last executing test programs: 18m26.923487558s ago: executing program 2 (id=64): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001080)=@mangle={'mangle\x00', 0x64, 0x6, 0x6a0, 0x2d8, 0xd0, 0x0, 0x3f0, 0x2d8, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x6, 0x0, {[{{@uncond, 0x11e, 0xa8, 0xd0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x400, 0x5}}}, {{@ipv6={@rand_addr=' \x01\x00', @dev, [0x0, 0x0, 0x0, 0xff], [], 'batadv_slave_0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private2, @private1, @dev={0xfe, 0x80, '\x00', 0x39}, @loopback, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @local, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x700) r1 = socket(0xa, 0x3, 0x3d) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x20008010}, 0x4040000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrusage(0x0, &(0x7f0000000000)) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e22, 0x8cfb, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, {0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, 0x4}, 0xffffffffffffffff, {[0x120, 0x1, 0x9, 0x7f, 0x1000, 0xb, 0x8]}}, 0x5c) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r4, 0x3b87, &(0x7f0000000240)={0x18, 0x1, 0x0, 0x0, 0x0, 0xbe}) r5 = socket(0x10, 0x6, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x7fff, 0x0, 0xfffffffd, 0x1}, 0x10) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r5, 0x8983, &(0x7f0000000440)) landlock_create_ruleset(&(0x7f0000000200)={0x48, 0x3}, 0x18, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) write(r5, 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x15) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000480)=0x5, 0xffffffffffffff5d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x20002, 0x0) 18m26.436690862s ago: executing program 2 (id=66): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x3], 0x5, 0x14, 0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) setuid(0xee01) syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) pselect6(0x40, &(0x7f0000000100)={0x2, 0xffffffffffffffff, 0xac, 0x3, 0xfffffffffffffffe}, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0x0, 0x4, 0xffffffffffffffff}, 0x0, 0x0) r4 = syz_io_uring_setup(0x6724, &(0x7f0000000500)={0x0, 0xd2a7, 0x800, 0x9, 0x1a}, &(0x7f0000000680)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x40, 0x0, @fd=r4, 0x80000, 0x0}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) exit(0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) syz_open_dev$tty1(0xc, 0x4, 0x1) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r7, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r7, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) 18m22.770616255s ago: executing program 2 (id=75): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x78082, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000080)=0x3ba, 0x5, 0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r6 = io_uring_setup(0xfc6, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, &(0x7f0000000100)='barrier') close_range(r6, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="269a585d41ac64b0b765f4a4467f9aedf3b81349c1e0b894a454dfb08e5924e3b552be256c9a399a72d6b33832a8ac7e9db221275f210bc7bfc95b3b55138e81afa57beb32d5f904d1237cbe107d9ec394ccb46c82"]}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 18m21.241727044s ago: executing program 2 (id=81): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88), 0x0) sendto$inet6(r0, &(0x7f0000000800)="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", 0x595, 0x0, &(0x7f0000000080)={0xa, 0x5e1d, 0x7, @mcast2, 0x3}, 0x1c) 18m21.117094232s ago: executing program 2 (id=83): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0049364, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x5ecfb203) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r6], 0x70}}, 0x0) sendto$packet(r4, 0x0, 0x0, 0x20008815, &(0x7f0000000400)={0x11, 0x7, r6, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000004c0)={{0x70000, 0x1000, 0x0, 0xc, 0x0, 0x63, 0x9, 0x5, 0x4, 0x5, 0xc}, {0x40000, 0x100000, 0x5, 0xfe, 0xfb, 0x0, 0xe1, 0xff, 0x6, 0x2, 0xd, 0xa0}, {0x1000, 0xeeee0000, 0xf, 0x7, 0xff, 0x8, 0x10, 0x5, 0x7f, 0xfa, 0x4, 0xe}, {0x5000, 0xffff1000, 0xf, 0x6, 0x8b, 0xfa, 0x88, 0x1, 0x0, 0x5, 0xe3, 0x8}, {0xeeee8000, 0x1, 0x9, 0xa, 0xf, 0x8, 0x15, 0xff, 0x40, 0x6, 0xe}, {0x1000, 0xf000, 0xa, 0x80, 0x78, 0x6, 0xcc, 0x0, 0x3, 0x2, 0x9}, {0xd000, 0x60000, 0xd, 0x7, 0x3, 0xdf, 0x2e, 0x0, 0x2, 0x4, 0x6, 0xad}, {0xdddd0000, 0xa000, 0x0, 0x2, 0x6, 0xf9, 0x3, 0x6, 0xd, 0x1, 0xfe, 0x9}, {0x54000, 0x2}, {0xdddd0000, 0x5}, 0x10, 0x0, 0x10000, 0x10000, 0xa, 0xa100, 0x0, [0x4, 0xdb, 0x0, 0x4]}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x75, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x8, 0xfffffff8, 0x8, 0xff, 0xff}) ioctl$KVM_RUN(r7, 0xae80, 0x0) bind$l2tp6(r1, &(0x7f0000000380)={0xa, 0x0, 0x401, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3, 0x4}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@mpls_getnetconf={0x2c, 0x52, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x48c1}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xe}, @NETCONFA_IFINDEX={0x8, 0x1, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8080) 18m19.494504577s ago: executing program 2 (id=87): socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100ffffffff00000000010000000800010003000000340004800500050001000000050003000000000005000300000000000500030080000000050003000000000005001300010000000800020002"], 0x58}}, 0x0) 18m3.123222483s ago: executing program 32 (id=87): socket(0x200000000000011, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100ffffffff00000000010000000800010003000000340004800500050001000000050003000000000005000300000000000500030080000000050003000000000005001300010000000800020002"], 0x58}}, 0x0) 13m5.955677318s ago: executing program 4 (id=1147): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRES64=r0], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) syz_usb_connect$uac2(0x3, 0xab, &(0x7f0000000140)=ANY=[@ANYBLOB="1201100100000020392ad23f400001020301090299000301104002080b000201ff200409040000000101200009240102000b29000010240206050206040107000000050300102402d90404040506050000000a01030904010000010220000904010101010220001024010a04000200000004010400000609050119ff0302f5fd082501000c08010109040200000102200009040201010102200009058209400005077f082501800f010900"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001", @ANYRES8=0x0, @ANYRES64=0x0], 0x7c}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES8=r3], 0xfc}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x2}]}}}]}, 0x3c}}, 0x0) ioctl$XFS_IOC_GETBMAPX(r3, 0xc0205838, &(0x7f0000000140)={0x5, 0x1, 0x3, 0x1, 0x6a, 0x8, 0x6}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) socket$netlink(0x10, 0x3, 0x0) 13m2.361551951s ago: executing program 4 (id=1159): socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) eventfd2(0x1, 0x80800) openat2$dir(0xffffff9c, 0x0, &(0x7f0000000100)={0x100, 0x20, 0x4}, 0x18) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$inet6_mptcp(0xa, 0x1, 0x106) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x68c81, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x6000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20000004) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000040)=0x42, 0x4) r9 = dup(r8) setsockopt$sock_int(r9, 0x1, 0x12, &(0x7f0000000040)=0x4, 0x4) 13m0.83195824s ago: executing program 4 (id=1163): prlimit64(0x0, 0xe, &(0x7f0000000400)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010028bd7000fcdbdf251b000000080001", @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000480)=0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480741306806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc1105518, &(0x7f0000000c40)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x592a, 0x9, 0x0, 0xfffffffe, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x88c, 0x100000001, 0x8, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x40, 0x0, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0x541ec3ed, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x3ff, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) ioctl$TCSETSF2(r5, 0x8926, &(0x7f0000000000)={0x9, 0x4, 0x8, 0x0, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x8}) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x42000000) 12m59.592494152s ago: executing program 4 (id=1164): socket$inet(0x2, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) preadv(r0, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/4085, 0xff5}], 0x1, 0x9, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000380)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x3) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f00000003c0)={{r3, &(0x7f00000001c0)='@))+%\x00', 0x4c4840, &(0x7f0000000240)={@align=0x4, {0x9063, 0x1, 0x0, 0x3}}, 0x1, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x101}, {[0x5, 0x4, 0x8528]}, 0x62c0, 0xa9, &(0x7f0000000300)=""/169}) read$FUSE(r4, &(0x7f0000002400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000b00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r6, &(0x7f0000005340)={0x78, 0x0, r7, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r8, r9, 0xb, 0x8, 0x1000000}}}, 0x78) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x82010, r6, 0xbe79b000) mount$tmpfs(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x1000, &(0x7f00000004c0)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x0, 0x30, 0x70, 0x6d, 0x6d, 0x35, 0x32, 0x32, 0x6b]}}, {@huge_always}, {@gid={'gid', 0x3d, r5}}, {@mode={'mode', 0x3d, 0x7fffffff}}, {@quota}], [{@uid_gt={'uid>', r8}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}) 12m59.221150645s ago: executing program 4 (id=1166): socket$key(0xf, 0x3, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f00007e3000/0x8000)=nil, 0x8000, 0x0, 0x30, 0xffffffffffffffff, 0x0) r0 = socket(0xf, 0x3, 0x1003) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x0) r3 = memfd_create(&(0x7f0000000f80)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x03n\x0f\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x06\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3\x00\x00\x00\x00\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t\x8a/\x90\xd8\xb7\x80<\xef\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\x89\x9e\v\x9f\xa3\x03hSq\x95\x8f\xe1J\xd3#/f4\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00;\x90$\xab\xfd\x92\xb0\xde\xfb\x91b0T\x87\xdd\x00\x1b4\xbb\x13^\xb1~\x02\xc0\xd7\x8e\xdc:8y\xb2\xb7i<[C`\\\x98T\xca\xb4N\xe3@\xa2\xa0\xae&\xde\xa2\xbc\x00'/1188, 0x5) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7}) mmap(&(0x7f0000d7c000/0x2000)=nil, 0x2000, 0x2000002, 0x97052, r2, 0x0) recvmmsg(r1, &(0x7f0000000e40)=[{{&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000040)=""/20, 0x14}, {&(0x7f0000000340)=""/28, 0x1c}, {&(0x7f0000000380)=""/175, 0xaf}, {&(0x7f0000000440)=""/11, 0xb}, {&(0x7f0000000480)=""/201, 0xc9}], 0x5, &(0x7f0000000600)=""/95, 0x5f}, 0x2}, {{0x0, 0x0, &(0x7f0000000680), 0x0, &(0x7f00000006c0)=""/45, 0x2d}, 0x6}, {{&(0x7f0000000700)=@ieee802154, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000780)=""/5, 0x5}, {&(0x7f00000007c0)=""/170, 0xaa}, {&(0x7f0000000a40)=""/96, 0x60}, {&(0x7f0000000b00)=""/162, 0xa2}, {&(0x7f00000009c0)}, {&(0x7f0000000980)=""/3, 0x3}, {&(0x7f0000000880)=""/213, 0xd5}, {&(0x7f0000000ac0)=""/40, 0x28}, {&(0x7f0000000980)}, {&(0x7f0000000bc0)=""/148, 0x94}], 0xa, &(0x7f0000000d40)=""/207, 0xcf}}], 0x3, 0x40012143, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x2, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x2) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4952, &(0x7f00000002c0)={0x0, 0x10e3d6, 0x40, 0x801, 0x165}, 0x0, &(0x7f0000000100)) symlink(&(0x7f0000001440)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file2\x00') rename(0x0, 0x0) r4 = getpid() syz_pidfd_open(r4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) setns(0xffffffffffffffff, 0x24020000) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0xcd2, 0x0, 0xfffffffd, 0xf91, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4, 0x4, 0x0, 0x0, 0xfffffffffffffffd}) landlock_create_ruleset(0x0, 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x14) r5 = userfaultfd(0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 12m58.552488453s ago: executing program 4 (id=1169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000b45f433928f00"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000084000000080000000000000080100600", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000088d1c5f9268c06184b86b934293b95ec0000000000018e0c0000000000000000000010000000000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) statfs(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xf89, 0x0, &(0x7f0000000540)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e3", 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x28) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002c80)={0x0, 0x0, 0x0}, 0x2008000) dup3(r5, r4, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'dvmrp1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000050) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x15) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000040)=0x1000045, 0x4) writev(r8, &(0x7f0000000340)=[{&(0x7f0000000100)="f8", 0x1}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r9, 0x1) r10 = socket$alg(0x26, 0x5, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000006000000000a3c000000120a09000000000000000000020008030900"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) bind$alg(r10, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) 12m58.139391384s ago: executing program 33 (id=1169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000b45f433928f00"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000084000000080000000000000080100600", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000088d1c5f9268c06184b86b934293b95ec0000000000018e0c0000000000000000000010000000000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) statfs(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xf89, 0x0, &(0x7f0000000540)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e3", 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x28) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002c80)={0x0, 0x0, 0x0}, 0x2008000) dup3(r5, r4, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'dvmrp1\x00'}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES64=r1, @ANYRES16=r1], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000050) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x15) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000040)=0x1000045, 0x4) writev(r8, &(0x7f0000000340)=[{&(0x7f0000000100)="f8", 0x1}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r9, 0x1) r10 = socket$alg(0x26, 0x5, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001b00)=ANY=[@ANYBLOB="140000001000010000000000000006000000000a3c000000120a09000000000000000000020008030900"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) bind$alg(r10, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) 6m25.840687682s ago: executing program 3 (id=2410): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x200, 0x0) pipe2$9p(0x0, 0x84880) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000080)={"5381d6dc", 0x2, 0x6, 0x1, 0x400, 0x7, "9ad7f18bee5970ebb85649ef55e24c", "1012e304", "6ef1fee9", "a88bb21f", ["5c294bd54bdbcc454ec4fe2a", "1e823e1929dad85f7c58b964", "0cefddcd3a6e078d00c07b4e", "faf2b69f1b22666ad990e013"]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="140000000702000700775a726b64697209c23bc72ca7c7809b380584d552d6c5aa0cca55cc85330f7ba0b88ce30e8dca6cdb813400"/68], 0x14) ioctl$FS_IOC_RESVSP(r5, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @isdn={0x22, 0x1, 0x8, 0x1, 0x2}, @nfc={0x27, 0x0, 0x1, 0x2}, @ax25={0x3, @default, 0x5}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f9b, 0x80000000, 0x9}) 6m24.904809515s ago: executing program 3 (id=2417): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd6319f10c0a7e2af, 0x11, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m24.583153359s ago: executing program 3 (id=2418): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="6000000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000002b85c7e9ef6a77d95b7faaadae22e66df9597ac3f4d8aaf57e18f35cd7a42d0e09d5eafbcca1905fc78bfb34210ffedff1f3e7afcc081c712f6e2431070ccf8e389e2ee48515d643e68a4913f2990acd8c3d03d0ce58f3de076339fb804ba00232b4966c89f800efca2039bd7727dc20376d920bd97ee00416f2d972209258107c6de5714cc0999c1052971bde04649cf038a60177d0ce010dbee6c9b5a039272aefbcffddc57f386361e46e8a7dd6182bfdbce4c2a65866d928190f2ac7464cbb51afec60784", @ANYRES32, @ANYBLOB], 0x60}}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000340)=[@ioring_restriction_sqe_op={0x1, 0xc}], 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x78, 0x2, {{0x41, [0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5c4, 0xc511, 0x0, 0x400, 0x3dc], [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1000]}, [@TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_MAX_RATE64={0x4}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x4}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r9 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') preadv(r9, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4089, 0xff9}], 0x2, 0x740, 0x0) 6m23.414793616s ago: executing program 3 (id=2421): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair(0x1d, 0x2, 0x7, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000170a010100000000bafe000000000200000a0900010073797a4492e8c5727c482c1b3026c312"], 0x20}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="00000000ffffffffffce2b88d2bbff0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r5, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)=ANY=[@ANYBLOB='>\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210f00000000000000002000000008000300", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040095}, 0x4044015) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x430, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0x1, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x3fc, 0x2, [@TCA_MATCHALL_ACT={0x280, 0x2, [@m_nat={0xa8, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9e, 0xfffffffe, 0x10000000, 0x1ff, 0x3}, @multicast2, @broadcast, 0xffffff00}}]}, {0x58, 0x6, "6040fe671e115d3efa5ee7cca1de373349d4556f23960c6d5c28338f1366c8616341e6be8d4d4dce244c9dd965bbf410e040536c3287a5c0320e232cd1f369ce9cb2911e0b7d9161b1495dbe0be854dc01048c68"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0x48, 0x16, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa71}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x3a2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0xc8, 0x19, 0x0, 0x0, {{0x7}, {0x4}, {0xa0, 0x6, "a7dded1a3555002c43a3c5c0062c7c215d1a402f7e93dc631fe415364be50ec4a6997ec2d8cd0c217349e664a500b67e3c48d9a983207f8d92a12a92d8ad24c6d72a24f2428bc5cbe83767f52a2a4c95b719b567be8ef122102731de01fa795123d16589d7e6dde2189c4f13f8d6bc1d4db21669e4432d0291f6ae9e8be29a6f10c42f8e60b03ea7caeeda46a81461bc978eec425c1a387628f548d1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0x48, 0x0, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x5, 0x1, 0x7, 0x7fff, 0x9}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x7c, 0x8, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x8}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x1, 0x4, 0x676}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x80005, 0x0, 0x6, 0x80000001}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x7}}, @TCA_MATCHALL_ACT={0x158, 0x2, [@m_nat={0xd4, 0x8, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x1, 0x8, 0x3, 0x3}, @private=0xa010100, @multicast2, 0xff0000ff}}]}, {0x81, 0x6, "a14f3dc4bca1d05a3e48ab553f4cd54244a949d5e48f98019359938f5f64bc89ee1ed188a09d139b50d0dc425cd7fe6cc63ab138fff331358abd474bbcbd64efa7d6c70d09a9bb3a6f6589da0c1a93d8b46a9b67405a42de84064fc90cbe57ac908b6d828def383a89dede1f9658557895ee145a8bc2fb9915722d2f94"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0x80, 0x17, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x9, 0x2, 0x7fffffff, 0xd}}, @TCA_DEF_PARMS={0x18, 0x2, {0x80, 0x3, 0x5, 0x7, 0x70fa06de}}]}, {0x21, 0x6, "9716f34a1b050815e4f2cdfb370df7a2e2e070dd1fec4c5376e2da6e20"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}]}, 0x430}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) socket$inet6_tcp(0xa, 0x1, 0x0) 6m22.044468041s ago: executing program 3 (id=2425): pselect6(0xffffffffffffff30, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006e38f110d00701415cec01020301090224000100000000090423020070400009058a03080004030e09050e03c5fc4cc6e055"], 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8, 0x6}}, './file0\x00'}) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, &(0x7f0000000080)=0x1) 6m18.776763609s ago: executing program 3 (id=2433): socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e20}, 0xfffffffffffffdc0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001400b59500000000000000000a380000", @ANYRES32=0x0, @ANYBLOB="142a1400020020012000"/33], 0x40}, 0x1, 0x0, 0x0, 0x20004051}, 0x4008000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = syz_io_uring_setup(0xb7, &(0x7f00000002c0)={0x0, 0x5cb0, 0x800, 0x7, 0xffffffff, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000003c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000b80)={0x7, 0x0, 0x2008, 0x7, 'syz1\x00', 0x900005}) r9 = socket$inet6(0xa, 0x6, 0x7) getsockopt$bt_hci(r9, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0x206, 0x0, 0x4) io_uring_enter(r7, 0x81e76, 0xf728, 0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000280), 0x3) 6m2.411950858s ago: executing program 34 (id=2433): socket$netlink(0x10, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs={0x0, 0x0, 0x4e20}, 0xfffffffffffffdc0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001400b59500000000000000000a380000", @ANYRES32=0x0, @ANYBLOB="142a1400020020012000"/33], 0x40}, 0x1, 0x0, 0x0, 0x20004051}, 0x4008000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0x7ffd, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r7 = syz_io_uring_setup(0xb7, &(0x7f00000002c0)={0x0, 0x5cb0, 0x800, 0x7, 0xffffffff, 0x0, r1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f00000003c0)) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000b80)={0x7, 0x0, 0x2008, 0x7, 'syz1\x00', 0x900005}) r9 = socket$inet6(0xa, 0x6, 0x7) getsockopt$bt_hci(r9, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0x206, 0x0, 0x4) io_uring_enter(r7, 0x81e76, 0xf728, 0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000280), 0x3) 2m42.643897477s ago: executing program 7 (id=3042): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r3, &(0x7f0000000180)='./file0\x00', r3, &(0x7f00000001c0)='\x00') r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/243, 0xf3}, {&(0x7f0000000400)=""/239, 0xef}, {&(0x7f0000000500)=""/98, 0x62}, {&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000680)=""/92, 0x5c}], 0x5, &(0x7f00000007c0)=""/223, 0xdf}, 0x1}, {{&(0x7f00000008c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000940)=""/162, 0xa2}, {&(0x7f0000000a00)=""/132, 0x84}, {&(0x7f0000000ac0)=""/106, 0x6a}, {&(0x7f0000000c00)=""/220, 0xdc}, {&(0x7f0000000d00)=""/152, 0x98}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/112, 0x70}, {&(0x7f0000001dc0)=""/209, 0xd1}], 0x8, &(0x7f0000000240)=""/14, 0xe}, 0x81}, {{&(0x7f0000001f40)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001fc0)=""/175, 0xaf}, {&(0x7f0000002080)=""/51, 0x33}, {&(0x7f00000020c0)=""/33, 0x21}, {&(0x7f0000002100)=""/198, 0xc6}, {&(0x7f0000002200)=""/75, 0x4b}, {&(0x7f0000002280)=""/14, 0xe}], 0x6, &(0x7f0000002340)=""/187, 0xbb}, 0x634f}, {{&(0x7f0000002400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000024c0)}, 0x80}], 0x4, 0x0, &(0x7f0000000140)={0x77359400}) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) unshare(0x62000280) socket$alg(0x26, 0x5, 0x0) r6 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r6, &(0x7f0000000000)={0x22, 0x5d, 0xf7, 0x75, 0x3}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x30, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000050a1b000000000000000000010020000900010073797a31000000001400000011000100e8ffffffffffffff0000000a"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x3, 0x0, 0x5}) 2m38.650457221s ago: executing program 7 (id=3053): r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, &(0x7f0000000000), 0x8) 2m38.532189261s ago: executing program 7 (id=3054): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a2", 0x9}], 0x1}}], 0x1, 0x20008000) recvmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000200)=""/112, 0x70}], 0x1}, 0x123) shutdown(r0, 0x1) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f00000004c0)={r4, 0x0, 0x4, 0x0, 0x2, [0x0], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r6 = io_uring_setup(0x7c16, &(0x7f0000000200)={0x0, 0x81df, 0x80, 0x0, 0x134}) io_uring_enter(r6, 0xb83, 0xc57d, 0x1, &(0x7f0000000040)={[0x2]}, 0x8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r5, 0x80000}) 2m37.780767723s ago: executing program 7 (id=3059): syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x8}, @multicast, @val={@val={0x88a8, 0x3, 0x1, 0x3}, {0x8100, 0x2, 0x1, 0x4}}, {@ipv4={0x800, @icmp={{0xb, 0x4, 0x2, 0x20, 0x34, 0x67, 0x0, 0x4, 0x1, 0x0, @empty, @empty, {[@noop, @timestamp_addr={0x44, 0x14, 0x3c, 0x1, 0x4, [{@empty, 0x7}, {@multicast1, 0x4}]}, @end]}}, @info_reply={0x10, 0x0, 0x0, 0xf73, 0x6}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000001040)=0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_IFNAME={0x14, 0x3, 'team0\x00'}, @IFLA_VFINFO_LIST={0x4}]}, 0x38}}, 0x20040010) io_submit(r2, 0x1, &(0x7f0000000780)=[&(0x7f0000000540)={0x0, 0x0, 0x22, 0x1, 0x5, r1, &(0x7f0000000a00)="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"/512, 0x200, 0x200}]) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000140)=r0) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x7, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f00000000c0)) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x2020) syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e60, 0x10, 0x0, @opaque="a7a6f4fcbe3dfc81"}}}}}, 0x0) 2m36.928993907s ago: executing program 7 (id=3064): syz_emit_ethernet(0xda, &(0x7f0000000840)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x5, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x50, 0x0, [{0x7, 0x12, "12054b0604000000b983fc5843e178fe"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x7, 0xa, "2189ea43a2149b84"}, {0x6, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0xe, "1afd922c6bad0f24d6430eaa"}]}, @timestamp={0x44, 0xc, 0x56, 0x0, 0x0, [0xfffffffe, 0x0]}]}}}}}}}, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x100, @vifc_lcl_addr=@local, @dev}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"/412], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="7000000000010104000000000000000002000006240001801400018008000100e000000108000200ac1414000c00028005000100000000002c0002801400018008000100e000000108000200e00000010c00028005000100006309d030955796f10000000800074000000000040006"], 0x70}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000140)=0x9, 0x4) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0xa, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x400a}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40050}, 0xe0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10002}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8, r7}, 0xc) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r9, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) 2m36.570753957s ago: executing program 7 (id=3066): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(&(0x7f00000002c0)=[{r3, 0x1628}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x2) r4 = getpgid(0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_pidfd_open(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r6, @ANYRESHEX=r7], 0x15) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x901, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa055}, 0x24000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000180)=[{0x6, 0x3, 0x0, 0xffffffff}]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e26, @multicast1}, 0x10) r11 = accept(r8, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0xb7e2, 0x80, 0x1, 0xe0}) 2m20.09638815s ago: executing program 35 (id=3066): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ppoll(&(0x7f00000002c0)=[{r3, 0x1628}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x2) r4 = getpgid(0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_pidfd_open(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r6, @ANYRESHEX=r7], 0x15) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x901, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa055}, 0x24000000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000180)=[{0x6, 0x3, 0x0, 0xffffffff}]}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e26, @multicast1}, 0x10) r11 = accept(r8, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) io_uring_setup(0x3c93, &(0x7f0000000900)={0x0, 0xb7e2, 0x80, 0x1, 0xe0}) 13.965288953s ago: executing program 8 (id=3428): r0 = socket(0x28, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x18) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) socket(0x1, 0x6, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x103601, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r2, &(0x7f0000000f40)=""/243, 0xf3) 13.604735783s ago: executing program 8 (id=3429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) (fail_nth: 1) 12.721617093s ago: executing program 6 (id=3433): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$kcm(0x10, 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x3, 0x0, 0x0, 0x10, 0x1}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200), 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r4, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0x7, 0x2, 0x3, 0x0, 0x2}, 0xe) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x2}], 0x64, 0x100, 0x0) 12.462481194s ago: executing program 0 (id=3434): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x78082, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000080)=0x3ba, 0x5, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r5 = io_uring_setup(0xfc6, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, &(0x7f0000000100)='barrier') close_range(r5, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="269a585d41ac64b0b765f4a4467f9aedf3b81349c1e0b894a454dfb08e5924e3b552be256c9a399a72d6b33832a8ac7e9db221275f210bc7bfc95b3b55138e81afa57beb32d5f904d1237cbe107d9ec394ccb46c82"]}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 11.327995879s ago: executing program 6 (id=3435): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = getpgrp(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x2) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x7, 0x10, 0xc2, "", [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x4, 0x1, 0x22}}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x6, 0xf8}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x8, 0x1, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x9, 0x0, 0xd}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000005580)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x16, 0x880, 0xffffffffffffffff, 0xfffffffd}, 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x2e76be}], 0x1}, 0x3) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000080)={r10, 0x0, 0x0, 0x0, 0x8008, 0x7fffffff, 0x80008003, 0xfffffffe, 0x5, 0x800000e, 0xc, 0x100}) r11 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r11, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r11, 0xc02064b6, &(0x7f0000000140)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.811307014s ago: executing program 0 (id=3436): prlimit64(0x0, 0xe, &(0x7f0000000400)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010028bd7000fcdbdf251b000000080001", @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000480)=0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc1105518, &(0x7f0000000c40)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x592a, 0x9, 0x0, 0xfffffffe, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x88c, 0x100000001, 0x8, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x40, 0x0, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0x541ec3ed, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x3ff, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$TCSETSF2(r5, 0x8926, &(0x7f0000000000)={0x9, 0x4, 0x8, 0x0, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x8}) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x42000000) 9.737147874s ago: executing program 8 (id=3437): socket$netlink(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r0], 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) 8.661298715s ago: executing program 1 (id=3438): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) r1 = dup(r0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000540)='Zh', 0x2}], 0x1, 0x0, 0x0, 0x48d5}, 0x8050) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}}, 0x84) io_uring_setup(0x1f1c, &(0x7f00000005c0)={0x0, 0x17d7, 0xa, 0x3, 0x283}) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x801, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10, 0x0, 0xfffffffffffffffc}, &(0x7f0000000100)=0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x6, 0x0, &(0x7f0000000240)) socket$unix(0x1, 0x5, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448ca, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 8.057333615s ago: executing program 5 (id=3439): prlimit64(0x0, 0xe, &(0x7f0000000400)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) dup(0xffffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000580)=0x0) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010028bd7000fcdbdf251b000000080001", @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000480)=0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r7, 0xc0045516, &(0x7f0000000000)=0x3) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc1105518, &(0x7f0000000c40)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x592a, 0x9, 0x0, 0xfffffffe, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0x0, 0x40, 0x0, 0x88c, 0x100000001, 0x8, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x40, 0x0, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0x541ec3ed, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x3ff, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) ioctl$TCSETSF2(r5, 0x8926, &(0x7f0000000000)={0x9, 0x4, 0x8, 0x0, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x8}) getpid() socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x42000000) 7.128858771s ago: executing program 6 (id=3440): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}]}, 0x3c}}, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9d) syz_open_dev$ptys(0xc, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) r4 = syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f00000003c0)="04f6863ad8808708f4fdf8b32fd46eaaa38e942fd5ff3e898f91c4cdd8aa65b158c610a207785e0e21ce30f5d371e6ce678698e708c8a7bb01cc05021a53f1cbcd14733f59c9d49a6f57ce294ed4a58ee58d723d86e6e27d7af3f1f6c29e14ad316b89192099e4cca50e82734c84d205ceb2c7fdfecc238a273bf3a3dab44691ed7b61684558fb730082c642823cbe2198006c31d514305306c451454d67e71823bb0212439ad6e597825290cd87f30311e1a2e4bc40788f07c4266e73e5f1fa9aeda1a9932d28be8546ca9151ffc842a032bcce", 0xd4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x60101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x40000000000029a, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x3, 0xff) 5.528875979s ago: executing program 1 (id=3441): syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_io_uring_setup(0xed0, &(0x7f0000000140)={0x0, 0x100003, 0x10300, 0x2, 0x302}, &(0x7f0000000100), &(0x7f0000000500)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) truncate(0x0, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x6, 0x9dc8, 0x0, 0x0, 0xf}) writev(r1, &(0x7f0000000480)=[{0x0}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4004000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000728000/0x3000)=nil, 0x3000, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x1e79, &(0x7f0000000300)={0x0, 0x8a5a, 0x10000, 0x2, 0x255, 0x0, r0}, &(0x7f0000000380), &(0x7f00000003c0)) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0xff39) wait4(0x0, 0x0, 0x40000000, 0x0) 5.431378962s ago: executing program 8 (id=3442): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) openat$vcsu(0xffffff9c, &(0x7f0000000040), 0xc02, 0x0) r0 = eventfd2(0x92c, 0x80002) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r1, 0x2, &(0x7f0000000440)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x3, r0, 0x0, 0x0, 0x2, 0x0, 0x1, r0}]) r2 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r5, @ANYRESOCT=r0], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[], 0x10) sendmmsg$inet6(r7, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='devpts\x00', 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 3.802653237s ago: executing program 6 (id=3443): syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x80, 0x7f}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) renameat(r1, &(0x7f0000000180)='./file0\x00', r1, &(0x7f00000001c0)='\x00') r2 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r2, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendto(r3, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)=""/243, 0xf3}, {&(0x7f0000000400)=""/239, 0xef}, {&(0x7f0000000500)=""/98, 0x62}, {&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000680)=""/92, 0x5c}], 0x5, &(0x7f00000007c0)=""/223, 0xdf}, 0x1}, {{&(0x7f00000008c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000940)=""/162, 0xa2}, {&(0x7f0000000a00)=""/132, 0x84}, {&(0x7f0000000ac0)=""/106, 0x6a}, {&(0x7f0000000c00)=""/220, 0xdc}, {&(0x7f0000000d00)=""/152, 0x98}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000b40)=""/112, 0x70}, {&(0x7f0000001dc0)=""/209, 0xd1}], 0x8, &(0x7f0000000240)=""/14, 0xe}, 0x81}, {{&(0x7f0000001f40)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000001fc0)=""/175, 0xaf}, {&(0x7f0000002080)=""/51, 0x33}, {&(0x7f00000020c0)=""/33, 0x21}, {&(0x7f0000002100)=""/198, 0xc6}, {&(0x7f0000002200)=""/75, 0x4b}, {&(0x7f0000002280)=""/14, 0xe}], 0x6, &(0x7f0000002340)=""/187, 0xbb}, 0x634f}, {{&(0x7f0000002400)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f00000024c0)}, 0x80}], 0x4, 0x0, &(0x7f0000000140)={0x77359400}) ioctl$SIOCSIFHWADDR(r1, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @remote}) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) unshare(0x62000280) socket$alg(0x26, 0x5, 0x0) r4 = socket$isdn_base(0x22, 0x3, 0x0) bind$isdn_base(r4, &(0x7f0000000000)={0x22, 0x5d, 0xf7, 0x75, 0x3}, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x30, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000050a1b000000000000000000010020000900010073797a31000000001400000011000100e8ffffffffffffff0000000a"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x4, 0x2, 0x3, 0x0, 0x5}) 3.660613186s ago: executing program 1 (id=3444): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\x00', r2) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x7) connect$rose(r1, &(0x7f0000000240)=@short={0x13, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7, &(0x7f00000002c0)=[{0x800000000}], 0xaaaaaaaaaaaac9d, 0xbff, 0x1e, 0x0, 0xc, 0x6e}) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, 0x0) socket$inet(0x2, 0x800, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="010000000100000005"], 0x50) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000100)=0x188c, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendto$packet(r5, 0x0, 0x0, 0x40000, &(0x7f0000000240)={0x11, 0xf7, r6, 0x1, 0x20, 0x6, @remote}, 0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r7}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000900000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_dev$evdev(&(0x7f0000000140), 0x9, 0x240800) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c643c, &(0x7f0000000300)={0x0, 0x0, r0}) 3.280691827s ago: executing program 1 (id=3445): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$kcm(0x10, 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x3, 0x0, 0x0, 0x10, 0x1}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200), 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r4, &(0x7f0000000240)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xfd, 0x0, 0x0, 0x7, 0x2, 0x3, 0x0, 0x2}, 0xe) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x2}], 0x64, 0x100, 0x0) 3.02164883s ago: executing program 8 (id=3446): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x78082, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000080)=0x3ba, 0x5, 0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r5 = io_uring_setup(0xfc6, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x418, &(0x7f0000000100)='barrier') close_range(r5, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="269a585d41ac64b0b765f4a4467f9aedf3b81349c1e0b894a454dfb08e5924e3b552be256c9a399a72d6b33832a8ac7e9db221275f210bc7bfc95b3b55138e81afa57beb32d5f904d1237cbe107d9ec394ccb46c82"]}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.896516332s ago: executing program 1 (id=3447): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xc, 0x4, 0xffffbe0000000001, 0x8, 0xffffffff}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x4008}], 0x6}}], 0x1, 0x0) name_to_handle_at(r0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)=@FILEID_INO32_GEN_PARENT={0x10, 0x2, {{0x9, 0x7}, 0x7f, 0x2}}, &(0x7f00000002c0), 0x400) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x2040010) 1.115350973s ago: executing program 0 (id=3448): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="6402bcf1f4bcc08e3b09c7d80676be755ab550640c67dfadbb7478bece", 0x1d, r1) keyctl$set_timeout(0xf, r0, 0x5) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r3 = socket(0x1, 0x1, 0x6) connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x0, 0x2, 0x1, 0x8, {0xa, 0x4e20, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x32) r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'vlan0\x00', &(0x7f0000000240)=@ethtool_flash={0x33, 0xff, './file0\x00'}}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000340)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000480)={r5, r7, r8}, 0xc) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3, &(0x7f00000004c0)=0x10000, 0x1, 0x4) keyctl$unlink(0x9, r1, r1) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000500)={0x100000000000000, 0x100000, 0x4, 0x0, 0x19}) r9 = dup3(r2, r6, 0x0) syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000c00000/0x400000)=nil) mkdir(&(0x7f0000000540)='./file0\x00', 0x80) r10 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$PIO_CMAP(r10, 0x4b71, &(0x7f0000000580)={0x8f8c, 0x7, 0x9, 0xffff, 0x8, 0x3}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x50, r11, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "34d5084795e311737f5e9d1fafd8c1fa"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "50e7071f41a1488965de0443f92f05f9"}]}, 0x50}, 0x1, 0x0, 0x0, 0x48080}, 0x10080) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r6) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r14, 0x6f2d, 0x7) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r9, 0xc018937a, &(0x7f0000000800)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r15, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x170, r13, 0x4, 0x70bd26, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x170}, 0x1, 0x0, 0x0, 0x20040040}, 0x4004010) ptrace$peeksig(0x4209, r5, &(0x7f0000000a80)={0x77, 0x1, 0x9}, &(0x7f0000000ac0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]) 1.113913972s ago: executing program 5 (id=3449): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) io_setup(0x1, &(0x7f00000004c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r5 = openat$incfs(0xffffffffffffffff, 0x0, 0x4000, 0x88) waitid$P_PIDFD(0x3, r5, &(0x7f0000000300), 0x80000000, &(0x7f0000000380)) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000180), 0x2) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000140), 0x2) read(r4, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000240)={0x2, 0xfc}, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r7, 0x4068aea3, &(0x7f0000000180)={0x80, 0x0, 0x2}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xf}, 0x1c) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x98}}, 0x0) 905.259921ms ago: executing program 5 (id=3450): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000c80)={0x7fff, 0x1, @value=0x6c83}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x8f13, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x26800, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000440)=@sack_info={0x0, 0x10, 0x101}, 0xc) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x12, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) 904.93534ms ago: executing program 0 (id=3451): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecfffbffea0000000000000040000000000000060000000000000000000000000104380001"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1078) 901.185592ms ago: executing program 5 (id=3452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet6(0xa, 0x3, 0x7) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x88902) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@deltclass={0x34, 0x29, 0x400, 0x5, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xe, 0xadf5551b54d2700}, {0xfff3, 0x9}, {0xfff1, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x7}}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000680)="05031400d3fc140000004788031c09102c28358a47a43f1ea148ac4efaadf091b90e63223a664f1e2cb82b36141deeb83919e55d5d64377801893fc659cbb8a7", 0x40, 0x20040010, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @remote}, 0x14) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) pipe(&(0x7f0000000080)) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4048aecb, &(0x7f0000000200)) r10 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) fcntl$dupfd(r10, 0x0, r10) socket$netlink(0x10, 0x3, 0x0) 866.359209ms ago: executing program 0 (id=3453): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000009214df250100000005000500ff0f00000500060001000000080003"], 0x2c}}, 0x0) mkdir(&(0x7f0000000280)='./file0\x00', 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) sched_setscheduler(r3, 0x2, 0xfffffffffffffffd) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x30}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x38}, 0x1, 0x0, 0x0, 0x4042440}, 0x940) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x2c, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x10000815) r11 = socket$kcm(0x2, 0xa, 0x2) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0xffff}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x0, 0x1000, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'xcbc(aes)\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x9}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x6}]}, 0x148}}, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r15 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r15, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}}, 0x0) getsockname$packet(r15, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x0, 0x0) sendmsg$FOU_CMD_ADD(r13, &(0x7f0000000140)={0x0, 0x601, &(0x7f0000000340)={&(0x7f0000000400)={0x38, r14, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r16}]}, 0x38}}, 0x0) 731.29364ms ago: executing program 1 (id=3454): mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) fsmount(0xffffffffffffffff, 0x0, 0x1) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x2e76be}], 0x1}, 0x3) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9b0905, 0x8000, '\x00', @string=&(0x7f0000000180)=0x81}}) 709.680237ms ago: executing program 0 (id=3455): mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) fsmount(0xffffffffffffffff, 0x0, 0x1) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x16, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x2e76be}], 0x1}, 0x3) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9b0905, 0x8000, '\x00', @string=&(0x7f0000000180)=0x81}}) 648.921464ms ago: executing program 5 (id=3456): r0 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x3dd88, 0x17e00}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x40}, 0x1, 0x8100, 0x0, 0x4010}, 0x2800804c) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, 0x0, 0x0, 0x40800) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000019300)=0x39f, 0x4) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r6, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000000300)=""/102400, 0x19000) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="b0be274515eab3782e7918eaaadf167267da392598cead4ee661ab4406751f05bbcd559042c1d582c6ba0e8dab3b75f5cb16d7adbf15f33cc032eddb72ac886d4424f57a8e3b071d49440f6275b4377234a307e3a7bd815755ffdc59479a775e6d9e77da5fa720d70e1b2a30c47c97f1cd04069f099abe76033e3d03af4ff621fb88dbe200"/146, 0x92}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000000440)="96588726a86c0229a035ba2dad8520e9e30064ad71afb12e20833eb604367d82168c692e10f03700d240309d262ba245899ef4479ec2d610c303911919156349d951d0f1b7666a023c6e050ebec3247ca1c16f563b939d6f4485966e3063ef81c4d477ef2e3660d0aa979e7d625bc8fcb836ced498c0c2fb56724d5c768cd6ef51767b3c4bbb6b12a9c1d9c57257a182107bb7577b24cb0a85daf3caea684edb8f0ed1ff911e1091ad76eff92a26d07c26b575e954b291cda87068815feec126dc4d643eeabb68bba65dd30e833fe069", 0xd0}, {&(0x7f00000001c0)="042234e7cdc2076ec027d9e9def4317145e01d38debefa041f91a85d03966cf38ae77fee77e4307fda9f8439f51be010e954ab87a02f6416f810c4e9441f9cfc94a2ebd1128bc00c95073f45357e04c9f30394725672cabf0f029c0ece08972d3f6813ae9869ad21e8ae45ea1e5cd9d4302b30e32b3051193aec4f827d4459", 0x7f}, {&(0x7f0000000240)="d45ae986f1b9bf5dd9852887a0851866", 0x10}, {&(0x7f0000000280)="2fb229da7f1930672095d0aca42df7b6b7a23324a153690d1ed8d922c2591735843c6e6e88b95f9daee49d440a766e9b6ef31f9dbfb4febc5cf94e73d846e3524970900322093347086ae5368e2e69422b670782bd093b84a5a2c902c951828efc2ef6cdd6b12816987e67e3c3f4491eb0d5c43ec3fff7d84b341b435c28", 0x7e}], 0x6}, 0x20040000) 616.033571ms ago: executing program 8 (id=3457): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) eventfd(0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) r6 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679b, 0x8, 0x2000006, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x2400c0c7, 0x1}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYRESOCT=r2, @ANYRESOCT, @ANYRES32=r2], 0x94}}, 0x80) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x800) 504.371974ms ago: executing program 6 (id=3458): r0 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r2, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, 0x0, 0x0) syz_genetlink_get_family_id$fou(0x0, r0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x40000) mmap$IORING_OFF_SQ_RING(&(0x7f000074c000/0x4000)=nil, 0x4000, 0x2, 0x13, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) dup(r1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000440)={0x6, 0x20000006, 0x0, 0x0, 0xd}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x1f00) 345.141104ms ago: executing program 6 (id=3459): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x66, 0x80, 0x85, 0x20, 0x1f71, 0x3301, 0xca2d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x6, 0x40, 0xfa, "", [{{0x9, 0x4, 0x74, 0xa, 0x0, 0x8, 0x6, 0x50, 0x8}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = socket(0x1000000000000010, 0x80802, 0x0) write(r0, &(0x7f0000000000)="24000000520001000000f4f9002304000a04f51108000100020000000800028001000000", 0x24) r1 = getpid() syz_open_procfs(r1, &(0x7f0000000000)='fd/3\x00') socket$packet(0x11, 0x3, 0x300) 0s ago: executing program 5 (id=3460): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0xffffffffffffffff, 0x2, &(0x7f0000000080)=0x4007) r0 = getpid() timerfd_create(0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f00000003c0)={0x0, 0xaee2, 0x800, 0x2, 0xbfdfffff}, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0xc000000) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00') pread64(r8, &(0x7f0000000140)=""/15, 0xf, 0x4) syz_io_uring_setup(0x110, &(0x7f0000000440)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) kernel console output (not intermixed with test programs): : valid board names for mpc624 driver are: [ 998.167991][T18929] mpc624 [ 998.213539][T18929] comedi: valid board names for c6xdigio driver are: [ 998.237022][T18929] c6xdigio [ 998.240163][T18929] comedi: valid board names for aio_iiro_16 driver are: [ 998.592964][T18929] aio_iiro_16 [ 998.608369][T18929] comedi: valid board names for aio_aio12_8 driver are: [ 998.615489][T18929] aio_aio12_8 [ 998.618961][T18929] aio_ai12_8 [ 998.623707][T18929] aio_ao12_4 [ 998.627321][T18929] comedi: valid board names for fl512 driver are: [ 998.634516][T18929] fl512 [ 998.638577][T18929] comedi: valid board names for dmm32at driver are: [ 998.645609][T18929] dmm32at [ 998.649012][T18929] comedi: valid board names for dt282x driver are: [ 998.655762][T18929] dt2821 [ 998.658823][T18929] dt2821-f [ 998.665619][T18929] dt2821-g [ 998.671200][T18925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 998.673188][T18929] dt2823 [ 998.681904][T18929] dt2824-pgh [ 998.690419][T18929] dt2824-pgl [ 998.700030][T18925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 998.709620][T18929] dt2825 [ 998.712657][T18929] dt2827 [ 998.749967][T18929] dt2828 [ 998.772802][T18929] dt2829 [ 998.794202][T18929] dt21-ez [ 998.800834][T18929] dt23-ez [ 998.846417][T18929] dt24-ez [ 998.851429][T18929] dt24-ez-pgl [ 998.855985][T18929] comedi: valid board names for dt2817 driver are: [ 998.882268][T18929] dt2817 [ 998.885768][T18929] comedi: valid board names for dt2815 driver are: [ 998.899799][T18929] dt2815 [ 998.902842][T18929] comedi: valid board names for dt2814 driver are: [ 998.910581][T18929] dt2814 [ 998.913600][T18929] comedi: valid board names for dt2811 driver are: [ 998.924654][T18929] dt2811-pgh [ 998.928163][T18929] dt2811-pgl [ 998.931552][T18929] comedi: valid board names for dt2801 driver are: [ 998.939484][T18929] dt2801 [ 998.947494][T18929] comedi: valid board names for das6402 driver are: [ 998.954724][T18929] das6402-12 [ 998.959206][T18929] das6402-16 [ 998.964854][T18929] comedi: valid board names for das1800 driver are: [ 998.975414][T18929] das-1701st [ 998.993605][T18273] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.008634][T18950] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2963'. [ 999.019964][T18929] das-1701st-da [ 999.025816][T18273] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.040656][T18929] das-1702st [ 999.051852][T18950] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2963'. [ 999.062547][T18929] das-1702st-da [ 999.068883][T18951] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2963'. [ 999.093217][T18273] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.103557][T18929] das-1702hr [ 999.119180][T18929] das-1702hr-da [ 999.129426][T18929] das-1701ao [ 999.136306][T18950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2963'. [ 999.145482][T18273] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.156832][T18929] das-1702ao [ 999.164594][T18929] das-1801st [ 999.170240][T18929] das-1801st-da [ 999.182546][T18929] das-1802st [ 999.199217][T18954] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2964'. [ 999.208441][T18929] das-1802st-da [ 999.216281][T18929] das-1802hr [ 999.219856][T18929] das-1802hr-da [ 999.223419][T18929] das-1801hc [ 999.226704][T18929] das-1802hc [ 999.229998][T18929] das-1801ao [ 999.233668][T18954] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2964'. [ 999.246493][ T5897] usb 1-1: 0:2 : does not exist [ 999.265036][T18955] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2964'. [ 999.274563][T18929] das-1802ao [ 999.278098][T18929] comedi: valid board names for das800 driver are: [ 999.301914][T18954] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2964'. [ 999.342203][T18929] das-800 [ 999.369697][T18929] cio-das800 [ 999.372990][T18929] das-801 [ 999.375989][T18929] cio-das801 [ 999.439416][ T5897] usb 1-1: USB disconnect, device number 89 [ 999.446826][T18929] das-802 [ 999.453975][T18929] cio-das802 [ 999.471573][T18929] cio-das802/16 [ 999.510813][T18929] comedi: valid board names for isa-das08 driver are: [ 999.545761][T18929] isa-das08 [ 999.549008][T18929] das08-pgm [ 999.586426][T18961] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2967'. [ 999.602105][T18929] das08-pgh [ 999.637613][T18929] das08-pgl [ 999.657276][T18929] das08-aoh [ 999.688265][T16213] udevd[16213]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 999.719246][T18929] das08-aol [ 999.746054][T18929] das08-aom [ 999.768452][T18929] das08/jr-ao [ 999.789218][T18929] das08jr-16-ao [ 999.799584][T18929] pc104-das08 [ 999.811441][T18929] das08jr/16 [ 999.837422][T18929] comedi: valid board names for das16m1 driver are: [ 999.873374][T18929] das16m1 [ 999.886451][T18929] comedi: valid board names for dac02 driver are: [ 999.923295][T18929] dac02 [ 999.945570][T18929] comedi: valid board names for rti802 driver are: [ 999.981982][T18929] rti802 [ 999.991813][T18929] comedi: valid board names for rti800 driver are: [ 1000.026527][T18929] rti800 [ 1000.043776][T18929] rti815 [ 1000.069129][T18929] comedi: valid board names for pcm3724 driver are: [ 1000.121953][T18929] pcm3724 [ 1000.143979][T18929] comedi: valid board names for pcl818 driver are: [ 1000.302320][T18929] pcl818l [ 1000.305806][T18980] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 1000.315790][T18980] SELinux: failed to load policy [ 1000.333186][T18929] pcl818h [ 1002.329128][T18929] pcl818hd [ 1002.332303][T18929] pcl818hg [ 1002.393424][T18929] pcl818 [ 1002.400469][T18929] pcl718 [ 1002.403424][T18929] pcm3718 [ 1002.443723][T18929] comedi: valid board names for pcl816 driver are: [ 1002.486798][T18929] pcl816 [ 1002.508512][T18929] pcl814b [ 1002.532960][T18929] comedi: valid board names for pcl812 driver are: [ 1002.554184][T18976] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 1002.575255][T18929] pcl812 [ 1002.578231][T18929] pcl812pg [ 1002.581312][T18929] acl8112pg [ 1002.622105][T18929] acl8112dg [ 1002.625345][T18929] acl8112hg [ 1002.650638][T18929] a821pgl [ 1002.653691][T18929] a821pglnda [ 1002.656973][T18929] a821pgh [ 1002.660007][T18929] a822pgl [ 1002.725256][T18929] a822pgh [ 1002.736123][T18929] a823pgl [ 1002.750242][T18929] a823pgh [ 1002.763552][T18929] pcl813 [ 1002.766534][T18929] pcl813b [ 1002.795942][T18929] acl8113 [ 1002.810484][T18929] iso813 [ 1002.824809][T18929] acl8216 [ 1002.833721][T18929] a826pg [ 1002.836661][T18929] comedi: valid board names for pcl730 driver are: [ 1002.874624][T18929] pcl730 [ 1002.893104][T18929] iso730 [ 1002.990745][T18929] acl7130 [ 1003.012047][T18929] pcm3730 [ 1003.038811][T18929] pcl725 [ 1003.056146][T18929] p8r8dio [ 1003.071616][T18929] acl7225b [ 1003.083564][T18929] p16r16dio [ 1003.103885][T18929] pcl733 [ 1003.116137][T18929] pcl734 [ 1003.132177][T18929] opmm-1616-xt [ 1003.168808][T18929] pearl-mm-p [ 1003.202285][T18929] ir104-pbf [ 1003.212622][T18929] comedi: valid board names for pcl726 driver are: [ 1003.275153][T18929] pcl726 [ 1003.312911][T18929] pcl727 [ 1003.321430][T18929] pcl728 [ 1003.344889][T18929] acl6126 [ 1003.347950][T18929] acl6128 [ 1003.354001][T18992] __nla_validate_parse: 3 callbacks suppressed [ 1003.354013][T18992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2973'. [ 1003.383424][T18929] comedi: valid board names for pcl724 driver are: [ 1003.477023][T18929] pcl724 [ 1003.479983][T18929] pcl722 [ 1003.482907][T18929] pcl731 [ 1003.573391][T18992] veth1_macvtap: left promiscuous mode [ 1003.587035][T18996] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1003.596603][T18984] qnx4: no qnx4 filesystem (no root dir). [ 1003.607696][T18929] acl7122 [ 1003.610749][T18929] acl7124 [ 1003.628841][T18999] binder: 18993:18999 ioctl c00c620f 200000000140 returned -22 [ 1003.664529][ T29] audit: type=1400 audit(2000000715.297:1711): avc: denied { map } for pid=18993 comm="syz.7.2974" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1003.664892][T18929] pet48dio [ 1003.700654][T18995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2973'. [ 1003.764502][T18995] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1003.815320][ T29] audit: type=1400 audit(2000000715.381:1712): avc: denied { ioctl } for pid=18993 comm="syz.7.2974" path="socket:[69850]" dev="sockfs" ino=69850 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1003.926390][T18929] pcmio48 [ 1003.947433][T18929] onyx-mm-dio [ 1004.065054][T18929] comedi: valid board names for pcl711 driver are: [ 1004.082199][T18929] pcl711 [ 1004.085327][T18929] pcl711b [ 1004.098079][T18929] acl8112hg [ 1004.102173][T18929] acl8112dg [ 1004.106226][T18929] comedi: valid board names for amplc_pc263 driver are: [ 1004.115843][T18929] pc263 [ 1004.119292][T18929] comedi: valid board names for amplc_pc236 driver are: [ 1004.126694][T18929] pc36at [ 1004.129910][T19009] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2977'. [ 1004.142846][T18929] comedi: valid board names for amplc_dio200 driver are: [ 1004.154502][T19009] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2977'. [ 1004.174874][T18929] pc212e [ 1004.183118][T18929] pc214e [ 1004.183366][T19011] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2977'. [ 1004.234353][T18993] delete_channel: no stack [ 1004.265910][T19009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2977'. [ 1004.284046][T18929] pc215e [ 1004.313186][T18929] pc218e [ 1004.323751][T18929] pc272e [ 1004.326739][T18929] comedi: valid board names for comedi_parport driver are: [ 1004.412191][T18929] comedi_parport [ 1004.441501][T18929] comedi: valid board names for comedi_test driver are: [ 1004.498365][T18929] comedi_test [ 1004.527282][T18929] comedi: valid board names for comedi_bond driver are: [ 1004.574903][T18929] comedi_bond [ 1004.624013][ T29] audit: type=1400 audit(2000000716.223:1713): avc: denied { map } for pid=19019 comm="syz.7.2979" path="socket:[69865]" dev="sockfs" ino=69865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 1004.848063][T19023] netlink: 'syz.0.2980': attribute type 1 has an invalid length. [ 1005.025702][T19025] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2980'. [ 1005.157887][T19023] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2980'. [ 1005.243239][T19023] macvlan1: entered promiscuous mode [ 1005.249543][T19023] macvlan1: entered allmulticast mode [ 1005.281958][T19023] bond2: entered promiscuous mode [ 1005.335189][T19023] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 1005.428670][T19028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2981'. [ 1005.453486][T19023] bond2: left promiscuous mode [ 1005.970000][T19034] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1008.110285][T15530] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1008.822278][T15530] usb 2-1: config 8 has an invalid interface number: 194 but max is 0 [ 1008.960890][T19056] 9p: Bad value for 'rfdno' [ 1009.653244][T15530] usb 2-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 1009.662599][T15530] usb 2-1: config 8 has no interface number 0 [ 1009.669069][T15530] usb 2-1: config 8 interface 194 altsetting 127 bulk endpoint 0x3 has invalid maxpacket 8 [ 1009.679409][T15530] usb 2-1: config 8 interface 194 altsetting 127 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1009.690858][T15530] usb 2-1: config 8 interface 194 has no altsetting 0 [ 1009.700513][T15530] usb 2-1: New USB device found, idVendor=08dd, idProduct=0986, bcdDevice=72.b6 [ 1009.734503][T15530] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.755222][T15530] usb 2-1: Product: ޺퐻႓逎⼫윴㇈ [ 1009.765851][T15530] usb 2-1: Manufacturer: Ч [ 1009.769082][T19059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1009.779830][T19050] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1009.780884][T19064] hsr0: entered promiscuous mode [ 1009.798062][ T29] audit: type=1400 audit(2000000721.052:1714): avc: denied { ioctl } for pid=19063 comm="syz.7.2991" path="socket:[70952]" dev="sockfs" ino=70952 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1009.801718][T19064] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2991'. [ 1009.887273][T19062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2990'. [ 1009.915237][T19059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1009.936437][T19062] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2990'. [ 1009.959743][T19066] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2990'. [ 1010.001184][ T29] audit: type=1326 audit(2000000721.230:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19063 comm="syz.7.2991" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb6359c799 code=0x0 [ 1010.034288][ T8029] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1010.045484][T19062] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2990'. [ 1010.068324][T19068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1010.106182][T19068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1010.439315][ T29] audit: type=1400 audit(2000000721.660:1716): avc: denied { setopt } for pid=19072 comm="syz.0.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1010.617020][ T29] audit: type=1400 audit(2000000721.819:1717): avc: denied { setopt } for pid=19076 comm="syz.0.2994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1011.055144][T19088] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1011.151296][T15530] pegasus 2-1:8.194: Missing or invalid endpoints [ 1011.447206][T19093] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1011.777268][T15530] usb 2-1: USB disconnect, device number 35 [ 1012.539936][ T29] audit: type=1400 audit(2000000723.635:1718): avc: denied { listen } for pid=19103 comm="syz.7.3002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1012.579974][T15530] raw-gadget.0 gadget.7: failed to queue reset event [ 1012.823953][T15530] raw-gadget.0 gadget.7: failed to queue resume event [ 1012.972435][T15530] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1012.987533][ C0] raw-gadget.0 gadget.7: ignoring, device is not running [ 1012.996911][T15530] raw-gadget.0 gadget.7: failed to queue reset event [ 1013.038999][T19108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19108 comm=syz.5.3003 [ 1013.068582][T15530] raw-gadget.0 gadget.7: failed to queue resume event [ 1013.177259][T15530] usb 8-1: device descriptor read/64, error -32 [ 1013.291676][T19118] netlink: 5052 bytes leftover after parsing attributes in process `syz.0.3004'. [ 1013.301914][T19118] netlink: 5052 bytes leftover after parsing attributes in process `syz.0.3004'. [ 1013.617745][T15530] raw-gadget.0 gadget.7: failed to queue suspend event [ 1013.645661][T15530] raw-gadget.0 gadget.7: failed to queue reset event [ 1013.759686][T15530] raw-gadget.0 gadget.7: failed to queue resume event [ 1013.790817][ T29] audit: type=1400 audit(2000000724.805:1719): avc: denied { write } for pid=19121 comm="syz.6.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1013.848929][T15530] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1013.868779][ C0] raw-gadget.0 gadget.7: ignoring, device is not running [ 1013.880558][T15530] raw-gadget.0 gadget.7: failed to queue reset event [ 1014.033408][T15530] raw-gadget.0 gadget.7: failed to queue resume event [ 1014.112613][T15530] usb 8-1: device descriptor read/64, error -32 [ 1014.133346][ T29] audit: type=1400 audit(2000000725.123:1720): avc: denied { ioctl } for pid=19134 comm="syz.0.3010" path="socket:[71135]" dev="sockfs" ino=71135 ioctlcmd=0x89ea scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1014.183045][T19138] QAT: failed to copy from user cfg_data. [ 1014.238748][T15530] raw-gadget.0 gadget.7: failed to queue suspend event [ 1014.247431][T15530] usb usb8-port1: attempt power cycle [ 1014.254408][T15530] raw-gadget.0 gadget.7: failed to queue disconnect event [ 1014.265359][T15530] raw-gadget.0 gadget.7: failed to queue reset event [ 1014.341956][T15530] raw-gadget.0 gadget.7: failed to queue resume event [ 1014.357302][T15530] raw-gadget.0 gadget.7: failed to queue reset event [ 1014.604024][T15530] raw-gadget.0 gadget.7: failed to queue resume event [ 1014.711241][T15530] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1014.779283][ C0] raw-gadget.0 gadget.7: ignoring, device is not running [ 1014.796831][T15530] usb 8-1: device descriptor read/8, error -32 [ 1014.818782][ T29] audit: type=1400 audit(2000000725.750:1721): avc: denied { watch } for pid=19147 comm="syz.6.3011" path="/321/bus/bus" dev="overlay" ino=1841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1014.902334][ T29] audit: type=1400 audit(2000000725.750:1722): avc: denied { watch_sb watch_reads } for pid=19147 comm="syz.6.3011" path="/321/bus/bus" dev="overlay" ino=1841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1014.960103][T15530] raw-gadget.0 gadget.7: failed to queue suspend event [ 1014.978789][T15530] raw-gadget.0 gadget.7: failed to queue reset event [ 1015.082160][T15530] raw-gadget.0 gadget.7: failed to queue resume event [ 1015.163576][T15530] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1015.197247][ C0] raw-gadget.0 gadget.7: ignoring, device is not running [ 1015.212001][T15530] usb 8-1: device descriptor read/8, error -32 [ 1015.370187][T15530] raw-gadget.0 gadget.7: failed to queue suspend event [ 1015.400427][T15530] usb usb8-port1: unable to enumerate USB device [ 1017.144093][ T29] audit: type=1400 audit(2000000727.940:1723): avc: denied { audit_write } for pid=19170 comm="syz.6.3014" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1017.172521][ T29] audit: type=1400 audit(2000000727.977:1724): avc: denied { watch watch_reads } for pid=19170 comm="syz.6.3014" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1017.309973][T19182] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=19182 comm=syz.7.3015 [ 1017.343612][ T8029] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1017.578901][ T8029] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1017.600254][ T8029] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1017.609489][ T8029] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.698391][ T8029] usb 6-1: config 0 descriptor?? [ 1017.753077][ T8029] pwc: Askey VC010 type 2 USB webcam detected. [ 1017.807240][ T29] audit: type=1400 audit(2000000728.557:1725): avc: denied { create } for pid=19194 comm="syz.1.3018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1017.829734][T19195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3018'. [ 1017.839189][T19195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3018'. [ 1017.850682][T19195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3018'. [ 1017.860061][T19195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3018'. [ 1018.085481][T19199] /dev/nullb0: Can't open blockdev [ 1018.202833][ T8029] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1018.207285][ T29] audit: type=1400 audit(2000000728.829:1726): avc: denied { read } for pid=19194 comm="syz.1.3018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1018.216339][ T8029] pwc: recv_control_msg error -32 req 02 val 2700 [ 1018.344825][ T8029] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1018.404863][ T8029] pwc: recv_control_msg error -32 req 04 val 1000 [ 1018.417539][ T8029] pwc: recv_control_msg error -32 req 04 val 1300 [ 1018.442660][ T8029] pwc: recv_control_msg error -32 req 04 val 1400 [ 1018.453668][ T8029] pwc: recv_control_msg error -32 req 02 val 2000 [ 1018.466407][ T8029] pwc: recv_control_msg error -32 req 02 val 2100 [ 1018.477656][ T8029] pwc: recv_control_msg error -32 req 04 val 1500 [ 1018.484947][ T8029] pwc: recv_control_msg error -32 req 02 val 2500 [ 1018.494728][ T8029] pwc: recv_control_msg error -32 req 02 val 2400 [ 1018.551328][T19203] syzkaller0: entered promiscuous mode [ 1018.575553][T19203] syzkaller0: entered allmulticast mode [ 1018.651897][T19203] tipc: Started in network mode [ 1018.662340][T19203] tipc: Node identity c239814f21b8, cluster identity 4711 [ 1018.677638][T19203] tipc: Enabled bearer , priority 0 [ 1018.727219][ T8029] pwc: recv_control_msg error -71 req 02 val 2900 [ 1018.743842][ T8029] pwc: recv_control_msg error -71 req 02 val 2800 [ 1018.764622][ T8029] pwc: recv_control_msg error -71 req 04 val 1100 [ 1018.776941][ T8029] pwc: recv_control_msg error -71 req 04 val 1200 [ 1018.833371][T19212] 9p: Unknown access argument A: -22 [ 1018.833936][ T8029] pwc: Registered as video103. [ 1018.864772][ T8029] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input40 [ 1018.908034][ T8029] usb 6-1: USB disconnect, device number 85 [ 1019.736447][T19201] tipc: Resetting bearer [ 1020.465413][T19237] netlink: 'syz.5.3027': attribute type 3 has an invalid length. [ 1020.945949][T19201] tipc: Disabling bearer [ 1020.973529][ T5861] tipc: Node number set to 3816915279 [ 1022.580518][T19255] SELinux: failed to load policy [ 1023.043830][T19260] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 1023.054120][T19260] SELinux: failed to load policy [ 1023.216421][ T29] audit: type=1400 audit(2000000733.620:1727): avc: denied { write } for pid=19265 comm="syz.0.3035" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1023.258377][ T29] audit: type=1400 audit(2000000733.667:1728): avc: denied { shutdown } for pid=19267 comm="syz.6.3036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1023.385168][T19273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19273 comm=syz.1.3031 [ 1023.400913][T19273] netlink: 'syz.1.3031': attribute type 1 has an invalid length. [ 1023.446757][T19273] bond1: (slave bridge2): making interface the new active one [ 1023.456417][T19273] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1023.605529][ T5868] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1023.645932][T19278] tmpfs: Bad value for 'mpol' [ 1023.725563][ T29] audit: type=1400 audit(2000000734.107:1729): avc: denied { read write } for pid=19275 comm="syz.7.3038" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1023.754117][ T5861] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 1023.776958][ T5868] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.798462][ T5868] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1023.820281][ T5868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.828834][ T29] audit: type=1400 audit(2000000734.107:1730): avc: denied { open } for pid=19275 comm="syz.7.3038" path="/110/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1023.878273][ T5868] usb 1-1: config 0 descriptor?? [ 1023.917771][ T5868] pwc: Askey VC010 type 2 USB webcam detected. [ 1023.981680][ T5861] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 1024.005546][ T5861] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1024.051069][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.081094][ T5861] usb 2-1: Product: syz [ 1024.086901][ T5861] usb 2-1: Manufacturer: syz [ 1024.095762][ T29] audit: type=1400 audit(2000000734.443:1731): avc: denied { append } for pid=19282 comm="syz.5.3040" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1024.128347][ T5861] usb 2-1: SerialNumber: syz [ 1024.144418][ T5861] usb 2-1: config 0 descriptor?? [ 1024.165908][ T5861] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1024.165940][ T5861] usb 2-1: setting power ON [ 1024.166359][ T5861] dvb-usb: bulk message failed: -22 (2/0) [ 1024.172062][ T5861] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1024.179544][ T5861] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 1024.179994][ T5861] dvb_usb_cxusb 2-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 1024.226397][ T29] audit: type=1400 audit(2000000734.574:1732): avc: denied { accept } for pid=19282 comm="syz.5.3040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1024.342720][ T5868] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1024.349643][ T5868] pwc: recv_control_msg error -32 req 02 val 2700 [ 1024.367804][ T5868] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1024.379439][ T5868] pwc: recv_control_msg error -32 req 04 val 1000 [ 1024.388162][ T5868] pwc: recv_control_msg error -32 req 04 val 1300 [ 1024.400470][ T9] usb 2-1: USB disconnect, device number 36 [ 1024.407931][ T5868] pwc: recv_control_msg error -32 req 04 val 1400 [ 1024.430280][ T5868] pwc: recv_control_msg error -32 req 02 val 2000 [ 1024.454195][ T5868] pwc: recv_control_msg error -32 req 02 val 2100 [ 1024.462617][ T5868] pwc: recv_control_msg error -32 req 04 val 1500 [ 1024.469942][ T5868] pwc: recv_control_msg error -32 req 02 val 2500 [ 1024.483083][ T5868] pwc: recv_control_msg error -32 req 02 val 2400 [ 1024.562833][T19288] fuse: Unknown parameter '' [ 1024.596892][T19290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.609332][T19290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.734405][ T5868] pwc: recv_control_msg error -71 req 02 val 2900 [ 1024.745007][ T5868] pwc: recv_control_msg error -71 req 02 val 2800 [ 1024.752755][T19292] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3043'. [ 1024.764641][ T5868] pwc: recv_control_msg error -71 req 04 val 1100 [ 1024.772051][T19292] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3043'. [ 1024.773897][ T5868] pwc: recv_control_msg error -71 req 04 val 1200 [ 1025.403392][T19292] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3043'. [ 1025.417411][T19292] openvswitch: netlink: Flow key attr not present in new flow. [ 1025.450248][ T5868] pwc: Registered as video103. [ 1025.476897][ T5868] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input41 [ 1025.523831][ T5868] usb 1-1: USB disconnect, device number 90 [ 1025.575514][T16214] udevd[16214]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1025.743149][ T29] audit: type=1400 audit(2000000735.997:1733): avc: denied { watch } for pid=19299 comm="syz.1.3045" path="/133/net_prio.prioidx" dev="tmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1026.175563][T19306] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 1026.185874][T19306] SELinux: failed to load policy [ 1027.265206][ T29] audit: type=1400 audit(2000000737.410:1734): avc: denied { write } for pid=19310 comm="syz.6.3048" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1027.290227][T19312] random: crng reseeded on system resumption [ 1027.386871][ T29] audit: type=1400 audit(2000000737.410:1735): avc: denied { open } for pid=19310 comm="syz.6.3048" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1027.511077][ T29] audit: type=1400 audit(2000000737.597:1736): avc: denied { append } for pid=19315 comm="syz.5.3050" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1027.616942][T19317] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 1027.738840][T19317] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1029.258503][ T8029] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1029.326453][T19347] overlayfs: missing 'lowerdir' [ 1029.442704][ T8029] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 1029.550649][ T8029] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.689850][ T8029] usb 6-1: Product: syz [ 1029.702510][ T8029] usb 6-1: Manufacturer: syz [ 1029.730460][T19350] team0: entered promiscuous mode [ 1029.734632][ T8029] usb 6-1: SerialNumber: syz [ 1029.735533][T19350] team_slave_0: entered promiscuous mode [ 1029.796578][ T8029] usb 6-1: config 0 descriptor?? [ 1029.804496][T19350] team_slave_1: entered promiscuous mode [ 1029.834344][ T8029] hub 6-1:0.0: bad descriptor, ignoring hub [ 1029.857718][ T8029] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1030.214700][ T8029] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 1030.316883][ T8029] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1030.341309][T19365] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3064'. [ 1030.371862][T19365] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3064'. [ 1030.373960][ T8029] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 1030.425424][T19367] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3064'. [ 1030.445509][ T8029] usb 6-1: media controller created [ 1030.473490][T19365] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3064'. [ 1030.516139][ T8029] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1030.643043][ T8029] DVB: Unable to find symbol dib7000p_attach() [ 1030.665110][ T8029] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 1030.752101][T19373] random: crng reseeded on system resumption [ 1030.758411][ T8029] rc_core: IR keymap rc-dib0700-rc5 not found [ 1030.758430][ T8029] Registered IR keymap rc-empty [ 1030.758670][ T8029] dvb-usb: could not initialize remote control. [ 1030.812984][ T8029] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 1030.828246][T19376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.839371][ T9] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 1030.854454][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1030.855611][ T29] audit: type=1326 audit(2000000740.760:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19371 comm="syz.7.3066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb6359c799 code=0xffff0000 [ 1030.929564][T19376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.036861][T19376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.050432][T19376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.072333][T19376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.181917][T19376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.199421][T15530] usb 6-1: USB disconnect, device number 86 [ 1031.240816][T15530] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 1032.091804][T19383] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1033.083831][ T8029] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1033.223384][T19391] qnx4: no qnx4 filesystem (no root dir). [ 1033.263583][ T8029] usb 1-1: config 8 has an invalid interface number: 194 but max is 0 [ 1033.482902][ T8029] usb 1-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 1033.499370][ T29] audit: type=1400 audit(2000000743.249:1740): avc: denied { unmount } for pid=10966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1033.538316][ T8029] usb 1-1: config 8 has no interface number 0 [ 1033.570765][ T8029] usb 1-1: config 8 interface 194 altsetting 127 bulk endpoint 0x3 has invalid maxpacket 8 [ 1033.611623][ T8029] usb 1-1: config 8 interface 194 altsetting 127 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1033.645012][ T8029] usb 1-1: config 8 interface 194 has no altsetting 0 [ 1033.666401][ T8029] usb 1-1: New USB device found, idVendor=08dd, idProduct=0986, bcdDevice=72.b6 [ 1033.696538][ T8029] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.722139][ T8029] usb 1-1: Product: ޺퐻႓逎⼫윴㇈ [ 1033.745094][ T8029] usb 1-1: Manufacturer: Ч [ 1033.773781][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1033.824948][T19387] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1033.865056][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1033.903090][ T9] usb 2-1: can't read configurations, error -71 [ 1034.068096][T19399] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3070'. [ 1034.080421][T19399] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3070'. [ 1034.795653][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1034.986551][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1035.007740][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1035.032737][ T9] usb 2-1: config 0 has no interface number 0 [ 1035.065906][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1035.128650][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.159350][ T9] usb 2-1: Product: syz [ 1035.183002][ T9] usb 2-1: Manufacturer: syz [ 1035.198673][ T9] usb 2-1: SerialNumber: syz [ 1035.224477][ T9] usb 2-1: config 0 descriptor?? [ 1035.249540][ T9] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1035.267780][ T9] usb 2-1: selecting invalid altsetting 1 [ 1035.281035][ T9] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1035.307712][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1035.333240][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1035.367550][ T9] usb 2-1: media controller created [ 1035.398423][ T8029] pegasus 1-1:8.194: Missing or invalid endpoints [ 1035.442306][ T8029] usb 1-1: USB disconnect, device number 91 [ 1035.499771][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1035.552287][ T9] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1035.559288][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1035.612364][ T9] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1035.632453][ T29] audit: type=1400 audit(2000000745.243:1741): avc: denied { getopt } for pid=19407 comm="syz.6.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1035.828904][T19419] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1036.422650][ T29] audit: type=1400 audit(2000000745.271:1742): avc: denied { getopt } for pid=19407 comm="syz.6.3074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1036.477940][ T9] usb 2-1: USB disconnect, device number 38 [ 1037.112038][T19441] openvswitch: netlink: Flow key attribute not present in set flow. [ 1037.155529][T19441] FAULT_INJECTION: forcing a failure. [ 1037.155529][T19441] name failslab, interval 1, probability 0, space 0, times 0 [ 1037.314516][T19441] CPU: 1 UID: 0 PID: 19441 Comm: syz.1.3080 Tainted: G L syzkaller #0 PREEMPT(full) [ 1037.314546][T19441] Tainted: [L]=SOFTLOCKUP [ 1037.314552][T19441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1037.314560][T19441] Call Trace: [ 1037.314564][T19441] [ 1037.314570][T19441] dump_stack_lvl+0x100/0x190 [ 1037.314593][T19441] should_fail_ex.cold+0x5/0xa [ 1037.314609][T19441] should_failslab+0xc2/0x120 [ 1037.314621][T19441] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1037.314639][T19441] ? __alloc_skb+0x140/0x710 [ 1037.314656][T19441] __alloc_skb+0x140/0x710 [ 1037.314669][T19441] ? __alloc_skb+0x5b7/0x710 [ 1037.314683][T19441] ? __pfx___alloc_skb+0x10/0x10 [ 1037.314696][T19441] ? genl_rcv_msg+0x4be/0x800 [ 1037.314711][T19441] netlink_ack+0x117/0xb80 [ 1037.314731][T19441] netlink_rcv_skb+0x333/0x420 [ 1037.314748][T19441] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1037.314760][T19441] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1037.314782][T19441] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1037.314800][T19441] genl_rcv+0x28/0x40 [ 1037.314817][T19441] netlink_unicast+0x5aa/0x870 [ 1037.314836][T19441] ? __pfx_netlink_unicast+0x10/0x10 [ 1037.314858][T19441] netlink_sendmsg+0x8b0/0xda0 [ 1037.314877][T19441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1037.314897][T19441] ? __might_fault+0x60/0x140 [ 1037.314922][T19441] ____sys_sendmsg+0x9e1/0xb70 [ 1037.314944][T19441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1037.314966][T19441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1037.315004][T19441] ___sys_sendmsg+0x190/0x1e0 [ 1037.315020][T19441] ? __pfx____sys_sendmsg+0x10/0x10 [ 1037.315052][T19441] __sys_sendmsg+0x170/0x220 [ 1037.315067][T19441] ? __pfx___sys_sendmsg+0x10/0x10 [ 1037.315096][T19441] do_syscall_64+0x106/0xf80 [ 1037.315118][T19441] ? clear_bhb_loop+0x40/0x90 [ 1037.315139][T19441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.315157][T19441] RIP: 0033:0x7f125239c799 [ 1037.315173][T19441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1037.315190][T19441] RSP: 002b:00007f1253306028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1037.315208][T19441] RAX: ffffffffffffffda RBX: 00007f1252615fa0 RCX: 00007f125239c799 [ 1037.315219][T19441] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1037.315230][T19441] RBP: 00007f1253306090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.315240][T19441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.315249][T19441] R13: 00007f1252616038 R14: 00007f1252615fa0 R15: 00007ffe058b47d8 [ 1037.315273][T19441] [ 1038.143614][T19454] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3083'. [ 1038.191430][T19454] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3083'. [ 1038.276969][ T9] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1038.992773][T19465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3084'. [ 1039.002648][T19465] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3084'. [ 1039.701010][ T5861] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1039.895978][ T5861] usb 6-1: config 8 has an invalid interface number: 194 but max is 0 [ 1039.926973][ T5861] usb 6-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 1039.960038][ T5861] usb 6-1: config 8 has no interface number 0 [ 1039.975552][ T5861] usb 6-1: config 8 interface 194 altsetting 127 bulk endpoint 0x3 has invalid maxpacket 8 [ 1039.989546][ T5861] usb 6-1: config 8 interface 194 altsetting 127 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1040.007620][ T5861] usb 6-1: config 8 interface 194 has no altsetting 0 [ 1040.034696][ T5861] usb 6-1: New USB device found, idVendor=08dd, idProduct=0986, bcdDevice=72.b6 [ 1040.053969][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.079707][ T5861] usb 6-1: Product: ޺퐻႓逎⼫윴㇈ [ 1040.111267][ T5861] usb 6-1: Manufacturer: Ч [ 1040.167445][T19464] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1040.410276][T19482] fuse: Bad value for 'fd' [ 1041.225354][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1041.244370][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1041.267801][ T9] usb 2-1: can't read configurations, error -71 [ 1041.533423][ T5861] pegasus 6-1:8.194: Missing or invalid endpoints [ 1041.632576][ T5861] usb 6-1: USB disconnect, device number 87 [ 1041.790166][T19502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1042.026367][T19519] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1042.064210][T15530] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1043.073203][T19525] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3096'. [ 1043.116849][T19525] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3096'. [ 1043.131811][T15530] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.157483][T15530] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1043.200023][T15530] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1043.230630][T15530] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1043.283210][T15530] usb 1-1: SerialNumber: syz [ 1043.417802][ T8029] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1043.577231][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1043.679746][ T8029] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1043.706183][ T8029] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1043.715226][ T8029] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.777249][T19534] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1043.828378][ T8029] usb 6-1: config 0 descriptor?? [ 1043.863768][ T8029] pwc: Askey VC010 type 2 USB webcam detected. [ 1044.304704][ T8029] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1044.324116][ T8029] pwc: recv_control_msg error -32 req 02 val 2700 [ 1044.360208][ T8029] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1044.396504][ T8029] pwc: recv_control_msg error -32 req 04 val 1000 [ 1044.435823][ T8029] pwc: recv_control_msg error -32 req 04 val 1300 [ 1044.459743][ T8029] pwc: recv_control_msg error -32 req 04 val 1400 [ 1044.516467][ T8029] pwc: recv_control_msg error -32 req 02 val 2000 [ 1044.547206][ T8029] pwc: recv_control_msg error -32 req 02 val 2100 [ 1044.599651][ T8029] pwc: recv_control_msg error -32 req 04 val 1500 [ 1044.645289][ T8029] pwc: recv_control_msg error -32 req 02 val 2500 [ 1044.669724][ T8029] pwc: recv_control_msg error -32 req 02 val 2400 [ 1045.505209][ T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1045.516636][ T8029] pwc: recv_control_msg error -71 req 02 val 2900 [ 1045.517734][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1045.531836][ T9] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1045.541529][ T8029] pwc: recv_control_msg error -71 req 02 val 2800 [ 1045.541967][ T8029] pwc: recv_control_msg error -71 req 04 val 1100 [ 1045.563376][ T8029] pwc: recv_control_msg error -71 req 04 val 1200 [ 1045.565729][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.592694][ T9] usb 2-1: config 0 descriptor?? [ 1045.598558][T19532] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1045.635455][ T8029] pwc: Registered as video103. [ 1045.667279][ T8029] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input43 [ 1045.739993][ T8029] usb 6-1: USB disconnect, device number 88 [ 1045.747074][ T29] audit: type=1400 audit(2000000754.713:1743): avc: denied { remount } for pid=19536 comm="syz.6.3100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1046.078573][T19532] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1046.088161][ T29] audit: type=1326 audit(2000000755.022:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19531 comm="syz.1.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125239c799 code=0x7ffc0000 [ 1046.113904][ T29] audit: type=1326 audit(2000000755.022:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19531 comm="syz.1.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125239c799 code=0x7ffc0000 [ 1046.139576][ T29] audit: type=1326 audit(2000000755.050:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19531 comm="syz.1.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125239c799 code=0x7ffc0000 [ 1046.164331][ T9] hid_parser_main: 24 callbacks suppressed [ 1046.164346][ T9] hid-multitouch 0003:1FD2:6007.0027: unknown main item tag 0x0 [ 1046.178416][ T9] hid-multitouch 0003:1FD2:6007.0027: unknown main item tag 0x0 [ 1046.186214][ T9] hid-multitouch 0003:1FD2:6007.0027: unknown main item tag 0x0 [ 1046.195600][ T9] hid-multitouch 0003:1FD2:6007.0027: unknown main item tag 0x0 [ 1046.204541][ T29] audit: type=1326 audit(2000000755.050:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19531 comm="syz.1.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125239c799 code=0x7ffc0000 [ 1046.228462][ T9] hid-multitouch 0003:1FD2:6007.0027: unknown main item tag 0x0 [ 1046.237213][ T9] hid-multitouch 0003:1FD2:6007.0027: unknown main item tag 0x0 [ 1046.260392][ T9] hid-multitouch 0003:1FD2:6007.0027: unknown main item tag 0x0 [ 1046.272353][ T29] audit: type=1326 audit(2000000755.050:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19531 comm="syz.1.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f125239c799 code=0x7ffc0000 [ 1046.297809][ T9] hid-multitouch 0003:1FD2:6007.0027: unknown main item tag 0x0 [ 1046.306043][ T9] hid-multitouch 0003:1FD2:6007.0027: unknown main item tag 0x0 [ 1046.313921][ T9] hid-multitouch 0003:1FD2:6007.0027: unknown main item tag 0x0 [ 1046.321742][ T29] audit: type=1326 audit(2000000755.050:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19531 comm="syz.1.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125239c799 code=0x7ffc0000 [ 1046.350945][ T9] hid-multitouch 0003:1FD2:6007.0027: reserved main item tag 0xd [ 1046.362815][ T29] audit: type=1326 audit(2000000755.050:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19531 comm="syz.1.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125239c799 code=0x7ffc0000 [ 1046.394130][ T9] hid-multitouch 0003:1FD2:6007.0027: hidraw0: USB HID v7f.fd Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 1046.434152][ T9] usb 2-1: USB disconnect, device number 41 [ 1046.444606][ T29] audit: type=1326 audit(2000000755.050:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19531 comm="syz.1.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f125239c42b code=0x7ffc0000 [ 1046.493997][ T29] audit: type=1326 audit(2000000755.050:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19531 comm="syz.1.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125239c799 code=0x7ffc0000 [ 1046.514778][T19549] fido_id[19549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1046.975409][ T9] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1047.041869][T15530] usb 1-1: 0:2 : does not exist [ 1047.125554][T17859] raw-gadget.0 gadget.7: failed to queue disconnect event [ 1047.185649][T15530] usb 1-1: USB disconnect, device number 92 [ 1047.234382][ T9] usb 6-1: config 8 has an invalid interface number: 194 but max is 0 [ 1047.264899][ T9] usb 6-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 1047.284126][ T9] usb 6-1: config 8 has no interface number 0 [ 1047.306633][ T9] usb 6-1: config 8 interface 194 altsetting 127 bulk endpoint 0x3 has invalid maxpacket 8 [ 1047.320095][ T9] usb 6-1: config 8 interface 194 altsetting 127 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1047.459855][T14482] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1047.473342][ T9] usb 6-1: config 8 interface 194 has no altsetting 0 [ 1047.479162][T14482] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1047.482582][ T9] usb 6-1: New USB device found, idVendor=08dd, idProduct=0986, bcdDevice=72.b6 [ 1047.489865][T14482] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1047.496803][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.506286][T14482] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1047.519751][T14482] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1047.561202][ T9] usb 6-1: Product: ޺퐻႓逎⼫윴㇈ [ 1047.581352][ T9] usb 6-1: Manufacturer: Ч [ 1047.683148][T19563] netlink: 'syz.0.3106': attribute type 3 has an invalid length. [ 1047.713327][T19550] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1048.078133][T19571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1049.877705][T14482] Bluetooth: hci2: command tx timeout [ 1050.577536][ T9] pegasus 6-1:8.194: Missing or invalid endpoints [ 1050.594023][ T9] usb 6-1: USB disconnect, device number 89 [ 1051.960621][T19611] dlm: plock device version mismatch: kernel (1.2.0), user (1701536119.1634492767.683378) [ 1052.182557][T14482] Bluetooth: hci2: command tx timeout [ 1052.238011][T19610] SELinux: failed to load policy [ 1054.108214][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 1054.108231][ T29] audit: type=1400 audit(2000000762.536:1814): avc: denied { append } for pid=19629 comm="syz.0.3117" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1054.150500][T19558] chnl_net:caif_netlink_parms(): no params data found [ 1054.206242][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.219314][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.256134][ T29] audit: type=1400 audit(2000000762.611:1815): avc: denied { bind } for pid=19629 comm="syz.0.3117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1054.370849][T14482] Bluetooth: hci2: command tx timeout [ 1055.057105][T19558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.087340][T19558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.096078][T19558] bridge_slave_0: entered allmulticast mode [ 1055.112910][T19558] bridge_slave_0: entered promiscuous mode [ 1055.135813][T19558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.150828][T19558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.179810][T19558] bridge_slave_1: entered allmulticast mode [ 1055.199950][T19558] bridge_slave_1: entered promiscuous mode [ 1055.428777][T19558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.463221][T19558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.608711][T19664] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3121'. [ 1055.618649][T19558] team0: Port device team_slave_0 added [ 1055.647245][T19558] team0: Port device team_slave_1 added [ 1055.659128][T19664] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3121'. [ 1055.932041][T19669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1056.645544][T14482] Bluetooth: hci2: command tx timeout [ 1056.696286][T19558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.728675][T19558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.829557][T19558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.904055][T19558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.924181][T19558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1057.038556][T19558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1057.534249][ T5868] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1057.665646][T19558] hsr_slave_0: entered promiscuous mode [ 1057.671790][T19558] hsr_slave_1: entered promiscuous mode [ 1057.705783][T19558] debugfs: 'hsr0' already exists in 'hsr' [ 1057.712431][T19558] Cannot create hsr debugfs directory [ 1057.745620][ T29] audit: type=1400 audit(2000000765.933:1816): avc: denied { view } for pid=19698 comm="syz.5.3130" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1057.758904][ T5868] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.822070][ T5868] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1057.845158][ T5868] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.887750][ T5868] usb 2-1: config 0 descriptor?? [ 1057.930553][ T5868] pwc: Askey VC010 type 2 USB webcam detected. [ 1058.164088][T19709] input: syz0 as /devices/virtual/input/input45 [ 1058.252057][T19709] FAULT_INJECTION: forcing a failure. [ 1058.252057][T19709] name failslab, interval 1, probability 0, space 0, times 0 [ 1058.267851][T19558] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1058.284098][T19558] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1058.290925][T19709] CPU: 0 UID: 0 PID: 19709 Comm: syz.0.3133 Tainted: G L syzkaller #0 PREEMPT(full) [ 1058.290959][T19709] Tainted: [L]=SOFTLOCKUP [ 1058.290965][T19709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1058.290975][T19709] Call Trace: [ 1058.290982][T19709] [ 1058.290989][T19709] dump_stack_lvl+0x100/0x190 [ 1058.291023][T19709] should_fail_ex.cold+0x5/0xa [ 1058.291048][T19709] should_failslab+0xc2/0x120 [ 1058.291067][T19709] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1058.291090][T19709] ? create_io_worker+0xc6/0x5b0 [ 1058.291108][T19709] ? find_held_lock+0x2b/0x80 [ 1058.291132][T19709] ? create_io_worker+0x17/0x5b0 [ 1058.291152][T19709] create_io_worker+0xc6/0x5b0 [ 1058.291174][T19709] io_wq_enqueue+0x4d8/0x970 [ 1058.291196][T19709] ? __pfx_io_wq_enqueue+0x10/0x10 [ 1058.291214][T19709] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 1058.291232][T19709] ? io_prep_async_work+0x3d0/0x770 [ 1058.291254][T19709] io_queue_iowq+0x234/0x5d0 [ 1058.291274][T19709] io_queue_async+0x22e/0x290 [ 1058.291294][T19709] io_req_task_submit+0x266/0x290 [ 1058.291315][T19709] ? __pfx_io_req_task_submit+0x10/0x10 [ 1058.291335][T19709] ? find_held_lock+0x2b/0x80 [ 1058.291357][T19709] ? __pfx_io_handle_tw_list+0x10/0x10 [ 1058.291380][T19709] ? __pfx_io_req_task_submit+0x10/0x10 [ 1058.291399][T19709] io_handle_tw_list+0x4d8/0x580 [ 1058.291427][T19709] tctx_task_work_run+0x57/0x340 [ 1058.291451][T19709] tctx_task_work+0x7a/0xd0 [ 1058.291472][T19709] ? __pfx_tctx_task_work+0x10/0x10 [ 1058.291495][T19709] ? _raw_spin_unlock_irq+0x23/0x50 [ 1058.291516][T19709] ? lockdep_hardirqs_on+0x78/0x100 [ 1058.291539][T19709] task_work_run+0x150/0x240 [ 1058.291561][T19709] ? __pfx_task_work_run+0x10/0x10 [ 1058.291579][T19709] ? __do_sys_io_uring_enter+0xa03/0x1a20 [ 1058.291600][T19709] ? __do_sys_io_uring_enter+0xa03/0x1a20 [ 1058.291628][T19709] get_signal+0x1bd/0x21e0 [ 1058.291661][T19709] ? __pfx_get_signal+0x10/0x10 [ 1058.291684][T19709] ? fput+0x79/0x100 [ 1058.291708][T19709] arch_do_signal_or_restart+0x91/0x7a0 [ 1058.291738][T19709] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1058.291770][T19709] ? ksys_write+0x1ac/0x250 [ 1058.291790][T19709] exit_to_user_mode_loop+0x86/0x4a0 [ 1058.291809][T19709] do_syscall_64+0x67c/0xf80 [ 1058.291830][T19709] ? clear_bhb_loop+0x40/0x90 [ 1058.291851][T19709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.291868][T19709] RIP: 0033:0x7f101cd9c799 [ 1058.291884][T19709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1058.291899][T19709] RSP: 002b:00007f101dd00028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1058.291916][T19709] RAX: 0000000000000001 RBX: 00007f101d015fa0 RCX: 00007f101cd9c799 [ 1058.291926][T19709] RDX: 0000000000000000 RSI: 0000000000007a98 RDI: 0000000000000005 [ 1058.291936][T19709] RBP: 00007f101dd00090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.291947][T19709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.291963][T19709] R13: 00007f101d016038 R14: 00007f101d015fa0 R15: 00007ffe0e17fa78 [ 1058.291987][T19709] [ 1058.316689][T19714] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3135'. [ 1058.422638][T19715] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3135'. [ 1058.430167][ T5868] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1058.435436][T19715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3135'. [ 1058.507118][ T5868] pwc: recv_control_msg error -32 req 02 val 2700 [ 1058.520694][T19558] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1058.619495][ T5868] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1058.627244][T19714] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3135'. [ 1058.639869][ T5868] pwc: recv_control_msg error -32 req 04 val 1000 [ 1058.673961][ T5868] pwc: recv_control_msg error -32 req 04 val 1300 [ 1058.681718][ T5868] pwc: recv_control_msg error -32 req 04 val 1400 [ 1058.683654][T19558] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1058.689830][ T5868] pwc: recv_control_msg error -32 req 02 val 2000 [ 1058.731468][ T5868] pwc: recv_control_msg error -32 req 02 val 2100 [ 1058.780144][ T5868] pwc: recv_control_msg error -32 req 04 val 1500 [ 1058.827916][ T5868] pwc: recv_control_msg error -32 req 02 val 2500 [ 1058.830501][T19558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.846160][ T5868] pwc: recv_control_msg error -32 req 02 val 2400 [ 1059.115952][ T5868] pwc: recv_control_msg error -71 req 02 val 2900 [ 1059.587471][ T5868] pwc: recv_control_msg error -71 req 02 val 2800 [ 1059.595369][ T5868] pwc: recv_control_msg error -71 req 04 val 1100 [ 1059.596778][ T29] audit: type=1400 audit(2000000767.299:1817): avc: denied { connect } for pid=19728 comm="syz.0.3138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1059.604237][ T5868] pwc: recv_control_msg error -71 req 04 val 1200 [ 1059.729407][T19736] dlm: plock device version mismatch: kernel (1.2.0), user (1701536119.1634492767.683378) [ 1059.865526][T19731] SELinux: failed to load policy [ 1059.985266][ T5868] pwc: Registered as video103. [ 1060.007392][ T5868] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input46 [ 1060.109245][T19558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1060.141639][ T5868] usb 2-1: USB disconnect, device number 42 [ 1060.161165][T18271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1060.168304][T18271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1060.218822][T18271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1060.225945][T18271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.258598][T15530] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1060.286657][T19558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1060.419997][T15530] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1060.428262][T15530] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1060.492978][T15530] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1060.537611][T19749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3140'. [ 1060.546780][T19749] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3140'. [ 1060.566559][T15530] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1060.599493][T15530] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1060.646863][T15530] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1060.699375][T15530] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.748662][T15530] usb 1-1: config 0 descriptor?? [ 1060.767532][T19735] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1060.874139][T19558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1061.182114][T19558] veth0_vlan: entered promiscuous mode [ 1061.209109][T19558] veth1_vlan: entered promiscuous mode [ 1061.216515][T15530] hid_parser_main: 446 callbacks suppressed [ 1061.216536][T15530] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1061.242045][T15530] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1061.252164][T15530] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1061.292365][T15530] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1061.305733][T15530] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1061.320338][T15530] plantronics 0003:047F:FFFF.0028: unknown main item tag 0x0 [ 1061.343759][T19558] veth0_macvtap: entered promiscuous mode [ 1061.363386][T15530] plantronics 0003:047F:FFFF.0028: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1061.403494][T19558] veth1_macvtap: entered promiscuous mode [ 1061.493948][T19558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1061.565173][T19558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1062.101820][ T29] audit: type=1400 audit(2000000769.751:1818): avc: denied { shutdown } for pid=19769 comm="syz.6.3145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1062.616020][T15530] usb 1-1: USB disconnect, device number 93 [ 1062.848895][T19775] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3146'. [ 1062.871395][T18271] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.891234][T19775] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3146'. [ 1062.918241][T19780] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3146'. [ 1062.918903][T18271] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1062.964264][T19775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3146'. [ 1062.993736][T18271] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.002466][T18271] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1064.244520][ T2961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.252364][ T2961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.345961][ T7706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1064.372228][T15530] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1064.377150][ T7706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1064.533509][ T29] audit: type=1400 audit(2000000772.297:1819): avc: denied { bind } for pid=19788 comm="syz.5.3152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1064.586768][T15530] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.639391][T15530] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1064.683435][T15530] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.776906][T15530] usb 1-1: config 0 descriptor?? [ 1064.785348][T15530] pwc: Askey VC010 type 2 USB webcam detected. [ 1064.888025][T19795] QAT: failed to copy from user cfg_data. [ 1065.243045][T15530] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1065.250472][T15530] pwc: recv_control_msg error -32 req 02 val 2700 [ 1065.268536][T15530] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1065.285384][T15530] pwc: recv_control_msg error -32 req 04 val 1000 [ 1065.387729][T19801] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3154'. [ 1065.472871][T15530] pwc: recv_control_msg error -32 req 04 val 1300 [ 1065.535309][ T42] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 1065.660936][T15530] pwc: recv_control_msg error -32 req 04 val 1400 [ 1065.691524][T15530] pwc: recv_control_msg error -32 req 02 val 2000 [ 1065.708890][T15530] pwc: recv_control_msg error -32 req 02 val 2100 [ 1065.727637][T15530] pwc: recv_control_msg error -32 req 04 val 1500 [ 1065.738145][T15530] pwc: recv_control_msg error -32 req 02 val 2500 [ 1065.749645][T15530] pwc: recv_control_msg error -32 req 02 val 2400 [ 1065.805826][ T42] usb 9-1: device descriptor read/64, error -71 [ 1066.061224][ T42] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 1066.091038][T15530] pwc: recv_control_msg error -71 req 02 val 2900 [ 1066.102425][T15530] pwc: recv_control_msg error -71 req 02 val 2800 [ 1066.110185][T15530] pwc: recv_control_msg error -71 req 04 val 1100 [ 1066.118917][T15530] pwc: recv_control_msg error -71 req 04 val 1200 [ 1066.135544][T15530] pwc: Registered as video103. [ 1066.151345][T15530] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input47 [ 1066.194096][T15530] usb 1-1: USB disconnect, device number 94 [ 1066.210541][ T42] usb 9-1: device descriptor read/64, error -71 [ 1066.242486][T16214] udevd[16214]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1066.330031][ T42] usb usb9-port1: attempt power cycle [ 1066.360052][ T9] usb 6-1: new low-speed USB device number 90 using dummy_hcd [ 1066.498771][ T9] usb 6-1: device descriptor read/64, error -71 [ 1066.702455][ T42] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 1066.812308][ T9] usb 6-1: new low-speed USB device number 91 using dummy_hcd [ 1066.820666][ T42] usb 9-1: device descriptor read/8, error -71 [ 1067.014119][ T9] usb 6-1: device descriptor read/64, error -71 [ 1067.108780][ T42] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 1067.142408][ T9] usb usb6-port1: attempt power cycle [ 1067.149626][ T42] usb 9-1: device descriptor read/8, error -71 [ 1067.177976][T12784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1067.189191][T12784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1067.200625][T12784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1067.208843][T12784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1067.217791][T12784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1067.243996][T19824] netlink: 'syz.1.3161': attribute type 39 has an invalid length. [ 1067.291716][ T42] usb usb9-port1: unable to enumerate USB device [ 1067.457517][ T29] audit: type=1400 audit(2000000775.020:1820): avc: denied { accept } for pid=19823 comm="syz.1.3161" lport=37852 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1067.479969][T19820] chnl_net:caif_netlink_parms(): no params data found [ 1067.514095][ T9] usb 6-1: new low-speed USB device number 92 using dummy_hcd [ 1067.538701][ T9] usb 6-1: device descriptor read/8, error -71 [ 1067.547525][T19820] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.554645][T19820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.562396][T19820] bridge_slave_0: entered allmulticast mode [ 1067.569867][T19820] bridge_slave_0: entered promiscuous mode [ 1067.577076][T19820] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.584665][T19820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.592389][T19820] bridge_slave_1: entered allmulticast mode [ 1067.599150][T19820] bridge_slave_1: entered promiscuous mode [ 1067.622848][T19820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.635375][T19820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.660643][T19820] team0: Port device team_slave_0 added [ 1067.668461][T19820] team0: Port device team_slave_1 added [ 1067.687908][T19820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1067.694867][T19820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.722089][T19820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1067.734292][T19820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1067.741930][T19820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1067.768890][T19820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1067.791828][ T9] usb 6-1: new low-speed USB device number 93 using dummy_hcd [ 1067.805499][T19820] hsr_slave_0: entered promiscuous mode [ 1067.811646][T19820] hsr_slave_1: entered promiscuous mode [ 1067.818108][T19820] debugfs: 'hsr0' already exists in 'hsr' [ 1067.825456][T19820] Cannot create hsr debugfs directory [ 1067.825462][ T9] usb 6-1: device descriptor read/8, error -71 [ 1067.941955][T19820] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.963615][ T9] usb usb6-port1: unable to enumerate USB device [ 1068.026309][T19820] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.114788][T19820] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.207778][T19834] Bluetooth: MGMT ver 1.23 [ 1068.307504][T19820] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.379241][T19838] binder: 19836:19838 ioctl c0306201 0 returned -14 [ 1068.675485][T19841] netlink: 'syz.8.3164': attribute type 1 has an invalid length. [ 1068.683708][T19841] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3164'. [ 1068.914460][T19845] program syz.8.3164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1069.265987][T19850] netlink: 'syz.5.3165': attribute type 3 has an invalid length. [ 1069.416282][T14482] Bluetooth: hci0: command tx timeout [ 1069.503461][T19862] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3167'. [ 1069.596876][T19820] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1069.703726][T19820] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1069.734582][T19820] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1069.822129][T19875] netlink: 'syz.5.3166': attribute type 3 has an invalid length. [ 1070.297381][ T29] audit: type=1400 audit(2000000777.687:1821): avc: denied { call } for pid=19878 comm="syz.1.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1070.317264][T19820] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1070.390383][ T29] audit: type=1400 audit(2000000777.687:1822): avc: denied { transfer } for pid=19878 comm="syz.1.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1070.552792][ T29] audit: type=1400 audit(2000000777.921:1823): avc: denied { getopt } for pid=19888 comm="syz.8.3172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1070.660889][T19820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.715608][T19820] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.729316][ T7707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.736536][ T7707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.768806][ T7707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.775993][ T7707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1070.817142][ T24] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1071.003405][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.035990][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1071.058835][ T24] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1071.073243][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1071.096218][ T24] usb 6-1: SerialNumber: syz [ 1071.120612][T19820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.184128][T19820] veth0_vlan: entered promiscuous mode [ 1071.211357][T19820] veth1_vlan: entered promiscuous mode [ 1071.258362][T19820] veth0_macvtap: entered promiscuous mode [ 1071.269095][T19820] veth1_macvtap: entered promiscuous mode [ 1071.292411][T19820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1071.307241][T19820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.319597][ T77] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.583861][T19917] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1071.641885][T14482] Bluetooth: hci0: command tx timeout [ 1073.480245][ T77] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.490075][ T77] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.515756][ T77] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.726352][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.848948][ T29] audit: type=1400 audit(2000000780.999:1824): avc: denied { ioctl } for pid=19918 comm="syz.8.3173" path="socket:[74505]" dev="sockfs" ino=74505 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1073.879518][T14482] Bluetooth: hci0: command tx timeout [ 1073.920278][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.522743][T18273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.565357][T18273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.973665][T19929] qnx4: no qnx4 filesystem (no root dir). [ 1075.196398][ T24] usb 6-1: 0:2 : does not exist [ 1075.302100][T19935] netlink: 'syz.8.3176': attribute type 3 has an invalid length. [ 1075.431547][T19938] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3159'. [ 1075.451462][T19938] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3159'. [ 1075.497154][T19938] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3159'. [ 1075.560701][T19938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3159'. [ 1075.604365][ T24] usb 6-1: USB disconnect, device number 94 [ 1076.106429][T14482] Bluetooth: hci0: command tx timeout [ 1076.228731][T16213] udevd[16213]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1076.292923][T19945] dlm: plock device version mismatch: kernel (1.2.0), user (1701536119.1634492767.683378) [ 1076.309891][ T792] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1076.667482][T19957] overlayfs: missing 'lowerdir' [ 1078.150588][T19962] bond0: (slave bond_slave_0): Releasing backup interface [ 1078.172547][T19942] SELinux: failed to load policy [ 1079.129240][T19971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1079.297720][ T29] audit: type=1400 audit(2000000786.062:1825): avc: denied { append } for pid=19972 comm="syz.8.3185" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1079.423423][ T29] audit: type=1400 audit(2000000786.090:1826): avc: denied { getattr } for pid=19972 comm="syz.8.3185" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=75620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1079.620176][ T792] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1079.684837][ T792] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1079.756245][ T792] usb 2-1: can't read configurations, error -71 [ 1079.870768][T19990] tmpfs: Bad value for 'mpol' [ 1080.169526][ T29] audit: type=1400 audit(2000000786.904:1827): avc: denied { unmount } for pid=16247 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1080.434020][T19998] qnx4: no qnx4 filesystem (no root dir). [ 1081.019111][ T9] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1081.035136][T20008] netlink: 'syz.1.3190': attribute type 3 has an invalid length. [ 1081.149694][T20011] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3192'. [ 1081.192107][T20011] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3192'. [ 1081.208318][T20014] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3192'. [ 1081.252425][T20011] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3192'. [ 1081.275290][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.309792][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1081.456186][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1081.960596][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1082.025191][ T9] usb 1-1: SerialNumber: syz [ 1082.252265][ T5897] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1082.737481][T20022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3194'. [ 1082.815668][T20024] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1082.851305][ T5897] usb 2-1: config 8 has an invalid interface number: 194 but max is 0 [ 1082.859661][ T5897] usb 2-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 1082.868472][ T5897] usb 2-1: config 8 has no interface number 0 [ 1082.874744][ T5897] usb 2-1: config 8 interface 194 altsetting 127 bulk endpoint 0x3 has invalid maxpacket 8 [ 1082.885153][ T5897] usb 2-1: config 8 interface 194 altsetting 127 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 1082.939786][ T5897] usb 2-1: config 8 interface 194 has no altsetting 0 [ 1082.975461][ T5897] usb 2-1: New USB device found, idVendor=08dd, idProduct=0986, bcdDevice=72.b6 [ 1083.029753][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.066112][ T5897] usb 2-1: Product: ޺퐻႓逎⼫윴㇈ [ 1083.089591][ T5897] usb 2-1: Manufacturer: Ч [ 1083.147832][T20016] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1084.508798][ T5897] pegasus 2-1:8.194: Missing or invalid endpoints [ 1084.617664][ T5897] usb 2-1: USB disconnect, device number 45 [ 1086.388654][T20047] overlayfs: missing 'lowerdir' [ 1086.609145][ T29] audit: type=1400 audit(2000000792.940:1828): avc: denied { unmount } for pid=6457 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1087.622552][ T9] usb 1-1: 0:2 : does not exist [ 1088.021570][T20052] qnx4: no qnx4 filesystem (no root dir). [ 1088.268685][T20064] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3205'. [ 1088.298546][T20064] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3205'. [ 1088.334360][T20065] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3205'. [ 1088.366703][T20064] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3205'. [ 1088.505697][ T792] usb 1-1: USB disconnect, device number 95 [ 1088.775067][ T29] audit: type=1400 audit(2000000794.971:1829): avc: denied { write } for pid=20066 comm="syz.6.3206" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 1088.883569][T20074] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1088.901015][ T29] audit: type=1400 audit(2000000795.093:1830): avc: denied { bind } for pid=20076 comm="syz.8.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1088.941858][T20074] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1089.318604][T20082] tmpfs: Bad value for 'mpol' [ 1089.412370][ T29] audit: type=1400 audit(2000000795.570:1831): avc: denied { accept } for pid=20086 comm="syz.5.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1089.634936][T20095] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3211'. [ 1089.662277][T20095] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3211'. [ 1090.731001][ T29] audit: type=1400 audit(2000000796.805:1832): avc: denied { unmount } for pid=6457 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1090.927665][ T792] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1091.555958][ T792] usb 1-1: Using ep0 maxpacket: 8 [ 1091.579307][ T792] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1091.619673][ T792] usb 1-1: config 7 has an invalid interface number: 58 but max is 0 [ 1091.742099][ T792] usb 1-1: config 7 has no interface number 0 [ 1091.764264][ T792] usb 1-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1091.822883][ T792] usb 1-1: config 7 interface 58 has no altsetting 0 [ 1091.839493][ T792] usb 1-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 1091.849677][ T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.858301][ T792] usb 1-1: Product: syz [ 1091.862579][ T792] usb 1-1: Manufacturer: syz [ 1091.867194][ T792] usb 1-1: SerialNumber: syz [ 1092.113532][T20105] qnx4: no qnx4 filesystem (no root dir). [ 1092.521830][ T29] audit: type=1400 audit(2000000798.480:1833): avc: denied { accept } for pid=20109 comm="syz.8.3216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1092.553728][T20114] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3217'. [ 1092.588237][T20114] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3217'. [ 1092.617301][T20117] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3217'. [ 1092.661994][ T29] audit: type=1400 audit(2000000798.583:1834): avc: denied { map } for pid=20097 comm="syz.0.3213" path="pipe:[76151]" dev="pipefs" ino=76151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1092.714067][T20114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3217'. [ 1092.842025][ T29] audit: type=1400 audit(2000000798.583:1835): avc: denied { execute } for pid=20097 comm="syz.0.3213" path="pipe:[76151]" dev="pipefs" ino=76151 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 1092.967351][ T792] usb 1-1: USB disconnect, device number 96 [ 1093.015373][ T29] audit: type=1400 audit(2000000798.892:1836): avc: denied { bind } for pid=20121 comm="syz.6.3219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1093.377992][T20128] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1093.986682][ T5897] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1094.204127][ T5897] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.229222][ T5897] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1094.282280][ T5897] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1094.357269][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1094.379585][ T5897] usb 6-1: SerialNumber: syz [ 1094.981501][T20138] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1096.340610][ T5897] usb 6-1: 0:2 : does not exist [ 1096.603863][ T5897] usb 6-1: USB disconnect, device number 95 [ 1096.804725][T20154] qnx4: no qnx4 filesystem (no root dir). [ 1097.386592][T20171] __nla_validate_parse: 1 callbacks suppressed [ 1097.386725][T20171] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3234'. [ 1100.419380][ T792] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1100.464782][T20197] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3243'. [ 1100.556557][T20198] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3243'. [ 1100.576396][T20197] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3243'. [ 1100.643154][T20199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3243'. [ 1100.753908][ T792] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.806866][ T792] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1100.924373][ T792] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1101.239995][ T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1101.269931][ T792] usb 6-1: SerialNumber: syz [ 1101.549718][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1101.719833][T20208] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1101.749479][T20211] vivid-002: disconnect [ 1101.842140][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1102.022154][ T24] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1102.494360][ T24] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1102.561389][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1102.663429][T20210] vivid-002: reconnect [ 1102.688704][ T24] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1102.709945][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.774391][ T24] usb 2-1: Product: syz [ 1103.203683][ T792] usb 6-1: 0:2 : does not exist [ 1103.254642][ T24] usb 2-1: Manufacturer: syz [ 1103.280835][ T24] usb 2-1: SerialNumber: syz [ 1103.506167][ T24] usb 2-1: config 0 descriptor?? [ 1103.569986][ T5882] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1103.587183][ T792] usb 6-1: USB disconnect, device number 96 [ 1103.684418][T16213] udevd[16213]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1103.762443][ T5882] usb 1-1: device descriptor read/64, error -71 [ 1104.038834][ T5882] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1104.107891][ T24] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 1104.275463][ T5882] usb 1-1: device descriptor read/64, error -71 [ 1104.530650][ T5882] usb usb1-port1: attempt power cycle [ 1104.807888][ T24] usb 2-1: USB disconnect, device number 46 [ 1104.830006][T20246] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3255'. [ 1104.889099][T20246] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3255'. [ 1104.898504][T20249] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3255'. [ 1104.930734][ T5882] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1104.958028][T20250] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3255'. [ 1105.012419][ T5882] usb 1-1: device descriptor read/8, error -71 [ 1105.199032][T20254] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3257'. [ 1105.219465][T20254] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3257'. [ 1105.284410][T20256] tmpfs: Bad value for 'mpol' [ 1105.299948][ T5882] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1105.334686][ T5882] usb 1-1: device descriptor read/8, error -71 [ 1105.460280][ T5882] usb usb1-port1: unable to enumerate USB device [ 1106.358278][T20268] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1107.493931][T20277] comedi comedi4: bad chanlist[0]=0x04020007 chan=7 range length=1 [ 1108.533957][ T5897] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 1108.920423][T20290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3267'. [ 1108.930464][T20290] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3267'. [ 1108.954102][T20290] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3267'. [ 1108.967418][T20290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3267'. [ 1110.259141][ T42] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1110.433191][ T42] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1110.445040][ T42] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1110.456517][ T42] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1110.469946][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.492477][T20303] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1110.517990][ T42] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1110.653715][ T5882] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1110.837136][ T5882] usb 9-1: Using ep0 maxpacket: 16 [ 1110.856400][ T5882] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1110.859183][T20314] Unknown options in mask 4 [ 1110.898293][ T5882] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1110.942229][ T5882] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.971290][ T5882] usb 9-1: Product: syz [ 1110.983891][ T5882] usb 9-1: Manufacturer: syz [ 1110.992375][ T5861] usb 6-1: USB disconnect, device number 97 [ 1111.016448][ T5882] usb 9-1: SerialNumber: syz [ 1111.048586][T20313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.056143][T20313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.155126][ T5897] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1111.173807][ T5882] usb 9-1: config 0 descriptor?? [ 1111.181306][ T5897] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1111.190971][ T5882] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1111.200671][ T5897] usb 1-1: can't read configurations, error -71 [ 1111.209523][ T5882] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1111.821198][T20330] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3278'. [ 1111.831382][T20330] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3278'. [ 1111.870849][T20330] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3278'. [ 1111.916271][T20330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3278'. [ 1111.949710][T20310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.005783][T20310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.017627][ T5882] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1112.348455][T20345] tmpfs: Bad value for 'mpol' [ 1112.900395][ T5882] em28xx 9-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 1112.931919][ T5882] em28xx 9-1:0.0: failed to read eeprom (err=-5) [ 1112.962476][ T5882] em28xx 9-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1113.057971][ T5882] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1113.083642][ T5882] em28xx 9-1:0.0: dvb set to bulk mode. [ 1113.115246][ T5897] em28xx 9-1:0.0: Binding DVB extension [ 1113.163321][ T5882] usb 9-1: USB disconnect, device number 6 [ 1113.233384][ T5897] em28xx 9-1:0.0: Registering input extension [ 1113.240067][ T5882] em28xx 9-1:0.0: Disconnecting em28xx [ 1113.270776][ T5882] em28xx 9-1:0.0: Closing input extension [ 1113.397332][T20359] netlink: 'syz.0.3286': attribute type 3 has an invalid length. [ 1113.464202][ T5882] em28xx 9-1:0.0: Freeing device [ 1113.528334][ T5897] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1113.999620][ T5897] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.060005][ T5897] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1114.080996][ T5897] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1114.090451][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1114.122638][ T5897] usb 6-1: SerialNumber: syz [ 1114.175042][T20373] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3291'. [ 1114.187734][T20373] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3291'. [ 1114.200421][T20373] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3291'. [ 1114.210765][T20373] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3291'. [ 1114.511550][ T5882] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 1114.579694][T20378] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1115.352693][ T29] audit: type=1400 audit(2000000819.845:1837): avc: denied { ioctl } for pid=20371 comm="syz.0.3290" path="socket:[77510]" dev="sockfs" ino=77510 ioctlcmd=0x8b14 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1115.560596][T20385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.571116][T20385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.321439][ T5897] usb 6-1: 0:2 : does not exist [ 1116.454761][ T5897] usb 6-1: USB disconnect, device number 98 [ 1116.456979][ T42] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1116.536397][T16213] udevd[16213]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1117.420676][ T5882] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1117.493107][ T5882] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1117.540787][ T5882] usb 1-1: can't read configurations, error -71 [ 1117.580248][T20408] binder_alloc: 20407: binder_alloc_buf, no vma [ 1117.726983][T20406] netlink: 'syz.5.3298': attribute type 3 has an invalid length. [ 1118.501453][T20415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3302'. [ 1118.547172][T20415] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3302'. [ 1118.570718][T20416] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3302'. [ 1118.623507][T20415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3302'. [ 1118.946400][T12784] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1118.961662][T12784] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1118.982719][T12784] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1118.992984][T12784] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1119.002048][T12784] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1119.696309][ T42] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1119.784020][ T42] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1119.807583][ T42] usb 9-1: can't read configurations, error -71 [ 1119.868338][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1119.875767][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1120.250742][ T24] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1120.440252][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 1120.454524][ T24] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1120.475912][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1120.504920][ T24] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1120.528229][ T42] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1120.559999][ T24] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1120.617722][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1120.636228][ T24] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1120.671197][ T24] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1120.701084][ T42] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.715442][ T24] usb 1-1: Product: syz [ 1120.719612][ T24] usb 1-1: Manufacturer: syz [ 1120.731306][ T42] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1120.747740][ T24] usb 1-1: SerialNumber: syz [ 1120.762017][ T42] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.815121][ T24] usb 1-1: config 0 descriptor?? [ 1120.849139][ T24] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1120.883410][ T42] usb 9-1: config 0 descriptor?? [ 1120.954073][ T24] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1120.978645][ T42] pwc: Askey VC010 type 2 USB webcam detected. [ 1121.224831][T14482] Bluetooth: hci6: command tx timeout [ 1121.342213][ T42] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1121.377434][ T42] pwc: recv_control_msg error -32 req 02 val 2700 [ 1121.412113][ T42] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1121.415895][ T7708] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.496425][ T42] pwc: recv_control_msg error -32 req 04 val 1000 [ 1121.553532][ T42] pwc: recv_control_msg error -32 req 04 val 1300 [ 1121.586092][ T42] pwc: recv_control_msg error -32 req 04 val 1400 [ 1121.586576][T20419] chnl_net:caif_netlink_parms(): no params data found [ 1121.633516][ T42] pwc: recv_control_msg error -32 req 02 val 2000 [ 1121.642863][ T7708] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.672134][ T42] pwc: recv_control_msg error -32 req 02 val 2100 [ 1121.708256][ T42] pwc: recv_control_msg error -32 req 04 val 1500 [ 1121.807904][ T7708] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.939052][ T42] pwc: recv_control_msg error -32 req 02 val 2500 [ 1121.949231][ T42] pwc: recv_control_msg error -32 req 02 val 2400 [ 1121.958371][ T7708] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.377569][T20453] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3307'. [ 1122.392813][ T42] pwc: recv_control_msg error -71 req 02 val 2900 [ 1122.410379][ T29] audit: type=1400 audit(2000000826.330:1838): avc: denied { connect } for pid=20443 comm="syz.1.3307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1122.494614][ T42] pwc: recv_control_msg error -71 req 02 val 2800 [ 1122.517247][T20419] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.526709][ T42] pwc: recv_control_msg error -71 req 04 val 1100 [ 1122.535874][T20419] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.545277][ T42] pwc: recv_control_msg error -71 req 04 val 1200 [ 1122.561194][T20419] bridge_slave_0: entered allmulticast mode [ 1122.570328][ T42] pwc: Registered as video103. [ 1122.649850][T20419] bridge_slave_0: entered promiscuous mode [ 1122.658534][ T42] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input49 [ 1122.680522][T20419] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.708160][ T42] usb 9-1: USB disconnect, device number 8 [ 1122.720698][T20419] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.769615][T20419] bridge_slave_1: entered allmulticast mode [ 1122.805117][T20419] bridge_slave_1: entered promiscuous mode [ 1122.993634][T20419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.137692][T20419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1123.290494][T20419] team0: Port device team_slave_0 added [ 1123.353012][T20419] team0: Port device team_slave_1 added [ 1123.445360][T14482] Bluetooth: hci6: command tx timeout [ 1123.566395][T20419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.616680][T20419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.181495][T20419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1124.339362][T20419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1124.378738][T20419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.749540][T20419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1124.782663][ T7708] bridge_slave_1: left allmulticast mode [ 1124.788372][ T7708] bridge_slave_1: left promiscuous mode [ 1124.814787][ T7708] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.863587][ T7708] bridge_slave_0: left allmulticast mode [ 1124.883266][ T7708] bridge_slave_0: left promiscuous mode [ 1125.641310][ T7708] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.668166][T14482] Bluetooth: hci6: command tx timeout [ 1126.210363][ T7708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1126.231031][ T7708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1126.246733][ T7708] bond0 (unregistering): Released all slaves [ 1126.266442][ T7708] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1126.274999][ T7708] bond1 (unregistering): Released all slaves [ 1126.287666][ T7708] bond2 (unregistering): Released all slaves [ 1126.520769][T20428] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 1126.738788][ T5882] usb 1-1: USB disconnect, device number 105 [ 1126.801200][ T5882] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1127.086833][T20419] hsr_slave_0: entered promiscuous mode [ 1127.108933][T20419] hsr_slave_1: entered promiscuous mode [ 1127.140562][T20419] debugfs: 'hsr0' already exists in 'hsr' [ 1127.154429][T20419] Cannot create hsr debugfs directory [ 1127.891353][T14482] Bluetooth: hci6: command tx timeout [ 1130.059978][ T29] audit: type=1400 audit(2000000833.601:1839): avc: denied { mounton } for pid=20527 comm="syz.6.3319" path="/392/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1130.208405][T14482] Bluetooth: hci1: unexpected event 0x2f length: 763 > 260 [ 1130.514071][ T7708] hsr_slave_0: left promiscuous mode [ 1130.550486][ T7708] hsr_slave_1: left promiscuous mode [ 1130.576692][ T7708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1130.606163][ T7708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1130.639954][ T7708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1130.656448][ T7708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.807163][ T7708] veth1_macvtap: left promiscuous mode [ 1130.825969][ T7708] veth0_macvtap: left promiscuous mode [ 1130.846496][ T7708] veth1_vlan: left promiscuous mode [ 1130.915474][T20544] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3320'. [ 1130.917320][ T7708] veth0_vlan: left promiscuous mode [ 1131.227821][T20556] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3321'. [ 1131.805794][T20566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3322'. [ 1132.904717][ T7708] team0 (unregistering): Port device team_slave_1 removed [ 1132.945836][ T7708] team0 (unregistering): Port device team_slave_0 removed [ 1133.363204][ T29] audit: type=1400 audit(2000000836.698:1840): avc: denied { unmount } for pid=10966 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1135.817665][T20600] input: syz0 as /devices/virtual/input/input50 [ 1136.070245][T20419] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1136.100839][T20419] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1136.141619][T20419] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1136.258662][T20419] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1136.273192][ T7708] IPVS: stop unused estimator thread 0... [ 1136.731731][T20419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1136.768636][T20624] tmpfs: Bad value for 'mpol' [ 1136.845733][T20419] 8021q: adding VLAN 0 to HW filter on device team0 [ 1136.906427][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.913624][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1137.115476][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.122584][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1137.694170][ T29] audit: type=1400 audit(2000000840.741:1841): avc: denied { listen } for pid=20634 comm="syz.6.3332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1137.888136][T20646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3334'. [ 1137.930081][T20419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.054970][T20653] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3334'. [ 1138.078898][T20653] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3334'. [ 1138.320485][ T5861] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1138.603570][T20648] netlink: 'syz.8.3335': attribute type 3 has an invalid length. [ 1138.888156][T20419] veth0_vlan: entered promiscuous mode [ 1138.901368][T20419] veth1_vlan: entered promiscuous mode [ 1139.018046][T20419] veth0_macvtap: entered promiscuous mode [ 1139.080708][T20419] veth1_macvtap: entered promiscuous mode [ 1139.968922][T20676] FAT-fs (nullb0): bogus number of reserved sectors [ 1140.020004][ T29] audit: type=1400 audit(2000000842.931:1842): avc: denied { write } for pid=20675 comm="syz.0.3340" lport=40246 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1140.045048][T20676] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1140.109851][T20419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1140.120337][ T29] audit: type=1400 audit(2000000842.959:1843): avc: denied { setopt } for pid=20675 comm="syz.0.3340" lport=40246 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1140.162358][T20677] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3338'. [ 1140.180897][T20419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1140.386857][ T29] audit: type=1400 audit(2000000843.174:1844): avc: denied { remount } for pid=20693 comm="syz.0.3341" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1140.407187][ T77] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1141.112502][T20707] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20707 comm=syz.6.3343 [ 1142.384281][ T77] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.422199][ T77] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.440100][ T77] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.468398][ T29] audit: type=1800 audit(2000000845.223:1845): pid=20707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.6.3343" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1142.469590][T20707] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1142.508699][T20707] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1142.519081][T20707] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1142.521675][ T29] audit: type=1400 audit(2000000845.223:1846): avc: denied { firmware_load } for pid=20696 comm="syz.6.3343" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1142.586638][T20712] 9p: Unknown uid 00000000004294967295 [ 1142.594744][ T29] audit: type=1400 audit(2000000845.261:1847): avc: denied { firmware_load } for pid=20696 comm="syz.6.3343" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1142.673478][T20712] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1142.821367][ T29] audit: type=1400 audit(2000000845.551:1848): avc: denied { ioctl } for pid=20719 comm="syz.8.3344" path="/dev/ppp" dev="devtmpfs" ino=709 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1143.850706][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.913192][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.215864][T18275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1145.269701][T18275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1145.587922][T20748] sctp: [Deprecated]: syz.6.3350 (pid 20748) Use of int in max_burst socket option. [ 1145.587922][T20748] Use struct sctp_assoc_value instead [ 1146.143516][ T814] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1147.321903][ T814] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.363293][ T814] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1147.383610][T20741] netlink: 'syz.8.3349': attribute type 3 has an invalid length. [ 1147.493039][ T814] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1147.537163][ T814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1147.582759][ T814] usb 2-1: SerialNumber: syz [ 1147.937156][T15530] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1147.966190][T20747] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1147.987496][ T814] usb 2-1: 0:2 : does not exist [ 1148.304882][T15530] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1148.412234][ T814] usb 2-1: USB disconnect, device number 47 [ 1148.418464][T15530] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1148.476225][T15530] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1148.526433][T15530] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.584426][T16213] udevd[16213]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1148.616027][T20780] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1148.637672][T15530] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1148.944583][T20789] input: syz0 as /devices/virtual/input/input51 [ 1149.785751][ T29] audit: type=1400 audit(2000000851.437:1849): avc: denied { bind } for pid=20790 comm="syz.1.3358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1149.946792][T20798] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3355'. [ 1149.990203][T20798] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3355'. [ 1150.910220][ T814] usb 6-1: USB disconnect, device number 99 [ 1150.941251][T20809] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3362'. [ 1151.128991][T14482] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1 [ 1151.142356][T20816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3365'. [ 1151.167270][T20816] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3365'. [ 1152.159329][ T792] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1152.584999][ T792] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.786141][ T792] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1152.842072][ T792] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1152.858326][ T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1152.870512][ T792] usb 2-1: SerialNumber: syz [ 1153.288066][T20828] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1153.298355][ T792] usb 2-1: 0:2 : does not exist [ 1153.331031][ T792] usb 2-1: USB disconnect, device number 48 [ 1153.385683][T16213] udevd[16213]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1154.235059][T20857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3373'. [ 1154.982165][ T29] audit: type=1400 audit(2000001112.937:1850): avc: denied { mounton } for pid=20868 comm="syz.6.3376" path="/proc/1522/task" dev="proc" ino=80199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1155.046815][ T29] audit: type=1326 audit(2000001112.966:1851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.6.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4a59c799 code=0x7ffc0000 [ 1155.118287][ T29] audit: type=1326 audit(2000001112.966:1852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.6.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4a59c799 code=0x7ffc0000 [ 1155.153715][ T29] audit: type=1326 audit(2000001112.975:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.6.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4a59c799 code=0x7ffc0000 [ 1155.252633][ T29] audit: type=1326 audit(2000001112.975:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.6.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4a59c799 code=0x7ffc0000 [ 1155.384495][ T29] audit: type=1326 audit(2000001112.975:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.6.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fda4a59c799 code=0x7ffc0000 [ 1155.417762][T14482] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1155.427672][T14482] Bluetooth: hci0: Injecting HCI hardware error event [ 1155.500543][T20876] overlayfs: failed to clone upperpath [ 1155.529948][T14482] Bluetooth: hci0: hardware error 0x00 [ 1155.860562][T20872] SELinux: failed to load policy [ 1155.871581][T20872] dlm: plock device version mismatch: kernel (1.2.0), user (1701536119.1634492767.683378) [ 1155.933363][ T29] audit: type=1326 audit(2000001112.975:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.6.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4a59c799 code=0x7ffc0000 [ 1156.539979][ T29] audit: type=1326 audit(2000001112.975:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.6.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4a59c799 code=0x7ffc0000 [ 1156.854735][ T29] audit: type=1326 audit(2000001112.975:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.6.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4a59c799 code=0x7ffc0000 [ 1156.984740][ T29] audit: type=1326 audit(2000001112.975:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.6.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fda4a59c799 code=0x7ffc0000 [ 1157.139394][ T29] audit: type=1326 audit(2000001112.975:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.6.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4a59c799 code=0x7ffc0000 [ 1157.413990][ T29] audit: type=1326 audit(2000001112.975:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.6.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4a59c799 code=0x7ffc0000 [ 1157.606425][ T29] audit: type=1326 audit(2000001112.975:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20868 comm="syz.6.3376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda4a59c799 code=0x7ffc0000 [ 1158.314435][T14482] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1160.417233][T20912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3388'. [ 1161.141773][T20922] SELinux: failed to load policy [ 1161.171638][T20922] dlm: plock device version mismatch: kernel (1.2.0), user (1701536119.1634492767.683378) [ 1163.495669][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 1163.495685][ T29] audit: type=1400 audit(2000001120.892:1881): avc: denied { setopt } for pid=20945 comm="syz.8.3389" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1163.727052][T20956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3396'. [ 1164.765932][T20975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3402'. [ 1166.224521][T20990] overlayfs: failed to clone upperpath [ 1167.768745][T21005] dlm: plock device version mismatch: kernel (1.2.0), user (1701536119.1634492767.683378) [ 1168.980770][T21018] overlayfs: failed to clone upperpath [ 1170.065719][T21028] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3416'. [ 1170.328726][T21030] overlayfs: failed to clone upperpath [ 1170.513311][T21034] IPv6: sit1: Disabled Multicast RS [ 1170.541301][T21034] sit1: entered allmulticast mode [ 1170.579836][T21037] kernel profiling enabled (shift: 63) [ 1170.596543][T21037] profiling shift: 63 too large [ 1170.934282][ T29] audit: type=1400 audit(2000001127.863:1882): avc: denied { read } for pid=21044 comm="syz.8.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1172.358838][T21059] dlm: plock device version mismatch: kernel (1.2.0), user (1701536119.1634492767.683378) [ 1173.037505][ T29] audit: type=1326 audit(2000001129.819:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21061 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125239c799 code=0x7ffc0000 [ 1173.103315][ T29] audit: type=1326 audit(2000001129.819:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21061 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125239c799 code=0x7ffc0000 [ 1173.259940][ T29] audit: type=1326 audit(2000001129.894:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21061 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f125239c799 code=0x7ffc0000 [ 1173.309648][ T29] audit: type=1326 audit(2000001129.894:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21061 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125239c799 code=0x7ffc0000 [ 1173.339058][ T29] audit: type=1326 audit(2000001129.894:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21061 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125239c799 code=0x7ffc0000 [ 1173.385983][ T29] audit: type=1326 audit(2000001129.960:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21061 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f125239c799 code=0x7ffc0000 [ 1173.410156][ T29] audit: type=1326 audit(2000001129.960:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21061 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125239c799 code=0x7ffc0000 [ 1173.520222][ T29] audit: type=1326 audit(2000001129.960:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21061 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f125239c799 code=0x7ffc0000 [ 1173.552207][ T29] audit: type=1326 audit(2000001130.053:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21061 comm="syz.1.3426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f125239c799 code=0x7ffc0000 [ 1173.625491][T21063] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3426'. [ 1173.920120][T21073] syzkaller0: entered promiscuous mode [ 1173.932848][T21073] syzkaller0: entered allmulticast mode [ 1174.474653][ T5875] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1174.661178][ T5875] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.672103][ T5875] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1174.702642][ T5875] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1174.714932][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1174.745576][ T5875] usb 2-1: SerialNumber: syz [ 1175.146917][T21096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3434'. [ 1175.196856][T21097] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1177.395711][ T5875] usb 2-1: 0:2 : does not exist [ 1178.411067][ T5875] usb 2-1: USB disconnect, device number 49 [ 1178.787247][ T792] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1178.965057][ T792] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1179.019189][ T792] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1179.084170][ T792] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1179.164607][ T792] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1179.855498][T20988] udevd[20988]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1180.004950][ T792] usb 9-1: SerialNumber: syz [ 1180.492709][T21108] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1180.522486][ T792] usb 9-1: 0:2 : does not exist [ 1181.486711][ T792] usb 9-1: USB disconnect, device number 9 [ 1181.594873][T20988] udevd[20988]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1182.264144][T14482] Bluetooth: hci2: command 0x0406 tx timeout [ 1182.704779][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 1182.704798][ T29] audit: type=1400 audit(2000001138.569:2040): avc: denied { mount } for pid=21147 comm="syz.8.3442" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1182.746474][ T29] audit: type=1400 audit(2000001138.569:2041): avc: denied { ioctl } for pid=21147 comm="syz.8.3442" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1183.564865][ T29] audit: type=1400 audit(2000001139.673:2042): avc: denied { connect } for pid=21166 comm="syz.1.3444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1184.143966][ T29] audit: type=1400 audit(2000001140.207:2043): avc: denied { unmount } for pid=19558 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1185.302043][T21189] netlink: 'syz.1.3447': attribute type 10 has an invalid length. [ 1185.681026][T21191] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3446'. [ 1185.872331][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1185.880355][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1186.128089][T21189] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1186.138811][T21189] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1186.315321][T21204] syzkaller1: entered promiscuous mode [ 1186.320936][T21204] syzkaller1: entered allmulticast mode [ 1186.333926][T21204] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 1186.504424][T21213] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1187.584207][ T30] INFO: task syz.7.3066:19377 blocked for more than 143 seconds. [ 1187.684033][ T30] Tainted: G L syzkaller #0 [ 1187.718142][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1187.759473][ T30] task:syz.7.3066 state:D stack:28024 pid:19377 tgid:19371 ppid:16735 task_flags:0x400740 flags:0x00080002 [ 1187.798850][ T30] Call Trace: [ 1187.805307][ T30] [ 1187.811810][ T30] __schedule+0xfee/0x6120 [ 1187.821821][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1187.832433][ T30] ? __pfx___schedule+0x10/0x10 [ 1187.839554][ T30] ? find_held_lock+0x2b/0x80 [ 1187.844376][ T30] ? schedule+0x2bf/0x390 [ 1187.848834][ T30] schedule+0xdd/0x390 [ 1187.853654][ T30] schedule_timeout+0x1b2/0x280 [ 1187.859711][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1187.865820][ T30] ? __wait_for_common+0x2da/0x4c0 [ 1187.872227][ T30] ? rcu_is_watching+0x12/0xc0 [ 1187.878594][ T30] __wait_for_common+0x2e7/0x4c0 [ 1187.884434][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1187.890787][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 1187.898123][ T30] ? __pfx_try_to_wake_up+0x10/0x10 [ 1187.905009][ T30] ? vfs_coredump+0x7e0/0x5570 [ 1187.911581][ T30] ? rcu_is_watching+0x12/0xc0 [ 1187.918127][ T30] wait_for_completion_state+0x1c/0x40 [ 1187.923726][ T30] vfs_coredump+0x80d/0x5570 [ 1187.928993][ T30] ? __pfx_vfs_coredump+0x10/0x10 [ 1187.934470][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1187.941555][ T30] ? lock_acquire+0x1cf/0x380 [ 1187.949212][ T30] ? lock_acquire+0x1cf/0x380 [ 1187.955146][ T30] ? find_held_lock+0x2b/0x80 [ 1187.961703][ T30] ? is_bpf_text_address+0x8a/0x1a0 [ 1187.969949][ T30] ? is_bpf_text_address+0x8a/0x1a0 [ 1187.976501][ T30] ? bpf_ksym_find+0x128/0x1c0 [ 1187.982887][ T30] ? __kernel_text_address+0xd/0x30 [ 1187.989630][ T30] ? unwind_get_return_address+0x59/0xa0 [ 1187.995428][ T30] ? arch_stack_walk+0xa6/0xf0 [ 1188.001713][ T30] ? __sigqueue_free+0xbe/0x2a0 [ 1188.007730][ T30] ? stack_trace_save+0x8e/0xc0 [ 1188.013158][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1188.018556][ T30] ? stack_depot_save_flags+0x27/0x9d0 [ 1188.025500][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1188.030448][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.037099][ T30] ? proc_coredump_connector+0x2d3/0x4f0 [ 1188.043372][ T30] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1188.049442][ T30] ? rcu_is_watching+0x12/0xc0 [ 1188.054795][ T30] get_signal+0x1f2a/0x21e0 [ 1188.059307][ T30] ? __pfx_get_signal+0x10/0x10 [ 1188.064659][ T30] ? audit_log_end+0x24/0x30 [ 1188.069524][ T30] ? audit_seccomp+0x18a/0x1f0 [ 1188.077871][ T30] ? audit_seccomp+0x191/0x1f0 [ 1188.082655][ T30] arch_do_signal_or_restart+0x91/0x7a0 [ 1188.088291][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1188.094546][ T30] ? xfd_validate_state+0x129/0x190 [ 1188.099822][ T30] exit_to_user_mode_loop+0x86/0x4a0 [ 1188.105574][ T30] do_syscall_64+0x67c/0xf80 [ 1188.110707][ T30] ? clear_bhb_loop+0x40/0x90 [ 1188.115416][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1188.122556][ T30] RIP: 0033:0x7ffb6359c799 [ 1188.126999][ T30] RSP: 002b:00007ffb617d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1188.135952][ T30] RAX: 00000000000000ca RBX: 00007ffb63816188 RCX: 00007ffb6359c799 [ 1188.144429][ T30] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ffb6381618c [ 1188.152892][ T30] RBP: 00007ffb63816180 R08: 0000000000000000 R09: 0000000000000000 [ 1188.161591][ T30] R10: 000000000000000d R11: 0000000000000246 R12: 0000000000000000 [ 1188.170756][ T30] R13: 00007ffb63816218 R14: 00007ffca07319b0 R15: 00007ffca0731a98 [ 1188.178770][ T30] [ 1188.182495][ T30] [ 1188.182495][ T30] Showing all locks held in the system: [ 1188.231172][ T30] 1 lock held by khungtaskd/30: [ 1188.256430][ T30] #0: ffffffff8e7e7820 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1188.304730][ T30] 3 locks held by kworker/u8:4/77: [ 1188.320686][ T30] 3 locks held by kworker/u8:7/1003: [ 1188.326040][ T30] 2 locks held by getty/5568: [ 1188.331478][ T30] #0: ffff8880338190a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1188.341898][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1188.352843][ T30] 2 locks held by kworker/u8:13/7706: [ 1188.358240][ T30] #0: ffff88801ef00948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1188.369598][ T30] #1: ffffc90005bffd08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1188.381771][ T30] 2 locks held by syz.5.3364/20829: [ 1188.387291][ T30] 1 lock held by syz.5.3460/21228: [ 1188.392395][ T30] #0: ffff88804f9240a8 (&ctx->uring_lock){+.+.}-{4:4}, at: io_handle_tw_list+0x2bb/0x580 [ 1188.405802][ T30] [ 1188.408135][ T30] ============================================= [ 1188.408135][ T30] [ 1188.421634][ T30] NMI backtrace for cpu 1 [ 1188.421656][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1188.421681][ T30] Tainted: [L]=SOFTLOCKUP [ 1188.421687][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1188.421698][ T30] Call Trace: [ 1188.421704][ T30] [ 1188.421710][ T30] dump_stack_lvl+0x100/0x190 [ 1188.421745][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1188.421765][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1188.421784][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1188.421807][ T30] sys_info+0x141/0x190 [ 1188.421834][ T30] watchdog+0xd25/0x1050 [ 1188.421865][ T30] ? __pfx_watchdog+0x10/0x10 [ 1188.421889][ T30] ? __kthread_parkme+0x18c/0x230 [ 1188.421923][ T30] ? kthread+0x13a/0x450 [ 1188.421939][ T30] ? __pfx_watchdog+0x10/0x10 [ 1188.421961][ T30] kthread+0x370/0x450 [ 1188.421977][ T30] ? __pfx_kthread+0x10/0x10 [ 1188.421996][ T30] ret_from_fork+0x754/0xd80 [ 1188.422016][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1188.422036][ T30] ? __switch_to+0x7b4/0x1120 [ 1188.422059][ T30] ? __pfx_kthread+0x10/0x10 [ 1188.422078][ T30] ret_from_fork_asm+0x1a/0x30 [ 1188.422111][ T30] [ 1188.422118][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1188.558854][ C0] NMI backtrace for cpu 0 [ 1188.558871][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1188.558890][ C0] Tainted: [L]=SOFTLOCKUP [ 1188.558895][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1188.558903][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1188.558926][ C0] Code: 28 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 01 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1188.558939][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 1188.558952][ C0] RAX: 0000000004fceed9 RBX: ffffffff8e4975c0 RCX: ffffffff8b908c75 [ 1188.558961][ C0] RDX: 0000000000000000 RSI: ffffffff8de782ff RDI: ffffffff8c1b11a0 [ 1188.558970][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 1188.558979][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: 0000000000000000 [ 1188.558988][ C0] R13: fffffbfff1c92eb8 R14: 0000000000000000 R15: ffffffff90d9a410 [ 1188.558997][ C0] FS: 0000000000000000(0000) GS:ffff88812433f000(0000) knlGS:0000000000000000 [ 1188.559012][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1188.559021][ C0] CR2: 00007fcec0be92f8 CR3: 0000000070c5d000 CR4: 00000000003526f0 [ 1188.559030][ C0] Call Trace: [ 1188.559035][ C0] [ 1188.559040][ C0] default_idle+0x9/0x10 [ 1188.559059][ C0] default_idle_call+0x6c/0xb0 [ 1188.559071][ C0] do_idle+0x464/0x590 [ 1188.559090][ C0] ? __pfx_do_idle+0x10/0x10 [ 1188.559109][ C0] cpu_startup_entry+0x4f/0x60 [ 1188.559126][ C0] rest_init+0x251/0x260 [ 1188.559139][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1188.559162][ C0] start_kernel+0x47f/0x480 [ 1188.559177][ C0] x86_64_start_reservations+0x24/0x30 [ 1188.559193][ C0] x86_64_start_kernel+0x12b/0x130 [ 1188.559207][ C0] common_startup_64+0x13e/0x148 [ 1188.559233][ C0] [ 1188.763439][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1188.770305][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1188.780968][ T30] Tainted: [L]=SOFTLOCKUP [ 1188.785271][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1188.795306][ T30] Call Trace: [ 1188.798565][ T30] [ 1188.801477][ T30] dump_stack_lvl+0x100/0x190 [ 1188.806152][ T30] vpanic+0x552/0x970 [ 1188.810114][ T30] ? __pfx_vpanic+0x10/0x10 [ 1188.814602][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1188.820759][ T30] panic+0xd1/0xe0 [ 1188.824461][ T30] ? __pfx_panic+0x10/0x10 [ 1188.828862][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1188.835003][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1188.841139][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1188.847273][ T30] ? watchdog.cold+0x198/0x1ca [ 1188.852021][ T30] ? watchdog+0xd35/0x1050 [ 1188.856428][ T30] watchdog.cold+0x1a9/0x1ca [ 1188.861010][ T30] ? __pfx_watchdog+0x10/0x10 [ 1188.865673][ T30] ? __kthread_parkme+0x18c/0x230 [ 1188.870687][ T30] ? kthread+0x13a/0x450 [ 1188.874999][ T30] ? __pfx_watchdog+0x10/0x10 [ 1188.879664][ T30] kthread+0x370/0x450 [ 1188.883715][ T30] ? __pfx_kthread+0x10/0x10 [ 1188.888286][ T30] ret_from_fork+0x754/0xd80 [ 1188.892859][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1188.897953][ T30] ? __switch_to+0x7b4/0x1120 [ 1188.902615][ T30] ? __pfx_kthread+0x10/0x10 [ 1188.907187][ T30] ret_from_fork_asm+0x1a/0x30 [ 1188.911946][ T30] [ 1188.915235][ T30] Kernel Offset: disabled [ 1188.919541][ T30] Rebooting in 86400 seconds..