last executing test programs: 9m28.433817349s ago: executing program 32 (id=1677): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x8000, 0x101, 0x3ff, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000440)={r3, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xbb65, 0x9, 0x100, 0x9, 0x6}, &(0x7f00000001c0)=0x98) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$phonet(0x23, 0x2, 0x1) bind$phonet(r5, &(0x7f0000000000)={0x23, 0x5, 0x8, 0x80}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x1010, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f0000fee000/0x11000)=nil, 0x11000, 0x8000, &(0x7f0000000300)=0x9, 0xb4c5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r7, 0xc0a85320, &(0x7f0000000340)={{0x80, 0xfc}, 'port0\x00', 0x0, 0x60000, 0x0, 0xfffffffb, 0x6, 0xfffffffc, 0x10000000, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r7, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x7f}, 'port1\x00', 0x84, 0x101020, 0x4, 0xfffffefe, 0x3, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r6, 0x65, 0x8, 0x0, 0x0) 6m3.346637555s ago: executing program 5 (id=3257): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x8c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 6m1.517935972s ago: executing program 5 (id=3275): getpid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000002c0)={0x2020}, 0x2020) 6m1.403378362s ago: executing program 5 (id=3280): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000bc0)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xe4c, 0x2, 0x3, 0x3865, 0x8, 0x9, 0x1, 0x5, 0x4, 0x81}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 5m58.742112439s ago: executing program 5 (id=3299): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 5m58.647664268s ago: executing program 5 (id=3300): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x7f, @empty, 0xa09b}, {0xa, 0x4ea5, 0x200009, @mcast1, 0x1}, 0xffffffffffffffff, 0x400}}, 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000100)=0x1, 0xe) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5m58.421823794s ago: executing program 5 (id=3301): r0 = socket$key(0xf, 0x3, 0x2) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000e00)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000004340)=ANY=[@ANYBLOB="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"]}, @devid=r7}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003340)={{r2}, 0x0, 0xeeb996c12019035a, @unused=[0x0, 0x0, 0x4, 0xf4b], @devid}) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r8, 0x627, 0x4c1, 0x63, 0x0, 0x0) r9 = timerfd_create(0x6, 0x80000) syz_io_uring_setup(0x58f9, &(0x7f0000001a00)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a}) timerfd_settime(r9, 0x2, &(0x7f00000005c0), 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b0400000004"], 0x18}, 0x1, 0x0, 0x0, 0x2004002c}, 0x20000000) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc02000000000000000000"], 0x88}}, 0x20000000) 5m58.092262677s ago: executing program 33 (id=3301): r0 = socket$key(0xf, 0x3, 0x2) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000e00)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000004340)=ANY=[@ANYBLOB="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"]}, @devid=r7}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003340)={{r2}, 0x0, 0xeeb996c12019035a, @unused=[0x0, 0x0, 0x4, 0xf4b], @devid}) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) r8 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r8, 0x627, 0x4c1, 0x63, 0x0, 0x0) r9 = timerfd_create(0x6, 0x80000) syz_io_uring_setup(0x58f9, &(0x7f0000001a00)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r9, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a}) timerfd_settime(r9, 0x2, &(0x7f00000005c0), 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b0400000004"], 0x18}, 0x1, 0x0, 0x0, 0x2004002c}, 0x20000000) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc02000000000000000000"], 0x88}}, 0x20000000) 5m33.041291316s ago: executing program 4 (id=3485): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006506010100000000000000000100000005000100070000000900020073797a31000000000c0007680800130000000000050005"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 5m32.915424701s ago: executing program 4 (id=3488): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r0, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, 0x0) prlimit64(r2, 0x8, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0x10}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) r9 = inotify_init1(0x800) inotify_add_watch(r9, &(0x7f0000000240)='.\x00', 0x60000526) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r10 = inotify_init1(0x80000) inotify_add_watch(r10, &(0x7f0000005780)='./file0\x00', 0x9400002f) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) 5m31.393983028s ago: executing program 4 (id=3504): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r2, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001040)={{r3}, &(0x7f0000000fc0), &(0x7f0000001000)=r0}, 0x20) 5m31.228464498s ago: executing program 4 (id=3506): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 5m31.079249104s ago: executing program 4 (id=3507): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, 0x7}, 0x1c) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) close(0x3) 5m30.868867961s ago: executing program 4 (id=3509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd27, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x43, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m30.150854203s ago: executing program 34 (id=3509): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd27, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x43, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 5m1.238385315s ago: executing program 3 (id=3664): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0x3aec, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3d}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 4m58.016870029s ago: executing program 3 (id=3677): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) 4m56.856000529s ago: executing program 3 (id=3680): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff886411004048633321fbac14142ce000000162079f4b4d2f87e56dca6aab845013f286dd1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfb, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f0000000040), 0x1004) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'macsec0\x00'}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8924, 0x0) 4m56.608053313s ago: executing program 3 (id=3683): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000023c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xfff7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x6, 0x1, 0x401}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 4m56.349018131s ago: executing program 3 (id=3686): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) 4m56.138414616s ago: executing program 3 (id=3689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x7}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r0, 0x0, 0x1802}]) 4m42.565486015s ago: executing program 7 (id=3760): ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a310000000014000580080002"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)) 4m42.273657186s ago: executing program 7 (id=3763): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x124a, 0x80, 0x0, 0x52}, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0xa3d8, &(0x7f0000000340)=[{&(0x7f00000000c0)='\x009zL', 0x4}], 0x1, 0x0, 0x1, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 4m41.563059586s ago: executing program 35 (id=3689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, 0x7}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r0, 0x0, 0x1802}]) 4m40.294587762s ago: executing program 7 (id=3768): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x100}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x1}], 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 4m39.99143709s ago: executing program 7 (id=3769): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000500)=0x1) 4m38.869412032s ago: executing program 7 (id=3772): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x0, 0x0, 0x3e, 0x0, "bb02a3c364ca41d6357e544508474004000b42a20000000000000010208a0e2f964e0000c534a632cd6193fcf19b2df3eea18afaa4ff1f56c54dc46d8b6d2ccd00a0cf0a007bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x6, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 4m37.719295453s ago: executing program 7 (id=3778): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000005c0)={0x20, 0xc, 0x1, "bf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4m35.688160821s ago: executing program 36 (id=3778): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b01"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000005c0)={0x20, 0xc, 0x1, "bf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m5.182692649s ago: executing program 1 (id=4191): epoll_create1(0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x60004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="1b0000004a0a0600005d23000000000a000620", @ANYRESOCT=r3, @ANYRESDEC=r3, @ANYBLOB="126f906936776b0a34b24013a153ab96e6809e308de73ac057dc89838a319daf3d07716bd0ebe2a00721d27328559060e3e4bd6c45231977bc7ceeb14bb6041f9faec74d532c0097900375b46ee927213e5c00ace356427873ac2a186905701b213fe4c9caf501e7f22ab0ff4349371efe782cdb4d449c15a65bc2521601ee18aa"], 0x1c}}, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000300)={0x0}, 0x1) 2m3.787044942s ago: executing program 1 (id=4194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009b40)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x4, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0xc}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 2m2.395008841s ago: executing program 1 (id=4197): mount_setattr(0xffffffffffffffff, 0x0, 0x8100, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) r4 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc25c4110, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x121000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) write$UHID_INPUT(r7, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(0x0, r9) sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES16=r10, @ANYBLOB="59cf00000000010000000800000014000180"], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x890) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newsa={0x138, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1d19"], 0x20) 2m0.259473381s ago: executing program 1 (id=4200): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) unshare(0x62000000) getpgid(0x0) r4 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x9, 0x4000006, 0x8, 0x209, 0x2]}, &(0x7f0000000180)=0x54) openat$selinux_policy(0xffffff9c, &(0x7f0000000380), 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 1m59.070640748s ago: executing program 1 (id=4205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = userfaultfd(0x80801) setrlimit(0xa, &(0x7f0000000180)={0x0, 0x80000001}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000}) 1m57.246587298s ago: executing program 1 (id=4208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56741, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x5, 0x2, 0xf, 0x4, 0x0, 0xb, 0x2, 0x6, 0x1, 0x4], 0x3, [0x4, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0x7, 0x2, 0x800, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0x0, 0x8, 0x1, 0x6]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\'', 0x1}], 0x1}, 0x4005) 1m42.723014614s ago: executing program 37 (id=4208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56741, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0xc, 0x2, 0x5, 0x2, 0xf, 0x4, 0x0, 0xb, 0x2, 0x6, 0x1, 0x4], 0x3, [0x4, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0x7, 0x2, 0x800, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0x0, 0x8, 0x1, 0x6]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)='\'', 0x1}], 0x1}, 0x4005) 1m11.91918914s ago: executing program 8 (id=4308): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000d3c000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m9.506956256s ago: executing program 8 (id=4310): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004600)=""/102400, 0x19000) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x9) listen(r0, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000040)={0x6, 0x1, 0xfff, 0x3b, 0x8, 0x1e, 0x86, "ff03cae9ffed00000400b2400d0000cba1c4ba00", "39e80000ce00000000000000ffff00000400"}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1m4.988250591s ago: executing program 8 (id=4313): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800, 0x0, 0x3}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000000c0)={0x2c, 0xe, r5, 0x3d, r3}, 0x10) 59.820112526s ago: executing program 8 (id=4323): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_io_uring_setup(0x2, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}]}]}, 0x16c}}, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @broadcast}, {0x0, @random="ffffff001000"}, 0xffffff7d, {0x2, 0x0, @broadcast}, 'veth0_to_team\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/19, @ANYBLOB="d4705c2038df474f340fcd4df2bc26e8f5e53a9c50f7253e4448591f9bc351bbf6ef77e84e542faf234f4f6984f28ae8e6602794f92006142663e40fd7f2fb9ccf2ac9fee5c9e6341476aa5b8ef0c21d540380b567a2c8046f48bde6b0be95f4e0621f761c98abe8042be6d7d5d30675505930aa3a3620b39da4ca4cc2017216a0430700960c6dfca21efee2cf8b0f75782776", @ANYRESHEX, @ANYRES8, @ANYRES32, @ANYRESOCT=r0], 0x98) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000080)="290000001e00190f25003fffffffda060200000000e80001dd000804f4ff0800ea11c21d0005000000", 0x29}], 0x1) 58.811363059s ago: executing program 8 (id=4327): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001cc0)=""/252, 0xfc}], 0x1}}], 0x3, 0x400000a0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) prctl$PR_GET_TIMERSLACK(0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESHEX=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @null, 0x1}, [@default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r2, &(0x7f0000000040)={{0x3, @bcast}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) accept(r2, 0x0, &(0x7f00000000c0)) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x3, 0x1, {0x1, 0x8010000, 0x4d0, 0x40d, 0x6, 0x40004, 0xed1, 0x2, 0x5, 0xc000, 0xfffeffff, r4, r5, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004300)={0x50, 0x0, r3, {0x7, 0x26, 0x5, 0x6100083a, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x80, 0x10001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000002100)="a6c574dd37ad5a06633d06f193c5b957758b45f2f4212a3ce6abbfded4461de98c0780332e9d3bfa72a53a1565605c551d53a1a3df7a15704f14493a1022fbcf144fe898338e9d3ea15101d7e179a6bfc093e7fb9ce3bb0854c64264cf2b2baeee72f52658949c8262186aa1582f932c471e68d5cfabd57f6abc46aa8052b942bac756f03e4a14f3ee3cc55d2aeec21d08ae0cd7a67ba70814ce161c6b7718e96055c1494f55f10673316179e99ce409c9cc18b80a020ea99be8bd3415d4420a9a4c74c9d16b8c6b58517f1380c44b8cee0d164eee6bfadada764eeac74f4c867b5e184dc0918d587bfc577836e9668f0fd44674f1310a910df2dc6e2342d47fbeb890b30d7183595996daa2e6f21fc1541ce0ed0686f2ca5536bfbc851a1ab1575502a19cbd990e954f12e9b7a0985d93c1ca66b268d4bdcdf7c75c17faa6d9b03c9f88fe6d31aaef35d2dc65bc74279983b0c6646475b83c1e01b6c8872d115aa72ae06a18e6d4120f551d2c35fae118d490c50867bf3f6cd2f950f22d6b0c7577e04697bee47b85c6144e2ecf45c4fd93ac1b51e44f98e38f9e9b93c3eb9160404d3a60f808836a8668604ffd8b317f91fd4dae384386c01f5fdebfa643907b5a07ad1423cb0d4a9a68aae6d2b5a912ba0b0789735e73d9a8ed8ae42c92f67f5c3a40e7df5575dd5e033f3bbfc443cfdde1685d9d5c05e8e9469bf7f546398a36cac008bc36520d0e08a4cee2a48ad2ab819524c9e2145f0d9d474acdb028b9cb8248a4d9df5bf6a1bfeea458fedbc039815ffe375cae1fb9be988916c20387318cde61c36b17eea13c176bb106d292728537032cdd79d7c8d48038a6b71aec0d61e774be6ad9f64210957c82dea29ca0991e019455cd7fd2ee2a64491e87e89807be62436132e5a6e75eb14f83885f161bc0c1ad2f3390cf0125712a9f5a14e62be0a9ef23f1eae46680143a83ab24483be91e1c015d4aadeb378c7aab79a474b755e14bbba59f2ac1b80d53d38baee42fd758e9a336ca9044e9fca0146f7168aa4a519e674daf9e061778a74a9ba48c34e1bc8ee86943f37b6fb653a82598902630bd4fa3cf374a622f38dcfe1006a3eed5c31766d13bcb431d7911ed3fd747755300b0343b65de201e0b95599f36cf1971b39fb3bad2448b863df0df7a3ad88741f08b90d7ab7632f481f0a6d1d8cea57d106b54790acb105f5a4030c48a232592a887863710b16abb7357670b36ccfa676d6689bf10b6ff95af963336f89f4136dc9ba2ea1c92bba5cafca6b248b2ffba2737012f29ac03ff59572833c4ff9e1a2ef2571e6962ab67e1e55138ddc4ac90441fa75f0feb9b2e07424bde534f28a50205f1136d9fca176d875bc44e3439c0bda08a2777987bb4e6795f48038f2ac7963d6528fddedf73b8416412031e84fb2ea1374adc4e3999db6339aadbf1c795dac51153f0ac54ca6d418427b696ded56900d663ef962822d67b6c7a6a0d5002f88e24b06ca47529f02ebbfffae34efec65f230de35368054a9d8bd9fc710f005008149019d683c7450234ae571b40e5de4c9178c1f1122aeac8293008a28ead3946bd6287126fdf42fecb03700cb9495b8a9be544aef8b489238020d7b9149f404dc17f61cfa4a3eeae72f46f79fe3f6d384ac2a4db2a45bc8c002ee4d491607e924fefd165c46fb15f2abba54a36a2460b6c2ee63de3e30e98ff3d453fab204eaef89ea21f8117b0e5e5e87eed6e2a3a58d270e65cc92f618b0e445d55f29c031fd36fce5ff62d036902bf5f1e4feb74c571f5f8fe03519d579c78f82efe2dea5192222f42ce4ed35f0f5df316dbe5b1db225b00dbe4e04518bb289c6eecbf2025a6758eb04f3675a9061b5e9ae5a9ec9bc5ee41b08d71c9059d2c68a42da09d2eacd3ace96be1ad943830663052cb8e3872588394453a1aee28cc3f7e4cfe34821cc8c323204a06e9d82fd4f67751c49f17f92dcb30e8f02f3ea24be55fbafa90c501c365cc0349e2c3b6f0f02ac83ff40793c4ed56e294ce28accdf6bbefcbfd0ff538d7cfab35635ed8fc8951a1ccd30b59bbe2c51eafe223b4dfcbdcde2acc437de051f9563b76a4360940a71986d86e0854a2b530ade41bdd87c0234ac5dd42ee03a102932b083e57f65c1019d4054efc1cd25f4f852b9cc6befd387ddecce4da58a466e536ee8f7a3ca5be424c92b1a20eca71d5901f3d62ac1bbcdeeaa2ef90fbcaf35168a1dc0a5cd52ea960ab4c1d0e0a6535afd5f209aa89617be651c4c2cd212445b32e17a04aeca05b42d4788921e5834744e63f13222dc52c90a08b6204d85fb27c9f15de631d53b5ff0ae50b5feb46f7c67363423d24f970e0e950839da3f42016ac2f38859ae4261a1e9da9552b6a17a1d5bcbf27fff17ad05384206948b49ce4c87c80c80edb9a3b5d76d1e64b01ba735f93667b8b378be78935936c2ac1071d7abb977cf01edfe7664858cfd8f846a4de20d98a56860091820f9fe7ca2de7be202b36222b88bd8eac23f41f62e14110afafe64210f4a07f894bfbcb183b87747e362cd5b9e8c50df1453053c18fe121bb7507bc501a46f736bd13d5ecc4fa54dd77e53a604f7232c8331b1b7c0537689fb1945128f975d6405747bcc0d172c19d4fa610cf481a8aacd5f7a7cbef3456a65443322afd137708b3fc8b3ee9b8a4cb38c7b14d4fdd74daa58074bcaf22bca1cc8ec2dd22cde60ba5d892342a14be25b4d897ddb23b8154c6f24a93c00c17acd90522ef7acb80b343ac08b4af83ce8a0c95bbfe140c0f1c572639f4079607a34b8f675cf3ddfc2bff83635f9d13b2375c1d317920530fc72fc774edf8dc4f653d72876c1ae61edc6edb1cbc2edbda7207cca6811175cb8f9205d8be99d81d217e0433ac7d298962b87db00128fff1f3d264c50dedd3ca4bccc8db1c1191c3ea226d351560024be65f4e85f577bf8f06d6528f7c73640cd579ac1677ee58255c1bcedc9670684737173037eddc55bc943b78524f617653a324319f6026b6a9b02cc9e3b58e8b661d5d7805723cc5c476e3b7f04ee7dbfe1af744f756313a2146a84224877cf93d1f27c28e7e21e4d29193d6384c3e9eb337cf67a5b45970c7ec3d5523847d0e7d56cc4f132f160851feeced284fb5a75c203fa6b1e01362ff6da0ebf8d852c90b1a026386253afe5c7a078ecd8c5663bee57b83200653bd2a5e6695a3cc5d466d2e65d81da058107d2422fc99875e95b772608e456471cbbfa2ee8795b45cacb1290563eb23bf534c7db5e47fbee4081013974ce9dac3301d6cd966255e22243c90fc55f4b421940c7e819e5d54f44869943e2f267e3b1b9eafdf61a9157c04e71b756076445ead7851923efa6454ff156b2c3793192fec046b7b7e8947efe0009e9ef049dae89b34dfdc0183cc7a9c7cac4eb13994535e803a7d9f070b95df12bb2ecc30bb518517982be2a274faaec1713a423f020089848326e5fe32c115de0b7f8c2876271a0d17924d246c9e08bb534d741b03646daea5411f1825632caf101ccae49a99b82e3735513947b6c6a4b09b76203547f79f2809c96bef593c6e64bd0eb84b1b11e3de36fe725607df9b3420af6cdead70bc572a44ec1453de49fa1f6843f5e74055cc37aa86a9c06cc8094f3f58f3bac7f7980c1d41729ce1331096fbab86ee7568798a0be045b132ec6c587143ed9071f949f0090b783a1324d76f5aec5559168da67c85e3bb8a48937a214d1f101d7ccff655c5eb778ddd61cde8dc39bb1920e0d7cf418b761ab92bcc677a0c5b6cab85574c1216e3cec682dbfad3a7b053e365578c0c1c7a70a1b48b6744441f1476e13366087913dd41e6d9a272301be9721dc0fc78355fa914b8033c1eec4f2cd0cb39e17603b2f7052619cb52e658c928e3925c326d00016146a754142115d4bafed77a5ad8b541f4e5cb732af4411a1a8833ff4215aa8e0d743ecc63c311bbe3fd21335a82f0648535688434df83e6fe6ea8455294a2bcafff88a0d0485657e7adf5b73083d873cc87ca6cd56593f11642fe27d9a998d55ac7af93b702fe4418d3ce0f2dd73d8c1f60524575119bfe0d961c468a906a0df2868465b5bf5d2018b97c2e11393f673b7199dd0c71df6469f984dbd484cf809ef1f919d1b7fcec368cb93ef49fae9b564a28225c2e2eef782a07f6aa660b2c385ac00a2151e3ccf29344b93621987f57bd29ecde89a2cc8dc87471606cce12f2ac1210358b5f08eddd983e86c02440a9b357f386f8d4ea61b0a73b64427e4e73b174ca05e63ab749626132643d02df141c757485cf729bec5229b91dced3640366200eb3beaacb9e9daf19fe74d7c06c18f3caf4d9ea2cc8fa906f58c620f91fd883dc9f3743f094a4b0c85d78f7ce6cc01c53856be10e861fe347f077399e187d22418c0aad8a913f4cc892c903d544be85be4b031d1028f70acd8184de1c28538001b153bf0bbb65c160339fe34856eca5eda8aaa79d76e4f126b4bbfaac2f44c0d936002ba75b0205a21c4720b0b3ae87f5c458a57254b017c51e3a51e087c3a29a654abe9fe9c21a100122a11f500fca1bf676aaf959980fca9cf1ace013d1de770ceea61e9c831d3a5dd8faab74bf95ee49f1a580e8c4add9cafddade6c761bd100e1658070b8fdba52481144d14fab4771b63a1e1ca1ef6d4edeada494a084bab8a5e4e97d1fb9313330ab144adc08933fcfa71ce95e9a274e5d1deb79705512b74306bbf702db06720abd251f38a4d6c3f8006cd42701e2355e7a5815131530749a409c0d5d993d20a6b82d84e4f14c36ce24c713c53e8edd3d571049838ae8815cbe000e492b645072e8635290d7b4e13439bd7964aa14f5d55b9347df8d7635ff028f4b6c9c21a98d2fc733fab1953ec9f142e95a29df4cb41d7b7863423ff7c39cbe4623bf449d5bc77040d90817ac0048cc360509a5a16c3094a6d57580db5497c3b3d5c62104dc58e851acafebe9eb531018215ff2bf2d58999d6ed966a646dddb0ca203a27978983128949878002ed1ddaa77aea7215e74499f9159cc9955822db1615a258fe65e0561be8c62435b7271b1f2911a9e01439ec15cec3e1f9fd795fa829c20e8729ec79fd064db0a8c2e676b9f3e3f49f05931d79303a9bdfeb04acf35596520383d8e758a889a00e7362cee3717b70cf30abb93a5f2a40ae099c265c2df3c02b4fdc4293d4e7fc26c8887fb9eb9832b716b083cd56d77ec2525ce622a2c088ceda4c753643212e2170e89ae2eb48d99e22c4844553b3ea0eb5383813522bca850896239fd228d4215d4c5b550f041c87b78efc4c1dbb96a6b0c03ab83c7ad4484b487804bc21d2b82f10da8a4fc7bddfe88882d1285e5eb1592ae121dc37b39e0de0c4825639ebf4cb8328c236721ddcb5820f4ca2efdc2bfcebaa0c588b0cac27dc5586aad5043434edcc6c02bf7173cc771d73f369951e97a0ef5cf2deff299adb75e564b3630c41fc059a75c661dc2510a3dbaa265bd700c9e20685991875a352a8083db7560f81cccecbfa3a744cedcd22efa444140e4d1b44ca8694ae7b80854989c393173b2fd8320ffea2d9a20a076357e5005c3c827808ad6a52b8de9968a41e0ac3170ed92f9f5630c62660746badb6894a6ad22b31be6486cd433520fb12c35a2720cc4b26749c0c4fff90060d3e5c4e5a3ea0116e20fe0b540b3b1dfca809b76bdeda4288667dc0b5b12a017fc660ec2f81d2e123c7a44c5a5080cc6bb82dea8c4afdc577c083bfc1030575b566f8a645b625b0afe554c68047ca43b99f9fce1dafe0b8c04c0a96b291cfb57239acdea88a4da0702b28de12fd36f24191e872a1f84a4f9922f54c1ec1c4b334a2637bdf17c0ea02c625d49d5dfb6f3799fd533a2948f4eb715ce107beffca4d4bcda4f74cae225cd2d47e5328ea2d43e90bb5d889cb25582a6dec2074c2a56c9b085da58d04b47f705bd20d2a038e74047995a5a91f130931fc916ee1ce71a6e1e448a692f2038612e4ec92d9aa496bb456303948ee34fa252fdff78c73d0ea3561edaad53a687172928fcc6b4f7c489113444a71073891181c863e1b11fb91ba0ed1362e313738bb094e59848b6686b609820a40f2bb7c06b2ed25f8834550a11be1d48af0260d8b22af8a560b9b995539118a7703621bf4f458d317ff594ff5ad5b54c460b0fbefb26e6afaed183d76f5deb150a96e8afa6ae08bf2e5cf7512ba46d153417530bb0f3d0fbccfa577b6f89d67c3d35402c50ca7e26a037d6e743ced3f562624aee7c9e7edb3e6dc1fc3e692b93b819bfec8e593efc6e5614ab7dc754ae7116c14b52d3cdb5a1fae2b420fcbb0a1df00ba19f61243e94f14324fbe9ff18cb9e9050fc795a9e4951119bf1fab9ea614cec2421d1f60dfb7776c5b689a443785f979c4abc48e730d091a63f8f504e605029a817135597e7556dfa086139077037f313e827f4f1ca48aafafc4c1f8350750c68eebdf64b9f8e7043d3f53fcdc7c3479d09d70305b197e68140b430290d6169a998762af1a6c18d9f5a383503a9861930a0058641e35ebf149bd092a3f16e91779b0782f850c6ceeae5325609431cd363f46c5411ccf4187a30d3681cf28b945b47ac0300522750c706d4e438d848339578b8cefbcbdcd0d0e325a9d201ee670a98e7c79bd695915bca29f1d06ec01b71797088126b936f3233a7e6d9536aa9f09f13bfea01d44508ecdded3819bd1c6efee93703f4886be2fa2e8c93a71955a61f0cf44a9aed26cd75416e83cd87191a6c060484b0cfb50780131141f6cee23e7a0dc395118699422b1ae82199a7482e6637e5f6d0cf95b59463bccbf9a1cb13ddff1510d9e4b6c83f87b54ea388d73bb7b8ea91ef354ab5a7d789ceb116659a9b094fca42bf3b3ca01a6183d0947993d1953ddfe86b4b9ed39ee0457632989bf804e638609c7a5f02ae3375b664f9420b809fcaafb8312f8306d76635fadd3e92c6cbdc4621ff29384d1c171f526446863f5264ba0bbda4591f7c556ef90883db06ea4df05fdc2ba59972efdd10ac63317e97756c596c01b9b63efc66576fc220822fb66e63e49bd6a0bd1af1a67659e36f0f8ce4594fb592c2592b6d59ea6c387c10d83bcb6fafb0ce23eef6f108d1449ee732b75bea6536a1d4279d8c73a873ab0273dbc47b33ced5c18358b719341148c3658ff43bb93ee7240511a549e7908a767ae713f3909f937b876989f2c78d379d5f62ea7fa8c2f872179b90adf80caec5e60965fa003f4c1b022d49b2b056e3f0809ad4667accf069c2d4f93d90a6272c2434566553ff0da6507d6a4680c2ecf6b0810a9777ab213283ebc2cde80001cb3e591ffc0524c2d49e297c98e71595cc7d742ca23fde6976297988fcfdbdb131f82547aa17dc8f2225db8829a8886147cdacaf7478fb383c645d6f87486ab377e83b3b4352330fbf82193aba642e7494fbaa86dd146f3fbcafa68502be06e76f62b43520568977fa3274a1ee63250778dbb50c9b53d559a025dd5dfca0b90c39bec748b7b48f277142e7b8feed18fcbd6d064af6aedbb4af14ed01a8b947d132c439d5fc28972b1f3dc32d1347d0c78d6b0253f5eebe2c2623a0be2f11d48281384c89b8f5e9317c3f9eb5ab19fe113376b5be6d7b13518e11d10f882dbd1a78020634169294b51202691c28a3c78c1dfcf4c90cf9b6bcd89ff2487e237fd8fdcf9438d3d7fe6170d50bc2fe85a0ea92bb74a4d5a4dcae9186b48f1733f165600e3daf69425a40ed47bdf21cce93fa901a6370e67eb5bdd59857742322ad6e9aa86a260f76262faef3c957b293c80a7e26a06d6ac6590a75f47df7784c2bfa51da1ca9b016628b56db020bcb88fd584b2a6e71d97a7505cc692b7c24ca690f54683b913741ed48487e358ac12d1f5082a618344a716bce24d899577a1f6f48b22bd0ebe6cd4f98cfa0bb645a8c28575d171d898a8feaf0578d97ad9a4cc4e0a0c8367202a5bce21a1c14a99073afbcb5399336efee97bd5819cc125d1fc401840e3a31f23b51d5d4e6c9ea449975817f08f742ee5479b9ba24a7b203b82d3e060510e85aab8c32434229e4100b5b1c3760b914e095d071790b65b9bb0a3466d19b206fa415f0f8b0bed0673f6e17e2e5fae3a42a3633c302c140fb82c2f5c01fc470c9c3e68b5c0d52039ef4e50fa31e1bb2019ebb9858b299b69740b2949449d8469d728f892da89e7115de8ee1f777c507bfe98e80d9b4d064fe0889392e5170711988b609972aa8f15525ad2bb1dc0117af0933792aaca6eebdd22ce19639bee25c877d802a503d1354bba99403435db2aeff550c0b477625bd22617398b9124d3edf1306e522cb2f8610bf533cbc55d4d1c5d7ff5d07f87a11494980e97a7c824beb7e16090040d2cbff761b826e8b5831dfcdf000eac2e771a48c6ba846b9ddf36a858099f77d51bbfad480bba9095905d618d7b355e40159f5e48ddd5583ea720ac9c74cb118c011d3ba1c67dc865a8eeab8667e0a81ce5894fd888fe4ec2ff936bfeb45c66cde689e4a4f13bd138e7dc27aa263fb009b81c274bd0d73b35385d99d1d082ebe5cb41de09d274fbd7c1c414f3d1ab45d2e8949cff34106b574710144cf6d2072c380cc9c83ca48b5e057973e73df30821c1478d21bc55a462727263062271d76fea1509b365fbdd92b4c23e088f61fce348ba0e7a3e5de600762c462e063e74981f14520babfc3278326b95419d24f4e4853507acea8a5f7e70c13b31f47dc3d823b3f699a029093b1ccbc564c3be29a974cea6fbecdae3f763fff2e65bfa1a52742fdcde3c9c0644267825576d7268e2bec08bfb52083df7b5bab93fbf2cf6a8d91cda5a04216e8b9d961a28720667d2a1d3098bba17517b74cc93b8e3b65d36c12f10a7e0898db2e1e4daf78a6696e1ee221cb885519cdfbe9284face6a525e4ac8d1d91f46d2dc8331ba90e9613947718bf51476ec3702c21313248edd984c46df760b2d83ce9599fa73508d12f606d4643c25ca38fb97fa43d229a8131332011fa87763ae10d48c5e2be8914c1d40d3e53e52f803804769edbac0e309590e4131982de1baae61ff0f1443b95344c488a7a7f4e0b3034400bddc2ec447a40a36d017b2caba9bda7f03f8cddcceecafa556820ffd3c072ef394a3d809d78f5ef53f57f72012b60ee76940b3aad36c76249a371669ddb0da3227b893b99a355143cab5cfc717658b14133aaf002ea497bd7db4d8f1bbf9934a55777ab886038492a934b1a2a2cce48971ab93c78fe4d45109e5db3c5c276cf99a3cd497023bb2a19b6a186325f72d2d202ff0201caa67ed9901afae678579fd3fce2f5bfaed4a54bd2dbb824f51dfe17d998b0526fa8dc596a80f097c46ce38f5e927ace3d0dc90b9092d619b71e36421fe0869681cdb5e385b794e9ed34932163ffc6b8d21e882b1ff00c7f3db420b8ee19c7c38ec3192de30dc3e5d01f572134c1b25b08f7cd1526fe4a97c1108cd84950a11dc697551b401c4186f2d1e4cd21a2b4fa43ec6c4af09f80bdadebbf121ad2339f6bac808f3a9964516132c3b3d8756f22f7b7b8a8695d3029c45e335c77945b8ae7eca964b77a04a1695d65c4f453f1cd3f6d85ba40764f02007165f1fba3b28d23f88534995119c869a20d48c67f79dd1d259042dd8226732905de52ee1aa570ff4fa732d86cc20a11dace7d65fdf1d26b58384b7f315d11cf3231007584025c3dd9f2d5e38d7c2e3bad6ac85267d31625dbbbce63e9898872f38a303fd638e43c5cefebd719e8efe6b2075f91cbc62cbb6579420016ac0216b667aecb7195da4c4a36477c665fcfef6ad551ea3606a1475230118d95e600cf2abeff563d92e1bc753d10d782a1d95140b5cafae4d2d350e7a84fa3b65723943a97c68cabb776ce502abf2f1f1fb8c1248a9bbf2903c9304fbf9a1219b40f378123b5f8130ba36f3f423327b869605d056a101f64d8d6ca8b59aae0e325ae5e114ea550d11fdf983ac2eedb404a10929eabaf2f7c402b82124c7bb30b5344295818a253012dafa47f6f34b4431f0180cc2859db29b349c6138b538fd4de3863c21c01285600dc1ce73013990e4c1daa03d78878200c639586038620fdb7a9fc844485818edfd2636aec5a2b16af4bff428d2dfe89475ca06776a68d5e4b4761b985095e94cd91d33a3f0a5dfbfc255ab5896491c03044aff1950823358b54edee81afea9b88764a24ac9b917e2cab6cb2ba1c91d10bd0ef8681cea3ad9c59f78882d4aa807a53a106ca2d0738a04457275cfac653638a94577c4ab03c9e5d6de1dc78b487ec918c4a7ca2a8d6ff852e8fa25776aa6f139a3c54693271502b71eaddb461c1819f6d20a79ac7226a177f42df6f4705cc62cc0484b28e5cfdf7fc52b0c582621bacd703a28714175db576ec0bf017c32424675d28d992e46de460b3289fee37b49b356f7842cd94764795c887115419234049a2a2708ae82efb8f10f5d22c2bae2f5c1abb9cd839c6214b0acc0b04fb6cfdf7f3adcadc5189d850dd957c47a4f946ac479a4e124f695d222f37ea07506638e90b86bf3bbb0ccb578bb6fee8941d6e1da1c77996a064c60157b6d417beb1ad5205f210851a079f9ef6e3faf3cab5482cdf7159e78b9d820cfee714a070ad35b91b49cb43b43bb7fbbfd5276b5c2eb0d4ca9ff9b10f0b8ec74233c7aebb2933e4bd5b0a388ed6ceafed8ef995098c2b88d74d2cebd44ba26c27b5d8983394d286156f4b501e45fe5217096b1bfe7b9bb3f6c3b4d2ad15bf1c86ed70ee852c4cfb979eb4a0c826953799a2030322669364aa905092fb45cbeacac44703c70d7e278f1a5926f242d459e36dd8e374f9bb7a0c907db1d4f8c1993ac0244f6d563041a8956ea82b7eef7a63ac200d32ab107d6728610efc530aa5783771a5fbedbf5a379b2923f088cd203e315f41072d83201a1f1fce87d8b7cf2f142e1ff5f8b2f52028e8764e49604b46dc3763f79015183f601e26346606e22c24e1833b2755afa285feb833d3ff3b910846a96e028070f925a6c640d9956c852367e89ca0dda26ad3c22f3c63f87c49f21e62363273579059ec88643943816a0a20caa0d97bb10aa5f1da882d422beefc5f59128636d851427783f1639d25af11d0bf7e8810f2304074f0710b82a1f8fea2f7da16b896783a468aa04e5524d9f118ae733501cfb913c3c2e327b7b5c87e250884667a9fcf29e27c9009c2173853b5ddafd7c6bfffbe1edaaecbf5134aff42876a192e34e32faa8605e1f5dc8553c3e43156126da540ba467be0b3bece1826a85a96232fd37a68bd9a381e96a74f857965477725c28aa908fc8367c7c4024059cd2454cdb0bd00213d70946b1751e133cff48809c6093c6fb00db7e477a86c857c81d39d49f1974d2191f52f737c0f9710a6eb8bf6b86161930b312123840cfc060abd7f69e36a6393036550321d09dc13e484794aa0de078f03d8396464feeb7fe8055b23638d7d780a394013039dd006484051211c862bbfa85e5cfbd77d2ced2f5ddb9229f183fcffd2c5d5bfac00", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)={0xa0, 0x0, 0x7, {{0x0, 0x0, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8000, {0x1000000002, 0x9, 0x200000654, 0x3, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x408, 0xfd55, 0x6000, 0x5, r4, r5, 0x1, 0xffffffff}}, {0x0, 0x6}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60841, 0xb3836f6d7a15f29) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x2808048, &(0x7f00000001c0)='discard') 57.308936109s ago: executing program 8 (id=4330): r0 = socket$key(0xf, 0x3, 0x2) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000e00)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000004340)=ANY=[@ANYBLOB="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"]}, @devid=r8}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003340)={{r2}, 0x0, 0xeeb996c12019035a, @unused=[0x0, 0x0, 0x4, 0xf4b], @devid}) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) r9 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r9, 0x627, 0x4c1, 0x63, 0x0, 0x0) r10 = timerfd_create(0x6, 0x80000) syz_io_uring_setup(0x58f9, &(0x7f0000001a00)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a}) timerfd_settime(r10, 0x2, &(0x7f00000005c0), 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b0400000004"], 0x18}, 0x1, 0x0, 0x0, 0x2004002c}, 0x20000000) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc02000000000000000000"], 0x88}}, 0x20000000) 42.907775274s ago: executing program 38 (id=4330): r0 = socket$key(0xf, 0x3, 0x2) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000a00)={0x0, 0x0, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000e00)={{}, 0x0, 0x2, @inherit={0x60, &(0x7f0000004340)=ANY=[@ANYBLOB="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"]}, @devid=r8}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000003340)={{r2}, 0x0, 0xeeb996c12019035a, @unused=[0x0, 0x0, 0x4, 0xf4b], @devid}) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) r9 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r9, 0x627, 0x4c1, 0x63, 0x0, 0x0) r10 = timerfd_create(0x6, 0x80000) syz_io_uring_setup(0x58f9, &(0x7f0000001a00)={0x0, 0x0, 0x10100, 0x0, 0x104a}, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r10, 0x0, &(0x7f0000002280)=""/4102, 0x1006, 0x1a}) timerfd_settime(r10, 0x2, &(0x7f00000005c0), 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b0400000004"], 0x18}, 0x1, 0x0, 0x0, 0x2004002c}, 0x20000000) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc02000000000000000000"], 0x88}}, 0x20000000) 22.494246856s ago: executing program 0 (id=4400): syz_open_dev$dvb_demux(0x0, 0x0, 0x20000) io_uring_setup(0x1b24, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x123481, 0x127) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r2, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff004) 16.993561372s ago: executing program 0 (id=4414): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80802, 0x0) sendfile(r1, r1, 0x0, 0x6) socket$inet(0x2, 0x1, 0x0) r2 = userfaultfd(0x802) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) syz_open_dev$video(0x0, 0x487, 0x62a7f6c2e4c53d3) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000500)={0x0, 0xaee2, 0x0, 0x6, 0xbfdbfdfc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x3d51, 0xe475, 0x67, 0x0, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x1000000000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002000)=""/102400, 0x19000) 15.290497547s ago: executing program 9 (id=4416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) get_robust_list(r0, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) mount$9p_rdma(&(0x7f00000000c0), &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, 0x0) timerfd_create(0x9, 0x80800) timer_create(0x9, 0x0, &(0x7f0000000500)) timer_settime(0x0, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, r3, 0x0) 14.365536741s ago: executing program 9 (id=4417): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) 13.299598682s ago: executing program 6 (id=4420): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', &(0x7f0000000640)='/selinux/status\x00', 0x0) socket(0x1e, 0x805, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x9, [@decl_tag={0x5, 0x0, 0x0, 0x11, 0x2, 0xffffffff}, @typedef={0x7}]}, {0x0, [0x0, 0x30, 0x2e, 0x5f, 0x61, 0x30, 0x61]}}, 0x0, 0x3d, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x100a7c1, '\x00', 0x0, r5, 0x0, 0x1}, 0x50) 13.020947753s ago: executing program 0 (id=4422): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000004280)={0x0, 0xe, 0x6, [0x0, 0x6, 0x7, 0x2, 0xfe1, 0x8]}, &(0x7f00000042c0)=0x14) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xdc, 0xfffffe0000000001, 0xfa0d, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042801000018006000600800a000004000000040002"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x64000850) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00'}) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002580)={{0x0, r2, 0x0, r4, 0xee01, 0x20, 0x6}, 0x7a6, 0x7, 0xb26, 0x9, 0x0, 0x0, 0x7}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r6, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 12.315016727s ago: executing program 6 (id=4423): open(&(0x7f0000000040)='./file1\x00', 0x1482c0, 0x78e22799f4a46f8e) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40400, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$l2tp(0x2, 0x2, 0x73) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 11.912117655s ago: executing program 9 (id=4424): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x30) r3 = socket$inet_smc(0x2b, 0x1, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150020000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 10.864821485s ago: executing program 9 (id=4425): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x19, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[], 0x0, 0x6}, 0x94) clock_nanosleep(0x2, 0x1, 0x0, 0x0) getsockname(r2, 0x0, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x2, 0xffd, @mcast1}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61142000000000001d430000000000007a0a00fe0000001f6114180000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 9.895506846s ago: executing program 6 (id=4426): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x2, 0x8001, @private2, 0xffffffff}]}, &(0x7f0000003ac0)=0x10) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) 9.842944369s ago: executing program 2 (id=4427): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x2000}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r3, r3, 0x2f, 0x0, @void}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r4, &(0x7f0000002140)=""/17, 0x11, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4048000) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x800) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000001c0)=0x1) r8 = socket$netlink(0x10, 0x3, 0xf) writev(r8, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010006418e01400004fcff", 0x58}], 0x1) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) flistxattr(r7, &(0x7f0000000000)=""/6, 0x6) 8.832218142s ago: executing program 9 (id=4428): socketpair$nbd(0x1, 0x1, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x5, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.706971162s ago: executing program 0 (id=4429): r0 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r4, 0x84, 0x1, 0x0, &(0x7f0000000000)) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='ntfs3\x00', 0x1000080, 0x0) r5 = socket(0x2d, 0x2, 0x0) write$bt_hci(r5, 0x0, 0x0) 8.198052735s ago: executing program 2 (id=4430): syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r4, 0x1e67e000) 8.113275925s ago: executing program 6 (id=4431): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000dc0)={{0x1, 0x3, 0x9, 0x800, 0x5, 0x5}, 0x8d, [0x7, 0x93b, 0x6, 0x1, 0x1, 0xb8a, 0x2f, 0x100, 0x5, 0x7, 0x7, 0x5, 0x41d4, 0x83, 0x4, 0xffffffff, 0x9, 0x1000, 0x77e4, 0xffff0c56, 0x3, 0x1, 0x0, 0x40, 0x9, 0x200, 0x69, 0x4, 0x0, 0x6, 0x3, 0x7, 0x8, 0x8, 0xa522, 0x100, 0xfffffff8, 0x80000001, 0x0, 0x40, 0x1, 0x6, 0x1, 0x7fffffff, 0x5eb9, 0x5, 0x9c05, 0x800000c, 0x401, 0x4, 0x75, 0x817, 0xb, 0x3, 0xda90, 0x7, 0xf, 0xbc4b, 0x106, 0xfd, 0x81, 0x6, 0x101, 0x39, 0xffffff7f, 0x6, 0x5, 0x5, 0x77, 0xfffffffd, 0x0, 0x9, 0x73f, 0x5, 0x8, 0x4, 0x3, 0xffffffff, 0x5, 0x26be23d3, 0x7, 0x2, 0x9, 0x8, 0xdd2, 0xdd2, 0x3, 0x4, 0x2, 0xfff, 0x80000001, 0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x5, 0x6, 0x1, 0x80000001, 0x7, 0x0, 0x40, 0x5, 0x101, 0x8, 0x9, 0x334c230c, 0x6, 0x4, 0xfffffff9, 0x8, 0x3, 0xffff0000, 0x7, 0x2, 0xffffffff, 0x4, 0x3, 0x4, 0x4, 0x3f, 0x81, 0x3, 0x400, 0x4, 0x984, 0x1, 0x6, 0x7, 0x8001, 0x1ff, 0x2a3, 0x6d, 0x1, 0x10000, 0x5, 0x80000000, 0x1d01e, 0x1, 0x3, 0xfffffffb, 0x8, 0x63, 0x400, 0x5, 0x401, 0x4, 0xfff, 0x0, 0x9, 0x3, 0x8, 0xfffffff9, 0x2, 0x80000000, 0x3, 0xc, 0x1, 0xad, 0x100, 0x144, 0x2, 0xfffffffc, 0x2, 0x5, 0x0, 0x5, 0x9, 0x1, 0x4, 0x1000, 0x974, 0x5, 0x2, 0x8, 0x5, 0x88, 0x1000, 0x0, 0x1, 0x2, 0x5, 0x9, 0x0, 0x57a, 0x0, 0x0, 0x6, 0x9, 0x5c, 0x6, 0x9, 0xd22, 0x2, 0x7, 0x10, 0x8, 0xffffffff, 0x2149, 0xf, 0x26a02622, 0x7fff, 0x8, 0x8, 0x7ff, 0x5, 0x8, 0x81, 0x8, 0xff, 0x5, 0xfffffffa, 0x2, 0x2, 0xffff, 0xf, 0x5, 0x7, 0x5, 0x100, 0x1e06, 0xf, 0xdf2, 0x0, 0xbb, 0xfff, 0x400, 0x2, 0x80000000, 0x7, 0x8, 0xf9b, 0x8, 0x7ff, 0x7, 0x3ff, 0x630a, 0x5, 0xcff, 0x9, 0xb7, 0x1, 0xff, 0x4, 0x5, 0x10, 0x1, 0x92a, 0x3, 0x5, 0xd, 0x5, 0x101, 0x6, 0x7fff, 0x800, 0x3, 0x4, 0x0, 0x7f, 0x200, 0x20, 0x7, 0x1000000, 0x0, 0x7f, 0x53, 0x8, 0x8, 0x5, 0x2, 0xf, 0xd81c, 0x840, 0x1, 0x9, 0x2, 0x81, 0x9, 0x3, 0x5, 0x1000, 0x8, 0x47, 0x94, 0x7, 0x8, 0x8001, 0x56f71053, 0x1, 0x867, 0x3ff, 0x40, 0x6, 0x3, 0xfff, 0x5, 0x197, 0x9, 0x6, 0x5, 0x6, 0x7, 0x0, 0x84, 0x3, 0x1ff, 0x400, 0x3, 0xd42, 0x9, 0x5, 0x1ff, 0x4, 0x9, 0xbec, 0x5, 0x7, 0x3, 0x5, 0x64000000, 0x2, 0x1e, 0x3a, 0x6, 0x5, 0x18000, 0x2, 0xffff, 0x9, 0x6, 0x9, 0x0, 0xe4f, 0x67c, 0x27b7, 0xe, 0x9, 0x9, 0x5, 0xd, 0x5, 0x7f, 0x76, 0x9, 0xc4fe, 0x9, 0x3, 0x4, 0x8, 0x87, 0x1, 0x4, 0x6, 0x40, 0x9, 0x8, 0x1, 0x6, 0x8, 0xc75e, 0x4, 0x6, 0x1b, 0xfd3, 0x2, 0x3, 0x9, 0x10, 0x4, 0x5d2f, 0x5, 0x1b, 0x3ff, 0x5, 0x8, 0x6, 0xc000000, 0x5c, 0x9, 0x541b, 0xce, 0x6, 0x4, 0x69f, 0x3, 0x5, 0x7, 0x4, 0x200, 0x7, 0x8, 0x2323, 0xfffffff7, 0xffff, 0x7ff, 0x4, 0xd, 0xffffff42, 0x89, 0x80000001, 0x3ff, 0x3, 0x554, 0xde, 0x0, 0x400, 0x3, 0x9, 0x800, 0x7cb3aca3, 0x6, 0x6, 0x4, 0xf8000000, 0x1, 0xfffffff9, 0x9, 0xffffffff, 0x0, 0x3, 0x10000, 0x4, 0x3, 0x8001, 0x8, 0xbb, 0x5, 0xf548, 0x3, 0x36c, 0xffffffff, 0x10, 0x676, 0xe67, 0x88, 0x808, 0x560, 0x6db5, 0xa7b, 0x2, 0x4, 0x9, 0x3, 0x4, 0xffffffff, 0x6, 0xed2, 0x24bdaad2, 0x9, 0x4, 0x3, 0x1, 0xd599, 0x2, 0x6c51, 0x2, 0x0, 0x0, 0x2, 0xfce6, 0xf, 0xcd0, 0x4, 0xf, 0x0, 0x9, 0x5, 0x200, 0x6, 0x5, 0x2, 0x7, 0x17, 0xc36, 0x0, 0x8fbb, 0x3, 0x5, 0x0, 0x8, 0x8, 0x1, 0x8, 0x1000001, 0x45d8, 0x9, 0x0, 0x60000, 0x7, 0x2, 0xfffffff1, 0x3, 0x2, 0xfffffd67, 0x2, 0x4, 0x5, 0x3, 0x800, 0x10, 0xa, 0xb12c, 0x5ce, 0x1, 0xfffffffd, 0xf9c8, 0x0, 0x80f4, 0x10000, 0x3, 0x8, 0x2, 0x7, 0x5, 0x8, 0x401, 0x7, 0x10, 0x0, 0x6b, 0x100, 0x8, 0x2, 0x2, 0x5273, 0xe45f, 0x10, 0x0, 0x8, 0x4, 0x7, 0x7, 0x6, 0x4, 0x8e8b, 0x5, 0x3, 0x7, 0x3, 0xe535, 0x80, 0x5, 0x6, 0x0, 0x3, 0xff, 0x7fffffff, 0x5, 0x1, 0xa, 0x4, 0x1, 0x31, 0x0, 0xee1, 0x10001, 0x3, 0xfffffffc, 0x4, 0x1, 0x6f9, 0x7, 0xb26c, 0xb, 0x0, 0xfffffff3, 0x4000008, 0x8, 0x3, 0x6, 0xfd, 0x3, 0x3d, 0x6, 0x80000001, 0x5, 0x7, 0x1, 0xffffffff, 0x6, 0x3d29, 0x4, 0x7, 0x8, 0xb04, 0x3, 0xea6, 0x9, 0x101, 0x4, 0x1400, 0xfffffeff, 0x7, 0x2, 0x4, 0x8, 0x7, 0xe, 0x2, 0xc, 0x2, 0x2, 0x64c1, 0x80000000, 0x200, 0x2, 0xfffffffd, 0x1, 0x91, 0x8001, 0x401, 0x781d, 0x80, 0xfffff5b0, 0x8, 0x3, 0x8, 0xfff, 0xcd800000, 0x9, 0x6, 0x0, 0x5b5, 0x7, 0x10, 0x2, 0x5, 0x10001, 0xc, 0x9e9, 0x53, 0xfffffdd5, 0xc, 0xc00, 0x40, 0x401, 0xf2a6, 0x7, 0x3, 0x2, 0x7, 0x3800000, 0x0, 0x3ff, 0x3, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x7, 0xa84d, 0x3, 0xaf, 0xaf72, 0x5f, 0x1, 0xe, 0x6, 0x9, 0x5, 0x7, 0x3, 0x5, 0x3, 0x40, 0x1000, 0x75f1, 0x4, 0x3, 0x1, 0xfffffffd, 0x4, 0x8, 0x10, 0x80, 0x2, 0x6, 0x0, 0xe, 0xc, 0x3, 0x2, 0xd, 0x5, 0xfffff3f2, 0x6, 0x8, 0x3, 0x6, 0x5, 0x3, 0x101, 0x8, 0xbd, 0xa, 0x8, 0xffffed34, 0x8000, 0x2, 0x7, 0x7, 0x55f4727b, 0xd, 0x3b, 0x5, 0x8, 0xffffffff, 0x4, 0x81, 0x6, 0xb, 0x2, 0xa53, 0xff, 0x0, 0x2, 0x5, 0x3233, 0xff, 0x6, 0x2, 0x9, 0x1, 0x0, 0x3ff, 0x5, 0x8, 0x40, 0x0, 0x40, 0x88, 0x5, 0x80, 0x4, 0xd0000000, 0x8, 0x4, 0x5, 0x5, 0x7, 0x0, 0x0, 0x76b, 0xbb, 0x2, 0x5, 0x7fff, 0x9, 0xa, 0x5, 0x80, 0x4, 0x8, 0x8, 0x1f, 0x1, 0x3, 0x4, 0xd126, 0x7, 0x5, 0x0, 0x0, 0x8, 0x4, 0x1, 0x5, 0xfffffffa, 0x8, 0x270b, 0x5, 0x7fff, 0x4, 0x5, 0x6, 0x3, 0x4, 0x13f, 0x0, 0xc906, 0x6, 0x100, 0x4, 0x3, 0x3, 0x7f, 0x2b, 0x4, 0x3, 0x3, 0x8001, 0x46f, 0x19f1, 0x6, 0x20, 0x2, 0x2, 0x6, 0x5, 0x5, 0x401, 0x5, 0x6, 0x5, 0x7, 0xb, 0x200, 0x6, 0x9, 0x7, 0x3, 0x1, 0x7f, 0x9, 0xc3b, 0xfdf5, 0x0, 0x3, 0x0, 0xf, 0x1, 0x800, 0x4f35, 0x1, 0x18, 0x5, 0x0, 0x6, 0xaa5, 0x800, 0xf, 0x7, 0x800, 0x8, 0xfffffffb, 0xff, 0x5, 0x1000, 0x8, 0x81, 0x6, 0x80, 0x9, 0x8, 0x5, 0x8, 0x8, 0x100, 0x5, 0x10, 0x3, 0x7, 0x82, 0x4, 0x40, 0xabde, 0x1, 0xb, 0x8, 0x5, 0x8, 0x7f, 0x100, 0x8, 0x9, 0x6, 0x80000001, 0x2, 0x8, 0x2, 0x7fff, 0x3, 0x6, 0x4, 0x5, 0x3, 0x0, 0x1, 0x8, 0x59, 0x1, 0x0, 0x48, 0xaa19, 0xc, 0x401, 0x1, 0x401, 0x8, 0xc11, 0x4, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x1, 0xc0000, 0x7, 0x4, 0xef47, 0x3, 0x1, 0x0, 0x2, 0x1, 0x0, 0xe14f, 0x5, 0x7, 0x8, 0x7fffffff, 0x7f, 0xffffffff, 0xffffff88, 0x400, 0x7fffffff, 0x10, 0x5, 0x9, 0x5, 0x0, 0xff, 0x0, 0x8, 0x3, 0x5, 0xfffffffc, 0x9, 0x11, 0x9, 0xfffffffe, 0x40, 0x3, 0x7, 0x0, 0x1, 0x2, 0x6, 0x81, 0x4, 0x401, 0x6, 0x5, 0x3, 0x0, 0xd, 0x6, 0xc, 0x2, 0x1, 0xfffffe5c, 0x40, 0x0, 0x9, 0x24, 0x1ff, 0x4, 0xe92, 0x5, 0x6e3, 0x4, 0xff, 0x0, 0xdf, 0x5, 0x7, 0x100, 0x3ac9, 0x10001, 0xae27, 0x80, 0x5, 0x7, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0x1, 0x0, 0x9, 0x331d, 0x5, 0xb9, 0x7, 0x4, 0x4, 0x9, 0x6cf3, 0x8, 0x7, 0xf, 0x80, 0x9, 0xffff, 0x8000, 0x1, 0x2, 0x2, 0xdc0, 0x5, 0x100, 0x9, 0x1, 0xfffffff8, 0x800, 0x3, 0x0, 0x9, 0x644d, 0x93, 0xb0, 0x2, 0x3ff, 0x800, 0xfffffff7, 0x2, 0x0, 0xff]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000090000008400000044010000", @ANYRES32, @ANYBLOB="0000000000e936eb14000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000dc0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000d40), 0x21800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000480)="99", 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1e) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x100000000000f7) keyctl$revoke(0x3, r4) 6.695061375s ago: executing program 2 (id=4432): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x840, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r3, 0x1) 4.82929977s ago: executing program 6 (id=4433): acct(0x0) r0 = dup(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1300"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002000000000000000200000085000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) socket$netlink(0x10, 0x3, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'hsr0\x00'}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @loopback, 0x1}}, 0x0, 0x0, 0x2d, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) r2 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169282, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x2c, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x2c}}, 0x4008000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) ioctl$KDSETMODE(r3, 0x4b3a, 0x1) connect$can_j1939(r3, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x57, 0x0, 0x4, {0xffff, 0x1}, {0x45, 0x5}, @cond=[{0x2, 0x5388, 0x6, 0x800, 0x80cb, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x6, 0x1}]}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) ptrace(0x10, 0x0) 4.483822652s ago: executing program 0 (id=4434): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000845da0341c0000000000"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x3, &(0x7f0000000200)=0x6) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000004000070102ffffff00000000017c00000400420180f9ff7f06004e03c551000000000280080018000000020004003d80"], 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0) ioctl$VIDIOC_G_AUDIO(r9, 0x80345621, &(0x7f0000000340)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000000)={0xa0000001}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f00000000c0)="26fb849147c5", &(0x7f0000000540)=""/4096, &(0x7f0000000140)="f74059939164135b6a576f20d3", &(0x7f0000001540)="69bc6e93505b78d650624097a0665f1de5889a9687e5cf3ef58b8c33cb72988e054975b74b80d67fffe52160b0f791f3bfdf67fce2d9d49dc0da4df77918d33f79691056234fdff77e1a370702c1149a3d63fb68455902738a2f40ab4e9b5db007acf6119bdc2c66be85acee56f4c7897d1d601a19f35d66cba12df034f0d93a4ebc2cde5d175e0599cfcf0e101c75e9430ac7f2fd9e73e8ead098609235a97e33a86096c230074bea4e598b998975006c93975d3883f57c98b8b2fba6ce41a22c1fd41f00", 0x6, r2, 0x4}, 0x38) epoll_pwait(r8, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04000000000010"]) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f00000002c0)) 4.482822338s ago: executing program 2 (id=4435): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x6e60, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0042f5}) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x40100001, 0x80000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x4, 0x5002) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f00000011c0)={0x0, 0x0, r5, r6, 0x2, 0x0, 0xc, 0x802, {0xac7e, 0x1, 0x7, 0x69, 0xf4b, 0x2, 0x2, 0x45, 0x492f, 0xe154, 0x881, 0x0, 0xb3bf, 0xc0000, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.32832613s ago: executing program 2 (id=4436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f0000000300)={0x1, @null, @bpq0, 0xe, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffeff, 0x0, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1a000}}, 0x0) sendmsg$rds(r3, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x3fa3, &(0x7f0000000080)={0x0, 0x15b7, 0x0, 0x3, 0x296}) io_uring_register$IORING_REGISTER_MEM_REGION(r5, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={0x0, 0x0, 0x0, 0x3ff, 0x7}, 0xc4058c0904c1dfaf}, 0x1) 2.960293665s ago: executing program 6 (id=4437): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_POWER(r0, 0x12, 0x4, 0x0, &(0x7f0000000200)=0x3e) syz_usb_connect(0x0, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000050095c20009050000000000000007058433c4"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b000000ff000000324900007f00000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000300), 0x2, r6}, 0x38) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) 2.735478951s ago: executing program 0 (id=4438): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000300), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) socket$packet(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f00000001c0)) socket(0x10, 0x3, 0x0) read(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 2.724433694s ago: executing program 9 (id=4439): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'veth1_to_hsr\x00', 0x200}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000002c0)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x880) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0xffffffff, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') getdents(r3, &(0x7f0000002380)=""/130, 0x82) io_uring_enter(r3, 0x643a, 0x143e, 0x22, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x185802, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000088000000b7030000000800008500000010000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r7, 0x3ba0, &(0x7f00000000c0)={0x48, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000040)}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendfile(0xffffffffffffffff, r4, 0x0, 0x200000) 0s ago: executing program 2 (id=4440): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000f00)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x24, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000041) kernel console output (not intermixed with test programs): _skb: 8 callbacks suppressed [ 1256.112334][ T29] audit: type=1400 audit(2000001830.654:1592): avc: denied { write } for pid=20724 comm="syz.2.3860" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1256.470796][ T29] audit: type=1400 audit(2000001831.043:1593): avc: denied { create } for pid=20733 comm="syz.8.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1256.525946][ T29] audit: type=1400 audit(2000001831.043:1594): avc: denied { bind } for pid=20733 comm="syz.8.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1256.599756][ T29] audit: type=1400 audit(2000001831.064:1595): avc: denied { setopt } for pid=20733 comm="syz.8.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1256.685963][ T29] audit: type=1400 audit(2000001831.064:1596): avc: denied { accept } for pid=20733 comm="syz.8.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1256.775528][ T29] audit: type=1400 audit(2000001831.064:1597): avc: denied { write } for pid=20733 comm="syz.8.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1256.887772][ T29] audit: type=1400 audit(2000001831.064:1598): avc: denied { read } for pid=20733 comm="syz.8.3861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1256.958877][ T29] audit: type=1400 audit(2000001831.463:1599): avc: denied { ioctl } for pid=20740 comm="syz.2.3863" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=83147 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1258.461097][T20767] __nla_validate_parse: 12 callbacks suppressed [ 1258.461123][T20767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3868'. [ 1258.483299][T20764] bond0: (slave syz_tun): Releasing backup interface [ 1258.544649][T20764] bridge0: port 3(batadv0) entered disabled state [ 1258.615707][T20764] bridge_slave_0: left allmulticast mode [ 1258.759315][ T29] audit: type=1400 audit(2000001833.437:1600): avc: denied { mount } for pid=20768 comm="syz.1.3869" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1258.759779][T20764] bridge_slave_0: left promiscuous mode [ 1259.027355][ T29] audit: type=1400 audit(2000001833.479:1601): avc: denied { mounton } for pid=20768 comm="syz.1.3869" path="/790/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1259.046598][T20764] bridge0: port 1(bridge_slave_0) entered disabled state [ 1260.175399][T20764] bridge_slave_1: left allmulticast mode [ 1260.188188][T20764] bridge_slave_1: left promiscuous mode [ 1260.193999][T20764] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.228817][T20764] bond0: (slave bond_slave_0): Releasing backup interface [ 1260.252552][T20764] bond0: (slave bond_slave_1): Releasing backup interface [ 1260.288074][T20764] team0: Port device team_slave_0 removed [ 1260.310752][T20764] team0: Port device team_slave_1 removed [ 1260.324044][T20764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1260.341833][T20764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1260.366027][T20764] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1260.387856][T20764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1260.402598][T20764] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1260.427674][T20766] team0: Mode changed to "loadbalance" [ 1260.615997][T20797] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3873'. [ 1260.625527][T20797] openvswitch: netlink: Flow key attr not present in new flow. [ 1261.654272][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1261.654297][ T29] audit: type=1400 audit(2000001836.481:1604): avc: denied { write } for pid=20824 comm="syz.8.3878" name="tcp" dev="proc" ino=4026532971 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1261.928624][ T29] audit: type=1400 audit(2000001836.765:1605): avc: denied { create } for pid=20829 comm="syz.6.3881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1262.145759][ T29] audit: type=1400 audit(2000001836.765:1606): avc: denied { ioctl } for pid=20829 comm="syz.6.3881" path="socket:[83233]" dev="sockfs" ino=83233 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1262.346865][T20842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1262.444076][ T29] audit: type=1400 audit(2000001837.248:1607): avc: denied { read } for pid=20840 comm="syz.9.3883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1262.753361][T10644] Bluetooth: hci3: command 0x0406 tx timeout [ 1263.408259][ T29] audit: type=1400 audit(2000001838.319:1608): avc: denied { create } for pid=20859 comm="syz.6.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1263.483618][T20522] IPVS: starting estimator thread 0... [ 1263.516658][ T29] audit: type=1400 audit(2000001838.361:1609): avc: denied { bind } for pid=20859 comm="syz.6.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1263.585799][ T29] audit: type=1400 audit(2000001838.361:1610): avc: denied { listen } for pid=20859 comm="syz.6.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1263.608943][T20866] IPVS: using max 45 ests per chain, 108000 per kthread [ 1263.618667][ T29] audit: type=1400 audit(2000001838.392:1611): avc: denied { connect } for pid=20859 comm="syz.6.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1263.640078][ T29] audit: type=1400 audit(2000001838.403:1612): avc: denied { read } for pid=20859 comm="syz.6.3887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1263.699639][ T29] audit: type=1400 audit(2000001838.403:1613): avc: denied { setopt } for pid=20849 comm="syz.8.3884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1263.808174][T20522] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1264.436233][T20522] usb 10-1: Using ep0 maxpacket: 16 [ 1264.443086][T20522] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.459851][T20522] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1264.494046][T20522] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1264.534918][T20884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3891'. [ 1264.538635][T20522] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1264.544592][T20884] openvswitch: netlink: Flow key attr not present in new flow. [ 1264.605616][T20522] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1264.659116][T20522] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1264.731554][T20522] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1264.739675][T20522] usb 10-1: Manufacturer: syz [ 1264.813066][T20522] usb 10-1: config 0 descriptor?? [ 1265.836203][T20522] rc_core: IR keymap rc-hauppauge not found [ 1265.844619][T20522] Registered IR keymap rc-empty [ 1265.852305][T20522] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1265.969437][T20522] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1266.017827][T20522] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1266.378699][T20522] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input53 [ 1266.448660][T20522] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1266.514497][T20522] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1266.544594][T20522] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1266.579210][T20522] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1266.626593][T20522] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1266.664780][ T9893] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 1266.672864][T20522] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1266.721953][T20522] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1266.752069][T20522] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1266.818633][T20522] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1266.831299][ T9893] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1266.841446][ T9893] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1266.858144][T20522] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1266.867783][ T9893] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1266.879940][ T9893] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1266.894406][T20522] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1266.904269][T20522] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1266.938931][T20522] usb 10-1: USB disconnect, device number 2 [ 1266.947360][ T9893] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1267.012480][ T9893] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1267.047609][ T9893] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1267.126680][ T9893] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1267.211233][ T9893] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1267.266423][ T9893] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1267.419703][ T9893] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1267.448269][T20522] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1267.476867][ T9893] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1267.519270][ T9893] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1267.605047][ T9893] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1267.644428][ T9893] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1267.702862][T20522] usb 10-1: Using ep0 maxpacket: 16 [ 1268.363921][ T9893] usb 7-1: string descriptor 0 read error: -22 [ 1268.380122][T20522] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1268.506247][ T9893] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1268.576608][ T9893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1268.605219][T20522] usb 10-1: config 7 has an invalid interface number: 192 but max is 0 [ 1268.615261][T20522] usb 10-1: config 7 has no interface number 0 [ 1268.621563][T20522] usb 10-1: config 7 interface 192 has no altsetting 0 [ 1268.643554][ T9893] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1268.654332][T20522] usb 10-1: New USB device found, idVendor=0421, idProduct=0128, bcdDevice=a6.39 [ 1268.663826][T20522] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.571487][T20522] usb 10-1: Product: syz [ 1269.575824][T20522] usb 10-1: Manufacturer: syz [ 1269.581353][T20522] usb 10-1: SerialNumber: syz [ 1269.618627][ T5811] usb 7-1: USB disconnect, device number 10 [ 1269.725868][T20522] usb 10-1: bad CDC descriptors [ 1269.742372][T20522] cdc_acm 10-1:7.192: Zero length descriptor references [ 1269.758518][T20522] cdc_acm 10-1:7.192: probe with driver cdc_acm failed with error -22 [ 1269.774130][T20522] usb 10-1: USB disconnect, device number 3 [ 1269.880435][T20939] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3906'. [ 1269.889619][T20939] openvswitch: netlink: Flow key attr not present in new flow. [ 1269.912562][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 1269.912591][ T29] audit: type=1400 audit(2000001845.154:1623): avc: denied { ioctl } for pid=20940 comm="syz.2.3907" path="socket:[83664]" dev="sockfs" ino=83664 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1270.871154][ T29] audit: type=1400 audit(2000001846.161:1624): avc: denied { load_policy } for pid=20949 comm="syz.6.3909" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1270.951351][T20953] SELinux: policydb table sizes (4,0) do not match mine (8,7) [ 1271.141549][T20953] SELinux: failed to load policy [ 1271.582607][ T29] audit: type=1400 audit(2000001846.676:1625): avc: denied { recv } for pid=20954 comm="syz.1.3910" saddr=10.128.0.169 src=38164 daddr=10.128.1.204 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1272.663868][ T29] audit: type=1400 audit(2000001848.041:1626): avc: denied { setopt } for pid=20977 comm="syz.6.3916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1272.771624][T20976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3915'. [ 1272.899836][T20980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3915'. [ 1274.138415][T20992] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1274.159434][ T5922] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 1274.227351][T20992] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.367868][ T5922] usb 2-1: config 0 has no interfaces? [ 1274.429714][ T5922] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1274.477231][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1274.513277][ T5922] usb 2-1: Product: syz [ 1274.529593][ T5922] usb 2-1: Manufacturer: syz [ 1274.580100][ T5922] usb 2-1: SerialNumber: syz [ 1274.592171][ T5922] usb 2-1: config 0 descriptor?? [ 1274.725584][T20992] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1274.759115][T20992] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.818442][ T29] audit: type=1400 audit(2000001850.277:1627): avc: denied { create } for pid=20988 comm="syz.2.3918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1274.927091][ T29] audit: type=1400 audit(2000001850.298:1628): avc: denied { read } for pid=20988 comm="syz.2.3918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1275.573082][T20992] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 1275.593767][T20992] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1275.604867][T20992] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.874347][T20992] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1275.937458][T20992] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1276.272515][T21017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1276.311260][T21017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1276.344411][T21017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1276.372276][T21017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1276.870082][T21025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3927'. [ 1276.879332][T21025] openvswitch: netlink: Flow key attr not present in new flow. [ 1277.145665][ T51] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 1278.670080][T20392] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1278.770763][T20392] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.837144][T10499] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1278.861942][T10499] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.913276][T20392] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1278.935769][T20392] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.997165][T20392] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1279.022156][T20392] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.057593][ T29] audit: type=1400 audit(2000001854.739:1629): avc: denied { getopt } for pid=21043 comm="syz.8.3932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1279.187905][T20522] usb 2-1: USB disconnect, device number 48 [ 1279.907512][ T29] audit: type=1400 audit(2000001855.653:1630): avc: denied { connect } for pid=21052 comm="syz.1.3935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1280.001091][ T29] audit: type=1400 audit(2000001855.716:1631): avc: denied { bind } for pid=21049 comm="syz.2.3934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1280.764591][ T29] audit: type=1400 audit(2000001855.716:1632): avc: denied { bind } for pid=21052 comm="syz.1.3935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1281.055356][T21065] hpfs: Bad magic ... probably not HPFS [ 1281.237774][ T29] audit: type=1400 audit(2000001855.716:1633): avc: denied { listen } for pid=21052 comm="syz.1.3935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1281.393668][T21070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3939'. [ 1281.422637][ T29] audit: type=1400 audit(2000001855.716:1634): avc: denied { accept } for pid=21052 comm="syz.1.3935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1281.454804][T21073] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21073 comm=syz.1.3939 [ 1281.491400][ T29] audit: type=1400 audit(2000001855.842:1635): avc: denied { setopt } for pid=21052 comm="syz.1.3935" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netrom_socket permissive=1 [ 1281.546234][T21072] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3940'. [ 1281.555394][T21072] openvswitch: netlink: Flow key attr not present in new flow. [ 1281.585285][ T29] audit: type=1400 audit(2000001855.884:1636): avc: denied { open } for pid=21057 comm="syz.6.3936" path="/dev/ptyr0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1281.720199][ T29] audit: type=1400 audit(2000001855.884:1637): avc: denied { ioctl } for pid=21057 comm="syz.6.3936" path="/dev/ptyr0" dev="devtmpfs" ino=135 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1281.855972][ T29] audit: type=1400 audit(2000001857.626:1638): avc: denied { bind } for pid=21078 comm="syz.8.3942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1281.943320][ T29] audit: type=1400 audit(2000001857.626:1639): avc: denied { name_bind } for pid=21078 comm="syz.8.3942" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1282.288237][ T51] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 1284.558189][T21109] syzkaller0: entered promiscuous mode [ 1284.593153][T21109] syzkaller0: entered allmulticast mode [ 1284.721351][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 1284.721372][ T29] audit: type=1400 audit(2000001860.703:1654): avc: denied { bind } for pid=21103 comm="syz.2.3948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1284.760599][T21121] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3953'. [ 1284.825302][T21112] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3951'. [ 1284.979440][T21129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3954'. [ 1284.989562][T21129] openvswitch: netlink: Flow key attr not present in new flow. [ 1285.259065][ T29] audit: type=1400 audit(2000001861.270:1655): avc: denied { listen } for pid=21134 comm="syz.1.3957" lport=48609 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1285.493289][ T51] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 1285.596078][ T29] audit: type=1400 audit(2000001861.270:1656): avc: denied { accept } for pid=21134 comm="syz.1.3957" lport=48609 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1285.840135][ T29] audit: type=1400 audit(2000001861.322:1657): avc: denied { write } for pid=21134 comm="syz.1.3957" lport=48609 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1285.910779][ T29] audit: type=1400 audit(2000001861.322:1658): avc: denied { setopt } for pid=21134 comm="syz.1.3957" lport=48609 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1285.931137][T21148] netlink: 'syz.1.3960': attribute type 178 has an invalid length. [ 1286.328632][T21157] tipc: Enabled bearer , priority 0 [ 1286.405431][T21159] syzkaller0: entered promiscuous mode [ 1286.431234][ T29] audit: type=1400 audit(2000001862.487:1659): avc: denied { create } for pid=21155 comm="syz.9.3962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1286.457033][T21159] syzkaller0: entered allmulticast mode [ 1286.537066][ T29] audit: type=1400 audit(2000001862.529:1660): avc: denied { ioctl } for pid=21155 comm="syz.9.3962" path="socket:[84696]" dev="sockfs" ino=84696 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1287.746077][T21164] tipc: Resetting bearer [ 1287.816480][T21154] tipc: Resetting bearer [ 1288.330956][T21154] tipc: Disabling bearer [ 1288.648158][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 1288.656707][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 1288.671558][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 1288.720402][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 1288.839821][T21180] ceph: No mds server is up or the cluster is laggy [ 1289.006885][ T5811] libceph: connect (1)[c::]:6789 error -101 [ 1289.018014][ T5922] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1289.043531][ T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1289.047612][ T29] audit: type=1400 audit(2000001864.902:1661): avc: denied { remount } for pid=21176 comm="syz.1.3969" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1289.077140][ T5811] libceph: mon0 (1)[c::]:6789 connect error [ 1289.316281][ T5922] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1289.325549][ T24] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1289.729138][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.737322][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1289.760950][ T5922] usb 3-1: config 0 descriptor?? [ 1289.774283][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1289.788543][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1289.802057][ T24] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1289.813708][ T5922] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1289.836274][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.842466][ T29] audit: type=1400 audit(2000001866.068:1662): avc: denied { create } for pid=21192 comm="syz.8.3973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1289.905252][ T29] audit: type=1400 audit(2000001866.120:1663): avc: denied { sys_admin } for pid=21192 comm="syz.8.3973" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1290.044863][ T24] usb 10-1: config 0 descriptor?? [ 1290.190993][ T51] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 1290.913887][T21203] overlayfs: failed to resolve './file2': -2 [ 1290.943657][ T24] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1292.220804][ T29] audit: type=1400 audit(2000001868.524:1664): avc: denied { read } for pid=21208 comm="syz.8.3977" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1292.274165][T18755] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 1292.371961][ T29] audit: type=1400 audit(2000001868.524:1665): avc: denied { open } for pid=21208 comm="syz.8.3977" path="/dev/sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1292.374533][ T24] usb 10-1: USB disconnect, device number 4 [ 1292.515154][T18755] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 72, changing to 4 [ 1292.532651][ T29] audit: type=1400 audit(2000001868.524:1666): avc: denied { ioctl } for pid=21208 comm="syz.8.3977" path="/dev/sg0" dev="devtmpfs" ino=717 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1292.560728][ T29] audit: type=1400 audit(2000001868.545:1667): avc: denied { create } for pid=21208 comm="syz.8.3977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1292.607364][T18755] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 0 [ 1292.664591][T18755] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 1292.667586][ T5922] usb 3-1: USB disconnect, device number 52 [ 1292.856000][T18755] usb 7-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1292.866816][T18755] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.885475][T18755] usb 7-1: Product: ⮺蹴꿫꨻ë«ì¼î’›ëŒ¿ç“Œë•§ç¯é¬»ä¥¬æ¡ªã‡ˆâŸ“寗稛얂찈鬃襸â¢ê•ᨠ岻䳩襠í»êƒ€á©†æ¡éª¤å§ŸâŽŸé¦Ÿì·†ã½–æ¸€á¦˜ì»¸ã·´â°´æ”ºï›©à¾¾â»œã’ à®ˆáªŠï¡¶ïƒ¯æ·«ë’•ëž£ß£æ¨žæ¶²â¦¹îš«ëµé…Ÿá‡•刚î¡î¤±í„”⼔嗮늀贈邔اíªëƒ•閰糭宀鉆㢣䡌◘ [ 1293.087608][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1293.108728][T18755] usb 7-1: Manufacturer: 䴱鄨⑀绳헼쒽◘싒鑱韬뭠å¨ïŠç ·ë¿¡î¼¢å²¨ì°‚ꎢ➯᱘爳鹶뭔ḯ랓Ⴑᾶ䶄ⴚ饆ᄒï³ì¦²â§µê®çƒ¨à¯†ã¹·æžï›‡ä´„ä™éºãŸ“ëºè”뼵럴낓䯲⢃얺ےਗ쨱ꄲ絮è¿á·„觫ﳜ熚瓩屌릶ꂟ좨 [ 1293.131402][T18755] usb 7-1: SerialNumber: æ »ê¯ç°›â‚ æƒ¤á¨¿ï²½ï‘†æ¯‡ç…‡ã»¨è€¶â˜¨î‘£ç¥˜ê®¶ç°¨ï´¡â‘í—íž´í“»è®í‚¤æ¢Ÿê–…삣Ⲭㅨ庈暚縉鰢ℨ竖ìˆì°»è½êµî°µé¹¶åˆí„¬ç¨‘ꊭì¸ë°±î¯”⌾屋梼쪟離䧪å¢à²´å胣礜૤݋å†â‹©ì¾á•欎继℠䖙痤懔黩阢憡헪ëԇ힤 [ 1293.942565][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 1293.954344][ T24] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 1293.976987][ T24] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1293.998128][ T24] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1294.019918][ T24] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1294.108152][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1294.149561][ T24] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1294.175076][ T29] audit: type=1400 audit(2000001870.624:1668): avc: denied { read } for pid=21235 comm="syz.2.3983" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1294.202584][ T24] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1294.292131][ T24] usb 9-1: Product: syz [ 1294.333379][ T24] usb 9-1: Manufacturer: syz [ 1294.378895][ T24] usb 9-1: SerialNumber: syz [ 1294.490480][ T24] usb 9-1: config 0 descriptor?? [ 1294.523622][T18755] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1294.660024][ T24] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1294.685679][ T24] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1294.953404][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1295.849950][T21250] syz.2.3985 (21250): drop_caches: 2 [ 1296.130372][T18755] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1296.230241][ T9292] usb 9-1: USB disconnect, device number 2 [ 1296.358714][ T9292] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 1296.382471][T18755] usb 7-1: USB disconnect, device number 11 [ 1296.432417][ T29] audit: type=1400 audit(2000001872.966:1669): avc: denied { create } for pid=21254 comm="syz.6.3988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1296.516599][ T51] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 1296.849925][ T6209] udevd[6209]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1297.633482][ T29] audit: type=1400 audit(2000001873.785:1670): avc: denied { accept } for pid=21254 comm="syz.6.3988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1297.853366][ T29] audit: type=1400 audit(2000001874.488:1671): avc: denied { getopt } for pid=21265 comm="syz.6.3991" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1298.105255][ T29] audit: type=1400 audit(2000001874.750:1672): avc: denied { create } for pid=21266 comm="syz.9.3990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1298.233390][ T29] audit: type=1400 audit(2000001874.792:1673): avc: denied { connect } for pid=21266 comm="syz.9.3990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1298.563830][ T29] audit: type=1400 audit(2000001874.803:1674): avc: denied { write } for pid=21266 comm="syz.9.3990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1300.175245][T21286] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input55 [ 1300.312971][ T29] audit: type=1400 audit(2000001876.903:1675): avc: denied { connect } for pid=21281 comm="syz.1.3994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1301.258628][T18755] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1301.455319][ T29] audit: type=1400 audit(2000001878.268:1676): avc: denied { create } for pid=21296 comm="syz.1.3997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1301.534132][ T29] audit: type=1400 audit(2000001878.299:1677): avc: denied { connect } for pid=21296 comm="syz.1.3997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1301.596765][ T29] audit: type=1400 audit(2000001878.299:1678): avc: denied { write } for pid=21296 comm="syz.1.3997" path="socket:[84979]" dev="sockfs" ino=84979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1301.610423][T18755] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.777407][ T29] audit: type=1400 audit(2000001878.530:1679): avc: denied { name_bind } for pid=21294 comm="syz.9.3996" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1302.528743][T18755] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1302.543962][T18755] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1302.553485][T18755] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.565848][T18755] usb 7-1: config 0 descriptor?? [ 1302.575677][T18755] hdpvr 7-1:0.0: Could not find bulk-in endpoint [ 1302.582403][T18755] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 1302.786491][T18755] usb 7-1: USB disconnect, device number 12 [ 1303.013032][T20522] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1303.838530][ T29] audit: type=1400 audit(2000001880.315:1680): avc: denied { create } for pid=21310 comm="syz.9.4002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1303.899921][ T29] audit: type=1400 audit(2000001880.483:1681): avc: denied { bind } for pid=21310 comm="syz.9.4002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1303.922140][ T29] audit: type=1400 audit(2000001880.504:1682): avc: denied { connect } for pid=21310 comm="syz.9.4002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1304.020857][T20522] usb 2-1: Using ep0 maxpacket: 16 [ 1304.027848][T20522] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1304.036444][T20522] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1304.045782][T20522] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1304.057192][T20522] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1304.066453][T20522] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1304.075930][T20522] usb 2-1: config 0 has no interface number 0 [ 1304.084238][T20522] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1304.101024][T20522] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1304.112528][T20522] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1304.140556][T20522] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1304.156267][ T29] audit: type=1400 audit(2000001881.092:1683): avc: denied { read } for pid=21321 comm="syz.2.4005" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1304.188683][T20522] usb 2-1: config 0 interface 125 has no altsetting 0 [ 1304.196678][T20522] usb 2-1: config 0 interface 125 has no altsetting 2 [ 1304.204228][ T29] audit: type=1400 audit(2000001881.092:1684): avc: denied { open } for pid=21321 comm="syz.2.4005" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1304.244905][T20522] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1304.271650][T20522] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.298937][ T29] audit: type=1400 audit(2000001881.092:1685): avc: denied { ioctl } for pid=21321 comm="syz.2.4005" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1304.325212][T20522] usb 2-1: Product: syz [ 1304.329393][T20522] usb 2-1: Manufacturer: syz [ 1304.579438][T21332] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4007'. [ 1304.593887][T21332] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4007'. [ 1304.609471][T21332] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4007'. [ 1304.618631][T21332] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4007'. [ 1304.686031][T20522] usb 2-1: SerialNumber: syz [ 1304.771164][T20522] usb 2-1: config 0 descriptor?? [ 1304.819245][T20522] usb 2-1: selecting invalid altsetting 2 [ 1304.871122][T21325] syzkaller0: entered promiscuous mode [ 1304.910009][T21325] syzkaller0: entered allmulticast mode [ 1306.580882][T21305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.596715][T21305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.628020][T21305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.661133][T21305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.686435][T20522] usb 2-1: USB disconnect, device number 49 [ 1308.020879][ T51] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 1308.512372][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 1308.512393][ T29] audit: type=1400 audit(2000001885.680:1689): avc: denied { bind } for pid=21370 comm="syz.1.4017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1310.170359][T21378] tipc: Enabled bearer , priority 0 [ 1310.192919][T21379] syzkaller0: entered promiscuous mode [ 1310.198432][T21379] syzkaller0: entered allmulticast mode [ 1310.240209][T21375] tipc: Resetting bearer [ 1310.313301][ T29] audit: type=1400 audit(2000001887.559:1690): avc: denied { create } for pid=21389 comm="syz.8.4020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1310.478638][T21375] tipc: Disabling bearer [ 1311.010677][T21401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4023'. [ 1311.019917][T21401] openvswitch: netlink: Flow key attr not present in new flow. [ 1311.425897][T21408] syzkaller0: entered promiscuous mode [ 1311.431879][T21408] syzkaller0: entered allmulticast mode [ 1312.135039][ T51] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 1313.771523][T21440] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4031'. [ 1313.782523][T21441] netlink: 'syz.8.4032': attribute type 2 has an invalid length. [ 1313.792541][ T29] audit: type=1400 audit(2000001891.213:1691): avc: denied { setopt } for pid=21437 comm="syz.8.4032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1313.848426][ T29] audit: type=1400 audit(2000001891.255:1692): avc: denied { listen } for pid=21437 comm="syz.8.4032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1313.987388][ T29] audit: type=1400 audit(2000001891.265:1693): avc: denied { accept } for pid=21437 comm="syz.8.4032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1314.102308][ T29] audit: type=1400 audit(2000001891.349:1694): avc: denied { ioctl } for pid=21437 comm="syz.8.4032" path="socket:[86523]" dev="sockfs" ino=86523 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1314.396842][T21447] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4033'. [ 1315.231813][ T29] audit: type=1400 audit(2000001892.725:1695): avc: denied { append } for pid=21452 comm="syz.6.4036" name="usbmon5" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1315.285760][ T29] audit: type=1400 audit(2000001892.725:1696): avc: denied { open } for pid=21452 comm="syz.6.4036" path="/dev/usbmon5" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1315.930476][ T29] audit: type=1400 audit(2000001893.470:1697): avc: denied { read write } for pid=21453 comm="syz.1.4035" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1315.984785][T21459] netlink: zone id is out of range [ 1315.990008][T21459] netlink: zone id is out of range [ 1315.999097][T21459] netlink: zone id is out of range [ 1316.005062][T21459] netlink: zone id is out of range [ 1316.010297][T21459] netlink: zone id is out of range [ 1316.018186][T21459] netlink: zone id is out of range [ 1316.023499][T21459] netlink: zone id is out of range [ 1316.029101][T21459] netlink: zone id is out of range [ 1316.039737][T21459] netlink: zone id is out of range [ 1316.050699][T21459] netlink: zone id is out of range [ 1316.092790][ T29] audit: type=1400 audit(2000001893.470:1698): avc: denied { open } for pid=21453 comm="syz.1.4035" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1316.510621][ T51] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 1316.807335][T21467] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1317.741086][T21473] overlay: ./file0 is not a directory [ 1318.321993][ T29] audit: type=1804 audit(2000001895.969:1699): pid=21469 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.9.4039" name="/newroot/43/file1" dev="fuse" ino=1 res=1 errno=0 [ 1321.973760][T21500] netlink: 'syz.2.4047': attribute type 1 has an invalid length. [ 1322.841499][T21504] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1322.874722][T21504] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1322.926298][T21505] bond4: (slave bridge2): Enslaving as an active interface with a down link [ 1322.968375][T21500] macvlan0: entered promiscuous mode [ 1322.979228][T21500] macvlan0: entered allmulticast mode [ 1323.013472][T21500] bond4: entered promiscuous mode [ 1323.019321][T21500] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1323.073658][T21500] bond4: left promiscuous mode [ 1323.229479][T21519] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4050'. [ 1323.240250][T21519] netlink: 4096 bytes leftover after parsing attributes in process `syz.8.4050'. [ 1324.797553][ T29] audit: type=1400 audit(2000001902.783:1700): avc: denied { setopt } for pid=21527 comm="syz.1.4054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1326.754630][ T29] audit: type=1400 audit(2000001904.830:1701): avc: denied { ioctl } for pid=21550 comm="syz.9.4058" path="socket:[87419]" dev="sockfs" ino=87419 ioctlcmd=0x6f01 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1327.079735][ T24] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1327.251338][ T24] usb 10-1: Using ep0 maxpacket: 16 [ 1327.289840][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1327.336503][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1327.374965][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1327.436717][ T24] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1327.492777][ T24] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1327.535112][ T24] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1327.558987][T21565] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4061'. [ 1327.574605][ T24] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1327.608894][ T24] usb 10-1: Manufacturer: syz [ 1327.633540][ T24] usb 10-1: config 0 descriptor?? [ 1327.967088][ T24] rc_core: IR keymap rc-hauppauge not found [ 1327.981577][ T24] Registered IR keymap rc-empty [ 1328.003397][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1328.082005][T21576] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1328.090112][T21576] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 1th superblock [ 1328.099062][T21576] F2FS-fs (nbd8): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1328.106760][T21576] F2FS-fs (nbd8): Can't find valid F2FS filesystem in 2th superblock [ 1328.366833][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1328.420970][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1328.469813][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input56 [ 1328.604257][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1328.623426][ C1] mceusb 10-1:0.0: short-range (0x3f) receiver active [ 1328.632277][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1329.061078][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1329.089186][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1329.108276][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1329.138350][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1329.166352][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1329.229858][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1329.339517][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1329.366222][ T24] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 1329.465782][ T24] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1329.510536][ T24] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x3f active) [ 1329.561883][ T24] usb 10-1: USB disconnect, device number 5 [ 1329.633122][T21593] netlink: 'syz.8.4069': attribute type 1 has an invalid length. [ 1329.701772][T21593] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1329.716251][T21597] bond1: (slave dummy0): making interface the new active one [ 1329.726235][T21597] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1330.098888][ T29] audit: type=1400 audit(2000001908.221:1702): avc: denied { unlink } for pid=21594 comm="syz.9.4070" name="#3d" dev="tmpfs" ino=275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1330.202346][ T29] audit: type=1400 audit(2000001908.232:1703): avc: denied { mount } for pid=21594 comm="syz.9.4070" name="/" dev="overlay" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1330.356063][T21603] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4072'. [ 1330.365164][T21603] net_ratelimit: 45 callbacks suppressed [ 1330.365191][T21603] openvswitch: netlink: Flow key attr not present in new flow. [ 1332.144662][ T29] audit: type=1400 audit(2000001910.489:1704): avc: denied { create } for pid=21622 comm="syz.9.4076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1332.164349][T20522] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1332.299412][T20522] usb 2-1: Using ep0 maxpacket: 32 [ 1332.551878][T20522] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1332.586866][ T29] audit: type=1400 audit(2000001910.951:1705): avc: denied { write } for pid=21627 comm="syz.8.4078" name="001" dev="devtmpfs" ino=750 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1332.590319][T20522] usb 2-1: config 0 has no interface number 0 [ 1332.693321][T20522] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1332.722526][T20522] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.738098][T20522] usb 2-1: Product: syz [ 1332.745794][T20522] usb 2-1: Manufacturer: syz [ 1332.837591][ T29] audit: type=1400 audit(2000001911.203:1706): avc: denied { map } for pid=21636 comm="syz.8.4081" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1333.121477][ T29] audit: type=1400 audit(2000001911.203:1707): avc: denied { execute } for pid=21636 comm="syz.8.4081" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1333.426081][T20522] usb 2-1: SerialNumber: syz [ 1333.685125][T20522] usb 2-1: config 0 descriptor?? [ 1333.696888][T20522] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1333.705905][T20522] usb 2-1: selecting invalid altsetting 1 [ 1333.711822][T20522] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1333.722271][T20522] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1333.732872][T20522] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1333.741272][T20522] usb 2-1: media controller created [ 1333.753781][T20522] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1334.483513][ T29] audit: type=1400 audit(2000001912.610:1708): avc: denied { write } for pid=21641 comm="syz.6.4082" path="socket:[87623]" dev="sockfs" ino=87623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1334.681505][T20522] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1334.965865][T20522] zl10353_read_register: readreg error (reg=127, ret==-32) [ 1335.120422][T21653] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4084'. [ 1335.130723][T21653] openvswitch: netlink: Flow key attr not present in new flow. [ 1335.302373][T21656] syzkaller0: entered promiscuous mode [ 1335.318830][T21656] syzkaller0: entered allmulticast mode [ 1336.030509][T21621] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1336.094852][T20522] usb 2-1: USB disconnect, device number 50 [ 1336.470927][ T29] audit: type=1400 audit(2000001915.014:1709): avc: denied { read } for pid=21666 comm="syz.9.4088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1337.888922][T21669] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4089'. [ 1337.996712][T21669] xt_bpf: check failed: parse error [ 1338.019011][ T29] audit: type=1400 audit(2000001916.663:1710): avc: denied { read } for pid=21668 comm="syz.6.4089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1339.476523][T21699] netlink: 'syz.9.4096': attribute type 13 has an invalid length. [ 1339.489017][ T29] audit: type=1400 audit(2000001918.196:1711): avc: denied { bind } for pid=21684 comm="syz.1.4093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1339.508533][ T29] audit: type=1400 audit(2000001918.217:1712): avc: denied { connect } for pid=21684 comm="syz.1.4093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1339.530348][ T29] audit: type=1400 audit(2000001918.217:1713): avc: denied { write } for pid=21684 comm="syz.1.4093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1340.150140][ T29] audit: type=1400 audit(2000001918.899:1714): avc: denied { write } for pid=21703 comm="syz.2.4097" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1340.174621][T21708] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4097'. [ 1340.465685][T21714] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4099'. [ 1340.474868][T21714] openvswitch: netlink: Flow key attr not present in new flow. [ 1340.771820][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 1342.148948][ T29] audit: type=1400 audit(2000001920.999:1715): avc: denied { read write } for pid=21730 comm="syz.6.4103" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1342.243103][ T29] audit: type=1400 audit(2000001920.999:1716): avc: denied { open } for pid=21730 comm="syz.6.4103" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1342.346360][ T29] audit: type=1400 audit(2000001921.051:1717): avc: denied { ioctl } for pid=21730 comm="syz.6.4103" path="/dev/ptp0" dev="devtmpfs" ino=1265 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1344.024352][ T9292] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1344.054520][ T29] audit: type=1400 audit(2000001922.994:1718): avc: denied { mount } for pid=21753 comm="syz.2.4110" name="/" dev="configfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1344.153616][ T29] audit: type=1400 audit(2000001923.099:1719): avc: denied { mounton } for pid=21753 comm="syz.2.4110" path="/823/file0" dev="tmpfs" ino=4421 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1344.204923][ T9292] usb 10-1: Using ep0 maxpacket: 8 [ 1344.219158][ T9292] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1344.291311][ T9292] usb 10-1: config 4 interface 0 has no altsetting 0 [ 1344.315253][ T9292] usb 10-1: string descriptor 0 read error: -22 [ 1344.325375][ T9292] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1344.366552][ T9292] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 1344.415808][ T9292] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1344.433857][ T29] audit: type=1400 audit(2000001923.403:1720): avc: denied { create } for pid=21759 comm="syz.8.4112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1344.566061][ T9292] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1345.014501][ T9292] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1345.048753][ T29] audit: type=1400 audit(2000001923.624:1721): avc: denied { setopt } for pid=21761 comm="syz.6.4113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1345.052825][ T9292] usb 10-1: media controller created [ 1345.191329][ T9292] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1345.380873][ T29] audit: type=1400 audit(2000001924.369:1722): avc: denied { setopt } for pid=21769 comm="syz.1.4115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1345.831239][ T9292] zl10353_read_register: readreg error (reg=127, ret==0) [ 1345.896536][ T29] audit: type=1400 audit(2000001924.915:1723): avc: denied { write } for pid=21770 comm="syz.2.4114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1345.908851][T21777] tipc: Started in network mode [ 1345.922522][T21777] tipc: Node identity eeb5ad4fa1be, cluster identity 4711 [ 1346.049545][T21777] tipc: Enabled bearer , priority 0 [ 1346.157701][T21779] syzkaller0: entered promiscuous mode [ 1346.164579][ T9292] usb 10-1: USB disconnect, device number 6 [ 1346.170767][ T29] audit: type=1400 audit(2000001925.072:1724): avc: denied { read } for pid=21770 comm="syz.2.4114" dev="sockfs" ino=87871 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1346.198621][T21779] syzkaller0: entered allmulticast mode [ 1346.294564][T21777] tipc: Resetting bearer [ 1346.340203][T21776] tipc: Resetting bearer [ 1346.450824][T21776] tipc: Disabling bearer [ 1347.524050][T20522] tipc: Node number set to 1326165327 [ 1349.329516][ T29] audit: type=1400 audit(2000001928.537:1725): avc: denied { mount } for pid=21808 comm="syz.8.4125" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1351.370292][ T29] audit: type=1400 audit(2000001929.619:1726): avc: denied { mounton } for pid=21808 comm="syz.8.4125" path="/63/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 1352.884957][T21833] netlink: zone id is out of range [ 1352.896498][T21833] netlink: zone id is out of range [ 1352.926732][T21833] netlink: zone id is out of range [ 1352.936434][T21834] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4131'. [ 1352.975370][T21833] netlink: zone id is out of range [ 1352.981897][ T29] audit: type=1400 audit(2000001932.369:1727): avc: denied { unmount } for pid=20237 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1353.029190][T21833] netlink: zone id is out of range [ 1353.058817][T21833] netlink: zone id is out of range [ 1353.072489][ T9292] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1353.083900][T21833] netlink: zone id is out of range [ 1353.097964][T21833] netlink: zone id is out of range [ 1353.126751][T21833] netlink: zone id is out of range [ 1353.150841][T21833] netlink: zone id is out of range [ 1353.256142][ T9292] usb 3-1: Using ep0 maxpacket: 16 [ 1353.269637][ T9292] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1353.304934][ T9292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.323734][ T9292] usb 3-1: Product: syz [ 1353.342008][T21842] bridge_slave_0: left allmulticast mode [ 1353.347724][ T9292] usb 3-1: Manufacturer: syz [ 1353.347745][ T9292] usb 3-1: SerialNumber: syz [ 1353.365536][T21842] bridge_slave_0: left promiscuous mode [ 1353.394849][T21842] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.417031][ T5922] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1353.425027][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1353.436998][T21842] bridge_slave_1: left allmulticast mode [ 1353.446939][T21842] bridge_slave_1: left promiscuous mode [ 1353.452709][T21842] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.464453][T21848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4133'. [ 1353.479221][T21848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4133'. [ 1353.493235][T21842] bond0: (slave bond_slave_0): Releasing backup interface [ 1353.515197][T21842] bond0: (slave bond_slave_1): Releasing backup interface [ 1353.540247][T21842] team0: Port device team_slave_0 removed [ 1353.565082][T21842] team0: Port device team_slave_1 removed [ 1353.580140][T21842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1353.590240][T21842] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1353.602575][ T5922] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 1353.614124][ T5922] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1353.624124][ T9893] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1353.637382][T21842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1353.645333][ T5922] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1353.653365][T21842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1353.667736][ T5922] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1353.687870][ T9292] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1353.697057][ T5922] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1353.717449][ T9292] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1353.727791][ T5922] usb 9-1: Product: syz [ 1353.741034][ T9292] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1353.761158][ T9292] usb 3-1: media controller created [ 1353.769300][ T5922] usb 9-1: Manufacturer: syz [ 1353.777444][ T9893] usb 7-1: Using ep0 maxpacket: 32 [ 1353.780874][ T9292] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1353.791291][ T5922] usb 9-1: SerialNumber: syz [ 1353.798743][ T9893] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1353.817379][ T5922] usb 9-1: config 0 descriptor?? [ 1353.824281][ T9893] usb 7-1: config 0 has no interface number 0 [ 1353.940269][ T5922] hub 9-1:0.0: bad descriptor, ignoring hub [ 1353.953505][ T9893] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1353.966934][ T5922] hub 9-1:0.0: probe with driver hub failed with error -5 [ 1353.983996][ T9893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.992211][ T29] audit: type=1400 audit(2000001933.419:1728): avc: denied { lock } for pid=21830 comm="syz.2.4130" path="socket:[88553]" dev="sockfs" ino=88553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1354.080796][ T5922] usb 9-1: selecting invalid altsetting 0 [ 1354.091747][ T9893] usb 7-1: Product: syz [ 1354.409088][ T9292] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1354.428388][ T9893] usb 7-1: Manufacturer: syz [ 1354.455049][ T9893] usb 7-1: SerialNumber: syz [ 1354.483243][ T9893] usb 7-1: config 0 descriptor?? [ 1354.503263][ T9893] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1354.527073][ T9292] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1354.574658][ T9292] usb 3-1: USB disconnect, device number 53 [ 1354.772298][ T5922] usb 9-1: USB disconnect, device number 3 [ 1354.964455][ T9893] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1355.100829][T10644] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 1355.310680][ T5922] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1355.337229][ T9893] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1355.484508][T21842] team0: Mode changed to "loadbalance" [ 1355.494271][ T5922] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1355.507261][T21842] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4134'. [ 1355.517018][ T5922] usb 9-1: not running at top speed; connect to a high speed hub [ 1355.558228][ T5922] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 4 [ 1355.596534][ T5922] usb 9-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1355.610089][ T5922] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.628453][ T5922] usb 9-1: Product: syz [ 1355.632661][ T5922] usb 9-1: Manufacturer: syz [ 1355.657244][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1355.666287][ T9893] usb 7-1: USB disconnect, device number 13 [ 1355.676774][ T5922] usb 9-1: SerialNumber: syz [ 1355.702926][ T9893] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1355.733724][ T9893] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1355.795478][ T9893] quatech2 7-1:0.51: device disconnected [ 1356.687129][ T5922] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 1357.525724][T21879] overlayfs: failed to resolve './file0/../file0': -2 [ 1358.396005][ T5922] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1358.734689][ T29] audit: type=1400 audit(2000001938.406:1729): avc: denied { connect } for pid=21881 comm="syz.1.4143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1359.029883][ T5922] usb 9-1: selecting invalid altsetting 1 [ 1359.128892][ T5922] snd-usb-us122l 9-1:1.1: usb_set_interface error [ 1359.136582][ T29] audit: type=1400 audit(2000001938.763:1730): avc: denied { create } for pid=21885 comm="syz.8.4145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1359.168808][ T5922] snd-usb-us122l 9-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 1359.227824][ T29] audit: type=1400 audit(2000001938.774:1731): avc: denied { accept } for pid=21885 comm="syz.8.4145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1359.248079][ T6209] udevd[6209]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1359.264890][ T5922] usb 9-1: USB disconnect, device number 4 [ 1359.423699][ T29] audit: type=1400 audit(2000001939.131:1732): avc: denied { read } for pid=21881 comm="syz.1.4143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1360.525700][T21903] netlink: 212348 bytes leftover after parsing attributes in process `syz.8.4147'. [ 1360.972681][T21905] tipc: Enabled bearer , priority 0 [ 1360.995583][T21905] syzkaller0: entered allmulticast mode [ 1361.058748][T21905] tipc: Resetting bearer [ 1361.151090][T21904] tipc: Resetting bearer [ 1361.278476][T21904] tipc: Disabling bearer [ 1361.711403][T21917] trusted_key: encrypted_key: insufficient parameters specified [ 1362.944907][T21923] netlink: 'syz.2.4154': attribute type 1 has an invalid length. [ 1363.170806][T21932] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4154'. [ 1363.321094][T21934] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4154'. [ 1363.555885][T21930] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1363.627596][T21930] bond5: (slave bond6): making interface the new active one [ 1363.665392][T21930] bond5: (slave bond6): Enslaving as an active interface with an up link [ 1363.888941][T21934] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1364.949440][ T5922] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1365.505668][ T5922] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 1365.556586][ T5922] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 1365.595868][ T5922] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1365.636148][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1365.797654][ T5922] usb 2-1: Product: syz [ 1366.257711][ T5922] usb 2-1: Manufacturer: syz [ 1366.262390][ T5922] usb 2-1: SerialNumber: syz [ 1366.699613][ T5922] usb 2-1: can't set config #4, error -71 [ 1367.166209][ T5922] usb 2-1: USB disconnect, device number 51 [ 1367.625703][T21973] syzkaller0: entered promiscuous mode [ 1367.651072][T21973] syzkaller0: entered allmulticast mode [ 1369.051761][T21988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4171'. [ 1369.064627][T21988] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4171'. [ 1370.570329][ T29] audit: type=1400 audit(2000001950.827:1733): avc: denied { create } for pid=22000 comm="syz.8.4176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1370.655251][ T9893] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1370.724328][ T29] audit: type=1400 audit(2000001950.879:1734): avc: denied { ioctl } for pid=22000 comm="syz.8.4176" path="socket:[88860]" dev="sockfs" ino=88860 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1370.864532][ T9893] usb 7-1: Using ep0 maxpacket: 8 [ 1370.981029][ T9893] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1371.125383][T10644] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 1371.444898][ T9893] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1371.479274][ T9893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.529405][ T9893] usb 7-1: config 0 descriptor?? [ 1371.852927][ T9893] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1372.115126][T21993] lo speed is unknown, defaulting to 1000 [ 1372.122660][ T29] audit: type=1400 audit(2000001952.454:1735): avc: denied { write } for pid=21991 comm="syz.2.4174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1372.151006][T21993] lo speed is unknown, defaulting to 1000 [ 1372.188886][T21993] lo speed is unknown, defaulting to 1000 [ 1372.307329][ T29] audit: type=1400 audit(2000001952.580:1736): avc: denied { setopt } for pid=22011 comm="syz.9.4179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1372.351437][T21993] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1372.476743][T21993] lo speed is unknown, defaulting to 1000 [ 1372.482656][ T29] audit: type=1400 audit(2000001952.832:1737): avc: denied { read write } for pid=22012 comm="syz.8.4180" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1372.522908][T21993] lo speed is unknown, defaulting to 1000 [ 1372.567571][T21993] lo speed is unknown, defaulting to 1000 [ 1372.583131][ T5922] usb 7-1: USB disconnect, device number 14 [ 1372.600902][T21993] lo speed is unknown, defaulting to 1000 [ 1372.650900][T21993] lo speed is unknown, defaulting to 1000 [ 1372.681797][T21993] lo speed is unknown, defaulting to 1000 [ 1372.707334][ T29] audit: type=1400 audit(2000001952.832:1738): avc: denied { open } for pid=22012 comm="syz.8.4180" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1374.023498][T22029] : entered promiscuous mode [ 1374.067516][ T29] audit: type=1400 audit(2000001954.501:1739): avc: denied { read } for pid=22027 comm="syz.2.4181" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1375.015778][ T29] audit: type=1400 audit(2000001954.501:1740): avc: denied { open } for pid=22027 comm="syz.2.4181" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1376.585286][ T29] audit: type=1400 audit(2000001956.916:1741): avc: denied { write } for pid=22045 comm="syz.6.4187" path="socket:[89804]" dev="sockfs" ino=89804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1377.728577][T10644] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 1378.274607][T22064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2634 sclass=netlink_route_socket pid=22064 comm=syz.1.4191 [ 1379.962111][T22075] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4195'. [ 1379.971172][T22075] net_ratelimit: 45 callbacks suppressed [ 1379.971189][T22075] openvswitch: netlink: Flow key attr not present in new flow. [ 1381.463423][T10644] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 1383.116285][T22099] lo speed is unknown, defaulting to 1000 [ 1384.144404][T10644] Bluetooth: hci5: Unable to find connection with handle 0x0000 [ 1385.980691][T22132] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4209'. [ 1385.989719][T22132] openvswitch: netlink: Flow key attr not present in new flow. [ 1386.927721][ T29] audit: type=1400 audit(2000001968.003:1742): avc: denied { write } for pid=22121 comm="syz.8.4207" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1387.340167][ T29] audit: type=1400 audit(2000001968.003:1743): avc: denied { ioctl } for pid=22121 comm="syz.8.4207" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1387.508077][T22131] syzkaller0: entered promiscuous mode [ 1387.645218][T10644] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 1387.719017][T22131] syzkaller0: entered allmulticast mode [ 1388.532147][T22150] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4213'. [ 1392.981080][ T29] audit: type=1400 audit(2000001974.324:1744): avc: denied { getopt } for pid=22180 comm="syz.9.4222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1394.203559][ T51] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 1395.552401][T22206] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4226'. [ 1395.765980][ T29] audit: type=1400 audit(2000001977.274:1745): avc: denied { connect } for pid=22204 comm="syz.9.4226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1396.713673][ T29] audit: type=1400 audit(2000001977.725:1746): avc: denied { read } for pid=22204 comm="syz.9.4226" path="socket:[91554]" dev="sockfs" ino=91554 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1396.849682][ T29] audit: type=1400 audit(2000001977.788:1747): avc: denied { connect } for pid=22212 comm="syz.8.4228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1396.987164][T22219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4229'. [ 1396.996247][T22219] openvswitch: netlink: Flow key attr not present in new flow. [ 1397.269442][ T29] audit: type=1400 audit(2000001978.859:1748): avc: denied { connect } for pid=22224 comm="syz.9.4231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1399.409176][T22235] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4233'. [ 1400.523434][T10644] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1400.537605][T10644] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1400.601119][T10644] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1400.611088][T10644] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1400.619009][T10644] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1400.701041][ T29] audit: type=1400 audit(2000001982.460:1749): avc: denied { mounton } for pid=22244 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1403.135938][ T51] Bluetooth: hci2: command tx timeout [ 1403.331393][ T29] audit: type=1400 audit(2000001985.232:1750): avc: denied { getopt } for pid=22260 comm="syz.8.4241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1404.347171][T22178] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4220'. [ 1404.356493][T22182] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4220'. [ 1405.248837][T10644] Bluetooth: hci2: command tx timeout [ 1405.250880][ T29] audit: type=1400 audit(2000001986.954:1751): avc: denied { write } for pid=22278 comm="syz.9.4246" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1406.566450][T22244] lo speed is unknown, defaulting to 1000 [ 1407.239410][T10644] Bluetooth: hci2: command tx timeout [ 1407.595180][T22244] chnl_net:caif_netlink_parms(): no params data found [ 1407.779787][T22244] bridge0: port 1(bridge_slave_0) entered blocking state [ 1407.808898][T22244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.020298][T22244] bridge_slave_0: entered allmulticast mode [ 1408.472689][T22244] bridge_slave_0: entered promiscuous mode [ 1408.481796][T22244] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.489490][T22244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.501548][T22244] bridge_slave_1: entered allmulticast mode [ 1408.531928][T22244] bridge_slave_1: entered promiscuous mode [ 1408.859582][T22244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1409.232813][T10644] Bluetooth: hci2: command tx timeout [ 1409.366577][T22244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1409.443540][T22244] team0: Port device team_slave_0 added [ 1409.456044][T22244] team0: Port device team_slave_1 added [ 1409.642317][ T29] audit: type=1400 audit(2000001991.857:1752): avc: denied { ioctl } for pid=22327 comm="syz.2.4257" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1410.144099][T20540] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1410.307258][T22244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.324481][T22244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.391815][T22244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1410.402951][T20540] usb 10-1: Using ep0 maxpacket: 8 [ 1410.415884][T20540] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 1410.447642][T20540] usb 10-1: config 179 has no interface number 0 [ 1410.470644][T22244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1410.482830][T20540] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1410.563747][T22244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.620532][T20540] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1410.633844][T22340] nbd: couldn't find a device at index -2146435068 [ 1410.649346][T20540] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1410.678446][T22342] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4261'. [ 1410.687532][T22342] openvswitch: netlink: Flow key attr not present in new flow. [ 1410.719574][T22244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1410.734770][T20540] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1410.797589][T20540] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1410.878373][T20540] usb 10-1: config 179 interface 65 has no altsetting 0 [ 1410.904616][T20540] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1410.944914][T20540] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.961165][T22244] hsr_slave_0: entered promiscuous mode [ 1411.013065][T22244] hsr_slave_1: entered promiscuous mode [ 1411.048921][T22244] debugfs: 'hsr0' already exists in 'hsr' [ 1411.071652][T22244] Cannot create hsr debugfs directory [ 1411.082670][T20540] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input57 [ 1411.793491][T20540] usb 10-1: USB disconnect, device number 7 [ 1411.799471][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1411.854335][T22347] netlink: 'syz.2.4262': attribute type 1 has an invalid length. [ 1411.862346][T22347] netlink: 280 bytes leftover after parsing attributes in process `syz.2.4262'. [ 1411.937727][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1412.071736][T22350] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4263'. [ 1412.080831][T22350] openvswitch: netlink: Flow key attr not present in new flow. [ 1412.792593][ T5922] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1412.944355][ T29] audit: type=1400 audit(2000001995.080:1753): avc: denied { append } for pid=22359 comm="syz.9.4266" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1413.229976][ T5922] usb 7-1: Using ep0 maxpacket: 16 [ 1413.242612][ T5922] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 1413.253910][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1413.262333][ T5922] usb 7-1: Product: syz [ 1413.266676][ T5922] usb 7-1: SerialNumber: syz [ 1413.702378][ T5922] usb 7-1: config 0 descriptor?? [ 1413.727727][ T5922] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1413.754433][ T5922] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 1413.770654][ T5922] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1413.794196][ T5922] dvb_usb_af9035 7-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 1413.913538][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079622400: rx timeout, send abort [ 1413.975059][ T29] audit: type=1400 audit(2000001996.382:1754): avc: denied { read } for pid=5163 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1414.081750][ T29] audit: type=1400 audit(2000001996.382:1755): avc: denied { search } for pid=5163 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1414.182963][ T29] audit: type=1400 audit(2000001996.382:1756): avc: denied { append } for pid=5163 comm="syslogd" name="messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1414.282063][ T29] audit: type=1400 audit(2000001996.382:1757): avc: denied { open } for pid=5163 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1414.311998][ T29] audit: type=1400 audit(2000001996.382:1758): avc: denied { getattr } for pid=5163 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1414.348675][ T29] audit: type=1400 audit(2000001996.718:1759): avc: denied { write } for pid=22356 comm="syz.6.4265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1414.368529][ T5922] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1414.398090][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079622400: abort rx timeout. Force session deactivation [ 1414.515794][ T5922] usb 9-1: Using ep0 maxpacket: 32 [ 1414.530909][ T29] audit: type=1400 audit(2000001996.991:1760): avc: denied { read } for pid=5476 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1414.560399][ T5922] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 1414.571665][ T5922] usb 9-1: config 0 has no interface number 0 [ 1414.578204][ T5922] usb 9-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1414.588596][ T5922] usb 9-1: config 0 interface 89 has no altsetting 0 [ 1414.597695][ T5922] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1414.612251][ T5922] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.631448][ T5922] usb 9-1: Product: syz [ 1414.637949][ T5922] usb 9-1: Manufacturer: syz [ 1414.647336][ T5922] usb 9-1: SerialNumber: syz [ 1414.665888][T22244] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1414.682498][ T5922] usb 9-1: config 0 descriptor?? [ 1414.707075][ T5922] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1414.729927][ T5922] em28xx 9-1:0.89: Video interface 89 found: [ 1415.208370][T22244] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1415.611848][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079623c00: rx timeout, send abort [ 1415.665158][ T5922] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 1415.686507][T22244] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1415.819491][T22244] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1416.006640][ T5922] em28xx 9-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1416.036060][ T5922] em28xx 9-1:0.89: board has no eeprom [ 1416.115991][ T5922] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 1416.147314][ T5922] em28xx 9-1:0.89: analog set to bulk mode. [ 1416.177696][T20522] em28xx 9-1:0.89: Registering V4L2 extension [ 1416.211435][ T5922] usb 9-1: USB disconnect, device number 5 [ 1416.260490][ T5922] em28xx 9-1:0.89: Disconnecting em28xx [ 1416.334465][T20522] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 1416.358080][T20522] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 1416.379638][T22244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1416.408435][T20522] em28xx 9-1:0.89: No AC97 audio processor [ 1416.462056][T12493] usb 7-1: USB disconnect, device number 15 [ 1416.475452][T20522] usb 9-1: Decoder not found [ 1416.505649][T20522] em28xx 9-1:0.89: failed to create media graph [ 1416.552634][T20522] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 1417.006951][T22244] 8021q: adding VLAN 0 to HW filter on device team0 [ 1417.011385][T20522] em28xx 9-1:0.89: Registering snapshot button... [ 1417.066914][T20522] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input58 [ 1417.136946][T10524] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.144145][T10524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1417.201751][ T29] audit: type=1400 audit(2000001999.784:1761): avc: denied { create } for pid=22433 comm="syz.6.4273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1417.242291][T10524] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.249472][T10524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1417.289959][T20522] em28xx 9-1:0.89: Remote control support is not available for this card. [ 1417.489011][ T5922] em28xx 9-1:0.89: Closing input extension [ 1417.500826][ T5922] em28xx 9-1:0.89: Deregistering snapshot button [ 1418.069109][ T5922] em28xx 9-1:0.89: Freeing device [ 1418.253784][T22452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4277'. [ 1418.262979][T22452] openvswitch: netlink: Flow key attr not present in new flow. [ 1418.446437][T22244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1418.664097][T22244] veth0_vlan: entered promiscuous mode [ 1418.736885][T22244] veth1_vlan: entered promiscuous mode [ 1418.792965][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 1418.918339][T22244] veth0_macvtap: entered promiscuous mode [ 1418.966976][T22244] veth1_macvtap: entered promiscuous mode [ 1419.048467][T22244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1419.091710][T22244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1419.160315][T10499] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.189299][T10499] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.217310][T10499] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1419.258257][T10499] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1420.564291][ T29] audit: type=1400 audit(2000002003.269:1762): avc: denied { write } for pid=22488 comm="syz.8.4280" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1420.688811][T20259] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1420.701204][T20259] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1420.733615][T20259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1420.746207][T20259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1422.558336][T10644] Bluetooth: hci3: Unable to find connection with handle 0x0000 [ 1422.924480][T22518] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4288'. [ 1422.933721][T22518] openvswitch: netlink: Flow key attr not present in new flow. [ 1424.440603][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803e7efc00: rx timeout, send abort [ 1424.449385][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803e7efc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1425.062396][ T29] audit: type=1400 audit(2000002008.047:1763): avc: denied { append } for pid=22544 comm="syz.6.4292" name="sg0" dev="devtmpfs" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1426.038395][T22566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4295'. [ 1427.431593][ T9292] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1427.949978][T10644] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 1428.126548][ T9292] usb 7-1: Using ep0 maxpacket: 8 [ 1428.137752][ T9292] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1428.272018][ T9292] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.437706][ T9292] usb 7-1: config 0 has no interface number 0 [ 1428.454743][ T9292] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1428.813972][ T9292] usb 7-1: config 0 interface 55 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1428.926528][ T9292] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1429.117425][ T9292] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.088343][T14129] IPVS: starting estimator thread 0... [ 1430.668919][ T9292] usb 7-1: config 0 descriptor?? [ 1430.726766][T22600] IPVS: using max 54 ests per chain, 129600 per kthread [ 1430.778388][ T9292] usb 7-1: can't set config #0, error -71 [ 1430.825318][ T9292] usb 7-1: USB disconnect, device number 16 [ 1430.896424][ T29] audit: type=1400 audit(2000002014.167:1764): avc: denied { set_context_mgr } for pid=22604 comm="syz.9.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1431.614985][ T29] audit: type=1400 audit(2000002014.167:1765): avc: denied { map } for pid=22604 comm="syz.9.4305" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1431.697776][ T29] audit: type=1400 audit(2000002014.346:1766): avc: denied { call } for pid=22604 comm="syz.9.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1431.720801][T22609] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1431.729072][ T29] audit: type=1400 audit(2000002014.346:1767): avc: denied { transfer } for pid=22604 comm="syz.9.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1431.770191][ T29] audit: type=1400 audit(2000002015.007:1768): avc: denied { read } for pid=22610 comm="syz.6.4307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1436.783638][ T29] audit: type=1400 audit(2000002020.351:1769): avc: denied { listen } for pid=22640 comm="syz.8.4310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1438.255825][ T29] audit: type=1400 audit(2000002021.800:1770): avc: denied { read } for pid=22654 comm="syz.9.4314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1438.559460][ T29] audit: type=1400 audit(2000002022.220:1771): avc: denied { append } for pid=22661 comm="syz.0.4316" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1441.291585][T22691] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR [ 1442.614181][ T29] audit: type=1400 audit(2000002026.147:1772): avc: denied { ioctl } for pid=22707 comm="syz.8.4313" path="socket:[93705]" dev="sockfs" ino=93705 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1443.381408][T22729] netlink: 13 bytes leftover after parsing attributes in process `syz.8.4323'. [ 1444.021636][T22736] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4326'. [ 1444.030723][T22736] openvswitch: netlink: Flow key attr not present in new flow. [ 1444.046451][T22734] tipc: Started in network mode [ 1444.066070][T22734] tipc: Node identity caa2aa7ae56e, cluster identity 4711 [ 1444.089343][T22734] tipc: Enabled bearer , priority 0 [ 1444.116597][T22740] syzkaller0: entered promiscuous mode [ 1444.137549][T20540] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1444.140586][T22740] syzkaller0: entered allmulticast mode [ 1444.219927][ T29] audit: type=1400 audit(2000002028.163:1773): avc: denied { bind } for pid=22737 comm="syz.8.4327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1444.311156][T20540] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1444.339337][T20540] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1444.370742][T20540] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 1444.373815][ T29] audit: type=1400 audit(2000002028.163:1774): avc: denied { connect } for pid=22737 comm="syz.8.4327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1444.412284][T20540] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1444.424015][T20540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.461660][T20540] usb 3-1: Product: syz [ 1444.465928][T20540] usb 3-1: Manufacturer: syz [ 1444.470571][T20540] usb 3-1: SerialNumber: syz [ 1444.505037][T20540] usb 3-1: config 0 descriptor?? [ 1444.551107][T22728] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1444.737917][T22728] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1444.748798][T20540] usb 3-1: ucan: probing device on interface #0 [ 1445.254864][T22740] tipc: Resetting bearer [ 1445.706606][T20540] usb 3-1: ucan: could not read protocol version, ret=0 [ 1445.726577][T20540] usb 3-1: ucan: probe failed; try to update the device firmware [ 1446.369823][ T9292] usb 3-1: USB disconnect, device number 54 [ 1446.643073][T22780] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4330'. [ 1446.653605][T22783] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 1446.730419][ T29] audit: type=1400 audit(2000002030.777:1775): avc: denied { write } for pid=22776 comm="syz.8.4330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1446.887643][T22731] tipc: Resetting bearer [ 1447.348731][T22731] tipc: Disabling bearer [ 1447.372421][ T5922] tipc: Node number set to 801942138 [ 1447.406979][T22773] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1447.416453][T22773] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1447.426079][T22773] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1447.497932][ T29] audit: type=1400 audit(2000002031.512:1776): avc: denied { firmware_load } for pid=22767 comm="syz.6.4329" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1447.677231][ T29] audit: type=1400 audit(2000002031.785:1777): avc: denied { wake_alarm } for pid=22791 comm="syz.0.4335" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1447.927021][ T9292] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1448.700042][ T9292] usb 7-1: Using ep0 maxpacket: 32 [ 1448.795905][ T9292] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 1448.833778][ T9292] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1448.861920][ T9292] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1448.988431][ T9292] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1449.215086][ T9292] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1449.533635][ T9292] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1449.547830][ T9292] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1449.570819][ T9292] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.589107][ T9292] usb 7-1: config 0 descriptor?? [ 1449.797002][T22813] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4339'. [ 1449.806285][T22813] openvswitch: netlink: Flow key attr not present in new flow. [ 1449.825587][ T9292] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1450.041998][ T29] audit: type=1400 audit(2000002034.273:1778): avc: denied { read write } for pid=22786 comm="syz.6.4333" name="lp0" dev="devtmpfs" ino=3884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1450.109971][ T29] audit: type=1400 audit(2000002034.273:1779): avc: denied { open } for pid=22786 comm="syz.6.4333" path="/dev/usb/lp0" dev="devtmpfs" ino=3884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 1450.261072][T20540] usb 7-1: USB disconnect, device number 17 [ 1450.283200][ T29] audit: type=1400 audit(2000002034.483:1780): avc: denied { setopt } for pid=22786 comm="syz.6.4333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1450.327295][T22827] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4340'. [ 1450.450071][T20540] usblp0: removed [ 1451.163184][T22839] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1451.790179][ T29] audit: type=1400 audit(2000002036.110:1781): avc: denied { ioctl } for pid=22851 comm="syz.6.4343" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1453.031258][T10511] smc: removing ib device syz1 [ 1453.044981][ T5922] syz1: Port: 1 Link DOWN [ 1454.494002][ T29] audit: type=1400 audit(2000002038.536:1782): avc: denied { watch } for pid=22886 comm="syz.6.4347" path="/231/bus" dev="tmpfs" ino=1260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1455.621574][T22894] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 1455.951238][ T29] audit: type=1400 audit(2000002038.536:1783): avc: denied { watch_sb watch_reads } for pid=22886 comm="syz.6.4347" path="/231/bus" dev="tmpfs" ino=1260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1458.125166][ T29] audit: type=1400 audit(2000002042.042:1784): avc: denied { append } for pid=22901 comm="syz.6.4351" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1458.150012][T22892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1458.166400][T22903] loop9: detected capacity change from 0 to 2640 [ 1458.173928][T22903] buffer_io_error: 11 callbacks suppressed [ 1458.173942][T22903] Buffer I/O error on dev loop9, logical block 0, async page read [ 1458.187841][T22903] Buffer I/O error on dev loop9, logical block 0, async page read [ 1458.195719][T22903] Buffer I/O error on dev loop9, logical block 0, async page read [ 1458.203635][T22903] Buffer I/O error on dev loop9, logical block 0, async page read [ 1458.211587][T22903] Buffer I/O error on dev loop9, logical block 0, async page read [ 1458.219502][T22903] Buffer I/O error on dev loop9, logical block 0, async page read [ 1458.227416][T22903] Buffer I/O error on dev loop9, logical block 0, async page read [ 1458.235760][T22903] Buffer I/O error on dev loop9, logical block 0, async page read [ 1458.243653][T22903] ldm_validate_partition_table(): Disk read failed. [ 1458.250273][T22903] Buffer I/O error on dev loop9, logical block 0, async page read [ 1458.258662][T22903] Buffer I/O error on dev loop9, logical block 0, async page read [ 1458.266782][T22903] Dev loop9: unable to read RDB block 0 [ 1458.272584][T22903] loop9: unable to read partition table [ 1458.278438][T22903] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1458.342754][T22892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1458.458215][T22892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1458.472890][T22892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1459.025184][ T29] audit: type=1400 audit(2000002043.596:1785): avc: denied { watch watch_reads } for pid=22905 comm="syz.0.4353" path="pipe:[91607]" dev="pipefs" ino=91607 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1459.129885][ T5811] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1459.341274][ T5811] usb 7-1: Using ep0 maxpacket: 16 [ 1459.523803][ T5811] usb 7-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1459.573880][ T5811] usb 7-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1459.784763][T22914] tipc: Started in network mode [ 1459.792031][ T5811] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1459.804986][T22914] tipc: Node identity ac07140f, cluster identity 4711 [ 1459.819900][ T5811] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.822908][T22914] tipc: Enabling of bearer rejected, failed to enable media [ 1460.149255][ T29] audit: type=1326 audit(2000002044.646:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22917 comm="syz.0.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497cd9c799 code=0x7ffc0000 [ 1460.232632][ T29] audit: type=1326 audit(2000002044.657:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22917 comm="syz.0.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497cd9c799 code=0x7ffc0000 [ 1460.420264][ T29] audit: type=1326 audit(2000002044.667:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22917 comm="syz.0.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f497cd9c799 code=0x7ffc0000 [ 1460.446680][ T29] audit: type=1326 audit(2000002044.667:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22917 comm="syz.0.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497cd9c799 code=0x7ffc0000 [ 1461.010202][ T29] audit: type=1326 audit(2000002044.667:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22917 comm="syz.0.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497cd9c799 code=0x7ffc0000 [ 1461.274774][ T29] audit: type=1326 audit(2000002044.678:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22917 comm="syz.0.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f497cd9c799 code=0x7ffc0000 [ 1461.661555][ T29] audit: type=1326 audit(2000002044.678:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22917 comm="syz.0.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497cd9c799 code=0x7ffc0000 [ 1461.764041][ T29] audit: type=1326 audit(2000002044.678:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22917 comm="syz.0.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497cd9c799 code=0x7ffc0000 [ 1461.901139][ T29] audit: type=1326 audit(2000002044.678:1794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22917 comm="syz.0.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f497cd9c799 code=0x7ffc0000 [ 1461.949403][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1461.962625][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1461.977612][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1461.994021][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1462.009552][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1462.038074][ T29] audit: type=1326 audit(2000002044.678:1795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22917 comm="syz.0.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f497cd9c799 code=0x7ffc0000 [ 1462.111617][T22238] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1462.132558][T22238] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1462.381112][ T5811] usbhid 7-1:128.0: can't add hid device: -71 [ 1462.442366][ T5811] usbhid 7-1:128.0: probe with driver usbhid failed with error -71 [ 1462.479322][ T5811] usb 7-1: USB disconnect, device number 18 [ 1462.614611][T22943] input: syz0 as /devices/virtual/input/input59 [ 1463.593418][T22238] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1463.633790][T22238] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.024766][T10644] Bluetooth: hci4: command tx timeout [ 1464.047363][T22238] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1464.085487][T22238] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.440905][T22935] lo speed is unknown, defaulting to 1000 [ 1464.491177][T22238] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1464.520647][T22238] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.059203][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 1465.059229][ T29] audit: type=1400 audit(2000002050.032:1808): avc: denied { create } for pid=22967 comm="syz.6.4368" name="#43" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1465.096771][ T29] audit: type=1400 audit(2000002050.043:1809): avc: denied { link } for pid=22967 comm="syz.6.4368" name="#43" dev="tmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1465.168747][ T29] audit: type=1400 audit(2000002050.106:1810): avc: denied { rename } for pid=22967 comm="syz.6.4368" name="#44" dev="tmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1465.968257][T10644] Bluetooth: hci4: command tx timeout [ 1466.667496][T22984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4370'. [ 1466.710201][T22935] chnl_net:caif_netlink_parms(): no params data found [ 1467.861966][T10511] Bluetooth: Error in BCSP hdr checksum [ 1467.940052][ T51] Bluetooth: hci4: command tx timeout [ 1467.969533][T22238] bridge0: port 3(batadv0) entered disabled state [ 1468.055907][T22238] bridge_slave_1: left allmulticast mode [ 1468.069449][T22238] bridge_slave_1: left promiscuous mode [ 1468.080757][T22238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.382824][ T29] audit: type=1400 audit(2000002053.297:1811): avc: denied { execute } for pid=23006 comm="syz.6.4377" name="file1" dev="tmpfs" ino=1325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1468.922126][ T29] audit: type=1400 audit(2000002053.308:1812): avc: denied { execute_no_trans } for pid=23006 comm="syz.6.4377" path="/241/file1" dev="tmpfs" ino=1325 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1468.964022][T22238] bridge_slave_0: left allmulticast mode [ 1468.994006][T22238] bridge_slave_0: left promiscuous mode [ 1469.042501][T22238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.191307][T23021] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4380'. [ 1469.218328][T23020] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4379'. [ 1469.227952][T23020] openvswitch: netlink: Flow key attr not present in new flow. [ 1469.538793][T10644] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1469.973234][ T51] Bluetooth: hci4: command tx timeout [ 1470.465232][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1471.597518][ T29] audit: type=1400 audit(2000002056.689:1813): avc: denied { watch } for pid=23037 comm="syz.0.4383" path="/19/file1" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1472.049107][T23040] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR [ 1472.672364][T22238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1472.697305][T22238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1472.707714][T22238] bond0 (unregistering): (slave team0): Releasing backup interface [ 1472.717171][T22238] bond0 (unregistering): Released all slaves [ 1472.734188][T22238] bond1 (unregistering): Released all slaves [ 1472.746536][T22238] bond2 (unregistering): Released all slaves [ 1473.431593][T22238] tipc: Left network mode [ 1473.557804][T22935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1473.584520][T22935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1473.653062][T22935] bridge_slave_0: entered allmulticast mode [ 1473.697446][T22935] bridge_slave_0: entered promiscuous mode [ 1473.752002][ T29] audit: type=1400 audit(2000002059.166:1814): avc: denied { mount } for pid=23067 comm="syz.0.4388" name="/" dev="ramfs" ino=95505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1473.817104][T22935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.854321][T22935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1473.900242][T22935] bridge_slave_1: entered allmulticast mode [ 1473.923631][T22935] bridge_slave_1: entered promiscuous mode [ 1474.804731][T22238] IPVS: stopping backup sync thread 8941 ... [ 1475.184209][T23080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4391'. [ 1475.193496][T23080] openvswitch: netlink: Flow key attr not present in new flow. [ 1475.395282][T23073] tmpfs: Bad value for 'nr_inodes' [ 1475.553054][T22935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1477.060660][T22935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1478.402691][T22935] team0: Port device team_slave_0 added [ 1478.542848][T22935] team0: Port device team_slave_1 added [ 1479.929258][T23127] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4398'. [ 1480.301105][T22935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1480.321965][T22935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1480.372500][T22935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1480.670570][T23137] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1481.113936][ T29] audit: type=1400 audit(2000002066.894:1815): avc: denied { bind } for pid=23139 comm="syz.2.4402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1481.466924][ T29] audit: type=1400 audit(2000002067.240:1816): avc: denied { setopt } for pid=23141 comm="syz.9.4404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1482.361007][T22935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1482.361026][T22935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1482.361043][T22935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1482.912855][ T5811] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1483.256230][ T29] audit: type=1400 audit(2000002069.119:1817): avc: denied { getopt } for pid=23150 comm="syz.2.4406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1483.628491][T22935] hsr_slave_0: entered promiscuous mode [ 1483.651780][T22935] hsr_slave_1: entered promiscuous mode [ 1483.716052][ T5811] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1483.730543][ T5811] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1483.732089][T22935] debugfs: 'hsr0' already exists in 'hsr' [ 1483.865366][T22935] Cannot create hsr debugfs directory [ 1483.872457][ T5811] usb 10-1: config 0 descriptor?? [ 1485.662572][ T5811] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1485.754761][ T29] audit: type=1400 audit(2000002071.765:1818): avc: denied { mount } for pid=23184 comm="syz.2.4412" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1485.857207][T23189] overlayfs: failed to clone lowerpath [ 1485.992578][ T5811] [drm:udl_init] *ERROR* Selecting channel failed [ 1486.297100][ T5811] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 1486.326827][ T5811] [drm] Initialized udl on minor 2 [ 1486.474102][ T5811] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1486.596276][ T5811] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1486.693368][ T976] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1486.746715][ T5811] usb 10-1: USB disconnect, device number 8 [ 1486.783032][ T976] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1487.275666][T22238] hsr_slave_0: left promiscuous mode [ 1487.285409][T22238] hsr_slave_1: left promiscuous mode [ 1487.304203][T22238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1487.313146][T22238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1487.330801][T22238] batman_adv: batadv0: Interface deactivated: macsec1 [ 1487.340964][T22238] batman_adv: batadv0: Removing interface: macsec1 [ 1487.393157][T22238] veth1_macvtap: left promiscuous mode [ 1487.410834][T22238] veth0_macvtap: left promiscuous mode [ 1487.416661][T22238] veth1_vlan: left promiscuous mode [ 1487.422603][T22238] veth0_vlan: left promiscuous mode [ 1488.201955][T22238] team_slave_1 (unregistering): left allmulticast mode [ 1488.245394][T22238] team0 (unregistering): Port device team_slave_1 removed [ 1488.260327][T22238] team_slave_0 (unregistering): left allmulticast mode [ 1488.271377][T22238] team0 (unregistering): Port device team_slave_0 removed [ 1488.831121][ T29] audit: type=1400 audit(2000002074.831:1819): avc: denied { getopt } for pid=23213 comm="syz.6.4418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1489.373197][T22238] lo (unregistering): left allmulticast mode [ 1489.516270][ T29] audit: type=1400 audit(2000002075.713:1820): avc: denied { unmount } for pid=5806 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 1489.844897][ T29] audit: type=1400 audit(2000002076.028:1821): avc: denied { create } for pid=23221 comm="syz.6.4420" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1490.101082][ T5922] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1490.133130][ T29] audit: type=1400 audit(2000002076.038:1822): avc: denied { write } for pid=23221 comm="syz.6.4420" name="file0" dev="tmpfs" ino=1394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1490.174665][ T29] audit: type=1400 audit(2000002076.038:1823): avc: denied { open } for pid=23221 comm="syz.6.4420" path="/254/file0" dev="tmpfs" ino=1394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1490.275187][ T29] audit: type=1400 audit(2000002076.038:1824): avc: denied { ioctl } for pid=23221 comm="syz.6.4420" path="/254/file0" dev="tmpfs" ino=1394 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1490.322857][ T5922] usb 3-1: Using ep0 maxpacket: 8 [ 1490.386415][T23230] openvswitch: netlink: Unknown key attributes 1 [ 1490.396077][ T5922] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1490.435749][ T5922] usb 3-1: config 179 has no interface number 0 [ 1490.465791][ T5922] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1490.477590][ T29] audit: type=1400 audit(2000002076.605:1825): avc: denied { unlink } for pid=18556 comm="syz-executor" name="file0" dev="tmpfs" ino=1394 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1490.531961][ T5922] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1490.600187][ T5922] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1490.642696][ T5922] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1490.779074][ T5922] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1490.887101][ T5922] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1490.941376][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.020347][T23225] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1492.124469][T23233] syz.6.4423 (23233): drop_caches: 2 [ 1492.259686][ T29] audit: type=1400 audit(2000002078.600:1826): avc: denied { bind } for pid=23243 comm="syz.9.4425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1492.800085][ T29] audit: type=1400 audit(2000002078.621:1827): avc: denied { name_bind } for pid=23243 comm="syz.9.4425" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1492.851547][ T5922] usb 3-1: USB disconnect, device number 55 [ 1492.857799][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1492.857836][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1492.876789][ T29] audit: type=1400 audit(2000002078.621:1828): avc: denied { node_bind } for pid=23243 comm="syz.9.4425" saddr=ff01::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1493.763621][T22238] IPVS: stop unused estimator thread 0... [ 1494.265188][T23271] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1494.273030][T23271] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1494.286682][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1494.286704][ T29] audit: type=1400 audit(2000002080.721:1830): avc: denied { create } for pid=23268 comm="syz.0.4429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1494.423728][ T29] audit: type=1400 audit(2000002080.731:1831): avc: denied { write } for pid=23268 comm="syz.0.4429" path="socket:[95899]" dev="sockfs" ino=95899 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1495.790901][ T29] audit: type=1400 audit(2000002081.309:1832): avc: denied { connect } for pid=23275 comm="syz.2.4430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1495.889533][ T29] audit: type=1400 audit(2000002081.393:1833): avc: denied { write } for pid=23275 comm="syz.2.4430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1495.916468][ T29] audit: type=1400 audit(2000002081.823:1834): avc: denied { read } for pid=23275 comm="syz.2.4430" name="usbmon8" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1496.065398][ T29] audit: type=1400 audit(2000002082.002:1835): avc: denied { map } for pid=23275 comm="syz.2.4430" path="/dev/usbmon8" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1496.249752][T22935] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1496.709459][T22935] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1496.731208][ T29] audit: type=1400 audit(2000002082.012:1836): avc: denied { execute } for pid=23275 comm="syz.2.4430" path="/dev/usbmon8" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1496.773485][T22935] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1497.499664][ T29] audit: type=1400 audit(2000002083.923:1837): avc: denied { write } for pid=23287 comm="syz.2.4432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1497.917806][T22935] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1498.343322][T23294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4434'. [ 1498.352646][T23294] openvswitch: netlink: Flow key attr not present in new flow. [ 1500.152412][ T5922] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1500.226368][T22935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1500.309164][T22935] 8021q: adding VLAN 0 to HW filter on device team0 [ 1500.325519][ T5922] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1500.342992][T18755] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1500.362671][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1500.369805][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1500.408962][ T5922] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1500.451443][ T5922] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1500.452314][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1500.469676][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1500.550189][ T5922] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1500.613463][T18755] usb 1-1: Using ep0 maxpacket: 8 [ 1500.626509][T18755] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1500.641990][ T5922] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1500.665066][T18755] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1500.685543][T22935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1500.704134][T18755] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.733254][T18755] usb 1-1: Product: syz [ 1500.733286][ T5922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.746252][T18755] usb 1-1: Manufacturer: syz [ 1500.750917][T18755] usb 1-1: SerialNumber: syz [ 1500.789636][ T5922] usb 7-1: Product: syz [ 1500.795345][T18755] usb 1-1: config 0 descriptor?? [ 1500.832181][T18755] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1500.847793][ T5922] usb 7-1: Manufacturer: syz [ 1500.860124][T18755] usb 1-1: setting power ON [ 1500.878332][ T5922] usb 7-1: SerialNumber: syz [ 1500.884359][T18755] dvb-usb: bulk message failed: -22 (2/0) [ 1500.928720][T18755] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1500.944682][ T5922] usb 7-1: config 0 descriptor?? [ 1500.983086][ T5922] garmin_gps 7-1:0.0: Garmin GPS usb/tty converter detected [ 1500.983412][T18755] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1501.026891][ T5922] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1501.047901][T18755] usb 1-1: media controller created [ 1501.072150][T23320] dvb-usb: bulk message failed: -22 (3/0) [ 1501.108998][ T5922] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1501.120015][T23320] dvb-usb: bulk message failed: -22 (4/0) [ 1501.132431][T23320] cxusb: i2c read failed [ 1501.141999][T18755] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1501.287543][T18755] usb 1-1: selecting invalid altsetting 6 [ 1502.724960][T18755] usb 1-1: digital interface selection failed (-22) [ 1502.731639][T18755] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1502.772983][ T284] ------------[ cut here ]------------ [ 1502.777175][T20522] usb 7-1: USB disconnect, device number 19 [ 1502.779524][ T284] time_after(jiffies, timeout) [ 1502.785911][ T284] WARNING: io_uring/io_uring.c:2342 at io_ring_exit_work+0x42d/0xd15, CPU#0: kworker/u8:5/284 [ 1502.801355][ T284] Modules linked in: [ 1502.806162][ T284] CPU: 0 UID: 0 PID: 284 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1502.817168][ T284] Tainted: [L]=SOFTLOCKUP [ 1502.821716][ T284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1502.831820][ T284] Workqueue: iou_exit io_ring_exit_work [ 1502.837385][ T284] RIP: 0010:io_ring_exit_work+0x42d/0xd15 [ 1502.843600][ T284] Code: 8e e8 07 0e 40 01 48 8b 05 40 b4 0b 0d 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 8e 7c d3 00 4d 85 ed 79 12 e8 a4 81 d3 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 92 81 d3 00 48 8b 74 24 38 [ 1502.863343][ T284] RSP: 0018:ffffc900015f7ab0 EFLAGS: 00010293 [ 1502.869482][ T284] RAX: 0000000000000000 RBX: ffff8880561d0778 RCX: ffffffff81355e52 [ 1502.877438][ T284] RDX: ffff888021728000 RSI: ffffffff81355e5c RDI: ffff888021728000 [ 1502.885390][ T284] RBP: ffffc900015f7c38 R08: 0000000000000007 R09: 0000000000000000 [ 1502.893575][ T284] R10: ffffffffffffff7d R11: 0000000000000000 R12: ffff8880561d0000 [ 1502.901612][ T284] R13: ffffffffffffff7d R14: dffffc0000000000 R15: 0000000000000000 [ 1502.909572][ T284] FS: 0000000000000000(0000) GS:ffff88812433f000(0000) knlGS:0000000000000000 [ 1502.918541][ T284] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1502.925128][ T284] CR2: 0000000000000000 CR3: 000000000e598000 CR4: 00000000003526f0 [ 1502.933074][ T284] Call Trace: [ 1502.936339][ T284] [ 1502.939252][ T284] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1502.944791][ T284] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1502.950583][ T284] ? debug_object_deactivate+0x2e4/0x3b0 [ 1502.956214][ T284] ? rcu_is_watching+0x12/0xc0 [ 1502.960959][ T284] process_one_work+0xa23/0x19a0 [ 1502.965900][ T284] ? __pfx_process_one_work+0x10/0x10 [ 1502.971254][ T284] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1502.976720][ T284] worker_thread+0x5ef/0xe50 [ 1502.981313][ T284] ? kthread+0x13a/0x450 [ 1502.985540][ T284] ? __pfx_worker_thread+0x10/0x10 [ 1502.990643][ T284] kthread+0x370/0x450 [ 1502.994992][ T284] ? __pfx_kthread+0x10/0x10 [ 1502.999595][ T284] ret_from_fork+0x754/0xd80 [ 1503.004277][ T284] ? __pfx_ret_from_fork+0x10/0x10 [ 1503.009370][ T284] ? __switch_to+0x7b4/0x1120 [ 1503.014049][ T284] ? __pfx_kthread+0x10/0x10 [ 1503.018618][ T284] ret_from_fork_asm+0x1a/0x30 [ 1503.023390][ T284] [ 1503.026406][ T284] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1503.033662][ T284] CPU: 0 UID: 0 PID: 284 Comm: kworker/u8:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 1503.044578][ T284] Tainted: [L]=SOFTLOCKUP [ 1503.048879][ T284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1503.059377][ T284] Workqueue: iou_exit io_ring_exit_work [ 1503.064959][ T284] Call Trace: [ 1503.068223][ T284] [ 1503.071136][ T284] dump_stack_lvl+0x100/0x190 [ 1503.075839][ T284] vpanic+0x552/0x970 [ 1503.079842][ T284] ? __pfx_vpanic+0x10/0x10 [ 1503.084351][ T284] panic+0xd1/0xe0 [ 1503.088058][ T284] ? __pfx_panic+0x10/0x10 [ 1503.092452][ T284] ? check_panic_on_warn+0x1f/0x90 [ 1503.097554][ T284] check_panic_on_warn.cold+0x19/0x34 [ 1503.102903][ T284] ? io_ring_exit_work+0x42d/0xd15 [ 1503.107999][ T284] __warn.cold+0x191/0x348 [ 1503.112404][ T284] __report_bug+0x296/0x3d0 [ 1503.116884][ T284] ? io_ring_exit_work+0x42d/0xd15 [ 1503.121997][ T284] ? __pfx___report_bug+0x10/0x10 [ 1503.127024][ T284] ? trace_contention_end+0x140/0x180 [ 1503.132410][ T284] ? __mutex_lock+0x26a/0x1b90 [ 1503.137176][ T284] ? find_held_lock+0x2b/0x80 [ 1503.141833][ T284] ? io_req_caches_free+0x49/0x60 [ 1503.146849][ T284] ? io_req_caches_free+0x49/0x60 [ 1503.151856][ T284] ? io_ring_exit_work+0x42d/0xd15 [ 1503.156943][ T284] report_bug+0xb2/0x220 [ 1503.161166][ T284] ? io_ring_exit_work+0x42d/0xd15 [ 1503.166256][ T284] handle_bug+0x16a/0x2a0 [ 1503.170575][ T284] exc_invalid_op+0x17/0x50 [ 1503.175078][ T284] asm_exc_invalid_op+0x1a/0x20 [ 1503.179902][ T284] RIP: 0010:io_ring_exit_work+0x42d/0xd15 [ 1503.185612][ T284] Code: 8e e8 07 0e 40 01 48 8b 05 40 b4 0b 0d 4c 8b 6c 24 28 31 ff 49 29 c5 4c 89 ee e8 8e 7c d3 00 4d 85 ed 79 12 e8 a4 81 d3 00 90 <0f> 0b 90 48 c7 44 24 38 70 17 00 00 e8 92 81 d3 00 48 8b 74 24 38 [ 1503.205200][ T284] RSP: 0018:ffffc900015f7ab0 EFLAGS: 00010293 [ 1503.211251][ T284] RAX: 0000000000000000 RBX: ffff8880561d0778 RCX: ffffffff81355e52 [ 1503.219200][ T284] RDX: ffff888021728000 RSI: ffffffff81355e5c RDI: ffff888021728000 [ 1503.227142][ T284] RBP: ffffc900015f7c38 R08: 0000000000000007 R09: 0000000000000000 [ 1503.235083][ T284] R10: ffffffffffffff7d R11: 0000000000000000 R12: ffff8880561d0000 [ 1503.243025][ T284] R13: ffffffffffffff7d R14: dffffc0000000000 R15: 0000000000000000 [ 1503.250975][ T284] ? io_ring_exit_work+0x422/0xd15 [ 1503.256072][ T284] ? io_ring_exit_work+0x42c/0xd15 [ 1503.261166][ T284] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1503.266601][ T284] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1503.272383][ T284] ? debug_object_deactivate+0x2e4/0x3b0 [ 1503.278003][ T284] ? rcu_is_watching+0x12/0xc0 [ 1503.282750][ T284] process_one_work+0xa23/0x19a0 [ 1503.287668][ T284] ? __pfx_process_one_work+0x10/0x10 [ 1503.293030][ T284] ? __pfx_io_ring_exit_work+0x10/0x10 [ 1503.298469][ T284] worker_thread+0x5ef/0xe50 [ 1503.303036][ T284] ? kthread+0x13a/0x450 [ 1503.307248][ T284] ? __pfx_worker_thread+0x10/0x10 [ 1503.312328][ T284] kthread+0x370/0x450 [ 1503.316366][ T284] ? __pfx_kthread+0x10/0x10 [ 1503.320947][ T284] ret_from_fork+0x754/0xd80 [ 1503.325533][ T284] ? __pfx_ret_from_fork+0x10/0x10 [ 1503.330623][ T284] ? __switch_to+0x7b4/0x1120 [ 1503.335280][ T284] ? __pfx_kthread+0x10/0x10 [ 1503.339855][ T284] ret_from_fork_asm+0x1a/0x30 [ 1503.344605][ T284] [ 1503.348099][ T284] Kernel Offset: disabled [ 1503.352401][ T284] Rebooting in 86400 seconds..