last executing test programs: 20m12.657864824s ago: executing program 4 (id=683): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000070a050000000000000000000a0040010900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x20040850}, 0x24084014) (fail_nth: 2) 20m12.213587101s ago: executing program 4 (id=685): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000000)={0x9}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$inet6(0xa, 0x805, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'veth0\x00', &(0x7f0000000080)=@ethtool_cmd={0x4e, 0x40, 0x3, 0x2, 0x6, 0x4c, 0x4, 0xb, 0x6, 0x0, 0x9, 0x10001, 0xaff0, 0xa8, 0xa8, 0x5, [0xb, 0x8]}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/1827], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r4, r3}) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000000), 0x4) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') pread64(r5, &(0x7f00000000c0)=""/144, 0x90, 0x2f) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/226], 0x119) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) write$UHID_SET_REPORT_REPLY(r6, &(0x7f0000000300)=ANY=[@ANYBLOB], 0xc) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl(0xffffffffffffffff, 0x8b2c, &(0x7f0000000040)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x400840, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) acct(&(0x7f0000000040)='./file0\x00') 20m10.682291207s ago: executing program 4 (id=690): openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0) syz_open_dev$loop(0x0, 0x1, 0x122c42) socket$kcm(0x10, 0x6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x84}, 0x20000b14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) read(r0, &(0x7f0000000080)=""/38, 0x26) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000580)={0x0, 0xb, 0x1, 0x5, 0x3, 0x7f, 0x2, 0xdf, 0x0, 0x2, 0xfe, 0x0, 0x3}, 0xe) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x101, 0xab02) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYBLOB="9a27f6f3bf26633a78e1", @ANYRES8=r0, @ANYRES32=0x0], 0x4d6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, r4, 0xffffd000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x800) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x16) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x40086414, &(0x7f0000000600)={0x1, 0xfffffffc}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) userfaultfd(0x80000) 20m9.539691674s ago: executing program 4 (id=695): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) r1 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000020000000200000004"], 0x50) close(0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e00000004000000080000000180000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$XFS_IOC_FSGROWFSRT(r5, 0x40105870, &(0x7f0000000380)={0x4, 0x6}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r7, 0x0, 0x0}, 0x10) syz_usb_connect$midi(0x0, 0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010003000000208205290040000102030109022c00010118100409040000020103000609050c0b00020f00020425010009058c0200026df70704250100fe0b40f0dbd1ad70cc1e71fa5a9ab753b35d1d603658d9492cd6c6bb7269d5487d5b1daf7a08999b338b4a377714c25cbae34c148e3a27df746f187ad41a4f878068a5a70aefddac23d82e946f02d3631f747f"], &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r3) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff1, 0xc}, {0xfff1, 0x2}, {0xd, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44004}, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8d9844, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x708f498d71004173}, 0xc, &(0x7f0000000540)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="b00d0000", @ANYRES16=r8, @ANYBLOB="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"], 0xdb0}, 0x1, 0x0, 0x0, 0x40000001}, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) 20m6.991087844s ago: executing program 4 (id=702): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14eeffff06"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xdb03, 0x4}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000180)={r2, 0xc7, "1875a56aff98f69c05066a7812f9e1c850e5c83386267737b5772f5872ae0871a450d5449f8792b5d1a086a7f784cabfb30277c487f2c1d7e58867a67d98f7464f7c3dd1f370958728d8e657652c0bb51bc0d55622948c66ee44142e0afa105567f75f498dd505c3793ac9309ff809a3def4f6fc915caf6cf27565786a2024396972cdee333e93ff887ffae8b4ff8cf5395235304e7305b16434cdb20ee98b03318e911c1c92b74bc37abc7fd5e42bb28621982438b6cb2bdf16d360bf57497196b25adb2c6a73"}, &(0x7f0000000280)=0xcf) 20m5.858145332s ago: executing program 4 (id=709): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000180)={0xf000000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @p_u32=&(0x7f00000000c0)=0xa1}}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x220}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000000)=0x6) 20m5.743006249s ago: executing program 32 (id=709): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000180)={0xf000000, 0x1, 0xfffffffe, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @p_u32=&(0x7f00000000c0)=0xa1}}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x220}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNGETOBJECT(r7, 0x89e0, &(0x7f0000000000)=0x6) 12m22.614093645s ago: executing program 5 (id=2622): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x501040, 0x0) getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, r1) r2 = openat$incfs(r0, &(0x7f0000000100)='.log\x00', 0x40182, 0x40) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000140)={0x1, 'netpci0\x00', 0x4}, 0x18) r3 = fcntl$getown(r2, 0x9) fstat(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={r3, r1, r4}, 0xc) listen(r0, 0x8583) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x0, 0x6, 0x0, '\x00', [{0x0, 0xa, 0xfff, 0x8000000000000001, 0xf9c, 0x9}, {0x2000, 0x10000, 0x15, 0xd5}], ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) socket$inet(0x2, 0x5, 0x8001) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f00000004c0)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000540)={0x7, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000005c0)={&(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000006c0)={&(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000840)={&(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x0, 0xdededede}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000900)={0x401, 0x4, &(0x7f0000000700)=[r5, r8, r9, r10], &(0x7f0000000740)=[0x10000], &(0x7f0000000880)=[r11, 0x0, 0x0], &(0x7f00000008c0)=[0xffffffff, 0x9, 0x80000001, 0x0, 0x101, 0xffffffffffffffff, 0x9, 0x8], 0x0, 0xd}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940)="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", &(0x7f0000000a40)=@tcp6=r0, 0x4}, 0x20) ioctl$NILFS_IOCTL_GET_BDESCS(r0, 0xc0186e87, &(0x7f0000000b80)={&(0x7f0000000ac0)=[{0x7, 0x2, 0xb, 0x2, 0x6}, {0x7fff, 0xcf85, 0x100000001, 0x6, 0x8}, {0x9, 0x7, 0xfffffffffffffff1, 0x4, 0xfffff96d}, {0x8, 0x6, 0x7, 0x7781, 0x33}], 0x4, 0x28, 0x9, 0xffffffff00000000}) sendmsg$kcm(r2, &(0x7f0000001000)={&(0x7f0000000bc0)=@l2tp={0x2, 0x0, @local, 0x4}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c40)="712d542080d95ea237", 0x9}, {&(0x7f0000000c80)="8283ae2b9ba768e89a47aa82f4ff26a3b8b53f21c859de78adbfa1fe4d51c462b0a2d273cb87c783e06231fc21fe6fb035fd96010444a3132942da56e204f1f4f23a2e51de74194309b1d74d56c8164ef9001a54e6136a5418827ee43a721dbdbc28d4eaebc77ee91267fcd570528c1d6bf4806a627b3ed3bab5392e45b31a3c511f23caeb3cbb9a587149377b2d74b8b8363d3c69a39054e102bdc640144ce7b2cf515506b192c9112eea262fcd3e16fd7e70dabe464f6ea6f53ac26c5a9123de8617831024d4f7c7dd6e49d88c1dd45ec270737d1d8915b43817", 0xdb}], 0x2, &(0x7f0000000dc0)=[{0xd0, 0x200, 0x10001, "b2e9502dc6bf914b3b0408b29b4e242161166b97d2de57de740a120da59883a1c3341a4ab8804f68310552e3c41650fb6295f4bcde66526fe638cc6ada5c7bc3e220a569ad121c809083139a15ef79bd6084b8e864f9e7d1579315329420856bd947001d1430faf269c12db736b8b716efc93f12001be6fdffaaf04572befbe1780fd79a0ad97440d3623d15e764543b40af6e6d1888724bc29b6129c51648f71116baa42b4de3f02f2e391ba8e4e54c52fe12a95b0acf3bbb04831a88"}, {0x18, 0x1, 0x2, "b21b16"}, {0x30, 0x1, 0x5, "9548cfc7075d4ea500ad773bbb9344a01f1e921d3701efa41175d940"}, {0x108, 0x84, 0x100, "4b72393c6fde1e393cad96d5c8a4bc04876866a907d26bf4770104ed9898f87e52ecb1dc73590705d0b8666e9ee920b3a07b650389c4b60ddc45e3cc5589b9aaaf7efdc833a07e92b4881056a4dcdc7ad5ef03f7921f822ced5b190032bf7474a3861ccedee15d178b9b0f9dacd917c35e2fc8ed53748eaba00930209521766cd8ff12968f9c89e0114d6cab5faf4dc2b83d45c365597109972bd7e4f00960d316eba8f84e69f148c3fa8d643fb5d5907aa48b623a1bc891f18216fa3f282e536f8ef84fa16a80908d967cedf8782d5704730ed53bb9904bdabe638fd0860a3a1a006334609970124bdbfcea03587d7170"}], 0x220}, 0x20040810) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000001700)={0x3, 0x0, &(0x7f0000001600)=[{&(0x7f0000001040)=""/12, 0xc}, {&(0x7f0000001080)=""/108, 0x6c}, {&(0x7f0000001100)=""/235, 0xeb}, {&(0x7f0000001200)=""/44, 0x2c}, {&(0x7f0000001240)=""/174, 0xae}, {&(0x7f0000001300)=""/174, 0xae}, {&(0x7f00000013c0)=""/183, 0xb7}, {&(0x7f0000001480)=""/150, 0x96}, {&(0x7f0000001540)=""/30, 0x1e}, {&(0x7f0000001580)=""/99, 0x63}], &(0x7f00000016c0), 0xa}, 0x20) r12 = shmget(0x1, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_UNLOCK(r12, 0xc) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000017c0)={r6, r7, r9, 0x0, 0x0, 0x4, &(0x7f0000001780)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000001800)={&(0x7f0000001740), 0x0, r13, r7, 0x4, 0x3ff, 0x0, 0x5, {0x5, 0x4c, 0x5, 0x2, 0x6, 0x7, 0x1, 0x962f, 0xfc00, 0x7, 0x1, 0x5f2, 0x6, 0x8000, "be8565824388b8e2fb4890b831dbbb8b7b360f0adf11c6c76a69a7322799b869"}}) r14 = syz_open_dev$audion(&(0x7f0000001880), 0x1000, 0x448202) ioctl$sock_inet6_udp_SIOCOUTQ(r14, 0x5411, &(0x7f00000018c0)) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000001900)=@x86={0x4, 0x0, 0x6c, 0x0, 0x6, 0xa, 0x7, 0x5, 0x81, 0x2c, 0x6, 0x0, 0x0, 0x48c, 0x6, 0x0, 0x0, 0x6, 0x2, '\x00', 0x8, 0x6}) ioctl$IOMMU_VFIO_SET_IOMMU(r14, 0x3b66, 0x3) syz_clone(0x10081480, &(0x7f0000001940)="1820f22be4ab76dd5bc3bae0571ceac7fc33ef4052e1b3dd47678b0cd517ca83282365745bf6fde7131a1d161122a9b3f1b5cba36463796e0a1668d5e938c0be15a661dcbdd9e778f674de83859f5f197df2ef1df6df90c276093426e1031638eb71aebd70d18d0aa7ab74df1ea5b2f2dfe99c6bbc5f82381e6bf3cb84794a190b7f79cd84b796037cc9c6b9b2238d51da520a06835eac2e00985a634ff38fa7a7867db60d0dbc280dfa78560f619ff22de0951519599aa6d2b0fe984da72fff7d69832552c756398248ec23bc5b", 0xce, &(0x7f0000001a40), &(0x7f0000001a80), &(0x7f0000001ac0)="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") 12m22.429424143s ago: executing program 5 (id=2625): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x9, 0x1ff, 0x7d, 0x0, 0x8000, 0xffffffffffffffb6, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x2, 0xf, 0x80000006}, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12m18.019064579s ago: executing program 5 (id=2645): set_mempolicy(0x3, &(0x7f0000000080)=0x2, 0x8) r0 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) prlimit64(r2, 0x8, &(0x7f0000000100)={0x3, 0x6}, &(0x7f00000001c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000003480)={&(0x7f0000000500)=@isdn, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)=""/245, 0xf5}], 0x1, &(0x7f0000002480)=""/4096, 0x1000}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0xc2) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg$inet(r5, &(0x7f00000042c0), 0x0, 0xc054) unshare(0x62040200) 12m16.931260083s ago: executing program 5 (id=2647): socket$nl_xfrm(0x10, 0x3, 0x6) socket(0xa, 0x3, 0xff) socket(0x10, 0x803, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)={r1}) 12m16.733863431s ago: executing program 5 (id=2649): io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x2203, 0x40}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) socket$kcm(0x10, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7, 0x21, 0x1}, 0x7) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x20000000002, &(0x7f0000000000)="801edf37d3b43ba337ae8a17f0e8fb17c7bf91b1793e2385bc7f99bb264a59a2b339d5a0890a6db5917d24dc7b88c60be058a0a37cb235f8442a0d24160ef3f3403691386ab58b49c1da50a8391d5ae17c5d3194fe2be466738be68c90098994b5f957fc1aabaacd2fb31e9e5ded07471e44efc2e262e3c621767d99b9c0e25f31b70b516795db678fcb89a67c970da617cb") ptrace$cont(0x21, r3, 0x80000001, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="01000000c95d"}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@dev, @multicast1, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r4, 0x2f, 0x0, 0x40, 0x5, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x11, 0x1, 0x335}}) 12m15.986143589s ago: executing program 5 (id=2655): r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r0}], 0xd8, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x67, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0xf7, 0x801f, {0x5, 0x4, 0x3, 0x14, 0x7ff, 0x64, 0x1ce2, 0xd9, 0xff, 0xe5c, @loopback, @loopback=0x7f000011}, "65b37c42ddedc962"}}}}}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000240)={'fscrypt:', @auto=[0x37, 0x33, 0x62, 0x61, 0x66, 0x38, 0x34, 0x32, 0x31, 0x65, 0x36, 0x9, 0x0, 0x36, 0x30, 0x61]}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1", 0x28}, 0x48, r1) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xd4) keyctl$invalidate(0x15, r2) add_key$user(&(0x7f0000000280), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="88", 0x1, r2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_tx_power={{0x6}, {0x0, 0xc8, 0x2}}}}, 0xa) r4 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x11, 0x3, 0xd) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x4080) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x4, 0xffffffffffffffff}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r6, 0x0) accept4$llc(r6, 0x0, 0x0, 0x0) 11m59.856334037s ago: executing program 33 (id=2655): r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r0}], 0xd8, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x67, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0xf7, 0x801f, {0x5, 0x4, 0x3, 0x14, 0x7ff, 0x64, 0x1ce2, 0xd9, 0xff, 0xe5c, @loopback, @loopback=0x7f000011}, "65b37c42ddedc962"}}}}}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000240)={'fscrypt:', @auto=[0x37, 0x33, 0x62, 0x61, 0x66, 0x38, 0x34, 0x32, 0x31, 0x65, 0x36, 0x9, 0x0, 0x36, 0x30, 0x61]}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1", 0x28}, 0x48, r1) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0xd4) keyctl$invalidate(0x15, r2) add_key$user(&(0x7f0000000280), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="88", 0x1, r2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_tx_power={{0x6}, {0x0, 0xc8, 0x2}}}}, 0xa) r4 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r4, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x11, 0x3, 0xd) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x4080) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x4, 0xffffffffffffffff}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r6, 0x0) accept4$llc(r6, 0x0, 0x0, 0x0) 4m28.293527977s ago: executing program 3 (id=4069): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffa}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x1a, r0, 0x8, 0x0, 0xfffffcf6, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r2 = memfd_secret(0x80000) sendfile(r1, r2, &(0x7f0000000000)=0xfffffffffffffffd, 0x5) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB="700000000009010400000000000000000a00000008000540000000160900010073797a30000000003c0002000c00028005000100000000002c000180140003000000000000000000000000000000000014000400200100000000000000000000000000020c000480"], 0x70}}, 0x4008000) 4m28.137785518s ago: executing program 3 (id=4070): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) r1 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x100000}, 0xc, &(0x7f0000000080)={0x0}}, 0x40041) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x20) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0x3, r0, 'id0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8) shutdown(r3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'}) r5 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 4m26.752970678s ago: executing program 3 (id=4074): open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x9) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)={0xf}) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) unlinkat(r4, &(0x7f00000003c0)='./file1\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581"], 0x0) 4m22.274576638s ago: executing program 3 (id=4089): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000840)=ANY=[@ANYBLOB="001506"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="4011d1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000180)={0x40, 0x0, 0x5, "a7995c93a8"}, 0x0, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xc1}}) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000006c0)='mounts\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x2000}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0/../file0\x00') mkdir(&(0x7f0000000040)='./bus\x00', 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@index_off}]}) 4m16.593826347s ago: executing program 3 (id=4102): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, 0x0) 4m15.412551402s ago: executing program 3 (id=4105): bpf$MAP_CREATE(0x1800, &(0x7f0000000340)=@base={0x1e, 0x0, 0x2, 0xff}, 0x50) 4m15.087428861s ago: executing program 34 (id=4105): bpf$MAP_CREATE(0x1800, &(0x7f0000000340)=@base={0x1e, 0x0, 0x2, 0xff}, 0x50) 15.121291987s ago: executing program 6 (id=5074): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r1, 0x8503}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'ipvlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 15.033207361s ago: executing program 6 (id=5075): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = memfd_create(&(0x7f0000000dc0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\x80\x00\x00\x00\x00\x00\x00\x00\xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0\xae\x97\xb0S\x05(\x97o\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc1\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xca\x0f\xc2\xc8g^\x8a)r;\xd4C\x1a\xc0o\x95Y\x93\xa8\b\xf2n\xad\xdbNi\xcfHDg\x12\xb1t\x10\x8f\xe9\x85\xf9\xb6[Y1k\x977\x980\xb1\x00Z\xc1f\xd8j|\x85\x80p\xb9\xb2\xca\xec\xdbF\x92\xbb`E\xb0\xe3\xfbH^\xaf\x88\xfa\xe3\xeb\xf0t\x05t0x\xa5', 0xc) ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab07, 0xffffffffffffffff) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x64000}, 0x4040) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001300100000000000000000007374726565626f673531322d67656e65726963"], 0xe0}}, 0x0) sendmsg$nl_crypto(r4, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0401000000"], 0x0) 11.845693357s ago: executing program 6 (id=5081): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x7, 0xfc, 0xe1, 0x0, 0x6, 0x70, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x2, 0x0, 0x40, 0x0, 0x5}}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) getpgrp(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa8000}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000}, {0x85, 0x0, 0x0, 0xc8}}]}, &(0x7f00000005c0)='GPL\x00', 0x7, 0x6c, &(0x7f0000000b80)=""/108, 0x41000, 0x8}, 0x94) r5 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}], {0x14}}, 0xb8}}, 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x16) r7 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0x85) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000540)=@req={0xc, 0x3, 0x8, 0x200}, 0x10) syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) 9.357399123s ago: executing program 6 (id=5090): mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x8, 0x8000000004, 0x4, 0x0, 0x4, 0x6, 0x4000000000006, 0x3, 0x1af}) write$usbip_server(r0, &(0x7f0000000100)=@ret_unlink={{0x4, 0x800, 0x0, 0x1, 0x3a}, {0x8}}, 0x30) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) 8.179309443s ago: executing program 0 (id=5097): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x4, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b25b", 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000100)="2a1b1a4552a31452d5c73c376f8a", 0xe}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0xfea9}, {&(0x7f0000002e40)="d4"}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40), 0x3}}, {{0x0, 0x57, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0xffffffb6}], 0x1}}], 0x4, 0x4000084) sendmmsg(r3, &(0x7f0000005e80)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000480)='r', 0x1}], 0x1}}], 0x1, 0x8000) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) rseq(0xfffffffffffffffc, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="05031400d3fc140000004787bc8cdb56faa4e2b21cb53c2af4133cfd2dbb42d2", 0x20, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @random="26286eae2a75"}, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0xff}]}}, 0x0, 0x2a}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) llistxattr(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0xc, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="6112b400000000006113500000000000bf2000000000000007"], 0x0}, 0x94) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$unix(r7, &(0x7f0000000100)=@abs={0x27, 0x0, 0x4e23}, 0x6e) 5.760432524s ago: executing program 6 (id=5109): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f00000011c0)=""/147, 0x93, 0x20000000000008) pread64(r0, &(0x7f0000000080)=""/113, 0x71, 0x2) r1 = syz_usb_connect$cdc_ncm(0x3, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="b1b5a50be1b7b81c199e52aaf2ab2dde2833a1f62480edba0ae5eaac75cd3b159d674d0a82d5547d003a4fb95419f4de9cbea53d88c6604fcc63dc0d021aee900f11e0eadb08a9d8b8dd2bd41c97d76be96b7d834c8787ad02992b160cc1c6ad400cf9a47236f1b860113a55383e79509634540b9d82aa88cce84a9385bce2850718882302f253f779356f47e3888c8cc525308dcf2cffc72d950339ec536049afaf804017dca687215bd78fefe772ca3222d41fb149a2027f0534edd69d69590720a2757406dc69b2"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000100)=0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32=r1], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 5.706222264s ago: executing program 7 (id=5110): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x12) r2 = socket(0x18, 0x803, 0x0) r3 = syz_open_dev$video4linux(0x0, 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) readv(r5, &(0x7f0000000140)=[{&(0x7f0000001240)=""/4090, 0xffa}], 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(0xffffffffffffffff, r0, 0x80000) r7 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x101040) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x72, 0x9, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x37, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946"}) 5.543667867s ago: executing program 0 (id=5111): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r0, 0x40a0ae49, &(0x7f0000000300)={0x1fd, 0x0, 0x6000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x101, r0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000200)=[{0x40, 0x2, 0xff, 0x7}, {0x20, 0x7f, 0x1, 0xfffff00c}, {0x6, 0x0, 0xff, 0x1}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x9, 0x2, 0xffffffff, 0x0, 0xfea}, 0x43e, 0x0, 0x8, 0x7, 0x200, 0x4, 0x2, 0x0, 0x8, 0x51, {0x8, 0x6, 0x3, 0x6, 0x4, 0xe}}}}]}, 0x78}}, 0x20008001) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x10, 0x4}}]}}]}, 0x3c}}, 0x4000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.523033894s ago: executing program 2 (id=5112): sched_setscheduler(0x0, 0x6, &(0x7f00000002c0)=0x7) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) read$char_usb(r0, &(0x7f0000000500)=""/137, 0x89) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000680)='\b', 0x1}, {&(0x7f0000001dc0)="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", 0x182}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000001c40)={&(0x7f0000000280)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001ac0)=[{&(0x7f00000006c0)="86167a1439ac9470ca7ea60fc1676faaeb9f9f999a4c147f28dd6a24334e0b0f98978deb61263c21de116dd7d658c4cdf5f9cfdabc52874139a3e998fa4a7c9c0a65f66dcad3c7e5a6784aae2821e762d3d268fc4f1c15d09dc25f6158219266d8b77cc6558baa25aac317404a47a4cd755e1d53895d4e5df4323e2b4877a5751025ed5ae07fa9ccb0f2146fe266e38461bed8c5b4b8fa2a014900203ab327c6646d0ec03eb116e31c22a898657f76107636400862e703a7e01ba60ce12cbd97edb1205e047bde562c869c08f189f240a0e8a4e4297c432e6ed1e0df", 0xdc}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="ddbfdb0247d168e5910115e152fdfe82beee04f15a9d1f58195661e67dc8f43e4e127d242e6d507541bce01eb336135753847ec4c5fcea3b2ee69804546a7102031c52629fbfc5e229c65393d9603dfbe0305b82c6c0f2de16052096147c38c14ae81d10d2690787731bd0c84b402fd4f4078c6699085f8c48d2d2c60b897b9cb9aabca3c4db5c100ac90b0f072de53cfd18486f09881e509555b27e96f90ed945e6169e864fa021", 0xa8}, {&(0x7f0000001880)="89a34ee252f1cef7925f", 0xa}, {&(0x7f00000018c0)="dd4d1843b291b53bcfb9510662db5da0d8d50cb323719a6b0bbfe8d84149f115850baeb80e99b6b05f5e5b615bafceb872f733e8aa682f9b95d3ec7d5b531903bcee99e613db7b901f9a407c957cbdc5704f8b42753243ba48b749a53fe7806d3347f42defe8c5c8c246cd8e42f5b0be7591e01c00207df669a87f9780e2fe81e941eeabab4cd55d6a9efeae18091358b4b609453e6faef8814cd277b7d65b46c281a9fdb70ffef1766d4baa31d37d4d598bc643e2ff2e4d8fb68b67c3196b8e6125573251066ce3", 0xc8}, {&(0x7f00000019c0)="1fdea059ecc89becd9d3863759a3194632a72ffc6f2ae3015e43bfbbb9a57781b9553872dd4a20b030fcde872e02e32e21c824e8a7301a46fe3c4ca77d2290053faf9a885f872540fe50d9ec1e63223fa7d27bfeb1e9dfa4317cfac6c39348f07de9189c06f5ce323afd7a605725883893be0ee8e9d392e662ace278adde6b21308c938ef0b2e73708a5a6cf3c8c780ee9ff041e183ec2ebafc277e56618baf75405ad9b61e36c848bfe73b01709ed7e51981431cf5d739c77372164bda9e1e33360eb37", 0xc4}], 0x6, &(0x7f0000001c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="640101020000000000080000000000000000000000200000000000002cd765fb2f65a3dcb30600000000000000c36423ab76fb87093a22aa12161c2854ee9f29d601647753ccbaf1969ce82aa3b757cb331564e23cf14b972c4cb4e6528c092cd5c54c1aa68359f9479c342ad3b0e87953b40ee918f64e09b7d8fad9cb6d0d3f42100561cc7b11324cd6e279e81e8745a2a4a006b1c9ea7be048226b037d4bacc2324f3a811623e0680000000000", @ANYRES32=0x0, @ANYBLOB="6401010264010100000000002c000000000000000000000007000000441c0673e000000100000005ac1414bb00000081000000008000000100000000"], 0x70}, 0x20004004) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) geteuid() recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x8, 0x0, 0x0, 'queue0\x00', 0x3}) 5.091601683s ago: executing program 0 (id=5113): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000200)={'\x00', 0xa, 0xd, 0x3, 0x6, 0x200000000000013, 0x0}) r3 = socket$inet6(0xa, 0x5, 0x0) fsopen(0x0, 0x0) prlimit64(r2, 0x2, &(0x7f0000000140)={0x5, 0x48b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x200900) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000002c0)={0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000000340)={r7, 0x101, 0x3, 0x0, 0x0, [0x0], [0x0, 0x7, 0x0, 0xfffffffc], [0x0, 0x80000006, 0x2], [0x5, 0x0, 0x1, 0x5]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) r9 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @empty, 0x700, 0x7f, 0xfffffffc, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r10, 0x0, 0x0, 0x1, 0x0, 0xd, @empty, @empty, 0x700, 0x0, 0xfffffffc}}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000200), 0x0) mmap$usbfs(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x12, r0, 0x4e) r12 = syz_open_procfs$namespace(r2, &(0x7f0000000640)='ns/time_for_children\x00') open_by_handle_at(r12, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000006"], 0x4000) 4.697811619s ago: executing program 7 (id=5115): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000000240)={0x18, 0x17, 0x300, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0x4c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x38}}]}, 0x18}, {&(0x7f0000007480)={0x1d8, 0x36, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@generic, @nested={0x8, 0x7c, 0x0, 0x1, [@nested={0x4, 0x6d}]}, @nested={0x189, 0x126, 0x0, 0x1, [@typed={0xc, 0x3f, 0x0, 0x0, @u64=0x5}, @generic="44f1d5600612fd86a661a726a4b04ac4fce7172f3a3ef945b90cfdd0006d40d6bc1a41e63644e298ada1003d7429222ce1c6883156cdbe1e50be18a08276666ae77d4ca97af39a0456ee82cff2073876baaa65c8c8a8d7cbb91c60576da0f8a55964f466804f13f5596a1b8fbf9e", @typed={0xc6, 0x2c, 0x0, 0x0, @binary="f0a5e107a585ab60aa2e9e7f673280517baf6dae65194dbdaf852fa82e995ffa644f2c64bb4a9c5eeb9f2dcfa9b74738163113ab876fcc31b5d77ebfa570fd6c5be5fc9dd7a6bdd757fc96984d500d2b9b35e5c4c6cf2ab9d4f7c5d50a42797f1f48f1383a8044f426d6feeb86f194945b08b5bf4566f5e0a1a69535b9d076dd39bd7a0e84789061b3acaf9e21928f96d8b13fff017422f58ca313f023ecad22f540332c39b2a8b2f57dd8112632856a93ae5955f8cbae8ee71e0ddfd1e6ce6fa914"}, @generic="1a2d8918bc03649accfed041eab134ef3e5ad2f1c9a09e129629900d0b9484ae96dbf3af160d4430f2b6337fd1e07717df62f20639adf394163f6e7e802233", @typed={0x4, 0x48, 0x0, 0x0, @binary}]}, @typed={0x8, 0x2b, 0x0, 0x0, @uid}, @generic="acab772ea4d3568ae92a91c396b505045937665769f597a0a4fc10260c1ec4a05457c457589bd1797431ef"]}, 0x1d8}, {&(0x7f0000000cc0)={0x18, 0x36, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0x10f, 0x0, 0x0, @uid}]}, 0x18}, {0x0}, {&(0x7f0000002040)={0x34, 0x39, 0x2, 0x70bd28, 0x25dfdbfb, "", [@typed={0x24, 0xcb, 0x0, 0x0, @binary="bb34009d080979297cdc57af510406859cc8ce56aaa54fb10677d79b0b03076e"}]}, 0x34}, {&(0x7f0000007780)=ANY=[@ANYBLOB="201800003300000828bd7000fcdbdf25daa7955d5df3d147bfa2255c05e0fc3c47357ed1fb1dcd8dbfd3f6ab360ba93235df61f95319540b8d8c16e2b2ed58372d763851d274eedd7ec68b1b8a1913b4ab3720ab17f6767a61127dd8130bf841712c629a9e52c21c4ef9805d1345b23da8882dce0fecb61c2d8d0d6e0de6cfb977bae9b19aa0497cd59f333fe55619a93c4c8e32d25370dbb64785a89fd566e149056e763494ca633eeb0a1a615faac08084022af934bc01bba41fd2913de83d55b92f4f252e2d7f78016a8008008700", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00,\x00', @ANYRES32=0x0, @ANYBLOB="a40206809d0237800c0046800800e500080000007abe9d00f8b147e4b2b544df2c62cd19498b3ea6fd07770ef010ae6d02cc1a01c1806f31d3fe3de8be6b73523e5c1c6cecd4b87dcfef5763d9a8f0cc14ee1789de0a1a50ae06daea5ac15c5c87ecfa273a89d1ea4f034b49b434c5", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x1820}], 0x6, 0x0, 0x0, 0x20008020}, 0x8880) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.276376029s ago: executing program 7 (id=5117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000001000260125bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7808020001a20100280012800b0001006d6163736563000018000280050006000f0000000c0004000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf25090000003c0003800800010001000000140002006272696467655f736c6176655f300000080003000000000014000600ff010000000000000000000000000001392497c682adf9eb39edd60cc9bca6e4fe93bf53e3248ed4b21c850d6854f32fd05371eb7934d5f7980670f80c4e839b12f3b0e118d65bf3c6f22a11499222635e4b4dff060188ab8add3a6dfb86d45a204f5d56fef669019a1d82101fed3e5c1bbc4a973080979f5c71936c58d897fd1887c7fe18f1d8624edb73331cfe00c1956116ac0670a2cd351e552e14417868142fc6908e4f29b68fbe9d11c3997f8653588f5dd1b763"], 0x50}}, 0x48040) 4.264240668s ago: executing program 2 (id=5118): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0xc06c4124, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x6}]}}}]}, 0x40}}, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCNXCL(r2, 0x540d) 4.165922754s ago: executing program 1 (id=5119): r0 = syz_open_dev$mouse(&(0x7f00000001c0), 0x2, 0x6c2ac1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='nv', 0x2) creat(0x0, 0x0) (async) creat(0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0x8, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0xeeee0000, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x40, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x0, 0x34, 0x7}, {0xffff1000, 0x1, 0x0, 0x78, 0x5, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) (async) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xe000, 0x0, 0x77, 0x8, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0xeeee0000, 0x9000, 0x3, 0xeb, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x40, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x1, 0x0, 0x9, 0x0, 0x3, 0x0, 0x4}, {0x6000, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x0, 0x34, 0x7}, {0xffff1000, 0x1, 0x0, 0x78, 0x5, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0xa, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x80000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) r4 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8925, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) (async) sendmmsg(r5, &(0x7f0000000000), 0x400000000000235, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x62) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=inte']) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=inte']) chdir(&(0x7f0000000240)='./file0\x00') (async) chdir(&(0x7f0000000240)='./file0\x00') r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x3af4701e) (async) write$binfmt_script(r7, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)={0x40, 0x1, 0x3}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000380)={0x40, 0x1, 0x3}, 0x10) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) chdir(&(0x7f00000003c0)='./bus\x00') ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'dummy0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000280)={'dummy0\x00'}) fadvise64(0xffffffffffffffff, 0xfff, 0x8, 0x2) (async) fadvise64(0xffffffffffffffff, 0xfff, 0x8, 0x2) 4.041963683s ago: executing program 2 (id=5120): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x2500, 0x7315, 0x0, 0x4, {{0x16, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @loopback, {[@lsrr={0x83, 0x27, 0x76, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010100, @empty, @empty, @multicast1, @broadcast, @empty, @multicast2]}, @lsrr={0x83, 0x17, 0x1c, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1b}, @remote, @local, @loopback]}, @ra={0x94, 0x4}]}}}}}) 3.99833663s ago: executing program 2 (id=5121): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000001}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x2, 0x1}, 0x20) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000340)='nilfs2\x00', 0x800000, 0x0) unshare(0x2c020400) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000070605000000000000000000010100020500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}, @IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x4c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 2.73108191s ago: executing program 7 (id=5122): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 2.653848267s ago: executing program 2 (id=5123): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.events\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0xffffffffffffffff, 0xa, &(0x7f0000000280)={0x8, 0xf3c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14fffffcff0204be04020506050e02040943000800040000000400ef000d0068d0bf0507000000000000000a0012000200000049", 0x3f, 0x4004, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x0, 0x3}) close_range(r3, r1, 0x0) 2.499063683s ago: executing program 7 (id=5124): r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="045a0e12ecacb6887900"], 0x10}, 0x1, 0x7}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)=""/199, 0xc7}], 0x1}, 0x2}], 0x1, 0x40000020, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000540)=""/86, 0x56}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000200)=""/18, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x400000000000182, 0x3b9aca02, &(0x7f0000003700)={0x77359400}) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x204200, 0x0) r4 = open_tree(r3, &(0x7f0000000080)='./file0\x00', 0x88000) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f00000000c0)) 2.436708965s ago: executing program 6 (id=5125): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x7, 0x5}, {0x6, 0xfd}]}) write$ppp(r1, &(0x7f00000001c0)='g4', 0x2) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414bb0c00028005000100000000000800074000000001"], 0x78}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000000010104000000000000000002000006240001801400018008000100e000000108000200ac1414000c00028005000100000000002c0002801400018008000100e000000108000200e00000010c000280050001000000000006000340000000000800074000000000040006"], 0x70}}, 0x0) syz_usb_connect$uac3(0x0, 0xa5, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x644, 0x800f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x93, 0x3, 0x1, 0xff, 0x20, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x2f, 0x8}, [@output_terminal={0x13, 0x24, 0x3, 0x4, 0x400, 0x3, 0xff, 0x1, 0x7eb5, 0xe, 0x3, 0x1}, @mixer_unit={0x5, 0x24, 0x5, 0x5, 0x5}, @feature_unit={0xd, 0x24, 0x7, 0x1, 0x5, [0x5, 0x2]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x40, 0xd4, 0x4, {0xa, 0x25, 0x25, 0x6, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x3, 0x4, 0x9}}}}}}}}]}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x404, r2, 0x1, 0x70bc27, 0x25dfdc00, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x3e7, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @random="108318dc25e4", {0xb, 0xc}, @value=@ver_80211n={0x0, 0x2f6f, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x3000, 0xf, {0x0, 0xd, @random="abb55aba465d4957e09a751868"}, @void, @void, [{0xdd, 0x26, "df3c5324668221b7cde4bc834d3d92f36b457952db50c448bc3c793b2bb146c035c8fd1213ae"}, {0xdd, 0x22, "dc2617f15916de621ede3fb7b2137619c9904d8ceda2dba12d52399f9be56f9fe091"}, {0xdd, 0x6c, "9d75e3bf89260639dee51b00f22a988ba0f8f9f7917b2fdb5a163f84516851070cbed45c410a5f8695ab099be0c97f805e095f13ef188046d75b255be620c3021519b568552ac3e1079a97f7581f9d7d7132d2d907810407e1913c0ba0de7187038ede35beb6119613f7c712"}, {0xdd, 0x33, "2d99cdc05277e98796a65a04c70f923e5ec1bfc89d84124b54abbde59b27e4464474e2e3c0002cd24e99990e1f5c6a3443a8b6"}, {0xdd, 0x20, "7ebab27a94017f893bad8d91c34789069b18d72264e529ec079009584cd9babb"}, {0xdd, 0xf0, "02a585d6b7cae1c1e1b087a05999805a78335d9e614c0e8f8ce61960ac0f7ed94baa292ecc374d816dd9cdb34c9fd45fdf932c9a268a8d62719f6649b4538628c8f5f22bf8453c6dde7fb0b4899f488ac05fca816dd1147252d72b066c78972965ccc8f5619ccd6f830337b9bbb6ec9151999fd0bb8ecd39d7049cc4c2063b81f9df005d1ceb7caf23a082ae66701d44a3d053e1b9e27a72f59c333482381774771e6f2ee1c10cba2e6724973f1c2f45b180689118f08a2978b6241b674fd88bac05eeb5b75f3bee31ff0669f874a8c9c6ae93ab414666a3def37ee1e51426bed65edde983cc80883ff413c4e50072f5"}, {0xdd, 0x73, "826a0b955737b74fc6f19e651f4034017901f668b5a432f2e93ed39bc65d2b2bfd018ac025c9e2b533b7bf319f7797b07a1b2df6aba09d1051e487e8cd850105e4752a81a462074ee61c1901301c17d7027b5e0bee8551dcb96d1ad6a8e095daaeaf4582cf6049c5290765ef0cd27c9c44bd99"}, {0xdd, 0xd6, "889f28197f2640dbcea9ef0c52f6e44de52116f87369ff086a63301d487b70147932effd62a221f198c091afbb121a2507600cd46da9fc29bed0460c526e1b6bee93c4b0b113728bb7a3c09633c9187902c465a29ea3c4f1bb1b485a9870e933d7ca1433e895afe7d261d4d67b615107e6685b93bc56b0635da5ebcbdfc4d8d6b0cd8662ea1c0750136a7dc7f45483171d2ad17af69786ec4c0eee043a382f25f809c6b079350b7945fb110b3f552a746dd077fc8928468343c753e147ce3408aca2b560890eca3985b60ce450719f61345a57cf9e3a"}, {0xdd, 0x62, "808f1f23b71368a990548135f123950241c3090c67633b5e0c97770e93d84e656c91799107637fe8e91ec388bf6840301afe91cc2810414ce94c38985972ea05fc76265ad463bd1b996eb6cdd34993340589baababed0f7ac2e643848b6b16e4c4b9"}]}}]}, 0x404}, 0x1, 0x0, 0x0, 0x40085}, 0x40810) 2.333683954s ago: executing program 1 (id=5126): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ptrace$ARCH_GET_CPUID(0x1e, 0xffffffffffffffff, 0x0, 0x1011) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28800, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x74, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 2.211747138s ago: executing program 7 (id=5127): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x39, 0x9}}, 0x20) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0xc0844123, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x420000, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) read$FUSE(r5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2.106489276s ago: executing program 0 (id=5128): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) sendmsg$netlink(r2, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000004400)=[{&(0x7f0000000240)={0x18, 0x17, 0x300, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0x4c, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x38}}]}, 0x18}, {&(0x7f0000007480)={0x1d8, 0x36, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@generic, @nested={0x8, 0x7c, 0x0, 0x1, [@nested={0x4, 0x6d}]}, @nested={0x189, 0x126, 0x0, 0x1, [@typed={0xc, 0x3f, 0x0, 0x0, @u64=0x5}, @generic="44f1d5600612fd86a661a726a4b04ac4fce7172f3a3ef945b90cfdd0006d40d6bc1a41e63644e298ada1003d7429222ce1c6883156cdbe1e50be18a08276666ae77d4ca97af39a0456ee82cff2073876baaa65c8c8a8d7cbb91c60576da0f8a55964f466804f13f5596a1b8fbf9e", @typed={0xc6, 0x2c, 0x0, 0x0, @binary="f0a5e107a585ab60aa2e9e7f673280517baf6dae65194dbdaf852fa82e995ffa644f2c64bb4a9c5eeb9f2dcfa9b74738163113ab876fcc31b5d77ebfa570fd6c5be5fc9dd7a6bdd757fc96984d500d2b9b35e5c4c6cf2ab9d4f7c5d50a42797f1f48f1383a8044f426d6feeb86f194945b08b5bf4566f5e0a1a69535b9d076dd39bd7a0e84789061b3acaf9e21928f96d8b13fff017422f58ca313f023ecad22f540332c39b2a8b2f57dd8112632856a93ae5955f8cbae8ee71e0ddfd1e6ce6fa914"}, @generic="1a2d8918bc03649accfed041eab134ef3e5ad2f1c9a09e129629900d0b9484ae96dbf3af160d4430f2b6337fd1e07717df62f20639adf394163f6e7e802233", @typed={0x4, 0x48, 0x0, 0x0, @binary}]}, @typed={0x8, 0x2b, 0x0, 0x0, @uid}, @generic="acab772ea4d3568ae92a91c396b505045937665769f597a0a4fc10260c1ec4a05457c457589bd1797431ef"]}, 0x1d8}, {&(0x7f0000000cc0)={0x18, 0x36, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0x10f, 0x0, 0x0, @uid}]}, 0x18}, {0x0}, {&(0x7f0000002040)={0x34, 0x39, 0x2, 0x70bd28, 0x25dfdbfb, "", [@typed={0x24, 0xcb, 0x0, 0x0, @binary="bb34009d080979297cdc57af510406859cc8ce56aaa54fb10677d79b0b03076e"}]}, 0x34}, {&(0x7f0000007780)=ANY=[@ANYBLOB="201800003300000828bd7000fcdbdf25daa7955d5df3d147bfa2255c05e0fc3c47357ed1fb1dcd8dbfd3f6ab360ba93235df61f95319540b8d8c16e2b2ed58372d763851d274eedd7ec68b1b8a1913b4ab3720ab17f6767a61127dd8130bf841712c629a9e52c21c4ef9805d1345b23da8882dce0fecb61c2d8d0d6e0de6cfb977bae9b19aa0497cd59f333fe55619a93c4c8e32d25370dbb64785a89fd566e149056e763494ca633eeb0a1a615faac08084022af934bc01bba41fd2913de83d55b92f4f252e2d7f78016a8008008700", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\b\x00,\x00', @ANYRES32=0x0, @ANYBLOB="a40206809d0237800c0046800800e500080000007abe9d00f8b147e4b2b544df2c62cd19498b3ea6fd07770ef010ae6d02cc1a01c1806f31d3fe3de8be6b73523e5c1c6cecd4b87dcfef5763d9a8f0cc14ee1789de0a1a50ae06daea5ac15c5c87ecfa273a89d1ea4f034b49b434c5", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x1820}], 0x6, 0x0, 0x0, 0x20008020}, 0x8880) mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r6, &(0x7f00000020c0)={0x2020}, 0x2020) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.100517217s ago: executing program 1 (id=5129): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.events\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="7800000018002507b9409b14fffffcff0204be04020506050e02040943000800040000000400ef000d0068d0bf0507000000000000000a0012000200000049", 0x3f, 0x4004, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x6, &(0x7f00000006c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x7, 0x0, 0x3}) close_range(r3, r1, 0x0) 1.334239011s ago: executing program 1 (id=5130): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_emit_vhci(0x0, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x408000, 0x0) waitid$P_PIDFD(0x3, r0, 0x0, 0x1000000, &(0x7f00000001c0)) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04360305c900"], 0x6) set_mempolicy(0x8006, 0x0, 0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x18010, &(0x7f0000000180)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f400000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fff30000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101000, 0x0) fsync(r4) syz_fuse_handle_req(r2, &(0x7f0000002140)="c119ed7667ec1da6ce5ad10520d9f0d916f246337b0557963a20976c5c2e3b9c50442c3aa3ad8af4490e25e8a248ad6569c868927ce88fde8f6dd47700c012579d8f5517c15a8692ebbfe31637d24da9b182159a75eb201be82b5b3482e6f7d3344eb462be4e452a789b9246974e521beb91400d62ba27d79dc7e4a2511c941b7658a426f1b03867abe8958cf54e277c8c7eba60d65881156958563b415fdfb45237d979dfffc5a2399d245c064928d88f8f2ad57fc65556fc4404b0deb7fe8b794c8f853fc356646a4bd5a3bde17b164539cde75bfbcb82189d10658affc840871f99d48a657c0a490f44959ec808a7de09590156b5f4dbe9689884f22c3388c3d735ab0a38bfa911e234a40a7700258e36df5be8b1e6e8d229a9ad553628c9e2d099d87e54328d8e75a59b5add9aa55447c933e752fc3bd90aa92645449401e7a715f3b4bcc17c799eed78a917850f05886472640ec78ba017ae6e83683db81d999696d3ad34143e5d6be46724f4086dd8480e85b070e2980ee952ef91f8467bf542428b1958ead9f7a09641d0c33c1566e77a3c923d94bee7dc9046e8b6803dc5c5a6e34ba951d2a0fe9d6d03a57391560e2328e8c581474e38e40055b45f7467b4dba95d64dac57b6fc0dc8a40f054aa801a3c022dcfadc793ecfb9968d3121157b0a8b25b99b09038c58570205b4166f3bd749d7a0f8bf89033e11c0a456bb72788cf7ccfeb980ce085711f8ea531fcc57206d8e0e0aea1f3220066c7769d71026259468604a5cc7331cc971a4cd78d8552e0e0d9955deb21282a27f0a5f8364d0f9fe91016f086c10a3662a154316891ae4fb8cc3481b2253bbd09c64629f3ffcb5e82b495e6721dce47734254ab64cc119c2a446f34d6cac813a3c0444d9a13ebbc0fa4baf1bdf78b9a9cf6620fe488bf2a1bf7e857ad6ea157542761cc6a7da8d4c2242853a1fd14629491680253603b910466927c2dd4818464d7d9c246b9cd726d123d1dda95d0325370a0f1b5751796d13501a2aa1ec0dc70a5b749f8d171cb7569d9b74354883a2216f452cc712d0829c8c5f206cc7924652473931adfd2bd3940b3adaf54967c0af599d4968da74f25d2cc309dbdbe3d6faa08f2c08205365d3c4a2c8344b1047c7d0caf6b595e5d24c89ea1b532fe3094d7a16c716110b75deb22a5a281c0f133cfcfaf5238a3c493c4f97f890bb33769ea652c67149be70e62de16b65730b3bd2f547c084ee77d456a86bf8f1f7304703d2524443c4b66ceb7d2e5d97124a6ae48158c16cefa3eb94a7ec49ae43dd02f9edd0924d73c7cec977186442518b8dc642dea31dce2b79b4ec5400210817da04caf0198e933e8c618a5f0e7123ca5786c45b10a543e7de350aa4c072c85612a99ec9534f70130eebc0ef842416091a0adba1d30730d04080928c094d49a70f0a354b918725578b27a9b65f1a43a7dc9d8b6c9a23e08ba83bb8802e69454eb316a6a0188713704b30098479f5d99497e60ffb372dbbe07642dea12bf6f3f4b6c508f1e061b0211b9be792fda7bb86f51f018085f2fd5ae316c761b35d562dcfb783b87d6da0820947f5d055f0f7cd3c50f1c61f1da1a73c7ef107f0ad957977a33cdc67f6aa82e03490f5333c1ec0a1fbd14b2aa961d2b3f6315bd06029c4c9654414bd9256de44ecf3b0485a41a9f7183d0469bd327f549201924ab80e3227f228e20e9fd3b646b3134385ed058f4bff4f714cdaa855e2c364d7bbaaf26df65bdb9dfc4f6104d219e41684493c621588ca8d01ef3211c28d613bc67e498b4b80279249bd947d029315dcabea9362e0258a5a819530459df44f7c83972299e54a29afd836fb176cdc1d86398b6c7a75cd15b1f76a0070839b5a24366603a0aee35a9f784e4a633703de42e6648a9626160a25c9033242cd97eb07ffc54a01d94c48333e832ec0eefe51a266fcb526dd2954cd1147d2a2df260affac31e4cec7ece02dce3f61078b0111b94c3bbddd41487e33820ddc8cdf7a1ebc58531f280e2c12a8514bb4e7a176208b73ec6f4cf1b660393837dea00a8474fc41039db848ad6b0375a36ba35582736cf7bdb33a051d49f966fd17a80cef2f0c458d1d5c932e4193c5018105416ff1b27eddf56d4277a49d0adbf34c998a062db4c8263f5c03696cda85a6f0db49a5c58e2809d7519e6ecaa017d90e31eef725fdb3f26d77bb15a3d924d3ccb728535dfdb7517a10b9a54a551c1ec95c6770ee0901d18f24149678f1677d1f5c447aee584c6f1dbb7a952da6b91e8af3d98fe790201b89a05b61abacfe6acd7a774e3a12436d169f54b8e2572f0ed70ca78e801bbc3b783d73c96d5424b82de2d8ba84f585c67cb4c7d8175b8a2fd75a59b24db0403064924a4a6ea5423ee818b70d1c5403da14370fbc98ab4ea6a7fe78e7d3e8da1a3f04856edd96e8b9d7e80064daed38d0ca194a638a11175a9812569a640a8d373aed41e9a1e0118ff7ecade45238544dcf5864697c4d36e444fb82bbc222a8a2bec2869c623f61aa38299d3a4e8806721d579907c31a0cf50b82dcebe08d8c5a21d97a707d5a83de1fb145227d0303334e5cc73c628e818ab6901c001ef8f02557d5ec579189b620f0e3307df5273573f707ee91985823894f9ccd80415c91d7baadd31ceedb3b26212e09a62bc22392fbbf3aa5e340dd3408c1c9e3d1d144dd5260c904812952466ba31a2dc80b8826b1354335b0d754954bc93cfce0eaf93665600f67505595ed66eb38ac98a23ae6568aac700361e784fc8ff3cf0cd19e15a3508f42fb1bca1f95a6502b5ed09df0f75859527025798b890df2f0110cc20798a7096831c9822ed5a9341fd6afc85a78736b857bbfbcae5f61fb5a3ca5577c4bfb6b1ccac7f21e95cb2c1e3fbe91f5a46522bfc49a0e11b4ccae898b5215cebacac2ac8d6685b05a9df649d39e40c66f4f1373e77a722beb0ed05167fa206fd66cae5b01741f86cc1681ce7efcee5d67cf8a89627d7d02ca8ae96e32cd5d74dffa715b7c2e0f24648932930e69667939490cadcd06b4396800152fa3dfb4810ab6c4de8f0814a9fb211517d19932befe0c0613699d481ba2d3140836d9dd074ac5dbbc27284463f190442b453d4a06e1e0053d0e097420e1406b104cc8bdc486a1fc581cf1dca50f63ce3de1403eb4a5080971aa2a2a911c3d24d0370b1c062e6b21c6a694eda76e61b877e596d34ebc507f10c3bbf969793f5b71d026d03cfcc2bdda2acdeea4b7066f07be408f6bb35ba7f3b8196e9a1d1ea30ff709d8c0fa29c40056bd53e609b5217976c422efe8052e4cbda4b12dd2a1286a4460c57bb3a138c55408fa6a0888e32299cc47efb84ad61a98385854824ec253f1279f9d1ffe6becb8c427b53c57b537e6494f6acc7902347589230aa7316523108ab38842b3b97a0840d4c3eabd229232a71302edd1f3375d0092cb3a07312400c1be8a94da53a79d2fce38fed341193f6c4dc41f396774145aa18400bf108577e714f4a4c50ce408392f954eeae696d2605bb973b147ef98fa35d576c957a01f262d81157e1c8aaafc708634366afcebbf31cd4b7190d29e0b3a2960ab5ea952eecd38becbb7cf7659a95044a1ebe4240b0d26c7a932c14c1252eb24bad57be94c5632bc42aea31f722904306d39f1d0850ac029537c4425d048ecf3fcb5428638dbcb86e17d60164fc396c706c10f0a1ccb4dff2f36b47510a749dc03e32fd7f13893db135790d29a56fe1fae6d0202831d440242be2086c6e5dc71dae14089fc080a358f159faafb397da8ad8b48b1615112c76627a0e47a7cbfd2cb0e9a9c5316e96f8c2cf4ab7c875ed1bbd5a020ff2f265a1f63b6151a2288c3e83183e68cd12dce8094d392137f061d43421eeeee504e4db172c9fabc6297a5641a9a7696f16660489fd6f7ad9421068bd1294941e51b8d2b818627e3081369583e91c6b8b68c93173dc7fae27f3bb9a4c6a3d69cf5bf28b3f8b5c8fa8a8a90bfc228acd1df93c8b3f15fb318c7524ef2e8b6bc18010b4ac5b448dd3a134531654d610cfc9b393b5b1a22e90377b74ebc64aae95987881c0602311c0fa94cd612889125da49b810acf9617263b55e504b1b9160675cfbef83170fba4134640cc2be541bdb54077dd65304eddabcef91a3445804bcdbf00f53dbd3345c190c2ec117dfa986dd04c3f02b7ba9eee47538c5fda856d432cf343596c53cf3c109ada41fc6d7b09c3f14b60c2c8a4cdf5ee0791017cd25f7ad96d0c51a5cc52e2647826662a99266a2f2072b7b1acf805d44d8064d419999df38537ffcd78a78ce3837bfe1faf7dc79f5e0d32ea5e62c06e6aa716e0e048cd5c5fa8b4212ac668ffaca2a4e8afb91aa7425a800fef89fd97587569489088b434510a38a49e8ee3e1b96a307dcd999268967405f354dc0478bac5229203eb9d6aacc2db83e233ce852ad55b799b6923653d3d5788ac56ffdfeb206acac33010161536e3573d54eea1925b6f4edc6aa193e9e362681e34564d146b49ed916ab8d6aea1a78e526c7a0dc56f5ca90d07862d17cb3f21307f2e012ffd011ec64d4cc23faa4a08c4128c0892be5d5999f681dd28bd6796f83e1e0b80ab61249e5049e81c2e692e360194129d1c9aa13d5302d3cbc6060159632c6d3c2db27c3fab53e0919a81ff5878f6328536292905883095b65581b696ee94a8a0dd7d0d11a2e269959a6f848c87eefef283e57fadf325b665ade2d6591b283c33ce9092ceb39df5bf6ff92cd6180353d8021cd3b8a7efb9be4f79b37ee19e4b9eccfec49b1f526420aed78424d5129afca3e28e1e6cb5cfdd894289abd5ee69d29413c548f65baea4c99ae73055000adb0dab38e7bc6c9c562a3214e3b279decf1dc731ceed1e4def2d70360953886da1eb7b18b745fd6d8751d038c6cde166d4101df1418689468d3add001cc44c8f2ab8105fc362cf5792d5c270441af890ba4bd563ce68b57a0f99b80ba93f7fea3765ec1fdadfc7274d4d7c46da05fbaf47e29de56ffc53f71188f94cc3ea26197eb9274aea10f793e348541feda0cb82915fbc966d317b74ef23a851f3a7886fe99c4bf917d5932dc9576313518276f690f400b8de28cc92c2b753ae283c7fa1639af82ab939e3be687621a525dbed50d33cd6366d559a75f1bd1cf25a0bc421c79debae4263beb171539835e6e5447d411383c3d7ebc8157892ab6d5013d49b0b777dc27f629e9e0924d889702dec588045563cc09cf1bea68fcfd0a2c6943248009b95cb6055b5c2f521c4120ecb4233c47d7f0454afa93063d5b26b94530b3b3089b85b64ebc684e5c38a561ba437b09582d38fd379e48e752cffc532bb8bec2999b2ce70fb9e5d7101d740008c935680537e8992b576c9f5dbcfb35513c11fa48caaedf52a6bc350aa2acbf1ec561680d8ee9837d3373e2d51183279a95d41eeb9558dee0fa43256b9a19012b3091a4bc1e94961beb05c33869915e69413122a953e0be0fb9759c9b8ac1254aabcce151638d60d197458e9757a1d1b0e7286fd66dbbe9deb51ca7274b3e0efb464ff44aafd5024cc534ce0d725bdd4e43601279231b6fda22ec25a680588794f086a9c094b751c575d0e0251afa27381c55a9c190ee3af55af0d20424db2411233fe46c537b41dc576639979469925a8c8e515539bebba248d3372ec80875afd26a04ef5d1aeb61390901eccf4df562680445ccd6a90fc70cf0ec08910b23e108ba9b35a689fecbeeacccda80a2ac86d2e7ed2990ac386ff3cc7992ea29d94bbe7d13c96cd31763cb8a5a150c6ee1781160e27df9b51678e650d009e95322a0a63a9165288be42681e3dea6262e00ffdea6f076b9bc810880cfed87a609f1096dcf6af0f053b5ed80c2053157b97396d2876f6600149cda0fcbdac08621ae99e9fd24393d30c3911da7573c3675a695f9e014a3dc2d2e45296abaff428a733cb742a01df7059828f64e515099141081ab3a263c7c38459dbc0d32fa8768b8fc3550131d286637e25466d2a129d587663d9d0eaf4079a72cf37c9fccf5f2cdda2e9db69d82a87b4cf9c20dee03d935cf6099d1d1174344d551cb569a73c21ccafa6c59b988e0681bb175edd912cd64670598b444825c8f4a280dfee91ba18f50aa0f2fb529e5f73302fa09c4b9937f19ff6175af4f1321d3dc09e692ca7e1934f31ac91fb6e6fca4b1dda3a0063c8eeb5f68d43c820f8b9e1c6903ec1a2626ca3536bc386f42e7d865102daa82db5b2d2b580825afcfb65ca9c5cca7de06d838f84a84ee4f8381c05de2a0ec53bdcc447df8e8b9921c21cdd43312e1454790d727ae9c33487239195afc93149090e3c47dd9ec03feb51551ae92e9dc21ce5ebc4e8c8b99b9dd09ecd33a949aac69299024a52680c91244fcfefb9e2def28d0cdb621d7be8442c67c61b18a1228d341014a3116e9b8f2829e291f788e368b6e36460a6a76987918caa641f06184ab0a3910a43dfa97b3e5c31c837a12a436ee8796f9f507cfc438e6b061a59342be0c0bef0b646973d58830063a28c1cd3f434173f450c2ca3a846adcedf6b5d0bfd0813948e79fb8b6bdf9a5add644ab2a1d9795faae8ab680db6a4ad933848ec6ad09b212605ce497b2dba4eea307c45c17099a3f116508c73371d6f3dad906cf8ee9a9eab88e9365fc78112dfc8a4f865e627f1f6e11357632a3a1a2e9391f56376f8e181555ffc98ab9d93874392e81aa4183e8caec57a4a29613a3c4319595553143adf28bae56b719b8be0b2acc4b03038d48de63b19ca362945637d4a385becaaddad5b3dba297ffe71ca0cc9c9c1ff843ea5f0dff511b88ec7a6001a2570d09606c36d6bede06c4c7e93c77ca3da73f9933b16650df963a39ff34a3e83bad1c14a5a9457166f13c53502e9b9600982aa99598f711ef22720204282c9b02fea3eb55d568160f0fd62633787a77fd8acaed92f2607020c26f6f9386f9021f9123204a3f20e745caf37849b25f360e174718e1d78a32dbdab5d5aeb36c9b3366167b0fee60883a9b0f8bcd9695472ff4820462fa6f75801abe45c4ce02c6de61bddb434bf020b1145f0ca58f035f46107ca63a507498d7a1ffd9f6d3071479aec5999c1e7abc0e014c5be04b92486dce4d8bd88c321f3017050c599a6ed8888f810c75f2607fd35a8795b7478d1c346ce6694a0e1e3604cbe2ec7a31415d80508dd23ffe4db304a2ca1bc65681cff1135b95fc05f0a3b8cada0f5c83e8d0f3cdcbd4bfb48a7895cc9535d81d13ccc8f9534dfc542d9837e352eddd62577ee711d26bb07f41e9948d4b917a926eb8093944ae45cc6dd13ec9b61816950d158226ab7f1b8d8a1465f3eef2e9a63b3ff097282d2541fef5102c8b651ded051d3219f6527d4b5b6fcb1bd0fffe7080abde84ea1acbd2b89b0c9577fd7273675527a12dcaec02b3262389b05c2c09792ce465f7a879de0270fc2b6f28403a1dca0c5fc28f0687351c5bb346de8cfea7532b834904bb012731ef8fe83036c95251c757683834672fa80ba8383308e3e9e536fb0e906a9727e6b2870c3a8ee056d353a3fafe8e9ffde7b0ce951b60b35fc2f7d1e476ad1c45f2559ac66dd007fc27253256f98877a4476ad273880a874023e3f75b14b32366172bf860eb6dbcb0a98b83972e23b02fd02027ca7f9eaa0ee38eef55ccbace6ea3051d79c6017c34b5b502a9b0e52c8b4bd80391af549e6f4accb1cfdf2071de59ba903dde378d9e66ed0cbbddd66ac365e64c8fdb93b97305a55cb39beb745d4a824d1de5282b1b839a72603fe033f8c7aae2cbab65fcfb54eff28eb0bd4c72e3e892f953e3251b88ce178641e79ab5484bff93a8eaaf601be15368b46690ca10e70188f581f999eac931fe48f31b8951ccff1ba5d6cc007246595bdb22a3dcbfb2c9fe0d010bbab856f4c651dc5ab7e8fb0193b1c9924facf3c05a255ef328d589a0a89bfe67c7d971bd7b708517c8540391f6a6b9724069e572be3f85ca86e46e6fdedd22695fd8b364f3d10723a34971a39e1822eac8f51661ecd13c41e6349c030434a0dff79f441cb195bb08717345cf29401c834c35d9009895b6e5c03406b202ee333d7f531898967f93aaea74265fc605fb4b5a5750305ab82203f2fb49493a5d3deb285a2777c8641b3d5df1c7cdde888786d314ccdf20b60c5e05279160fae24073027d8b8b61aa4e4760d8d7d785d2fa1e551c2ff644bb83e69fc574c754a195efbca225e7a5e5ffb1f0852cc80187661295786fa35cca2baba685f744ec9e193e212823741437dde5ca003973261a167a389f2e5ead402feecbb4045a39d3ebd76c4bfcc65f60bc841f8488d08f258a95caf36cbac22671ac59a7e3ebd22d600bc417b15daaf296b562928ca6a2d7c11c5e96d3c1f56e683f1a55c07dde2cf889be2ca901606b613a299703312e74f80092ff6128835ea200fad70e0c2d094818ba6178200a211d6b2d2b068a4a0d757361535a73ad59a309c2167c874b23b2abf4e5eaf76e7e6851d4232303b8c9073ccea7398d34732289d0530f4183d004cc4c9827668005d28799ed2b23005f70bfbdcf2f4b6a821c2ca12b7915a5bd6098753218ebc41b16475c8611f492f85b08f551fee983915a5cfc82d24abd29a281963feadfe33cfe14735168b2e0528b0493011aa234d18450d9b29322d7094f3202f6a6b49094dad52707a3a80324835bf34daf557ac5f18695069601c6011f148084355af3b531fb0e16a6ff81a8f9708e1a610d38dda66365255c7aa3a3d37bd4b58baa13d1b910280567642f97bf4836a1fcf336bf6e9a0fb347abcd1cdccfda04acdca918766a64fe7904b2e67b8872afd4366f9feb944f9b9ae5577c76c55c24b85e44b48d464333ba1a9f6e1e8ba10b57d7d8aab05e86702637485998fecc12b3fb12ff7ba3fd26223881a06350f215a8bffc46eba2cba0af2e11439ce012c667c5cafe3d0690c77b3f1ba108caffd5726393e61f194295cf4c51d0d383632cd9b75daeceb84ec450a0d344b08596530f1b95ff8b034c04b263a530c59d822e9c8c5c7328e539a18a2905c117944e22eceb60247b7aaaabdf0859a9143ffe2935454b6a87f21bc1de97893c23b48ce03782252f60e880f56b839daae71aa8a19e753506b370739ea88294ca2e0c1af31438ea33b084c43c6fa1381b7f1b9423685c53f3438e1e8893c6d157b297b336cf7f032ab4c01248ea5b2222e24f90240d8f28f6455e36cc423dbd2888d56c3fe6bdbcacf397ac13a1983797f7ccb84a1cb83339d4e9f599a154ac406a3bee3d4b3749b4f0768b0b225f31c9c91dc26a45a2e109a218ddd22af93b86b6fe336d3a051f7e07ff1d1d5eb662de4cfda0dacce0e20c37f34c75a97815591da22aacaa1e3a8028af1b5e15e470e800fd1dbdc99f21687724f07737c2c315e0836cb169f71e689fca00a2c73fe666699cd6571ea106767bd7f0bca061f0b4a21991fd02b8e695b78474ee1c9bc13bcdb9e477c02acf2343d449f9b85bd618bf7a2bc353c356b9578d3316b17f8bd3fc20f2b1a7a4cdc518e79c77d472c5cb6762693388d3124579d884a49a69d7f07c332be891c3244525c2e6b9387c041b93706a0121365cdf69aa839346e5e180945d8af7da0a8f65cd1bad1377d13ff6d02e7ea54d4377a1d3d49d3d357e61890034409b19f44fc02f5574f40fe535bd423bbd96a0a542ccade1b478b78265b25c1322fbbb8ec99cb45b22d737ee248169fe08f8a2958b925ace6372bcf1d1be57e9b4de97bd0db62425c53d869794d4390312b67db5e61d1b42c5afa549065005f359c47734f54b7f30918be1e2d0ff21596258caa287159fbe6dc0090242c43815367bb45067a55e0658d58eefd081b1541cf393561a5a369fe90c6d5d8caba63198c84fa0467fae813ecd3fb740a3783a53dfad07c9493fb3936b802e1bd9fb558bae88c44d9a4795aa634c13a5fba50923636ac6e2952da6c8424cc616eb364c11f876663d105fed392c15dbb00f9caf50af20c44e4fea91480cb4bfecaf126451e6f19146bb2ff26d310416c62410c37b000a1d1f0480419e5f5f320827fce26fbb25c9ab882ad4bdf6a674aaee87b85309a9783bbd34606ed46f6f761c5e124825b0e5df507c505814c769323bfa36170015e1720e2cbf30f79cc8515df1fb7d58695ecf8825e924e098d0dfcd5e396093d996a2fd4a9c5de03254b12dfcd2342f49acbecf18dc3417382e5b507652b1d089eed0805479546eba0fc7d17ecf11d692b4ce817f270720cf20737d3f02e302cf5e18d649bf3405fd262dba305e916280a38e3511307033dd70d2cde39d528e676f6a051ebc73b6ff0d5f63b58970e38e39ea366977a0809e22eed665620f65bbdd2f94ad82f3faaba1bfac309f60f843fe89573787092c8f7a7b44018ba7daba13e6b093b496f79adc0732574cac1cc33e5234d7770ad6cb534dab9856e390e172a91532ae77f4ec98054f4c12b02d0438ddf8d8d173e6a59f66564accb785693897b335199d9d8338e242703ad120f465a19153a1a330dcc275a399af921e0dac2b6d79ea51ec72fe932be071352c12933367487d7385de66d62b2bf5cae6c4d54f099d7c4ee10919dcb33a2b31498d979504b619a6eaf64ed400e491859f9c78c1d9d434d6ac69d570796088d76a47b4999816eb3b15e8de155f1392b75c1517c91df38ef0793610451ad31a0906eecf14c80b679202a6df9f00c7d28d1449988410c652740dde2ace85080e2a4f16024cde15ec4023b1fc4537d6947f1e001d37c90acae2995aab5476a99d3a20af07ae2e564e27e31b30d7bc3b8aa016e3b5c38feb9fc947ace24e83e7ba4f69f72e92f8f26bda8dd09ca791fe9cb1d0e14278c89a20ee2896924e88ba9cb3b916aff3b7a5924a91b4495d0305fb4adb3e036a31e2f200f272d4fa7285f96ab7e7b934464227e108511ded2ae4337aee944e4067c7b741d2f55483243d641b8bcca425bb69f591065a3b45c6f9513b472aff95c1b3e71133b3479cd5fc51e9eefe5bf0f7c2f9256f8d49a2ceb2d11ca0f0eab1e42464cb7d6aaa0c023147c1f108c3d6d1fa379638979170cb6d94fa92e5cf5f69316fd64c027eb10ddfd9b91fc91829f347cd73433e5197fd97fb10e99d2ed8868d49e24d59efa6758667f6ffc18e5258f98afeb01a3d794813fc2b9190090ccceaca0526f06a948d45bc7e2e40cdec3cf78c10676a8bb8a3e5e7200b3726b3407bf666862f9038d8216f9505cf7aa9a04f934d6da311d6500452676dccfd60977c4c99d56dcb7bb45fb2081e19803841a8edd8cc55b08082d9798a5c3a80de66f4ba2ccd90566d393d94608f17724719393b9df7725baacdf0e4e984b454576ad4f793143f4c8dc5f1ca822fbcdc90e9636727ee0638fb26759e6ff79b19c97ad224e5a85e1075833fe7fd2f3424420a5197eaa9d440c52807fc3e96c647dd745e49189f427454aae6aede782a8ac40582d85acc9ae68f95af556945889ae1fe381e69ed18aecb08866f5558ae36b6ff61c86fdb2b6f3eca083dc41c0", 0x2000, &(0x7f0000000b00)={&(0x7f0000000280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0xfffffffffffffa30, 0x8) 1.22471882s ago: executing program 0 (id=5131): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESDEC], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x3}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc0842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.112151286s ago: executing program 1 (id=5132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0000001000260125bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7808020001a20100280012800b0001006d6163736563000018000280050006000f0000000c0004000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000fddbdf25090000003c0003800800010001000000140002006272696467655f736c6176655f300000080003000000000014000600ff010000000000000000000000000001392497c682adf9eb39edd60cc9bca6e4fe93bf53e3248ed4b21c850d6854f32fd05371eb7934d5f7980670f80c4e839b12f3b0e118d65bf3c6f22a11499222635e4b4dff060188ab8add3a6dfb86d45a204f5d56fef669019a1d82101fed3e5c1bbc4a973080979f5c71936c58d897fd1887c7fe18f1d8624edb73331cfe00c1956116ac0670a2cd351e552e14417868142fc6908e4f29b68fbe9d11c3997f8653588f5dd1b763"], 0x50}}, 0x48040) 237.900696ms ago: executing program 2 (id=5133): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24004840) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000009}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a060000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x7, 0x0}]}) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f00000000c0)={{0x520d, 0x2}, 0x20}, 0x10) 79.277828ms ago: executing program 1 (id=5134): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e20, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x18, 0x800, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0xeb57}, 0xa3, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x805a}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 0s ago: executing program 0 (id=5135): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000004}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe63, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e20, 0x8000, @private2, 0x9}}, [0x0, 0x9, 0x4, 0x4, 0x0, 0x7, 0x40, 0x2, 0xf0, 0x4, 0x400, 0x0, 0x7fff, 0x1e0000, 0x4]}, &(0x7f0000000300)=0x100) r3 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x8901, &(0x7f0000000040)) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000100)="90c2dd", 0x3}], 0x1}, 0x24004015) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendto$inet(r3, &(0x7f00000002c0)="9b3080013c3783e201920eb6a548dd271d27c7b2a4427df984a05052b6a5719f0b988b35d4537dd114a9f1587e988438316240cf400df687e1d7f51a90d37ac1ceaf798c5e15f9bba8821791c3d3c07da981b8159d2531b8aac2f1fc566c880cd71f196aff8a3ed212da492cedac60906a2d754f5c6cb0", 0x77, 0x1, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000003c0)={r2, @in6={{0xa, 0x4e22, 0xc462, @mcast1, 0x80000000}}, 0x9, 0x6, 0x3, 0x10, 0xc, 0x40, 0x7e}, 0x9c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000380)="3f12233586cca16b38ec3c25a36f", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x4c) kernel console output (not intermixed with test programs): ed [ 1357.885115][ T30] audit: type=1400 audit(1296.044:42747): avc: denied { create } for pid=24326 comm="syz.7.4638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1358.171857][ T30] audit: type=1400 audit(1296.044:42748): avc: denied { write } for pid=24293 comm="syz.0.4630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1358.381460][ T30] audit: type=1400 audit(1296.044:42749): avc: denied { read } for pid=24293 comm="syz.0.4630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1358.415648][ T30] audit: type=1400 audit(1296.091:42750): avc: denied { ioctl } for pid=24321 comm="syz.6.4637" path="/dev/comedi4" dev="devtmpfs" ino=1279 ioctlcmd=0x640b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1358.505813][ T30] audit: type=1400 audit(1296.184:42751): avc: denied { read write } for pid=24293 comm="syz.0.4630" name="ldusb0" dev="devtmpfs" ino=5220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1358.621454][ T30] audit: type=1400 audit(1296.184:42752): avc: denied { open } for pid=24293 comm="syz.0.4630" path="/dev/ldusb0" dev="devtmpfs" ino=5220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1359.474240][ T30] audit: type=1400 audit(1296.203:42753): avc: denied { execmem } for pid=24326 comm="syz.7.4638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1359.611409][ T30] audit: type=1400 audit(1296.315:42754): avc: denied { sys_module } for pid=24313 comm="syz.2.4636" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1359.632301][ T30] audit: type=1400 audit(1296.315:42755): avc: denied { module_request } for pid=24313 comm="syz.2.4636" kmod="" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1359.653422][ T30] audit: type=1400 audit(1296.390:42756): avc: denied { create } for pid=24326 comm="syz.7.4638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1359.703556][ T5720] usb 1-1: USB disconnect, device number 50 [ 1359.749654][ T5720] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1359.857352][T24348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1359.874380][T24348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.147476][ T5720] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1360.307877][ T5720] usb 1-1: device descriptor read/64, error -71 [ 1360.426075][ T7313] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1360.555194][T24354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.580205][T24354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.586953][ T7313] usb 7-1: Using ep0 maxpacket: 16 [ 1360.596324][ T5720] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1360.600855][ T7313] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 1360.621780][ T7313] usb 7-1: config 0 has no interface number 0 [ 1360.636035][ T7313] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1360.647324][ T7313] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1360.662982][ T7313] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1360.677054][ T7313] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.696114][ T7313] usb 7-1: Product: syz [ 1360.706399][ T7313] usb 7-1: Manufacturer: syz [ 1360.714365][ T7313] usb 7-1: SerialNumber: syz [ 1360.729988][ T7313] usb 7-1: config 0 descriptor?? [ 1360.751132][T24350] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1360.758827][T24350] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1360.767293][ T5720] usb 1-1: device descriptor read/64, error -71 [ 1360.872785][T24358] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4646'. [ 1360.992235][ T5720] usb usb1-port1: attempt power cycle [ 1361.007645][T24350] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1361.036313][T24350] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1361.269074][ T7313] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1361.284421][ T7313] asix 7-1:0.34: probe with driver asix failed with error -61 [ 1361.397810][ T5720] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1361.415312][T24361] m>e5nè‹Ò: entered promiscuous mode [ 1361.434745][ T5720] usb 1-1: device descriptor read/8, error -71 [ 1361.563553][T24366] 9p: Bad value for 'wfdno' [ 1361.751665][T24371] IPVS: Error connecting to the multicast addr [ 1362.947562][ T5720] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1362.969877][ T5720] usb 1-1: device descriptor read/8, error -71 [ 1363.101603][ T5720] usb usb1-port1: unable to enumerate USB device [ 1363.154432][T19298] usb 7-1: USB disconnect, device number 62 [ 1363.237659][ T30] kauditd_printk_skb: 263 callbacks suppressed [ 1363.237674][ T30] audit: type=1400 audit(1301.050:43020): avc: denied { prog_load } for pid=24383 comm="syz.0.4654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1363.358794][ T30] audit: type=1400 audit(1301.144:43021): avc: denied { bpf } for pid=24383 comm="syz.0.4654" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1364.450289][ T30] audit: type=1400 audit(1301.153:43022): avc: denied { create } for pid=24383 comm="syz.0.4654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1364.473531][ T30] audit: type=1400 audit(1301.153:43023): avc: denied { write } for pid=24383 comm="syz.0.4654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1364.592934][ T30] audit: type=1400 audit(1301.153:43024): avc: denied { nlmsg_write } for pid=24383 comm="syz.0.4654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1364.618868][ T30] audit: type=1400 audit(1301.191:43025): avc: denied { read } for pid=24383 comm="syz.0.4654" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1364.660396][ T30] audit: type=1400 audit(1301.191:43026): avc: denied { open } for pid=24383 comm="syz.0.4654" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1364.767544][ T30] audit: type=1400 audit(1301.191:43027): avc: denied { read write } for pid=14240 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1364.774122][T24399] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4659'. [ 1364.803601][ T30] audit: type=1400 audit(1301.191:43028): avc: denied { open } for pid=14240 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1364.818176][T24399] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4659'. [ 1364.843733][ T30] audit: type=1400 audit(1301.191:43029): avc: denied { ioctl } for pid=14240 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1364.980923][T24407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1364.997050][T24407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1365.016813][T24407] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1365.032167][T24407] overlayfs: missing 'lowerdir' [ 1365.062320][T24396] can: request_module (can-proto-0) failed. [ 1365.365314][T24421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1365.375362][T24421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1365.413742][T24421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4665'. [ 1366.078823][ T7313] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1366.433490][ T7313] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1367.231745][ T7313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.457044][ T7313] usb 1-1: Product: syz [ 1367.467751][ T7313] usb 1-1: Manufacturer: syz [ 1367.477259][ T7313] usb 1-1: SerialNumber: syz [ 1367.512721][ T7313] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1367.555271][ T24] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1368.602316][ T30] kauditd_printk_skb: 217 callbacks suppressed [ 1368.602333][ T30] audit: type=1400 audit(1306.076:43247): avc: denied { prog_load } for pid=24455 comm="syz.6.4676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1368.718592][ T30] audit: type=1400 audit(1306.076:43248): avc: denied { perfmon } for pid=24455 comm="syz.6.4676" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1368.744333][T24461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2583 sclass=netlink_route_socket pid=24461 comm=syz.7.4678 [ 1368.896213][ T30] audit: type=1400 audit(1306.076:43249): avc: denied { bpf } for pid=24455 comm="syz.6.4676" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1368.976409][ T30] audit: type=1400 audit(1306.113:43250): avc: denied { allowed } for pid=24455 comm="syz.6.4676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1368.986313][T24461] FAULT_INJECTION: forcing a failure. [ 1368.986313][T24461] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1369.047594][T24461] CPU: 1 UID: 0 PID: 24461 Comm: syz.7.4678 Tainted: G L syzkaller #0 PREEMPT(full) [ 1369.047626][T24461] Tainted: [L]=SOFTLOCKUP [ 1369.047634][T24461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1369.047645][T24461] Call Trace: [ 1369.047652][T24461] [ 1369.047661][T24461] dump_stack_lvl+0x100/0x190 [ 1369.047689][T24461] should_fail_ex.cold+0x5/0xa [ 1369.047716][T24461] strncpy_from_user+0x3b/0x2d0 [ 1369.047747][T24461] do_getname+0x78/0x390 [ 1369.047777][T24461] user_path_at+0x26/0x60 [ 1369.047800][T24461] __x64_sys_umount+0x10a/0x1a0 [ 1369.047824][T24461] ? __pfx___x64_sys_umount+0x10/0x10 [ 1369.047849][T24461] ? rcu_is_watching+0x12/0xc0 [ 1369.047880][T24461] do_syscall_64+0x10b/0xf80 [ 1369.047902][T24461] ? clear_bhb_loop+0x40/0x90 [ 1369.047924][T24461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.047944][T24461] RIP: 0033:0x7fb88739cdd9 [ 1369.047960][T24461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1369.047978][T24461] RSP: 002b:00007fb888231028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1369.047996][T24461] RAX: ffffffffffffffda RBX: 00007fb887615fa0 RCX: 00007fb88739cdd9 [ 1369.048009][T24461] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00002000000002c0 [ 1369.048020][T24461] RBP: 00007fb888231090 R08: 0000000000000000 R09: 0000000000000000 [ 1369.048031][T24461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1369.048042][T24461] R13: 00007fb887616038 R14: 00007fb887615fa0 R15: 00007ffd53ca3598 [ 1369.048067][T24461] [ 1369.636962][ T30] audit: type=1400 audit(1306.113:43251): avc: denied { ioctl } for pid=24430 comm="syz.0.4669" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1369.799987][ T30] audit: type=1400 audit(1306.122:43252): avc: denied { create } for pid=24455 comm="syz.6.4676" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1369.874895][ T7313] usb 1-1: USB disconnect, device number 55 [ 1369.919755][ T30] audit: type=1400 audit(1306.132:43253): avc: denied { map } for pid=24455 comm="syz.6.4676" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=104007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1369.966623][ T30] audit: type=1400 audit(1306.132:43254): avc: denied { read write } for pid=24455 comm="syz.6.4676" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=104007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1370.050553][ T30] audit: type=1400 audit(1306.141:43255): avc: denied { read write } for pid=24455 comm="syz.6.4676" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1370.105149][ T30] audit: type=1400 audit(1306.141:43256): avc: denied { read write open } for pid=24455 comm="syz.6.4676" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1370.588621][ T24] usb 1-1: Service connection timeout for: 260 [ 1370.597266][ T24] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1371.011056][ T24] ath9k_htc: Failed to initialize the device [ 1371.124717][ T7313] usb 1-1: ath9k_htc: USB layer deinitialized [ 1371.804442][T24494] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1372.139774][T24489] fuse: fd is not a fuse device [ 1372.397552][T24501] overlayfs: failed to clone upperpath [ 1372.412927][T24505] loop8: detected capacity change from 0 to 7 [ 1372.424091][T24505] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1372.435308][T24505] loop8: partition table partially beyond EOD, truncated [ 1372.444319][T24505] loop8: p1 size 3850834742 extends beyond EOD, truncated [ 1372.461196][T24505] loop8: p2 start 516240762 is beyond EOD, truncated [ 1372.564691][ T24] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1372.736709][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 1372.800420][ T24] usb 7-1: config 127 has an invalid interface number: 124 but max is 0 [ 1372.837224][ T24] usb 7-1: config 127 has no interface number 0 [ 1372.869715][ T24] usb 7-1: config 127 interface 124 has no altsetting 0 [ 1372.935391][ T24] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1372.973658][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.991201][T24511] ALSA: mixer_oss: invalid OSS volume 'SYNT:' [ 1373.002189][ T24] usb 7-1: Product: syz [ 1373.011287][ T24] usb 7-1: Manufacturer: syz [ 1373.022019][ T24] usb 7-1: SerialNumber: syz [ 1373.044506][T24515] netlink: 'syz.1.4695': attribute type 1 has an invalid length. [ 1373.119556][T24516] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4695'. [ 1373.180842][T24515] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1373.662553][T24525] bridge0: port 3(syz_tun) entered blocking state [ 1373.669425][T24525] bridge0: port 3(syz_tun) entered disabled state [ 1373.677737][T24525] syz_tun: entered allmulticast mode [ 1373.684543][T24525] syz_tun: entered promiscuous mode [ 1373.690389][T24525] bridge0: port 3(syz_tun) entered blocking state [ 1373.699007][T24525] bridge0: port 3(syz_tun) entered forwarding state [ 1373.960618][ T30] kauditd_printk_skb: 218 callbacks suppressed [ 1373.960634][ T30] audit: type=1400 audit(1311.082:43475): avc: denied { write } for pid=24529 comm="syz.2.4697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1374.016837][ T30] audit: type=1400 audit(1311.120:43476): avc: denied { write } for pid=24529 comm="syz.2.4697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1374.096812][ T30] audit: type=1400 audit(1311.213:43477): avc: denied { read write } for pid=18789 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1374.163049][ T30] audit: type=1400 audit(1311.213:43478): avc: denied { open } for pid=18789 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1374.163760][T24537] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4700'. [ 1374.229520][ T30] audit: type=1400 audit(1311.213:43479): avc: denied { ioctl } for pid=18789 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1374.256087][ T24] usb 7-1: reset high-speed USB device number 63 using dummy_hcd [ 1374.285642][ T30] audit: type=1400 audit(1311.213:43480): avc: denied { write } for pid=24529 comm="syz.2.4697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1374.305658][ T30] audit: type=1400 audit(1311.251:43481): avc: denied { read append } for pid=24536 comm="syz.0.4700" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1374.332562][ T30] audit: type=1400 audit(1311.251:43482): avc: denied { open } for pid=24536 comm="syz.0.4700" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1374.361596][ T30] audit: type=1400 audit(1311.251:43483): avc: denied { write } for pid=24529 comm="syz.2.4697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1374.386566][ T30] audit: type=1400 audit(1311.260:43484): avc: denied { write } for pid=24536 comm="syz.0.4700" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1374.491659][T24499] netem: change failed [ 1374.603303][T24539] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 1374.641516][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1374.671962][ T24] usb 7-1: device firmware changed [ 1374.711918][ T24] usb 7-1: USB disconnect, device number 63 [ 1376.162251][T24559] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4705'. [ 1376.392168][T24564] can0: slcan on ttyS3. [ 1376.393752][T24563] devpts: Bad value for 'max' [ 1376.540573][T24562] can0 (unregistered): slcan off ttyS3. [ 1377.739585][T24596] /dev/nullb0: Can't open blockdev [ 1377.765224][T24594] netlink: 96 bytes leftover after parsing attributes in process `syz.6.4708'. [ 1378.080085][T24592] 9p: Bad value for 'wfdno' [ 1378.381794][T24614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=24614 comm=syz.0.4718 [ 1378.432373][T24618] ipvlan2: entered promiscuous mode [ 1378.828461][T24631] netlink: 'syz.2.4720': attribute type 1 has an invalid length. [ 1378.836279][T24631] netlink: 2108 bytes leftover after parsing attributes in process `syz.2.4720'. [ 1378.901884][T24636] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4723'. [ 1379.026456][T24636] /dev/nullb0: Can't open blockdev [ 1379.096816][T24629] fuse: fd is not a fuse device [ 1379.313834][ T30] kauditd_printk_skb: 502 callbacks suppressed [ 1379.313851][ T30] audit: type=1400 audit(1316.089:43987): avc: denied { create } for pid=24647 comm="syz.1.4727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1379.345688][ T30] audit: type=1400 audit(1316.089:43988): avc: denied { create } for pid=24647 comm="syz.1.4727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1379.413967][ T30] audit: type=1400 audit(1316.107:43989): avc: denied { write } for pid=24647 comm="syz.1.4727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1379.440277][T24650] netlink: 'syz.1.4729': attribute type 1 has an invalid length. [ 1379.462416][ T30] audit: type=1400 audit(1316.126:43990): avc: denied { unmount } for pid=18789 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1379.467930][T24650] netlink: 2096 bytes leftover after parsing attributes in process `syz.1.4729'. [ 1379.500367][ T30] audit: type=1400 audit(1316.154:43991): avc: denied { read write } for pid=18789 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1379.525475][ T30] audit: type=1400 audit(1316.154:43992): avc: denied { open } for pid=18789 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1379.529656][T24650] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4729'. [ 1379.550727][ T30] audit: type=1400 audit(1316.154:43993): avc: denied { ioctl } for pid=18789 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1379.590356][ T30] audit: type=1400 audit(1316.210:43994): avc: denied { create } for pid=24649 comm="syz.1.4729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1379.611039][ T30] audit: type=1400 audit(1316.210:43995): avc: denied { write } for pid=24649 comm="syz.1.4729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1379.631468][ T30] audit: type=1400 audit(1316.220:43996): avc: denied { read write } for pid=14240 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1379.713708][ T7313] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 1379.876573][ T7313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.888019][ T7313] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1379.915393][ T7313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1379.927594][ T7313] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1379.937474][ T7313] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1379.955775][ T7313] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1379.968428][ T7313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1379.979727][ T7313] usb 1-1: Product: syz [ 1379.986275][ T7313] usb 1-1: Manufacturer: syz [ 1379.999684][ T7313] usb 1-1: SerialNumber: syz [ 1380.008704][ T7313] usb 1-1: config 0 descriptor?? [ 1380.692917][ T7313] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1380.715595][ T7313] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1380.917479][ T7313] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 1381.122013][ T7313] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1381.163183][ T7313] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1381.178485][ T7313] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1381.207945][ T7313] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 1381.234376][ T7313] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1381.298661][ T7313] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 1381.342461][ T7313] usb 1-1: USB disconnect, device number 56 [ 1382.049672][T24695] netlink: 'syz.1.4744': attribute type 10 has an invalid length. [ 1382.057571][T24695] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4744'. [ 1382.066762][T24695] bridge0: port 1(veth1_macvtap) entered blocking state [ 1382.073855][T24695] bridge0: port 1(veth1_macvtap) entered disabled state [ 1382.080959][T24695] veth1_macvtap: entered allmulticast mode [ 1382.087771][T24695] veth1_macvtap: left allmulticast mode [ 1382.093308][T24695] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 1382.426245][T24704] FAULT_INJECTION: forcing a failure. [ 1382.426245][T24704] name failslab, interval 1, probability 0, space 0, times 0 [ 1382.463978][T24704] CPU: 1 UID: 0 PID: 24704 Comm: syz.0.4747 Tainted: G L syzkaller #0 PREEMPT(full) [ 1382.464009][T24704] Tainted: [L]=SOFTLOCKUP [ 1382.464015][T24704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1382.464025][T24704] Call Trace: [ 1382.464031][T24704] [ 1382.464044][T24704] dump_stack_lvl+0x100/0x190 [ 1382.464072][T24704] should_fail_ex.cold+0x5/0xa [ 1382.464097][T24704] should_failslab+0xc2/0x120 [ 1382.464118][T24704] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1382.464144][T24704] ? skb_clone+0x190/0x400 [ 1382.464176][T24704] skb_clone+0x190/0x400 [ 1382.464204][T24704] netlink_deliver_tap+0xaed/0xcc0 [ 1382.464231][T24704] netlink_unicast+0x62b/0x850 [ 1382.464257][T24704] ? __pfx_netlink_unicast+0x10/0x10 [ 1382.464286][T24704] netlink_sendmsg+0x8b0/0xda0 [ 1382.464310][T24704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1382.464329][T24704] ? pti_set_user_pgtbl+0x30/0x50 [ 1382.464364][T24704] ____sys_sendmsg+0x9e1/0xb70 [ 1382.464385][T24704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1382.464409][T24704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1382.464442][T24704] ___sys_sendmsg+0x190/0x1e0 [ 1382.464466][T24704] ? __pfx____sys_sendmsg+0x10/0x10 [ 1382.464520][T24704] __sys_sendmsg+0x170/0x220 [ 1382.464548][T24704] ? __pfx___sys_sendmsg+0x10/0x10 [ 1382.464587][T24704] ? rcu_is_watching+0x12/0xc0 [ 1382.464617][T24704] do_syscall_64+0x10b/0xf80 [ 1382.464638][T24704] ? clear_bhb_loop+0x40/0x90 [ 1382.464661][T24704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.464679][T24704] RIP: 0033:0x7fd22559cdd9 [ 1382.464695][T24704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1382.464712][T24704] RSP: 002b:00007fd226374028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1382.464731][T24704] RAX: ffffffffffffffda RBX: 00007fd225815fa0 RCX: 00007fd22559cdd9 [ 1382.464742][T24704] RDX: 0000000000008018 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1382.464753][T24704] RBP: 00007fd226374090 R08: 0000000000000000 R09: 0000000000000000 [ 1382.464764][T24704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1382.464774][T24704] R13: 00007fd225816038 R14: 00007fd225815fa0 R15: 00007ffcd194fb28 [ 1382.464800][T24704] [ 1383.187200][T24711] overlayfs: failed to clone upperpath [ 1383.689042][T19298] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 1383.947599][T24722] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1384.274729][T19298] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1384.484340][T19298] usb 1-1: not running at top speed; connect to a high speed hub [ 1384.496049][T19298] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.507643][T19298] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1384.520857][T19298] usb 1-1: string descriptor 0 read error: -22 [ 1384.528021][T19298] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1384.553650][T19298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.570881][T24729] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4756'. [ 1384.595924][T19298] usb 1-1: 0:2 : does not exist [ 1384.764462][ T30] kauditd_printk_skb: 249 callbacks suppressed [ 1384.764474][ T30] audit: type=1400 audit(1321.095:44246): avc: denied { execmem } for pid=24730 comm="syz.7.4757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1384.875458][T24733] /dev/nullb0: Can't open blockdev [ 1385.285962][ T7313] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1385.296911][ T30] audit: type=1400 audit(1321.189:44247): avc: denied { ioctl } for pid=24717 comm="syz.6.4754" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1385.322056][ T30] audit: type=1400 audit(1321.292:44249): avc: denied { mounton } for pid=24730 comm="syz.7.4757" path="/101" dev="tmpfs" ino=554 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1385.350198][ T30] audit: type=1400 audit(1321.310:44250): avc: denied { create } for pid=24730 comm="syz.7.4757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1385.387919][ T30] audit: type=1400 audit(1321.329:44251): avc: denied { execmem } for pid=24730 comm="syz.7.4757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1385.408587][ T30] audit: type=1400 audit(1321.236:44248): avc: denied { ioctl } for pid=24714 comm="syz.0.4752" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1385.437824][ T30] audit: type=1400 audit(1321.694:44252): avc: denied { ioctl } for pid=24714 comm="syz.0.4752" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1385.463287][ T30] audit: type=1400 audit(1321.722:44253): avc: denied { ioctl } for pid=24717 comm="syz.6.4754" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1385.473845][ T7313] usb 7-1: Using ep0 maxpacket: 16 [ 1385.507427][ T7313] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1385.522350][ T30] audit: type=1400 audit(1321.900:44254): avc: denied { read write } for pid=14240 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1385.610455][ T30] audit: type=1400 audit(1321.900:44255): avc: denied { open } for pid=14240 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1385.653033][ T7313] usb 7-1: config 3 has an invalid interface number: 31 but max is 0 [ 1385.679186][ T7313] usb 7-1: config 3 has no interface number 0 [ 1385.697061][ T7313] usb 7-1: config 3 interface 31 has no altsetting 0 [ 1385.715671][ T7313] usb 7-1: New USB device found, idVendor=0421, idProduct=04d8, bcdDevice=27.78 [ 1385.732807][ T7313] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.768797][ T7313] usb 7-1: Product: syz [ 1385.798319][ T7313] usb 7-1: Manufacturer: syz [ 1385.827624][ T7313] usb 7-1: SerialNumber: syz [ 1386.621027][T19298] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1386.635674][T19298] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1386.646962][T19298] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 1386.679990][T19298] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1386.694088][ T7313] rndis_host 7-1:3.31: invalid descriptor buffer length [ 1386.705294][T19298] usb 1-1: USB disconnect, device number 57 [ 1386.737361][ T7313] rndis_host 7-1:3.31: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 1386.832012][ T7313] cdc_acm 7-1:3.31: invalid descriptor buffer length [ 1386.868117][ T7313] usb 7-1: USB disconnect, device number 64 [ 1388.629275][T24763] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4763'. [ 1388.697878][T24760] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4765'. [ 1389.745283][T24792] netlink: 'syz.1.4772': attribute type 2 has an invalid length. [ 1389.767501][T24792] netlink: 'syz.1.4772': attribute type 2 has an invalid length. [ 1389.872114][T24796] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1389.983056][ T7313] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1390.113450][ T30] kauditd_printk_skb: 234 callbacks suppressed [ 1390.113466][ T30] audit: type=1400 audit(1326.205:44490): avc: denied { ioctl } for pid=24795 comm="syz.2.4774" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1390.151486][ T30] audit: type=1400 audit(1326.233:44491): avc: denied { read } for pid=24795 comm="syz.2.4774" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1390.183031][ T7313] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1390.197126][ T30] audit: type=1400 audit(1326.233:44492): avc: denied { open } for pid=24795 comm="syz.2.4774" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1390.202950][T24799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.220436][ T7313] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1390.232981][T24799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1390.246393][ T7313] usb 7-1: config 0 has no interface number 0 [ 1390.253208][ T30] audit: type=1400 audit(1326.233:44493): avc: denied { ioctl } for pid=24795 comm="syz.2.4774" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1390.277760][ T7313] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1390.289819][ T7313] usb 7-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1390.299825][ T7313] usb 7-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 1390.309141][ T30] audit: type=1400 audit(1326.261:44494): avc: denied { ioctl } for pid=24788 comm="syz.6.4773" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1390.333903][ T7313] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.345267][ T30] audit: type=1400 audit(1326.261:44495): avc: denied { ioctl } for pid=24788 comm="syz.6.4773" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1390.370728][ T7313] usb 7-1: config 0 descriptor?? [ 1390.375942][ T30] audit: type=1400 audit(1326.261:44496): avc: denied { ioctl } for pid=24788 comm="syz.6.4773" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1390.408792][ T30] audit: type=1400 audit(1326.280:44497): avc: denied { ioctl } for pid=24788 comm="syz.6.4773" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1390.470670][ T30] audit: type=1400 audit(1326.280:44498): avc: denied { read write } for pid=24795 comm="syz.2.4774" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1390.496719][ T30] audit: type=1400 audit(1326.280:44499): avc: denied { read write open } for pid=24795 comm="syz.2.4774" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1390.694328][ T7313] usb 7-1: USB disconnect, device number 65 [ 1391.532497][ T7313] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1391.694015][ T7313] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1391.707792][ T7313] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1391.718154][ T7313] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1391.728159][ T7313] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.741123][T24810] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1391.754578][ T7313] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1391.891875][T24812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4779'. [ 1391.978930][ T7313] usb 7-1: USB disconnect, device number 66 [ 1392.878863][T19298] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1393.075347][T19298] usb 1-1: config 3 has an invalid interface number: 168 but max is 0 [ 1393.108382][T19298] usb 1-1: config 3 has no interface number 0 [ 1393.130579][T19298] usb 1-1: config 3 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1393.147297][T19298] usb 1-1: config 3 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 30768, setting to 1024 [ 1393.159894][T19298] usb 1-1: config 3 interface 168 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 1393.170882][T19298] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 1393.185373][T19298] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.206867][T24824] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1393.558700][T24824] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4783'. [ 1393.595166][ T7306] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1393.635571][T19298] usb 1-1: string descriptor 0 read error: -71 [ 1393.652511][T19298] keyspan 1-1:3.168: Keyspan 2 port adapter converter detected [ 1393.666704][T19298] keyspan 1-1:3.168: found no endpoint descriptor for endpoint 1 [ 1393.695851][T19298] keyspan 1-1:3.168: found no endpoint descriptor for endpoint 84 [ 1393.717690][T19298] keyspan 1-1:3.168: found no endpoint descriptor for endpoint 2 [ 1393.747301][T19298] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1393.786073][T19298] keyspan 1-1:3.168: found no endpoint descriptor for endpoint 88 [ 1393.802970][ T7306] usb 7-1: config 0 has no interfaces? [ 1393.820349][T19298] keyspan 1-1:3.168: found no endpoint descriptor for endpoint 6 [ 1393.823587][ T7306] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1393.861693][ T7306] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1393.898494][T19298] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1393.907651][ T7306] usb 7-1: config 0 descriptor?? [ 1393.947846][T19298] usb 1-1: USB disconnect, device number 58 [ 1393.998027][T19298] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1394.084224][T19298] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1394.137317][T19298] keyspan 1-1:3.168: device disconnected [ 1395.487737][ T30] kauditd_printk_skb: 269 callbacks suppressed [ 1395.487759][ T30] audit: type=1400 audit(1331.090:44769): avc: denied { module_request } for pid=24844 comm="syz.6.4790" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1395.567418][T24846] overlayfs: workdir and upperdir must reside under the same mount [ 1395.630112][ T30] audit: type=1400 audit(1331.202:44770): avc: denied { read write } for pid=18789 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1395.680692][T24875] netlink: 68 bytes leftover after parsing attributes in process `syz.7.4799'. [ 1395.700943][ T30] audit: type=1400 audit(1331.258:44771): avc: denied { open } for pid=18789 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1395.728064][T24875] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4799'. [ 1395.790673][ T30] audit: type=1400 audit(1331.277:44772): avc: denied { ioctl } for pid=18789 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1395.817285][ T30] audit: type=1400 audit(1331.295:44773): avc: denied { read write } for pid=22387 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1395.847533][T19298] usb 7-1: USB disconnect, device number 67 [ 1395.908667][ T30] audit: type=1400 audit(1331.295:44774): avc: denied { read write open } for pid=22387 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1395.935666][ T7289] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1395.965740][ T30] audit: type=1400 audit(1331.295:44775): avc: denied { ioctl } for pid=22387 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1396.016379][ T30] audit: type=1400 audit(1331.305:44776): avc: denied { mounton } for pid=24844 comm="syz.6.4790" path="/396/bus" dev="tmpfs" ino=2199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1396.042026][ T30] audit: type=1400 audit(1331.361:44777): avc: denied { create } for pid=24844 comm="syz.6.4790" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1396.138178][ T7289] usb 1-1: Using ep0 maxpacket: 32 [ 1396.229191][ T7289] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1396.230459][ T30] audit: type=1400 audit(1331.361:44778): avc: denied { create } for pid=24872 comm="syz.0.4798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1396.274379][ T7289] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1396.285836][ T7289] usb 1-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 1396.296172][ T7289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.305749][ T7289] usb 1-1: Product: syz [ 1396.310105][ T7289] usb 1-1: Manufacturer: syz [ 1396.314720][ T7289] usb 1-1: SerialNumber: syz [ 1396.550145][T24874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.569930][T24874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1396.835914][T24874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1396.941946][T24874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1397.110851][T24874] loop4: detected capacity change from 0 to 2640 [ 1397.199346][T24874] buffer_io_error: 330 callbacks suppressed [ 1397.199366][T24874] Buffer I/O error on dev loop4, logical block 0, async page read [ 1397.335722][T24874] Buffer I/O error on dev loop4, logical block 0, async page read [ 1397.589397][T24874] Buffer I/O error on dev loop4, logical block 0, async page read [ 1397.602545][T24874] Buffer I/O error on dev loop4, logical block 0, async page read [ 1397.626306][T24874] Buffer I/O error on dev loop4, logical block 0, async page read [ 1397.675256][T24874] Buffer I/O error on dev loop4, logical block 0, async page read [ 1397.713963][T24874] Buffer I/O error on dev loop4, logical block 0, async page read [ 1397.743851][T24874] Buffer I/O error on dev loop4, logical block 0, async page read [ 1397.780239][T24874] ldm_validate_partition_table(): Disk read failed. [ 1397.803009][T24874] Buffer I/O error on dev loop4, logical block 0, async page read [ 1397.842143][T24874] Buffer I/O error on dev loop4, logical block 0, async page read [ 1397.874566][T24874] Dev loop4: unable to read RDB block 0 [ 1397.895698][T24874] loop4: unable to read partition table [ 1397.911739][T24874] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1397.956859][T24910] FAULT_INJECTION: forcing a failure. [ 1397.956859][T24910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1398.005487][T24910] CPU: 1 UID: 0 PID: 24910 Comm: syz.2.4809 Tainted: G L syzkaller #0 PREEMPT(full) [ 1398.005515][T24910] Tainted: [L]=SOFTLOCKUP [ 1398.005521][T24910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1398.005531][T24910] Call Trace: [ 1398.005537][T24910] [ 1398.005543][T24910] dump_stack_lvl+0x100/0x190 [ 1398.005568][T24910] should_fail_ex.cold+0x5/0xa [ 1398.005592][T24910] _copy_from_user+0x2e/0xd0 [ 1398.005618][T24910] copy_msghdr_from_user+0x9f/0x4f0 [ 1398.005642][T24910] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1398.005676][T24910] ___sys_sendmsg+0x106/0x1e0 [ 1398.005699][T24910] ? __pfx____sys_sendmsg+0x10/0x10 [ 1398.005751][T24910] __sys_sendmsg+0x170/0x220 [ 1398.005779][T24910] ? __pfx___sys_sendmsg+0x10/0x10 [ 1398.005817][T24910] ? rcu_is_watching+0x12/0xc0 [ 1398.005854][T24910] do_syscall_64+0x10b/0xf80 [ 1398.005874][T24910] ? clear_bhb_loop+0x40/0x90 [ 1398.005896][T24910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.005915][T24910] RIP: 0033:0x7f52b1d9cdd9 [ 1398.005930][T24910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1398.005950][T24910] RSP: 002b:00007f52b2baa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1398.005967][T24910] RAX: ffffffffffffffda RBX: 00007f52b2015fa0 RCX: 00007f52b1d9cdd9 [ 1398.005979][T24910] RDX: 0000000014044040 RSI: 0000200000000280 RDI: 0000000000000003 [ 1398.005990][T24910] RBP: 00007f52b2baa090 R08: 0000000000000000 R09: 0000000000000000 [ 1398.006001][T24910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1398.006011][T24910] R13: 00007f52b2016038 R14: 00007f52b2015fa0 R15: 00007ffd576e81e8 [ 1398.006034][T24910] [ 1398.013060][ T7289] usb 1-1: 0:1 : does not exist [ 1398.603001][ T7289] usb 1-1: unit 8 not found! [ 1398.855038][ T7289] usb 1-1: USB disconnect, device number 59 [ 1398.939870][T21326] udevd[21326]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1400.413279][T24921] 9pnet_virtio: no channels available for device syz [ 1400.860711][ T30] kauditd_printk_skb: 280 callbacks suppressed [ 1400.860728][ T30] audit: type=1400 audit(1336.255:45059): avc: denied { create } for pid=24931 comm="syz.2.4818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1400.887780][ T30] audit: type=1400 audit(1336.274:45060): avc: denied { name_bind } for pid=24934 comm="syz.7.4817" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1400.932694][ T30] audit: type=1400 audit(1336.274:45061): avc: denied { node_bind } for pid=24934 comm="syz.7.4817" saddr=224.0.0.2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1400.958801][ T30] audit: type=1400 audit(1336.302:45062): avc: denied { read } for pid=24929 comm="syz.6.4816" name="comedi0" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1401.008986][ T30] audit: type=1400 audit(1336.302:45063): avc: denied { read open } for pid=24929 comm="syz.6.4816" path="/dev/comedi0" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1401.158337][ T30] audit: type=1400 audit(1336.302:45064): avc: denied { allowed } for pid=24931 comm="syz.2.4818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1401.291683][ T30] audit: type=1400 audit(1336.311:45065): avc: denied { create } for pid=24931 comm="syz.2.4818" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1401.431983][ T30] audit: type=1400 audit(1336.321:45066): avc: denied { create } for pid=24934 comm="syz.7.4817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1401.584373][ T30] audit: type=1400 audit(1336.339:45067): avc: denied { read append } for pid=24934 comm="syz.7.4817" name="comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1401.813169][ T30] audit: type=1400 audit(1336.339:45068): avc: denied { open } for pid=24934 comm="syz.7.4817" path="/dev/comedi3" dev="devtmpfs" ino=1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1401.933892][T24945] syzkaller1: entered promiscuous mode [ 1401.939459][T24945] syzkaller1: entered allmulticast mode [ 1401.961590][T24945] vivid-000: ================= START STATUS ================= [ 1401.981302][T24945] vivid-000: Test Pattern: 75% Colorbar [ 1402.015420][T24945] vivid-000: Fill Percentage of Frame: 100 [ 1402.018430][T24949] netlink: 'syz.6.4819': attribute type 2 has an invalid length. [ 1402.023330][T24945] vivid-000: Horizontal Movement: No Movement [ 1402.056670][T24945] vivid-000: Vertical Movement: No Movement [ 1402.163972][T24945] vivid-000: OSD Text Mode: All [ 1402.226380][T24945] vivid-000: Show Border: false [ 1402.242233][T24945] vivid-000: Show Square: false [ 1402.314708][T24945] vivid-000: Sensor Flipped Horizontally: false [ 1402.321256][T24945] vivid-000: Sensor Flipped Vertically: false [ 1402.327888][T24945] vivid-000: Insert SAV Code in Image: false [ 1402.334458][T24945] vivid-000: Insert EAV Code in Image: false [ 1402.343286][T24945] vivid-000: Insert Video Guard Band: false [ 1402.353353][T24945] vivid-000: Reduced Framerate: false [ 1402.363822][T24945] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1402.373683][T24945] vivid-000: S-Video 000-0 Is Connected To: None [ 1402.381415][T24945] vivid-000: Enable Capture Cropping: true [ 1402.387786][T24945] vivid-000: Enable Capture Composing: true [ 1402.396420][T24945] vivid-000: Enable Capture Scaler: true [ 1402.404479][T24945] vivid-000: Timestamp Source: End of Frame [ 1402.404623][T24958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4824'. [ 1402.410445][T24945] vivid-000: Colorspace: sRGB [ 1402.424809][T24945] vivid-000: Transfer Function: Default [ 1402.430551][T24945] vivid-000: Y'CbCr Encoding: Default [ 1402.436120][T24945] vivid-000: HSV Encoding: Hue 0-179 [ 1402.441622][T24945] vivid-000: Quantization: Default [ 1402.447237][T24945] vivid-000: Apply Alpha To Red Only: false [ 1402.453328][T24945] vivid-000: Standard Aspect Ratio: 4x3 [ 1402.464268][T24945] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1402.472661][T24945] vivid-000: DV Timings: 640x480p59 inactive [ 1402.479708][T24945] vivid-000: DV Timings Aspect Ratio: 16x9 [ 1402.487769][T24945] vivid-000: Maximum EDID Blocks: 2 [ 1402.493121][T24945] vivid-000: Limited RGB Range (16-235): false [ 1402.500523][T24945] vivid-000: Rx RGB Quantization Range: RGB Full Range (0-255) [ 1402.510373][T24945] vivid-000: Power Present: 0x00000001 [ 1402.515937][T24945] tpg source WxH: 1920x1080 (Y'CbCr) [ 1402.521543][T24945] tpg field: 1 [ 1402.527516][T24945] tpg crop: (0,0)/1920x1080 [ 1402.532140][T24945] tpg compose: (0,0)/1920x1080 [ 1402.537212][T24945] tpg colorspace: 8 [ 1402.541125][T24945] tpg transfer function: 0/2 [ 1402.545701][T24945] tpg Y'CbCr encoding: 0/1 [ 1402.550303][T24945] tpg quantization: 0/2 [ 1402.554468][T24945] tpg RGB range: 0/2 [ 1402.558364][T24945] vivid-000: ================== END STATUS ================== [ 1402.808633][T24962] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4825'. [ 1402.839658][T24962] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4825'. [ 1404.580951][T24997] CIFS: VFS: UNC: path must begin with // or \\ [ 1404.587488][T24997] CIFS: VFS: Malformed UNC in devname [ 1406.327940][ T30] kauditd_printk_skb: 156 callbacks suppressed [ 1406.327958][ T30] audit: type=1400 audit(1341.374:45225): avc: denied { read write } for pid=22387 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1406.395617][T25007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4838'. [ 1406.453432][ T30] audit: type=1400 audit(1341.374:45226): avc: denied { read write open } for pid=22387 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1406.539423][ T30] audit: type=1400 audit(1341.374:45227): avc: denied { ioctl } for pid=22387 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1406.665226][ T30] audit: type=1400 audit(1341.402:45228): avc: denied { create } for pid=25006 comm="syz.1.4838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1406.693164][T25021] netlink: 165 bytes leftover after parsing attributes in process `syz.1.4841'. [ 1406.727234][ T30] audit: type=1400 audit(1341.402:45229): avc: denied { write } for pid=25006 comm="syz.1.4838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1406.787445][ T30] audit: type=1400 audit(1341.411:45230): avc: denied { create } for pid=25008 comm="syz.7.4837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1407.657657][ T30] audit: type=1400 audit(1341.421:45231): avc: denied { shutdown } for pid=25008 comm="syz.7.4837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1407.692011][T25021] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1407.709366][T25022] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1407.717004][T25022] audit: audit_lost=180 audit_rate_limit=0 audit_backlog_limit=64 [ 1407.915555][ T5720] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1408.087036][ T5720] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1408.113074][ T5720] usb 1-1: config 0 has no interface number 0 [ 1408.131156][ T5720] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1408.155886][ T5720] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1408.449952][ T7289] IPVS: starting estimator thread 0... [ 1408.485696][ T5720] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1408.521671][ T5720] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1408.543480][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.582680][ T5720] usb 1-1: config 0 descriptor?? [ 1408.620241][T25037] IPVS: using max 47 ests per chain, 112800 per kthread [ 1408.626476][T25043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.640152][T25043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1408.768052][T25044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1408.779952][T25044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.357574][ T5720] input: HID 28bd:0042 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0042.0030/input/input95 [ 1409.384624][ T5720] uclogic 0003:28BD:0042.0030: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.0-1/input1 [ 1409.520514][T25052] IPVS: ip_vs_add_dest(): server weight less than zero [ 1409.542984][T25052] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4849'. [ 1409.562789][ T5720] usb 1-1: USB disconnect, device number 60 [ 1409.598922][T25050] fido_id[25050]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1409.623733][T25056] netlink: 'syz.6.4849': attribute type 10 has an invalid length. [ 1409.643005][T25052] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1409.667365][T25056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.674735][T25056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.739591][T25058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4851'. [ 1409.985340][T25063] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048) [ 1410.073150][ T7289] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1410.248754][ T7289] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.273329][ T7289] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=dc.df [ 1410.293301][ T7289] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.316912][ T7289] usb 7-1: config 0 descriptor?? [ 1410.332611][ T7289] pwc: Askey VC010 type 2 USB webcam detected. [ 1410.582431][T25072] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4858'. [ 1410.900917][ T7289] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1410.908415][ T7289] pwc: recv_control_msg error -32 req 02 val 2700 [ 1410.923166][ T7289] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1411.942228][ T30] kauditd_printk_skb: 237 callbacks suppressed [ 1411.942247][ T30] audit: type=1400 audit(1345.707:45466): avc: denied { execmem } for pid=25079 comm="syz.7.4859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1411.973670][ T30] audit: type=1400 audit(1345.997:45467): avc: denied { read } for pid=25079 comm="syz.7.4859" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1412.026269][ T30] audit: type=1400 audit(1345.997:45468): avc: denied { open } for pid=25079 comm="syz.7.4859" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1412.068582][ T7289] pwc: recv_control_msg error -71 req 04 val 1300 [ 1412.115383][ T7289] pwc: recv_control_msg error -71 req 04 val 1400 [ 1412.131572][T25084] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 1412.138113][T25084] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1412.138671][ T7289] pwc: recv_control_msg error -71 req 02 val 2000 [ 1412.162295][T25085] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 1412.163940][ T30] audit: type=1400 audit(1346.147:45469): avc: denied { create } for pid=25079 comm="syz.7.4859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1412.168824][T25085] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1412.178115][T25085] vhci_hcd vhci_hcd.0: Device attached [ 1412.206331][ T7289] pwc: recv_control_msg error -71 req 02 val 2100 [ 1412.212372][T25084] vhci_hcd vhci_hcd.0: Device attached [ 1412.232995][ T7289] pwc: recv_control_msg error -71 req 04 val 1500 [ 1412.256005][ T7289] pwc: recv_control_msg error -71 req 02 val 2500 [ 1412.262508][ T30] audit: type=1400 audit(1346.147:45470): avc: denied { write } for pid=25079 comm="syz.7.4859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1412.286130][T25087] vhci_hcd: connection closed [ 1412.288413][ T48] vhci_hcd vhci_hcd.2: stop threads [ 1412.299483][ T48] vhci_hcd vhci_hcd.2: release socket [ 1412.304895][ T48] vhci_hcd vhci_hcd.2: disconnect device [ 1412.306130][ T7289] pwc: recv_control_msg error -71 req 02 val 2400 [ 1412.313411][T25086] vhci_hcd: connection closed [ 1412.330415][ T48] vhci_hcd vhci_hcd.2: stop threads [ 1412.334881][ T7289] pwc: recv_control_msg error -71 req 02 val 2600 [ 1412.345087][ T48] vhci_hcd vhci_hcd.2: release socket [ 1412.349953][ T30] audit: type=1400 audit(1346.156:45471): avc: denied { read } for pid=25079 comm="syz.7.4859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1412.376130][ T48] vhci_hcd vhci_hcd.2: disconnect device [ 1412.402593][ T7289] pwc: recv_control_msg error -71 req 02 val 2900 [ 1412.410601][ T7289] pwc: recv_control_msg error -71 req 02 val 2800 [ 1412.429685][T25094] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4862'. [ 1412.430860][ T30] audit: type=1400 audit(1346.774:45472): avc: denied { read write } for pid=14240 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1412.465654][ T7289] pwc: recv_control_msg error -71 req 04 val 1100 [ 1412.543505][ T7289] pwc: recv_control_msg error -71 req 04 val 1200 [ 1412.970046][ T7289] pwc: Registered as video103. [ 1412.976700][ T7289] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input96 [ 1413.017896][ T30] audit: type=1400 audit(1346.774:45473): avc: denied { open } for pid=14240 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1413.071756][ T7289] usb 7-1: USB disconnect, device number 68 [ 1413.134756][ T30] audit: type=1400 audit(1346.774:45474): avc: denied { ioctl } for pid=14240 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1413.172267][ T30] audit: type=1400 audit(1346.914:45475): avc: denied { create } for pid=25090 comm="syz.1.4862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1413.604383][T21326] udevd[21326]: setting mode of /dev/input/event5 to 020660 failed: No such file or directory [ 1413.658394][T21326] udevd[21326]: setting owner of /dev/input/event5 to uid=0, gid=104 failed: No such file or directory [ 1413.872761][T25129] /dev/nullb0: Can't open blockdev [ 1414.457160][T25153] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4883'. [ 1415.856707][T21326] udevd[21326]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1415.939425][ T7310] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1415.977054][T21157] udevd[21157]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1416.438873][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1416.460111][ T48] Bluetooth: hci1: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1416.493379][ T48] Bluetooth: hci1: Frame reassembly failed (-84) [ 1416.518393][ T7310] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.528696][ T7310] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=dc.df [ 1416.538025][ T7310] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.557363][ T7310] usb 7-1: config 0 descriptor?? [ 1416.572359][ T7310] pwc: Askey VC010 type 2 USB webcam detected. [ 1416.951752][T25176] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4888'. [ 1417.002479][ T7310] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1417.015279][ T7310] pwc: recv_control_msg error -32 req 02 val 2700 [ 1417.035528][ T7310] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1417.054907][ T7310] pwc: recv_control_msg error -32 req 04 val 1000 [ 1417.067091][ T7310] pwc: recv_control_msg error -71 req 04 val 1300 [ 1417.075307][ T7310] pwc: recv_control_msg error -71 req 04 val 1400 [ 1417.082245][ T7310] pwc: recv_control_msg error -71 req 02 val 2000 [ 1417.091403][ T7310] pwc: recv_control_msg error -71 req 02 val 2100 [ 1417.109840][ T7310] pwc: recv_control_msg error -71 req 04 val 1500 [ 1417.126471][ T7310] pwc: recv_control_msg error -71 req 02 val 2500 [ 1417.138007][ T7310] pwc: recv_control_msg error -71 req 02 val 2400 [ 1417.150768][ T7310] pwc: recv_control_msg error -71 req 02 val 2600 [ 1417.163907][ T7310] pwc: recv_control_msg error -71 req 02 val 2900 [ 1417.184202][ T7310] pwc: recv_control_msg error -71 req 02 val 2800 [ 1417.208183][ T7310] pwc: recv_control_msg error -71 req 04 val 1100 [ 1417.216400][ T7310] pwc: recv_control_msg error -71 req 04 val 1200 [ 1417.274767][ T7310] pwc: Registered as video103. [ 1417.359497][ T7310] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input97 [ 1417.365106][ T30] kauditd_printk_skb: 268 callbacks suppressed [ 1417.365121][ T30] audit: type=1400 audit(1351.686:45744): avc: denied { ioctl } for pid=25182 comm="syz.7.4891" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1417.432179][ T7310] usb 7-1: USB disconnect, device number 69 [ 1417.463316][ T30] audit: type=1400 audit(1351.780:45745): avc: denied { read } for pid=4963 comm="acpid" name="event5" dev="devtmpfs" ino=5304 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1417.507027][ T30] audit: type=1400 audit(1351.780:45746): avc: denied { open } for pid=4963 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=5304 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1417.534405][ T30] audit: type=1400 audit(1351.780:45747): avc: denied { ioctl } for pid=4963 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=5304 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1417.560724][ T30] audit: type=1400 audit(1351.780:45748): avc: denied { create } for pid=25188 comm="syz.1.4892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1417.775556][ T30] audit: type=1400 audit(1351.780:45749): avc: denied { write } for pid=25188 comm="syz.1.4892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1417.812145][T25193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1417.820161][ T30] audit: type=1400 audit(1351.780:45750): avc: denied { read } for pid=25188 comm="syz.1.4892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1417.844093][ T30] audit: type=1400 audit(1351.789:45751): avc: denied { read } for pid=25188 comm="syz.1.4892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1417.868499][ T30] audit: type=1400 audit(1351.817:45752): avc: denied { read } for pid=4963 comm="acpid" name="event5" dev="devtmpfs" ino=5304 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1417.892564][ T30] audit: type=1400 audit(1351.817:45753): avc: denied { open } for pid=4963 comm="acpid" path="/dev/input/event5" dev="devtmpfs" ino=5304 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1418.324524][T25186] orangefs_mount: mount request failed with -4 [ 1418.485123][T21394] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1418.499108][T18080] Bluetooth: hci1: command 0x1003 tx timeout [ 1419.050230][T25207] vivid-000: disconnect [ 1419.376401][T25202] vivid-000: reconnect [ 1419.541857][T25214] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4896'. [ 1420.010085][T25224] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4904'. [ 1420.182680][T25226] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4905'. [ 1420.467061][T25236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1420.508259][T25229] overlayfs: failed to clone upperpath [ 1421.496109][ T7310] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1421.702990][ T7310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1421.729466][ T7310] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1421.756632][ T7310] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1421.804755][ T7310] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1421.841852][ T7310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.857999][ T7310] usb 1-1: config 0 descriptor?? [ 1422.043490][T25268] tipc: Resetting bearer [ 1422.093231][T25272] netlink: 'syz.1.4921': attribute type 64 has an invalid length. [ 1422.117859][T25267] tipc: Resetting bearer [ 1422.280198][T25273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.289979][T25273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.540181][T25248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1422.554745][T25248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1422.723693][ T30] kauditd_printk_skb: 292 callbacks suppressed [ 1422.723710][ T30] audit: type=1400 audit(1356.627:46046): avc: denied { execmem } for pid=25277 comm="syz.6.4923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1422.750256][ T30] audit: type=1400 audit(1356.693:46047): avc: denied { prog_load } for pid=25247 comm="syz.0.4911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1422.769419][ T30] audit: type=1400 audit(1356.693:46048): avc: denied { bpf } for pid=25247 comm="syz.0.4911" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1422.796858][ T30] audit: type=1400 audit(1356.693:46049): avc: denied { perfmon } for pid=25247 comm="syz.0.4911" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1422.856520][ T30] audit: type=1400 audit(1356.693:46050): avc: denied { prog_run } for pid=25247 comm="syz.0.4911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1422.932288][ T7310] plantronics 0003:047F:FFFF.0031: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1423.237542][T25282] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 1423.249847][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.258483][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.267875][ T30] audit: type=1400 audit(1356.768:46051): avc: denied { getopt } for pid=25247 comm="syz.0.4911" lport=50974 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1423.299604][ T30] audit: type=1400 audit(1356.768:46052): avc: denied { ioctl } for pid=25247 comm="syz.0.4911" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1423.326664][ T30] audit: type=1400 audit(1356.787:46053): avc: denied { ioctl } for pid=25247 comm="syz.0.4911" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1423.353385][ T30] audit: type=1400 audit(1356.861:46054): avc: denied { create } for pid=25277 comm="syz.6.4923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1423.374749][ T48] tipc: Resetting bearer [ 1423.384617][ T30] audit: type=1400 audit(1356.871:46055): avc: denied { write } for pid=25277 comm="syz.6.4923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1424.478371][ T5720] usb 1-1: reset high-speed USB device number 61 using dummy_hcd [ 1424.689370][T25314] ip6t_srh: unknown srh invflags 4000 [ 1424.852979][T25315] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1424.871762][T25315] /dev/nullb0: Can't open blockdev [ 1425.156743][T25322] [U] ^@ [ 1425.338276][ T7289] usb 1-1: USB disconnect, device number 61 [ 1425.457724][T25330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.488411][T25330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.930809][ T5720] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1426.101813][ T5720] usb 1-1: Using ep0 maxpacket: 32 [ 1426.110202][ T5720] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 1426.124917][ T5720] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1426.133932][ T5720] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1426.151090][T25337] nbd6: detected capacity change from 0 to 63 [ 1426.152207][ T5720] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1426.184470][T25338] block nbd6: NBD_DISCONNECT [ 1426.405266][T25337] xt_hashlimit: size too large, truncated to 1048576 [ 1426.412440][ T5720] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1426.413269][ T7313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1426.437480][ T7310] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1426.453262][T25338] block nbd6: Disconnected due to user request. [ 1426.458138][ T5720] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1426.529649][ T5720] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1426.557381][T25338] block nbd6: shutting down sockets [ 1426.571097][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.615753][ C1] blk_print_req_error: 330 callbacks suppressed [ 1426.615771][ C1] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1426.617996][ T5720] usb 1-1: config 0 descriptor?? [ 1426.622137][ C1] buffer_io_error: 11 callbacks suppressed [ 1426.622152][ C1] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1426.653099][ C1] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1426.662231][ C1] Buffer I/O error on dev nbd6, logical block 1, async page read [ 1426.670197][ C1] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1426.679275][ C1] Buffer I/O error on dev nbd6, logical block 2, async page read [ 1426.690777][ C1] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1426.699848][ C1] Buffer I/O error on dev nbd6, logical block 3, async page read [ 1426.708929][T21157] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1426.718457][T21157] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1426.726973][T21157] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1426.736384][T21157] Buffer I/O error on dev nbd6, logical block 1, async page read [ 1426.757357][T21157] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1426.767015][T21157] Buffer I/O error on dev nbd6, logical block 2, async page read [ 1426.779239][T21157] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1426.796419][T21157] Buffer I/O error on dev nbd6, logical block 3, async page read [ 1426.817130][T21157] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1426.828849][T21157] Buffer I/O error on dev nbd6, logical block 0, async page read [ 1426.870308][T21157] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1426.899056][T21157] Buffer I/O error on dev nbd6, logical block 1, async page read [ 1426.909034][T21157] ldm_validate_partition_table(): Disk read failed. [ 1426.917141][T21157] Dev nbd6: unable to read RDB block 0 [ 1426.924070][T21157] nbd6: unable to read partition table [ 1426.935062][ T5720] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 62 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1426.952652][T21157] ldm_validate_partition_table(): Disk read failed. [ 1426.981877][T21157] Dev nbd6: unable to read RDB block 0 [ 1427.001413][T21157] nbd6: unable to read partition table [ 1427.147400][T25359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1427.171466][ T7291] usb 1-1: USB disconnect, device number 62 [ 1427.197854][T25359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1427.217036][ T7291] usblp0: removed [ 1427.747518][ T5720] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1427.917651][ T5720] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1427.949605][ T5720] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.982757][ T5720] usb 7-1: config 0 descriptor?? [ 1428.088348][ T30] kauditd_printk_skb: 311 callbacks suppressed [ 1428.088366][ T30] audit: type=1400 audit(1361.737:46365): avc: denied { create } for pid=25378 comm="syz.2.4953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1428.152245][ T30] audit: type=1400 audit(1361.784:46366): avc: denied { read write } for pid=14240 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1428.177504][ T30] audit: type=1400 audit(1361.784:46367): avc: denied { open } for pid=14240 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1428.229427][ T30] audit: type=1400 audit(1361.784:46368): avc: denied { ioctl } for pid=14240 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1428.273024][T25367] netlink: 292 bytes leftover after parsing attributes in process `syz.6.4948'. [ 1428.284207][ T30] audit: type=1400 audit(1361.821:46369): avc: denied { read write } for pid=25380 comm="syz.2.4954" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1428.315261][T25367] netlink: 'syz.6.4948': attribute type 9 has an invalid length. [ 1428.315383][ T30] audit: type=1400 audit(1361.821:46370): avc: denied { open } for pid=25380 comm="syz.2.4954" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1428.324671][T25383] fuse: fd is not a fuse device [ 1428.346160][ T30] audit: type=1400 audit(1361.821:46371): avc: denied { mounton } for pid=25380 comm="syz.2.4954" path="/540/file0" dev="tmpfs" ino=2917 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1428.373541][ T30] audit: type=1400 audit(1361.821:46372): avc: denied { mount } for pid=25380 comm="syz.2.4954" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1428.388296][T25367] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4948'. [ 1428.396446][ T30] audit: type=1400 audit(1361.859:46373): avc: denied { ioctl } for pid=25366 comm="syz.6.4948" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1428.429188][ T30] audit: type=1400 audit(1361.859:46374): avc: denied { create } for pid=25366 comm="syz.6.4948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1428.570311][T25367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1428.571973][T25387] binder: BINDER_SET_CONTEXT_MGR already set [ 1428.597677][T25387] binder: 25385:25387 ioctl 4018620d 200000000040 returned -16 [ 1428.606663][T25367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1428.697522][ T5720] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1428.726672][ T5720] [drm:udl_init] *ERROR* Selecting channel failed [ 1429.103861][ T5720] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1429.127202][ T5720] [drm] Initialized udl on minor 2 [ 1429.144772][ T5720] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1429.245125][T25402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1429.267611][T25402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1429.325881][ T5720] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1429.370983][ T5720] usb 7-1: USB disconnect, device number 70 [ 1429.385521][ T7291] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1429.419159][ T7291] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1429.928795][T25417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1430.011090][T25420] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4966'. [ 1430.682735][T25438] netlink: 'syz.6.4974': attribute type 3 has an invalid length. [ 1431.984742][T25451] 9p: Bad value for 'wfdno' [ 1432.040123][T25451] /dev/nullb0: Can't open blockdev [ 1433.297018][T25462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.324145][T25462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.464493][ T7310] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1433.477106][ T30] kauditd_printk_skb: 338 callbacks suppressed [ 1433.477121][ T30] audit: type=1400 audit(1366.781:46713): avc: denied { ioctl } for pid=25459 comm="syz.6.4979" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1433.536680][ T30] audit: type=1400 audit(1366.809:46714): avc: denied { ioctl } for pid=25459 comm="syz.6.4979" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1433.667542][ T7310] usb 7-1: Using ep0 maxpacket: 32 [ 1433.674157][ T7310] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1433.696210][ T7310] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1433.708821][ T7310] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1433.727793][ T7310] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.747930][ T7310] usb 7-1: config 0 descriptor?? [ 1433.760337][ T30] audit: type=1400 audit(1367.043:46715): avc: denied { ioctl } for pid=25459 comm="syz.6.4979" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1434.002157][ T30] audit: type=1400 audit(1367.268:46716): avc: denied { prog_load } for pid=25459 comm="syz.6.4979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1434.063240][ T30] audit: type=1400 audit(1367.268:46717): avc: denied { bpf } for pid=25459 comm="syz.6.4979" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1434.111800][ T30] audit: type=1400 audit(1367.268:46718): avc: denied { prog_load } for pid=25459 comm="syz.6.4979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1434.131494][ T30] audit: type=1400 audit(1367.268:46719): avc: denied { perfmon } for pid=25459 comm="syz.6.4979" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1434.155196][T25470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1434.164433][T25470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.172286][ T30] audit: type=1400 audit(1367.268:46720): avc: denied { bpf } for pid=25459 comm="syz.6.4979" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1434.199287][ T30] audit: type=1400 audit(1367.277:46721): avc: denied { prog_run } for pid=25459 comm="syz.6.4979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1434.218637][ T30] audit: type=1400 audit(1367.277:46722): avc: denied { allowed } for pid=25465 comm="syz.1.4982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1434.395430][T25475] overlayfs: failed to clone upperpath [ 1435.353958][ T7310] corsair-psu 0003:1B1C:1C09.0032: unknown main item tag 0x0 [ 1435.376560][ T7310] corsair-psu 0003:1B1C:1C09.0032: unknown main item tag 0x0 [ 1435.390077][ T7310] corsair-psu 0003:1B1C:1C09.0032: unknown main item tag 0x0 [ 1435.407236][ T7310] corsair-psu 0003:1B1C:1C09.0032: unknown main item tag 0x0 [ 1435.415994][ T7310] corsair-psu 0003:1B1C:1C09.0032: unknown main item tag 0x0 [ 1435.431074][ T7310] corsair-psu 0003:1B1C:1C09.0032: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.6-1/input0 [ 1435.517194][T25486] netlink: 'syz.1.4989': attribute type 6 has an invalid length. [ 1435.554314][T25492] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 1435.858720][ T7310] corsair-psu 0003:1B1C:1C09.0032: unable to initialize device (-110) [ 1436.488173][ T7310] corsair-psu 0003:1B1C:1C09.0032: probe with driver corsair-psu failed with error -110 [ 1436.504878][ T7310] usb 7-1: USB disconnect, device number 71 [ 1436.562980][T25489] fido_id[25489]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1436.750859][ T7313] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1437.619001][ T7310] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1437.814436][T25514] usb usb8: usbfs: process 25514 (syz.7.4995) did not claim interface 0 before use [ 1438.241197][ T7310] usb 7-1: Using ep0 maxpacket: 16 [ 1438.248022][ T7310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1438.260186][ T7310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1438.270703][ T7310] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1438.285996][ T7310] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1438.298203][ T7310] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.339545][ T7310] usb 7-1: config 0 descriptor?? [ 1439.016172][ T30] kauditd_printk_skb: 157 callbacks suppressed [ 1439.016187][ T30] audit: type=1400 audit(1371.965:46880): avc: denied { ioctl } for pid=25495 comm="syz.6.4992" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1439.147855][ T30] audit: type=1400 audit(1372.003:46881): avc: denied { read write } for pid=22387 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1439.306995][T25522] fuse: Bad value for 'fd' [ 1439.344545][ T30] audit: type=1400 audit(1372.003:46882): avc: denied { open } for pid=22387 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1439.369004][ T30] audit: type=1400 audit(1372.003:46883): avc: denied { ioctl } for pid=22387 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1439.395410][ T30] audit: type=1400 audit(1372.115:46884): avc: denied { execmem } for pid=25521 comm="syz.7.4999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1439.623786][ T7310] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1439.721795][ T7310] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1439.956902][ T7310] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1439.997417][ T7310] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1440.003181][T25525] i2c i2c-0: dtv_property_process_set: SET cmd 0xbafd76e3 undefined [ 1440.016591][ T30] audit: type=1400 audit(1372.152:46885): avc: denied { map_create } for pid=25520 comm="syz.1.4998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1440.045647][ T7310] microsoft 0003:045E:07DA.0033: unknown main item tag 0x0 [ 1440.094746][ T7310] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0033/input/input98 [ 1440.117640][ T30] audit: type=1400 audit(1372.162:46886): avc: denied { prog_load } for pid=25520 comm="syz.1.4998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1440.242209][T25540] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1440.352268][ T30] audit: type=1400 audit(1372.162:46887): avc: denied { bpf } for pid=25520 comm="syz.1.4998" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1440.373668][T25540] audit: audit_lost=183 audit_rate_limit=0 audit_backlog_limit=64 [ 1440.410956][ T7310] microsoft 0003:045E:07DA.0033: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1440.516144][T25547] bridge3: entered promiscuous mode [ 1440.564410][T25547] bridge3: entered allmulticast mode [ 1440.783327][T25547] team0: Port device bridge3 added [ 1440.880321][T25540] bridge0: port 1(team0) entered blocking state [ 1440.941682][T25540] bridge0: port 1(team0) entered disabled state [ 1440.993445][T25540] team0: entered allmulticast mode [ 1441.014106][T25540] team_slave_0: entered allmulticast mode [ 1441.074854][ T24] usb 7-1: USB disconnect, device number 72 [ 1441.106359][T25540] team_slave_1: entered allmulticast mode [ 1441.119258][T25540] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 1441.188985][T25540] team0: entered promiscuous mode [ 1441.208400][T25540] team_slave_0: entered promiscuous mode [ 1441.225878][T25540] team_slave_1: entered promiscuous mode [ 1441.234739][T25540] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 1441.292818][T25553] bridge0: port 3(syz_tun) entered disabled state [ 1441.316078][T25553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1441.323295][T25553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1441.492774][T25553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1441.505724][T25553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1441.532482][ T24] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1441.629084][ T57] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.649984][ T57] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.688952][ T57] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.713474][T25564] netlink: 'syz.1.5008': attribute type 1 has an invalid length. [ 1441.715127][ T57] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.746392][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1441.861317][ T24] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1441.871108][ T24] usb 7-1: config 0 has no interface number 0 [ 1441.880266][ T24] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1441.890903][ T24] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1441.906013][T25564] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1441.912776][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.922584][ T24] usb 7-1: Product: syz [ 1441.934163][T25569] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5009'. [ 1441.958585][ T24] usb 7-1: Manufacturer: syz [ 1441.973844][ T24] usb 7-1: SerialNumber: syz [ 1441.995808][ T24] usb 7-1: config 0 descriptor?? [ 1442.500514][T25577] fuse: fd is not a fuse device [ 1442.989718][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1443.062738][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1443.164945][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1443.204478][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1443.240084][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1443.286117][ T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1443.332041][ T24] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1443.451340][ T24] usb 7-1: USB disconnect, device number 73 [ 1443.937204][T25599] overlayfs: failed to clone upperpath [ 1444.041537][T25604] overlayfs: failed to clone upperpath [ 1444.203050][T25612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1444.223072][T25612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1444.378296][ T30] kauditd_printk_skb: 339 callbacks suppressed [ 1444.378313][ T30] audit: type=1400 audit(1376.981:47220): avc: denied { ioctl } for pid=25606 comm="syz.0.5022" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1444.439066][ T5720] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1444.455506][ T30] audit: type=1400 audit(1377.037:47221): avc: denied { unmount } for pid=22387 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1444.499923][ T30] audit: type=1400 audit(1377.037:47222): avc: denied { read write } for pid=22387 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1444.524350][ T30] audit: type=1400 audit(1377.037:47223): avc: denied { open } for pid=22387 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1444.559212][ T30] audit: type=1400 audit(1377.047:47224): avc: denied { ioctl } for pid=22387 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1444.586261][ T30] audit: type=1400 audit(1377.056:47225): avc: denied { mounton } for pid=25616 comm="syz.6.5027" path="/441/file0" dev="tmpfs" ino=2459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1444.612521][ T30] audit: type=1400 audit(1377.056:47226): avc: denied { mount } for pid=25616 comm="syz.6.5027" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1444.652777][ T5720] usb 1-1: Using ep0 maxpacket: 8 [ 1444.726372][ T5720] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1444.848204][ T5720] usb 1-1: config 0 has no interface number 0 [ 1444.868667][ T30] audit: type=1400 audit(1377.075:47227): avc: denied { mounton } for pid=25616 comm="syz.6.5027" path="/441/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1444.901328][ T5720] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1445.021317][ T5720] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1445.039621][ T30] audit: type=1400 audit(1377.075:47228): avc: denied { ioctl } for pid=25606 comm="syz.0.5022" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1445.048116][ T5720] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1445.083869][ T5720] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1445.099712][ T5720] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1445.109397][ T5720] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.133911][ T7289] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1445.139407][ T30] audit: type=1400 audit(1377.075:47229): avc: denied { mount } for pid=25616 comm="syz.6.5027" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1445.202047][ T5720] usb 1-1: config 0 descriptor?? [ 1445.233079][ T5720] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1445.293909][ T7289] usb 7-1: Using ep0 maxpacket: 32 [ 1445.301512][ T7289] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1445.377782][ T7289] usb 7-1: config 0 has no interface number 0 [ 1445.397746][ T7289] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1445.421624][ T7289] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1445.438607][ T7289] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.476835][ T7289] usb 7-1: Product: syz [ 1445.517729][ T7289] usb 7-1: Manufacturer: syz [ 1445.536436][ T7289] usb 7-1: SerialNumber: syz [ 1445.580214][ T7289] usb 7-1: config 0 descriptor?? [ 1445.744990][T19298] usb 1-1: USB disconnect, device number 63 [ 1445.753299][T19298] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1446.483634][ T7289] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1446.594073][ T7289] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1446.619739][ T7289] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1446.632561][ T7289] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1446.954113][ T7289] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1446.977278][ T7310] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1446.990737][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1447.041061][ T7289] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1447.057606][ T7289] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1447.075714][ T7289] usb 7-1: USB disconnect, device number 74 [ 1447.498249][ T7289] hid_parser_main: 5 callbacks suppressed [ 1447.498272][ T7289] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 1447.594263][ T7289] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1447.728311][T25665] fido_id[25665]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1447.798326][T25672] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=25672 comm=syz.7.5044 [ 1447.820011][T25672] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5044'. [ 1447.836119][T25672] bond0: left allmulticast mode [ 1447.841361][T25672] bond_slave_0: left allmulticast mode [ 1447.848973][T25672] bond_slave_1: left allmulticast mode [ 1449.175707][T25689] Invalid ELF header type: 3 != 1 [ 1449.228989][T25690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5049'. [ 1449.304136][T25693] netlink: 4624 bytes leftover after parsing attributes in process `syz.1.5051'. [ 1449.925337][ T30] kauditd_printk_skb: 319 callbacks suppressed [ 1449.925361][ T30] audit: type=1400 audit(1382.063:47549): avc: denied { ioctl } for pid=25685 comm="syz.2.5049" path="/dev/vhost-net" dev="devtmpfs" ino=1273 ioctlcmd=0xaf30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1450.021765][ T30] audit: type=1400 audit(1382.250:47550): avc: denied { create } for pid=25696 comm="syz.6.5053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1450.041291][ T30] audit: type=1400 audit(1382.250:47551): avc: denied { setopt } for pid=25696 comm="syz.6.5053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1450.061379][ T30] audit: type=1400 audit(1382.250:47552): avc: denied { create } for pid=25695 comm="syz.0.5052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1450.105292][ T30] audit: type=1400 audit(1382.259:47553): avc: denied { setopt } for pid=25695 comm="syz.0.5052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1450.227958][ T30] audit: type=1400 audit(1382.306:47554): avc: denied { create } for pid=25697 comm="syz.1.5054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1450.255242][ T30] audit: type=1400 audit(1382.325:47555): avc: denied { execmem } for pid=25697 comm="syz.1.5054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1450.782602][ T30] audit: type=1400 audit(1382.558:47556): avc: denied { create } for pid=25696 comm="syz.6.5053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1450.805863][ T30] audit: type=1400 audit(1382.558:47557): avc: denied { write } for pid=25696 comm="syz.6.5053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1450.826716][ T30] audit: type=1400 audit(1382.577:47558): avc: denied { read } for pid=25696 comm="syz.6.5053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1451.194511][ T7310] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1451.354708][ T24] libceph: connect (1)[c::]:6789 error -99 [ 1451.369473][ T7310] usb 7-1: Using ep0 maxpacket: 16 [ 1451.377051][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1451.399948][ T7310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1451.432154][ T7310] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1452.405799][ T24] libceph: connect (1)[c::]:6789 error -99 [ 1452.461789][ T7310] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1452.486747][ T24] libceph: mon0 (1)[c::]:6789 connect error [ 1452.524707][ T7310] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1452.640142][T25716] ceph: No mds server is up or the cluster is laggy [ 1452.650063][ T7310] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.670701][T25729] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1452.686615][ T7310] usb 7-1: config 0 descriptor?? [ 1454.163205][ T5705] libceph: connect (1)[c::]:6789 error -99 [ 1454.194562][ T5705] libceph: mon0 (1)[c::]:6789 connect error [ 1455.370259][ T30] kauditd_printk_skb: 107 callbacks suppressed [ 1455.370277][ T30] audit: type=1400 audit(1387.060:47666): avc: denied { read } for pid=25739 comm="syz.7.5061" name="v4l-subdev4" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1455.372998][ T7310] usbhid 7-1:0.0: can't add hid device: -71 [ 1455.407076][ T7310] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1455.417514][ T7310] usb 7-1: USB disconnect, device number 75 [ 1455.425843][ T30] audit: type=1400 audit(1387.060:47667): avc: denied { open } for pid=25739 comm="syz.7.5061" path="/dev/v4l-subdev4" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1455.564361][T25744] netlink: 'syz.6.5062': attribute type 9 has an invalid length. [ 1455.622722][T25744] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5062'. [ 1455.636508][ T30] audit: type=1400 audit(1387.069:47668): avc: denied { create } for pid=25739 comm="syz.7.5061" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1455.679165][T25746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1455.703307][T25746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1455.711571][ T30] audit: type=1400 audit(1387.069:47669): avc: denied { ioctl } for pid=25739 comm="syz.7.5061" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=110199 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1455.760990][ T30] audit: type=1400 audit(1387.097:47670): avc: denied { name_bind } for pid=25739 comm="syz.7.5061" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1455.806265][ T30] audit: type=1400 audit(1387.097:47671): avc: denied { node_bind } for pid=25739 comm="syz.7.5061" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1455.855485][ T30] audit: type=1400 audit(1387.106:47672): avc: denied { create } for pid=25739 comm="syz.7.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1455.894710][ T30] audit: type=1400 audit(1387.116:47673): avc: denied { write } for pid=25739 comm="syz.7.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1455.936592][ T30] audit: type=1400 audit(1387.116:47674): avc: denied { read } for pid=25739 comm="syz.7.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1455.975574][ T30] audit: type=1400 audit(1387.153:47675): avc: denied { execmem } for pid=25739 comm="syz.7.5061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1456.343802][ T7289] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1456.549549][ T7289] usb 1-1: Using ep0 maxpacket: 16 [ 1457.255862][ T7306] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1457.511049][ T7289] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1457.530029][ T7289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1457.549171][ T7289] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1457.569212][ T7289] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1457.579172][ T7289] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1457.596926][ T7289] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1457.606114][ T7289] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1457.614412][ T7289] usb 1-1: Manufacturer: syz [ 1457.641262][ T7289] usb 1-1: config 0 descriptor?? [ 1457.734464][T25776] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5069'. [ 1457.999763][ T7289] rc_core: IR keymap rc-hauppauge not found [ 1458.018270][ T7289] Registered IR keymap rc-empty [ 1458.031323][ T7289] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1458.068669][ T7289] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1458.175376][T25788] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5075'. [ 1458.189196][ T7289] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1458.335766][ T7289] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input100 [ 1458.480561][T19298] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 1458.749132][T19298] usb 7-1: config index 0 descriptor too short (expected 1054, got 18) [ 1458.793758][ T7289] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1458.865369][T19298] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1458.903356][ T7289] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1458.970798][T19298] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1459.018365][ T7289] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1459.101057][T19298] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1459.142561][ T7289] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1459.224302][T19298] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.271682][ T7289] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1459.327774][T19298] usb 7-1: Product: syz [ 1459.372298][ T7289] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1459.391276][T19298] usb 7-1: Manufacturer: syz [ 1459.457579][T19298] usb 7-1: SerialNumber: syz [ 1459.496623][ T7289] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1459.584902][T19298] usb 7-1: config 0 descriptor?? [ 1459.606508][ T7289] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1459.836629][ T7289] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1460.045036][ T7289] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1460.055728][T19298] usb 7-1: USB disconnect, device number 76 [ 1460.653892][ T7289] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 0 [ 1460.684937][ T7289] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1460.711573][T25792] fuse: fd is not a fuse device [ 1460.716973][ T30] kauditd_printk_skb: 189 callbacks suppressed [ 1460.716986][ T30] audit: type=1400 audit(1392.263:47865): avc: denied { mounton } for pid=25791 comm="syz.1.5076" path="/432/file0" dev="tmpfs" ino=2370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1460.752796][ T7289] usb 1-1: USB disconnect, device number 64 [ 1460.819998][ T30] audit: type=1400 audit(1392.300:47866): avc: denied { create } for pid=25795 comm="syz.7.5077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1460.866760][ T30] audit: type=1400 audit(1392.300:47867): avc: denied { ioctl } for pid=25794 comm="syz.0.5078" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1460.891717][T21104] udevd[21104]: setting owner of /dev/input/event5 to uid=0, gid=104 failed: No such file or directory [ 1460.913478][ T30] audit: type=1400 audit(1392.310:47868): avc: denied { read write } for pid=25795 comm="syz.7.5077" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1460.943922][ T30] audit: type=1400 audit(1392.310:47869): avc: denied { open } for pid=25795 comm="syz.7.5077" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1460.975797][ T30] audit: type=1400 audit(1392.356:47870): avc: denied { read write } for pid=25795 comm="syz.7.5077" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1461.002497][ T30] audit: type=1400 audit(1392.356:47871): avc: denied { open } for pid=25795 comm="syz.7.5077" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1461.038411][ T30] audit: type=1400 audit(1392.356:47872): avc: denied { ioctl } for pid=25795 comm="syz.7.5077" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1461.065908][ T30] audit: type=1400 audit(1392.366:47873): avc: denied { ioctl } for pid=25795 comm="syz.7.5077" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1461.105787][ T30] audit: type=1400 audit(1392.609:47874): avc: denied { read write } for pid=14240 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1461.956618][ T7289] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1462.061948][T25807] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1010 sclass=netlink_route_socket pid=25807 comm=syz.2.5082 [ 1462.149843][ T7289] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1462.158858][ T7289] usb 1-1: string descriptor 0 read error: -22 [ 1462.166827][ T7289] usb 1-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 1462.178145][ T7289] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.253917][T25789] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 1462.447195][T25789] usb 7-1: config 2 has an invalid interface number: 32 but max is 0 [ 1462.458837][T25789] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.472392][T25789] usb 7-1: config 2 has no interface number 0 [ 1462.479750][T25789] usb 7-1: too many endpoints for config 2 interface 32 altsetting 32: 32, using maximum allowed: 30 [ 1462.492183][T25789] usb 7-1: config 2 interface 32 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1462.506213][T25789] usb 7-1: config 2 interface 32 has no altsetting 0 [ 1462.515564][T25789] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1462.530617][T25789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.544058][T25789] usb 7-1: Product: syz [ 1462.548407][T25789] usb 7-1: Manufacturer: syz [ 1462.553558][T25789] usb 7-1: SerialNumber: syz [ 1462.591980][T25817] vivid-007: ================= START STATUS ================= [ 1462.600869][T25817] vivid-007: Enable Output Cropping: true [ 1462.608086][T25817] vivid-007: Enable Output Composing: true [ 1462.616143][T25817] vivid-007: Enable Output Scaler: true [ 1462.621815][T25817] vivid-007: Tx RGB Quantization Range: Automatic [ 1462.628491][T25817] vivid-007: Transmit Mode: HDMI [ 1462.633464][T25817] vivid-007: Hotplug Present: 0x00000000 [ 1462.640520][T25817] vivid-007: RxSense Present: 0x00000000 [ 1462.640619][ T7289] usbhid 1-1:1.0: can't add hid device: -32 [ 1462.648327][T25817] vivid-007: EDID Present: 0x00000000 [ 1462.662328][T25817] vivid-007: ================== END STATUS ================== [ 1462.680380][ T7289] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 1462.697742][ T7289] usb 1-1: USB disconnect, device number 65 [ 1462.793051][T25802] program syz.6.5081 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1462.816499][T25789] usb 7-1: USB disconnect, device number 77 [ 1465.127738][T25789] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 1465.491527][T25789] usb 7-1: Using ep0 maxpacket: 16 [ 1465.505982][T25789] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1465.532926][T25789] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1465.546999][T25877] overlayfs: failed to clone upperpath [ 1465.552649][T25789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.590621][T25789] usb 7-1: Product: syz [ 1465.616745][T25789] usb 7-1: Manufacturer: syz [ 1465.635910][T25789] usb 7-1: SerialNumber: syz [ 1465.654624][T25789] usb 7-1: config 0 descriptor?? [ 1465.685008][T25789] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1465.699836][T25789] usb 7-1: Detected FT232R [ 1466.055215][T25889] program syz.2.5106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1466.066499][T25889] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1466.359273][ T30] kauditd_printk_skb: 309 callbacks suppressed [ 1466.359323][ T30] audit: type=1400 audit(1397.176:48184): avc: denied { map_create } for pid=25880 comm="syz.2.5106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1466.433062][ T30] audit: type=1400 audit(1397.176:48185): avc: denied { module_request } for pid=25880 comm="syz.2.5106" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1466.458718][ T30] audit: type=1400 audit(1397.241:48186): avc: denied { map_create } for pid=25880 comm="syz.2.5106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1466.484249][ T30] audit: type=1400 audit(1397.241:48187): avc: denied { bpf } for pid=25880 comm="syz.2.5106" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1466.497158][T25789] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1466.533650][ T30] audit: type=1400 audit(1397.241:48188): avc: denied { map_create } for pid=25880 comm="syz.2.5106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1466.800303][T25789] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1466.813977][ T30] audit: type=1400 audit(1397.251:48189): avc: denied { map_read map_write } for pid=25880 comm="syz.2.5106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1466.818184][T25789] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71 [ 1466.859515][ T30] audit: type=1400 audit(1397.251:48190): avc: denied { prog_load } for pid=25880 comm="syz.2.5106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1466.921190][T25789] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1466.941629][ T30] audit: type=1400 audit(1397.251:48191): avc: denied { bpf } for pid=25880 comm="syz.2.5106" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1466.956674][T25789] usb 7-1: USB disconnect, device number 78 [ 1466.991261][ T30] audit: type=1400 audit(1397.251:48192): avc: denied { perfmon } for pid=25880 comm="syz.2.5106" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1467.037403][T25789] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1467.048661][ T30] audit: type=1400 audit(1397.251:48193): avc: denied { prog_run } for pid=25880 comm="syz.2.5106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1467.090030][T25789] ftdi_sio 7-1:0.0: device disconnected [ 1467.142560][T25895] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5108'. [ 1467.450253][ T7306] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1467.463517][ T5705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1467.688193][T25908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1467.743936][T25908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1467.756083][ T7306] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 1467.937963][ T7306] usb 7-1: device descriptor read/64, error -71 [ 1467.958513][T25912] blktrace: Concurrent blktraces are not allowed on loop5 [ 1468.205398][ T7306] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 1468.365179][ T7306] usb 7-1: device descriptor read/64, error -71 [ 1468.688891][ T7306] usb usb7-port1: attempt power cycle [ 1468.980897][T25929] tmpfs: Bad value for 'mpol' [ 1469.002686][T25927] tmpfs: Bad value for 'mpol' [ 1469.070582][ T7306] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 1469.574685][ T7306] usb 7-1: device descriptor read/8, error -71 [ 1469.591802][T25933] /dev/nullb0: Can't open blockdev [ 1470.423110][T25940] netlink: 'syz.7.5122': attribute type 10 has an invalid length. [ 1470.431599][ T7306] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 1470.465805][T25940] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5122'. [ 1470.482097][ T7306] usb 7-1: device descriptor read/8, error -71 [ 1470.625902][ T7306] usb usb7-port1: unable to enumerate USB device [ 1470.857027][T25946] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5125'. [ 1471.229144][ T7306] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 1471.539281][ T7306] usb 7-1: Using ep0 maxpacket: 32 [ 1471.572438][ T7306] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 1471.604591][ T7306] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 1471.665141][ T7306] usb 7-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 1471.689024][ T7306] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.712935][ T30] kauditd_printk_skb: 246 callbacks suppressed [ 1471.712956][ T30] audit: type=1400 audit(1402.566:48440): avc: denied { unmount } for pid=18789 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1471.748807][ T7306] usb 7-1: Product: syz [ 1471.766005][ T7306] usb 7-1: Manufacturer: syz [ 1471.783758][ T7306] usb 7-1: SerialNumber: syz [ 1471.790903][T25962] fuse: fd is not a fuse device [ 1471.825026][ T30] audit: type=1400 audit(1402.613:48441): avc: denied { write } for pid=25961 comm="syz.1.5130" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1471.920770][ T30] audit: type=1400 audit(1402.641:48442): avc: denied { mounton } for pid=25961 comm="syz.1.5130" path="/449/file0" dev="tmpfs" ino=2467 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1472.071556][ T30] audit: type=1400 audit(1402.650:48443): avc: denied { ioctl } for pid=25945 comm="syz.6.5125" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1472.121179][ T30] audit: type=1400 audit(1402.659:48444): avc: denied { read write } for pid=18789 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1472.548825][ T7306] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1472.575839][T25968] IPVS: Error connecting to the multicast addr [ 1472.600795][ T7306] usb 7-1: unit 255 not found! [ 1472.640879][ T30] audit: type=1400 audit(1402.659:48445): avc: denied { open } for pid=18789 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1472.707716][ T30] audit: type=1400 audit(1402.659:48446): avc: denied { ioctl } for pid=18789 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1472.743924][ T30] audit: type=1400 audit(1402.734:48447): avc: denied { read write } for pid=14240 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1472.792994][ T7306] usb 7-1: disable ehci-hcd to run US-144 [ 1472.804773][ T7306] usb 7-1: disable ehci-hcd to run US-144 [ 1472.820802][ T7306] usb 7-1: USB disconnect, device number 83 [ 1472.839674][T25973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.852897][T25973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.949924][ T30] audit: type=1400 audit(1402.734:48448): avc: denied { open } for pid=14240 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1472.983635][ T30] audit: type=1400 audit(1402.734:48449): avc: denied { ioctl } for pid=14240 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1473.166594][T21157] udevd[21157]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1473.243634][T25973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.253276][T25977] [ 1473.255612][T25977] ===================================================== [ 1473.262523][T25977] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 1473.269956][T25977] syzkaller #0 Tainted: G L [ 1473.275913][T25977] ----------------------------------------------------- [ 1473.282817][T25977] syz.0.5135/25977 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1473.290511][T25977] ffffffff8e40a098 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0xed/0xc80 [ 1473.299101][T25977] [ 1473.299101][T25977] and this task is already holding: [ 1473.306438][T25977] ffff8880756865a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 1473.315117][T25977] which would create a new lock dependency: [ 1473.320983][T25977] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 1473.328530][T25977] [ 1473.328530][T25977] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 1473.337955][T25977] (&dev->event_lock#2){..-.}-{3:3} [ 1473.337980][T25977] [ 1473.337980][T25977] ... which became SOFTIRQ-irq-safe at: [ 1473.350824][T25977] lock_acquire+0x1b1/0x370 [ 1473.355399][T25977] _raw_spin_lock_irqsave+0x3a/0x60 [ 1473.360669][T25977] input_event+0x70/0xb0 [ 1473.364983][T25977] xpad360_process_packet.part.0+0xf0/0xd30 [ 1473.370945][T25977] xpad_irq_in+0xe1a/0x2a50 [ 1473.375520][T25977] __usb_hcd_giveback_urb+0x38d/0x610 [ 1473.380966][T25977] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 1473.386238][T25977] dummy_timer+0xda1/0x36c0 [ 1473.390805][T25977] __hrtimer_run_queues+0x470/0xa00 [ 1473.396074][T25977] hrtimer_run_softirq+0x17d/0x2c0 [ 1473.401258][T25977] handle_softirqs+0x1ea/0xa00 [ 1473.406095][T25977] __irq_exit_rcu+0x162/0x210 [ 1473.410840][T25977] irq_exit_rcu+0x9/0x30 [ 1473.415153][T25977] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1473.420851][T25977] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1473.426895][T25977] lock_acquire+0x5e/0x370 [ 1473.431383][T25977] unwind_next_frame+0xd1/0x2090 [ 1473.436392][T25977] arch_stack_walk+0x94/0xf0 [ 1473.441056][T25977] stack_trace_save+0x8e/0xc0 [ 1473.445843][T25977] kasan_save_stack+0x30/0x50 [ 1473.450593][T25977] kasan_save_track+0x14/0x30 [ 1473.455341][T25977] __kasan_kmalloc+0xaa/0xb0 [ 1473.460004][T25977] kmem_cache_free+0x41e/0x6c0 [ 1473.464839][T25977] __io_req_caches_free+0x1a6/0x220 [ 1473.470109][T25977] io_req_caches_free+0x20/0x40 [ 1473.475035][T25977] io_ring_exit_work+0x418/0xd40 [ 1473.480036][T25977] process_one_work+0xa0e/0x1980 [ 1473.485041][T25977] worker_thread+0x5ef/0xe50 [ 1473.489696][T25977] kthread+0x370/0x450 [ 1473.493836][T25977] ret_from_fork+0x72b/0xd50 [ 1473.498491][T25977] ret_from_fork_asm+0x1a/0x30 [ 1473.503323][T25977] [ 1473.503323][T25977] to a SOFTIRQ-irq-unsafe lock: [ 1473.510313][T25977] (tasklist_lock){.+.+}-{3:3} [ 1473.510333][T25977] [ 1473.510333][T25977] ... which became SOFTIRQ-irq-unsafe at: [ 1473.522924][T25977] ... [ 1473.522929][T25977] lock_acquire+0x1b1/0x370 [ 1473.530052][T25977] _raw_read_lock+0x5f/0x70 [ 1473.534619][T25977] __do_wait+0x13b/0x8b0 [ 1473.538925][T25977] do_wait+0x1ec/0x580 [ 1473.543056][T25977] kernel_wait+0xa1/0x160 [ 1473.547451][T25977] call_usermodehelper_exec_work+0xf6/0x180 [ 1473.553415][T25977] process_one_work+0xa0e/0x1980 [ 1473.558420][T25977] worker_thread+0x5ef/0xe50 [ 1473.563080][T25977] kthread+0x370/0x450 [ 1473.567213][T25977] ret_from_fork+0x72b/0xd50 [ 1473.571868][T25977] ret_from_fork_asm+0x1a/0x30 [ 1473.576704][T25977] [ 1473.576704][T25977] other info that might help us debug this: [ 1473.576704][T25977] [ 1473.586907][T25977] Chain exists of: [ 1473.586907][T25977] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 1473.586907][T25977] [ 1473.599920][T25977] Possible interrupt unsafe locking scenario: [ 1473.599920][T25977] [ 1473.608211][T25977] CPU0 CPU1 [ 1473.613553][T25977] ---- ---- [ 1473.618895][T25977] lock(tasklist_lock); [ 1473.623118][T25977] local_irq_disable(); [ 1473.629848][T25977] lock(&dev->event_lock#2); [ 1473.637027][T25977] lock(&f_owner->lock); [ 1473.643851][T25977] [ 1473.647279][T25977] lock(&dev->event_lock#2); [ 1473.652109][T25977] [ 1473.652109][T25977] *** DEADLOCK *** [ 1473.652109][T25977] [ 1473.660226][T25977] 2 locks held by syz.0.5135/25977: [ 1473.665396][T25977] #0: ffff888036adb150 (&u->lock){+.+.}-{3:3}, at: unix_stream_sendmsg+0x950/0x1310 [ 1473.674858][T25977] #1: ffff8880756865a0 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x5f/0xc80 [ 1473.683974][T25977] [ 1473.683974][T25977] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 1473.694350][T25977] -> (&dev->event_lock#2){..-.}-{3:3} { [ 1473.700064][T25977] IN-SOFTIRQ-W at: [ 1473.704194][T25977] lock_acquire+0x1b1/0x370 [ 1473.710677][T25977] _raw_spin_lock_irqsave+0x3a/0x60 [ 1473.717938][T25977] input_event+0x70/0xb0 [ 1473.724160][T25977] xpad360_process_packet.part.0+0xf0/0xd30 [ 1473.732028][T25977] xpad_irq_in+0xe1a/0x2a50 [ 1473.738505][T25977] __usb_hcd_giveback_urb+0x38d/0x610 [ 1473.745858][T25977] usb_hcd_giveback_urb+0x3ca/0x4a0 [ 1473.753042][T25977] dummy_timer+0xda1/0x36c0 [ 1473.759517][T25977] __hrtimer_run_queues+0x470/0xa00 [ 1473.766694][T25977] hrtimer_run_softirq+0x17d/0x2c0 [ 1473.773787][T25977] handle_softirqs+0x1ea/0xa00 [ 1473.780532][T25977] __irq_exit_rcu+0x162/0x210 [ 1473.787186][T25977] irq_exit_rcu+0x9/0x30 [ 1473.793407][T25977] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1473.801016][T25977] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1473.808972][T25977] lock_acquire+0x5e/0x370 [ 1473.815365][T25977] unwind_next_frame+0xd1/0x2090 [ 1473.822284][T25977] arch_stack_walk+0x94/0xf0 [ 1473.828853][T25977] stack_trace_save+0x8e/0xc0 [ 1473.835503][T25977] kasan_save_stack+0x30/0x50 [ 1473.842163][T25977] kasan_save_track+0x14/0x30 [ 1473.848822][T25977] __kasan_kmalloc+0xaa/0xb0 [ 1473.855392][T25977] kmem_cache_free+0x41e/0x6c0 [ 1473.862134][T25977] __io_req_caches_free+0x1a6/0x220 [ 1473.869315][T25977] io_req_caches_free+0x20/0x40 [ 1473.876148][T25977] io_ring_exit_work+0x418/0xd40 [ 1473.883060][T25977] process_one_work+0xa0e/0x1980 [ 1473.889977][T25977] worker_thread+0x5ef/0xe50 [ 1473.896542][T25977] kthread+0x370/0x450 [ 1473.902586][T25977] ret_from_fork+0x72b/0xd50 [ 1473.909156][T25977] ret_from_fork_asm+0x1a/0x30 [ 1473.915903][T25977] INITIAL USE at: [ 1473.919955][T25977] lock_acquire+0x1b1/0x370 [ 1473.926369][T25977] _raw_spin_lock_irqsave+0x3a/0x60 [ 1473.933470][T25977] input_inject_event+0x9f/0x390 [ 1473.940310][T25977] led_set_brightness+0x221/0x2a0 [ 1473.947223][T25977] kbd_led_trigger_activate+0xcb/0x110 [ 1473.954575][T25977] led_trigger_set+0x66b/0xbe0 [ 1473.961232][T25977] led_trigger_set_default+0x1e2/0x2f0 [ 1473.968584][T25977] led_classdev_register_ext+0x72b/0x990 [ 1473.976106][T25977] input_leds_connect+0x5af/0x8b0 [ 1473.983021][T25977] input_attach_handler.isra.0+0x177/0x1e0 [ 1473.990717][T25977] input_register_device.cold+0x139/0x375 [ 1473.998333][T25977] atkbd_connect+0x665/0x9e0 [ 1474.004817][T25977] serio_driver_probe+0x77/0xb0 [ 1474.011561][T25977] really_probe+0x241/0xa60 [ 1474.017960][T25977] __driver_probe_device+0x22e/0x480 [ 1474.025135][T25977] driver_probe_device+0x4c/0x1b0 [ 1474.032062][T25977] __driver_attach+0x21f/0x5d0 [ 1474.038738][T25977] bus_for_each_dev+0x13e/0x1d0 [ 1474.045490][T25977] serio_handle_event+0x247/0x8f0 [ 1474.052417][T25977] process_one_work+0xa0e/0x1980 [ 1474.059251][T25977] worker_thread+0x5ef/0xe50 [ 1474.065733][T25977] kthread+0x370/0x450 [ 1474.071695][T25977] ret_from_fork+0x72b/0xd50 [ 1474.078175][T25977] ret_from_fork_asm+0x1a/0x30 [ 1474.084834][T25977] } [ 1474.087481][T25977] ... key at: [] __key.7+0x0/0x40 [ 1474.094751][T25977] -> (&new->fa_lock){....}-{3:3} { [ 1474.099940][T25977] INITIAL USE at: [ 1474.103896][T25977] lock_acquire+0x1b1/0x370 [ 1474.110116][T25977] _raw_write_lock_irq+0x36/0x50 [ 1474.116772][T25977] fasync_remove_entry+0xb2/0x1e0 [ 1474.123510][T25977] fasync_helper+0xaf/0xd0 [ 1474.129637][T25977] lease_modify+0x22c/0x480 [ 1474.135860][T25977] locks_remove_file+0x330/0x610 [ 1474.142518][T25977] __fput+0x351/0xb50 [ 1474.148217][T25977] fput_close_sync+0x118/0x250 [ 1474.154698][T25977] __x64_sys_close+0x8b/0x120 [ 1474.161108][T25977] do_syscall_64+0x10b/0xf80 [ 1474.167430][T25977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.175047][T25977] INITIAL READ USE at: [ 1474.179444][T25977] lock_acquire+0x1b1/0x370 [ 1474.186104][T25977] _raw_read_lock_irqsave+0x74/0x90 [ 1474.193453][T25977] kill_fasync+0x138/0x510 [ 1474.200019][T25977] sock_wake_async+0x132/0x160 [ 1474.206930][T25977] unix_write_space+0x2ae/0x510 [ 1474.213934][T25977] sock_wfree+0x26f/0x830 [ 1474.220419][T25977] skb_release_head_state+0x3f4/0x400 [ 1474.227944][T25977] consume_skb+0x8a/0x110 [ 1474.234423][T25977] unix_dgram_sendmsg+0x741/0x1810 [ 1474.241685][T25977] ____sys_sendmsg+0x9e1/0xb70 [ 1474.248596][T25977] ___sys_sendmsg+0x190/0x1e0 [ 1474.255424][T25977] __sys_sendmmsg+0x205/0x430 [ 1474.262257][T25977] __x64_sys_sendmmsg+0x9c/0x100 [ 1474.269348][T25977] do_syscall_64+0x10b/0xf80 [ 1474.276087][T25977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.284130][T25977] } [ 1474.286690][T25977] ... key at: [] __key.0+0x0/0x40 [ 1474.293865][T25977] ... acquired at: [ 1474.297728][T25977] _raw_read_lock_irqsave+0x74/0x90 [ 1474.303080][T25977] kill_fasync+0x138/0x510 [ 1474.307645][T25977] mousedev_notify_readers+0x6d9/0xa30 [ 1474.313260][T25977] mousedev_event+0x84e/0x14a0 [ 1474.318177][T25977] input_handle_events_default+0x119/0x1b0 [ 1474.324135][T25977] input_pass_values+0x753/0x880 [ 1474.329229][T25977] input_handle_event+0x7e4/0x1500 [ 1474.334495][T25977] input_inject_event+0x1ce/0x390 [ 1474.339674][T25977] evdev_write+0x3ef/0x610 [ 1474.344248][T25977] vfs_write+0x2aa/0x1070 [ 1474.348728][T25977] ksys_write+0x1f8/0x250 [ 1474.353213][T25977] do_syscall_64+0x10b/0xf80 [ 1474.357958][T25977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.363999][T25977] [ 1474.366297][T25977] -> (&f_owner->lock){....}-{3:3} { [ 1474.371500][T25977] INITIAL USE at: [ 1474.375368][T25977] lock_acquire+0x1b1/0x370 [ 1474.381414][T25977] _raw_write_lock_irq+0x36/0x50 [ 1474.387896][T25977] __f_setown+0x65/0x390 [ 1474.393683][T25977] generic_setlease+0xb2e/0x12f0 [ 1474.400167][T25977] vfs_setlease+0x283/0x370 [ 1474.406213][T25977] do_fcntl_add_lease+0x3c4/0x550 [ 1474.412784][T25977] fcntl_setdeleg+0x153/0x1e0 [ 1474.419006][T25977] do_fcntl+0x63c/0x1670 [ 1474.424794][T25977] __x64_sys_fcntl+0x163/0x200 [ 1474.431109][T25977] do_syscall_64+0x10b/0xf80 [ 1474.437240][T25977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.444672][T25977] INITIAL READ USE at: [ 1474.448975][T25977] lock_acquire+0x1b1/0x370 [ 1474.455458][T25977] _raw_read_lock_irqsave+0x74/0x90 [ 1474.462629][T25977] send_sigurg+0x5f/0xc80 [ 1474.468935][T25977] sk_send_sigurg+0x76/0x370 [ 1474.475504][T25977] unix_stream_sendmsg+0xbbf/0x1310 [ 1474.482679][T25977] ____sys_sendmsg+0x9e1/0xb70 [ 1474.489418][T25977] ___sys_sendmsg+0x190/0x1e0 [ 1474.496072][T25977] __sys_sendmmsg+0x205/0x430 [ 1474.502729][T25977] __x64_sys_sendmmsg+0x9c/0x100 [ 1474.509650][T25977] do_syscall_64+0x10b/0xf80 [ 1474.516215][T25977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.524085][T25977] } [ 1474.526558][T25977] ... key at: [] __key.1+0x0/0x40 [ 1474.533647][T25977] ... acquired at: [ 1474.537426][T25977] _raw_read_lock_irqsave+0x74/0x90 [ 1474.542777][T25977] send_sigio+0x31/0x3e0 [ 1474.547168][T25977] kill_fasync+0x214/0x510 [ 1474.551734][T25977] lease_break_callback+0x23/0x30 [ 1474.556917][T25977] __break_lease+0x7e7/0x19f0 [ 1474.561750][T25977] vfs_rename+0x16dd/0x1fc0 [ 1474.566402][T25977] filename_renameat2+0x754/0xa60 [ 1474.571584][T25977] __x64_sys_renameat2+0xef/0x140 [ 1474.576766][T25977] do_syscall_64+0x10b/0xf80 [ 1474.581507][T25977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.587550][T25977] [ 1474.589851][T25977] [ 1474.589851][T25977] the dependencies between the lock to be acquired [ 1474.589858][T25977] and SOFTIRQ-irq-unsafe lock: [ 1474.603314][T25977] -> (tasklist_lock){.+.+}-{3:3} { [ 1474.608417][T25977] HARDIRQ-ON-R at: [ 1474.612370][T25977] lock_acquire+0x1b1/0x370 [ 1474.618501][T25977] _raw_read_lock+0x5f/0x70 [ 1474.624628][T25977] __do_wait+0x13b/0x8b0 [ 1474.630497][T25977] do_wait+0x1ec/0x580 [ 1474.636194][T25977] kernel_wait+0xa1/0x160 [ 1474.642150][T25977] call_usermodehelper_exec_work+0xf6/0x180 [ 1474.649675][T25977] process_one_work+0xa0e/0x1980 [ 1474.656247][T25977] worker_thread+0x5ef/0xe50 [ 1474.662467][T25977] kthread+0x370/0x450 [ 1474.668163][T25977] ret_from_fork+0x72b/0xd50 [ 1474.674382][T25977] ret_from_fork_asm+0x1a/0x30 [ 1474.680777][T25977] SOFTIRQ-ON-R at: [ 1474.684732][T25977] lock_acquire+0x1b1/0x370 [ 1474.690863][T25977] _raw_read_lock+0x5f/0x70 [ 1474.696993][T25977] __do_wait+0x13b/0x8b0 [ 1474.702864][T25977] do_wait+0x1ec/0x580 [ 1474.708561][T25977] kernel_wait+0xa1/0x160 [ 1474.714519][T25977] call_usermodehelper_exec_work+0xf6/0x180 [ 1474.722045][T25977] process_one_work+0xa0e/0x1980 [ 1474.728611][T25977] worker_thread+0x5ef/0xe50 [ 1474.734831][T25977] kthread+0x370/0x450 [ 1474.740528][T25977] ret_from_fork+0x72b/0xd50 [ 1474.746745][T25977] ret_from_fork_asm+0x1a/0x30 [ 1474.753140][T25977] INITIAL USE at: [ 1474.757008][T25977] lock_acquire+0x1b1/0x370 [ 1474.763056][T25977] _raw_write_lock_irq+0x36/0x50 [ 1474.769535][T25977] copy_process+0x4abe/0x7e00 [ 1474.775752][T25977] kernel_clone+0x12e/0x9c0 [ 1474.781791][T25977] user_mode_thread+0xcc/0x110 [ 1474.788092][T25977] rest_init+0x21/0x260 [ 1474.793795][T25977] start_kernel+0x484/0x490 [ 1474.799838][T25977] x86_64_start_reservations+0x24/0x30 [ 1474.806837][T25977] x86_64_start_kernel+0x12b/0x130 [ 1474.813491][T25977] common_startup_64+0x13e/0x148 [ 1474.819975][T25977] INITIAL READ USE at: [ 1474.824277][T25977] lock_acquire+0x1b1/0x370 [ 1474.830756][T25977] _raw_read_lock+0x5f/0x70 [ 1474.837242][T25977] __do_wait+0x13b/0x8b0 [ 1474.843460][T25977] do_wait+0x1ec/0x580 [ 1474.849502][T25977] kernel_wait+0xa1/0x160 [ 1474.855804][T25977] call_usermodehelper_exec_work+0xf6/0x180 [ 1474.863679][T25977] process_one_work+0xa0e/0x1980 [ 1474.870596][T25977] worker_thread+0x5ef/0xe50 [ 1474.877164][T25977] kthread+0x370/0x450 [ 1474.883211][T25977] ret_from_fork+0x72b/0xd50 [ 1474.889777][T25977] ret_from_fork_asm+0x1a/0x30 [ 1474.896522][T25977] } [ 1474.898995][T25977] ... key at: [] tasklist_lock+0x18/0x40 [ 1474.906694][T25977] ... acquired at: [ 1474.910469][T25977] lock_acquire+0x1b1/0x370 [ 1474.915124][T25977] _raw_read_lock+0x5f/0x70 [ 1474.919778][T25977] send_sigurg+0xed/0xc80 [ 1474.924257][T25977] sk_send_sigurg+0x76/0x370 [ 1474.929007][T25977] unix_stream_sendmsg+0xbbf/0x1310 [ 1474.934378][T25977] ____sys_sendmsg+0x9e1/0xb70 [ 1474.939294][T25977] ___sys_sendmsg+0x190/0x1e0 [ 1474.944125][T25977] __sys_sendmsg+0x170/0x220 [ 1474.948872][T25977] do_syscall_64+0x10b/0xf80 [ 1474.953620][T25977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.959662][T25977] [ 1474.961960][T25977] [ 1474.961960][T25977] stack backtrace: [ 1474.967824][T25977] CPU: 1 UID: 0 PID: 25977 Comm: syz.0.5135 Tainted: G L syzkaller #0 PREEMPT(full) [ 1474.967844][T25977] Tainted: [L]=SOFTLOCKUP [ 1474.967849][T25977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1474.967858][T25977] Call Trace: [ 1474.967863][T25977] [ 1474.967868][T25977] dump_stack_lvl+0x100/0x190 [ 1474.967889][T25977] check_irq_usage+0x7aa/0x810 [ 1474.967905][T25977] ? __lock_acquire+0x4a5/0x2630 [ 1474.967925][T25977] ? check_noncircular+0x97/0x160 [ 1474.967942][T25977] ? __lock_acquire+0x14cf/0x2630 [ 1474.967958][T25977] __lock_acquire+0x14cf/0x2630 [ 1474.967978][T25977] lock_acquire+0x1b1/0x370 [ 1474.967994][T25977] ? send_sigurg+0xed/0xc80 [ 1474.968007][T25977] ? _raw_read_lock_irqsave+0x8c/0x90 [ 1474.968022][T25977] _raw_read_lock+0x5f/0x70 [ 1474.968035][T25977] ? send_sigurg+0xed/0xc80 [ 1474.968046][T25977] send_sigurg+0xed/0xc80 [ 1474.968058][T25977] ? find_held_lock+0x2b/0x80 [ 1474.968070][T25977] ? unix_stream_sendmsg+0xbb7/0x1310 [ 1474.968090][T25977] sk_send_sigurg+0x76/0x370 [ 1474.968109][T25977] unix_stream_sendmsg+0xbbf/0x1310 [ 1474.968130][T25977] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1474.968148][T25977] ? pti_set_user_pgtbl+0x30/0x50 [ 1474.968171][T25977] ____sys_sendmsg+0x9e1/0xb70 [ 1474.968186][T25977] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 1474.968205][T25977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1474.968220][T25977] ? preempt_schedule_thunk+0x16/0x30 [ 1474.968234][T25977] ? try_to_wake_up+0x5f6/0x1900 [ 1474.968249][T25977] ___sys_sendmsg+0x190/0x1e0 [ 1474.968266][T25977] ? __pfx____sys_sendmsg+0x10/0x10 [ 1474.968282][T25977] ? futex_private_hash_put+0x107/0x1c0 [ 1474.968310][T25977] __sys_sendmsg+0x170/0x220 [ 1474.968332][T25977] ? __pfx___sys_sendmsg+0x10/0x10 [ 1474.968352][T25977] ? __x64_sys_futex+0x34f/0x4d0 [ 1474.968374][T25977] ? rcu_is_watching+0x12/0xc0 [ 1474.968396][T25977] do_syscall_64+0x10b/0xf80 [ 1474.968411][T25977] ? clear_bhb_loop+0x40/0x90 [ 1474.968426][T25977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.968440][T25977] RIP: 0033:0x7fd22559cdd9 [ 1474.968452][T25977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1474.968466][T25977] RSP: 002b:00007fd226374028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1474.968479][T25977] RAX: ffffffffffffffda RBX: 00007fd225815fa0 RCX: 00007fd22559cdd9 [ 1474.968488][T25977] RDX: 0000000024004015 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1474.968497][T25977] RBP: 00007fd225632d69 R08: 0000000000000000 R09: 0000000000000000 [ 1474.968505][T25977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1474.968513][T25977] R13: 00007fd225816038 R14: 00007fd225815fa0 R15: 00007ffcd194fb28 [ 1474.968527][T25977] [ 1475.256606][T25973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.705879][ T7310] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration