last executing test programs: 17m36.67398702s ago: executing program 2 (id=1808): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) read$eventfd(r1, &(0x7f0000000000), 0x8) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x4c8, 0xffffffff, 0x1f0, 0x1f0, 0x1f0, 0xffffffff, 0xffffffff, 0x3f8, 0x3f8, 0x3f8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@empty, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00, 0xffffffff, 0xffff00], [0xffffff00, 0x0, 0xffffff00, 0x10001ff], 'veth0_to_bridge\x00', 'macvlan1\x00', {}, {0xff}, 0x87, 0x8, 0x2, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0xf, 'Dm', 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x4}}}, {{@ipv6={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, [0xff, 0xffffffff, 0xffffff00, 0xff000000], [0xff, 0x0, 0xff000000, 0xff000000], 'ip6gre0\x00', 'veth1\x00', {0xff}, {0xff}, 0x32, 0x2, 0x0, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "af1f"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0xff, [0x8], 0x9, 0x1, 0x1, [@empty, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, @mcast2, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast2, @mcast2, @ipv4={'\x00', '\xff\xff', @empty}], 0xa}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="300000002d0001002abd70000000000008000000", @ANYRES32], 0x30}], 0x1}, 0x0) userfaultfd(0x80001) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x5) 17m35.636054728s ago: executing program 2 (id=1810): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x87a, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @void}, 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000340)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_CMD(0xffffffffffffffff, 0x80506409, &(0x7f0000000180)={0xfffffffc, 0x1, 0xffffffff, 0x6dc, 0x4, 0x200, 0x10, 0x368, 0x20, 0xffffffff, 0x20, 0x7, &(0x7f0000000380)=[0x4], 0x1, 0x0}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) 17m34.989373578s ago: executing program 2 (id=1812): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r2 = memfd_secret(0x0) ftruncate(r2, 0x581) ftruncate(r2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_emit_vhci(&(0x7f0000000780)=ANY=[@ANYBLOB="02c93010000c00020000000800b70b0200090400ff"], 0x15) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000100)={0x0, 0x0}) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000240)) write(r3, &(0x7f0000000280)="4591c28e8b83", 0x6) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r2}, 0x20) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6c010000100013072abd7000fedbdf2464010102000000000000000000000000fc010000000000000000000000000001000000004e2001020a0000802e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x40050}, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x8, &(0x7f00000000c0), &(0x7f0000002140)=0x4) 17m30.737707615s ago: executing program 2 (id=1822): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000500)=@nat={'nat\x00', 0x670, 0x5, 0x4b0, 0x338, 0x338, 0xffffffff, 0x290, 0x0, 0x418, 0x418, 0xffffffff, 0x418, 0x418, 0x5, 0x0, {[{{@uncond, 0x0, 0x198, 0x1e0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xf, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'ip6tnl0\x00', 0x12, 0x2, 0x9, 0x2004, 0x5, 0x3, {0xc35}, {0x1ff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x12, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00', @port=0x4e21, @icmp_id=0x68}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xa, 0x4, "ed481ca2c99b76ccda2879f6a12da5725ea2669d62d23b45710a851be124"}}}, {{@ip={@local, @remote, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @local, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@broadcast, @ipv4=@empty, @gre_key=0x3, @icmp_id=0x64}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff00000800000000080018004e214e21"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) ioctl$XFS_IOC_FSGROWFSLOG(r1, 0x4008586f, &(0x7f00000001c0)={0x2c, 0x2}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) unshare(0x26020480) ioctl$XFS_IOC_FSCOUNTS(r1, 0x80205871, &(0x7f00000000c0)) socket(0x10, 0x80002, 0x2) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r5 = syz_io_uring_setup(0xd5, &(0x7f00000002c0)={0x0, 0x45a3, 0x400, 0x0, 0x102}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r6, r7, 0x0) io_uring_enter(r5, 0x22d0, 0x20, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x0) 17m28.48035345s ago: executing program 2 (id=1827): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/pids.max\x00', 0xc8442, 0x11) write$tcp_congestion(r0, &(0x7f0000000180)='veno\x00', 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0xa}) r3 = socket$pppoe(0x18, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) accept4$llc(r0, &(0x7f0000000500)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000540)=0x10, 0x800) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000580)) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f00000004c0)={0xa, 0x2a0, 0x0, 0x3}) connect$pppoe(r3, &(0x7f00000001c0)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x10, 0xffffffff, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x29e10a6568e4d859}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000380)=ANY=[@ANYRES64=r4, @ANYRES16=r2], 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x109000, 0x0) brk(0x7fffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mdstat\x00', 0x0, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000240)=0x36) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 17m25.330577648s ago: executing program 2 (id=1836): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @local}}, {{0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10000000}}}, 0x108) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x2c) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) readv(0xffffffffffffffff, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setresuid(0xee01, r5, r5) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x84) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$caif_stream(0x25, 0x1, 0x0) ioctl$XFS_IOC_GOINGDOWN(r7, 0x8004587d, &(0x7f00000001c0)=0xe2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) 17m10.059909405s ago: executing program 32 (id=1836): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @local}}, {{0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x10000000}}}, 0x108) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x2c) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) readv(0xffffffffffffffff, 0x0, 0x0) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x28801, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) setresuid(0xee01, r5, r5) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r4, 0x3309) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, 0x0, 0x84) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$caif_stream(0x25, 0x1, 0x0) ioctl$XFS_IOC_GOINGDOWN(r7, 0x8004587d, &(0x7f00000001c0)=0xe2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) 9m42.048035263s ago: executing program 0 (id=3366): r0 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') read$FUSE(r0, &(0x7f0000000000)={0x2020}, 0x96) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000300000000000000003000000340001000100000095"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000400007010200000000000100047c0000"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) r3 = semget$private(0x0, 0x1, 0x641) semctl$SETVAL(r3, 0x0, 0x10, &(0x7f0000000080)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e23, @remote}, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xa0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)='veth1_to_hsr\x00', 0x10000, 0x8, 0x9}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0xc, 0xff, 0x8, 0x6, 0x1, 0x0, 0x7, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3, 0x3}) syz_emit_ethernet(0xe, &(0x7f0000000080)={@local, @broadcast, @void, {@generic={0x4305}}}, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000000040)=0x9, 0x4) syz_open_dev$hiddev(&(0x7f0000002080), 0x8, 0x80840) write$binfmt_script(r5, &(0x7f0000000240), 0x3af4701e) sendfile(r4, r1, 0x0, 0x10000a007) 9m40.832276181s ago: executing program 0 (id=3370): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r5, 0x0, 0x0) setrlimit(0xa, &(0x7f00000000c0)={0x2, 0x3}) socket$phonet_pipe(0x23, 0x5, 0x2) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x200}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socket$inet6(0xa, 0x3, 0x88) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r8 = fcntl$dupfd(r7, 0x406, r7) setsockopt$inet6_buf(r7, 0x29, 0x39, 0x0, 0x0) write$binfmt_elf64(r8, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x2b1e}, 0x58) 9m39.446277638s ago: executing program 0 (id=3374): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/183, 0xb7}], 0x1) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101f2c59620d016b8108ede0102030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\t\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000480)={0x0, 0x14, 0x28, "55b477d8afa26e61301a13870409817a3835096b73fd918ab9c7058538fa57231e40f0b1d268fd00"}, 0x0, 0x0, 0x0, 0x0}) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000180)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000000)={&(0x7f0000000100)=@canfd={{0x2, 0x0, 0x1}, 0x40, 0x2, 0x0, 0x0, "559c4157df5c5fc0a343bdfd992c89ec7c178d3d401a0657e948c1e50e9f29438946924347e8c9a7f1d228cf082056214904d6e39350c2d1bf5443d0ef0296b0"}, 0x48}, 0x1, 0x0, 0x0, 0x4000051}, 0x811) syz_usb_control_io(r1, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000800)=ANY=[@ANYBLOB="40170c000000b3ab3a2146c8a9c4b2df2206"], 0x0, 0x0, 0x0, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x120, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m30.292021999s ago: executing program 0 (id=3390): r0 = syz_open_dev$dri(0x0, 0xa, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100003b00015300000000fcdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0), 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @local}, @in={0x2, 0x0, @multicast1}], 0x30) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000240), 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0x15b, @any, 0x1, 0x1}}}, 0xe) write$cgroup_int(r1, &(0x7f0000000080)=0x1, 0x12) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) 9m29.089906689s ago: executing program 0 (id=3396): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000000)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x7, @loopback, 0x6}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x10000023, @remote, 0x23}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6gre0\x00', r2, 0x2f, 0x5, 0x6, 0xd, 0x13, @rand_addr=' \x01\x00', @empty, 0x8000, 0x700, 0x5, 0x80}}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@delchain={0xed8, 0x65, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xd, 0xf}, {0xfff2, 0x4}, {0xffe0, 0x5}}, [@filter_kind_options=@f_fw={{0x7}, {0xeac, 0x2, [@TCA_FW_POLICE={0x468, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0xfff, 0x353, 0xd7, 0x5db, 0x8000, 0x9, 0xb0, 0x38e4, 0x0, 0xaa, 0x400, 0x2, 0x800, 0x0, 0x45, 0x9, 0x9, 0x3, 0x21f, 0xb, 0x3, 0x5, 0x50b, 0x7, 0x80000001, 0x7, 0xffffff6c, 0xd, 0x9, 0x1d, 0x7, 0x0, 0x4, 0x7, 0x5, 0x7f, 0x7ff, 0x8001, 0x3, 0x5, 0xc45, 0x6, 0xd64, 0xfffffff4, 0xec4, 0x10, 0x8, 0x7fffffff, 0xe, 0xa215, 0x5001, 0x1, 0x6, 0x5, 0xfffffff7, 0x2, 0xffffffff, 0x6, 0xa, 0x7fffffff, 0xfffffffe, 0x1, 0x6, 0x7fffffff, 0x6, 0xff, 0x80, 0x1000, 0x8, 0x3, 0x3, 0x8, 0x2, 0x5, 0xb, 0x1000, 0x96, 0x3, 0x8, 0x7, 0xffffff80, 0x101, 0xffffff01, 0x3, 0x9, 0x3, 0x14e1, 0x1, 0x800, 0x4, 0x4, 0x77b, 0x6, 0x6, 0x7, 0x4, 0x1200000, 0x1, 0xf9, 0x9, 0x6, 0x40, 0xffffffff, 0x0, 0x1, 0x5, 0x5, 0x7fffffff, 0x9, 0x8, 0x1cea, 0x1, 0x6d14747c, 0x7, 0x3, 0x8000, 0x2, 0x7, 0x2, 0x1, 0x3, 0x38, 0x8, 0xfffffff7, 0x8, 0x3ff, 0xfffffffe, 0x400, 0x8, 0x2c, 0xd6, 0x3, 0x0, 0x4, 0x6, 0x9, 0x0, 0x1, 0x9, 0x1, 0x9, 0x200, 0x10, 0x1000, 0x5, 0xcb, 0xf, 0x1, 0x7f, 0x80000001, 0x284, 0x5c2, 0x1, 0x3, 0x400, 0x8, 0x2, 0x5, 0x4, 0xf, 0xffffffff, 0xfffffeff, 0x7fff, 0x7, 0x5, 0x1ff, 0x1000, 0x0, 0x4, 0x2, 0x2, 0xf, 0x9, 0x4, 0x513, 0xfffffff3, 0x401, 0x9, 0x1ff, 0x7fffffff, 0x1, 0x7fff, 0x8, 0xa, 0xc659, 0x7, 0x8, 0x9, 0x80000001, 0x4, 0x2, 0x1, 0x6, 0x6, 0x200, 0x58364370, 0x7, 0x2eee0864, 0x0, 0x101, 0x0, 0x2, 0xc, 0x7fff, 0x3c1, 0x2, 0x8, 0x7, 0x4, 0xfffffff3, 0xbd4, 0x6, 0xa, 0x8, 0x1, 0x8, 0x6, 0x4b3, 0x6, 0x3, 0x2, 0xfffffffc, 0x4000, 0x80, 0x3, 0xfffff743, 0x4, 0x3, 0x8, 0x1, 0x4, 0x3, 0x8, 0x0, 0x6, 0x3, 0x4, 0xffffffff, 0x4, 0x401, 0x6, 0x8, 0x3, 0x16cae2e3, 0x8, 0x6, 0xfffffffe, 0xe, 0xbadf, 0x0, 0x9, 0x1, 0x8, 0x2, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x0, 0x6, 0x610, 0x6, {0x7, 0x0, 0x1, 0xe2, 0xf800, 0x5}, {0x1e, 0x1, 0x6, 0x8, 0x0, 0x2}, 0x9, 0x7, 0x4}}]}, @TCA_FW_INDEV={0x14, 0x3, 'bridge0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x3}, @TCA_FW_INDEV={0x14, 0x3, 'batadv_slave_1\x00'}, @TCA_FW_ACT={0x1d8, 0x4, [@m_simple={0x198, 0x11, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3, 0x1, 0xfffffffffffffffe, 0x5, 0x40}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xd, 0x9, 0x5, 0x7ff, 0xb}}, @TCA_DEF_DATA={0xa, 0x3, 'tmpfs\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x1, 0x4, 0xb7dcf85c5bb9f23e, 0x5, 0x101}}, @TCA_DEF_PARMS={0x18, 0x2, {0xc000000, 0x5, 0x4, 0x2, 0x1}}]}, {0xf8, 0x6, "e6dd966feb2e5181a3cd640c3cbb76cbb6bdb1459132d6d541af378996c654f105b728f6c1d3534b3884fa9619f2adb0baab66a9374eb72ae17dc208eadd0be0891bcfae984762426937f5a178bcfa1e3898b5feab306f0c1c9e045b4017bb139adca8a4ed2bf4296e2c76665289d3753d3c919f00d71c4df56f12fc471e7c917f7a55856a1c6bd3f4a5dabd4ce007c7f6e3c9cf9086b79bbb2208a88cccea8f141ece2446331da82d05308d400c7c6779f7ed62177bf06cc335804f059be1e76f97060bff583cd25cc4c617d893040a6a87d8b4b508bd4dc4cf9a6d653da3a91e917058cf25f4205ba6cf8fb6835ffbcd866ba2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_mpls={0x3c, 0x5, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}]}, {0x6, 0x6, "357f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xffe0, 0xc}}, @TCA_FW_ACT={0x81c, 0x4, [@m_gact={0x100, 0x13, 0x0, 0x0, {{0x9}, {0x7c, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x181a, 0x20000000}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x7, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x8, 0x6, 0x9b8, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xff, 0x6, 0x1, 0x4ce}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x24f8, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5, 0x3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x2e1, 0x20000000}}]}, {0x5c, 0x6, "393184d0724eb504b304d466469b915a044394382a41f2c2f4fd725cd273feab3dccc00700b8f40c4c6f2824172d0d6dc279d6c5264aa19b77e1d21c2601fe7bb755f017c26520d1738684e058077dd98dcd9e0907e9b77b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x134, 0x1f, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x5, 0x4, 0x2}}, @TCA_DEF_PARMS={0x18, 0x2, {0xa, 0x5, 0xffffffffffffffff, 0x5d, 0x200}}]}, {0xd8, 0x6, "0942c3c2cead33c3fb26e8468ed14d33bd37ce808c8b9fb00a6015c1641cd570019a7e4c1ad794df41f76ea780bd306ea497eaf20dfff13e46e727d0eee13e6592a96e933636d6e0602fb54e5b65b946b5b68031cc368e3afa2769babcc1212a1535fec041e63e56bcb14a9119f193b878438e62c02bbbd5862397ce902b1a0174d3cc312bd06d5d691c788fd2900952ebdc0cf8ececd3040cdbfdd8394ad6e7aa3d0b20fe9caec86cb1fb0097d4799f1e06c70c3cd6ac4871cdd793d3d5c4c57a6055ec3e8055ab47869559d281aa38e48b01c0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x160, 0x1d, 0x0, 0x0, {{0x7}, {0x104, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x69304777}, @TCA_IPT_TARG={0xf5, 0x6, {0x0, 'raw\x00', 0x1, 0x1, "bcfd4a8d8101e7456d1160285ca15e2063ea18d46d837737c8bf4f4f503b41cbbf4873d9f82c88893db39ace7b6f2c0d599f347ab7a6423ca11cc89b7d1657e9630409865d25812a05cef471a0b401d584ecc50c0967a11dfeea195a90fa162b4411ed867ab49a3f9787a031884320016d211f9c999607b81fa177bd81f9bb44163e7dbc5f22b9108e02ac9f90717804414fb536c6efba2ea6f973f4a6ed9dca4393cc44d7653d7d1947bcf7edf1d2e823cec303a6a04ce3fd772ceea7ab375f4257b01248cea8d5312e10"}}]}, {0x35, 0x6, "ce9b3fa5eab054e34033c8fe0cbf357c4eaf7afcc5520474d443096f2ea8f2e30d4f3af10656139dd035b286abceb87cdc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5}}}}, @m_ife={0xac, 0x1d, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_DMAC={0xa, 0x3, @random="683eb2cc2b82"}]}, {0x6e, 0x6, "f090a937678697eb6aebcae1a24e7f229fc35aec4a5e0fc57ea749c83592001d5110dec4c09bc1108668df961aed8f95a358f67dfac5bc067b06300437b03b76e3740bf6594922cb4ac3cecaa5a777c58336f48d82a105bfc0eb06ad1f312c2d04bf87195e89d44caa72"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0x100, 0x1c, 0x0, 0x0, {{0x8}, {0x5c, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x3, 0xa, 0x5, 0x4}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3ff, 0x66, 0x0, 0x1, 0xffff0000}, 0x1}}]}, {0x7f, 0x6, "bf8aaf10161cac7e0b778f41c9bfcc050a23b57d11ab1eadf3a84b92476b3fc2b26a3a7331dd648127cf15cdf8850a005148912b090b4c4ad974ab54e44ec228462fca1d0f9dc03666d8cf1783475b2013407f69d13177844ef1bfbb6482cb7b2b638a8f405b2ea09ff0d91a7c01c34a753d1a8a3a3cb49d205ced"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0x140, 0x9, 0x0, 0x0, {{0xf}, {0x68, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xfffffff7, 0xffffffff, 0x4, 0x2, 0x6}, 0x2}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}]}, {0xa9, 0x6, "8a4a78078c9a152173b2a888a53de6bb3557084ae84320c43bda9d24579b82dde741f67b329b11f7189cedd3365909438545c2c1fc0e3705be1744d05cf66900b2f96f7d325cc26aebb996c6e5e6bd95818b03d029a139b70e70b8dc899d07d14b9dca27e47c8bb93e661d9822e3b293c468c74ef94ffad875aea6c5cc721507aaf8d5183069338c24cf576c1a92c1e0384d82f7e1e1fcf0f230826c2ad4af007fe109305b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x198, 0x9, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6a8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x92, 0x1, 0x8, 0x1, 0x10}}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa2, 0x0, 0x1, 0x9, 0x3}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x9}, @TCA_CTINFO_ACT={0x18, 0x3, {0x9, 0x1, 0x20000000, 0x2, 0x5}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0xe, 0xe1a2, 0x0, 0x1000, 0x80}}]}, {0xe9, 0x6, "0dfaf257049c44b1ea59faa91b353d4ed9c2f328cd296af2fd9f6eef62eee2f378cdecc81359813ee4ef3dd0aca02a2be26b9971b610b81047ce720266ae39f1e764a253a80ddf3705d7e78806328d22cdfac96bd5b3f3722fd81e91f256a71c06a899c649c140975c6e625da33852e37a5f43f5decd6a4603681a02c773e3676443b9b7921677ac3febf924bb2df26c8a1e33fe2a7af614a28af027b35af5bb0d13ee3ca3fe8dc1aa2a5079b3b23867ad5f53c684d1979b8598c65568e01cbf362347b804d3d229f85213c5af2e752434ceb13aad4541419f0e6ad118205f2e3844351aa9"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'macsec0\x00'}]}}]}, 0xed8}}, 0x4000010) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x151200, 0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000001c0)={0x2, r6}) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f00000000c0)={0x1a, 0x1, 0xa}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000002c0)='./file1\x00') r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r8, 0xc0046209, &(0x7f00000003c0)) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth0\x00'}) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@getqdisc={0x40, 0x26, 0x4, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffe0, 0x5}, {0x3, 0xb}, {0x9, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 9m28.895870325s ago: executing program 0 (id=3399): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0005000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe88000000000000000000000000010120010000000000000000001999a55b8f650ed31c7edf0000000000022b"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9m13.243478485s ago: executing program 33 (id=3399): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b00100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0005000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000034011100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa000000000000000000000000fe8000000000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe88000000000000000000000000010120010000000000000000001999a55b8f650ed31c7edf0000000000022b"], 0x1b0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 16.408235073s ago: executing program 3 (id=5396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000bc0), r4) (async) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000200)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8894}, 0x4000) (async, rerun: 32) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async) syz_open_dev$usbmon(0x0, 0x400000000, 0x456102) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="01002cbd7000fedbdf250800000018000402000000000000006164636173742d6c296e6b0000f41b9100e5c8e5576a742b637d8bc3d2df302a6ce16e1d2a069210596ec8b95cf297b62b6a06a9efd49b9e663b99985272aca458f0d88dba7a0e3c94a4288ab5be8ae407b8c19c7533b8897e7df44dafed29f74b94ba53a559eaecd4f8b645875b368607f79efd78c53542839da6dd11963804d0c37303ecc494bf36feaafd66e2460ab68029702402a4e893d57b74964a5db88b7c2e9d9cf59948f4278f9edfeb81799bb72b1aa31832aaac18e1604dce507ffd5a"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x8048010) (async) setresgid(0xee00, 0xee01, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x5}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) (async) io_setup(0x25, &(0x7f00000002c0)=0x0) (async, rerun: 64) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000180)="100c060a63010000000400000000", 0xe, 0xffffffffffffffff) (rerun: 64) r7 = eventfd2(0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r7}]) (async, rerun: 64) r8 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) (rerun: 64) read$FUSE(r8, &(0x7f00000008c0)={0x2020}, 0xfffffef0) poll(&(0x7f00000000c0)=[{r8, 0x400}], 0x1, 0xfffffffa) (async) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r8, 0x4020565b, &(0x7f00000001c0)={0x5, 0x31c3, 0x2}) (async, rerun: 32) close(r7) (rerun: 32) 14.152910478s ago: executing program 3 (id=5402): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x1800}}, './file0\x00'}) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0xf771b46b0c8b3486) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@newtfilter={0x4c, 0x2c, 0x42f, 0x870bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x9, 0x2, 0x100c}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x2dc, 0xf5b, 0x1, 0xc08, r1, 0x4, '\x00', r5, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = getpgrp(0x0) r8 = syz_pidfd_open(r7, 0x0) r9 = epoll_create(0x1) r10 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r10, 0x40026f34, &(0x7f0000000180)=0xb) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) r12 = socket(0x40000000015, 0x5, 0x0) bind$inet(r12, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$sock_kcm_SIOCKCMATTACH(r12, 0x89e0, &(0x7f0000000080)) preadv(r11, &(0x7f0000000380)=[{&(0x7f0000000040)=""/138, 0x8a}], 0x1, 0x16, 0xc) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000180)) r13 = gettid() kcmp$KCMP_EPOLL_TFD(r7, r13, 0x7, r8, &(0x7f0000000040)={r9, r8}) ioprio_get$pid(0x0, r13) connect$unix(r2, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0xb6c6cd315b241bca}, 0x4002040) 9.535889466s ago: executing program 3 (id=5411): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f00006df000/0x1000)=nil, 0x1000, 0x1000001, 0x110, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000005c0), 0x8040, &(0x7f0000000040)={[{@uuid_auto}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}, {@workdir={'workdir', 0x3d, './bus'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'userxattr'}}]}) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 9.271382686s ago: executing program 5 (id=5413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) rseq(&(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x4, 0xe9, 0x7f, 0x6}, 0x4}, 0x20, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x11, 0xf6, 0x0, 0x1, 0x2}, 0x14) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 8.63585567s ago: executing program 6 (id=5414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000010101030a00000003a49727f10000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40020}, 0x4000010) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80040001}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x34, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0x6, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0fc79f00800000640f79fd660f380a290f20d7c7442400da586a53c744240209c10000c7442406000000000f011424dbd2660f3882aa1ed90000f2f2f20faac4e1605d15ea2d9b5db900080000b877b98af2baf8b357790f30", 0x59}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x3, 0x0, &(0x7f0000000380)='GPL\x00', 0x85e5, 0x3, &(0x7f00000003c0)=""/3, 0x41000, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xf, 0x58d, 0x401}, 0x10, 0x2b460, 0xffffffffffffffff, 0x1, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000840)=[{0x0, 0x3, 0x8}], 0x10, 0x1}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000025300)=""/102392, 0x18ff8) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000005c0)={r5, &(0x7f0000000300)='/dev/kvm\x00', 0x0, &(0x7f0000000440)={@_ha_fsid={[0x5, 0xff]}, {0x9, 0x800, 0x400, 0x6}}, 0x6, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0xa}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x6, 0x9, &(0x7f0000000080)={{0x1, @broadcast, 0x4e24, 0x1, 'ovf\x00', 0x3, 0x4562, 0x29}, {@loopback, 0x3, 0x4, 0x11fe, 0x0, 0xa3}}, 0x44) socket$nl_netfilter(0x10, 0x3, 0xc) 8.492299366s ago: executing program 3 (id=5415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000010101030a00000003a49727f100"/28], 0x1c}, 0x1, 0x0, 0x0, 0x40020}, 0x4000010) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x34, 0x1, 0x4, 0x301, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x1}}, @NFULA_CFG_MODE={0xa, 0x2, {0x6, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="0fc79f00800000640f79fd660f380a290f20d7c7442400da586a53c744240209c10000c7442406000000000f011424dbd2660f3882aa1ed90000f2f2f20faac4e1605d15ea2d9b5db900080000b877b98af2baf8b357790f30", 0x59}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_tracing={0x1a, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x85e5, 0x3, &(0x7f00000003c0)=""/3, 0x41000, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x2b460, 0xffffffffffffffff, 0x1, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000840)=[{0x0, 0x3, 0x8}], 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000025300)=""/102392, 0x18ff8) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, 0x0, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f00000005c0)={r6, &(0x7f0000000300)='/dev/kvm\x00', 0x0, &(0x7f0000000440)={@_ha_fsid={[0x5, 0xff]}, {0x9, 0x800, 0x400, 0x6}}, 0x6, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0xa}) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x6, 0x9, &(0x7f0000000080)={{0x1, @broadcast, 0x4e24, 0x1, 'ovf\x00', 0x3, 0x4562, 0x29}, {@loopback, 0x3, 0x4, 0x11fe, 0x0, 0xa3}}, 0x44) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cast6)\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) 7.863991699s ago: executing program 4 (id=5416): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, 0x0, 0x4004809) setsockopt$sock_attach_bpf(r0, 0x110, 0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB='`'], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x22004081) pipe2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 7.315849804s ago: executing program 5 (id=5417): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket(0xa, 0x802, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x31, &(0x7f0000000180)=0x8003, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$nfc_llcp(r3, &(0x7f0000000000), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x64, r6, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x64}, 0x1, 0x620b}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r6, 0x4, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x41}}, @L2TP_ATTR_DEBUG={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010009269b310571da344300000014000300", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0x4011}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002740)=ANY=[], 0x24c0}}, 0xc0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) preadv(r10, &(0x7f0000000440)=[{&(0x7f0000000180)=""/82, 0x52}], 0x1, 0xd651, 0x72b) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x2c) close(0xffffffffffffffff) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) 7.054203455s ago: executing program 4 (id=5419): openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40814) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x8d0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = fsopen(&(0x7f0000000200)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xb, 0x8000, 0x0, 0x9, 0xfffffffffffffffd, 0x6, 0xfa0f, 0x2}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)) clock_getres(0xeaffffff, 0x0) r5 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x2bce, 0x10100, 0x1, 0x313, 0x0, r4}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r6, r7, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r9, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000800)=""/189, 0xbd}, {0x0}], 0x2}, 0x0, 0x40000103}) io_uring_enter(r5, 0x46f3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) 6.859382178s ago: executing program 3 (id=5420): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f000000b5"], 0x20) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x5, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x499, 0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000380)=0x9, 0x4) syz_usb_connect(0x2, 0x3b, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0x6e, 0x69, 0x4b, 0x10, 0x1199, 0x9003, 0xd734, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0xfb, 0x7, 0x80, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xd3, 0x6b, 0x5, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0xd1, 0x2, 0x40}}]}}]}}]}}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0}) 5.369697798s ago: executing program 6 (id=5421): syz_open_dev$sndctrl(0x0, 0x0, 0x8801) openat$comedi(0xffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x11b440, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x80000) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'pcl711\x00', [0x7, 0x5, 0xd09a, 0x1002, 0x1, 0x1, 0x4, 0x6, 0xffe, 0x9, 0xf, 0x3, 0x4, 0xaba5, 0xffff, 0x100006, 0x5, 0x8, 0x100830, 0x40, 0x4, 0xa, 0x800, 0xe2df, 0x2, 0x0, 0xdf, 0xb, 0x4, 0x5, 0x800]}) 5.28437077s ago: executing program 4 (id=5422): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801}], 0x1, 0x54) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x30, r7, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) mlockall(0x2) r9 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) sendmsg$nl_generic(r0, &(0x7f0000000640)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x204, 0x21, 0x200, 0x70bd29, 0x25dfdbfb, {0xb}, [@generic="f909bb6e9f8547e47bd7c7a930707000130a97a4e12078d87200b3051bedb0f9b75ec297b9e90b079f59a801f4d44c11b70ae5106d10399967335d7ef4c3b91cd3f8056183d91ffc62f1399a1c1b8cd8712207f1d8932c7024fd9b3a41579d408dbc59476ec10a2d8ba9d9a71e4365c08b8f4c2df834eab04d005613c75bc975dcf6040935bdd3a596b6c6bcab085acd1d3f0689be9b15bbd4231d15db04b625e1ca6e9c5a3b394a2a2468a6795e082ac3f08ad870018281d888282d1e2d0b6e88c947510558c0fe887dfefe79a119c141f44cb3440eeb96fd8f8ac03930817818606ce680df2e86f569b186c8ff80aba3c3a97367", @nested={0xf7, 0x11c, 0x0, 0x1, [@typed={0x8, 0x12b, 0x0, 0x0, @fd=r2}, @generic="bcf77e73415ddbb269b8a97f76ce650905c9996c332e55bc434051964d6163e9d66950e05a95ecad560867f41ac3e99c7bb55e8d715027b3126a7d050baeb8a8ef930824e7a917aaf64a5a8c094cf625970c7c47c7350f27eace532c522b835080a223a2307542790035d2c606c34aa322dd124277d46d70e9ff00c306e294b1cdd698a2af3842dfff286463e3d285127864d79b85355aa023f7d338e15fa71c525b840fb3c69ad5fee6aca85b79b73659d5542d67d20c143ddca5da752becf6582b3958848ed74a85412a5880d4fff15d5c2cefbc1924bc3fdb61851b3e6d5fbdb37074e1e17b", @nested={0x4, 0x10d}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x20008080}, 0x840) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r11, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r11, 0x40047459, 0x0) shmat(r9, &(0x7f0000ffd000/0x1000)=nil, 0x7000) socket$nl_generic(0x10, 0x3, 0x10) read(0xffffffffffffffff, 0x0, 0x0) 5.213928474s ago: executing program 6 (id=5423): socket$nl_route(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = syz_open_dev$dmmidi(&(0x7f00000000c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0245720, &(0x7f0000000040)={0x1}) (async) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async, rerun: 64) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) (rerun: 64) bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, 0xffffffffffffffff, 0x6a855000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') (async) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x9a, 0x490180) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @local}}, 0x5677, 0x6, 0x6, 0x1, 0x1}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000280)={r5, 0x8}, 0x8) (async) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x1c1840, 0x92) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r6, &(0x7f00000001c0)="f1", 0x1) 5.083603376s ago: executing program 5 (id=5424): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = mq_open(&(0x7f0000000000)='!s\"D\xd7$\xd6\xe0\x8b\xdb\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x80, &(0x7f0000000300)={0x9, 0x201, 0x3, 0xfffffffffffffff9}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000004540)=""/200, 0xc8, 0xffffffffffff7374, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000c117a1e714a0fd4d8a7b46b6d0000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES64=r3, @ANYRESDEC=r0], 0x310) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/27, 0x1b}, {&(0x7f0000000240)=""/249, 0xf9}], 0x2, 0x5e, 0xfffffff8) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @local, 0x3}, r1, 0x7}}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2}}, 0x20) (async) mq_open(&(0x7f0000000000)='!s\"D\xd7$\xd6\xe0\x8b\xdb\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x80, &(0x7f0000000300)={0x9, 0x201, 0x3, 0xfffffffffffffff9}) (async) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) (async) mq_timedreceive(r2, &(0x7f0000004540)=""/200, 0xc8, 0xffffffffffff7374, 0x0) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000700)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000740)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000c117a1e714a0fd4d8a7b46b6d0000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000", @ANYRES64=r3, @ANYRESDEC=r0], 0x310) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') (async) preadv(r4, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/27, 0x1b}, {&(0x7f0000000240)=""/249, 0xf9}], 0x2, 0x5e, 0xfffffff8) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @local, 0x3}, r1, 0x7}}, 0x48) (async) 5.013677547s ago: executing program 5 (id=5425): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f00006df000/0x1000)=nil, 0x1000, 0x1000001, 0x110, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000005c0), 0x8040, &(0x7f0000000040)={[{@uuid_auto}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}, {@workdir={'workdir', 0x3d, './bus'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'userxattr'}}]}) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) r4 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 4.238769327s ago: executing program 1 (id=5426): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x3, 0x8060d1, 0x5, r0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200"], 0x48) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) (async) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) (async) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, r1}, 0x38) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010030000000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="0000000000100000240012800b0001006d616373656300001400028005000f"], 0x44}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r8, 0x25, 0x4, @void}, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ee, @empty, 0x1}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x108}, 0xffffffffffffffff, 0xb}}, 0x48) (async) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0)}}, 0x18) (async) mprotect(&(0x7f0000457000/0x2000)=nil, 0x2000, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(&(0x7f0000001100)='./file1\x00', 0x6c842, 0x157) 3.996252864s ago: executing program 5 (id=5427): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[], 0x60}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100002cb990105b0412024ebd0102030109021b0001000000000904"], 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000000c0)={'syzkaller0\x00'}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x240000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x3, &(0x7f0000000100)) 3.678874777s ago: executing program 6 (id=5428): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000080)=0x2) r1 = signalfd(r0, &(0x7f0000000100)={[0x5]}, 0x8) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x747e0000, 0x1, 0x4, 0x80, 0x1, {}, {0x5, 0x2, 0x8, 0x2, 0x7f, 0x9, "76cb2f1a"}, 0x200, 0x1, {&(0x7f0000000000)=[{0x1, 0x2, {0x1}, 0x9c2}, {0x7, 0x93, {0xa}, 0x8000}]}, 0x5cf, 0x0, r1}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) io_setup(0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x800, 0xfe) fsopen(0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r4, 0x6a98047402e98331, 0x70bd25, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x7, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x806, 0x5f, 0xc, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0xfffffffd, 0x800, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0x1ff, 0xe661, 0x4, 0x7, 0x3, 0xc, 0x4, 0x80080000, 0x242, 0x8000003, 0xe, 0xfffffffe, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0xc57, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x1, 0x3, 0x10001, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff5, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6ca, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x7, 0x2f, 0xf, 0x312, 0x7c, 0xea4, 0x0, 0x4, 0x7, 0x8000, 0x6, 0x4400, 0x401, 0x6, 0x1, 0x1, 0x5, 0x1000003, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x9, 0x9, 0x6, 0x47, 0xd, 0x1, 0x80000001, 0x7e78, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0xffff, 0xbc45, 0x9, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xd, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x4, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x1, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x2, 0x6, 0x38, 0xb, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0xb, 0x803, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x8, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0xb, 0x0, 0xb9, 0xce5, 0x1ff, 0x2, 0x56, 0xfffffff2, 0x6bd8490e, 0x101, 0x10000, 0x80000001, 0x7fff, 0xffff, 0xa61e, 0x1, 0x200005, 0x1, 0xfffffffc, 0x14c, 0x60a7, 0x0, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x5, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x7, 0x30b1d693, 0xa1f, 0x40000f3f, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1f, 0xd7, 0x200, 0xffff3441, 0x200fff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.444065862s ago: executing program 3 (id=5429): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x20, r3, 0x309, 0x70bd2c, 0x0, {0x1d}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x880}, 0x40000) 3.011752938s ago: executing program 1 (id=5430): syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$alg(0x26, 0x5, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0x20, 0x80) socket$inet6_sctp(0xa, 0x1, 0x84) fanotify_init(0x200, 0x0) r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) dup(r0) r1 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) dup(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r3], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) socket$inet_udp(0x2, 0x2, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x160bc0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) userfaultfd(0x80801) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$unix(0x1, 0x2, 0x0) r6 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x1, 0x8}) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000300)=[{r5, 0x4236}], 0x1, 0x0, 0x0, 0x0) 2.920917522s ago: executing program 4 (id=5431): openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40814) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x8d0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = fsopen(&(0x7f0000000200)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xb, 0x8000, 0x0, 0x9, 0xfffffffffffffffd, 0x6, 0xfa0f, 0x2}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)) clock_getres(0xeaffffff, 0x0) r5 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x2bce, 0x10100, 0x1, 0x313, 0x0, r4}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000700)="f7", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r6, r7, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r9, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000800)=""/189, 0xbd}, {0x0}], 0x2}, 0x0, 0x40000103}) io_uring_enter(r5, 0x46f3, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) 2.72984619s ago: executing program 6 (id=5432): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xe, 0x0, &(0x7f00000000c0)=0xfffffffffffffee6) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x4c004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, 0x0, 0x8000) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xffffffffffffffff}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x54, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x8000, 0x8000, 0x10000, 0xac16, {{0x34, 0x4, 0x0, 0xa, 0xd0, 0x67, 0x0, 0xf9, 0x3dee1f230aae689d, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x4c, 0x92, 0x3, 0xa, [{@multicast1, 0x1}, {@loopback, 0x77af}, {@remote, 0x8001}, {@rand_addr=0x64010100, 0x7}, {@remote, 0x913}, {@multicast1, 0x4}, {@private=0xa010100, 0x5}, {@multicast2, 0x1bb80a89}, {@empty, 0x5dd7}]}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0x8, 0x99, 0x0, 0xb, [0x800]}, @timestamp_addr={0x44, 0x3c, 0x9d, 0x1, 0x9, [{@empty, 0x2}, {@broadcast, 0xfffffff9}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xfffffffb}, {@private=0xa010102, 0x3}, {@private=0xa010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0x11}}]}, @lsrr={0x83, 0x27, 0x20, [@empty, @remote, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3d}, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}]}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newneigh={0x1c, 0x1c, 0x200, 0x70bd2b, 0x25dfdbdc, {0x1c, 0x0, 0x0, r6, 0x10, 0x6, 0x5}}, 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) mkdir(0x0, 0x0) lchown(0x0, 0xee01, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) connect$netrom(r3, &(0x7f0000000300)={{0x6, @null, 0xa}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7) 2.136396702s ago: executing program 1 (id=5433): syz_open_dev$sndctrl(0x0, 0x0, 0x8801) openat$comedi(0xffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0x11b440, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcl711\x00', [0x7, 0x5, 0xd09a, 0x1002, 0x1, 0x1, 0x4, 0x6, 0xffe, 0x9, 0xf, 0x3, 0x4, 0xaba5, 0xffff, 0x100006, 0x5, 0x8, 0x100830, 0x40, 0x4, 0xa, 0x800, 0xe2df, 0x2, 0x0, 0xdf, 0xb, 0x4, 0x5, 0x800]}) 2.104449811s ago: executing program 6 (id=5434): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) r2 = dup(r1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001040)=0x2) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0xffffffffffffffff, 0x0, 0x4001) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x19040) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, 0x0, 0x0) connect$l2tp6(r4, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x4, 0xffff, @private2={0xfc, 0x2, '\x00', 0xfe}, 0x4004}, 0x1c, 0x0}}], 0xfe, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) write$UHID_INPUT(r2, &(0x7f00000010c0)={0x7, {"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", 0x1000}}, 0x1006) r5 = socket$xdp(0x2c, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'macsec0\x00'}) sendmmsg$inet6(r4, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) accept4(r7, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60", 0x9b}, {&(0x7f0000000540)="b4e007f06d05", 0x6}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a3", 0x34}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000ac0)}], 0x5, 0x4d9e, 0x8) 2.025402514s ago: executing program 1 (id=5435): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10012}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x10000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000840}, 0x40000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) fdatasync(r1) 1.980139132s ago: executing program 5 (id=5436): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x43d5, &(0x7f0000000100)={0x0, 0x5c8, 0x40, 0x0, 0x1e3}, 0x0, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) kexec_load(0xff0e, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x7ffe0000, 0x3e0000}], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x2000000, 0xfffffffffffffe89, 0x0, &(0x7f0000000900)="c123612d6821d308091674888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000000700000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000600)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0x25) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4044}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002cc0)=ANY=[@ANYBLOB="14000000100017e40107082f010000000000000000000000000a74000000030a01040000000000000000000000050900010073797a300000000008000b4000000003080007006e617400080007006e61740008000a4000000002340008800c00014000000000000000050c00014000000000000001010c00024000000000000000060c000140000000000000020044000000060a0300000000000000000007000002080009400000000108000940000000000c000640000000000000000108000b40000000010c0003400000000000000002140000001100010000000000000000000000000a"], 0xe0}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) recvmmsg(r2, 0x0, 0x0, 0x40000102, 0x0) read$msr(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000000b80)="e3858ccc321d000d1b4a950149503d7bd8a506d4991e0e8784c687842d3734697cb623d44c33fe8c25262077b5cafb82fea0c9c32761d4c1c0d0f3dadaba6f14534a112849dbe7f7ca19108295d5ab1248cdc3447fa2815369279b9197235452a565c58a95df720f0fd0f8b354f4521509dd2f50f8fd6b9c88b9b893838263832d5d0a8686af433660a19352cc33a1fd2515fa26fd25486f0d457769c9160e42279b6f7bb75a45383f99fa83b1288b80897c69dc200003e58894df2df66a6433411f00d41e1ed1359bf869ddd8c9c6b625f53cda66e0d452884750017684aeb839ce6f137119721d321aec59953e2b1515cddcd9c8db09a6ea038475697738d9b51baf5abd55d18761e4463ee112934fd33c516d3797297ab43e2eb0bceb42188604424fa250303cb0ed56376b02106b3b357795f8d0d20eac614225705dd482c15468e02a3ef709b31bc0fd623c78b00eeda7ac8b5a225b16c17d6acc569a5f4a3d30da520efd1086d0fd5fb4c10b7d6812999a53e1384fab6dbac9cb18c241355d4e1ff3df639f44cffdf7814a78d9f46a83ea09a75bca2ae4249f9b74f233ed10fe411bdb98986f520d4c34959fec974e91af8e2cfe4c53644a1e4c7d8cb42445f780cfcd8e452dec2f0a4b1102e7521d574e6159a782814b5a4474d5c59561c000aa6d80dfb4e9972043865e8cbf4063f467a1e76a36fd07026783fe2b3e79266cfad350ae95f37f05f5dee53138561a09580f19439122ef2c035057bff7dcb829cee8fa7e36b27dda53297dd0bb3132c5d8ba1d08b805e9ddc4d5bbcef94c9946dbb12e3bb1845a0d21a5b88ad1d6fcb29de2bc76cdd6190ce05d0a8e5b359bbad9ca8b683ea5abc2c6bb09d272055112caf8619582d70e542b97e92a88348ce6e6cd526d5e75cbe56f94c69bc1e1fe207681c8a0247037a9d7b1f05ecc230693ccc5f19f25e33a67b97446863b01b1547de39c2f02c00ae4a47088e845515dd8278f003c0d1c4b179e139f9295925396f07e3a6a17fee57fb28cae9430445da3defda48f0824159e267816d3eaab5ce6fdd0b6f0edf96100ea5a94a1b35bb0deacc2e61faad0f78bb4900f7eb4bae2028cfbd736362ad2adfc5f4218735856ef2877e04fdf898ccc05cc170ee5ec189390aebd4d077e027e51d8d7360a8aa14636f12d3b3ad3f142730300d0e4c628720fb6bad426b408cf7799de9240ed855670f3b443d7b11d58eef3f05962988709f271f3051c7cd45b7fb2fd22597647a0b41a299e46702d46bf2ea75465bdac21dfb6a0601ac0b7f156cd68495c154adf4ab479d1543f30350c1329a16db9cbb31e27e84cb5e760a433100fa6d179328ba78ce1adb5d2be6a98657c065157eaf82c09c84fe77bd715e3b7d6e0c8f2e0738acfe1d9aee6fcdc00fd0588899bc748ac86596fb9ed48b4399b6b4ac0faa99d01d9694f5f3f07ae357ff9803802ed5f6dd9c033720e1a16d7311cc3a2fab163d15a891d632259ddf90e622a6b90afa450811f62d02be3d140db92ac6fa5edc300108d72379e9e4504af6597776d7f08e71d5c643842d659c6712e3e4a0b322346606450c7a6bafead5ccb16e85af7de658a374566c6de20a845b2e7351ac255f2ecf02ab899572885fd83b9538b3b205ad122e2a32f4ef21b7afca0a1fe0487d30df251e474cdd9970f58391f58c8e7c2072a46a86d4b109216a285d60974a47daa8f26f261aa275f3de281ab228bfc8409216484c427ea01828f043add3ed1c57e7726c4b36047a9a95297c2c61357f452700649e68fd38ef15cd1ac902e940d9d257f52f35402298022a64c724f27809e086b0f6a24ac1ebe683fd296db14ef6d15ce50be26b92a76c4b256f690a2e10cc5a01c49a10c69a8a2926fc9348da2f5102786e5ca0a4957ae7c57cb8beb93b7017b6b989f889f995018f3274c2ccbce3d06342fcd8ae9d5f0e3f92c0ebf1e1e969b7a9a53b75ef0753f6e3f4a1f5546d917cef292e3edbf5498d44eae5203af3af7a9ba18a8015d338d44f4d27212870d5db59572c1f61c4be167c971133d8ee21805ed43447275a19827a4af39db764b02f7c5c63a03826f041e5d12661671afaca3c7bd29da5d603bf8f3c24017ada768d4b20ae718a9d6f5c2e6ff1e8765df91e67ca4b71411f2aead0ca55e0b6e24c445791b9be7b892c98b77434cbcf6eadb66b39888123826f31f7efdf6b3624bbe3eced4bd119bc4b997bd8e081eb7bcfc4927d3097100578ca537691b71c3e574871825a2096e302c2d3711e013fb64ca14cf9a04a5b4a16f7601688dc4fd0661bb7347d5089919891be087b9058c01b0144f46a4bc059893ddab90e01aa73bf9bdd4774dc5c01be0cf1ee49ba174a9aa42b2c3d3be7f6cc33dc111af639121729648001d5766f4aafac3fdb98f6eec459f8cee3833255b95ec9aedb874a2dfa9bebfebf1a03e8b8af31e8215c413bbb1c8d5e66e7fb66aa41fe1b20553069b6846faef42275d17b3c733131d12398f4b9723a52661154a77f4c66dd32c79b7c405b3553cc66d4b120776f4686536b4cc329189adb1893e69d2ff1cc0f64c1cdd3c10daf8c5f4bad116ab7b82ffd5c6d08265b8d63fa19fff97d58e548695dd81b0aa6f7cb3c3971a53b88e5e6de1c92f5a16ebb4946540dcbd5ccc1f7e397ab7be69d1c384c75bede1c529e92bcc6816ccdf1f659370d8ec1ff6f576261a5a526e3a09701b80b7ef896e4d71ecdf4858425fe0e0f568538aaa03ab8690b29c2f900cbd0d2b6cfcc48fc8aca566650c8d0a35d09fb6a87fe7d146efc888cc7420756c16d80d230854c2fb5a0bd60a3d5a44127649e1157dfaca3d3ed85b9e2a8aa45bb9d32dd44e3ff2cd33b6b58dfe44225ea2f09f5aea5ba899a525a51f9645e10ae49b43adf6b14166daab620e92bcb149f8c8b2680572b6b7afd0deb038ac92f8cb8d30218e5cc6e5663231a6f8bfa4f93ab4562630b2c5d8eb9230a73d9b828d4cd07f169761e697f415ba6626c4fe5561838da6724527f81699cc92a60ea975b2d36c262ecc5300a888156815e16a57f1e3fbaabb7b6cdfbcdc4c768aa6e5a09c3101582a6fa9aeff132ee317a37a41447a70720d5c26f389bf34d153cf706801e94f259481c1bbe4bf81f57cb1fe2a1063c2ccdc72c5f75571a26dc7c701520bd939d0329ac858fff5548a7c8970bb11d2dda6b6e60052db74b31204fa2ebc5f3b0afcf64c18aed8df4d05486d3d682f77539a978b00047c9747d7ff948c227cfa579404e41ea5533593916436d2cf4217c09e43e34b2e1e4e4d41b8507c9d3a99063df2f99139cc74e49a62018178674b439ac6ae3d79ebb938cd0e3eba943c61116dd9f8e6d8f6fdccc0f3d5be27b4aee5ca8e8c28536a208f712a2c77539127f0d9b87abb1c617cd0815ed9a03323645caa9001cc6fc09fd4324552f1454fb7d8b57bd126e862bcb112460d0b9d77dcd3a057c145370286a90b65c74ee9bdf73d088c6015b452f7a1fe01aee65c1c954f8f0151dd8ddb62f9fcad3a1ad0ed942b1dbabe38eee1813d0b8493a720b89e4a11bc5291bece260fafdceac3792b2c5395953f544dc4c753fc6a47590f9c54a35d87a050c4346992e934d879fa765ae44f5e2754adaae3fc54640aca5dc232a3d67cd52b0e6edb0208b1d9a2e8a74f3bc9f205dea53af5598a9bfd62f3e71caf8338bc36cf1228120e24065d3a4c951f91dab87c7130a0473611319d5c85dbbbfbc882928cfe9b1c6305d4dfa3c2f75bdc7bd0f202ffcc2f212edc756f1c4390f64b6f316bec3f2c082df1d26bc05385eb0656e732a1f146cdf1ea4c2cf9a6dd096840aa117a9263eeaec99b586df7f36b023d58394dbcecd0d0631cb06d4b9db04eb3592b4e1e89470caa23992f88bc7e5c55528616f0cb0edd17910bb3e93ee698269df5cb2df7c8b169334452b9f77480660090d1fd0a2653562c08f39c9e60f1bc33dd0df999a7ccdbaf5bf8ec7938df495c3584b65f0e9a33038a5d3827c0c2231faa1e4d51c41b665cd537fb03d670442e2b03c3657e912294b4bb85f6f1aff258ba1aed085d84c9b9c22ef118a5d0506b0faf5f2d5a7c616e8cb2a02fb71ddabdf909777746cb9e541957dc6fc0e0e727e5c1912c8199d8a321bb83959fc0c7ff11514c0de872aa7ab009228182efdca8fedfd0d98e0aaf6939b703ee4b9a44d0d2ebdabe550cab7e888e0b13b7014e19a00f475256c46df04f0653c181f72a91c35add2e16fc47b7aed75e24552b09cfbaa71fa0e821addd47fd8c334c8028c51226eb221060cf5de1c28c9fbab8bf0effb17c403ed6bd07ab20255a4e36c69d03167b096feea13fe9ff31a52bc0077185d4aef79a55b237ccf1487c7b8abcd737977db20c49b403f01f8856e17ffb12002b5c58d557c3861474810cbf280202fd5113724269559bc0e00e1a8b3103401c816ee972a5ded85616d24fa04621159f7941486233f65ce4e796f08dde718868dd05cbdc5195fc164cfbb2eb950bf596c1c39ade5a3cc04b71f64c88a49f6d3907aad6a9e5d59e61ccb8a6ba3f26acba27f1dffe9567e9b6ced695c80416b500723211d086aa0803644a07dc3994db173b2caa582ba310b34661303c52ea2d908f8aff5cf372b7d3f2685470c55c75bcf9d427cdd9f3189d9b827839a3675b67046cb814fbacfb5787a09507fb62d08992156bee07711575a213905c8c8effebc0024bd9d30b51ac359de2f3df1932bfa45ef60445794b6755aec6d8d1dc43ed28628c8f24dbc0b7da5e6fef071cf0dd2e23250a3f8b07d9ce6bf68d262993d4fa5c3ac699955d8f5d7f6e0c4864e14e151a15b54d553ad142900b2ee9a3569955d950e3963680ba1d0e57b2b1fd1ca7b52ecae742ae6b33114fd12330c336f95927422b00eff07bd167e7fb7bfd5987270f085b729f97cc53e55d770aaa365b1a554c5c6004f39c57fe8eb2a3c210be78ea79dc6fdac460dfd40ae8c3617a9ca968ad4430cec5cb36dc00f10451fc7fdd9d7371076d22c0f673eb444d6d5b548dd363327c432cd0a189ce127e743a4641c3c2c5c079358a629b5797561402dfd0e46c2f5bf8c01bc8639588871e515ac8ee1948208bba290a5af30dfdafd3dade444617b122c049f488fb460196ef69d84a73ed5e82bc83437a1827ae161ca15a6e61fbc8463627fe28ba2c54c32ca94f03cc2867d87f5dc003ab2e13b9eab6fc0db56a6885212b1abf0c96ebc0daee1608e599989a27a04373efd7adc4fe47040e0421abc9c3dfb51e0ffa2533c0880ccc69ac809cb0d18aecf319ffbb1adbf51082ae394bf5ae9fa385a498204aaf9d62b87f52bde9db33478b6d242c2aedc444c6cb726bf1105b92c0a0f3b9f73b6043460880f01a37c18364a590728a0329b3465847a5cfef789c2d2a6afa2883466dd2f89966fafba63652d2293474ad795394486fc97d99d46a77902b312c3e0b7b3c97d36bab077df9a0e772b5afe1e5c84a0dbad85eac915fcbb86a736bcdaf06111f0acac05ccb6cc29eae5cfdf4d6915f6f995ad94423d981148a7f9faeb6c65c686dddbbd83b8f8547bb54afecac9adc9f34b985b5faa3f78a4846788e14f211fae4b4ed77dae097dd732eae0251a3970a75585102feb262f7f39da12c6a291843acb2a2914bacac3623b807bbe446920242de2b0e50f8f83c7ee10a30f50bc6cf03741d373eabd26f47efb9a088ed464eb6d37706e98bf93d6b40d3df1b8e2c0879de9f03602db5f0642ab25163a36e47f7716cec9fa97fdfa3eaf9b113320fb9f7de7222d4d61438d5a05542d892c932fc8d0251f935e9f69439f3ed97f330032333295d6ddf523af1a5ced5a6b9c06c669837e2e37eeaa5386f348c7e5839517add9954207ca31826c6c8f9a012388d62379a62e6997e4013e9a33fb798561fe9cfe53be07a70d8298c5f709323f5b8602ef9843cd1170d650dae78dbc6e2fd2aeee39010eeb0f5391b2157d25a0ac21da4fde1ffd52798746298864dc590f68c32dc957c17da110d103ffc9acb25e08ae2daa1b906d900fa506256beb06ffadbc23bec11fc270cf56897063dab752e5525a037f64a41bd2f22ded0a86e87dee8dd73ba7ad962a7016987d8ed1fafd7d23cbd55227027db2325b2be1ecc4fefe4a842f6d893c37e9bbdc5efc295e04904ed8c11c65a7bad582050f2a591121cf0e668359884a20d22be26b7315ebea36f154485f02e8045f3e9e12f18edc1405d81d0f96647247b17c3735e40c4b181f74acc12f14da70e124f490e66730bd2f45c324199386ca87488961c924be1c5e86668b9a5570a9c0a55cb6beccfbac9240c36777dddb88ac215ee934025d49dd5899a75f0dba61a68a5e9d05ee37a148ddd01c84dc274d5f572566e18ac342a516676ff6efe2b6490adbff6c2f73493be45bb15313f4d9555a93d0ff19a50a3b46177368f08866f526ef6acf94ea559e3429c7a188e28b4ecdd252f734079fc373ae0716cddd05645a396f20106635c8974cd0902cfa64b942be09705b1cf91ce0fb693efd0cf415fa5edbbfa8965e4bd2224cbbd98c9c29c12c0d9e0ebdfc8ef67ec51c192c20d4df69e41465d6637810f18a4b3a51ee570a63a44d28735b9b2ca6d6fa3e527c765117586904f7da85f696da1e905867daf689122a130a5075ff6ae2b76822f00e167752e10c34f05f912c4d699f892fc42d92b7224ac3c20625cef19f66782f1faf7a16dec7a774e7b6fdebaf194f4cde1309e89e39771dd4c2840e762cc0287be98b10e066fcc1df936a15679dfd654f1ef1e5219b8b095c1b8c9f7e7494cb3a2032119d5d4977a9297f2872540fdc08b73c5c8070311c2fee0249c4f3f279d17846472f40437062e13cf5c8946eede66859f31be27e7ed3e6316870fdbd0a09cf7819f4775abab5309fcc88f16dcc4aaf7ab2a6670b8ba095d5a1b16fe56f8e47ae3694767cac8a66321672a2339c377d5ce8c61f63539733f653a15db81420a2365591121771961f4c145026663c2852b00381b71988296ec7b33fb64b2df9e005b37b3b34c96edc72c46af198f51bf071fa78cce66be1a3d98b4041a3e85e524084460e5ed9aa1325555611ae39ab56d55e2329dfb6e994781cf0899a2071c2a3f05fcee69653a7e69d91fcf75770f55b5445ae735b58362f047ae847be1aabc5a0a22d481d5a1f73047d5a0d30fc89197623ea9726d042d0ce263cc5b6666744424ac82189fa0ffa9725ec3151c0f6ef27d1f282e886ca5123e5ab4ab7f8c267b6129f2baa632f97947c65c70254ada06733998185f0ccb408cd116862f32a0a4a5790cca9bfda6d772aa3eb343d609aa56a9c163010286d48e44fb797f670dc8d093c552beae4148670abc27156debba6a0ae1b345291888b016d1a8c36773e6fbc1805555a5bab738ccc4274ff25fd93b23937b3bfdda19edd87227dd485e496605f306e7ce33e24b5a23ffae2b2068dacb959e9f640fa1f83a88e248ab2bf3e631b0465ad806e86bd48f17526fae4ce035a2f6c95ce8a9e05b4fd056df8583c507a9ec2ec748398a3f4080bebad52f7fb75ff5e331901126af5792ce066aff84dcb6f8eddce2e8fe7657993c9604fe27bc1e5f64c7e0e70c3e614bd4b4c07cf9ecec4527bf0efb8c1d31099c6eaa799519d9887c5efcf16090121013286cf3dc48d113abf7fe5366cccfd712a3f869aba98acec97b214227b2d1dccac73a7c9e5be0c79215d2e25ed532dae004063e86f87ab29122c4c85843da5dc40def8a02dfb68c074f25e018c7f39552ba139e4d6b793b5eb3ffd6cd3722bc0bc9d5c821a3ed5b229e1f41441012359eb317ebab5d3a2c7a26336ef727db650ad191797afc43af00942654a35e9e4b6873ac640f57c933dc475339e3cf876eb652cbe500948239e491882e59faeba08f5dff2c10946e67076c60fc3ea47dc665e2c3198f64a4fa961686e5724092f2473b5c4c3121d72592345eb2f098195eb566d60afb15268399e230ba06dbb3d95a296a05d6e021a1c98ab056a9109913b459c9b59c699bae29738e44c6006422d8a4c0ce3286ba3e17d803e0b63227353d87e71d152dc1296fc92593a1ebc7eeeb38bab79cc68969343728113d1380b1660680686779b320e58b9b0c8fb5b3ffa79e1363c49af81598d290b1b22f4d22c8f25fb81759361538058a72810cea659315742c72e207ef5ea873ad85408a929cac7be87e70b0f9dabb6f9a78b44ef1d3f58bfb835bb088d8181cd66b750661b3db5aa72590ad1fd897ff8c05a8f6d660152b07089310bd36beab7607cb21c9e9eea76631039a55363a4eac5661a32cf1854b9de52503435fa6b77f20fb23db9d732f437de26732fe981dc98680b06bce63b3b73f9e0befdf828c111556ab0ab9e0ad2f0d7fcd506811c33a95ea9058cd8988486cfc5e7fdfba84b4f31e92322942a444aae97ea81bf9c001570ecb64cc42860ed9348d26f150b031d203369ba3acb4b3a4880cb0294232b42f6f1c1d201180158241012f7fe27cfc9ca2c5c6281392efab95ada40d9726f67d810660c6c05c0a62a228ff915a48b22553e8b42dcd91128752aa9905318bd283b81a6a96a3ea02e0f822411b9f84c7dd521112fec2808edb3ae7b7d8fef9359d5e0a581cc679a7139fcb0cd2d86dccc3286502a036dd4daaf6ee325c5500ef871a01c07c00d952c36b30147c69a846d332c7adfd83ffc59a28d503d785fa5bddbe468b4e49d73e9b4715447a52d201990eee66be9a49b34bc1d7ef8068b1e50b01f63b68b80cbdc37be7d5bcc90e01de13b0f63a90a318ad10f6f59566a0f7f58510da6e858fd566820f11dd79acb19a706d81caa24c8224ffb72709210ab70d86dd91c50db18b94c529d53ad998dcc4c982d176eac61d7f1def2ba30e2643fd01c49d6be8e2c57566d4c47c1077dc28a5b644e7addd723823cc97c8b6edea9dec41d4ece7852ed910bcded02d42c8e5036a8171170c527b931908ccb7ab137c9151b8b112254528d450808a68afab64eb81d24b7b7f90004ab404115d4beed9ad8ef81814624f2fb1e54cdbd003863011ac9e6cf7e857c374650bd0eb0320fa21249aa3897e83214bb1ad1cf45b65d0e41ff966a9f1fdcf4867eedb79ded8a98fe44f7beaa151475b7f0eae2cdfb9b02ccae0290f1e3ec15ed01d0f0a7565638240a27c852e893db154559b4ce5c0f31860ad4d9dc80cb8cdb50da9fa4232314adc3be57e598c2130ee97a99532200db8909671723dbe0a621592e7fe132ec755214f5afe323219de9ccfe528c319618f34ede00f2d8caff40eefbe3d12cfeaf40982866ebcb6a6c64abde878e8bfedd388e580a19a29b6e5c1e52003e1723702208b92f12c8e947dc298ea49b348b6415879cc4402d1dad6785d17b15e2d2c6b4b4793a786e1332849455e590f7041c262bbc6aa26e9a2d94bea7e66a2863f4a7b434157fac950e6b580ab55b2e1730b34235d24175abd090389ab1629f9c4da3d3cc0df50059c9a5439c74945a1000f92858559374c47358edc63af1b66d3b2ec47e10362e2aaf1734d86b85048972a2f3d257b4bc9b113b52cda96a7c37e3aa3aff725dc6454cd122f5f7bfcdb4120b09ad62e32a44df8206f005b7a3d2204f3f84e7d30003af237d25bf5fff142774b5be0fe17e0430fd43135861fb89f716aa2736fe5930fbf05eb686aeeac3f5775d425d3f0e0b65ded53dff330f546ca654ef3322c2fefdfbbfcbeb9dfa63bb9d39775590eabac83a966a7108cb04a7adfc362ae0a7737ae9bf56d8f8e87d3e3af33f57119bf05ffc012fb4c43ad5d83964ea34cd800fa5fb71b17c02f888aa9cced5a4daa755d69ee823857692f72c4c4e5358369402f0d898ef25bc18de445ad89b74070514f509f659713381f4f8f07aa99e8a966fe2d8269ad67354c778050583fca5a26560ffd43388ad94b69bcc5d3c7a4ff6c1463c0d12036fc78a89e340a58e922abacbbbceda83e54a66b266f2c8578807900cd07cf9bdf142b6aede41d086dbcf15f0b0f46dcd05a63748219c8e10f87559197646f7e1b4613d1001fb83f3c7c9d61c4cdafe5ab9d1ff61c935a537e5f1111a5f597e911143dadd660d6c030f137910571a3fad2e7a7fc5c092e96a88c288a49538f8e6a2aed407e68bfd3903bba6c459d5a32805e797bdc6636a1b128c0854fbda98be40b3181e66917f03d758ee6bb44d81ef932668aab355fdf87dc3ef31f02d8cceb9f1f71ca3e912a37544416a86ba13f5088eef92f8c41313e22a37a9996fdbfa78479e2b14acd54c0d24b40491800d050ed7497f3c492b03993aa0c0c8fa899eb6c4c579edf23f7dffebd7617ed6ce74a2fc053e6daf4e9a9eebe4600f58336eee055b5fdabf585bcc4c8af8eaa6b7eb746e7dd5634c5206b4f66e3d25896ff2d18f28ea3c03e442dd8396847c43f0626dec54d75af17dd1ca0d06b73f32c2be286df40a7b76a898523ad0a3115f5f2644f3641a1cfaf54f0312b29c8d7cd99fac4291e48b8ea2cad89cf375e7b8915ae23c95faa20db2eb9244a79723006c4212d9ed0f1b18b0a9292de1d73a39c9cbbd951fbe6345c491c6c656da2b80391fea06e205d42aab8ed3388c19c86a9e9589cea9a508ea03f34af8bf2b19dd831cdd85bd1a86381b24bfd27a33aab92490254e2fd7900ed192cc0ccabf7652fc1ffd8771e63e01fe05aaff013fa8ec7ff021ade101b8315a6611f2ecaffa5dfc8a9d81305006f92355afb3e0fe5668c966e0d2fe4bca844de2e23c3f531f857d2b303be682eaf73907a91a575e0169021d87982af537787e2439aed9c2918e475029e8664817f0800ffc74c8c27619b6b7f88f205afd33ce209ff237b1100b1d5068fb92326bfd81c10e29036390fb49df35d38ac37109af9b4021b679ccef9a45cc1f5c97f626017ab57860e462216b1624123ba644c040969a4a383130a8cadb0f987285cbcf58c3a53fe6bdf45b2d678a59dcb2a8bd8534416bdd1152b14141346dd68020f62307bef1cd0900bd0599046543838df0533da0b827760e437765533d5c86690f02b8fbaa688f0d08329f466622353c2bfa7bc98a21016d35bb39f228ca94fadae4dfaa536d636a1e5305098d1439242a0d057fd75d7a6e225331ae8f0e12f8afd04b07a640d0d32c8a8c0289ab12cc05fac23259eb10588af7c8d24d0218e776f67e10010058995002ea5c2f16c3f7568b2efbe0d4d81ab97894bd43df0b0a558f9a6d1aeb2257d7e681bee6d1058ecdf436c77c5628ecf0ee2b6e6ebdc6c7654c7d2ed6a622bdbd42083220e6a7996407db77bc2fa02734df8374281cb72ced58a2c17aed59808fcf0fde73a29f80c11e6bd657dc643acdead9aa2c3e58314b886dc134d1b4c9e41c238dda68889dd3e1c55c5688e0196d0f2862e1745e9c3e997c5b829f51afc80f34fa72fbbfdc2da0d98f5284840f36182ca6286c065fe7aadda455a3f96c0bcb35089bcdc38efece3fc8698e7730ed2b208ac6a7aa714f4ecce7ea0b083382c2787fde669e21ca429c57c255c723df4c7803746fe924ba1ba5b1439", 0x2000, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000}, 0x0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2}, 0x24004010) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) 1.800151937s ago: executing program 1 (id=5437): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6c5706343448855a05fee1bf06aa61b7968e668b313077dcc773b59a8a687b60b28f9a254998b000000007f6b1e3923ce47cdb2b91efa469ef28c820f", 0x2) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24044494}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x0) read$nci(r4, &(0x7f0000000200)=""/100, 0x64) write$nci(r4, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6) read$nci(r4, &(0x7f00000002c0)=""/100, 0x64) write$nci(r4, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r4, &(0x7f0000000380)=""/100, 0x64) write$nci(r4, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r7, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) read$nci(r4, &(0x7f0000000500)=""/100, 0x64) write$nci(r4, &(0x7f0000000580)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5) read$nci(r4, &(0x7f00000005c0)=""/100, 0x64) write$nci(r4, &(0x7f0000000740)=@NCI_OP_RF_DEACTIVATE_RSP={0x1, 0x0, 0x2, 0x6, 0x9, 0x1}, 0x4) read$nci(r4, &(0x7f0000000680)=""/100, 0x64) write$nci(r4, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4) 1.37935769s ago: executing program 4 (id=5438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1a0) chdir(0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000121e82060005004e210000140007"], 0x70}}, 0x0) 333.500959ms ago: executing program 4 (id=5439): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f000000b5"], 0x20) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x5, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x499, 0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4c, &(0x7f0000000380)=0x9, 0x4) syz_usb_connect(0x2, 0x3b, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0x6e, 0x69, 0x4b, 0x10, 0x1199, 0x9003, 0xd734, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0xfb, 0x7, 0x80, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xd3, 0x6b, 0x5, [@cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0xd1, 0x2, 0x40}}]}}]}}]}}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=5440): syz_io_uring_setup(0x18d7, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f0000001000)) mknod(&(0x7f0000000040)='./file0\x00', 0xc000, 0xfffffffe) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20060, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)=0x200000000) r3 = dup2(r2, r2) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x6) read$FUSE(r3, &(0x7f00000016c0)={0x2020}, 0x2020) write$vhost_msg_v2(r3, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000280)=""/128, 0x80, 0x0, 0x1, 0x2}}, 0x48) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000dc0)=r4) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b07, &(0x7f0000000080)={'virt_wifi0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}) r5 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000780)={r5, &(0x7f0000000000)='\x00', 0x48000, 0xfffffffffffffffd, 0x4, &(0x7f0000000240)={@_ha_fsid}, &(0x7f00000002c0)=0xffffff00}) kernel console output (not intermixed with test programs): netlink: 'syz.1.5018': attribute type 12 has an invalid length. [ 1529.555515][T25390] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5018'. [ 1529.565066][ T1871] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1529.709694][T25392] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5017'. [ 1529.718911][T25392] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5017'. [ 1529.728733][T25392] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5017'. [ 1529.931634][ T29] audit: type=1400 audit(2000000101.086:10837): avc: denied { bpf } for pid=25375 comm="syz.5.5015" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1529.964401][ T29] audit: type=1400 audit(2000000101.086:10838): avc: denied { perfmon } for pid=25375 comm="syz.5.5015" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1529.989078][ T29] audit: type=1400 audit(2000000101.095:10839): avc: denied { read } for pid=25375 comm="syz.5.5015" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1530.030929][ T29] audit: type=1400 audit(2000000101.095:10840): avc: denied { open } for pid=25375 comm="syz.5.5015" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1530.060297][ T29] audit: type=1400 audit(2000000101.142:10841): avc: denied { create } for pid=25386 comm="syz.1.5018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1530.060582][ T1871] usb 4-1: device descriptor read/64, error -71 [ 1530.081054][ T29] audit: type=1400 audit(2000000101.180:10842): avc: denied { bind } for pid=25375 comm="syz.5.5015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1530.122752][T25395] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1530.221648][ T1871] usb usb4-port1: attempt power cycle [ 1530.242025][ T29] audit: type=1400 audit(2000000101.180:10843): avc: denied { create } for pid=25375 comm="syz.5.5015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1530.290621][ T1872] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1530.361645][ T1872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.518338][ T1872] usb 7-1: Product: â  [ 1530.530512][ T1872] usb 7-1: Manufacturer: ê„„î²—ï‡åŸšè²…垄唥蛞䙨ਉ鮽蒇ꌮ픢侘婣ë²çŸè‹ˆì“²ã ë¹¨æ¢¯å’¹äŒ‹ë»›æ¡”ä¾î‹µï»‹ì„굆䮳ì·ç¦®ê½¶Ü´åºåš»âžŠà±èŒˆî´à©›éœ¢î©£ê‡¿ã˜©ã ¶ã¶Šç•³ï€€ì—¡á¯­äªµé¡’囖扃ᓯïµí˜¯ä‡¡î·á”¦ÄŸî›¹â™å™¢îµ„酖삵 [ 1530.615984][ T1871] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1530.926101][ T1871] usb 4-1: device descriptor read/8, error -71 [ 1531.170553][ T1872] usb 7-1: can't set config #1, error -71 [ 1531.199986][ T1872] usb 7-1: USB disconnect, device number 47 [ 1531.303428][T25404] netlink: 'syz.5.5021': attribute type 1 has an invalid length. [ 1531.393719][T25404] netlink: 96 bytes leftover after parsing attributes in process `syz.5.5021'. [ 1531.460313][T25404] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5021'. [ 1531.533609][T25408] overlay: Unknown parameter 'smackfsfloor' [ 1531.557230][T25404] netlink: 'syz.5.5021': attribute type 1 has an invalid length. [ 1531.566780][T25404] netlink: 'syz.5.5021': attribute type 8 has an invalid length. [ 1531.575217][T25404] netlink: 606 bytes leftover after parsing attributes in process `syz.5.5021'. [ 1532.083217][T25421] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5028'. [ 1532.998869][T25436] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5031'. [ 1533.159633][T25436] fuse: Bad value for 'fd' [ 1533.760682][T25460] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1534.172720][T25467] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5039'. [ 1534.365777][T25470] netlink: 'syz.6.5038': attribute type 16 has an invalid length. [ 1534.436749][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 1534.436764][ T29] audit: type=1400 audit(2000000106.018:11101): avc: denied { bpf } for pid=25472 comm="syz.1.5042" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1534.483690][T25470] netlink: 'syz.6.5038': attribute type 17 has an invalid length. [ 1534.752964][ T29] audit: type=1400 audit(2000000106.074:11102): avc: denied { read write } for pid=24674 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1534.832984][T25478] overlay: Unknown parameter 'smackfsfloor' [ 1534.849078][T25470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1534.929328][T25477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5041'. [ 1535.084621][ T29] audit: type=1400 audit(2000000106.074:11103): avc: denied { open } for pid=24674 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1535.485933][ T29] audit: type=1400 audit(2000000106.074:11104): avc: denied { ioctl } for pid=24674 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1535.563830][ T29] audit: type=1400 audit(2000000106.140:11105): avc: denied { unmount } for pid=17017 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1535.624553][T17886] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1535.639084][T25498] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1535.645607][T25498] audit: audit_lost=49 audit_rate_limit=0 audit_backlog_limit=64 [ 1535.653394][T25498] audit: backlog limit exceeded [ 1535.665990][T25498] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1536.249250][T25519] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5054'. [ 1536.604790][T25532] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1536.761842][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1536.768271][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1538.419776][T25553] netlink: 'syz.6.5062': attribute type 12 has an invalid length. [ 1538.492991][T25553] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5062'. [ 1538.599392][T25558] loop6: detected capacity change from 0 to 2640 [ 1538.619414][T25558] buffer_io_error: 24 callbacks suppressed [ 1538.619431][T25558] Buffer I/O error on dev loop6, logical block 0, async page read [ 1538.729142][T25558] Buffer I/O error on dev loop6, logical block 0, async page read [ 1538.789534][T25558] Buffer I/O error on dev loop6, logical block 0, async page read [ 1538.838762][T25558] Buffer I/O error on dev loop6, logical block 0, async page read [ 1538.865959][T25558] Buffer I/O error on dev loop6, logical block 0, async page read [ 1538.938760][T25558] Buffer I/O error on dev loop6, logical block 0, async page read [ 1538.987941][T25558] Buffer I/O error on dev loop6, logical block 0, async page read [ 1539.016594][T25558] Buffer I/O error on dev loop6, logical block 0, async page read [ 1539.032543][T25558] ldm_validate_partition_table(): Disk read failed. [ 1539.078219][ T1872] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1539.114989][T25558] Buffer I/O error on dev loop6, logical block 0, async page read [ 1539.131504][T25558] Buffer I/O error on dev loop6, logical block 0, async page read [ 1539.154016][T25558] Dev loop6: unable to read RDB block 0 [ 1539.169165][T25558] loop6: unable to read partition table [ 1539.224385][T25558] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1539.251723][ T1872] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1539.302214][ T1872] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1539.390009][T25569] netlink: 60 bytes leftover after parsing attributes in process `syz.6.5066'. [ 1539.415807][T25569] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1539.464536][ T1872] usb 6-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1539.482738][ T1872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.516892][T25568] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5065'. [ 1539.541303][ T1872] usb 6-1: config 0 descriptor?? [ 1539.710428][T25572] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5068'. [ 1539.797297][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 1539.797314][ T29] audit: type=1400 audit(2000000111.035:11387): avc: denied { ioctl } for pid=25556 comm="syz.5.5064" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1540.510692][ T29] audit: type=1400 audit(2000000111.166:11388): avc: denied { create } for pid=25573 comm="syz.1.5069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1540.522793][ T1872] usbhid 6-1:0.0: can't add hid device: -71 [ 1540.531326][ T29] audit: type=1400 audit(2000000111.166:11389): avc: denied { create } for pid=25573 comm="syz.1.5069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1540.558094][ T29] audit: type=1400 audit(2000000111.166:11390): avc: denied { read write } for pid=17017 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1540.605060][ T1872] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1540.635983][ T29] audit: type=1400 audit(2000000111.166:11391): avc: denied { open } for pid=17017 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1540.711481][ T1872] usb 6-1: USB disconnect, device number 55 [ 1540.797135][ T29] audit: type=1400 audit(2000000111.166:11392): avc: denied { ioctl } for pid=17017 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1540.846347][ T29] audit: type=1400 audit(2000000111.222:11393): avc: denied { execmem } for pid=25575 comm="syz.4.5070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1540.994529][ T29] audit: type=1400 audit(2000000111.222:11394): avc: denied { create } for pid=25573 comm="syz.1.5069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1541.023139][ T29] audit: type=1400 audit(2000000111.250:11395): avc: denied { create } for pid=25573 comm="syz.1.5069" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1541.078198][ T29] audit: type=1400 audit(2000000111.250:11396): avc: denied { create } for pid=25573 comm="syz.1.5069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1541.311711][ T5932] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1541.608974][ T5932] usb 7-1: Using ep0 maxpacket: 8 [ 1541.702425][ T5932] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1541.776373][T25603] netlink: 'syz.5.5076': attribute type 12 has an invalid length. [ 1541.784383][T25603] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5076'. [ 1541.817810][ T5932] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1541.839362][ T5932] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1541.848559][ T5932] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.856822][ T5932] usb 7-1: Product: syz [ 1541.861528][ T5932] usb 7-1: Manufacturer: syz [ 1541.866244][ T5932] usb 7-1: SerialNumber: syz [ 1541.989102][ T5932] usb 7-1: config 0 descriptor?? [ 1542.197342][T25607] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1542.632704][ T1872] usb 7-1: USB disconnect, device number 48 [ 1542.741486][T25613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5079'. [ 1542.750838][T25613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5079'. [ 1543.105343][T25619] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5080'. [ 1543.163229][T25621] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 1543.170373][T25621] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1543.185600][T25621] vhci_hcd vhci_hcd.0: Device attached [ 1543.331086][ T5932] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1543.777139][ T42] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 1543.854492][ T5933] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1543.868166][ T5932] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.878940][ T5932] usb 4-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1543.892423][ T5932] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1543.908468][ T5932] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1543.917801][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.926215][ T5932] usb 4-1: Product: syz [ 1543.930805][ T5932] usb 4-1: Manufacturer: syz [ 1543.935501][ T5932] usb 4-1: SerialNumber: syz [ 1543.949981][ T5932] usb 4-1: config 0 descriptor?? [ 1543.963938][ T5932] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 1543.973486][ T5932] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 1543.981657][ T5932] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 1543.993802][ T5932] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 1544.004525][ T5932] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 1544.016643][ T5932] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 1544.027992][ T5932] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 1544.037815][ T5933] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1544.046421][ T5932] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 1544.054209][ T5933] usb 5-1: config 0 has no interface number 0 [ 1544.066574][ T5933] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1544.144559][ T5933] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1544.157575][ T5933] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1544.168309][ T5932] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1544.188922][ T5932] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 1544.213351][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.243207][ T5932] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 1544.253707][ T5933] usb 5-1: Product: syz [ 1544.266443][ T5933] usb 5-1: Manufacturer: syz [ 1544.274270][ T5932] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 1544.295733][ T5933] usb 5-1: SerialNumber: syz [ 1544.301147][ T5932] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 1544.320084][ T5933] usb 5-1: config 0 descriptor?? [ 1544.330726][ T5932] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 1544.373725][ T5933] yurex 5-1:0.50: Could not submitting URB [ 1544.388907][ T5933] yurex 5-1:0.50: probe with driver yurex failed with error -5 [ 1544.396860][ T5932] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1544.475885][ T5932] usb 4-1: USB disconnect, device number 32 [ 1544.512598][ T5932] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1544.565638][ T5932] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1544.591432][T25639] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5087'. [ 1544.602508][T25621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1544.618428][ T5932] keyspan 4-1:0.0: device disconnected [ 1544.630763][T25642] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5087'. [ 1544.649588][T25621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1544.827083][ T42] usb 41-1: device descriptor read/64, error -71 [ 1545.152569][ T29] kauditd_printk_skb: 254 callbacks suppressed [ 1545.152585][ T29] audit: type=1400 audit(2000000116.051:11651): avc: denied { read write } for pid=24674 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1545.186170][ T42] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 1545.211835][ T29] audit: type=1400 audit(2000000116.098:11652): avc: denied { read write open } for pid=24674 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1545.241447][ T29] audit: type=1400 audit(2000000116.107:11653): avc: denied { ioctl } for pid=24674 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1545.271259][ T29] audit: type=1400 audit(2000000116.126:11654): avc: denied { allowed } for pid=25651 comm="syz.6.5090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1545.298181][ T29] audit: type=1400 audit(2000000116.126:11655): avc: denied { create } for pid=25651 comm="syz.6.5090" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1545.321798][ T29] audit: type=1400 audit(2000000116.126:11656): avc: denied { map } for pid=25651 comm="syz.6.5090" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=96938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1545.348829][ T29] audit: type=1400 audit(2000000116.126:11657): avc: denied { read write } for pid=25651 comm="syz.6.5090" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=96938 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1545.374713][ T29] audit: type=1400 audit(2000000116.163:11658): avc: denied { read } for pid=25651 comm="syz.6.5090" dev="nsfs" ino=4026532833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1545.400331][ T29] audit: type=1400 audit(2000000116.163:11659): avc: denied { open } for pid=25651 comm="syz.6.5090" path="pid:[4026532833]" dev="nsfs" ino=4026532833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1545.428109][ T29] audit: type=1400 audit(2000000116.182:11660): avc: denied { create } for pid=25651 comm="syz.6.5090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1545.650743][T25655] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1545.707268][T25655] overlayfs: failed to clone lowerpath [ 1546.187481][T25664] netlink: 'syz.1.5092': attribute type 12 has an invalid length. [ 1546.292156][T25664] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5092'. [ 1546.542756][ T5932] usb 5-1: USB disconnect, device number 5 [ 1546.549392][T25622] vhci_hcd: connection closed [ 1546.554021][ T7247] vhci_hcd vhci_hcd.4: stop threads [ 1546.579292][ T7247] vhci_hcd vhci_hcd.4: release socket [ 1546.589696][ T7247] vhci_hcd vhci_hcd.4: disconnect device [ 1546.675179][T13252] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 1547.310160][T13252] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x1 is Bulk; changing to Interrupt [ 1547.320742][T13252] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1547.335124][T13252] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1547.344693][T13252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.353562][T13252] usb 4-1: Product: â  [ 1547.357941][T13252] usb 4-1: Manufacturer: ê„„î²—ï‡åŸšè²…垄唥蛞䙨ਉ鮽蒇ꌮ픢侘婣ë²çŸè‹ˆì“²ã ë¹¨æ¢¯å’¹äŒ‹ë»›æ¡”ä¾î‹µï»‹ì„굆䮳ì·ç¦®ê½¶Ü´åºåš»âžŠà±èŒˆî´à©›éœ¢î©£ê‡¿ã˜©ã ¶ã¶Šç•³ï€€ì—¡á¯­äªµé¡’囖扃ᓯïµí˜¯ä‡¡î·á”¦ÄŸî›¹â™å™¢îµ„酖삵 [ 1547.424609][T25669] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1548.074824][T13252] usb 4-1: USB disconnect, device number 33 [ 1548.951125][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1550.251260][T25708] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1550.510190][ T29] kauditd_printk_skb: 147 callbacks suppressed [ 1550.510207][ T29] audit: type=1400 audit(2000000121.058:11808): avc: denied { write } for pid=25713 comm="syz.3.5108" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1550.630591][ T29] audit: type=1400 audit(2000000121.077:11809): avc: denied { module_request } for pid=25716 comm="syz.1.5109" kmod="fs-logfs" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1550.682179][ T42] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1550.732818][ T29] audit: type=1400 audit(2000000121.086:11810): avc: denied { read } for pid=25713 comm="syz.3.5108" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1550.921728][ T29] audit: type=1400 audit(2000000121.086:11811): avc: denied { open } for pid=25713 comm="syz.3.5108" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1550.945899][ T29] audit: type=1400 audit(2000000121.086:11812): avc: denied { map_create } for pid=25713 comm="syz.3.5108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1550.967577][ T29] audit: type=1400 audit(2000000121.096:11813): avc: denied { create } for pid=25713 comm="syz.3.5108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1552.083810][ T29] audit: type=1400 audit(2000000121.096:11814): avc: denied { create } for pid=25713 comm="syz.3.5108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1552.104717][ T29] audit: type=1400 audit(2000000121.096:11815): avc: denied { create } for pid=25713 comm="syz.3.5108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1552.127711][ T29] audit: type=1400 audit(2000000121.180:11816): avc: denied { create } for pid=25720 comm="syz.1.5110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1552.197178][ T29] audit: type=1400 audit(2000000121.180:11817): avc: denied { write } for pid=25720 comm="syz.1.5110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1552.317388][T25739] syzkaller0: entered promiscuous mode [ 1552.338353][T25739] syzkaller0: entered allmulticast mode [ 1552.394563][T25739] tipc: Started in network mode [ 1552.399460][T25739] tipc: Node identity 3a5187d8de8e, cluster identity 4711 [ 1552.433499][T25739] tipc: Enabled bearer , priority 0 [ 1552.481509][T25738] tipc: Resetting bearer [ 1552.524374][T25738] tipc: Disabling bearer [ 1553.378180][T25755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5118'. [ 1553.648105][T25759] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5121'. [ 1553.716638][T25764] overlay: Unknown parameter 'smackfsfloor' [ 1554.114440][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 1554.122427][T19281] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1554.368637][ T5932] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1554.564304][T25772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1554.572217][T25772] batadv_slave_0: entered promiscuous mode [ 1555.177641][ T5932] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1555.188095][ T5932] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1555.198011][ T5932] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1555.208609][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1555.219007][ T5932] usb 7-1: SerialNumber: syz [ 1555.466061][ T5932] usb 7-1: 0:2 : does not exist [ 1555.497518][ T5932] usb 7-1: unit 5 not found! [ 1555.621968][ T5932] usb 7-1: USB disconnect, device number 49 [ 1555.705064][T24679] udevd[24679]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1555.855037][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 1555.855053][ T29] audit: type=1400 audit(2000000126.065:12005): avc: denied { execmem } for pid=25785 comm="syz.5.5124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1555.978761][ T29] audit: type=1400 audit(2000000126.149:12006): avc: denied { read } for pid=25785 comm="syz.5.5124" dev="nsfs" ino=4026533376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1556.024542][ T42] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1556.480461][ T29] audit: type=1400 audit(2000000126.149:12007): avc: denied { open } for pid=25785 comm="syz.5.5124" path="net:[4026533376]" dev="nsfs" ino=4026533376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1556.577960][ T29] audit: type=1400 audit(2000000126.149:12008): avc: denied { create } for pid=25785 comm="syz.5.5124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1556.613083][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 1556.621451][ T42] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1556.649850][ T29] audit: type=1400 audit(2000000126.168:12009): avc: denied { ioctl } for pid=25783 comm="syz.4.5130" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1556.676798][ T42] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1556.694320][ T42] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1556.839876][ T42] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1557.005942][ T29] audit: type=1400 audit(2000000126.271:12010): avc: denied { allowed } for pid=25785 comm="syz.5.5124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1557.048907][ T42] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1557.086862][ T29] audit: type=1400 audit(2000000126.280:12011): avc: denied { map_create } for pid=25785 comm="syz.5.5124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1557.113600][ T42] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1557.126355][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1557.154827][ T29] audit: type=1400 audit(2000000126.290:12012): avc: denied { perfmon } for pid=25785 comm="syz.5.5124" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1557.182394][ T42] usb 5-1: Product: syz [ 1557.199099][ T42] usb 5-1: Manufacturer: syz [ 1557.207611][ T42] usb 5-1: SerialNumber: syz [ 1557.238343][ T29] audit: type=1400 audit(2000000126.290:12013): avc: denied { map_read } for pid=25785 comm="syz.5.5124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1557.284327][ T29] audit: type=1400 audit(2000000126.290:12014): avc: denied { prog_load } for pid=25785 comm="syz.5.5124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1557.462452][ T42] cdc_ncm 5-1:1.0: bind() failure [ 1557.525234][ T42] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1557.543452][ T42] cdc_ncm 5-1:1.1: bind() failure [ 1557.578904][ T42] usb 5-1: USB disconnect, device number 6 [ 1557.688563][ T5932] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1558.067345][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 1558.206994][ T5932] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1558.215531][ T5932] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1558.225293][ T5932] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1558.252828][ T5932] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1558.720259][T25821] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5141'. [ 1558.795486][ T5932] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1558.808876][ T5932] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1558.818510][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.834958][T25821] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5141'. [ 1558.930820][ T5933] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1559.138074][T25809] mtd partition "" doesn't have enough space: 0x20003 < 0x2001f, disabled [ 1559.252865][T25809] ftl_cs: FTL header not found. [ 1559.258471][ T5933] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1559.276919][ T5932] usb 4-1: usb_control_msg returned -32 [ 1559.292139][ T5933] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1559.304186][ T5932] usbtmc 4-1:16.0: can't read capabilities [ 1559.320985][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.353097][ T5933] usb 5-1: Product: syz [ 1559.375474][ T5933] usb 5-1: Manufacturer: syz [ 1559.380515][ T5933] usb 5-1: SerialNumber: syz [ 1560.673488][ T1871] usb 4-1: USB disconnect, device number 34 [ 1561.237183][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 1561.237202][ T29] audit: type=1400 audit(2000000131.100:12277): avc: denied { listen } for pid=25855 comm="syz.1.5154" laddr=fe80::13 lport=52206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1561.290051][ T29] audit: type=1400 audit(2000000131.138:12278): avc: denied { setopt } for pid=25855 comm="syz.1.5154" laddr=fe80::13 lport=52206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1561.332961][ T29] audit: type=1400 audit(2000000131.138:12279): avc: denied { accept } for pid=25855 comm="syz.1.5154" laddr=fe80::13 lport=52206 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1561.362168][ T29] audit: type=1400 audit(2000000131.147:12280): avc: denied { read write } for pid=25859 comm="syz.3.5155" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1561.498624][ T29] audit: type=1400 audit(2000000131.147:12281): avc: denied { open } for pid=25859 comm="syz.3.5155" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1561.591251][ T5933] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1561.701651][ T29] audit: type=1400 audit(2000000131.147:12282): avc: denied { remount } for pid=25859 comm="syz.3.5155" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1561.746382][ T5933] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1561.746487][ T29] audit: type=1400 audit(2000000131.147:12283): avc: denied { read } for pid=25859 comm="syz.3.5155" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1561.788081][ T29] audit: type=1400 audit(2000000131.147:12284): avc: denied { open } for pid=25859 comm="syz.3.5155" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1561.805113][ T5933] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 1561.936220][ T29] audit: type=1400 audit(2000000131.147:12285): avc: denied { read } for pid=25859 comm="syz.3.5155" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1561.962224][ T29] audit: type=1400 audit(2000000131.147:12286): avc: denied { read open } for pid=25859 comm="syz.3.5155" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1562.609559][ T5933] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 1562.682482][ T5933] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1562.727680][ T5933] usb 5-1: USB disconnect, device number 7 [ 1562.746261][ T5933] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 1563.346164][T25899] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1563.354645][T25899] overlayfs: failed to clone lowerpath [ 1563.380956][ T42] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 1563.464013][T25906] IPv6: sit1: Disabled Multicast RS [ 1563.960894][ T42] usb 7-1: device descriptor read/64, error -71 [ 1564.269659][ T42] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 1564.475746][ T42] usb 7-1: device descriptor read/64, error -71 [ 1564.615913][ T42] usb usb7-port1: attempt power cycle [ 1564.989212][ T42] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 1565.846453][ T42] usb 7-1: device descriptor read/8, error -71 [ 1566.102688][ T42] usb 7-1: new full-speed USB device number 53 using dummy_hcd [ 1566.145368][ T42] usb 7-1: device descriptor read/8, error -71 [ 1566.275228][ T42] usb usb7-port1: unable to enumerate USB device [ 1566.431749][ T42] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1566.461924][T25954] ntfs3(nbd6): try to read out of volume at offset 0x0 [ 1566.709437][ T42] usb 4-1: Using ep0 maxpacket: 8 [ 1566.716318][ T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1566.728303][ T42] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1566.740781][ T42] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1566.754923][ T29] kauditd_printk_skb: 414 callbacks suppressed [ 1566.754939][ T29] audit: type=1400 audit(2000000136.267:12701): avc: denied { execmem } for pid=25950 comm="syz.6.5175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1566.795523][ T42] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1566.816035][ T42] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1566.875873][ T29] audit: type=1400 audit(2000000136.267:12702): avc: denied { read write } for pid=24674 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1566.905610][ T29] audit: type=1400 audit(2000000136.267:12703): avc: denied { open } for pid=24674 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1566.942927][ T42] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1566.974170][ T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.982290][ T29] audit: type=1400 audit(2000000136.267:12704): avc: denied { ioctl } for pid=24674 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1567.008400][ T42] usb 4-1: Product: syz [ 1567.012822][ T42] usb 4-1: Manufacturer: syz [ 1567.021319][ T42] usb 4-1: SerialNumber: syz [ 1567.056915][ T29] audit: type=1400 audit(2000000136.295:12705): avc: denied { read write } for pid=17017 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1567.405064][ T42] cdc_ncm 4-1:1.0: bind() failure [ 1567.428800][ T42] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1567.436903][ T29] audit: type=1400 audit(2000000136.295:12706): avc: denied { open } for pid=17017 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1567.462432][ T42] cdc_ncm 4-1:1.1: bind() failure [ 1567.477871][ T42] usb 4-1: USB disconnect, device number 35 [ 1567.490128][T25966] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1567.558821][ T29] audit: type=1400 audit(2000000136.295:12707): avc: denied { ioctl } for pid=17017 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1567.685052][ T29] audit: type=1400 audit(2000000136.313:12708): avc: denied { read } for pid=25956 comm="syz.5.5176" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1567.711599][ T29] audit: type=1400 audit(2000000136.313:12709): avc: denied { open } for pid=25956 comm="syz.5.5176" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1567.735922][ T29] audit: type=1400 audit(2000000136.313:12710): avc: denied { ioctl } for pid=25956 comm="syz.5.5176" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1568.302236][ C0] Unknown status report in ack skb [ 1568.532302][ T5933] kernel read not supported for file /1348/net/arp (pid: 5933 comm: kworker/0:7) [ 1568.541836][ T5932] kernel write not supported for file /ppp (pid: 5932 comm: kworker/0:6) [ 1568.561443][T25990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5181'. [ 1568.793815][T25999] ntfs3(nbd6): try to read out of volume at offset 0x0 [ 1570.470144][T26016] netlink: 'syz.5.5193': attribute type 2 has an invalid length. [ 1570.505854][T26019] kAFS: unable to lookup cell '(,c¾ûL' [ 1570.737282][T26024] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1570.746057][T26024] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1570.898365][T26025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5195'. [ 1571.180662][T26037] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=26037 comm=syz.4.5198 [ 1571.382668][ T42] libceph: connect (1)[c::]:6789 error -101 [ 1571.388959][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 1571.695897][ T42] libceph: connect (1)[c::]:6789 error -101 [ 1571.833555][ T42] libceph: mon0 (1)[c::]:6789 connect error [ 1572.041027][T26059] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1572.131143][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 1572.131159][ T29] audit: type=1400 audit(2000000141.302:13015): avc: denied { read write } for pid=17017 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1572.192171][ T29] audit: type=1400 audit(2000000141.330:13016): avc: denied { open } for pid=17017 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1572.221588][T26042] ceph: No mds server is up or the cluster is laggy [ 1572.228340][ T29] audit: type=1400 audit(2000000141.330:13017): avc: denied { ioctl } for pid=17017 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1572.340900][ T29] audit: type=1400 audit(2000000141.442:13018): avc: denied { read write } for pid=24674 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1572.372470][ T29] audit: type=1400 audit(2000000141.442:13019): avc: denied { read write open } for pid=24674 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1572.394061][ T1871] libceph: connect (1)[c::]:6789 error -101 [ 1572.421214][ T29] audit: type=1400 audit(2000000141.442:13020): avc: denied { ioctl } for pid=24674 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1572.447096][ T29] audit: type=1400 audit(2000000141.461:13021): avc: denied { read append } for pid=26062 comm="syz.4.5204" name="frontend0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1572.458021][ T1871] libceph: mon0 (1)[c::]:6789 connect error [ 1572.471138][ T29] audit: type=1400 audit(2000000141.461:13022): avc: denied { open } for pid=26062 comm="syz.4.5204" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1572.471178][ T29] audit: type=1400 audit(2000000141.470:13023): avc: denied { ioctl } for pid=26062 comm="syz.4.5204" path="/dev/dvb/adapter0/frontend0" dev="devtmpfs" ino=928 ioctlcmd=0x6f53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1572.471217][ T29] audit: type=1400 audit(2000000141.480:13024): avc: denied { read } for pid=26065 comm="syz.5.5205" dev="nsfs" ino=4026533376 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1573.982381][T26095] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5213'. [ 1573.991901][T26095] 8021q: VLANs not supported on caif0 [ 1574.046420][T26098] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5214'. [ 1574.134139][T26103] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5217'. [ 1574.143258][T26103] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5217'. [ 1574.152299][T26103] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5217'. [ 1574.544862][T26110] netlink: 'syz.1.5219': attribute type 1 has an invalid length. [ 1574.562571][T26109] netlink: 'syz.1.5219': attribute type 1 has an invalid length. [ 1574.765846][ T1871] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 1575.068567][ T1871] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1575.105125][ T1871] usb 7-1: not running at top speed; connect to a high speed hub [ 1575.117489][ T1871] usb 7-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1575.134262][ T1871] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1575.156200][ T1871] usb 7-1: string descriptor 0 read error: -22 [ 1575.172648][ T1871] usb 7-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.40 [ 1575.195689][T26118] overlayfs: failed to resolve './file0': -2 [ 1575.201867][ T1871] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.218029][T26106] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1575.356752][T26125] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5223'. [ 1575.609933][T16841] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1575.682064][ T1871] acrux 0003:1A34:F705.0040: unknown main item tag 0x2 [ 1575.695496][ T1871] acrux 0003:1A34:F705.0040: report_id 0 is invalid [ 1575.702127][ T1871] acrux 0003:1A34:F705.0040: item 0 0 1 8 parsing failed [ 1575.717353][ T1871] acrux 0003:1A34:F705.0040: parse failed [ 1575.723158][ T1871] acrux 0003:1A34:F705.0040: probe with driver acrux failed with error -22 [ 1575.791745][T16841] usb 4-1: Using ep0 maxpacket: 8 [ 1575.804321][T26130] netlink: 'syz.4.5226': attribute type 4 has an invalid length. [ 1575.839343][T16841] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 1575.844175][T26134] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5228'. [ 1575.861384][T26127] netlink: 'syz.4.5226': attribute type 4 has an invalid length. [ 1575.877917][T16841] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1575.907216][ T5933] usb 7-1: USB disconnect, device number 54 [ 1575.938233][T16841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.958387][T26137] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5229'. [ 1575.967752][T26137] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5229'. [ 1575.976780][T26137] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5229'. [ 1576.015401][T16841] usb 4-1: Product: syz [ 1576.030740][T16841] usb 4-1: Manufacturer: syz [ 1576.035374][T16841] usb 4-1: SerialNumber: syz [ 1576.057802][T16841] usb 4-1: config 0 descriptor?? [ 1576.084511][T16841] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1576.458278][T16841] usb 4-1: setting power ON [ 1576.486109][T16841] dvb-usb: bulk message failed: -22 (2/0) [ 1576.512933][T16841] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1576.524384][T16841] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1576.534653][T16841] usb 4-1: media controller created [ 1576.563485][T16841] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1577.529944][ T29] kauditd_printk_skb: 321 callbacks suppressed [ 1577.530436][ T29] audit: type=1400 audit(2000000146.337:13346): avc: denied { name_bind } for pid=26147 comm="syz.5.5232" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1578.074818][T16841] usb 4-1: selecting invalid altsetting 6 [ 1578.080950][T16841] usb 4-1: digital interface selection failed (-22) [ 1578.087552][T16841] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1578.117361][ T29] audit: type=1400 audit(2000000146.337:13347): avc: denied { node_bind } for pid=26147 comm="syz.5.5232" saddr=224.0.0.2 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1578.179310][T16841] usb 4-1: setting power OFF [ 1578.183945][T16841] dvb-usb: bulk message failed: -22 (2/0) [ 1578.293824][ T29] audit: type=1400 audit(2000000146.543:13348): avc: denied { allowed } for pid=26147 comm="syz.5.5232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1578.562972][T16841] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1578.575258][T16841] (NULL device *): no alternate interface [ 1578.587130][ T29] audit: type=1400 audit(2000000146.543:13349): avc: denied { sqpoll } for pid=26147 comm="syz.5.5232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1578.633480][ T29] audit: type=1400 audit(2000000146.552:13350): avc: denied { create } for pid=26147 comm="syz.5.5232" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1578.655546][ T29] audit: type=1400 audit(2000000146.571:13351): avc: denied { allowed } for pid=26147 comm="syz.5.5232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1578.807858][ T29] audit: type=1400 audit(2000000146.571:13352): avc: denied { create } for pid=26147 comm="syz.5.5232" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1578.838521][T26174] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1578.883575][T26174] audit: audit_lost=53 audit_rate_limit=0 audit_backlog_limit=64 [ 1578.935731][T26174] audit: backlog limit exceeded [ 1578.986133][T16841] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1579.013034][T16841] usb 4-1: USB disconnect, device number 36 [ 1579.534284][T26184] __nla_validate_parse: 2 callbacks suppressed [ 1579.534296][T26184] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5240'. [ 1579.549576][T26184] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5240'. [ 1579.605859][T26186] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.5241'. [ 1580.723281][ T5933] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1580.739788][T26223] netlink: 'syz.4.5251': attribute type 12 has an invalid length. [ 1580.747838][T26223] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5251'. [ 1580.756985][ T1872] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1580.941660][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 1580.949365][ T5933] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.960579][ T5933] usb 4-1: config 0 has no interfaces? [ 1580.960663][ T1872] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1580.981549][ T5933] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1581.013688][ T5933] usb 4-1: config 0 has no interfaces? [ 1581.020265][ T1872] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1581.021147][ T5933] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1581.053689][ T5933] usb 4-1: config 0 has no interfaces? [ 1581.067704][ T5933] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1581.078858][ T5933] usb 4-1: config 0 has no interfaces? [ 1581.079854][ T1872] usb 7-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 1581.094731][ T5933] usb 4-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1581.094762][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.097620][ T5933] usb 4-1: config 0 descriptor?? [ 1581.141705][ T1872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.190433][ T1872] usb 7-1: Product: syz [ 1581.201959][ T1872] usb 7-1: Manufacturer: syz [ 1581.276167][ T1872] usb 7-1: SerialNumber: syz [ 1581.276742][T26228] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1581.663597][ T1872] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1581.672429][ T1872] usb 7-1: clock source 0 is not valid, cannot use [ 1581.687403][ T1872] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 1581.696902][ T1872] usb 7-1: clock source 0 is not valid, cannot use [ 1581.790004][ T1872] usb 7-1: USB disconnect, device number 55 [ 1582.094861][T23641] udevd[23641]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1583.294018][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 1583.294994][ T29] audit: type=1400 audit(2000000151.709:13614): avc: denied { create } for pid=26232 comm="syz.4.5254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1583.328097][T26238] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5254'. [ 1583.337388][T26238] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5254'. [ 1583.522101][ T29] audit: type=1400 audit(2000000151.774:13615): avc: denied { create } for pid=26232 comm="syz.4.5254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1583.544476][ T29] audit: type=1400 audit(2000000151.774:13616): avc: denied { write } for pid=26232 comm="syz.4.5254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1583.627260][T26240] overlay: Unknown parameter 'smackfsfloor' [ 1583.768195][T13252] usb 4-1: USB disconnect, device number 37 [ 1584.228057][ T29] audit: type=1400 audit(2000000151.980:13617): avc: denied { read write } for pid=19272 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1584.319437][ T29] audit: type=1400 audit(2000000151.980:13618): avc: denied { open } for pid=19272 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1584.354533][ T29] audit: type=1400 audit(2000000151.990:13619): avc: denied { ioctl } for pid=19272 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1584.508314][ T29] audit: type=1400 audit(2000000152.036:13620): avc: denied { read write } for pid=24674 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1584.536529][ T29] audit: type=1400 audit(2000000152.036:13621): avc: denied { open } for pid=24674 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1584.660428][T13252] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1584.916034][ T29] audit: type=1400 audit(2000000152.036:13622): avc: denied { ioctl } for pid=24674 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1584.959900][ T29] audit: type=1400 audit(2000000152.046:13623): avc: denied { read } for pid=26239 comm="syz.6.5256" name="usbmon0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1584.984253][T13252] usb 5-1: Using ep0 maxpacket: 16 [ 1584.995525][T13252] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1585.012828][T13252] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1585.032806][T13252] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1585.392977][T13252] usb 5-1: config 0 descriptor?? [ 1585.546926][ T5932] usb 7-1: new low-speed USB device number 56 using dummy_hcd [ 1585.833647][ T5932] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x1 is Bulk; changing to Interrupt [ 1585.874760][T26266] nft_compat: unsupported protocol 5 [ 1586.157742][T13252] mcp2221 0003:04D8:00DD.0041: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1586.187158][ T5932] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1586.462955][T13252] usb 5-1: USB disconnect, device number 8 [ 1587.044551][T26274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5267'. [ 1587.053691][T26274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5267'. [ 1587.100734][T26275] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1587.107306][T26275] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1587.239861][T26275] vhci_hcd vhci_hcd.0: Device attached [ 1587.248656][T26277] vhci_hcd: connection closed [ 1587.250579][T18870] vhci_hcd vhci_hcd.3: stop threads [ 1587.262232][T18870] vhci_hcd vhci_hcd.3: release socket [ 1587.267752][T18870] vhci_hcd vhci_hcd.3: disconnect device [ 1588.056957][T26286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5269'. [ 1588.066007][T26286] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5269'. [ 1588.169912][T26288] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5271'. [ 1588.313407][ T5932] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1588.357075][ T5932] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.402161][ T5932] usb 7-1: can't set config #1, error -71 [ 1588.411538][ T5932] usb 7-1: USB disconnect, device number 56 [ 1588.650730][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 1588.650745][ T29] audit: type=1400 audit(2000000156.763:13855): avc: denied { read write } for pid=19272 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1588.687273][ T29] audit: type=1400 audit(2000000156.763:13856): avc: denied { read write open } for pid=19272 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1588.738222][ T29] audit: type=1400 audit(2000000156.763:13857): avc: denied { ioctl } for pid=19272 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1588.811229][ T29] audit: type=1400 audit(2000000156.884:13858): avc: denied { map_create } for pid=26306 comm="syz.5.5275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1588.865454][T26312] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5276'. [ 1588.874483][T26312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5276'. [ 1588.909018][ T29] audit: type=1400 audit(2000000156.884:13859): avc: denied { map_read map_write } for pid=26306 comm="syz.5.5275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1588.944697][ T29] audit: type=1400 audit(2000000156.931:13860): avc: denied { create } for pid=26309 comm="syz.1.5276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1588.966538][ T29] audit: type=1400 audit(2000000156.959:13861): avc: denied { create } for pid=26309 comm="syz.1.5276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1589.078259][ T29] audit: type=1400 audit(2000000156.959:13862): avc: denied { write } for pid=26309 comm="syz.1.5276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1589.123050][ T29] audit: type=1400 audit(2000000156.978:13863): avc: denied { write } for pid=26309 comm="syz.1.5276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1589.147946][ T29] audit: type=1400 audit(2000000156.978:13864): avc: denied { nlmsg_write } for pid=26309 comm="syz.1.5276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1589.915915][T26325] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5281'. [ 1589.925802][T26325] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5281'. [ 1589.971090][ T5932] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1590.184597][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 1590.194968][ T5932] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1590.205854][ T5932] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 1590.237124][ T5932] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1590.252297][ T5932] usb 5-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 1590.261690][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.270118][ T5932] usb 5-1: Product: syz [ 1590.274415][ T5932] usb 5-1: Manufacturer: syz [ 1590.279706][ T5932] usb 5-1: SerialNumber: syz [ 1590.337678][ T5932] ti_usb_3410_5052 5-1:1.0: TI USB 3410 1 port adapter converter detected [ 1591.519970][ T5932] usb 4-1: new low-speed USB device number 38 using dummy_hcd [ 1592.018728][ T5932] usb 4-1: config 1 interface 0 altsetting 8 endpoint 0x1 is Bulk; changing to Interrupt [ 1592.067916][ T5932] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1592.120378][T26324] overlayfs: failed to clone upperpath [ 1593.261505][ T5933] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1593.312543][T13252] usb 5-1: USB disconnect, device number 9 [ 1593.557356][T26353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5289'. [ 1593.566530][T26353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5289'. [ 1593.575931][ T5933] usb 6-1: Using ep0 maxpacket: 16 [ 1593.618640][ T5933] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1593.767423][ T5933] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1593.777651][ T5932] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1593.786866][ T5933] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1593.799370][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1593.831418][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.872304][ T5932] usb 4-1: can't set config #1, error -71 [ 1593.985278][ T5933] usb 6-1: config 0 descriptor?? [ 1593.991604][ T5932] usb 4-1: USB disconnect, device number 38 [ 1594.000556][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 1594.000572][ T29] audit: type=1400 audit(2000000161.770:14016): avc: denied { ioctl } for pid=26344 comm="syz.5.5285" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1594.444574][T13252] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1594.665273][ T29] audit: type=1400 audit(2000000161.882:14017): avc: denied { prog_load } for pid=26355 comm="syz.3.5290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1594.700934][ T29] audit: type=1400 audit(2000000161.882:14018): avc: denied { bpf } for pid=26355 comm="syz.3.5290" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1594.732494][ T29] audit: type=1400 audit(2000000161.882:14019): avc: denied { execmem } for pid=26355 comm="syz.3.5290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1595.334263][ T29] audit: type=1400 audit(2000000162.986:14020): avc: denied { ioctl } for pid=26351 comm="syz.4.5289" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1595.426970][ T29] audit: type=1400 audit(2000000162.996:14021): avc: denied { ioctl } for pid=26351 comm="syz.4.5289" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1595.460037][ T29] audit: type=1400 audit(2000000163.043:14022): avc: denied { read write } for pid=17886 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1595.468567][T13252] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1595.509001][T26361] overlay: Unknown parameter 'smackfsfloor' [ 1595.509297][T13252] usb 5-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1595.541090][T13252] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1595.548826][ T29] audit: type=1400 audit(2000000163.043:14023): avc: denied { open } for pid=17886 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1595.696552][ T29] audit: type=1400 audit(2000000163.043:14024): avc: denied { ioctl } for pid=17886 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1595.730611][ T29] audit: type=1400 audit(2000000163.061:14025): avc: denied { ioctl } for pid=26351 comm="syz.4.5289" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1596.399852][T13252] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1596.409855][T13252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.425060][T13252] usb 5-1: Product: syz [ 1596.429380][T13252] usb 5-1: Manufacturer: syz [ 1596.435021][T13252] usb 5-1: SerialNumber: syz [ 1596.468024][T13252] usb 5-1: config 0 descriptor?? [ 1596.484629][T13252] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 1596.497540][T13252] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 1596.515212][T13252] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 1596.526224][ T5933] usbhid 6-1:0.0: can't add hid device: -71 [ 1596.532436][ T5933] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1596.548355][T13252] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 1596.568577][ T5933] usb 6-1: USB disconnect, device number 56 [ 1596.579188][T13252] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 1596.595562][T13252] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 1596.620752][T13252] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 1596.643577][T13252] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 1596.668861][T13252] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1596.683713][T13252] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 1596.695955][T13252] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 1596.714019][T13252] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 1596.721750][T13252] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 1596.731504][T13252] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 1596.756341][T13252] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1596.791682][T13252] usb 5-1: USB disconnect, device number 10 [ 1596.827075][T13252] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1596.852596][T13252] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1596.869349][T13252] keyspan 5-1:0.0: device disconnected [ 1597.404366][T26386] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5299'. [ 1597.520505][T26381] overlayfs: failed to clone upperpath [ 1597.599400][ T1872] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1597.769022][ T1872] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1597.798859][T26391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5300'. [ 1597.843406][ T1872] usb 5-1: config 0 has no interfaces? [ 1597.854539][ T1872] usb 5-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=97.b4 [ 1597.865170][ T1872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.917102][T26394] fuse: Bad value for 'user_id' [ 1597.922107][T26394] fuse: Bad value for 'user_id' [ 1598.022712][ T1872] usb 5-1: config 0 descriptor?? [ 1599.703721][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 1599.703956][ T29] audit: type=1400 audit(2000000166.337:14148): avc: denied { prog_load } for pid=26400 comm="syz.3.5302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1599.814682][T26406] No such timeout policy "syz1" [ 1600.059859][ T29] audit: type=1400 audit(2000000166.337:14149): avc: denied { bpf } for pid=26400 comm="syz.3.5302" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1600.110363][ T42] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 1600.198792][T26410] netlink: 'syz.3.5304': attribute type 7 has an invalid length. [ 1600.206850][T26410] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5304'. [ 1600.389205][T16841] usb 5-1: USB disconnect, device number 11 [ 1600.428620][ T29] audit: type=1400 audit(2000000166.346:14150): avc: denied { name_bind } for pid=26400 comm="syz.3.5302" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1600.562424][ T42] usb 6-1: not running at top speed; connect to a high speed hub [ 1600.719005][ T29] audit: type=1400 audit(2000000166.346:14151): avc: denied { node_bind } for pid=26400 comm="syz.3.5302" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1600.755054][ T42] usb 6-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.34 [ 1600.794482][T26415] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5305'. [ 1600.803630][T26415] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5305'. [ 1600.868794][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.887702][ T29] audit: type=1400 audit(2000000166.365:14152): avc: denied { create } for pid=26400 comm="syz.3.5302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1600.915378][ T42] usb 6-1: Product: syz [ 1600.923812][T26421] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1600.926279][ T42] usb 6-1: Manufacturer: syz [ 1600.930876][T26421] audit: audit_lost=58 audit_rate_limit=0 audit_backlog_limit=64 [ 1600.937603][ T42] usb 6-1: SerialNumber: syz [ 1600.947865][T26420] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1600.954409][T26420] audit: audit_lost=59 audit_rate_limit=0 audit_backlog_limit=64 [ 1600.962136][T26420] audit: backlog limit exceeded [ 1601.681221][ T1872] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1601.799130][T26427] netlink: 'syz.4.5309': attribute type 1 has an invalid length. [ 1601.808802][T26427] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5309'. [ 1601.820273][T26427] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5309'. [ 1601.829249][T26427] netlink: 658 bytes leftover after parsing attributes in process `syz.4.5309'. [ 1601.840086][T26428] netlink: 'syz.4.5309': attribute type 1 has an invalid length. [ 1601.849765][ T1872] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.850499][T26428] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5309'. [ 1601.890335][T26428] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5309'. [ 1601.915832][T26430] netlink: 'syz.1.5310': attribute type 12 has an invalid length. [ 1601.925102][T26430] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5310'. [ 1601.931868][ T1872] usb 7-1: config 0 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1601.937573][T26428] netlink: 658 bytes leftover after parsing attributes in process `syz.4.5309'. [ 1601.981356][ T1872] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1602.015730][ T1872] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 1602.038099][ T1872] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.057497][ T1872] usb 7-1: Product: syz [ 1602.068299][ T1872] usb 7-1: Manufacturer: syz [ 1602.085018][ T1872] usb 7-1: SerialNumber: syz [ 1602.129947][ T1872] usb 7-1: config 0 descriptor?? [ 1602.154503][ T1872] keyspan 7-1:0.0: Keyspan 2 port adapter converter detected [ 1602.163890][ T1872] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 87 [ 1602.180414][ T1872] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 7 [ 1602.201186][ T1872] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81 [ 1602.212673][ T1872] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 1602.227643][ T1872] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 1602.242996][ T1872] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 85 [ 1602.259114][ T1872] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 5 [ 1602.280747][ T1872] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1602.301785][ T1872] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 83 [ 1602.319502][ T1872] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 3 [ 1602.334990][ T1872] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 4 [ 1602.353565][ T1872] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 86 [ 1602.385813][ T1872] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 6 [ 1602.399270][ T1872] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1602.407892][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1602.414356][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1602.463097][ T1872] usb 7-1: USB disconnect, device number 57 [ 1602.474985][T26442] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=26442 comm=syz.1.5314 [ 1602.506502][T26442] netlink: 'syz.1.5314': attribute type 1 has an invalid length. [ 1602.514255][T26442] netlink: 'syz.1.5314': attribute type 2 has an invalid length. [ 1602.532738][T26442] macvtap0: entered promiscuous mode [ 1602.538285][T26442] macvtap0: entered allmulticast mode [ 1602.543672][T26442] veth1_vlan: entered allmulticast mode [ 1602.576395][ T1872] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1602.603156][ T1872] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1602.621934][ T1872] keyspan 7-1:0.0: device disconnected [ 1602.657054][ T42] qmi_wwan 6-1:251.0: probe with driver qmi_wwan failed with error -22 [ 1602.696499][ T42] usb 6-1: USB disconnect, device number 57 [ 1603.952725][T26455] fuse: Bad value for 'fd' [ 1605.339944][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 1605.339962][ T29] audit: type=1400 audit(2000000171.522:14377): avc: denied { map_read map_write } for pid=26461 comm="syz.6.5320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1605.489793][ T29] audit: type=1400 audit(2000000171.522:14378): avc: denied { prog_load } for pid=26461 comm="syz.6.5320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1605.518460][ T29] audit: type=1400 audit(2000000171.522:14379): avc: denied { bpf } for pid=26461 comm="syz.6.5320" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1605.542207][ T29] audit: type=1400 audit(2000000171.587:14380): avc: denied { write } for pid=26461 comm="syz.6.5320" name="rt6_stats" dev="proc" ino=4026533110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1605.573324][ T29] audit: type=1400 audit(2000000172.477:14381): avc: denied { read write } for pid=17886 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1605.598452][ T29] audit: type=1400 audit(2000000172.477:14382): avc: denied { read write open } for pid=17886 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1605.624598][ T29] audit: type=1400 audit(2000000172.477:14383): avc: denied { ioctl } for pid=17886 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1605.651496][ T42] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1606.228906][ T29] audit: type=1400 audit(2000000172.486:14384): avc: denied { ioctl } for pid=26474 comm="syz.5.5324" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1606.292132][ T42] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1606.305118][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1606.309184][ T42] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1606.324752][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1606.336897][ T29] audit: type=1400 audit(2000000172.542:14385): avc: denied { execmem } for pid=26479 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1606.336922][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1606.371870][T26486] __nla_validate_parse: 2 callbacks suppressed [ 1606.371890][T26486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5327'. [ 1606.388171][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1606.406047][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1606.413931][ T29] audit: type=1400 audit(2000000172.598:14386): avc: denied { ioctl } for pid=26474 comm="syz.5.5324" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1606.439715][ T42] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1606.453720][ T42] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1606.494241][ T42] usb 6-1: Manufacturer: syz [ 1606.510698][T26411] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1606.531117][ T42] usb 6-1: config 0 descriptor?? [ 1606.683019][T26411] usb 4-1: not running at top speed; connect to a high speed hub [ 1606.702924][ T42] rc_core: IR keymap rc-hauppauge not found [ 1606.708826][ T42] Registered IR keymap rc-empty [ 1606.717251][T26411] usb 4-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.34 [ 1606.754741][ T42] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1606.872982][T26411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.020658][T26411] usb 4-1: Product: syz [ 1607.084012][ T42] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input64 [ 1607.102564][ T5933] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1607.135354][T26411] usb 4-1: Manufacturer: syz [ 1607.153135][T26411] usb 4-1: SerialNumber: syz [ 1607.254778][T26485] lo speed is unknown, defaulting to 1000 [ 1607.286503][ T5933] usb 5-1: Using ep0 maxpacket: 8 [ 1607.294283][ T5933] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1607.321330][ T5933] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 86, changing to 7 [ 1607.351327][ T5933] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 1607.361979][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1607.370650][ T5933] usb 5-1: Product: syz [ 1607.374952][ T5933] usb 5-1: Manufacturer: syz [ 1607.380987][ T5933] usb 5-1: SerialNumber: syz [ 1607.452073][ C1] igorplugusb 6-1:0.0: receive overflow, at least 35 lost [ 1607.613001][ T5933] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1607.624947][ T5933] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1607.665628][ T5933] usb 5-1: USB disconnect, device number 12 [ 1607.676499][T26485] chnl_net:caif_netlink_parms(): no params data found [ 1607.689618][ T42] usb 6-1: USB disconnect, device number 58 [ 1607.732301][T24679] udevd[24679]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1607.888658][T26485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1607.910950][T26485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1607.922328][T26485] bridge_slave_0: entered allmulticast mode [ 1607.929435][T26485] bridge_slave_0: entered promiscuous mode [ 1607.946355][T26485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1607.955427][T26485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1607.964002][T26485] bridge_slave_1: entered allmulticast mode [ 1607.970967][T26485] bridge_slave_1: entered promiscuous mode [ 1608.018756][T26485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1608.037920][T26485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1608.073116][T26485] team0: Port device team_slave_0 added [ 1608.081848][T26485] team0: Port device team_slave_1 added [ 1608.111288][T26485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1608.118822][T26485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1608.146073][T26485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1608.159540][T26485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1608.166557][T26485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1608.204643][T26485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1608.330254][T26485] hsr_slave_0: entered promiscuous mode [ 1608.346176][T26509] overlayfs: failed to clone upperpath [ 1608.356647][T26485] hsr_slave_1: entered promiscuous mode [ 1608.364732][T26485] debugfs: 'hsr0' already exists in 'hsr' [ 1608.370606][T26485] Cannot create hsr debugfs directory [ 1608.586337][ T1872] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1608.638722][ T51] Bluetooth: hci5: command tx timeout [ 1608.909123][T26411] qmi_wwan 4-1:251.0: probe with driver qmi_wwan failed with error -22 [ 1608.932172][T26411] usb 4-1: USB disconnect, device number 39 [ 1608.981342][ T1872] usb 5-1: too many configurations: 53, using maximum allowed: 8 [ 1609.016920][T26520] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1609.024203][T26520] IPv6: NLM_F_CREATE should be set when creating new route [ 1609.086328][ T1872] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1609.095622][T26520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5334'. [ 1609.106609][ T1872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.075693][ T1872] usb 5-1: Product: syz [ 1610.086509][ T1872] usb 5-1: Manufacturer: syz [ 1610.087198][T26520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5334'. [ 1610.097276][ T1872] usb 5-1: SerialNumber: syz [ 1610.158231][T26485] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.221778][T26520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5334'. [ 1610.231123][T26512] lo speed is unknown, defaulting to 1000 [ 1610.231204][T11072] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1610.239981][T26520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5334'. [ 1610.268051][T11072] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1610.312474][T26485] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.335337][T11072] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1610.371307][T11072] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1610.446245][T26485] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.619026][ T1872] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1610.648211][ T1872] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1610.677733][ T1872] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1610.747869][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 1610.747884][ T29] audit: type=1400 audit(2000000177.437:14551): avc: denied { read write } for pid=17886 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1610.780176][ T1872] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1610.798504][T26485] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.825719][ T1872] usb 5-1: USB disconnect, device number 13 [ 1610.839584][ T29] audit: type=1400 audit(2000000177.437:14552): avc: denied { open } for pid=17886 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1610.865203][ T51] Bluetooth: hci5: command tx timeout [ 1610.878661][ T29] audit: type=1400 audit(2000000177.437:14553): avc: denied { ioctl } for pid=17886 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1610.920205][ T29] audit: type=1400 audit(2000000177.521:14554): avc: denied { create } for pid=26531 comm="syz.3.5339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1611.009746][ T29] audit: type=1400 audit(2000000177.530:14555): avc: denied { create } for pid=26531 comm="syz.3.5339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1611.086027][T26485] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1611.094533][ T29] audit: type=1400 audit(2000000177.530:14556): avc: denied { write } for pid=26531 comm="syz.3.5339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1611.121632][T26485] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1611.132683][T26485] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1611.147031][ T29] audit: type=1400 audit(2000000177.530:14557): avc: denied { read } for pid=26531 comm="syz.3.5339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1611.177614][T26485] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1611.186001][ T29] audit: type=1400 audit(2000000177.530:14558): avc: denied { ioctl } for pid=26531 comm="syz.3.5339" path="socket:[100015]" dev="sockfs" ino=100015 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1611.228798][ T29] audit: type=1400 audit(2000000177.530:14559): avc: denied { read write } for pid=26534 comm="syz.5.5338" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1611.280701][ T29] audit: type=1400 audit(2000000177.530:14560): avc: denied { open } for pid=26534 comm="syz.5.5338" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1611.791536][T26553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5341'. [ 1611.823512][T26553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5341'. [ 1611.837084][T26553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5341'. [ 1611.849454][T26553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5341'. [ 1611.860386][T26553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5341'. [ 1612.761342][T26485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1612.779979][T26485] 8021q: adding VLAN 0 to HW filter on device team0 [ 1612.799095][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1612.806269][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1612.837297][ T5932] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1612.872731][T18861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1612.879892][T18861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1613.042855][ T5932] usb 4-1: not running at top speed; connect to a high speed hub [ 1613.057485][ T5932] usb 4-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.34 [ 1613.088166][ T51] Bluetooth: hci5: command tx timeout [ 1613.096636][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.114399][ T5932] usb 4-1: Product: syz [ 1613.125324][ T5932] usb 4-1: Manufacturer: syz [ 1613.136875][ T5932] usb 4-1: SerialNumber: syz [ 1613.202141][T26559] overlayfs: failed to clone upperpath [ 1613.800648][ T5933] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1614.075940][ T5933] usb 5-1: Using ep0 maxpacket: 16 [ 1614.088584][ T5933] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 1614.102691][ T5933] usb 5-1: config 1 has no interface number 0 [ 1614.115848][ T5933] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1614.141706][ T5933] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1614.150954][T26485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1614.165050][ T5933] usb 5-1: config 1 interface 105 has no altsetting 0 [ 1614.183436][ T5933] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1614.198151][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1614.235240][ T5933] usb 5-1: Product: syz [ 1614.243108][T26485] veth0_vlan: entered promiscuous mode [ 1614.250494][ T5933] usb 5-1: Manufacturer: syz [ 1614.270841][ T5933] usb 5-1: SerialNumber: syz [ 1614.271904][T26485] veth1_vlan: entered promiscuous mode [ 1614.300243][T26567] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1614.309723][T26567] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1614.344617][T26583] tipc: Started in network mode [ 1614.364334][T26583] tipc: Node identity ac1414aa, cluster identity 4711 [ 1614.394085][T26583] tipc: New replicast peer: 100.1.1.1 [ 1614.463654][T26583] tipc: Enabled bearer , priority 10 [ 1614.715428][T26587] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5349'. [ 1614.752217][T26485] veth0_macvtap: entered promiscuous mode [ 1614.778364][T26485] veth1_macvtap: entered promiscuous mode [ 1614.838741][T26485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1614.880219][T26485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1614.897406][T18865] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.914934][T18865] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1614.939989][T26567] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1614.950277][T26567] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1614.982489][T18865] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.085083][T11072] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1615.165311][ C0] hrtimer: interrupt took 34955 ns [ 1615.181878][T10199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1615.305242][ T5932] qmi_wwan 4-1:251.0: probe with driver qmi_wwan failed with error -22 [ 1615.307049][ T51] Bluetooth: hci5: command tx timeout [ 1615.316046][T10199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1615.423027][T26596] netlink: 'syz.5.5351': attribute type 4 has an invalid length. [ 1615.613169][ T5932] usb 4-1: USB disconnect, device number 40 [ 1615.671490][ T42] tipc: Node number set to 2886997162 [ 1615.728292][T26603] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5346'. [ 1616.104101][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 1616.104117][ T29] audit: type=1400 audit(2000000182.453:14818): avc: denied { read } for pid=26485 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1616.168839][ T29] audit: type=1400 audit(2000000182.509:14819): avc: denied { write } for pid=26485 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1616.189944][T11068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1616.199125][T11068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1616.212272][ T29] audit: type=1400 audit(2000000182.509:14820): avc: denied { read } for pid=26485 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1616.236380][ T29] audit: type=1400 audit(2000000182.509:14821): avc: denied { read write } for pid=24674 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1617.574795][ T29] audit: type=1400 audit(2000000182.509:14822): avc: denied { open } for pid=24674 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1617.579312][T26612] netlink: 264 bytes leftover after parsing attributes in process `syz.5.5354'. [ 1617.609213][ T29] audit: type=1400 audit(2000000182.509:14823): avc: denied { ioctl } for pid=24674 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1617.636596][ T5933] aqc111 5-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 1617.653195][ T29] audit: type=1400 audit(2000000182.547:14824): avc: denied { create } for pid=26607 comm="syz.3.5353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1617.674146][ T5933] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 1617.717194][ T5933] usb 5-1: USB disconnect, device number 14 [ 1617.725785][ T29] audit: type=1400 audit(2000000182.556:14825): avc: denied { mounton } for pid=26485 comm="syz-executor" path="/root/syzkaller.7EYf8o/syz-tmp" dev="sda1" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1617.782410][ T29] audit: type=1400 audit(2000000182.556:14826): avc: denied { mount } for pid=26485 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1617.878064][ T29] audit: type=1400 audit(2000000182.556:14827): avc: denied { mounton } for pid=26485 comm="syz-executor" path="/root/syzkaller.7EYf8o/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1618.552382][T11068] Bluetooth: hci4: Frame reassembly failed (-84) [ 1620.404538][T26633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5359'. [ 1620.422911][T26633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5359'. [ 1620.433021][T26633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5359'. [ 1620.442812][T26633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5359'. [ 1620.452103][T26633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5359'. [ 1620.604204][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1621.320649][ T5933] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1621.454895][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 1621.454918][ T29] audit: type=1400 audit(2000000187.460:14946): avc: denied { create } for pid=26643 comm="syz.6.5363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1621.651853][ T29] audit: type=1400 audit(2000000187.460:14947): avc: denied { write } for pid=26643 comm="syz.6.5363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1621.762437][ T29] audit: type=1400 audit(2000000187.460:14948): avc: denied { read } for pid=26643 comm="syz.6.5363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1621.788496][ T5933] usb 4-1: not running at top speed; connect to a high speed hub [ 1621.822699][ T5933] usb 4-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.34 [ 1621.858713][ T29] audit: type=1400 audit(2000000187.460:14949): avc: denied { read } for pid=26643 comm="syz.6.5363" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1621.909189][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.957635][ T29] audit: type=1400 audit(2000000187.460:14950): avc: denied { open } for pid=26643 comm="syz.6.5363" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1621.957650][ T5933] usb 4-1: Product: syz [ 1621.957671][ T5933] usb 4-1: Manufacturer: syz [ 1622.045705][ T5933] usb 4-1: SerialNumber: syz [ 1622.132008][ T29] audit: type=1400 audit(2000000187.507:14951): avc: denied { map_create } for pid=26626 comm="syz.4.5358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1622.277041][T26650] lo speed is unknown, defaulting to 1000 [ 1622.321855][ T29] audit: type=1400 audit(2000000187.516:14952): avc: denied { mounton } for pid=26626 comm="syz.4.5358" path="/436/file0" dev="tmpfs" ino=2460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1622.356747][ T29] audit: type=1400 audit(2000000187.516:14953): avc: denied { prog_load } for pid=26643 comm="syz.6.5363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1622.397934][ T29] audit: type=1400 audit(2000000187.516:14954): avc: denied { bpf } for pid=26643 comm="syz.6.5363" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1622.461802][ T29] audit: type=1400 audit(2000000187.516:14955): avc: denied { perfmon } for pid=26643 comm="syz.6.5363" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1623.805590][T26676] FAULT_INJECTION: forcing a failure. [ 1623.805590][T26676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1623.820015][T26676] CPU: 0 UID: 0 PID: 26676 Comm: syz.6.5370 Tainted: G L syzkaller #0 PREEMPT(full) [ 1623.820043][T26676] Tainted: [L]=SOFTLOCKUP [ 1623.820050][T26676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1623.820058][T26676] Call Trace: [ 1623.820064][T26676] [ 1623.820071][T26676] dump_stack_lvl+0x100/0x190 [ 1623.820103][T26676] should_fail_ex.cold+0x5/0xa [ 1623.820125][T26676] _copy_from_user+0x2e/0xd0 [ 1623.820149][T26676] move_addr_to_kernel+0x65/0x170 [ 1623.820172][T26676] __sys_bind+0x11d/0x260 [ 1623.820195][T26676] ? __pfx___sys_bind+0x10/0x10 [ 1623.820213][T26676] ? __fget_files+0x21f/0x3d0 [ 1623.820235][T26676] ? __pfx_ksys_write+0x10/0x10 [ 1623.820261][T26676] __x64_sys_bind+0x72/0xb0 [ 1623.820281][T26676] ? lockdep_hardirqs_on+0x78/0x100 [ 1623.820297][T26676] do_syscall_64+0x106/0xf80 [ 1623.820318][T26676] ? clear_bhb_loop+0x40/0x90 [ 1623.820337][T26676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.820352][T26676] RIP: 0033:0x7f7f1e79c799 [ 1623.820366][T26676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1623.820380][T26676] RSP: 002b:00007f7f1f660028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1623.820397][T26676] RAX: ffffffffffffffda RBX: 00007f7f1ea15fa0 RCX: 00007f7f1e79c799 [ 1623.820407][T26676] RDX: 000000000000000e RSI: 0000200000000000 RDI: 0000000000000004 [ 1623.820416][T26676] RBP: 00007f7f1f660090 R08: 0000000000000000 R09: 0000000000000000 [ 1623.820426][T26676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1623.820435][T26676] R13: 00007f7f1ea16038 R14: 00007f7f1ea15fa0 R15: 00007fff8e4c5f28 [ 1623.820457][T26676] [ 1624.246630][ T5933] qmi_wwan 4-1:251.0: probe with driver qmi_wwan failed with error -22 [ 1624.267665][ T5933] usb 4-1: USB disconnect, device number 41 [ 1624.590876][T26682] ntfs3(nbd5): try to read out of volume at offset 0x0 [ 1624.784795][T26687] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 1625.108425][T11068] Bluetooth: hci4: Frame reassembly failed (-84) [ 1625.123872][T11068] Bluetooth: hci4: Frame reassembly failed (-84) [ 1625.369487][ T5932] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1625.657950][ T5932] usb 7-1: Using ep0 maxpacket: 16 [ 1625.680951][ T5932] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1625.718113][ T5932] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1625.787616][ T5932] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1625.868322][ T5932] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1625.897727][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.978834][ T5932] usb 7-1: config 0 descriptor?? [ 1626.058557][ C1] Unknown status report in ack skb [ 1626.963071][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 1626.963088][ T29] audit: type=1400 audit(2000000192.243:15134): avc: denied { create } for pid=26706 comm="syz.1.5379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1627.126186][ T29] audit: type=1400 audit(2000000192.252:15135): avc: denied { write } for pid=26706 comm="syz.1.5379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1627.147164][ T29] audit: type=1400 audit(2000000192.608:15136): avc: denied { setopt } for pid=26683 comm="syz.6.5373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1627.558886][ T5932] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 1627.570511][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1627.661818][ T29] audit: type=1400 audit(2000000192.617:15137): avc: denied { bind } for pid=26683 comm="syz.6.5373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1627.685118][ T29] audit: type=1400 audit(2000000192.617:15138): avc: denied { name_bind } for pid=26683 comm="syz.6.5373" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1627.722289][ T5932] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0042/input/input65 [ 1627.736535][ T29] audit: type=1400 audit(2000000192.617:15139): avc: denied { node_bind } for pid=26683 comm="syz.6.5373" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1627.778703][ T29] audit: type=1400 audit(2000000192.617:15140): avc: denied { write } for pid=26683 comm="syz.6.5373" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1627.824908][ T29] audit: type=1400 audit(2000000192.617:15141): avc: denied { connect } for pid=26683 comm="syz.6.5373" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1627.983746][ T5932] microsoft 0003:045E:07DA.0042: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1628.020436][ T29] audit: type=1400 audit(2000000192.617:15142): avc: denied { name_connect } for pid=26683 comm="syz.6.5373" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1628.733917][ T29] audit: type=1400 audit(2000000192.617:15143): avc: denied { unlink } for pid=26690 comm="syz.4.5374" name="#25d" dev="tmpfs" ino=2483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1628.769852][ T5932] usb 7-1: USB disconnect, device number 58 [ 1628.966484][T26721] fido_id[26721]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1629.045363][T16841] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1629.217509][T16841] usb 5-1: not running at top speed; connect to a high speed hub [ 1629.239206][T16841] usb 5-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.34 [ 1629.252746][T16841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1629.261826][T16841] usb 5-1: Product: syz [ 1629.266087][T16841] usb 5-1: Manufacturer: syz [ 1629.277312][T16841] usb 5-1: SerialNumber: syz [ 1629.323628][T19281] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1629.587288][T26735] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5386'. [ 1629.596715][T26735] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5386'. [ 1629.605976][T26735] netlink: 108 bytes leftover after parsing attributes in process `syz.5.5386'. [ 1630.384684][T26747] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5388'. [ 1631.211361][T16841] qmi_wwan 5-1:251.0: probe with driver qmi_wwan failed with error -22 [ 1631.233142][T16841] usb 5-1: USB disconnect, device number 15 [ 1633.397370][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 1633.397411][ T29] audit: type=1400 audit(2000000196.660:15234): avc: denied { read write } for pid=17017 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1633.778471][ T5932] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1633.819695][ T29] audit: type=1400 audit(2000000196.660:15235): avc: denied { open } for pid=17017 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1633.878607][ T29] audit: type=1400 audit(2000000196.660:15236): avc: denied { ioctl } for pid=17017 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1634.025724][ T29] audit: type=1400 audit(2000000198.953:15238): avc: denied { read write } for pid=19272 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1634.323212][ T29] audit: type=1400 audit(2000000198.953:15237): avc: denied { read write } for pid=24674 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1634.339980][T26757] netlink: 'syz.3.5393': attribute type 39 has an invalid length. [ 1634.349167][ T29] audit: type=1400 audit(2000000198.953:15240): avc: denied { open } for pid=19272 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1634.381106][ T29] audit: type=1400 audit(2000000198.953:15239): avc: denied { open } for pid=24674 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1634.415244][ T29] audit: type=1400 audit(2000000198.953:15241): avc: denied { ioctl } for pid=19272 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1634.441947][ T29] audit: type=1400 audit(2000000198.953:15242): avc: denied { ioctl } for pid=24674 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1634.489607][ T29] audit: type=1400 audit(2000000198.991:15243): avc: denied { execmem } for pid=26749 comm="syz.6.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1634.638486][T26756] lo speed is unknown, defaulting to 1000 [ 1635.150239][T26750] overlayfs: failed to clone upperpath [ 1636.666661][T26786] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5397'. [ 1636.676220][T26786] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5397'. [ 1636.685683][T26786] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5397'. [ 1638.472939][T26799] lo speed is unknown, defaulting to 1000 [ 1639.149071][T13252] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 1639.188764][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 1639.188781][ T29] audit: type=1400 audit(2000000203.221:15387): avc: denied { read write } for pid=26803 comm="syz.3.5402" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1639.221001][ T29] audit: type=1400 audit(2000000203.221:15388): avc: denied { open } for pid=26803 comm="syz.3.5402" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1639.251984][ T29] audit: type=1400 audit(2000000203.221:15389): avc: denied { ioctl } for pid=26803 comm="syz.3.5402" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1639.258250][ T5932] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1639.307384][ T29] audit: type=1400 audit(2000000203.230:15390): avc: denied { ioctl } for pid=26803 comm="syz.3.5402" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1639.365400][ T29] audit: type=1400 audit(2000000203.230:15391): avc: denied { prog_load } for pid=26791 comm="syz.1.5399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1639.427301][ T29] audit: type=1400 audit(2000000203.230:15392): avc: denied { bpf } for pid=26791 comm="syz.1.5399" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1639.459341][ T29] audit: type=1400 audit(2000000203.230:15393): avc: denied { perfmon } for pid=26791 comm="syz.1.5399" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1639.481356][ T29] audit: type=1400 audit(2000000203.240:15394): avc: denied { execmem } for pid=26794 comm="syz.4.5401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1639.501093][ T29] audit: type=1400 audit(2000000203.268:15395): avc: denied { ioctl } for pid=26790 comm="syz.5.5400" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1639.513437][ T5932] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1639.542632][ T29] audit: type=1400 audit(2000000203.586:15396): avc: denied { write } for pid=26794 comm="syz.4.5401" name="001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1639.569837][T13252] usb 6-1: not running at top speed; connect to a high speed hub [ 1639.598158][ T5932] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1639.621372][ T5932] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1639.635891][T13252] usb 6-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.34 [ 1639.645257][T13252] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.653273][ T5932] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1639.665829][T13252] usb 6-1: Product: syz [ 1639.670004][T13252] usb 6-1: Manufacturer: syz [ 1639.674599][T13252] usb 6-1: SerialNumber: syz [ 1639.721409][ T5932] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1639.737358][ T5932] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1639.752852][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1639.772759][ T5932] usb 4-1: Product: syz [ 1639.777342][ T5932] usb 4-1: Manufacturer: syz [ 1640.038268][ T5932] cdc_wdm 4-1:1.0: skipping garbage [ 1640.057291][ T5932] cdc_wdm 4-1:1.0: skipping garbage [ 1640.070137][ T5932] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1640.076440][ T5932] cdc_wdm 4-1:1.0: Unknown control protocol [ 1640.161573][T26814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5404'. [ 1640.172196][T26814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5404'. [ 1640.181376][T26814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5404'. [ 1640.191045][T26814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5404'. [ 1640.200151][T26814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5404'. [ 1640.376254][T26824] tmpfs: Unknown parameter '00000000000000000000005' [ 1641.553667][T26837] overlayfs: failed to clone upperpath [ 1641.669725][T13252] qmi_wwan 6-1:251.0: probe with driver qmi_wwan failed with error -22 [ 1641.697565][T13252] usb 6-1: USB disconnect, device number 60 [ 1641.781968][ T5933] usb 4-1: USB disconnect, device number 42 [ 1641.871187][T26844] overlay: Unknown parameter 'smackfsfloor' [ 1642.034962][T26411] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1642.707939][T26411] usb 2-1: device descriptor read/64, error -71 [ 1643.245612][T26411] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1643.501740][T26411] usb 2-1: device descriptor read/64, error -71 [ 1643.580710][T26868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5416'. [ 1643.726522][T26868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5416'. [ 1643.754704][T26868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5416'. [ 1643.772117][T26868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5416'. [ 1643.782539][T26411] usb usb2-port1: attempt power cycle [ 1643.785157][T26868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5416'. [ 1644.159488][T26870] netlink: 'syz.5.5417': attribute type 3 has an invalid length. [ 1644.176113][T26870] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5417'. [ 1644.504041][ T5933] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 1644.555992][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 1644.566986][ T29] audit: type=1400 audit(2000000209.061:15675): avc: denied { map } for pid=26873 comm="syz.4.5419" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=102010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1644.725123][ T29] audit: type=1400 audit(2000000209.061:15676): avc: denied { read write } for pid=26873 comm="syz.4.5419" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=102010 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1644.778048][ T5933] usb 6-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1644.788023][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.885852][ T29] audit: type=1400 audit(2000000209.070:15677): avc: denied { create } for pid=26873 comm="syz.4.5419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1645.376164][ T5933] usb 6-1: config 0 descriptor?? [ 1645.385208][ T5933] pwc: Samsung MPC-C10 USB webcam detected. [ 1645.435707][ T29] audit: type=1400 audit(2000000209.070:15678): avc: denied { write } for pid=26873 comm="syz.4.5419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1645.480592][ T29] audit: type=1400 audit(2000000209.080:15679): avc: denied { read } for pid=26873 comm="syz.4.5419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1645.554313][ T29] audit: type=1400 audit(2000000209.117:15680): avc: denied { read write } for pid=26873 comm="syz.4.5419" name="vbi6" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1645.605143][ T29] audit: type=1400 audit(2000000209.117:15681): avc: denied { read write open } for pid=26873 comm="syz.4.5419" path="/dev/vbi6" dev="devtmpfs" ino=993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1645.670773][ T29] audit: type=1400 audit(2000000209.136:15682): avc: denied { ioctl } for pid=26869 comm="syz.5.5417" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1645.710535][ T29] audit: type=1400 audit(2000000209.304:15683): avc: denied { ioctl } for pid=26869 comm="syz.5.5417" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1645.756223][T13252] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1645.770943][ T5933] pwc: send_video_command error -71 [ 1645.776173][ T5933] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1645.832097][ T29] audit: type=1400 audit(2000000209.501:15684): avc: denied { prog_load } for pid=26881 comm="syz.3.5420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1645.926976][ T5933] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1645.947045][ T5933] usb 6-1: USB disconnect, device number 61 [ 1645.992767][T13252] usb 4-1: not running at top speed; connect to a high speed hub [ 1646.005853][T13252] usb 4-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=d7.34 [ 1646.034060][T13252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1646.044699][T13252] usb 4-1: Product: syz [ 1646.048882][T13252] usb 4-1: Manufacturer: syz [ 1646.075334][T13252] usb 4-1: SerialNumber: syz [ 1646.114536][T26886] comedi comedi1: pcl711: I/O port conflict (0x7,16) [ 1646.366896][T26900] overlay: Unknown parameter 'smackfsfloor' [ 1647.241579][T26894] nbd0: detected capacity change from 0 to 63 [ 1647.604777][ T5932] usb 6-1: new full-speed USB device number 62 using dummy_hcd [ 1647.865252][ T5932] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1647.884892][T19281] block nbd0: Receive control failed (result -104) [ 1647.919723][T13252] qmi_wwan 4-1:251.0: probe with driver qmi_wwan failed with error -22 [ 1647.928815][ T5932] usb 6-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=bd.4e [ 1647.938843][ T5932] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.016981][T13252] usb 4-1: USB disconnect, device number 43 [ 1648.032354][ T5932] usb 6-1: Product: syz [ 1648.058252][ T5932] usb 6-1: Manufacturer: syz [ 1648.062880][ T5932] usb 6-1: SerialNumber: syz [ 1648.254499][ T5932] usb 6-1: config 0 descriptor?? [ 1648.273850][ T5932] upd78f0730 6-1:0.0: upd78f0730 converter detected [ 1648.284579][ T5932] usb 6-1: upd78f0730 converter now attached to ttyUSB0 [ 1648.467653][T26928] netlink: 'syz.1.5430': attribute type 8 has an invalid length. [ 1648.475548][T26928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5430'. [ 1648.499562][T26411] usb 6-1: USB disconnect, device number 62 [ 1648.507923][T26411] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 1648.543701][T26411] upd78f0730 6-1:0.0: device disconnected [ 1648.557423][T26928] bond0: entered promiscuous mode [ 1648.575660][T26928] bond_slave_0: entered promiscuous mode [ 1648.589491][T26928] bond_slave_1: entered promiscuous mode [ 1648.643548][T26928] gretap0: entered promiscuous mode [ 1648.661406][T26928] debugfs: 'hsr1' already exists in 'hsr' [ 1648.684066][T26928] Cannot create hsr debugfs directory [ 1648.757852][T26928] hsr1: entered promiscuous mode [ 1649.230665][T26939] comedi comedi1: pcl711: I/O port conflict (0x7,16) [ 1649.624168][ T5932] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1649.784406][ T5932] usb 7-1: Using ep0 maxpacket: 16 [ 1649.791179][ T5932] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1649.799346][ T5932] usb 7-1: config 0 has no interface number 0 [ 1649.811748][ T5932] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 230, changing to 11 [ 1649.817503][T26957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5436'. [ 1649.850170][ T5932] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25088, setting to 1024 [ 1649.882204][ T5932] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1649.901958][ T5932] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1649.908283][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 1649.908298][ T29] audit: type=1400 audit(2000000214.087:15899): avc: denied { write } for pid=26942 comm="syz.5.5436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1649.981815][ T29] audit: type=1400 audit(2000000214.152:15900): avc: denied { read write } for pid=17017 comm="syz-executor" name="loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1650.018072][ T5932] usb 7-1: Product: syz [ 1650.032401][ T5932] usb 7-1: SerialNumber: syz [ 1650.087612][ T5932] usb 7-1: config 0 descriptor?? [ 1650.175235][ T5932] cm109 7-1:0.8: invalid payload size 1024, expected 4 [ 1650.213734][ T29] audit: type=1400 audit(2000000214.152:15901): avc: denied { open } for pid=17017 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1650.245317][ T29] audit: type=1400 audit(2000000214.152:15902): avc: denied { ioctl } for pid=17017 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=651 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1650.250725][ T5932] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input66 [ 1650.727924][T26947] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1650.747009][ T29] audit: type=1400 audit(2000000214.152:15903): avc: denied { module_request } for pid=26942 comm="syz.5.5436" kmod="nfnetlink-subsys-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1650.778785][ T29] audit: type=1400 audit(2000000214.283:15904): avc: denied { ioctl } for pid=26940 comm="syz.6.5434" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1650.819742][ T29] audit: type=1400 audit(2000000214.293:15905): avc: denied { execmem } for pid=26961 comm="syz.4.5438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1650.851794][ T29] audit: type=1400 audit(2000000214.377:15906): avc: denied { create } for pid=26942 comm="syz.5.5436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1650.882660][ T29] audit: type=1400 audit(2000000214.845:15907): avc: denied { ioctl } for pid=26940 comm="syz.6.5434" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1650.927918][ T29] audit: type=1400 audit(2000000214.863:15908): avc: denied { read } for pid=5165 comm="acpid" name="event4" dev="devtmpfs" ino=5420 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1651.784796][ C0] cm109 7-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1651.784857][T16841] usb 7-1: USB disconnect, device number 59 [ 1651.791793][ C0] ------------[ cut here ]------------ [ 1651.791895][ C0] URB ffff8880a57eb900 submitted while active [ 1651.791909][ C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x15fa/0x1910, CPU#0: syz-executor/17886 [ 1651.791955][ C0] Modules linked in: [ 1651.792023][ C0] CPU: 0 UID: 0 PID: 17886 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1651.792055][ C0] Tainted: [L]=SOFTLOCKUP [ 1651.792065][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1651.792079][ C0] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 1651.792109][ C0] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 4d 77 b8 fa 48 8d 3d 36 fe 95 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 1651.792130][ C0] RSP: 0018:ffffc90000007ab0 EFLAGS: 00010083 [ 1651.792148][ C0] RAX: 0000000000003eda RBX: ffff8880a57eb900 RCX: ffffc90002181000 [ 1651.792162][ C0] RDX: 0000000000040000 RSI: ffff8880a57eb900 RDI: ffffffff90e63c50 [ 1651.792176][ C0] RBP: ffff88805382c058 R08: 0000000000000001 R09: 0000000000000000 [ 1651.792189][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1651.792201][ C0] R13: ffff88805382c057 R14: ffff88809266ae00 R15: 000000000000000f [ 1651.792216][ C0] FS: 0000555591284500(0000) GS:ffff888124345000(0000) knlGS:0000000000000000 [ 1651.929857][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1651.936490][ C0] CR2: 0000200000403030 CR3: 0000000036100000 CR4: 00000000003526f0 [ 1651.944449][ C0] Call Trace: [ 1651.947719][ C0] [ 1651.950552][ C0] cm109_urb_irq_callback+0x479/0xa90 [ 1651.955907][ C0] __usb_hcd_giveback_urb+0x38d/0x610 [ 1651.961264][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 1651.966440][ C0] dummy_timer+0xd85/0x3670 [ 1651.970934][ C0] ? find_held_lock+0x2b/0x80 [ 1651.975591][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1651.981233][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1651.987210][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1651.992133][ C0] ? rcu_is_watching+0x12/0xc0 [ 1651.996874][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1652.002661][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1652.007587][ C0] __hrtimer_run_queues+0x50e/0xa70 [ 1652.012791][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1652.018489][ C0] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 1652.024539][ C0] hrtimer_run_softirq+0x17d/0x350 [ 1652.029624][ C0] handle_softirqs+0x1eb/0x9e0 [ 1652.034374][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1652.039637][ C0] __irq_exit_rcu+0xef/0x150 [ 1652.044200][ C0] irq_exit_rcu+0x9/0x30 [ 1652.048420][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1652.054028][ C0] [ 1652.056943][ C0] [ 1652.059846][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1652.065814][ C0] RIP: 0010:__do_sys_wait4+0x10/0x170 [ 1652.071159][ C0] Code: ff ff e8 23 25 c7 09 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 41 57 <41> 89 d7 41 56 49 89 f6 41 55 41 54 49 89 cc 53 48 83 e4 f0 48 81 [ 1652.090739][ C0] RSP: 0018:ffffc9000562fef0 EFLAGS: 00000282 [ 1652.096783][ C0] RAX: dffffc0000000000 RBX: ffffc9000562ff48 RCX: 0000000000000000 [ 1652.104729][ C0] RDX: 0000000040000001 RSI: 00007ffd1fe48bbc RDI: 00000000ffffffff [ 1652.112673][ C0] RBP: ffffc9000562fef8 R08: 1ffff92000ac5ff7 R09: 0000000000000000 [ 1652.113769][T26411] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1652.120631][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888056e48000 [ 1652.120651][ C0] R13: 000000000000003d R14: 0000000000000000 R15: 0000000000000000 [ 1652.120678][ C0] do_syscall_64+0x106/0xf80 [ 1652.120702][ C0] ? clear_bhb_loop+0x40/0x90 [ 1652.120728][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.120750][ C0] RIP: 0033:0x7f6aa0f5cfce [ 1652.120767][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1652.120787][ C0] RSP: 002b:00007ffd1fe48b18 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 1652.120807][ C0] RAX: ffffffffffffffda RBX: 0000555591284500 RCX: 00007f6aa0f5cfce [ 1652.120820][ C0] RDX: 0000000040000001 RSI: 00007ffd1fe48bbc RDI: ffffffffffffffff [ 1652.120834][ C0] RBP: 00007ffd1fe48bbc R08: 0000000000000000 R09: 0000000000000000 [ 1652.120847][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000001ba [ 1652.120861][ C0] R13: 0000000000000037 R14: 00000000001918a1 R15: 00007ffd1fe48c10 [ 1652.120889][ C0] [ 1652.120900][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1652.120918][ C0] CPU: 0 UID: 0 PID: 17886 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 1652.120946][ C0] Tainted: [L]=SOFTLOCKUP [ 1652.120954][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1652.120966][ C0] Call Trace: [ 1652.120974][ C0] [ 1652.120982][ C0] dump_stack_lvl+0x100/0x190 [ 1652.121016][ C0] vpanic+0x552/0x970 [ 1652.121037][ C0] ? __pfx_vpanic+0x10/0x10 [ 1652.121063][ C0] panic+0xd1/0xe0 [ 1652.121080][ C0] ? __pfx_panic+0x10/0x10 [ 1652.121111][ C0] check_panic_on_warn.cold+0x19/0x34 [ 1652.121132][ C0] ? usb_submit_urb+0x15fa/0x1910 [ 1652.121160][ C0] __warn.cold+0x191/0x348 [ 1652.121186][ C0] __report_bug+0x296/0x3d0 [ 1652.121210][ C0] ? usb_submit_urb+0x15fa/0x1910 [ 1652.121242][ C0] ? __pfx___report_bug+0x10/0x10 [ 1652.121281][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 1652.121358][ C0] ? kasan_save_track+0x14/0x30 [ 1652.121412][ C0] report_bug_entry+0xe1/0x290 [ 1652.121432][ C0] ? usb_submit_urb+0x15fd/0x1910 [ 1652.121457][ C0] handle_bug+0x1cd/0x2a0 [ 1652.121482][ C0] exc_invalid_op+0x17/0x50 [ 1652.121505][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1652.121524][ C0] RIP: 0010:usb_submit_urb+0x15fd/0x1910 [ 1652.121550][ C0] Code: 00 48 8b 04 24 48 8b 90 b0 00 00 00 e9 73 ff ff ff bb ed ff ff ff e9 be f2 ff ff e8 4d 77 b8 fa 48 8d 3d 36 fe 95 09 48 89 de <67> 48 0f b9 3a bb f0 ff ff ff e9 a0 f2 ff ff c7 44 24 30 00 00 00 [ 1652.121567][ C0] RSP: 0018:ffffc90000007ab0 EFLAGS: 00010083 [ 1652.121583][ C0] RAX: 0000000000003eda RBX: ffff8880a57eb900 RCX: ffffc90002181000 [ 1652.121597][ C0] RDX: 0000000000040000 RSI: ffff8880a57eb900 RDI: ffffffff90e63c50 [ 1652.121609][ C0] RBP: ffff88805382c058 R08: 0000000000000001 R09: 0000000000000000 [ 1652.121621][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1652.121632][ C0] R13: ffff88805382c057 R14: ffff88809266ae00 R15: 000000000000000f [ 1652.121664][ C0] cm109_urb_irq_callback+0x479/0xa90 [ 1652.121689][ C0] __usb_hcd_giveback_urb+0x38d/0x610 [ 1652.121715][ C0] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 1652.121740][ C0] dummy_timer+0xd85/0x3670 [ 1652.121772][ C0] ? find_held_lock+0x2b/0x80 [ 1652.121804][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1652.121827][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1652.121852][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1652.121876][ C0] ? rcu_is_watching+0x12/0xc0 [ 1652.121899][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1652.121929][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1652.121954][ C0] __hrtimer_run_queues+0x50e/0xa70 [ 1652.121982][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1652.122002][ C0] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 1652.122037][ C0] hrtimer_run_softirq+0x17d/0x350 [ 1652.122060][ C0] handle_softirqs+0x1eb/0x9e0 [ 1652.122087][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1652.122113][ C0] __irq_exit_rcu+0xef/0x150 [ 1652.122135][ C0] irq_exit_rcu+0x9/0x30 [ 1652.122155][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1652.122182][ C0] [ 1652.122189][ C0] [ 1652.122197][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1652.122218][ C0] RIP: 0010:__do_sys_wait4+0x10/0x170 [ 1652.122237][ C0] Code: ff ff e8 23 25 c7 09 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 b8 00 00 00 00 00 fc ff df 55 48 89 e5 41 57 <41> 89 d7 41 56 49 89 f6 41 55 41 54 49 89 cc 53 48 83 e4 f0 48 81 [ 1652.122254][ C0] RSP: 0018:ffffc9000562fef0 EFLAGS: 00000282 [ 1652.122269][ C0] RAX: dffffc0000000000 RBX: ffffc9000562ff48 RCX: 0000000000000000 [ 1652.122281][ C0] RDX: 0000000040000001 RSI: 00007ffd1fe48bbc RDI: 00000000ffffffff [ 1652.122293][ C0] RBP: ffffc9000562fef8 R08: 1ffff92000ac5ff7 R09: 0000000000000000 [ 1652.122305][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888056e48000 [ 1652.122316][ C0] R13: 000000000000003d R14: 0000000000000000 R15: 0000000000000000 [ 1652.122347][ C0] do_syscall_64+0x106/0xf80 [ 1652.122368][ C0] ? clear_bhb_loop+0x40/0x90 [ 1652.122396][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.122416][ C0] RIP: 0033:0x7f6aa0f5cfce [ 1652.122433][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1652.122449][ C0] RSP: 002b:00007ffd1fe48b18 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 1652.122467][ C0] RAX: ffffffffffffffda RBX: 0000555591284500 RCX: 00007f6aa0f5cfce [ 1652.122479][ C0] RDX: 0000000040000001 RSI: 00007ffd1fe48bbc RDI: ffffffffffffffff [ 1652.122491][ C0] RBP: 00007ffd1fe48bbc R08: 0000000000000000 R09: 0000000000000000 [ 1652.122503][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000001ba [ 1652.122514][ C0] R13: 0000000000000037 R14: 00000000001918a1 R15: 00007ffd1fe48c10 [ 1652.122540][ C0] [ 1652.129108][ C0] Kernel Offset: disabled