) write$tun(r2, &(0x7f0000000280)={@void, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @loopback, @local}, {{0x0, 0x1, r3, 0x41424344, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x18}}}}}, 0x32) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000080)={r0, 0x0, 0x4, 0x1, 0x5, 0xf}) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0xc0044d10, &(0x7f0000000100)=0x5c) 5.13411525s ago: executing program 0 (id=83): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) getpgid(0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000070}, 0x4) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9) r1 = socket(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000180)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) sendto$packet(r1, &(0x7f0000000400), 0x0, 0x4c010, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0xb4}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x28) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, 0x0) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x50800}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r1, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}}, 0x4084) 4.43704273s ago: executing program 1 (id=85): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x4352, 0xfffffffb, {0xffffffffffffffff}, {0xee01}, 0xa0b, 0x4}) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) (async) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x1}}, 0x20) (async, rerun: 64) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async, rerun: 32) chdir(&(0x7f0000000140)='./bus\x00') (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x30}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r8 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r8, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) (async) ioctl$FIDEDUPERANGE(r8, 0xc0189436, &(0x7f0000000440)=ANY=[@ANYBLOB="0500000000000000030000000000000003"]) (async) r9 = gettid() rt_tgsigqueueinfo(0x0, r9, 0x5, &(0x7f0000000280)={0x2, 0xa4, 0x46}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000980)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x30, r11, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0xffffffff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048011}, 0x4004080) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004}, 0x40) ioctl$sock_ifreq(r0, 0x8932, &(0x7f0000001dc0)={'vlan0\x00', @ifru_hwaddr=@remote}) 4.118504413s ago: executing program 2 (id=86): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0xc00) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/anycast6\x00') connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e23, 0xeb7c, @empty, 0xd}, 0x1c) syz_io_uring_setup(0xc, &(0x7f00000002c0)={0x0, 0x79af, 0x800, 0xffffffff, 0x40024e}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) r2 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000700)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000580)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f0000002380)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="e8e8d50bb3dbd45f5e8e631b1872957ecd36b4c6cd00444d1159862726d19ea30ecbbe7c5d050c2420b0b9b3cf684f7d3876804a71bdda876c40b799cb1eb7c815c7dbdcb45e984b051e77dd97727f9d79670e10c74d00000000000000000000000000000000000000000000a5d9c23b0000000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000001600)) setsockopt$inet_tcp_int(r3, 0x6, 0x25, &(0x7f0000000040)=0x9, 0x4) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000006c0)={0x24, &(0x7f00000004c0)={0x40, 0xa, 0xa0, {0xa0, 0x22, "80a4084ffc63af9539173486f3a8c074d93c539bdda486bae8d98dedfd4506ca8fc1eb7b94bb9064b334ef49a462bf6d4c389539e3a602667d30cc6307b2d7a4258ed98239f2ff4511b2af49cfbca8d7e4c1e31bf0753fc566163e6cf80f5870461aed814e096c33162db142d840ae9c65e8ea39ceed4e74a6b1a67aacf02ee249a99df0bbdf57b5b911d1a2364d519481f8e719c588f2434d4c092ed612"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}, &(0x7f0000000600)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0xa, "5d1f3c2a"}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x6, 0x1, {0x22, 0xf76}}}}, &(0x7f0000000980)={0x2c, &(0x7f0000000740)={0x20, 0x17, 0xa5, "68f5c19eb9e2859b4928303536122129808c5e04063cb7e3e675484dd5535b1e1cafccdb926d871af2e83d91c41f41ebf7fb85eede8955923b5fc61b7f26f88cb4ab478850d3ced9742f8db008f302fb4a0421dd07f8645477efd8396b158a872a2d0ca7ca0b523d631e2f8b451ec2533a2e41db793958d76f482620cb05b13ab0ccdf2e7a945ac46e526a9b677d63839e8ee31da7e2f0b9a4c5fc2e604e794e8b3936efea"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000880)={0x20, 0x1, 0x86, "ce123efe2adafcac45ef64399cf34793325614cd1367e0ac0e08a06b2e04ce4088283680fe521c6e8f192fb69a2112bb4e7033098fa90376996d40fd640005674b591d66052e6b1e9764631f357f8661f419d0d3244a2df744d3bd94dc84233b12126ee7a350d951fcdf346c7fa357385544fd62e7502c2f9e0601244abfad39a6e52e421150"}, &(0x7f0000000940)={0x20, 0x3, 0x1, 0x2}}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) syz_usb_control_io(r2, 0x0, &(0x7f0000002040)={0x84, &(0x7f0000001c40)={0x20, 0x30, 0x1, "ad"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dvb_demux(&(0x7f0000001280), 0x0, 0x4901) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 4.04381363s ago: executing program 1 (id=87): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b80)={'dummy0\x00', 0x0}) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x3, @fixed}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) close(0xffffffffffffffff) r6 = socket(0x26, 0x3, 0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, &(0x7f00000007c0)=0x10) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000140)={0x60, 0x14, 0xc, "dd7937af08606eafd11964bd"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000044}, 0x8000002) 3.256982783s ago: executing program 0 (id=88): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x3103, 0x0) ioctl$SNDCTL_TMR_STOP(r0, 0x5403) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000020c0)={0x50, 0x0, r2, {0x7, 0x2d, 0x7f, 0x10000000, 0x5d3, 0x18, 0x0, 0x7, 0x0, 0x0, 0x20, 0x836}}, 0x50) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000002140)) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000002180), 0xffffffffffff2f22, 0x2000) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x28, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040804}, 0x44050) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f00000022c0), 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r6, 0x5000940f, &(0x7f0000002300)={{r8}, "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"}) (async) r9 = syz_open_procfs$userns(r5, &(0x7f0000003300)) setns(r9, 0x20000000) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000003340)={0x0, 0x4, 0x2}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r10, &(0x7f0000003600)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x4000010}, 0xc, &(0x7f00000035c0)={&(0x7f0000003400)={0x1c0, r11, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0xb8, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfff}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x825}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x431}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x401}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x21}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe5c}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x53}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_REG_RULES={0xc4, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffff8ba}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x10001}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffff9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10001}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x22b}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}]}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x40004}, 0x1) (async) write$FUSE_ENTRY(r1, &(0x7f0000003640)={0x90, 0x0, 0x0, {0x1, 0x0, 0x101, 0x1515992a, 0xfffffff4, 0x2, {0x4, 0x7, 0x5, 0x3, 0xbe7, 0x2, 0x1, 0x8, 0xb70, 0x8000, 0x2, r3, r4, 0x1, 0x2}}}, 0x90) r12 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r12, 0x11, 0xb, &(0x7f0000003700), &(0x7f0000003740)=0x4) (async) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) (async) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000003780), 0x80000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) r13 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000037c0), 0x80, 0x0) ioctl$EXT4_IOC_GETFSUUID(r13, 0x8008662c, &(0x7f0000003800)) (async) ioctl$XFS_IOC_FSGROWFSRT(r10, 0x40105870, &(0x7f0000003840)={0x8, 0x5ee0}) (async) quotactl_fd$Q_GETNEXTQUOTA(r12, 0xffffffff80000901, r3, &(0x7f0000003880)) (async) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000003940), r10) sendmsg$TIPC_NL_NAME_TABLE_GET(r13, &(0x7f0000003a80)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000003a40)={&(0x7f0000003980)={0xa0, r14, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x1d, @private1, 0xd55}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1400}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xa}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) writev(0xffffffffffffffff, &(0x7f0000004000)=[{&(0x7f0000003b40)="8fdded84f839b75bb7cb02bbf09110b41b0d4ee48bcb07497b0bd9dacb72fbd682a91e3decadb2e2e4dad611ac113e8d42f4881d3afb6bbf3f926e9991c74c4f288fa5468ac1e4a362ef138428919c35fed0ca52af70b626d73aa20aed61fe87e235a3bf0b239cb18d65452e2b1c3f1b33868037e83394129e9354e0b083faf4650ed03965e98259c4ce47e63d94c39c32f6e3571f3298fb6d3a9146e0df4ed878b986b56eeb6e880894c88a10840d8af3db6b04222037883b0eccee85f61bc304701aec7f1054a0e2be45def3e5c1c85be420", 0xd3}, {&(0x7f0000003c40)="691561a89eaf9d367cff7b736728bb80e441a897d09cd027594680fa71d2bc93b197e3cafca710ac5511ec424512cae6976612d6a1f9adb48216a8879e20ced3a7bc95714b212e9f70d6a2d2051d50b0ac9bdaaf5879216fe814f5c1ac0b6f3394257a8ba4dd0e0883a2287ecab53a59f72a501103464d36b8d49427435077daea0ddcf0800e781d91cf9fd4ce213166b4ac519f8db4948e9000956df85dfe4aa3ad351e012d73f7bddf2288f5ce2fe386342f1b11f30fbae4998cd3cbd0a3bfec970f24159b232f8602cfeb0fcf33612f87c1", 0xd3}, {&(0x7f0000003d40)="85a35b49208ad3020e41319d2db673b87631fdc4da906151785cb2bb3b8befb20b65bde2369a9ab31d97f3df85479b", 0x2f}, {&(0x7f0000003d80)="7e3331d0fd342f8c31f930535020ff5937244ee402bdb038f221e8df4da05985ad635ad39970c745a64096791835b044a40a14ba8c4c", 0x36}, {&(0x7f0000003dc0)="d55514167fd133ead75123d29ff5b8006b77a3d848652cf95e8da9da4174d203ae3f43894144ed09f522e6cbb8b6a02224d0273ffa7efe25e49af34225d9ca24a8beb670aae3810a47b181ac3b892e36a1d9deab709f89d2acdcedb95aec39af30b82b7a5927906512a9b3aae40ab02d87880c2fae3eb18500d4aaa630ca9ba3c5c69eb4a3bb5c0a0d29311a569288634e8622a83d2cc06484d2993ebf40e98706c16472f790832b3e7ec349de25aaf3bf0273e59fd5b64d304b5bc749840d6e514f906c9f35065922f106d3ff9ca0f0b8adcd2ed95bbcd2b12a15281c66c7889e34", 0xe2}, {&(0x7f0000003ec0)="004e31b0ded49970a81fc1fbb5b0695d24660fa03fc5d8bc90ffcee14e63689e2bcc08a97a2fa70c5dfde4c4949bf30964", 0x31}, {&(0x7f0000003f00)="bc72fc07725fcd61131652757ee12b75d2f5d295c25813ab460fdf59689e338aef93b9874c673805efccce50a7d40f1227e0060d0c7131377e60b01e5e6598b2cf4fa27b0f30", 0x46}, {&(0x7f0000003f80)="2400d9101060747ee10b090b99d489e011a5", 0x12}, {&(0x7f0000003fc0)="a45ad456bf19189fd6a7122de93eb7", 0xf}], 0x9) 3.059587515s ago: executing program 0 (id=90): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) flistxattr(r0, &(0x7f0000000140)=""/184, 0xb8) (async, rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f00000000c0)={0x2, 0x0, [{0x7f, 0x5, 0x0, 0x0, @msi={0x565, 0xa, 0x4, 0x40}}, {0x7ff, 0x2, 0x0, 0x0, @msi={0x0, 0x2, 0x4, 0xffffffff}}]}) 2.965902825s ago: executing program 4 (id=92): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r2, 0xffff) (async) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) (async) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086203, &(0x7f0000000080)=0x4) (async) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086203, &(0x7f0000000080)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x5, 0x14, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x80) getpid() (async) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) (async) setns(r7, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x9) (async) umount2(&(0x7f0000000040)='.\x00', 0x9) socketpair(0x11, 0x2, 0x8, &(0x7f0000000080)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x9c0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000002340)={0xffffffffffffffff, &(0x7f0000002380)="7a1fbe9e57d90e6cd6a2e96c295a29c22b0e69e04c65eb8bf93f2f64ee0cdab276e4154c7a684e896e92045629d98680f6d7d0d571a1080049037caf195b9ed2e971568bd01465f3c33961c91549f25f1387e587fbf6d68b2da726ad313fedacb0ffad785068f81446ac78e9784c8553494afcaf71ce27e8a56e67a2eee9b728cbf90c191d03b8f316bad32e83291881321332b90b0f9900aed37b2879b0faae7e0a28e1e01f45a8b9e59f8783be1c56971cba0985af16bc71cd944367d43d60d6b854297575bcff01d3baa5b6e770efeadbb6", 0x0}, 0x77) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000400)={0x2, @vbi={0xe8de, 0x4, 0xff, 0x3032344d, [0xdd7, 0x2], [0x3], 0x1}}) 2.797285282s ago: executing program 4 (id=93): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000001080), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r2 = socket$kcm(0x11, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540), 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x35, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000740)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e}, 0x94) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590211c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) r4 = socket(0x14, 0x6, 0x5) socket$unix(0x1, 0x1, 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xfffffffffffffe00, 0x208002) ioctl$SNDRV_PCM_IOCTL_PREPARE(r5, 0x4140, 0x0) bind$inet(r4, 0x0, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="040025bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0xc0000}, 0x0) 2.53176254s ago: executing program 3 (id=95): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)=0x10000) (async) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) syz_emit_ethernet(0x6f, &(0x7f0000000280)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0xa2, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xb}}, {{0x4e26, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}, {"ac949ae5499cd2ac3b7b061cadcdd2f8080fe93eaf45c9ea124c703daeed8a50a9386b6eff215325656a4b2f91c8dad8e75c3d134b7105bddf"}}}}}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async) ioctl$BLKFRAGET(r1, 0x1265, &(0x7f0000000080)) (async, rerun: 32) r2 = gettid() (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x20000000) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x2d, "e6ce09bbe96c68e71c6b58ffb3215a859efb1b7b61869c41081bc13bfa0fcc16934abdaf49106edbb04feaee31"}, &(0x7f0000000140)=0x35) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800008209"], 0x18}}, 0x0) (async) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (rerun: 64) 2.478456281s ago: executing program 1 (id=96): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (rerun: 32) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 64) getrusage(0xffffffffffffffff, &(0x7f0000000380)) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$key(0xf, 0x3, 0x2) (rerun: 32) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x4, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, @sadb_address={0x3, 0x5, 0x32, 0x0, 0x0, @in={0x2, 0x4e21, @remote}}, @sadb_address={0x5, 0x6, 0xff, 0x0, 0xe, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x3}}]}, 0x60}}, 0x4004) (async) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket(0x32, 0x803, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) pipe(&(0x7f00000002c0)) (async, rerun: 64) r9 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x4efee}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x6f4c}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x13) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r10, 0x5425, 0x0) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea0900001f0000000100000500000000000000000000ff020000000000220000000000000001e80031d011d87a694fbbe78dd859b2ee0139ec45dec850a230b1fcf734e1b720b6efde4d2749a21842a1c1a6ccec0bd9fd8766432494e4f3a71ed33c6ac3190fd5ba57e25064397f621b5ef055a9e57b2c4de30081a9dc086a46160495f1ac00b8c5adca1d3f9bb6ea35e929f045687e6530299c991a2fa043c33c58f06122eb57940c8a24d0536a4cb4c02df9273c651b34ef393daf3f09622097097bac75ee83d706209079f2cd84c8794ec3cacee3daf28da4914678f39bdd70f3f4a9324efee92c15d9061441134e95cc758bc0e6bb7a7fa877dd8161"], 0x0) 2.205127786s ago: executing program 3 (id=97): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x14, 0x0, 0xffffffffffffffdc) keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000500)='\xbc50\xf4\xc4Fv:\xc0\xe3\x97\x8cL\x85\xf0\x9bhq\xa9', 0x0) socket$inet6(0xa, 0x1, 0xffd) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='bfs\x00', 0x8000, 0x0) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r5, 0xc0044d07, &(0x7f0000000040)=0xa) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000800000000000000010000020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r6, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 2.008529004s ago: executing program 1 (id=98): msgget$private(0x0, 0x440) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x6}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x82f3810286dc8ed3}, 0x24000840) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB="f5ffffffffffffff0700000000000000030000000000006802000000000000000000000000000000030000000000000000080000000000000000000000000000000000000000000080000000000000000000000000000000000e000000000000bb0000000000000009000000000000000000000000000000ae730c0ec9ae88abd27695b7ce00"/144]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x121) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x1, 0x4, 0x981, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x7}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x40080c0) r5 = syz_usb_connect(0x4, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x45, 0xac, 0x7, 0x40, 0x5e3, 0x505, 0xfdcb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0xd7, 0xe8, 0x0, 0xe, 0x1, 0x0, 0x3}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$cdc_ncm(r5, &(0x7f00000005c0)={0x14, &(0x7f0000000080)={0x40, 0x23, 0xc, {0xc, 0x21, "93645ed68132c1fc8775"}}, 0x0}, 0x0) 1.381767589s ago: executing program 4 (id=99): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x13, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='syzkaller\x00', 0x5, 0xbc, &(0x7f0000000100)=""/188, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x3, 0x305013ee, 0x2}, 0x10, 0x16c18, 0xffffffffffffffff, 0x1, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000280)=[{0x4, 0x4, 0xa, 0xc}], 0x10, 0x10000}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) socket$kcm(0x23, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x8, '8'}, @main=@item_4={0x3, 0x0, 0xb, "c83e2503"}, @local=@item_012={0x2, 0x2, 0x8, "3994"}, @local=@item_4={0x3, 0x2, 0x2, "b09ea549"}, @main=@item_4={0x3, 0x0, 0x8, "ce9abc16"}]}}, 0x0}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0xc99, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) syz_usb_connect(0x3, 0x4d5, &(0x7f0000000500)={{0x12, 0x1, 0x310, 0xe0, 0xf7, 0x85, 0xff, 0x2040, 0xd300, 0x52ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4c3, 0x1, 0xff, 0x2, 0xd0, 0x78, "", [{{0x9, 0x4, 0x4a, 0xd, 0xf, 0x8d, 0x4a, 0x25, 0x4, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "9983"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x5, 0xe9aa, 0x96}}], [{{0x9, 0x5, 0x7, 0x3, 0x8, 0x8, 0x6, 0x59, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x3}]}}, {{0x9, 0x5, 0x7, 0xc, 0x40, 0xe, 0x8, 0x9}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x10, 0x1, 0x5d, [@generic={0x98, 0x10, "2bec55da8f964a9d302e8e65a112158deb9f715331aa65c9b6d6980512a8b3bff3bae73a9a2a77bef9cb09ce250ca225f36b814b2ecc4a5085f2e0cb8a624de797f45988b3f1bd16b96ca6837ec62867af0f2f0c5b516efb8d888d7216fe8aac7a310019f58551346f9b9187a2b8d0f036ab29faebe0b18450de4712ceb7d6487c30bcaa7a8a62ddf2bc789a8df0f185745cf8ccac03"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x8a, 0x8, 0x7, [@generic={0xd7, 0x23, "481994ac41b34fa415f6c9749752636e9901b6340921187be5261a77e9aee679ef6b9dc295f66dc9537f72a810ac60bc84d179e3a3443c60a1c7cf3507ba6e18a816ea950b035b178dbd16cb295761cb28617293ba0e76208894ca87fd4657d11114f44accbf4176f296888863b23500ffa9b3b96a563684f75699e78b8b4d7ca455762dde16d5efa4f05d9938e8a67d0e695f394f5b07bec9feee9db271b7db8c7c016cf38a0be359a74d03011f6c36e036aae580abb0fa3b208bb9f4a13023baf25c55bbf33392ceffdb4f217aff5ffb6067de6d"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x8000}]}}, {{0x9, 0x5, 0xa, 0x13, 0x8, 0x8, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x34, 0x4}, @generic={0x62, 0xc, "55ec06a576ce32c96b51b87d04011ad460db5776ef793b7ba71ba22bc60d3f86b51fb6e89b77ffb68b33c9fb1a26279b5b88b72f03a5d5ff91ea31edaaac85407b6466df7decadcb549b2dafbad61a9004b32019946ed66d48889604c9ea79ee"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x5, 0xa, 0x1}}, {{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x6, 0x4, 0x8}}, {{0x9, 0x5, 0xc, 0x1, 0x20, 0x0, 0x4, 0x2, [@generic={0x62, 0x21, "7aaf5eb5defdcb26a0a66ce02b85c3b4c50454b851184286cdf79ce2acd514b935c04ba4cadcdcfdb271480f1cd481357e4e4302bcf1e34620923140a0f7f6957fc859331626b719be6e8721c6d096bd6d504270a5ff04540f861165a03366c0"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x2, 0x9, 0xc7, [@generic={0xfd, 0x22, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xfff9}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x7, 0x2, 0x1}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x7, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0xc, 0x200, 0x6, 0x7, 0xe5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x6}, @generic={0x5c, 0x22, "5dd25ae6fe38020c8f2c405ffabed5c66501cccf2945786194ed18a5aee08ab086fe7384876777bf6e97d3d72cc17a8e59295b754c78f2d899ca1456eec33ce66dbeda2f9ecaad951325e21c24255f7547c87e556e4922c5558a"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x600, 0x7, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xa, 0x1}, @generic={0x4d, 0x3d, "31aa9b3c6067776219467556d43badefba7d6ef839ab2a4ac3daf67fb92a6a20778fb00616d3c9fbf4c9f2c2a48c4c341dcefee265c73bd2977f12ec474a63471e3f48472ce489b29662ca"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x2, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0xb}]}}, {{0x9, 0x5, 0x84, 0x0, 0x3ff, 0x0, 0x8, 0x40}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000a00)={0xa, 0x6, 0x201, 0xd, 0x9, 0x8, 0xff, 0x2}, 0xf, &(0x7f0000000a40)=ANY=[@ANYBLOB="010a100300080008140700"], 0x1, [{0xec, &(0x7f0000000a80)=@string={0xec, 0x3, "2eb4048cf79c002cee81a1c0f77b797ddd3c978e4f23b1ddae5eeace5b68a7832ffa2eeaf98fc84a9122eee46e5d71bff244ea14dc7bc452f2acb6743e34587bcba9d04571d3c7d3f0931b690ee2e91d70bdec337063c2465fe2a75556c99d31279ec92c39697fe7c334c3adde4d797af40dda005845c333f7bf3b0ce908fac5a6e9b5096846796d78c13bf2db0b8750aaa3571b879944b16318697e23003aba092e83d8f60e1ef996c16e752e81cf5d18d15faafbe9c482b8e80a74b4e23ac5772a3a5b90ee57b3eef74a9770d0d34460bfdc8e67ce909f33403d3b74e0928ca76bd5480cc8f261bf96"}}]}) readv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/114, 0x72}], 0x1) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x2, 0x3, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x38}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1}}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0x541b, 0x0) sendto$packet(r2, &(0x7f0000000280)="0b031260feffffff02005400f6", 0xd, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r3}, 0x14) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000380)) syz_usbip_server_init(0x5) 1.212552709s ago: executing program 3 (id=100): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0x1002, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000801000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) timer_create(0x0, &(0x7f0000000000)={0x0, 0x1f}, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) pread64(r1, &(0x7f0000001840)=""/4096, 0x1000, 0x1) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000280)={0x2, 0x5}) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0e85667, &(0x7f00000003c0)={0xc0f0f000, 0x280, "9a0400000066e134d198b1ab00000009dcb67400000013402800", 0x10000000000000, 0x10e, 0x100000001, 0x9, 0x4, 0x801, 0x20000, 0x0, [0x3, 0x0, 0x10, 0x3]}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r3, 0x202219, 0x7723, 0x5a, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x38, 0x14, 0xf0b, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xfff1, 0x5}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8000) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000019340)={0x0, 0x0, 0x0}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) personality(0xfe47fef9f5ef7379) personality(0x6) syz_io_uring_setup(0x30da, &(0x7f0000000200)={0x0, 0xd552, 0x10000, 0x3, 0x2ca, 0x0, r5}, &(0x7f0000000100), &(0x7f0000000140), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) 1.079147725s ago: executing program 3 (id=101): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000cffee702e5be325ab1000000c100"/30], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) socket$inet(0x2, 0x3, 0x2) (async) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @address_request={0x11, 0x0, 0x0, 0x7f}}}}}, 0x0) readlink(0x0, 0x0, 0x0) (async) readlink(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x14300) (async) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x14300) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) r4 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$tcp_mem(r4, 0x0, 0x0) (async) write$tcp_mem(r4, 0x0, 0x0) socket(0x11, 0x3, 0x0) (async) socket(0x11, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES64=r2], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, 0x0, 0x4024000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r7, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0xfffc}, 0x0, [0x7, 0x4, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x0, 0x40000000, 0xfeffffff, 0x0, 0x3, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0xfffffffc, 0x0, 0x10000000, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x40000000, 0x0, 0xfffffffc, 0x0, 0xffffffff, 0x0, 0xa, 0x0, 0x2d52c0], [0x0, 0x1, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x2000, 0x109, 0x80000, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0xfffffffd, 0x0, 0xcb98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000, 0x0, 0xf, 0x7ffe, 0x2000002, 0x0, 0x0, 0x0, 0xfffffffe, 0xff45, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0xd77, 0x0, 0x0, 0xfffff37a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0xc, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x9, 0x4, 0x3, 0x2, 0x8, 0x0, 0x2, 0x0, 0x0, 0xd12, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x8, 0x101, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x369c, 0x5, 0x0, 0x0, 0x800, 0x0, 0x40002, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x80, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r7, 0x5501) write$uinput_user_dev(r7, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffff8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x4000], [0xd68a, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x6], [0x81, 0x5, 0x5d30, 0x1, 0xb05f, 0x0, 0xdbc1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0xffffffff, 0x0, 0x4, 0x1ff]}, 0x45c) (async) write$uinput_user_dev(r7, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x0, 0x1f}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4001, 0x0, 0x2, 0xfffffe00, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xfffffff8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x401, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x4000], [0xd68a, 0x3, 0x10000002, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x9262, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x5, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x20000002, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x6], [0x81, 0x5, 0x5d30, 0x1, 0xb05f, 0x0, 0xdbc1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0xffffffff, 0x0, 0x4, 0x1ff]}, 0x45c) write$proc_mixer(r3, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x2a) close(r3) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x2}]}) 1.041983985s ago: executing program 2 (id=102): socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000010000", 0x7) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bfe000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}], 0x18}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS2(r7, 0x4140aecd, &(0x7f00000001c0)={{0x80a0000, 0x200000, 0xa, 0x9, 0x9, 0x4, 0x79, 0x55, 0x0, 0x7f, 0x8, 0x43}, {0x100000, 0xf6da2800, 0x4, 0x1, 0xc, 0x15, 0xff, 0x2, 0xf7, 0x0, 0x6, 0x70}, {0xf000, 0xfff99000, 0x0, 0xb, 0x5f, 0x3, 0x7f, 0x59, 0x4, 0x6e, 0xfd, 0x62}, {0xa000, 0x0, 0xa, 0x6, 0x5, 0xdd, 0x7, 0x3, 0x4, 0x46, 0xfc, 0xb8}, {0x7000, 0x50000, 0xe, 0x9, 0x0, 0x58, 0xd7, 0x3, 0x0, 0x4, 0x9, 0x6}, {0xdddd0000, 0x1000, 0xe, 0x98, 0xfd, 0x0, 0xa, 0x6, 0x0, 0xff, 0x1, 0x1}, {0xd000, 0x30000, 0x10, 0x11, 0x47, 0x4, 0x5, 0x1, 0xe0, 0x2, 0x5, 0xa5}, {0xd000, 0x8000000, 0x0, 0x5, 0x5, 0x9, 0x7, 0xe7, 0x8, 0x79, 0xf2, 0x8}, {0xeeef0000, 0x2}, {0x47004, 0x1ff}, 0x2, 0x0, 0x54000, 0x212365, 0x9, 0x5101, 0x60000, 0x0, [0x7, 0x7, 0xfffffffffffffff1, 0xc]}) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8) sendto$inet(r8, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) close(r8) mount$binder(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x1000810, &(0x7f0000000000)=ANY=[@ANYBLOB]) 900.99323ms ago: executing program 1 (id=103): unshare(0x40400) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_delrule={0x24, 0x21, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @remote}]}, 0x24}}, 0x0) (async) r1 = inotify_init() r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000180)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newnexthop={0x40, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x81}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x5}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x9}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) (async) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) (async) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) (async) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) sendto$inet(r2, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440606769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x6000000000000000, 0x0, 0x0) (async) inotify_add_watch(r1, 0x0, 0x808) (async) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000040)={[{@mpol={'mpol', 0x3d, {'bind', '=relative', @val={0x3a, [0x37, 0x34, 0x31, 0x35, 0x36]}}}}]}) 423.674464ms ago: executing program 1 (id=104): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000b40)={r1, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) r2 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='gid', &(0x7f00000000c0)='0\x00#\x00S\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2q\xc2\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 422.360375ms ago: executing program 3 (id=105): r0 = socket(0x10, 0x3, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x3, r2, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB='nr_inodes=E']) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, &(0x7f0000000040)=ANY=[@ANYBLOB="e9e261ddef92a86203a716ad194e973af5f5c0a4cc6bb9a1d329abb2e27332a56d2496cb84a8e4720b7c8ec5020000000000000039fa4aefc525ea5917c628d40000695301f44a3148398b9a8592496160eacc9246d8fe49e8d0017256c9e9b3866748ff85e9b87b0c5f14e6"]) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000140)={0x28, 0x2, r3, r2, 0x8, 0x7, 0x5}) (async) getsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000180)=""/143, &(0x7f00000002c0)=0x8f) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) ftruncate(r4, 0xc17a) read$FUSE(r4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000240)={'veth1_to_batadv\x00', @broadcast}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES8=r4, @ANYRESHEX=r0, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 342.414156ms ago: executing program 3 (id=106): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x40) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000200)='%+9llu \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES16=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x20080, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r6 = eventfd2(0xeffffffb, 0x80800) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000001340)={0x800005, 0xe000, 0x2, r6}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r6}) (async) close(r3) r7 = syz_io_uring_setup(0x332f, &(0x7f0000000400)={0x0, 0x6853, 0x800, 0x5, 0x39}, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000000)) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0xf0, 0x10, 0x713, 0x70bd2c, 0x25dfdbfc, {{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x20, 0x4e21, 0x2, 0x2, 0x80, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@private=0xa010102, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x543}, {0x5, 0x7fffffffffffffff}, {0x0, 0x0, 0x2000000}, 0x70bd28, 0x3500, 0xa, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000900)={&(0x7f0000003000), 0x1, 0x3}, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r7, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) (async) r9 = socket(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000800)={0x14, 0x0, &(0x7f0000000780)=ANY=[]}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc048094) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="485de80010000d0428bd7000fcdbff2500008000", @ANYRES32=r9, @ANYBLOB="10000000000000003fd69924595b85d462726964676500001800028005001900840000000c000e"], 0x48}}, 0x4084) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000400)=0x800) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000080000000180"], 0x50) 0s ago: executing program 2 (id=107): syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009937f0103c41d281e8250102030109021b0002000000000904d5000005de67000904008000ff"], 0x0) r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x6, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="3666450f6fe3c74424020600000088442406000000000f01142466b87a000f00d066b876000f00d0400f9ce4660f38823d00300000410f01dfb9800000c00f3235000400000f3045f7b300000000430f21e3420f00d5", 0x56}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) recvfrom$unix(r0, &(0x7f00000020c0)=""/4105, 0x1000, 0x10020, 0x0, 0xffffffffffffff7b) kernel console output (not intermixed with test programs): 48.239142][ T29] audit: type=1400 audit(1779033756.372:124): avc: denied { write } for pid=5560 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.422792][ T29] audit: type=1400 audit(1779033756.562:125): avc: denied { write } for pid=5565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.470696][ T29] audit: type=1400 audit(1779033756.602:126): avc: denied { write } for pid=5576 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.629598][ T29] audit: type=1400 audit(1779033756.762:127): avc: denied { write } for pid=5579 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.678241][ T29] audit: type=1400 audit(1779033756.812:128): avc: denied { write } for pid=5590 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.238' (ED25519) to the list of known hosts. [ 55.463277][ T29] audit: type=1400 audit(1779033763.602:129): avc: denied { mounton } for pid=5599 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 55.487189][ T29] audit: type=1400 audit(1779033763.622:130): avc: denied { mount } for pid=5599 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.489953][ T5599] cgroup: Unknown subsys name 'net' [ 55.516032][ T29] audit: type=1400 audit(1779033763.652:131): avc: denied { unmount } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.654590][ T5599] cgroup: Unknown subsys name 'cpuset' [ 55.662790][ T5599] cgroup: Unknown subsys name 'rlimit' [ 55.744130][ T29] audit: type=1400 audit(1779033763.882:132): avc: denied { setattr } for pid=5599 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=815 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.777183][ T29] audit: type=1400 audit(1779033763.882:133): avc: denied { create } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.797944][ T29] audit: type=1400 audit(1779033763.882:134): avc: denied { write } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 55.841679][ T29] audit: type=1400 audit(1779033763.882:135): avc: denied { read } for pid=5599 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.854089][ T5601] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 55.862357][ T29] audit: type=1400 audit(1779033763.892:136): avc: denied { mounton } for pid=5599 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 55.897751][ T29] audit: type=1400 audit(1779033763.892:137): avc: denied { mount } for pid=5599 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 55.922843][ T29] audit: type=1400 audit(1779033764.012:138): avc: denied { relabelto } for pid=5601 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 56.824628][ T5599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.863905][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.864057][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.872581][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.880880][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.887102][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.893820][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.900878][ T5620] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.912982][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.915738][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.922019][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.929411][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.934649][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.948777][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.951168][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.956654][ T5620] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.963385][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.971865][ T5620] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.978321][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.992010][ T5620] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.992188][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.999716][ T5620] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.007734][ T5626] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 59.013966][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 59.028223][ T5626] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.030293][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.205462][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.213160][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.220524][ T5613] bridge_slave_0: entered allmulticast mode [ 60.227358][ T5613] bridge_slave_0: entered promiscuous mode [ 60.254647][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.261797][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.268888][ T5613] bridge_slave_1: entered allmulticast mode [ 60.275705][ T5613] bridge_slave_1: entered promiscuous mode [ 60.349454][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.376151][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.416626][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.423817][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.430978][ T5621] bridge_slave_0: entered allmulticast mode [ 60.437833][ T5621] bridge_slave_0: entered promiscuous mode [ 60.468625][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.475841][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.483693][ T5621] bridge_slave_1: entered allmulticast mode [ 60.490320][ T5621] bridge_slave_1: entered promiscuous mode [ 60.502289][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.509377][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.517213][ T5612] bridge_slave_0: entered allmulticast mode [ 60.523892][ T5612] bridge_slave_0: entered promiscuous mode [ 60.532057][ T5613] team0: Port device team_slave_0 added [ 60.537723][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.544833][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.552071][ T5614] bridge_slave_0: entered allmulticast mode [ 60.558664][ T5614] bridge_slave_0: entered promiscuous mode [ 60.566250][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.573414][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.580741][ T5614] bridge_slave_1: entered allmulticast mode [ 60.587820][ T5614] bridge_slave_1: entered promiscuous mode [ 60.599959][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.607189][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.614593][ T5611] bridge_slave_0: entered allmulticast mode [ 60.621197][ T5611] bridge_slave_0: entered promiscuous mode [ 60.628113][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.635188][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.642386][ T5612] bridge_slave_1: entered allmulticast mode [ 60.649040][ T5612] bridge_slave_1: entered promiscuous mode [ 60.656719][ T5613] team0: Port device team_slave_1 added [ 60.682457][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.689535][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.697396][ T5611] bridge_slave_1: entered allmulticast mode [ 60.704267][ T5611] bridge_slave_1: entered promiscuous mode [ 60.730892][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.753514][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.760543][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.786560][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.799555][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.810708][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.835437][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.845157][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.852158][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.878157][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.890356][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.907006][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.917487][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.939248][ T5621] team0: Port device team_slave_0 added [ 60.946534][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.980019][ T5621] team0: Port device team_slave_1 added [ 61.004423][ T5612] team0: Port device team_slave_0 added [ 61.011271][ T5614] team0: Port device team_slave_0 added [ 61.019042][ T5614] team0: Port device team_slave_1 added [ 61.045497][ T5612] team0: Port device team_slave_1 added [ 61.057340][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.064358][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.082108][ T5626] Bluetooth: hci2: command tx timeout [ 61.091119][ T5620] Bluetooth: hci1: command tx timeout [ 61.095876][ T5619] Bluetooth: hci0: command tx timeout [ 61.101618][ T5620] Bluetooth: hci4: command tx timeout [ 61.107051][ T5615] Bluetooth: hci3: command tx timeout [ 61.112798][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.130060][ T5611] team0: Port device team_slave_0 added [ 61.139750][ T5613] hsr_slave_0: entered promiscuous mode [ 61.146161][ T5613] hsr_slave_1: entered promiscuous mode [ 61.165651][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.173628][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.199565][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.211708][ T5611] team0: Port device team_slave_1 added [ 61.231861][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.238819][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.264931][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.295106][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.302141][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.328231][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.339516][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.346682][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.372600][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.384296][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.391270][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.417255][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.433310][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.440297][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.466210][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.483370][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.490312][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.516218][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.585969][ T5621] hsr_slave_0: entered promiscuous mode [ 61.592051][ T5621] hsr_slave_1: entered promiscuous mode [ 61.597867][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 61.603656][ T5621] Cannot create hsr debugfs directory [ 61.627704][ T5614] hsr_slave_0: entered promiscuous mode [ 61.633820][ T5614] hsr_slave_1: entered promiscuous mode [ 61.639636][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 61.645459][ T5614] Cannot create hsr debugfs directory [ 61.683492][ T5612] hsr_slave_0: entered promiscuous mode [ 61.689479][ T5612] hsr_slave_1: entered promiscuous mode [ 61.695577][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 61.701278][ T5612] Cannot create hsr debugfs directory [ 61.740696][ T5611] hsr_slave_0: entered promiscuous mode [ 61.746790][ T5611] hsr_slave_1: entered promiscuous mode [ 61.752831][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 61.758549][ T5611] Cannot create hsr debugfs directory [ 62.026434][ T5613] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.037311][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.045326][ T5613] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.054436][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.062345][ T5613] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.070824][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.091073][ T5613] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.099778][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.157513][ T5621] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.167072][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.175442][ T5621] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.186818][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.194680][ T5621] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.206210][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.215673][ T5621] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.224737][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.286508][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.296644][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.310946][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.322624][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.331148][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.340451][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.348642][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.357161][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.415212][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.446445][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.457416][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.470515][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.479251][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.488973][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.496678][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.506456][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.514425][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.524610][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.541162][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.548593][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.589109][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.596245][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.639588][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.667048][ T5611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.676435][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 62.684819][ T5611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.694814][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 62.702529][ T5611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.710730][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 62.718986][ T5611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.728987][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.773569][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.810260][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.817439][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.838202][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.845404][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.925173][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.966039][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.985651][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.992772][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.018785][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.025938][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.049667][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.118104][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.163415][ T5615] Bluetooth: hci1: command tx timeout [ 63.170936][ T5619] Bluetooth: hci2: command tx timeout [ 63.171178][ T4932] Bluetooth: hci0: command tx timeout [ 63.176426][ T5626] Bluetooth: hci4: command tx timeout [ 63.182768][ T5620] Bluetooth: hci3: command tx timeout [ 63.198497][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.205649][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.217707][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.224786][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.237198][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.318378][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.357057][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.381083][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.388256][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.416567][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.423721][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.600115][ T5613] veth0_vlan: entered promiscuous mode [ 63.652928][ T5613] veth1_vlan: entered promiscuous mode [ 63.749465][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.767065][ T5613] veth0_macvtap: entered promiscuous mode [ 63.796348][ T5613] veth1_macvtap: entered promiscuous mode [ 63.860901][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.914239][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.954859][ T1154] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.966844][ T5621] veth0_vlan: entered promiscuous mode [ 63.986993][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.996506][ T1154] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.006096][ T1154] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.032559][ T1154] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.088562][ T5621] veth1_vlan: entered promiscuous mode [ 64.159076][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.198614][ T5614] veth0_vlan: entered promiscuous mode [ 64.265472][ T5614] veth1_vlan: entered promiscuous mode [ 64.272652][ T5621] veth0_macvtap: entered promiscuous mode [ 64.291113][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.303985][ T5621] veth1_macvtap: entered promiscuous mode [ 64.312371][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.324070][ T5612] veth0_vlan: entered promiscuous mode [ 64.341221][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.382731][ T5612] veth1_vlan: entered promiscuous mode [ 64.394484][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.408584][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.416401][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.438466][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 64.438480][ T29] audit: type=1400 audit(1779033772.572:152): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.bILjXu/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 64.514413][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.526719][ T29] audit: type=1400 audit(1779033772.622:153): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.537391][ T5614] veth0_macvtap: entered promiscuous mode [ 64.556562][ T29] audit: type=1400 audit(1779033772.622:154): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.bILjXu/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 64.577166][ T5612] veth0_macvtap: entered promiscuous mode [ 64.588129][ T29] audit: type=1400 audit(1779033772.622:155): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 64.618959][ T5613] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.635389][ T29] audit: type=1400 audit(1779033772.622:156): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.bILjXu/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 64.643042][ T5614] veth1_macvtap: entered promiscuous mode [ 64.668008][ T29] audit: type=1400 audit(1779033772.622:157): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/root/syzkaller.bILjXu/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 64.675892][ T5612] veth1_macvtap: entered promiscuous mode [ 64.701531][ T29] audit: type=1400 audit(1779033772.632:158): avc: denied { unmount } for pid=5613 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.708117][ T5611] veth0_vlan: entered promiscuous mode [ 64.722424][ T29] audit: type=1400 audit(1779033772.642:159): avc: denied { mounton } for pid=5613 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 64.753346][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.753553][ T29] audit: type=1400 audit(1779033772.662:160): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="gadgetfs" ino=7765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 64.762694][ T29] audit: type=1400 audit(1779033772.662:161): avc: denied { mount } for pid=5613 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 64.843290][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.854514][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.873813][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.894983][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.905725][ T5611] veth1_vlan: entered promiscuous mode [ 64.977346][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.992049][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.061058][ T5611] veth0_macvtap: entered promiscuous mode [ 65.068990][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.077996][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.094738][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.109905][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.119360][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.247565][ T5620] Bluetooth: hci3: command tx timeout [ 65.257423][ T5620] Bluetooth: hci0: command tx timeout [ 65.265264][ T5620] Bluetooth: hci1: command tx timeout [ 65.273518][ T5620] Bluetooth: hci4: command tx timeout [ 65.280279][ T5620] Bluetooth: hci2: command tx timeout [ 65.536671][ T5611] veth1_macvtap: entered promiscuous mode [ 65.557654][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.569198][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.586978][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.588194][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.604913][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.617329][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.645260][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.665365][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.676855][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.689110][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.705066][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.716021][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.764268][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.797646][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.816063][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.816804][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.831127][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.838600][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.868286][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.877837][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.056193][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.085752][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.133252][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.166265][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.201172][ T5815] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 67.220200][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.233432][ T5815] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 67.250451][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.261971][ T5815] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 67.319971][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.342112][ T5626] Bluetooth: hci2: command tx timeout [ 67.347845][ T5626] Bluetooth: hci4: command tx timeout [ 67.353352][ T5626] Bluetooth: hci1: command tx timeout [ 67.358765][ T5620] Bluetooth: hci0: command tx timeout [ 67.364231][ T4932] Bluetooth: hci3: command tx timeout [ 67.375070][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.679060][ T5830] netlink: zone id is out of range [ 68.686971][ T5830] netlink: zone id is out of range [ 68.697649][ T5830] netlink: zone id is out of range [ 68.704097][ T5830] netlink: zone id is out of range [ 68.709809][ T5830] netlink: zone id is out of range [ 68.715489][ T5830] netlink: zone id is out of range [ 68.720767][ T5830] netlink: zone id is out of range [ 68.727837][ T5830] netlink: zone id is out of range [ 68.745291][ T5830] netlink: zone id is out of range [ 68.773020][ T5830] netlink: zone id is out of range [ 69.061952][ T5834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9'. [ 69.087137][ T5834] 9pnet_fd: Insufficient options for proto=fd [ 69.125177][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9'. [ 70.311455][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 70.311472][ T29] audit: type=1400 audit(1779033778.442:208): avc: denied { read write } for pid=5836 comm="syz.3.7" name="v4l-subdev0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.369996][ T5625] IPVS: starting estimator thread 0... [ 70.389650][ T29] audit: type=1400 audit(1779033778.442:209): avc: denied { open } for pid=5836 comm="syz.3.7" path="/dev/v4l-subdev0" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.413184][ T29] audit: type=1400 audit(1779033778.482:210): avc: denied { ioctl } for pid=5836 comm="syz.3.7" path="/dev/v4l-subdev0" dev="devtmpfs" ino=940 ioctlcmd=0x5619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.439401][ T29] audit: type=1400 audit(1779033778.512:211): avc: denied { create } for pid=5842 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 70.475202][ T29] audit: type=1400 audit(1779033778.522:212): avc: denied { write } for pid=5842 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 70.495403][ T5845] IPVS: using max 47 ests per chain, 112800 per kthread [ 70.508161][ T29] audit: type=1400 audit(1779033778.542:213): avc: denied { read write } for pid=5843 comm="syz.0.11" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 70.535309][ T5848] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 70.555538][ T5850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'. [ 70.576784][ T29] audit: type=1400 audit(1779033778.542:214): avc: denied { open } for pid=5843 comm="syz.0.11" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 70.712633][ T29] audit: type=1400 audit(1779033778.562:215): avc: denied { read } for pid=5843 comm="syz.0.11" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 70.735383][ T29] audit: type=1400 audit(1779033778.562:216): avc: denied { open } for pid=5843 comm="syz.0.11" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 70.759282][ T29] audit: type=1400 audit(1779033778.562:217): avc: denied { ioctl } for pid=5843 comm="syz.0.11" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 70.795040][ T5619] block nbd0: Receive control failed (result -32) [ 70.797008][ T5620] block nbd0: Receive control failed (result -32) [ 70.823753][ T5850] loop9: detected capacity change from 0 to 524287936 [ 71.226192][ T5856] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12'. [ 73.338002][ T42] libceph: connect (1)[c::]:6789 error -101 [ 73.354407][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 73.505394][ T5860] team0: Device ip6tnl1 is of different type [ 73.580418][ T5866] ceph: No mds server is up or the cluster is laggy [ 73.769386][ T5874] capability: warning: `syz.3.16' uses 32-bit capabilities (legacy support in use) [ 76.078366][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 76.078382][ T29] audit: type=1400 audit(1779033783.782:241): avc: denied { watch watch_reads } for pid=5879 comm="syz.4.19" path="/3" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.116178][ T804] cfg80211: failed to load regulatory.db [ 76.231954][ T29] audit: type=1400 audit(1779033784.362:242): avc: denied { write } for pid=5883 comm="syz.0.20" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 76.324717][ T29] audit: type=1400 audit(1779033784.462:243): avc: denied { create } for pid=5883 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.492030][ T29] audit: type=1400 audit(1779033784.612:244): avc: denied { setopt } for pid=5883 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.590217][ T29] audit: type=1400 audit(1779033784.702:245): avc: denied { ioctl } for pid=5883 comm="syz.0.20" path="socket:[8675]" dev="sockfs" ino=8675 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.736029][ T29] audit: type=1400 audit(1779033784.872:246): avc: denied { execute } for pid=5887 comm="syz.3.22" path="/4/memory.events" dev="tmpfs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.841847][ T804] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 76.898734][ T5891] netlink: 40 bytes leftover after parsing attributes in process `syz.3.22'. [ 77.573241][ T804] usb 1-1: not running at top speed; connect to a high speed hub [ 77.618105][ T804] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 77.664648][ T804] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 77.745614][ T804] usb 1-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 77.780094][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.868647][ T29] audit: type=1400 audit(1779033785.932:247): avc: denied { create } for pid=5896 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 77.900965][ T804] usb 1-1: Product: И [ 77.922020][ T804] usb 1-1: SerialNumber: Ъ [ 77.946533][ T5900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.24'. [ 77.955546][ T5900] netlink: 'syz.3.24': attribute type 7 has an invalid length. [ 77.964586][ T5900] netlink: 'syz.3.24': attribute type 8 has an invalid length. [ 77.972165][ T5900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 78.018527][ T29] audit: type=1400 audit(1779033786.082:248): avc: denied { ioctl } for pid=5899 comm="syz.3.24" path="socket:[9502]" dev="sockfs" ino=9502 ioctlcmd=0xf507 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.052067][ T29] audit: type=1400 audit(1779033786.142:249): avc: denied { setopt } for pid=5903 comm="syz.2.25" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.121687][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 79.481440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 79.753709][ T29] audit: type=1400 audit(1779033786.182:250): avc: denied { bind } for pid=5896 comm="syz.4.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 80.020975][ T5919] smc: net device vcan0 applied user defined pnetid SYZ1 [ 80.164353][ T5927] qnx4: no qnx4 filesystem (no root dir). [ 80.203051][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.292189][ T804] usb 1-1: USB disconnect, device number 2 [ 81.351474][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 81.367424][ T24] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 81.487379][ T24] usb 3-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 81.502144][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=37.32 [ 81.511386][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.525753][ T24] usb 3-1: Product: syz [ 81.529943][ T24] usb 3-1: Manufacturer: syz [ 81.544468][ T24] usb 3-1: SerialNumber: syz [ 81.621253][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 81.621269][ T29] audit: type=1400 audit(1779033789.752:263): avc: denied { mount } for pid=5937 comm="syz.3.34" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 81.806726][ T29] audit: type=1400 audit(1779033789.852:264): avc: denied { create } for pid=5937 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.077665][ T29] audit: type=1400 audit(1779033789.962:265): avc: denied { ioctl } for pid=5937 comm="syz.3.34" path="socket:[9587]" dev="sockfs" ino=9587 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.345831][ T29] audit: type=1400 audit(1779033790.072:266): avc: denied { map } for pid=5937 comm="syz.3.34" path="socket:[9587]" dev="sockfs" ino=9587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.589160][ T29] audit: type=1400 audit(1779033790.072:267): avc: denied { read } for pid=5937 comm="syz.3.34" path="socket:[9587]" dev="sockfs" ino=9587 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.646439][ T24] apple-mfi-fastcharge 3-1: USB disconnect, device number 2 [ 82.694716][ T5957] netlink: 'syz.2.37': attribute type 4 has an invalid length. [ 82.759981][ T5951] Zero length message leads to an empty skb [ 82.780417][ T29] audit: type=1400 audit(1779033790.912:268): avc: denied { read write } for pid=5958 comm="syz.1.26" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 82.844422][ T29] audit: type=1400 audit(1779033790.912:269): avc: denied { open } for pid=5958 comm="syz.1.26" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 82.906197][ T29] audit: type=1400 audit(1779033790.912:270): avc: denied { getopt } for pid=5958 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.043600][ T29] audit: type=1400 audit(1779033791.072:271): avc: denied { unmount } for pid=5611 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 83.410780][ T5968] hfs: can't find a HFS filesystem on dev nullb0 [ 83.523056][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.530832][ T29] audit: type=1400 audit(1779033791.082:272): avc: denied { shutdown } for pid=5962 comm="syz.1.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.701505][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 83.746713][ T24] usb 3-1: config 0 has an invalid interface number: 61 but max is 1 [ 83.892103][ T24] usb 3-1: config 0 has no interface number 1 [ 83.997962][ T24] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6 [ 84.129749][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.325900][ T24] usb 3-1: Product: syz [ 84.364400][ T24] usb 3-1: Manufacturer: syz [ 84.422931][ T5979] raw_sendmsg: syz.4.41 forgot to set AF_INET. Fix it! [ 84.486751][ T24] usb 3-1: SerialNumber: syz [ 84.554700][ T24] usb 3-1: config 0 descriptor?? [ 84.714419][ T24] viperboard 3-1:0.61: version 0.00 found at bus 003 address 003 [ 84.792164][ T5984] tipc: Started in network mode [ 84.804505][ T5957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.822155][ T5984] tipc: Node identity e6a6976c97a3, cluster identity 4711 [ 84.827020][ T24] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 84.843761][ T5957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.856215][ T24] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 84.892123][ T5984] tipc: Enabled bearer , priority 0 [ 84.916953][ T5957] net_ratelimit: 5 callbacks suppressed [ 84.916968][ T5957] IPVS: dh: FWM 3 0x00000003 - no destination available [ 84.930727][ T5749] IPVS: starting estimator thread 0... [ 84.943441][ T24] viperboard 3-1:0.0: version 0.00 found at bus 003 address 003 [ 84.977201][ T5978] tipc: Disabling bearer [ 84.983500][ T5347] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.001561][ T24] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 85.019399][ T24] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5 [ 85.031539][ T5992] IPVS: using max 51 ests per chain, 122400 per kthread [ 85.099345][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.147387][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.163752][ T5347] usb 4-1: Using ep0 maxpacket: 32 [ 85.191218][ T5347] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 85.211365][ T5347] usb 4-1: config 0 has no interface number 0 [ 85.250229][ T5347] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 85.268167][ T5347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.287967][ T5347] usb 4-1: Product: syz [ 85.304684][ T5347] usb 4-1: Manufacturer: syz [ 85.319451][ T5347] usb 4-1: SerialNumber: syz [ 85.345673][ T5347] usb 4-1: config 0 descriptor?? [ 85.374326][ T5347] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 85.395570][ T24] usb 3-1: USB disconnect, device number 3 [ 85.424350][ T5347] usb 4-1: selecting invalid altsetting 1 [ 85.441557][ T5347] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 85.521271][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 85.538320][ T6001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'. [ 85.945726][ T804] kernel write not supported for file /input/event2 (pid: 804 comm: kworker/1:2) [ 85.973190][ T5347] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 86.015370][ T5347] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 86.027944][ T5347] usb 4-1: media controller created [ 86.100223][ T5347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 86.155482][ T5347] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 86.162915][ T5347] zl10353_read_register: readreg error (reg=127, ret==-71) [ 86.172210][ T5347] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 86.315088][ T5347] usb 4-1: USB disconnect, device number 2 [ 87.014826][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 87.014850][ T29] audit: type=1400 audit(1779033795.132:289): avc: denied { create } for pid=6012 comm="syz.2.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.411981][ T29] audit: type=1400 audit(1779033796.542:290): avc: denied { read append } for pid=6018 comm="syz.1.50" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 88.458343][ T29] audit: type=1400 audit(1779033796.542:291): avc: denied { open } for pid=6018 comm="syz.1.50" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 88.618019][ T29] audit: type=1400 audit(1779033796.752:292): avc: denied { connect } for pid=6018 comm="syz.1.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 88.706763][ T6028] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.714865][ T6028] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.755259][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.53'. [ 88.795751][ T6028] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.825305][ T6028] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.835621][ T6028] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.859074][ T6028] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.888531][ T6028] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 88.901132][ T6028] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 88.929713][ T6028] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 88.987818][ T29] audit: type=1400 audit(1779033797.122:293): avc: denied { create } for pid=6038 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.022713][ T29] audit: type=1400 audit(1779033797.122:294): avc: denied { setopt } for pid=6038 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.056500][ T29] audit: type=1400 audit(1779033797.192:295): avc: denied { write } for pid=6038 comm="syz.0.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 89.059164][ T6028] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 89.120898][ T6028] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.155204][ T6028] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 89.195564][ T6028] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 89.210528][ T6028] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 89.256126][ T6028] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 89.293251][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'. [ 89.333229][ T6042] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 89.404383][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.55'. [ 89.648939][ T6045] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 89.808718][ T5749] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.032124][ T5749] usb 5-1: Using ep0 maxpacket: 32 [ 90.089820][ T5749] usb 5-1: unable to get BOS descriptor or descriptor too short [ 90.220399][ T5749] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 90.231846][ T6048] mmap: syz.3.56 (6048) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.244007][ T5749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.291835][ T5620] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 90.298710][ T4932] Bluetooth: hci5: command 0x1003 tx timeout [ 90.406895][ T5749] usb 5-1: Product: syz [ 90.457298][ T5749] usb 5-1: Manufacturer: syz [ 90.518561][ T5749] usb 5-1: SerialNumber: syz [ 90.540574][ T6042] bond1 (unregistering): Released all slaves [ 90.681503][ T5620] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.691903][ T29] audit: type=1400 audit(1779033798.832:296): avc: denied { map } for pid=6049 comm="syz.2.57" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 90.842411][ T5620] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.863852][ T5749] usb 5-1: unit 4 not found! [ 90.876490][ T5749] usb 5-1: unit 0 not found! [ 90.878725][ T6055] netlink: 'syz.1.59': attribute type 12 has an invalid length. [ 90.906442][ T6055] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.59'. [ 90.924960][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.959872][ T6055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 91.001494][ T804] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.082570][ T5620] Bluetooth: hci3: command 0x0c1a tx timeout [ 91.153092][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.241545][ T5620] Bluetooth: hci4: command 0x0405 tx timeout [ 91.245553][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.254078][ T5749] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 91.272094][ T804] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 91.273473][ T5749] usb 5-1: unit 4 not found! [ 91.285914][ T5749] usb 5-1: unit 0 not found! [ 91.313899][ T5749] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 91.392070][ T5620] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 91.682973][ T804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.702695][ T804] usb 4-1: config 0 descriptor?? [ 91.729774][ T5749] usb 5-1: unit 4 not found! [ 91.746195][ T5749] usb 5-1: unit 0 not found! [ 91.971555][ T29] audit: type=1400 audit(1779033800.062:297): avc: denied { ioctl } for pid=6061 comm="syz.2.61" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=10002 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.093517][ T29] audit: type=1400 audit(1779033800.212:298): avc: denied { read write } for pid=6061 comm="syz.2.61" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 92.118164][ T29] audit: type=1400 audit(1779033800.212:299): avc: denied { open } for pid=6061 comm="syz.2.61" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 92.427384][ T6053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.552013][ T6053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.594771][ T29] audit: type=1400 audit(1779033800.702:300): avc: denied { unmount } for pid=5621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 92.767905][ T804] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 92.781183][ T804] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 92.781880][ T5620] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.789133][ T804] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 92.802947][ T804] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 92.903080][ T29] audit: type=1400 audit(1779033800.702:301): avc: denied { compute_member } for pid=6068 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 93.014331][ T804] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 93.021974][ T5620] Bluetooth: hci2: command 0x0c1a tx timeout [ 93.028331][ T4932] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.029898][ T804] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 93.050567][ T6071] netlink: 40 bytes leftover after parsing attributes in process `syz.3.58'. [ 93.065706][ T5749] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 93.085791][ T804] hid-thrustmaster 0003:044F:B65D.0001: unknown main item tag 0x0 [ 93.122141][ T5749] usb 5-1: USB disconnect, device number 2 [ 93.162660][ T5620] Bluetooth: hci3: command 0x0c1a tx timeout [ 93.187732][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.304111][ T804] hid-thrustmaster 0003:044F:B65D.0001: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 93.323110][ T5620] Bluetooth: hci4: command 0x0405 tx timeout [ 93.359979][ T29] audit: type=1400 audit(1779033801.492:302): avc: denied { setopt } for pid=6078 comm="syz.2.66" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 93.399275][ T804] hid-thrustmaster 0003:044F:B65D.0001: Wrong number of endpoints? [ 93.429833][ C1] hid-thrustmaster 0003:044F:B65D.0001: URB to get model id failed with error -32 [ 93.450835][ T804] usb 4-1: USB disconnect, device number 3 [ 93.480156][ T29] audit: type=1400 audit(1779033801.612:303): avc: denied { write } for pid=6078 comm="syz.2.66" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 93.509182][ T6080] syz_tun: entered allmulticast mode [ 93.518457][ T29] audit: type=1400 audit(1779033801.612:304): avc: denied { open } for pid=6078 comm="syz.2.66" path="/11/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 93.523524][ T6079] fido_id[6079]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 93.587633][ T6080] dvmrp8: entered allmulticast mode [ 93.599792][ T6078] syz_tun: left allmulticast mode [ 93.705670][ T29] audit: type=1400 audit(1779033801.842:305): avc: denied { read write } for pid=5612 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.840878][ T29] audit: type=1400 audit(1779033801.862:306): avc: denied { open } for pid=5612 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 93.885400][ T29] audit: type=1400 audit(1779033801.862:307): avc: denied { ioctl } for pid=5612 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.218722][ T6087] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 94.218722][ T6087] program syz.2.67 not setting count and/or reply_len properly [ 94.841565][ T5620] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.050853][ T6099] IPVS: set_ctl: invalid protocol: 135 10.1.1.0:20004 [ 95.083271][ T4932] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.090272][ T5620] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.243272][ T5620] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.404076][ T5620] Bluetooth: hci4: command 0x0405 tx timeout [ 95.459972][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.74'. [ 95.500594][ T6110] geneve0: entered promiscuous mode [ 95.525577][ T6110] geneve0: entered allmulticast mode [ 95.543606][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.74'. [ 95.565824][ T6109] kvm: pic: non byte read [ 95.585597][ T6110] geneve0: left promiscuous mode [ 95.595110][ T6110] geneve0: left allmulticast mode [ 96.011789][ T5727] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 96.173963][ T5727] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 96.200218][ T5727] usb 5-1: config 0 has no interface number 0 [ 96.213678][ T5727] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.264873][ T5727] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.288848][ T5727] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 96.322701][ T5727] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 96.351180][ T5727] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.372285][ T6139] netlink: 'syz.1.80': attribute type 4 has an invalid length. [ 96.390692][ T5727] usb 5-1: config 0 descriptor?? [ 97.072810][ T5727] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.1/0003:28BD:0042.0002/input/input7 [ 97.271381][ T5727] uclogic 0003:28BD:0042.0002: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.4-1/input1 [ 97.684661][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 97.684683][ T29] audit: type=1400 audit(1779033805.812:320): avc: denied { create } for pid=6150 comm="syz.0.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.508682][ T29] audit: type=1400 audit(1779033806.622:321): avc: denied { unlink } for pid=6159 comm="syz.1.85" name="#1" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 98.544820][ T6158] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6158 comm=syz.3.84 [ 98.596468][ T804] usb 5-1: USB disconnect, device number 3 [ 98.604490][ T29] audit: type=1400 audit(1779033806.632:322): avc: denied { mount } for pid=6159 comm="syz.1.85" name="/" dev="overlay" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 98.611330][ T6166] hsr0: entered allmulticast mode [ 98.675280][ T6166] hsr_slave_0: entered allmulticast mode [ 98.683766][ T29] audit: type=1400 audit(1779033806.672:323): avc: denied { unmount } for pid=5614 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 98.696647][ T6166] hsr_slave_1: entered allmulticast mode [ 98.728250][ T6166] A link change request failed with some changes committed already. Interface hsr0 may have been left with an inconsistent configuration, please check. [ 98.933167][ T24] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 98.975730][ T29] audit: type=1400 audit(1779033807.102:324): avc: denied { bind } for pid=6167 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.286389][ T29] audit: type=1400 audit(1779033807.102:325): avc: denied { getopt } for pid=6167 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 99.335922][ T6170] vlan2: entered promiscuous mode [ 99.341036][ T6170] dummy0: entered promiscuous mode [ 99.350534][ T24] usb 3-1: device descriptor read/64, error -71 [ 99.369236][ T29] audit: type=1400 audit(1779033807.502:326): avc: denied { read write } for pid=6171 comm="syz.0.88" name="vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 99.396610][ T29] audit: type=1400 audit(1779033807.502:327): avc: denied { open } for pid=6171 comm="syz.0.88" path="/dev/vhost-net" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 99.424195][ T29] audit: type=1400 audit(1779033807.562:328): avc: denied { ioctl } for pid=6171 comm="syz.0.88" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 99.601498][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.674256][ T29] audit: type=1400 audit(1779033807.812:329): avc: denied { create } for pid=6183 comm="syz.4.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 99.751485][ T24] usb 3-1: device descriptor read/64, error -71 [ 99.861980][ T24] usb usb3-port1: attempt power cycle [ 99.906394][ T5620] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 100.452557][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 100.492135][ T24] usb 3-1: device descriptor read/8, error -71 [ 100.761824][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 100.803108][ T24] usb 3-1: device descriptor read/8, error -71 [ 100.946996][ T24] usb usb3-port1: unable to enumerate USB device [ 101.573769][ T5749] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 101.623068][ T6221] Bluetooth: MGMT ver 1.23 [ 101.637756][ T6219] input: syz0 as /devices/virtual/input/input8 [ 101.687060][ T6222] ALSA: mixer_oss: invalid OSS volume '' [ 101.741582][ T5749] usb 5-1: Using ep0 maxpacket: 16 [ 101.921275][ T6225] netlink: 'syz.1.103': attribute type 4 has an invalid length. [ 101.929432][ T6225] tmpfs: Bad value for 'mpol' [ 101.944795][ T5749] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.998097][ T5749] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 102.043196][ T5749] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 102.097844][ T5749] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.147015][ T5749] usb 5-1: config 0 descriptor?? [ 102.286284][ T6235] netlink: 44 bytes leftover after parsing attributes in process `syz.3.106'. [ 102.289619][ T6236] netlink: 36 bytes leftover after parsing attributes in process `syz.3.106'. [ 102.299376][ T6237] netlink: 36 bytes leftover after parsing attributes in process `syz.3.106'. [ 102.586700][ T5749] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 102.600317][ T5749] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max [ 102.611607][ T804] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.773586][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 102.783321][ T804] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 102.786113][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.793040][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 102.793056][ T29] audit: type=1400 audit(1779033810.922:344): avc: denied { ioctl } for pid=6214 comm="syz.4.99" path="socket:[13402]" dev="sockfs" ino=13402 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 102.793572][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 204, changing to 7 [ 102.805915][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.809343][ T804] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 42588, setting to 1024 [ 102.833073][ T5727] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 102.854858][ T804] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 102.879487][ T804] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 102.880451][ T6215] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 102.887697][ T804] usb 4-1: Manufacturer: syz [ 102.894210][ T6215] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 102.896653][ T6215] vhci_hcd vhci_hcd.0: Device attached [ 102.907848][ T804] usb 4-1: config 0 descriptor?? [ 102.925944][ T804] smsusb:smsusb_probe: board id=9, interface number 0 [ 102.929959][ T6241] vhci_hcd: connection closed [ 102.942979][ T3007] vhci_hcd vhci_hcd.4: stop threads [ 102.953759][ T5749] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 102.962664][ T804] smsusb:siano_media_device_register: media controller created [ 102.966687][ T5749] microsoft 0003:045E:07DA.0003: no inputs found [ 102.979323][ T5749] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 102.979996][ T3007] vhci_hcd vhci_hcd.4: release socket [ 103.000903][ T804] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 103.012134][ T3007] vhci_hcd vhci_hcd.4: disconnect device [ 103.017811][ T804] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 103.018344][ T5749] usb 5-1: USB disconnect, device number 4 [ 103.035423][ T804] ------------[ cut here ]------------ [ 103.040932][ T804] !PageLargeKmalloc(page) [ 103.040945][ T804] WARNING: mm/slub.c:6475 at free_large_kmalloc+0xbf/0x100, CPU#1: kworker/1:2/804 [ 103.051506][ T5727] usb 3-1: Using ep0 maxpacket: 16 [ 103.056192][ T804] Modules linked in: [ 103.065557][ T804] CPU: 1 UID: 0 PID: 804 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 103.069361][ T5727] usb 3-1: config 0 has an invalid interface number: 213 but max is 1 [ 103.074897][ T804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.074913][ T804] Workqueue: usb_hub_wq hub_event [ 103.088618][ T6243] fido_id[6243]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 103.094062][ T804] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 103.102154][ T5727] usb 3-1: config 0 has no interface number 1 [ 103.114362][ T804] Code: 28 90 0f 0b 90 80 3d 3f ed 55 0e 00 0f 84 f7 13 ba fe 48 8b 74 24 28 48 89 ef e8 3c 00 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 7f e0 f0 8d 5b 5d 41 5c 41 [ 103.127659][ T5727] usb 3-1: config 0 interface 0 has no altsetting 0 [ 103.146230][ T804] RSP: 0018:ffffc90004eeed68 EFLAGS: 00010202 [ 103.146251][ T804] RAX: 00000000000000ff RBX: ffffea00011df880 RCX: 000000000000002e [ 103.146263][ T804] RDX: 0000000000000000 RSI: ffff8880477e2000 RDI: ffffea00011df880 [ 103.146274][ T804] RBP: ffff8880477e2000 R08: 0000000000000005 R09: 0000000000000000 [ 103.146288][ T804] R10: ffffffffffffffff R11: ffffffff82763f84 R12: ffff8880226b1000 [ 103.146299][ T804] R13: ffff888030cb4000 R14: dffffc0000000000 R15: ffff8880226b10f0 [ 103.146310][ T804] FS: 0000000000000000(0000) GS:ffff88812446d000(0000) knlGS:0000000000000000 [ 103.146327][ T804] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.146339][ T804] CR2: 00007f5ce54522c0 CR3: 000000000e596000 CR4: 00000000003526f0 [ 103.146351][ T804] Call Trace: [ 103.146358][ T804] [ 103.178893][ T5727] usb 3-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 103.184608][ T804] usb_free_urb.part.0+0xf8/0x110 [ 103.184637][ T804] usb_free_urb+0x1f/0x30 [ 103.192855][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.200568][ T804] smsusb_term_device+0x108/0x200 [ 103.236646][ T5727] usb 3-1: Product: syz [ 103.240509][ T804] smsusb_init_device+0xb4e/0xbb0 [ 103.269229][ T5727] usb 3-1: Manufacturer: syz [ 103.273328][ T804] ? __pfx_smsusb_init_device+0x10/0x10 [ 103.273359][ T804] ? kfree+0x1dd/0x6c0 [ 103.273386][ T804] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 103.293155][ T804] ? usb_clear_halt+0x61/0x160 [ 103.297934][ T804] smsusb_probe+0xd7f/0xe1f [ 103.302543][ T804] ? __pfx_smsusb_probe+0x10/0x10 [ 103.307612][ T804] ? mark_held_locks+0x40/0x70 [ 103.313088][ T804] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.318912][ T804] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.325241][ T804] ? __pm_runtime_set_status+0x13c/0x970 [ 103.330895][ T804] usb_probe_interface+0x303/0x8f0 [ 103.336072][ T804] ? __pfx_usb_probe_interface+0x10/0x10 [ 103.337275][ T5727] usb 3-1: SerialNumber: syz [ 103.341739][ T804] really_probe+0x241/0xa60 [ 103.341765][ T804] __driver_probe_device+0x22e/0x480 [ 103.356114][ T804] driver_probe_device+0x4c/0x1b0 [ 103.357723][ T5727] usb 3-1: config 0 descriptor?? [ 103.361161][ T804] __device_attach_driver+0x1df/0x340 [ 103.371482][ T804] ? __pfx___device_attach_driver+0x10/0x10 [ 103.377431][ T804] bus_for_each_drv+0x159/0x1e0 [ 103.382324][ T804] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.387711][ T804] ? lockdep_hardirqs_on+0x78/0x100 [ 103.393040][ T804] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.397465][ T5727] usb 3-1: selecting invalid altsetting 0 [ 103.398874][ T804] __device_attach+0x1e4/0x4d0 [ 103.409474][ T804] ? __pfx___device_attach+0x10/0x10 [ 103.415543][ T804] ? do_raw_spin_unlock+0x145/0x1e0 [ 103.419007][ T5727] usb 3-1: Could not set interface, error -22 [ 103.421220][ T804] device_initial_probe+0xaf/0xd0 [ 103.431954][ T804] bus_probe_device+0x64/0x160 [ 103.436729][ T804] device_add+0x1210/0x1950 [ 103.441251][ T804] ? __pfx_device_add+0x10/0x10 [ 103.446170][ T804] usb_set_configuration+0xd97/0x1c60 [ 103.451610][ T804] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 103.457713][ T804] usb_generic_driver_probe+0xa1/0xe0 [ 103.463159][ T804] usb_probe_device+0xef/0x400 [ 103.467940][ T804] ? __pfx_usb_probe_device+0x10/0x10 [ 103.473367][ T804] really_probe+0x241/0xa60 [ 103.477905][ T804] __driver_probe_device+0x22e/0x480 [ 103.483284][ T804] ? usb_driver_applicable+0x1c7/0x220 [ 103.488758][ T804] driver_probe_device+0x4c/0x1b0 [ 103.493862][ T804] __device_attach_driver+0x1df/0x340 [ 103.499228][ T804] ? __pfx___device_attach_driver+0x10/0x10 [ 103.505298][ T804] bus_for_each_drv+0x159/0x1e0 [ 103.510170][ T804] ? __pfx_bus_for_each_drv+0x10/0x10 [ 103.515567][ T804] ? lockdep_hardirqs_on+0x78/0x100 [ 103.521151][ T804] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.527461][ T804] __device_attach+0x1e4/0x4d0 [ 103.532247][ T804] ? __pfx___device_attach+0x10/0x10 [ 103.537514][ T804] ? do_raw_spin_unlock+0x145/0x1e0 [ 103.542752][ T804] device_initial_probe+0xaf/0xd0 [ 103.547774][ T804] bus_probe_device+0x64/0x160 [ 103.552561][ T804] device_add+0x1210/0x1950 [ 103.557091][ T804] ? __pfx_device_add+0x10/0x10 [ 103.562229][ T804] ? add_device_randomness+0xb7/0xf0 [ 103.567517][ T804] usb_new_device.cold+0x685/0x115c [ 103.572748][ T804] ? do_raw_spin_lock+0x128/0x260 [ 103.577816][ T804] ? __pfx_usb_new_device+0x10/0x10 [ 103.583069][ T804] ? mark_held_locks+0x40/0x70 [ 103.587849][ T804] hub_event+0x314d/0x4af0 [ 103.592355][ T804] ? __pfx_hub_event+0x10/0x10 [ 103.597132][ T804] ? assoc_array_insert+0xc10/0x32c0 [ 103.602486][ T804] ? rcu_is_watching+0x12/0xc0 [ 103.607288][ T804] process_one_work+0xa0e/0x1980 [ 103.612275][ T804] ? __pfx_process_one_work+0x10/0x10 [ 103.617660][ T804] ? __pfx_hub_event+0x10/0x10 [ 103.623169][ T804] worker_thread+0x5ef/0xe50 [ 103.628288][ T804] ? __pfx_worker_thread+0x10/0x10 [ 103.633468][ T804] ? kthread+0x13a/0x450 [ 103.637724][ T804] ? __pfx_worker_thread+0x10/0x10 [ 103.642960][ T804] kthread+0x370/0x450 [ 103.647037][ T804] ? __pfx_kthread+0x10/0x10 [ 103.651668][ T804] ret_from_fork+0x72b/0xd50 [ 103.656264][ T804] ? __pfx_ret_from_fork+0x10/0x10 [ 103.661429][ T804] ? __switch_to+0x800/0x1100 [ 103.666115][ T804] ? __pfx_kthread+0x10/0x10 [ 103.670714][ T804] ret_from_fork_asm+0x1a/0x30 [ 103.675573][ T804] [ 103.678591][ T804] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 103.685870][ T804] CPU: 1 UID: 0 PID: 804 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 103.695134][ T804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.705181][ T804] Workqueue: usb_hub_wq hub_event [ 103.710198][ T804] Call Trace: [ 103.713469][ T804] [ 103.716382][ T804] dump_stack_lvl+0x100/0x190 [ 103.721043][ T804] vpanic+0x552/0x970 [ 103.725005][ T804] ? __pfx_vpanic+0x10/0x10 [ 103.729495][ T804] panic+0xd1/0xe0 [ 103.733193][ T804] ? __pfx_panic+0x10/0x10 [ 103.737596][ T804] check_panic_on_warn.cold+0x19/0x34 [ 103.742947][ T804] ? free_large_kmalloc+0xbf/0x100 [ 103.748039][ T804] __warn.cold+0x191/0x328 [ 103.752435][ T804] __report_bug+0x296/0x3d0 [ 103.756922][ T804] ? free_large_kmalloc+0xbf/0x100 [ 103.762014][ T804] ? __pfx___report_bug+0x10/0x10 [ 103.767032][ T804] ? bus_for_each_drv+0x159/0x1e0 [ 103.772038][ T804] ? __device_attach+0x1e4/0x4d0 [ 103.776962][ T804] ? device_initial_probe+0xaf/0xd0 [ 103.782137][ T804] ? bus_probe_device+0x64/0x160 [ 103.787057][ T804] ? device_add+0x1210/0x1950 [ 103.791710][ T804] ? usb_new_device.cold+0x685/0x115c [ 103.797066][ T804] ? hub_event+0x314d/0x4af0 [ 103.801639][ T804] ? process_one_work+0xa0e/0x1980 [ 103.806733][ T804] ? worker_thread+0x5ef/0xe50 [ 103.811478][ T804] ? kthread+0x370/0x450 [ 103.815700][ T804] ? ret_from_fork+0x72b/0xd50 [ 103.820444][ T804] ? find_held_lock+0x2b/0x80 [ 103.825099][ T804] ? smscore_unregister_device+0x537/0x7f0 [ 103.830892][ T804] ? smscore_unregister_device+0x537/0x7f0 [ 103.836683][ T804] ? free_large_kmalloc+0xbf/0x100 [ 103.841780][ T804] report_bug+0xb2/0x220 [ 103.846008][ T804] ? free_large_kmalloc+0xbf/0x100 [ 103.851116][ T804] handle_bug+0x16a/0x2a0 [ 103.855426][ T804] exc_invalid_op+0x17/0x50 [ 103.859907][ T804] asm_exc_invalid_op+0x1a/0x20 [ 103.864736][ T804] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 103.870441][ T804] Code: 28 90 0f 0b 90 80 3d 3f ed 55 0e 00 0f 84 f7 13 ba fe 48 8b 74 24 28 48 89 ef e8 3c 00 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 7f e0 f0 8d 5b 5d 41 5c 41 [ 103.890025][ T804] RSP: 0018:ffffc90004eeed68 EFLAGS: 00010202 [ 103.896073][ T804] RAX: 00000000000000ff RBX: ffffea00011df880 RCX: 000000000000002e [ 103.904021][ T804] RDX: 0000000000000000 RSI: ffff8880477e2000 RDI: ffffea00011df880 [ 103.911978][ T804] RBP: ffff8880477e2000 R08: 0000000000000005 R09: 0000000000000000 [ 103.919927][ T804] R10: ffffffffffffffff R11: ffffffff82763f84 R12: ffff8880226b1000 [ 103.927877][ T804] R13: ffff888030cb4000 R14: dffffc0000000000 R15: ffff8880226b10f0 [ 103.935835][ T804] ? kasan_save_track+0x14/0x30 [ 103.940686][ T804] usb_free_urb.part.0+0xf8/0x110 [ 103.945694][ T804] usb_free_urb+0x1f/0x30 [ 103.950004][ T804] smsusb_term_device+0x108/0x200 [ 103.955016][ T804] smsusb_init_device+0xb4e/0xbb0 [ 103.960030][ T804] ? __pfx_smsusb_init_device+0x10/0x10 [ 103.965558][ T804] ? kfree+0x1dd/0x6c0 [ 103.969614][ T804] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 103.975148][ T804] ? usb_clear_halt+0x61/0x160 [ 103.979897][ T804] smsusb_probe+0xd7f/0xe1f [ 103.984390][ T804] ? __pfx_smsusb_probe+0x10/0x10 [ 103.989399][ T804] ? mark_held_locks+0x40/0x70 [ 103.994147][ T804] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.999937][ T804] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 104.005725][ T804] ? __pm_runtime_set_status+0x13c/0x970 [ 104.011343][ T804] usb_probe_interface+0x303/0x8f0 [ 104.016435][ T804] ? __pfx_usb_probe_interface+0x10/0x10 [ 104.022047][ T804] really_probe+0x241/0xa60 [ 104.026541][ T804] __driver_probe_device+0x22e/0x480 [ 104.031817][ T804] driver_probe_device+0x4c/0x1b0 [ 104.036910][ T804] __device_attach_driver+0x1df/0x340 [ 104.042264][ T804] ? __pfx___device_attach_driver+0x10/0x10 [ 104.048139][ T804] bus_for_each_drv+0x159/0x1e0 [ 104.052990][ T804] ? __pfx_bus_for_each_drv+0x10/0x10 [ 104.058346][ T804] ? lockdep_hardirqs_on+0x78/0x100 [ 104.063527][ T804] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 104.069318][ T804] __device_attach+0x1e4/0x4d0 [ 104.074061][ T804] ? __pfx___device_attach+0x10/0x10 [ 104.079328][ T804] ? do_raw_spin_unlock+0x145/0x1e0 [ 104.084517][ T804] device_initial_probe+0xaf/0xd0 [ 104.089520][ T804] bus_probe_device+0x64/0x160 [ 104.094272][ T804] device_add+0x1210/0x1950 [ 104.098770][ T804] ? __pfx_device_add+0x10/0x10 [ 104.103610][ T804] usb_set_configuration+0xd97/0x1c60 [ 104.108978][ T804] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 104.115027][ T804] usb_generic_driver_probe+0xa1/0xe0 [ 104.120389][ T804] usb_probe_device+0xef/0x400 [ 104.125139][ T804] ? __pfx_usb_probe_device+0x10/0x10 [ 104.130496][ T804] really_probe+0x241/0xa60 [ 104.134979][ T804] __driver_probe_device+0x22e/0x480 [ 104.140247][ T804] ? usb_driver_applicable+0x1c7/0x220 [ 104.145688][ T804] driver_probe_device+0x4c/0x1b0 [ 104.150692][ T804] __device_attach_driver+0x1df/0x340 [ 104.156042][ T804] ? __pfx___device_attach_driver+0x10/0x10 [ 104.161913][ T804] bus_for_each_drv+0x159/0x1e0 [ 104.166746][ T804] ? __pfx_bus_for_each_drv+0x10/0x10 [ 104.172106][ T804] ? lockdep_hardirqs_on+0x78/0x100 [ 104.177290][ T804] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 104.183080][ T804] __device_attach+0x1e4/0x4d0 [ 104.187835][ T804] ? __pfx___device_attach+0x10/0x10 [ 104.193113][ T804] ? do_raw_spin_unlock+0x145/0x1e0 [ 104.198303][ T804] device_initial_probe+0xaf/0xd0 [ 104.203307][ T804] bus_probe_device+0x64/0x160 [ 104.208057][ T804] device_add+0x1210/0x1950 [ 104.212543][ T804] ? __pfx_device_add+0x10/0x10 [ 104.217372][ T804] ? add_device_randomness+0xb7/0xf0 [ 104.222649][ T804] usb_new_device.cold+0x685/0x115c [ 104.227834][ T804] ? do_raw_spin_lock+0x128/0x260 [ 104.232845][ T804] ? __pfx_usb_new_device+0x10/0x10 [ 104.238030][ T804] ? mark_held_locks+0x40/0x70 [ 104.242785][ T804] hub_event+0x314d/0x4af0 [ 104.247207][ T804] ? __pfx_hub_event+0x10/0x10 [ 104.251958][ T804] ? assoc_array_insert+0xc10/0x32c0 [ 104.257233][ T804] ? rcu_is_watching+0x12/0xc0 [ 104.261997][ T804] process_one_work+0xa0e/0x1980 [ 104.266927][ T804] ? __pfx_process_one_work+0x10/0x10 [ 104.272287][ T804] ? __pfx_hub_event+0x10/0x10 [ 104.277037][ T804] worker_thread+0x5ef/0xe50 [ 104.281614][ T804] ? __pfx_worker_thread+0x10/0x10 [ 104.286710][ T804] ? kthread+0x13a/0x450 [ 104.290932][ T804] ? __pfx_worker_thread+0x10/0x10 [ 104.296024][ T804] kthread+0x370/0x450 [ 104.300075][ T804] ? __pfx_kthread+0x10/0x10 [ 104.304646][ T804] ret_from_fork+0x72b/0xd50 [ 104.309220][ T804] ? __pfx_ret_from_fork+0x10/0x10 [ 104.314313][ T804] ? __switch_to+0x800/0x1100 [ 104.318978][ T804] ? __pfx_kthread+0x10/0x10 [ 104.323562][ T804] ret_from_fork_asm+0x1a/0x30 [ 104.328321][ T804] [ 104.331678][ T804] Kernel Offset: disabled [ 104.335975][ T804] Rebooting in 86400 seconds..