last executing test programs: 11m11.386959043s ago: executing program 2 (id=1542): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000009c0)="ebe3a0e9796c021647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}], 0x1, &(0x7f0000000980)}], 0x1, 0x40891) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)=""/154, 0x9a}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000010400000000ffdbdf0000000000", @ANYRES32=0x0, @ANYBLOB="00000000000005001c0012800b00010067656e65766500000c00028005000a00000000001400030067656e65766531"], 0x50}}, 0x0) 11m10.431566495s ago: executing program 2 (id=1546): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=000000000000000000', @ANYRESDEC=0x0, @ANYBLOB, @ANYRES32]) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x4, 0x7, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1f1180, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x32) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=000000000000000000', @ANYRESDEC=0x0, @ANYBLOB, @ANYRES32]) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x4, 0x7, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x1f1180, 0x0) (async) ioctl$TCFLSH(r1, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x32) (async) 11m9.955250692s ago: executing program 2 (id=1549): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100000b529708410e42416ed4010203010902240001000000000904000202"], 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11m6.577773508s ago: executing program 2 (id=1565): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023010000340200000600000008000d008000000008000100", @ANYRES32=0x0, @ANYBLOB="08000e0008000040"], 0x2c}}, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x10008, &(0x7f0000000800)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}], [{@fsuuid={'fsuuid', 0x3d, {[0x61, 0x64, 0x38, 0x35, 0x38, 0x61, 0x66, 0x3d], 0x2d, [0x30, 0x66, 0x64, 0x32], 0x2d, [0x32, 0x62, 0xa, 0x66], 0x2d, [0x35, 0x65, 0x66, 0x66], 0x2d, [0x62, 0x38, 0x65, 0x62, 0x61, 0x65, 0x32, 0x64]}}}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) munlockall() syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11m6.016479835s ago: executing program 2 (id=1567): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) mount$cgroup(0x0, 0x0, 0x0, 0x3000443, &(0x7f0000000000)={[{@subsystem='hugetlb'}]}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff00c}, {0x6, 0x0, 0x7, 0x3}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) listen(r3, 0x9) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) setsockopt$ax25_int(r4, 0x101, 0x5, &(0x7f0000000100), 0x4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024a00010100c0030904000003020200000b410600004ed9d401246005240004000d240f01f006aac09d0c000000090581032000037fff090582020000000100090503"], 0x0) 11m2.588120373s ago: executing program 2 (id=1579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000440)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x20, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty, "590f0000"}}}}}, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='sched\x00') read$nci(r3, &(0x7f0000000280)=""/134, 0x86) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) 10m47.236605188s ago: executing program 32 (id=1579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000440)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x20, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0x1, 0x0, @empty, "590f0000"}}}}}, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='sched\x00') read$nci(r3, &(0x7f0000000280)=""/134, 0x86) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) 8m50.441112657s ago: executing program 5 (id=2077): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00000000000000001200", [0x0, 0x6]}}) 8m49.501300203s ago: executing program 5 (id=2080): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_clone(0x400, &(0x7f0000000300)="b897f2d581babead50defd54b76fc719cb54a8b96ece4899b97e1b96dd8fa4d889219e58da4f17a3ce50af75843f42d0775e2da1f4db0d382ada8468918f9fd92747cf9940634329084efa89e4936f44d176577ec5b0d07c5086b22949d85d6eafa71d9a57f4300820729940e663741af063ad3415ddb6581d350dfb3ff8c9c5224f986e8f095e50c23e97788ab12cca2e848795d196608cfe7160a511c33dc0b31ec00e86202a44cde8a425015ac69f89cf211d051f0838c42d502adb865afa774b8d7bb90dc336bcb28962", 0xcc, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000240)="444ebd3f5dc5ef94057ae4afdb87305acad4f6e32fb955fe3bfbf9fa592ddcfbde70b019a035694dab7ded94ae28d62e6ddbf597062c19e99cad637901606d5a2333b7c313c35948986f89dd17ad1aa3c310627cf8bea49c497c661adc51ce1484469467d8ec8ca7a9e7a090232ab18e0ff061dc0e") sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xb) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) openat$mixer(0xffffffffffffff9c, 0x0, 0x20000, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$kcm(0x29, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r3}) bind$xdp(r4, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0x9}, 0x10) bind$xdp(r4, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r5, 0x5452, 0x0) listen(r5, 0x0) shutdown(r5, 0x0) 8m48.241252461s ago: executing program 5 (id=2083): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x1) ppoll(&(0x7f00000003c0)=[{r0, 0x208}], 0x1, 0x0, 0x0, 0x0) 8m47.362086281s ago: executing program 5 (id=2086): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000380)={0x27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) (async) bind$nfc_llcp(r0, &(0x7f0000000380)={0x27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) r1 = syz_io_uring_setup(0x800416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r1, 0x567, 0x1000a387, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1c9b41, 0x8) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'veth1_vlan\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x32, 0xb, 0x2, {0x0, @hdata="c3b467aca79221c2e4d626bfd283e0a10e23d2fa504990e9ce34004c56937b82a7c45294652cad4e6b3175264e735c411738e756", {0x0, @remote, 0x7f, 0xb6, [0x8, 0x7]}, @esp_ip6_spec={@empty, @remote, 0x9, 0x40}, {0x0, @link_local, 0x5, 0xd7, [0x1ff, 0xa]}, 0xad, 0xf1}}}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0x0, @mcast2, 0x5}, {0xa, 0x0, 0x20000207, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800086}, r6}}, 0x48) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4000, 0x0, @mcast2, 0x5}, {0xa, 0x0, 0x20000207, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800086}, r6}}, 0x48) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681fc717e27cb0ad775b301", 0xe, 0xfffffffffffffffc) (async) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681fc717e27cb0ad775b301", 0xe, 0xfffffffffffffffc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r7, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x482, 0x0, 0x3}]}) (async) ioctl$KVM_GET_MSRS_sys(r7, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x482, 0x0, 0x3}]}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r8) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006040), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000006080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="11002bbd7000fddbdf250700000008000300", @ANYRES32=r10, @ANYBLOB="08000500010000001400040070"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x10) 8m45.123325997s ago: executing program 5 (id=2091): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r1 = creat(&(0x7f0000000380)='./file0\x00', 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)='./file0\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r4}, 0x18) r5 = open(&(0x7f0000000280)='.\x00', 0x40080, 0x1d2) fcntl$notify(r5, 0x402, 0x5) fcntl$notify(r5, 0x402, 0x8000003d) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4050}, 0x814) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x10) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r8, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/26, 0x1a}], 0x1, 0x4000ffe, 0xfffffffc) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x184) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x2002, 0x3, @empty}, 0x1c) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000003c0)=0x80000cc2, 0xffffffffffffff8c) r10 = openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x2082, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r10, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r10, &(0x7f0000000100), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r10, &(0x7f0000000080)={0x2, 0x3}, 0x2) syz_emit_ethernet(0x2e, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000180c2000000810036006006e7778a2006000000000000002f44b3010000004fe3002b04cc743491"], 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r9, 0x16, 0x1, 0x7fff, &(0x7f00000002c0)=[0x0], 0x1, 0x0, &(0x7f0000000100), &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r1, r1, 0x10, 0x0, @val=@netkit={@void, @value=r1, @void, @void, r11}}, 0x1c) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0xe, 0xfffffffffffffff9, 0x3, 0xa, 0x9, 0xc}) 8m43.914236501s ago: executing program 5 (id=2096): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = syz_io_uring_complete(0x0) ioctl$TCXONC(r2, 0x540a, 0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x32) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x8, 0xd9}, 0x8) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket(0x10, 0x3, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8m28.815938553s ago: executing program 33 (id=2096): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = syz_io_uring_complete(0x0) ioctl$TCXONC(r2, 0x540a, 0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0) fchmod(0xffffffffffffffff, 0x32) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x8, 0xd9}, 0x8) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c}) ioctl$SG_BLKTRACETEARDOWN(r4, 0x1276, 0x20000000) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket(0x10, 0x3, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 3m51.386537526s ago: executing program 4 (id=2867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) r1 = socket(0x2c, 0x2, 0x2000008) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) msgsnd(0x0, &(0x7f0000000240)={0x3}, 0x8, 0x8fa2496c381b7ad5) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000380)={{}, r4, 0x0, @inherit={0x58, &(0x7f0000001780)=ANY=[]}, @subvolid=0x401}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000000900)={{r3}, r4, 0x10, @inherit={0x58, &(0x7f0000000140)={0x1, 0x2, 0x1, 0x10000, {0x30, 0x2, 0xab, 0x5, 0x80000000}, [0x0, 0x4]}}, @subvolid=0x8}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000280)=r4) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) r5 = mq_open(&(0x7f0000000480)='!selinuxwk1\x1f\xd0m\xc3\x7f9\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#j\x97\x8f\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm(p\xc9-QZ#\xd2{\x84\xbf\x06\x00\x00\xd9', 0x840, 0x104, 0x0) finit_module(r5, 0x0, 0x0) 3m50.614034375s ago: executing program 4 (id=2870): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x48}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000eabf435000ed9ef23cf42abddbf23c1d142cfdff48cad7086815757aeb2b34f9055c40dd2b386bb97ca378b74b7aad2d", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf2502000000"], 0x14}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) connect$nfc_llcp(r3, &(0x7f00000001c0)={0x27, r4, 0x0, 0x5, 0x5, 0x0, "ac2c4309a2729e4c671c5e52c25feb02da5a8a4c3b375361ac675b47ac632e48bcfd6dcc03eac7ba13283d407a5e032a12b6a133d478a3333c283085a8fb32", 0x1f}, 0x60) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000300)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x28, 0x1, 0x0) syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000240), &(0x7f0000000040)) 3m49.152754786s ago: executing program 4 (id=2876): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4048aec9, &(0x7f00000001c0)={0x4, 0xffffffffffffffff, 0x1}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$char_usb(r2, &(0x7f00000008c0)='-0', 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r3 = dup(0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x2, 0x9, 0x4, 0x9, 0x2, 0x0, 0x70bd2c, 0x25dfdbfb}, 0x10}}, 0x0) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x260e, 0x10100, 0x0, 0x170}, &(0x7f00000002c0)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r8, &(0x7f0000000000), 0xd) getitimer(0x2, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000240)={r9, 0x7, 0x8}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB="fed9753000000000b7000000ffff000000d5ea14", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) prctl$PR_SET_KEEPCAPS(0x8, 0x10000000) write$P9_RREADLINK(r10, &(0x7f0000000080)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RMKDIR(r11, &(0x7f0000000140)={0x14, 0x49, 0x2, {0x7e, 0x4}}, 0x14) 3m47.537087239s ago: executing program 4 (id=2879): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18f) getgroups(0x2, &(0x7f00000000c0)=[0xee01, 0xee01]) setfsgid(r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x42, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)={0x14, 0x14, 0x609, 0x0, 0x0, {0x1e}}, 0x14}}, 0x8040) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r4 = io_uring_setup(0xfc8, &(0x7f0000000180)) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0x7f, 0x0, 0x0, 0x4}}, 0x50) setgroups(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r1, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0xfffffffffffffffd, {0x0, 0x2, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x2000, 0x0, 0x0, 0xfffffffffffffffc, 0x8, 0x0, 0x3fffb, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m46.36163105s ago: executing program 4 (id=2882): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file1/file0/file0\x00', 0x0, 0x18}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000082000a000200aaaaaaaa00000000060005"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0\x00'}) 3m44.625797579s ago: executing program 4 (id=2883): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000080), 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f"], 0x48) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = getpgrp(0x0) prlimit64(r5, 0x4, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f40004000000000000"], 0x1c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x19}, 0x94) 3m29.257646204s ago: executing program 34 (id=2883): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r0, &(0x7f0000000080), 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f"], 0x48) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = getpgrp(0x0) prlimit64(r5, 0x4, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f40004000000000000"], 0x1c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x19}, 0x94) 16.177076055s ago: executing program 1 (id=3508): socket$inet(0x2, 0x2, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = open(&(0x7f0000000380)='./bus\x00', 0x240, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES8=r3], 0x2b) syz_genetlink_get_family_id$tipc(0x0, r3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = gettid() kcmp(r10, r10, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) bind$inet(r9, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) prlimit64(r8, 0x4, &(0x7f0000000000)={0x5d, 0x6}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904"], 0x0) r11 = fsmount(r5, 0x1, 0x0) fchdir(r11) r12 = open(&(0x7f0000000040)='./file1\x00', 0x115440, 0xa0) write$FUSE_CREATE_OPEN(r12, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, r6, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, r7, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r12, r12, &(0x7f0000000080), 0x7f03) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x134, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x108, 0x2, [@TCA_RED_STAB={0x104, 0x2, "0a1fb0699d46dac48f29d158dbe8cfb1979e12979688dc039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c7667ce67af25166c2f0f85f36aa8867406119c2a6f1f892e31dea982c5ab0348d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b51424df36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459af0ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1"}]}}]}, 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x21}}, 0x0) 14.219505474s ago: executing program 7 (id=3511): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff3d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x4621}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70408000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r8, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000382, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') read$char_usb(r9, &(0x7f0000000040)=""/4109, 0x100d) r10 = socket$netlink(0x10, 0x3, 0x2) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYBLOB="69e4726dd2685073ca5a21b4ea28a902ce52dc4485362349b20cc05200ff450992ddc2a6991a03288efaa9184eeb9a166f8781d0afe1a631d920b8d3f9241cea8bc8e394419028515d177aab210718f69dfde6261c6b1e0c560691e2b053dc5304d84de0bf9e99cd2104010a31204642d1848377555e38745f5b398015fcbeed30901f5fcb34c138638706ebf7e61585586c9505f7b9c3c42c", @ANYRESDEC=r3, @ANYRESDEC=r1, @ANYRESHEX=r8], 0x28}}, 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000011c0)=ANY=[@ANYRES32=0x0, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYRESHEX=r11, @ANYRES16=r9, @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f000000e280)={0x2020}, 0x2020) 11.530704959s ago: executing program 1 (id=3517): r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername(r9, &(0x7f00000003c0), &(0x7f0000000440)=0x80) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x24048180) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @empty, 0x8}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000380)=ANY=[], 0x190) ioctl$VHOST_SET_VRING_NUM(r3, 0x4008af10, &(0x7f0000000080)={0x1, 0x10}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) syz_emit_ethernet(0x76, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "081000", 0x40, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0xffff, {0x5, 0x6, "5436ea", 0x400, 0x88, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@dstopts={0x0, 0x0, '\x00', [@pad1, @padn]}]}}}}}}}, 0x0) 11.51820882s ago: executing program 7 (id=3518): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x164, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007af28810d30bf4055b000000000109025201010000000009044000000e0100008c2406bb98971edc8199d0b55e0d487d476f1a4c94d1206f62ed668d9615e79c1604c3b0b70966268f2d199e32129178c8072df7e551a8d5f3cffd243e0455969fc42ccd91dc7c858a42261cd74ef8fcec94f51a9492664d755dcfea1154d8410ab077a5be47f12bfffbf75b35a919cf65376ebfab", @ANYBLOB="c9df766ea4d7370fb649014b12a9963a8159038c0f75396a"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) eventfd2(0x4, 0x1) socket(0x840000000002, 0x3, 0x100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x4, 0x0, 0x0, 0x5, 0x1, 0xffff6ebe}]}, {0x0, [0x30, 0x30, 0x30, 0x2e]}}, 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2c}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}, 0x1, 0x0, 0x0, 0xc}, 0x20008844) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0xc0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0x2ec66, 0x8, 0x8, 0x7, 0x800000000000009, 0x0, 0x8, 0x10000, 0x100, 0x8000000000000001, 0x40000000000000, 0x81, 0x5, 0x5, 0x49, 0x3ff, 0x2, 0x3, 0xb, 0x8000000008, 0xb, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x2, 0xffffffff, 0xffffffff00000000, 0xfffffffffffffffc, 0x9, 0x40000000007, 0x23b, 0x800, 0x2, 0x8890, 0x8, 0x2, 0x6, 0x6, 0x3, 0xa3de, 0x4, 0x8, 0x5c3e, 0x4, 0x1, 0x5, 0xfffffffffffffffa, 0x1, 0xe, 0x7, 0x4, 0x100000000, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x6, 0xfffffffeffffffff, 0x8, 0x3, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0xffffffff, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x5, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x8000000000000001, 0x4525cd1a, 0x9, 0xff, 0x5, 0xffe, 0x5, 0x3b73, 0x6, 0x8, 0xf6, 0x7, 0x2, 0x200, 0x7, 0xc53e, 0x3, 0x2, 0x2293322f, 0x6, 0x34, 0x0, 0x400000000d, 0x2, 0x5, 0x2, 0x2, 0x0, 0x8, 0xfffd, 0x10, 0x200000008, 0x8, 0x1, 0x8, 0xeb8, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00002, 0x8, 0x3]}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r5, 0xc008aec1, &(0x7f00000000c0)={0x5d, 0x0, [{0x4, 0x859, 0x2, 0x7, 0x8, 0x5, 0x2}]}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f00000000c0)=ANY=[]) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000000000003b"]) 10.317066565s ago: executing program 1 (id=3522): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="8cc90c1cbf26f3ce070253848510c50100"]) close(r0) 9.94457769s ago: executing program 1 (id=3524): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x5, 0x80000) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000000c0)={{0xa, 0x0, 0x3bfc, 0x1, '\x00', 0x1ff}, 0x0, 0x20000000, 0x4, r1, 0x2, 0xfffffffc, 'syz1\x00', &(0x7f0000000080)=['\x00', '\x00'], 0x2}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000200)={0x1, 0x5, 0x3d, 0x81, '\x00', 0x6}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000240)="808f0a3bf8aa830d0de1ea43555729b3e3470699deceaefa2c08ee52f598d1c580c3800a7eebe18e6d05c379c79f640cac845b997724cf6e6aa584fbf5b9bcce4ff1627466740f1211", 0x49, 0x10, &(0x7f00000002c0)={0xa, 0x4e22, 0x7fff, @private1, 0xd}, 0x1c) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "bb512cbbeeb016c6", "6636d80a2d980374f509a95c8dd506d5", "627bc235", "0d90fd3331f8a46c"}, 0x28) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000340)={0x7, 0xffffffff, 0x0, 0x8, 0xb0}, 0x14) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='fuseblk\x00', 0x10010, &(0x7f0000000440)='/dev/snd/controlC#\x00') bind$tipc(0xffffffffffffffff, &(0x7f0000000480)=@name={0x1e, 0x2, 0x0, {{0x40, 0x3}}}, 0x10) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f00000004c0)={'wlan1\x00', {0x2, 0x0, @multicast1}}) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_aout(r5, &(0x7f0000000500)={{0x10b, 0x0, 0x7, 0xaa, 0x96, 0x8, 0x29a, 0x6}, "10a01d3b20e65a45daa71e0d23744abc71c8d3e44c399a7de9881de2203900e2656f7097349b41aff8df497418547df00150175c125afeafe5e9182e36e2271e0ab70fc2abac2ab6833dec81443cd65414ccd0fccf27862e89340f44e48a79a46c6c6a6c2c25fe102559cc5213a411b099f5255ac670a7f3f73d162d382dedc67804f245d2fb884d", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x9a8) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000f00), 0x105201, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000ec0), r6) ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000001340)={0x15, 0x18, &(0x7f0000000f40)}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000001380)=r6, 0x4) r7 = syz_usb_connect$printer(0x4, 0x36, &(0x7f00000013c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x58, 0xc0, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x3, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x4, 0x80, 0x5}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x1, 0x2, 0x3}}]}}}]}}]}}, &(0x7f0000001640)={0xa, &(0x7f0000001400)={0xa, 0x6, 0xcd902e56300bd2b0, 0x2, 0xff, 0x18, 0x20, 0x7}, 0xc3, &(0x7f0000001440)={0x5, 0xf, 0xc3, 0x3, [@generic={0xac, 0x10, 0x3, "6e06f7f41108673adca4e4da1e680575505cec13ddf9d09dfeea739e0cb9812bcbeeb204df6ceb5c4f67fa1ac918838c876c3ffa99145dc377d7d63a3eb4e9de7202b0372161060be94b67b446867a2e42192a52e57ac0ed984d160f7f414081d48d724cd91a6cd2a32e07e530b74f6a5ab5e4b8841e19a40024496344fe9b910b4ef0bb3673235ab7defa024a5d11ae0718f6f74831ac13c39f45a7b3add5a13ba5aca287f21b86ef"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xa, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0xc, 0x7, 0x83, 0xd, 0x3}]}, 0x3, [{0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x7b, &(0x7f0000001580)=@string={0x7b, 0x3, "eec3c007b159ac146305a7d2df4570bc8c10af03d4b31365932721c79fac414ba471b9e3dac9f7232d73a7ae509e0ba56f5b1f6e4c99115b608d54e71c2b279e3705341ff4dacd6a6acf13506bed17cb397ab42a663301933694cae4f731ddb8d935ee3d000e9dcf3a269f9806a07f513707311921b0adf81c"}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x424}}]}) syz_usb_control_io$printer(r7, &(0x7f00000017c0)={0x14, &(0x7f0000001680)={0x40, 0x10, 0xe8, {0xe8, 0x29, "a9031ad8ab000528095933379ae1615faf087ddff0d1825bdabd617e99774b0609e0bb0f2e19c300f87a4269ca2db10c50e592fa60386b4e2bcdaf95b808f527f13f3d11c6cfa141cbb4ea093fa9d4068f662788512e75b261dd9264c1b6eb3922ac36de74588e6c39a8a9f2c633496a0f1e37c19d2fb6739375df162424458c913d20a9b583708a9263a52a2f927d699596e10fec5407c7f4d81609889c93fdb4b6844bd82f5e3c5b2103c582e1cca241ee29e80e275a7b710a8fee28248022dd005c1ec32d8bbc91a10fa57711b332ea6c823aa5ec13e70e9e0c8742d9335919326b6e033b"}}, &(0x7f0000001780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}}, &(0x7f0000001a80)={0x34, &(0x7f0000001800)={0x40, 0xf, 0xfa, "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"}, &(0x7f0000001900)={0x0, 0xa, 0x1, 0x3}, 0xffffffffffffffff, &(0x7f0000001940)={0x20, 0x0, 0xaa, {0xa8, "1e0c17ed54de9aef44ae0b5dc4ecd0d91c7498eac00c9ac5e6869c9fcb0a284f2a268a23901e69f03be68d86c62ca7ed4167431f8214128457cc4d75a57db659c1d1227eef6490111834ed428d0d31a8168810c64375def3b39bc9bba316766186fc565477f2560de5212b2116126bb0460c8b5910939eb74f8f25306665492c27f44fe69c05d55f50d6344c375ddf2cdc42f3e35c40b4a4b472e8fe78e429ca744c1a2f76bb5494"}}, &(0x7f0000001a00)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000001a40)={0x20, 0x0, 0x1, 0x64}}) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSPGRP(r8, 0x5410, &(0x7f0000001ac0)=r1) r9 = add_key$keyring(&(0x7f0000001b00), &(0x7f0000001b40)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, r9, &(0x7f0000001b80)='keyring\x00', &(0x7f0000001bc0)='-^,\x00') r10 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001c00), 0x2a00c0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c80), r6) sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000001ec0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001e80)={&(0x7f0000001cc0)={0x1b4, r11, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x180, 0x3, 0x0, 0x1, [{0xd4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xd0, 0x1, "d59b897af03b8dce181da264bccd53e63d686462d04954173d85c0ebe4f1307d688a5691eb73426a73afb3e98b51dc8524e3c3475c228326f86d8c079f7c1eadec61857f796c677f4338fa5f73e3738271e9c9941cb62dd7212a878353835fdbd71a6670e08438f16635e951cd42c7431e7dbcea428f7c91a6add50a9074144ded920deac104ab83cb11f3edd6e62ad745c0948bfb5434480235a914c1fe255a3256cb602a6820ebe98c584ce5eeeef2523b598231350140d4d88f3fbb08af644830de37f66b86f21d2f4f11"}}, {0x9c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x98, 0x1, "db6a894f47d408f28d5f3f80728956a8f92b5a7325ad2de0d4b35b74dba7ac99cdf94e05515c132df5aeead33eef80191785f9f0a0a7787786cc44f066baf36a2c221a54de494a52fe349606c07c76e62716a18de3037744a6c353fc57efe7a203a72fad00bce491a2d9ed4b6758a23a10be4ce19c830269257974026454dc8d5f8e92a1594a660fbaf0fedc817d674c6b465307"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x1b4}}, 0x20008010) ioctl$BINDER_SET_MAX_THREADS(r6, 0x40046205, &(0x7f0000001f00)=0x5) name_to_handle_at(r6, &(0x7f0000001f40)='./file0\x00', &(0x7f0000001f80)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x6f7, 0x4, 0x0, 0x65}}, &(0x7f0000001fc0), 0x1000) 9.282487313s ago: executing program 7 (id=3527): syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open(&(0x7f0000000440)='./file0\x00', 0x40, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x400000000000, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r4, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0a000000283666f6c48726ceace0973424896004e26e38053a7b18063bc991b634e08007a1ea43e5cea7ae576795ccbba7e6da788a1d0427a16e1e5c71114f1ff6dc946039cf88dd83dd7ea62774a391ebd91b01e9025495dfc7719fa06b4a44ada32a8b25e271a2aa48e780e808153af6c8c4056075d779bdd8f8589311db26ffffffff39aa925445d2e86c88109a7187b28e603311231b90f2cc63f0b200d489f699949cb12ad1adf5848ced54b52ce2fd33f974ba00"/196, @ANYRES16=0x0, @ANYBLOB="00022dbd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0x800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xe, 0x4, 0x8, 0x92}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="59b6890a81fa539a0008050001000700"/28], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x37, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6}, 0x94) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 9.041035654s ago: executing program 1 (id=3529): syz_open_dev$usbfs(&(0x7f0000000000), 0xf946, 0x2) (async, rerun: 64) r0 = socket(0x1e, 0x4, 0x0) (rerun: 64) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = userfaultfd(0x80001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 32) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$TIOCSETD(r5, 0x5423, 0x0) (async, rerun: 64) ioctl$TCFLSH(r5, 0x400455c8, 0x0) (rerun: 64) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) (async, rerun: 32) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) (async, rerun: 32) recvmmsg$unix(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x400122a2, 0x0) (async) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xc, 0x3, &(0x7f0000000080)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x3, 0x71, 0x10, 0xb5}}, &(0x7f0000000480)='GPL\x00'}, 0x94) 7.892984169s ago: executing program 1 (id=3532): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_usb_connect$uac1(0x7, 0x71, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x3, 0x80, 0xf4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0xf7, 0x9, 0x6, {0x7, 0x25, 0x1, 0x83, 0x2, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x26, 0x6, 0x1, {0x7, 0x25, 0x1, 0x3, 0x8, 0xdd60}}}}}}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c2402000000030000000000092406000601000000092403000000000500092406050001"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000001000)=ANY=[], 0x0) syz_usb_control_io(r0, &(0x7f0000001380)={0x2c, 0x0, &(0x7f0000001180)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000007c0)={0x14, 0x0, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r6, 0x1000000, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60e400ff00403a00fe800000000000000000004000000027fe059078020000006f000000000000000000000000000001fe8000000000000000000000000000372900040001300200f1a96e3d0e3a60"], 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wg2\x00'}) 7.207013908s ago: executing program 6 (id=3536): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) 6.590480339s ago: executing program 0 (id=3537): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x164, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007af28810d30bf4055b000000000109025201010000000009044000000e0100008c2406bb98971edc8199d0b55e0d487d476f1a4c94d1206f62ed668d9615e79c1604c3b0b70966268f2d199e32129178c8072df7e551a8d5f3cffd243e0455969fc42ccd91dc7c858a42261cd74ef8fcec94f51a9492664d755dcfea1154d8410ab077a5be47f12bfffbf75b35a919cf65376ebfab", @ANYBLOB="c9df766ea4d7370fb649014b12a9963a8159038c0f75396a"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) eventfd2(0x4, 0x1) socket(0x840000000002, 0x3, 0x100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x4, 0x0, 0x0, 0x5, 0x1, 0xffff6ebe}]}, {0x0, [0x30, 0x30, 0x30, 0x2e]}}, 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2c}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}, 0x1, 0x0, 0x0, 0xc}, 0x20008844) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0xc0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0x2ec66, 0x8, 0x8, 0x7, 0x800000000000009, 0x0, 0x8, 0x10000, 0x100, 0x8000000000000001, 0x40000000000000, 0x81, 0x5, 0x5, 0x49, 0x3ff, 0x2, 0x3, 0xb, 0x8000000008, 0xb, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x2, 0xffffffff, 0xffffffff00000000, 0xfffffffffffffffc, 0x9, 0x40000000007, 0x23b, 0x800, 0x2, 0x8890, 0x8, 0x2, 0x6, 0x6, 0x3, 0xa3de, 0x4, 0x8, 0x5c3e, 0x4, 0x1, 0x5, 0xfffffffffffffffa, 0x1, 0xe, 0x7, 0x4, 0x100000000, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x6, 0xfffffffeffffffff, 0x8, 0x3, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0xffffffff, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x5, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x8000000000000001, 0x4525cd1a, 0x9, 0xff, 0x5, 0xffe, 0x5, 0x3b73, 0x6, 0x8, 0xf6, 0x7, 0x2, 0x200, 0x7, 0xc53e, 0x3, 0x2, 0x2293322f, 0x6, 0x34, 0x0, 0x400000000d, 0x2, 0x5, 0x2, 0x2, 0x0, 0x8, 0xfffd, 0x10, 0x200000008, 0x8, 0x1, 0x8, 0xeb8, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00002, 0x8, 0x3]}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r5, 0xc008aec1, &(0x7f00000000c0)={0x5d, 0x0, [{0x4, 0x859, 0x2, 0x7, 0x8, 0x5, 0x2}]}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f00000000c0)=ANY=[]) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000000000003b"]) 5.672642901s ago: executing program 7 (id=3540): r0 = semget$private(0x0, 0x207, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x1}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x70bd29, 0xfffffffe}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x51dcb31a43476434) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r5, 0x0, '\x00', 0x0, r4, 0x0, 0x5}, 0x50) semctl$GETALL(r0, 0x0, 0xd, 0xfffffffffffffffe) 4.873410499s ago: executing program 6 (id=3541): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000180)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x4, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000780)={@ptr={0x70742a85, 0x40002, 0x0, 0x0, 0x0, 0x32}, @ptr={0x70742a85, 0x0, &(0x7f00000002c0)=""/59, 0x3b, 0x2, 0x31}, @fda={0x66646185, 0x2, 0x1, 0x8}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 4.606077549s ago: executing program 0 (id=3542): setxattr$incfs_metadata(0x0, &(0x7f0000000840), &(0x7f0000000500)="22cff58056ac97d6ac1e70160c68a4563d01a5289d52d434b6e8692afcb59ca43c016d04307132d5a14be1806dd53540a501ff9b3c32a2af04b0c3f22887711f5c5709d3bb6d0a00a84046f982019ffc5e6a9f927cb2df0f1f68325554d319db3e5f75186d819fb58b32dfebb27a69884041d9b4e20a6758b8cc37ea0320e84c3d2ff7e671fee0aaa4944661b248f679f61f1c5e7cfaa561bc1193e6f815f93041f9c1920078982a9548fccc7a7d7e0a55c2bb28e06f4f8d6bd844004e5980c3166103655b86dbd2d46fd0c4f3aa975cc5d28311fe56cb37a1257deeeb9cb3fe23a046086b06", 0xe6, 0x1) setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x40091}, 0x4010) 4.577969951s ago: executing program 3 (id=3543): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff3d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x4621}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70408000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="d800000016000186"], 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000382, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000021c0)='maps\x00') read$char_usb(r8, &(0x7f0000000040)=""/4109, 0x100d) r9 = socket$netlink(0x10, 0x3, 0x2) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=ANY=[@ANYBLOB="69e4726dd2685073ca5a21b4ea28a902ce52dc4485362349b20cc05200ff450992ddc2a6991a03288efaa9184eeb9a166f8781d0afe1a631d920b8d3f9241cea8bc8e394419028515d177aab210718f69dfde6261c6b1e0c560691e2b053dc5304d84de0bf9e99cd2104010a31204642d1848377555e38745f5b398015fcbeed30901f5fcb34c138638706ebf7e61585586c9505f7b9c3c42c", @ANYRESDEC=r3, @ANYRESDEC=r1, @ANYRESHEX], 0x28}}, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000011c0)=ANY=[@ANYRES32=0x0, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYRESHEX=r10, @ANYRES16=r8, @ANYRESDEC=0x0]) read$FUSE(r10, &(0x7f000000e280)={0x2020}, 0x2020) 4.311848788s ago: executing program 6 (id=3544): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xce, &(0x7f0000000100), &(0x7f0000000140)=0x4) prctl$PR_MCE_KILL(0x23, 0x1, 0x7ffffffff000) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000f12d42b54b71a2cebba20000007912d80000000000c60000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x61, &(0x7f000000cf3d)=""/187, 0x0, 0x18, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0xb}, 0x10, 0xffffffffffffffff}, 0x94) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='io.weight\x00', 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="f000000010000100feffffff00010000fe880000000000000000000000000001fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/382], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f00000001c0)={@dev, @initdev, 0x0}, &(0x7f0000000200)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x0, 0xce, &(0x7f0000000300)=[{}, {}], 0x10, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xa2, 0x8, 0x8, &(0x7f00000003c0)}}, 0xffffffd7) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000005c0), 0x201c0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r6, 0x40045109, &(0x7f00000009c0)=0x401) r7 = accept4$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000540)=0x14, 0x80000) setsockopt$packet_int(r7, 0x107, 0x12, &(0x7f0000000580)=0x81, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0x1, 0x58, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x4, 0x7f, 0x2, 0xffffff8f, 0x28, @dev={0xfe, 0x80, '\x00', 0x1d}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8, 0x4, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000007c0)={'wg0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000800)={@empty, 0x0}, &(0x7f0000000840)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000008c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000980)={'syztnl1\x00', &(0x7f0000000900)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x39, 0xfe9, 0x71, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x1, 0x700, 0x0, 0x2}}) r14 = add_key$keyring(&(0x7f0000000a00), &(0x7f0000000a40)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r15 = add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, r14) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r15, &(0x7f0000000640)='id_legacy\x00', &(0x7f0000000180)) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r17, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r16, &(0x7f0000000bc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000001380)=ANY=[@ANYRESDEC=r11, @ANYBLOB="84c9184eef2ef460cd59cea7096115198caffd2b3becab188c2fe0014763d16b85169726144ff0e2ffa05adbb6ef18c0eb6afa72b254058ae124c8e86e1efbf8e60bf8823dc154a969721cc15b15b6fa726020969eb3c9aeaf34d7cd54c09a60b75e9b12ce6880eca5f18f9d4a23b8a4abf7f00b41a6a75164f9ca1f78e78eed61e676a255c9a7685c19ffd7a02769ac445aaa5d8634d4836b5860b6e0343eda54e4e2d9a031d35a508ef1bfd4ef91a3641e3d9b5ddf33d24914e9c62f9936735e08bcd061f94e5f9264792a452c05933fc8655cca2739bf1be22a", @ANYBLOB="000228bd7000fcdac389229f2c596400018008000100137618e4ff9ccde6feea783984085b4fdf5958bb4bb216fb5e266607482ea087a31bf7a70297fcf0b6945046b3b96a5c25d4d567c7f233dbc81a1c99c153b5bd521c4d03ccbab4bcefb8294b7d10fecb532c03c69a7b35a5a068d97baa", @ANYRES32=r4, @ANYRES16=r9, @ANYRES32=r5, @ANYRESOCT=r6, @ANYRES32=r9, @ANYRESOCT=r17, @ANYRES32=r16, @ANYBLOB="01002f0a5059cd2a2a888f0b788af6ec87a553aad1c7444aabea00dd9618a0dbff8202e77f645393be1c53be90ecc7b896b6373c6d8381bceb2d53413e8780c3024bbe71a16cd82a878a3477d336aa980c5b47a0ca4f087da470eafde2371452af56fa333b977b3f4741e757d330d5e5444ee9ecdf1b662d75f0852706792a5994d6bfb9dcdfba38ba0e9b80f1f04f42083fa77a02fad7320db77cf229a055d5d1eca393ed3da63abd9c966128a73ad0d6edfbbba1154fb6965549f8bf47fbb81d8615a44abde73656e14c18b1ad66d2744b9d24237242b7986ec17220822a5caa347adf9875e55ab4", @ANYRESOCT=r1, @ANYRESHEX=r10, @ANYRES64=r8, @ANYBLOB="6c000180140002007465616d5f736c6176655f310000000014000200766c616e30000000000000000000000008000100", @ANYRES32=r12, @ANYRESHEX=r0, @ANYRES32=r13, @ANYBLOB="0800030000000000140002006272696467655f736c6176655f31000008000300020000000800030002000000080003000100000008000300000000000800030001000000"], 0x19c}, 0x1, 0x0, 0x0, 0x4044803}, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x15, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="180200000400140000000000fdffffff850000005200000095000000000000009e9f32d7720119ee2d227beca1be1a34b3a1a0a7b53859b92a226e0501dd9d051b02a429dc540d81074fad37688937d6ff207e6177010000809999fce7f234567da7dd70e1d9cc2ed8c1f21f2e6679f60b3014d68106541853d8d774f2b25e30a57ab674f030f8c0cf4b433ee7ddd0eb159f18e1baea45"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) mlockall(0x5) write$cgroup_int(r2, &(0x7f00000000c0)=0xc, 0x12) 3.548190116s ago: executing program 3 (id=3545): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', r2}, 0x18) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', r2}, 0x18) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) unshare(0x22020600) (async) unshare(0x22020600) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "345aa3593519c7e1", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28) sendto$inet6(r6, 0x0, 0x0, 0x8000, 0x0, 0x0) write$binfmt_aout(r6, 0x0, 0xfdef) (async) write$binfmt_aout(r6, 0x0, 0xfdef) sendto$inet6(r6, &(0x7f0000000240)="c62ee5d6a89f23", 0x7, 0x8040, 0x0, 0x0) (async) sendto$inet6(r6, &(0x7f0000000240)="c62ee5d6a89f23", 0x7, 0x8040, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000300)=0x1) write$binfmt_elf64(r6, 0x0, 0x78) (async) write$binfmt_elf64(r6, 0x0, 0x78) sendto$inet6(r6, &(0x7f0000000100)="cb965843c27e8d8771dcf31de97bd754cb5c", 0x12, 0x48c5, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011000166"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011000166"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 3.441197752s ago: executing program 0 (id=3546): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004810) r1 = socket(0x2c, 0x2, 0x2000008) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000014f000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x80a0000}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000015b000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa6426660f35c4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5d}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, 0x0, 0x20) unshare(0x22020600) r6 = mq_open(&(0x7f0000000480)='!selinuxwk1\x1f\xd0m\xc3\x7f9\xc9\x9e*\rT\x93\xfd\xe2\x91\xef\xaa\x16#j\x97\x8f\xbc\xdeY\x0f\xcc\xc5mV\xcb\x15vm(p\xc9-QZ#\xd2{\x84\xbf\x06\x00\x00\xd9', 0x840, 0x104, 0x0) finit_module(r6, 0x0, 0x0) sendmmsg(r1, &(0x7f00000030c0), 0x0, 0x9200000000000000) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x2) 3.248246908s ago: executing program 6 (id=3547): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = open(&(0x7f0000000240)='./file0\x00', 0x40000, 0x181) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) 2.787636844s ago: executing program 7 (id=3548): mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0) syz_emit_ethernet(0xda, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000cc000000000001907864010100ac1414aa0b009078032c00004c000000000000000a89000000000000ac1414aa862a00000040000d5e000000ff00000000000005054eb8a600129606053d0006ff00800000b61af93a93831300ac141400ffffffff7f000001e00000028648ffffffff02074b6cefc500000cdf61168c24ac88ad078c000a2189ea43a2149b84060bf7d11634eea26b75af000902a20948fd74060011ccf0294e2a3bdb4aa40b249e8e0c1a441456040000000000000000fffffffe00000000000000"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_open_procfs$userns(0x0, &(0x7f00000005c0)) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000192c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r2, &(0x7f0000019300)='pagemap\x00') pread64(0xffffffffffffffff, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000019340)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000002000000000000000100000d000000000400000005000000070000000000001205000000000000000000000d0000000000007f7260708553fdd9393894e9e0dade460e9b4b2b7a6cd031accedf20d9da03a8d92b3d5a69a80065c49a7a697ec6f1d5ff570318e10905e38cd9f17c4b280840954379793903d4625fbd7a39a0ad63b6402148111d8bbb3761c0b25e4ba0599b8b5d5c814f78755284a6658f5bc33b4d4434f97127e98542d52cede4b445859e9b38"], 0x0, 0x46, 0x0, 0x1, 0x7}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019440)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000001000000000000000002000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, r8}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7}) close_range(r5, 0xffffffffffffffff, 0x0) mount$afs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) mount$afs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='dyn']) 2.730599395s ago: executing program 3 (id=3549): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket(0xa, 0x3, 0x3a) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x5, 0x10, 0x10, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x10, 0x0, 0x65}}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f00000002c0)={0x14, 0x10, 0x3, 0xb, 0x4, 0x2, 0x3, 0x84, 0x1}) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x7}, {0xfff1, 0xffff}, {0xfff3, 0xd}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1ff}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) 2.609137416s ago: executing program 0 (id=3550): openat$nci(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x659b, 0x55) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x8002) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x2043, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2c, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) syz_io_uring_setup(0x23b, 0x0, &(0x7f0000000100), &(0x7f00000001c0)) pselect6(0x40, &(0x7f00000001c0)={0x3f, 0x4, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, r5, 0x100, 0x70bd2d}, 0x14}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) 1.297832008s ago: executing program 3 (id=3551): sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) preadv2(r1, &(0x7f0000002400)=[{&(0x7f0000000100)=""/190, 0xbe}], 0x1, 0x6, 0x4, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x0) r2 = gettid() fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x1, 0x4, 0xc, 0x8, r2}) 1.008858427s ago: executing program 7 (id=3552): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x5, 0x164, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007af28810d30bf4055b000000000109025201010000000009044000000e0100008c2406bb98971edc8199d0b55e0d487d476f1a4c94d1206f62ed668d9615e79c1604c3b0b70966268f2d199e32129178c8072df7e551a8d5f3cffd243e0455969fc42ccd91dc7c858a42261cd74ef8fcec94f51a9492664d755dcfea1154d8410ab077a5be47f12bfffbf75b35a919cf65376ebfab", @ANYBLOB="c9df766ea4d7370fb649014b12a9963a8159038c0f75396a"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) eventfd2(0x4, 0x1) socket(0x840000000002, 0x3, 0x100) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x4, 0x0, 0x0, 0x5, 0x1, 0xffff6ebe}]}, {0x0, [0x30, 0x30, 0x30, 0x2e]}}, 0x0, 0x2a, 0x0, 0x1, 0x3}, 0x28) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2c}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}, 0x1, 0x0, 0x0, 0xc}, 0x20008844) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0xc0, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0x2ec66, 0x8, 0x8, 0x7, 0x800000000000009, 0x0, 0x8, 0x10000, 0x100, 0x8000000000000001, 0x40000000000000, 0x81, 0x5, 0x5, 0x49, 0x3ff, 0x2, 0x3, 0xb, 0x8000000008, 0xb, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x2, 0xffffffff, 0xffffffff00000000, 0xfffffffffffffffc, 0x9, 0x40000000007, 0x23b, 0x800, 0x2, 0x8890, 0x8, 0x2, 0x6, 0x6, 0x3, 0xa3de, 0x4, 0x8, 0x5c3e, 0x4, 0x1, 0x5, 0xfffffffffffffffa, 0x1, 0xe, 0x7, 0x4, 0x100000000, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x6, 0xfffffffeffffffff, 0x8, 0x3, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0xcdc, 0xffffffff, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x5, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x8000000000000001, 0x4525cd1a, 0x9, 0xff, 0x5, 0xffe, 0x5, 0x3b73, 0x6, 0x8, 0xf6, 0x7, 0x2, 0x200, 0x7, 0xc53e, 0x3, 0x2, 0x2293322f, 0x6, 0x34, 0x0, 0x400000000d, 0x2, 0x5, 0x2, 0x2, 0x0, 0x8, 0xfffd, 0x10, 0x200000008, 0x8, 0x1, 0x8, 0xeb8, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00002, 0x8, 0x3]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r6, 0xc008aec1, &(0x7f00000000c0)={0x5d, 0x0, [{0x4, 0x859, 0x2, 0x7, 0x8, 0x5, 0x2}]}) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f00000000c0)=ANY=[]) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="05000000000000003b"]) 1.008564926s ago: executing program 6 (id=3553): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x3f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 646.812324ms ago: executing program 3 (id=3554): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20080058) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/fscreate\x00') (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000300)={'pcl711\x00', [0x8c78, 0x6, 0xd09a, 0x2, 0x7, 0x1, 0xb32, 0x2b9c, 0xffe, 0x9, 0x4000010, 0x3, 0x4, 0x0, 0xffff, 0x100006, 0x5, 0x6, 0x81000, 0x30000, 0x10000, 0x2, 0x1, 0xe2df, 0x2, 0x80008001, 0x7, 0xb, 0x7, 0x5, 0x470e]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000004700)) setresuid(0xee01, 0xee00, 0x0) (async) setuid(0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, 0x0, 0x44084) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f00000000c0)={0x8000000, 0xf, &(0x7f0000000080)=[0x3, 0xfff, 0xc, 0xb, 0x660, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0x5, 0x0, 0x4, 0x6], 0x0, 0x4}) 478.526451ms ago: executing program 0 (id=3555): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78f3d4fcd9173dee890df05eeb79618e", @ANYBLOB=',r', @ANYBLOB=',gro']) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14", 0x9) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 375.983524ms ago: executing program 6 (id=3556): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000540)={0x0, 0x85}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r4, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x336dfc002942ca7a}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xac, r6, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xac}}, 0x40000) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0) prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r9, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r9, 0x0) ioctl$SNDCTL_DSP_SYNC(r9, 0x5001, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000100)=[r9, r2, r9], 0x3) r10 = signalfd(r7, &(0x7f0000000240)={[0x7]}, 0x8) write$dsp(r10, &(0x7f0000000280)="22d70a17c9961acdac8443777b8f4c24ceb37ca6d57144f9b746e1242b4bb48425ff2d357bbb8aeb52b3b08adf389bd0c76807285caea6465b046ead585a9cee", 0x40) ioctl$SNDCTL_DSP_GETOPTR(r9, 0x800c5012, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x2) 166.12027ms ago: executing program 3 (id=3557): r0 = syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) read$watch_queue(r7, 0x0, 0x0) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000380)={0x4, 0x3, 0x0, {0x3, @raw_data="afb318d481da7cd66ee2d45a9e9bb0007a13830cf8fe25db79ad5a87a2ae0696f4acbc5bd75d4f2047d9aa32577ce0dbad401d184d11d7fe5dc91f598d9683c2af9a08af4d0e66099247832ad0e4d8f7b1341afb4d6e5d1ea209ff899638f42d98520d64f4a326d8f026d1ffeb5e8df2e78e3b1aa206d05ccf861cda14a0af6ad6a6b5d7511dbaad64910ca2f414933aa89cf65ad46a71d0b04f406e345fef9ed907600ac20b4710d8794a8e2dac4c085fdc8fd6ee3d5d0d6fca53ab81f1dc0eb7c9a38ef62c5695"}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r8, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r3, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x20, 0x21, 0x8, {0x8, 0x11, "e4ff14eca81f"}}, 0x0}, 0x0) 0s ago: executing program 0 (id=3558): shutdown(0xffffffffffffffff, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x100, 0x40840) kernel console output (not intermixed with test programs): src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1018.230854][ C0] vkms_vblank_simulate: vblank timer overrun [ 1018.304520][T19091] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1018.341256][ T30] audit: type=1400 audit(1760434018.951:38316): avc: denied { recv } for pid=5794 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1018.366781][ C0] vkms_vblank_simulate: vblank timer overrun [ 1018.460928][ T30] audit: type=1400 audit(1760434018.961:38317): avc: denied { recv } for pid=17975 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1018.737911][ T30] audit: type=1400 audit(1760434018.961:38318): avc: denied { read } for pid=19080 comm="syz.1.3152" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1018.760607][ C0] vkms_vblank_simulate: vblank timer overrun [ 1018.808805][ T30] audit: type=1400 audit(1760434018.961:38319): avc: denied { read open } for pid=19080 comm="syz.1.3152" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1018.870816][T19105] comedi comedi2: comedi_config --init_data is deprecated [ 1018.915336][T19105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.922943][T19105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.958675][ T30] audit: type=1400 audit(1760434018.971:38320): avc: denied { ioctl } for pid=19080 comm="syz.1.3152" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1018.983246][ C0] vkms_vblank_simulate: vblank timer overrun [ 1019.095688][ T30] audit: type=1400 audit(1760434018.971:38321): avc: denied { ioctl } for pid=19080 comm="syz.1.3152" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3b85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1019.123731][ T30] audit: type=1400 audit(1760434018.971:38322): avc: denied { ioctl } for pid=19080 comm="syz.1.3152" path="/dev/iommu" dev="devtmpfs" ino=624 ioctlcmd=0x3ba0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1019.148282][ C0] vkms_vblank_simulate: vblank timer overrun [ 1019.178837][T19112] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1019.185767][T19112] audit: audit_lost=1989 audit_rate_limit=0 audit_backlog_limit=64 [ 1020.028485][T19113] bridge_slave_1: left allmulticast mode [ 1020.043755][T19113] bridge_slave_1: left promiscuous mode [ 1020.082875][T19113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.359316][T19113] bridge_slave_0: left allmulticast mode [ 1020.365227][T19113] bridge_slave_0: left promiscuous mode [ 1020.380314][T19113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.963089][T19132] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1021.100441][T18299] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1021.281597][T18299] usb 1-1: Using ep0 maxpacket: 16 [ 1021.306189][T18299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1021.679659][T18299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1021.707000][T18299] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1021.733999][T18299] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1021.755781][T18299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.808061][T18299] usb 1-1: config 0 descriptor?? [ 1022.432911][T18299] hid_parser_main: 7 callbacks suppressed [ 1022.432930][T18299] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 1022.509574][T18299] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 1022.539990][T18299] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 1022.546953][T18299] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 1022.590686][T18299] shield 0003:0955:7214.0021: unknown main item tag 0x0 [ 1022.621521][T18299] input: HID 0955:7214 Haptics as /devices/virtual/input/input52 [ 1022.666778][T18299] shield 0003:0955:7214.0021: Registered Thunderstrike controller [ 1022.682204][T18299] shield 0003:0955:7214.0021: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 1022.722294][T19152] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3170'. [ 1023.226490][T19156] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3167'. [ 1023.293184][ T30] kauditd_printk_skb: 407 callbacks suppressed [ 1023.293237][ T30] audit: type=1400 audit(1760434023.911:38672): avc: denied { create } for pid=19142 comm="syz.3.3167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1023.386862][ T30] audit: type=1400 audit(1760434023.921:38673): avc: denied { write } for pid=19142 comm="syz.3.3167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1023.439723][ T5918] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1023.448431][ T30] audit: type=1400 audit(1760434023.961:38674): avc: denied { mounton } for pid=19142 comm="syz.3.3167" path="/44/file0" dev="tmpfs" ino=248 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1023.509381][T19145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.569589][ T30] audit: type=1400 audit(1760434023.961:38675): avc: denied { recv } for pid=19149 comm="syz.1.3169" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1023.595032][ C0] vkms_vblank_simulate: vblank timer overrun [ 1023.658251][T19145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.733461][T18299] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 1023.755513][ T5918] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1023.796603][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.798310][T18299] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1023.806282][ T30] audit: type=1400 audit(1760434023.961:38676): avc: denied { mount } for pid=19142 comm="syz.3.3167" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1023.831468][T19145] netlink: 'syz.0.3164': attribute type 2 has an invalid length. [ 1023.870405][ T5918] usb 7-1: Product: syz [ 1023.874574][ T5918] usb 7-1: Manufacturer: syz [ 1023.876044][T13548] usb 1-1: reset high-speed USB device number 105 using dummy_hcd [ 1023.879152][ T5918] usb 7-1: SerialNumber: syz [ 1023.901068][T18299] shield 0003:0955:7214.0021: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 1023.910145][ T5918] usb 7-1: config 0 descriptor?? [ 1023.936841][T19145] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3164'. [ 1023.949060][ T30] audit: type=1400 audit(1760434024.081:38677): avc: denied { read write open } for pid=17997 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1024.000784][ T30] audit: type=1400 audit(1760434024.081:38678): avc: denied { ioctl } for pid=19146 comm="syz.6.3168" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1024.029989][ T30] audit: type=1400 audit(1760434024.081:38679): avc: denied { ioctl } for pid=17997 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1024.062808][T13548] usb 1-1: device descriptor read/64, error -32 [ 1024.072701][ T30] audit: type=1400 audit(1760434024.111:38680): avc: denied { module_request } for pid=19142 comm="syz.3.3167" kmod="net-pf-10-proto-58" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1024.140229][ T30] audit: type=1400 audit(1760434024.111:38681): avc: denied { map_create } for pid=19128 comm="syz.0.3164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1024.434155][T19169] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1024.476178][T19169] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1024.921205][T19179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1025.090781][ T42] usb 1-1: USB disconnect, device number 105 [ 1026.046694][T19207] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3181'. [ 1027.162270][T19216] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1027.185262][T19216] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1027.568834][T19227] tmpfs: Bad value for 'mpol' [ 1027.623111][T19227] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3188'. [ 1027.732800][T19230] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3189'. [ 1027.746000][T19232] Bluetooth: MGMT ver 1.23 [ 1027.855692][T19233] : renamed from wg2 (while UP) [ 1028.272131][T13548] usb 7-1: USB disconnect, device number 42 [ 1028.307732][ T30] kauditd_printk_skb: 1450 callbacks suppressed [ 1028.307747][ T30] audit: type=1400 audit(1760434029.001:40132): avc: denied { recv } for pid=17975 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1028.379577][ T30] audit: type=1400 audit(1760434029.011:40133): avc: denied { read write } for pid=14632 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1028.466733][ T30] audit: type=1400 audit(1760434029.011:40134): avc: denied { read write open } for pid=14632 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1028.467618][T19238] netlink: 'syz.1.3191': attribute type 1 has an invalid length. [ 1028.491960][ C1] vkms_vblank_simulate: vblank timer overrun [ 1028.519893][T19238] netlink: 5624 bytes leftover after parsing attributes in process `syz.1.3191'. [ 1028.582614][ T30] audit: type=1400 audit(1760434029.011:40135): avc: denied { ioctl } for pid=14632 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1028.780901][ T30] audit: type=1400 audit(1760434029.041:40136): avc: denied { recv } for pid=30 comm="kauditd" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1028.885350][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1028.891906][ C0] audit: audit_lost=2009 audit_rate_limit=0 audit_backlog_limit=64 [ 1028.899822][ C0] audit: backlog limit exceeded [ 1028.923859][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1028.930398][ C0] audit: audit_lost=2010 audit_rate_limit=0 audit_backlog_limit=64 [ 1029.209582][ T42] usb 7-1: new low-speed USB device number 43 using dummy_hcd [ 1029.289610][ T5918] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1029.298569][T19262] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1029.313533][T19262] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1029.372138][ T42] usb 7-1: too many configurations: 102, using maximum allowed: 8 [ 1029.397457][ T42] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1029.430172][ T42] usb 7-1: can't read configurations, error -61 [ 1029.568513][ T5918] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.585317][ T42] usb 7-1: new low-speed USB device number 44 using dummy_hcd [ 1029.600459][ T5918] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1029.619776][ T5918] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1029.629415][ T5918] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1029.647719][ T5918] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1029.669901][ T5918] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1029.677889][ T5918] usb 8-1: Manufacturer: syz [ 1029.686721][ T5918] usb 8-1: config 0 descriptor?? [ 1029.754481][ T42] usb 7-1: too many configurations: 102, using maximum allowed: 8 [ 1029.782409][ T42] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1029.798689][ T42] usb 7-1: can't read configurations, error -61 [ 1029.808166][ T42] usb usb7-port1: attempt power cycle [ 1030.097196][T19278] Error: Driver 'c6xdigio' is already registered, aborting... [ 1030.259601][ T42] usb 7-1: new low-speed USB device number 45 using dummy_hcd [ 1030.310223][T19278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.317649][T19278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.371753][ T42] usb 7-1: too many configurations: 102, using maximum allowed: 8 [ 1030.424789][ T42] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1030.473173][T19278] bridge_slave_1: left allmulticast mode [ 1030.479958][T19278] bridge_slave_1: left promiscuous mode [ 1030.500596][T19278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.509357][ T42] usb 7-1: can't read configurations, error -61 [ 1030.545282][T19278] bridge_slave_0: left allmulticast mode [ 1030.551323][T19278] bridge_slave_0: left promiscuous mode [ 1030.557503][T19278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.664796][ T42] usb 7-1: new low-speed USB device number 46 using dummy_hcd [ 1030.704456][ T42] usb 7-1: too many configurations: 102, using maximum allowed: 8 [ 1030.723181][ T42] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 1030.732440][ T42] usb 7-1: can't read configurations, error -61 [ 1030.747409][T19284] FAULT_INJECTION: forcing a failure. [ 1030.747409][T19284] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.771137][ T42] usb usb7-port1: unable to enumerate USB device [ 1030.784641][T19284] CPU: 1 UID: 0 PID: 19284 Comm: syz.3.3203 Not tainted syzkaller #0 PREEMPT(full) [ 1030.784663][T19284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1030.784673][T19284] Call Trace: [ 1030.784679][T19284] [ 1030.784687][T19284] dump_stack_lvl+0x16c/0x1f0 [ 1030.784712][T19284] should_fail_ex+0x512/0x640 [ 1030.784732][T19284] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 1030.784753][T19284] should_failslab+0xc2/0x120 [ 1030.784777][T19284] kmem_cache_alloc_noprof+0x75/0x6e0 [ 1030.784796][T19284] ? vm_area_dup+0x27/0x8d0 [ 1030.784817][T19284] ? vm_area_dup+0x27/0x8d0 [ 1030.784832][T19284] vm_area_dup+0x27/0x8d0 [ 1030.784850][T19284] copy_vma+0x4ef/0xa90 [ 1030.784873][T19284] ? __pfx_copy_vma+0x10/0x10 [ 1030.784897][T19284] ? avc_compute_av+0x4e4/0x7f0 [ 1030.784936][T19284] ? find_held_lock+0x2b/0x80 [ 1030.784954][T19284] copy_vma_and_data+0x1cf/0x790 [ 1030.784976][T19284] ? __pfx_copy_vma_and_data+0x10/0x10 [ 1030.785004][T19284] ? percpu_counter_add_batch+0xca/0x200 [ 1030.785025][T19284] ? __vm_enough_memory+0x184/0x3f0 [ 1030.785057][T19284] move_vma+0x540/0x1770 [ 1030.785080][T19284] ? __pfx_move_vma+0x10/0x10 [ 1030.785102][T19284] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 1030.785126][T19284] ? selinux_mmap_addr+0x2b/0x110 [ 1030.785144][T19284] ? bpf_lsm_mmap_addr+0x9/0x10 [ 1030.785164][T19284] ? security_mmap_addr+0x6c/0x1e0 [ 1030.785187][T19284] ? __get_unmapped_area+0x267/0x440 [ 1030.785212][T19284] ? vrm_set_new_addr+0x208/0x290 [ 1030.785232][T19284] mremap_to+0x1b7/0x450 [ 1030.785252][T19284] do_mremap+0xd89/0x2020 [ 1030.785275][T19284] ? get_pid_task+0x106/0x250 [ 1030.785295][T19284] ? proc_fail_nth_write+0x9f/0x220 [ 1030.785319][T19284] ? find_held_lock+0x2b/0x80 [ 1030.785334][T19284] ? __pfx_do_mremap+0x10/0x10 [ 1030.785369][T19284] ? find_held_lock+0x2b/0x80 [ 1030.785385][T19284] ? ksys_write+0x190/0x250 [ 1030.785411][T19284] __do_sys_mremap+0x119/0x170 [ 1030.785429][T19284] ? __pfx___do_sys_mremap+0x10/0x10 [ 1030.785446][T19284] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1030.785491][T19284] do_syscall_64+0xcd/0xfa0 [ 1030.785512][T19284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.785529][T19284] RIP: 0033:0x7f72ae18eec9 [ 1030.785542][T19284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1030.785558][T19284] RSP: 002b:00007f72af0b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1030.785574][T19284] RAX: ffffffffffffffda RBX: 00007f72ae3e6090 RCX: 00007f72ae18eec9 [ 1030.785585][T19284] RDX: 0000000000200000 RSI: 0000000000600600 RDI: 0000200000000000 [ 1030.785595][T19284] RBP: 00007f72af0b2090 R08: 0000200000a00000 R09: 0000000000000000 [ 1030.785605][T19284] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000002 [ 1030.785615][T19284] R13: 00007f72ae3e6128 R14: 00007f72ae3e6090 R15: 00007ffd70ee0d78 [ 1030.785639][T19284] [ 1031.070317][ C1] vkms_vblank_simulate: vblank timer overrun [ 1031.601688][T19290] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1032.139671][ T42] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1032.382259][ T42] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.404691][ T42] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1032.417696][T19313] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1032.429642][ T42] usb 2-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1032.448985][ T42] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1032.489754][ T5918] rc_core: IR keymap rc-hauppauge not found [ 1032.490209][T19313] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1032.495760][ T5918] Registered IR keymap rc-empty [ 1032.594054][ T42] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1032.608643][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.640186][ T5918] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1032.659605][ T5918] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1032.680203][ T5918] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1032.734005][ T42] usb 2-1: Product: syz [ 1032.739427][ T42] usb 2-1: Manufacturer: syz [ 1032.757781][ T42] usb 2-1: SerialNumber: syz [ 1032.811532][ T5918] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input53 [ 1032.846929][ T5918] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1033.000257][ T5918] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1033.019814][ T5918] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1033.045097][ T5918] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1033.095480][ T5918] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1033.139599][ T5918] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1033.272049][T19325] mkiss: ax0: crc mode is auto. [ 1033.295902][T19325] netlink: 11 bytes leftover after parsing attributes in process `syz.7.3213'. [ 1033.729429][ T30] kauditd_printk_skb: 527 callbacks suppressed [ 1033.729448][ T30] audit: type=1400 audit(1760434034.071:40663): avc: denied { map_create } for pid=19321 comm="syz.0.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1033.777390][ T5918] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1033.804972][ T30] audit: type=1400 audit(1760434034.081:40664): avc: denied { bpf } for pid=19321 comm="syz.0.3214" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1033.828412][ T5918] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1033.836095][ T30] audit: type=1400 audit(1760434034.121:40665): avc: denied { prog_load } for pid=19321 comm="syz.0.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1033.969791][ T42] cdc_mbim 2-1:1.0: probe with driver cdc_mbim failed with error -71 [ 1033.974182][ T5918] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1033.996008][ T30] audit: type=1400 audit(1760434034.131:40666): avc: denied { bpf } for pid=19321 comm="syz.0.3214" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1034.017132][ T5918] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 1034.039738][ T42] usb 2-1: USB disconnect, device number 107 [ 1034.110797][ T30] audit: type=1400 audit(1760434034.171:40667): avc: denied { prog_load } for pid=19321 comm="syz.0.3214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1034.121281][ T5918] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 1034.159758][ T30] audit: type=1400 audit(1760434034.181:40668): avc: denied { bpf } for pid=19321 comm="syz.0.3214" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1034.180808][ T5918] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1034.249625][ T30] audit: type=1400 audit(1760434034.181:40669): avc: denied { perfmon } for pid=19321 comm="syz.0.3214" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1034.249708][ T5918] usb 8-1: USB disconnect, device number 5 [ 1034.314311][ T30] audit: type=1400 audit(1760434034.191:40670): avc: denied { perfmon } for pid=19321 comm="syz.0.3214" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1034.419758][ T30] audit: type=1400 audit(1760434034.201:40671): avc: denied { perfmon } for pid=19321 comm="syz.0.3214" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1034.469603][ T30] audit: type=1400 audit(1760434034.201:40672): avc: denied { perfmon } for pid=19321 comm="syz.0.3214" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1034.557236][T19331] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1034.721892][T19331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3218'. [ 1034.838302][T19339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3216'. [ 1034.919943][ T10] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1035.046952][T19343] sctp: [Deprecated]: syz.6.3219 (pid 19343) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1035.046952][T19343] Use struct sctp_sack_info instead [ 1035.167706][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1035.179984][ T5885] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1035.187679][ T10] usb 4-1: config 0 has no interface number 0 [ 1035.196771][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1035.208002][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1035.240886][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1035.250063][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.272947][T19339] bond0: (slave bond_slave_1): Releasing backup interface [ 1035.286689][T19339] bond_slave_1 (unregistering): left promiscuous mode [ 1035.293813][T19339] bond_slave_1 (unregistering): left allmulticast mode [ 1035.301600][ T10] usb 4-1: config 0 descriptor?? [ 1035.359989][ T5885] usb 1-1: Using ep0 maxpacket: 32 [ 1035.373614][ T5885] usb 1-1: config 0 has an invalid interface number: 244 but max is 0 [ 1035.388535][ T5885] usb 1-1: config 0 has no interface number 0 [ 1035.397448][ T5885] usb 1-1: config 0 interface 244 has no altsetting 0 [ 1035.658706][ T5885] usb 1-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c [ 1035.937257][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.966884][ T5885] usb 1-1: Product: syz [ 1035.973362][ T5885] usb 1-1: Manufacturer: syz [ 1035.985636][ T5885] usb 1-1: SerialNumber: syz [ 1036.016313][ T5885] usb 1-1: config 0 descriptor?? [ 1036.051551][ T5885] snd_usb_toneport 1-1:0.244: Line 6 GuitarPort found [ 1036.121089][ T10] usbhid 4-1:0.1: can't add hid device: -71 [ 1036.127041][ T10] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 1036.136291][ T10] usb 4-1: USB disconnect, device number 111 [ 1036.469035][T19357] netlink: 'syz.6.3221': attribute type 1 has an invalid length. [ 1036.730848][T19360] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1037.349177][T19364] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1037.396962][T19364] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1037.554167][ T5885] snd_usb_toneport 1-1:0.244: set_interface failed [ 1037.629901][ T5885] snd_usb_toneport 1-1:0.244: Line 6 GuitarPort now disconnected [ 1037.663222][ T5885] snd_usb_toneport 1-1:0.244: probe with driver snd_usb_toneport failed with error -71 [ 1037.704448][ T5885] usb 1-1: USB disconnect, device number 106 [ 1038.368531][T19372] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 1038.989649][ T30] kauditd_printk_skb: 345 callbacks suppressed [ 1038.989665][ T30] audit: type=1400 audit(1760434039.481:41018): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1039.123477][T19385] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3225'. [ 1039.134036][T19385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3225'. [ 1039.152169][ T30] audit: type=1400 audit(1760434039.491:41019): avc: denied { create } for pid=19376 comm="syz.1.3226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1039.312180][ T30] audit: type=1400 audit(1760434039.511:41020): avc: denied { getopt } for pid=19376 comm="syz.1.3226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1039.380763][ T30] audit: type=1400 audit(1760434039.521:41021): avc: denied { read write } for pid=19376 comm="syz.1.3226" name="video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1039.446160][ T30] audit: type=1400 audit(1760434039.521:41022): avc: denied { read write open } for pid=19376 comm="syz.1.3226" path="/dev/video3" dev="devtmpfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1039.481041][T19391] netlink: 'syz.3.3229': attribute type 3 has an invalid length. [ 1039.517837][T19391] netlink: 'syz.3.3229': attribute type 3 has an invalid length. [ 1039.539577][T19391] netlink: 'syz.3.3229': attribute type 3 has an invalid length. [ 1039.557431][ T30] audit: type=1400 audit(1760434039.561:41023): avc: denied { read } for pid=19376 comm="syz.1.3226" dev="nsfs" ino=4026532842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1039.584802][T19391] netlink: 'syz.3.3229': attribute type 3 has an invalid length. [ 1039.619633][T19391] netlink: 'syz.3.3229': attribute type 3 has an invalid length. [ 1039.682544][ T30] audit: type=1400 audit(1760434039.571:41024): avc: denied { read open } for pid=19376 comm="syz.1.3226" path="net:[4026532842]" dev="nsfs" ino=4026532842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1039.728885][T19391] netlink: 'syz.3.3229': attribute type 3 has an invalid length. [ 1039.846451][T19391] netlink: 'syz.3.3229': attribute type 3 has an invalid length. [ 1039.860451][ T30] audit: type=1400 audit(1760434039.571:41025): avc: denied { create } for pid=19376 comm="syz.1.3226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1039.975969][T19391] netlink: 'syz.3.3229': attribute type 3 has an invalid length. [ 1039.981576][ T30] audit: type=1400 audit(1760434039.641:41026): avc: denied { setopt } for pid=19366 comm="syz.7.3224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1040.003576][T19391] netlink: 'syz.3.3229': attribute type 3 has an invalid length. [ 1040.011649][ T30] audit: type=1400 audit(1760434039.651:41027): avc: denied { create } for pid=19366 comm="syz.7.3224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1040.632621][T16708] Bluetooth: hci5: command 0x0406 tx timeout [ 1041.103166][T19407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=19407 comm=syz.3.3232 [ 1041.463183][T19420] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1041.861581][T19430] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3238'. [ 1043.019714][ T5885] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1043.507036][T19449] lo speed is unknown, defaulting to 1000 [ 1043.759731][ T5870] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1043.826377][T19464] validate_nla: 46 callbacks suppressed [ 1043.826389][T19464] netlink: 'syz.1.3247': attribute type 4 has an invalid length. [ 1043.851003][T19462] netlink: 'syz.1.3247': attribute type 4 has an invalid length. [ 1043.951210][ T5870] usb 7-1: Using ep0 maxpacket: 16 [ 1043.983714][ T5870] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1043.993051][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.001490][ T30] kauditd_printk_skb: 401 callbacks suppressed [ 1044.001504][ T30] audit: type=1400 audit(1760434044.691:41426): avc: denied { ioctl } for pid=19450 comm="syz.6.3246" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1044.100149][ T5870] usb 7-1: Product: syz [ 1044.108842][ T5870] usb 7-1: Manufacturer: syz [ 1044.128020][ T5870] usb 7-1: SerialNumber: syz [ 1044.262134][ T30] audit: type=1400 audit(1760434044.831:41427): avc: denied { recv } for pid=5794 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1044.759289][ T30] audit: type=1400 audit(1760434044.831:41428): avc: denied { recv } for pid=5794 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1044.791649][ T30] audit: type=1400 audit(1760434044.831:41429): avc: denied { recv } for pid=5794 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1044.795917][ T5870] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1044.818353][ T30] audit: type=1400 audit(1760434044.861:41430): avc: denied { ioctl } for pid=19450 comm="syz.6.3246" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1044.828481][ T5870] r8152-cfgselector 7-1: config 0 descriptor?? [ 1044.853051][ T30] audit: type=1400 audit(1760434044.861:41431): avc: denied { ioctl } for pid=19450 comm="syz.6.3246" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1044.880418][ T30] audit: type=1400 audit(1760434044.891:41432): avc: denied { allowed } for pid=19456 comm="syz.3.3245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1044.923394][ T30] audit: type=1400 audit(1760434044.901:41433): avc: denied { create } for pid=19456 comm="syz.3.3245" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1044.947879][ T30] audit: type=1400 audit(1760434044.911:41434): avc: denied { create } for pid=19456 comm="syz.3.3245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1044.995426][T19476] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1045.030893][ T30] audit: type=1400 audit(1760434044.991:41435): avc: denied { ioctl } for pid=19450 comm="syz.6.3246" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1045.080204][ T5870] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1045.087038][ T5870] r8152-cfgselector 7-1: bad CDC descriptors [ 1045.106282][ T5870] r8152-cfgselector 7-1: USB disconnect, device number 47 [ 1045.647026][T19489] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3251'. [ 1045.749779][T16708] Bluetooth: hci0: command 0x0406 tx timeout [ 1047.119814][T19508] ceph: No mds server is up or the cluster is laggy [ 1047.133473][ T5870] libceph: connect (1)[c::]:6789 error -101 [ 1047.150495][ T5870] libceph: mon0 (1)[c::]:6789 connect error [ 1047.627082][T19514] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1047.633622][T19514] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1047.670661][T19514] vhci_hcd vhci_hcd.0: Device attached [ 1047.950863][T19523] vhci_hcd: connection closed [ 1047.951098][T10949] vhci_hcd: stop threads [ 1047.969617][T10949] vhci_hcd: release socket [ 1047.974116][T10949] vhci_hcd: disconnect device [ 1048.020371][ T42] vhci_hcd: vhci_device speed not set [ 1048.878375][T19550] netlink: 140 bytes leftover after parsing attributes in process `syz.7.3266'. [ 1049.012478][ T30] kauditd_printk_skb: 331 callbacks suppressed [ 1049.012494][ T30] audit: type=1400 audit(1760434049.711:41767): avc: denied { read write open } for pid=19547 comm="syz.6.3265" path="/dev/video0" dev="devtmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1049.049557][ T10] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1049.119603][ T30] audit: type=1400 audit(1760434049.751:41768): avc: denied { create } for pid=19548 comm="syz.7.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1049.150905][T19555] netlink: 'syz.6.3265': attribute type 1 has an invalid length. [ 1049.288620][ T30] audit: type=1400 audit(1760434049.751:41769): avc: denied { create } for pid=19548 comm="syz.7.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1049.379598][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1049.530482][T19553] macvlan2: entered promiscuous mode [ 1049.535799][T19553] macvlan2: entered allmulticast mode [ 1049.544511][T19553] bond3: entered promiscuous mode [ 1049.550187][T19553] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1049.583832][ T30] audit: type=1400 audit(1760434049.751:41770): avc: denied { write } for pid=19548 comm="syz.7.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1049.615554][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1049.635632][ T30] audit: type=1400 audit(1760434049.761:41771): avc: denied { read } for pid=19548 comm="syz.7.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1049.651855][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.660122][ T30] audit: type=1400 audit(1760434049.761:41772): avc: denied { read } for pid=19548 comm="syz.7.3266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1049.686918][T19553] bond3: left promiscuous mode [ 1049.715199][ T10] usb 2-1: Product: syz [ 1049.728875][ T10] usb 2-1: Manufacturer: syz [ 1049.779829][ T30] audit: type=1400 audit(1760434049.761:41773): avc: denied { ioctl } for pid=19545 comm="syz.1.3264" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1049.820310][ T10] usb 2-1: SerialNumber: syz [ 1049.839592][ T30] audit: type=1400 audit(1760434049.781:41774): avc: denied { create } for pid=19547 comm="syz.6.3265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1049.878658][ T10] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1049.881463][ T30] audit: type=1400 audit(1760434049.861:41775): avc: denied { ioctl } for pid=19545 comm="syz.1.3264" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1049.886029][ T10] r8152-cfgselector 2-1: config 0 descriptor?? [ 1049.959162][ T30] audit: type=1400 audit(1760434049.861:41776): avc: denied { ioctl } for pid=19545 comm="syz.1.3264" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1050.157123][T19564] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3269'. [ 1050.179696][T18299] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1050.246633][ T10] r8152-cfgselector 2-1: Needed 1 retries to read version [ 1050.457474][ T5870] r8152-cfgselector 2-1: USB disconnect, device number 109 [ 1050.473856][T18299] usb 8-1: Using ep0 maxpacket: 16 [ 1050.485685][T19567] ufs: You didn't specify the type of your ufs filesystem [ 1050.485685][T19567] [ 1050.485685][T19567] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1050.485685][T19567] [ 1050.485685][T19567] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1050.516741][T19567] ufs: ufstype=old is supported read-only [ 1050.534826][T18299] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 1050.544566][T18299] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.555489][T18299] usb 8-1: config 0 has no interface number 0 [ 1050.562540][T18299] usb 8-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 1050.571604][T18299] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.590175][T18299] usb 8-1: config 0 descriptor?? [ 1050.601404][T18299] uvcvideo 8-1:0.64: Found UVC 0.00 device (0bd3:05f4) [ 1050.609136][T18299] uvcvideo 8-1:0.64: No valid video chain found. [ 1051.211541][ T10] usb 8-1: USB disconnect, device number 6 [ 1051.421525][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3273'. [ 1051.729902][ T10] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1051.757792][T19586] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1051.770217][T19586] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1051.955677][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1051.990069][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.009872][ T10] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.057206][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1052.097420][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1052.119994][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.137894][ T10] usb 2-1: config 0 descriptor?? [ 1052.929923][ T5918] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1052.958956][ T10] apple 0003:05AC:0247.0022: unknown main item tag 0x0 [ 1053.041074][ T10] apple 0003:05AC:0247.0022: unknown main item tag 0x0 [ 1053.097385][ T10] apple 0003:05AC:0247.0022: unknown main item tag 0x0 [ 1053.119603][ T5918] usb 1-1: Using ep0 maxpacket: 32 [ 1053.140706][ T5885] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1053.170470][ T10] apple 0003:05AC:0247.0022: unknown main item tag 0x0 [ 1053.186764][ T5918] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1053.264551][ T10] apple 0003:05AC:0247.0022: unknown main item tag 0x0 [ 1053.307130][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.353728][ T10] apple 0003:05AC:0247.0022: unknown main item tag 0x0 [ 1053.409421][ T5885] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1053.438550][ T5918] usb 1-1: config 0 descriptor?? [ 1053.458331][ T10] apple 0003:05AC:0247.0022: unknown main item tag 0x0 [ 1053.529114][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1053.540586][ T10] apple 0003:05AC:0247.0022: unknown main item tag 0x0 [ 1053.547494][ T10] apple 0003:05AC:0247.0022: unknown main item tag 0x0 [ 1053.625096][ T5885] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1053.654580][ T10] apple 0003:05AC:0247.0022: unknown main item tag 0x0 [ 1053.722400][ T10] apple 0003:05AC:0247.0022: collection stack underflow [ 1053.765288][ T5885] usb 7-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 1053.836604][ T10] apple 0003:05AC:0247.0022: item 0 0 0 12 parsing failed [ 1053.859615][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.948833][ T10] apple 0003:05AC:0247.0022: parse failed [ 1053.982129][ T5885] usb 7-1: Product: syz [ 1054.019876][ T30] kauditd_printk_skb: 833 callbacks suppressed [ 1054.019890][ T30] audit: type=1400 audit(1760434054.711:42610): avc: denied { recv } for pid=19602 comm="syz.6.3283" saddr=172.20.20.170 src=20003 daddr=172.20.20.170 dest=20003 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1054.161552][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1054.168058][ C1] audit: audit_lost=2012 audit_rate_limit=0 audit_backlog_limit=64 [ 1054.175946][ C1] audit: backlog limit exceeded [ 1054.182660][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1054.189150][ C1] audit: audit_lost=2013 audit_rate_limit=0 audit_backlog_limit=64 [ 1054.197030][ C1] audit: backlog limit exceeded [ 1054.203786][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1054.210282][ C1] audit: audit_lost=2014 audit_rate_limit=0 audit_backlog_limit=64 [ 1054.218162][ C1] audit: backlog limit exceeded [ 1055.310181][ T10] apple 0003:05AC:0247.0022: probe with driver apple failed with error -22 [ 1055.331555][ T5885] usb 7-1: Manufacturer: syz [ 1055.391070][ T5885] usb 7-1: SerialNumber: syz [ 1056.027421][ T5885] usb 7-1: config 0 descriptor?? [ 1056.039810][ T10] usb 2-1: USB disconnect, device number 110 [ 1056.109426][ T5918] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1056.142215][ T5918] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1056.318685][ T5885] usb 7-1: can't set config #0, error -71 [ 1056.340572][ T5885] usb 7-1: USB disconnect, device number 48 [ 1056.361447][ T5918] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1056.500137][ T5807] Bluetooth: hci1: link tx timeout [ 1056.507319][ T5807] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1056.521980][T16708] Bluetooth: hci1: link tx timeout [ 1056.527099][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1056.561504][T16708] Bluetooth: hci1: link tx timeout [ 1056.566680][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1056.607341][T16708] Bluetooth: hci1: link tx timeout [ 1056.612678][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1056.626387][T16708] Bluetooth: hci1: link tx timeout [ 1056.632317][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1056.642396][T16708] Bluetooth: hci1: link tx timeout [ 1056.647498][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1056.656381][T16708] Bluetooth: hci1: link tx timeout [ 1056.661500][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1056.671585][T16708] Bluetooth: hci1: link tx timeout [ 1056.676694][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1056.686560][T16708] Bluetooth: hci1: link tx timeout [ 1056.691848][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1056.733836][T16708] Bluetooth: hci1: link tx timeout [ 1056.738954][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1056.767693][T16708] Bluetooth: hci1: link tx timeout [ 1056.772837][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1056.799189][T16708] Bluetooth: hci1: link tx timeout [ 1056.805419][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1056.814775][T16708] Bluetooth: hci1: link tx timeout [ 1056.820101][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1056.828922][T16708] Bluetooth: hci1: link tx timeout [ 1056.834069][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1056.923570][T16708] Bluetooth: hci1: link tx timeout [ 1056.928703][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1056.945068][T19644] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1056.961685][T19644] team0: Port device batadv1 added [ 1057.124507][T16708] Bluetooth: hci1: link tx timeout [ 1057.129973][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1057.160901][T16708] Bluetooth: hci1: link tx timeout [ 1057.168191][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1057.182091][T16708] Bluetooth: hci1: link tx timeout [ 1057.187256][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1057.314371][T19650] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1057.534820][T16708] Bluetooth: hci1: link tx timeout [ 1057.540190][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1057.569646][T16708] Bluetooth: hci1: link tx timeout [ 1057.574793][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1057.654466][ T5885] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 1057.669726][T16708] Bluetooth: hci1: link tx timeout [ 1057.674848][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1057.688105][T16708] Bluetooth: hci1: link tx timeout [ 1057.693257][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1057.709519][T16708] Bluetooth: hci1: link tx timeout [ 1057.714669][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1057.809429][T16708] Bluetooth: hci1: link tx timeout [ 1057.814584][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1057.835666][T16708] Bluetooth: hci1: link tx timeout [ 1057.841275][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1057.872497][T16708] Bluetooth: hci1: link tx timeout [ 1057.877600][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1057.893649][T16708] Bluetooth: hci1: link tx timeout [ 1057.898759][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1057.920502][T16708] Bluetooth: hci1: link tx timeout [ 1057.925610][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1057.936208][T16708] Bluetooth: hci1: link tx timeout [ 1057.943151][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1057.969503][T16708] Bluetooth: hci1: link tx timeout [ 1057.974617][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1058.004599][T16708] Bluetooth: hci1: link tx timeout [ 1058.009752][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1058.026138][T16708] Bluetooth: hci1: link tx timeout [ 1058.031353][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1058.056711][T16708] Bluetooth: hci1: link tx timeout [ 1058.061984][T16708] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1058.086957][ T5885] usb 4-1: config 162 has an invalid interface number: 252 but max is 0 [ 1058.099425][T19655] netlink: 'syz.6.3294': attribute type 6 has an invalid length. [ 1058.184119][ T5885] usb 4-1: config 162 has no interface number 0 [ 1058.240165][ T5885] usb 4-1: config 162 interface 252 has no altsetting 0 [ 1058.407280][ T5885] usb 4-1: New USB device found, idVendor=0b95, idProduct=2791, bcdDevice=83.1b [ 1058.435840][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.470904][ T5885] usb 4-1: Product: syz [ 1058.475079][ T5885] usb 4-1: Manufacturer: syz [ 1058.500046][ T5885] usb 4-1: SerialNumber: syz [ 1058.550121][T16708] Bluetooth: hci1: command 0x0406 tx timeout [ 1058.622308][T19667] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3296'. [ 1059.044070][ T30] kauditd_printk_skb: 2988 callbacks suppressed [ 1059.044087][ T30] audit: type=1400 audit(1760434059.731:42971): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1059.479123][ T30] audit: type=1400 audit(1760434059.741:42972): avc: denied { sendto } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1059.502426][ T30] audit: type=1400 audit(1760434059.741:42973): avc: denied { egress } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1059.621099][ T30] audit: type=1400 audit(1760434059.741:42974): avc: denied { sendto } for pid=23 comm="ksoftirqd/1" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1059.758016][ T30] audit: type=1400 audit(1760434059.871:42975): avc: denied { map_create } for pid=19670 comm="syz.1.3298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1059.851181][ T30] audit: type=1400 audit(1760434059.881:42976): avc: denied { map_read map_write } for pid=19670 comm="syz.1.3298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1059.923573][ T30] audit: type=1400 audit(1760434059.941:42977): avc: denied { ioctl } for pid=19670 comm="syz.1.3298" path="cgroup:[4026532835]" dev="nsfs" ino=4026532835 ioctlcmd=0x943f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1060.047675][ T30] audit: type=1400 audit(1760434060.241:42978): avc: denied { sys_module } for pid=19668 comm="syz.6.3297" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1060.138557][ T30] audit: type=1400 audit(1760434060.241:42979): avc: denied { module_request } for pid=19668 comm="syz.6.3297" kmod="nicvf0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1060.207741][ T30] audit: type=1400 audit(1760434060.261:42980): avc: denied { sys_module } for pid=19668 comm="syz.6.3297" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1061.010124][T18299] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1061.162199][ T5885] usb 4-1: USB disconnect, device number 112 [ 1061.235547][T19709] loop3: detected capacity change from 0 to 7 [ 1061.285322][T19709] Dev loop3: unable to read RDB block 7 [ 1061.298614][T18299] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1061.299644][T19709] loop3: unable to read partition table [ 1061.319002][T19709] loop3: partition table beyond EOD, truncated [ 1061.332839][T19709] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1061.346995][T18299] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1061.363801][T18299] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.382661][T18299] usb 7-1: Product: syz [ 1061.386831][T18299] usb 7-1: Manufacturer: syz [ 1061.394288][T18299] usb 7-1: SerialNumber: syz [ 1061.402933][T18299] usb 7-1: config 0 descriptor?? [ 1061.519698][T19715] lo speed is unknown, defaulting to 1000 [ 1061.526903][T19715] lo speed is unknown, defaulting to 1000 [ 1061.533774][T19715] lo speed is unknown, defaulting to 1000 [ 1061.550169][T19715] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1061.585482][T19715] lo speed is unknown, defaulting to 1000 [ 1061.724282][T19719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3310'. [ 1061.838620][T19715] lo speed is unknown, defaulting to 1000 [ 1061.848666][T19715] lo speed is unknown, defaulting to 1000 [ 1061.849995][T19718] tc_dump_action: action bad kind [ 1061.891789][T19715] lo speed is unknown, defaulting to 1000 [ 1061.899573][ T5870] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1061.939436][T19715] lo speed is unknown, defaulting to 1000 [ 1061.967583][T19715] lo speed is unknown, defaulting to 1000 [ 1062.061628][ T5870] usb 2-1: Using ep0 maxpacket: 16 [ 1062.180758][T19703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.200075][ T5870] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1062.215061][T19703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.228533][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.239182][ T5870] usb 2-1: Product: syz [ 1062.265746][ T5870] usb 2-1: Manufacturer: syz [ 1062.276052][ T5870] usb 2-1: SerialNumber: syz [ 1062.291543][ T5870] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1062.308462][ T5870] r8152-cfgselector 2-1: config 0 descriptor?? [ 1062.543144][T19728] tmpfs: Unknown parameter 'mpolinterleave' [ 1062.752620][ T5870] r8152-cfgselector 2-1: Needed 1 retries to read version [ 1062.949584][ T5885] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1062.974700][ T5870] r8152-cfgselector 2-1: USB disconnect, device number 111 [ 1063.089739][ T5885] usb 8-1: device descriptor read/64, error -71 [ 1063.329727][ T5885] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1063.459600][ T5885] usb 8-1: device descriptor read/64, error -71 [ 1063.571291][ T5885] usb usb8-port1: attempt power cycle [ 1063.756101][ T5870] usb 7-1: USB disconnect, device number 49 [ 1063.970952][T19736] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3317'. [ 1064.331914][ T30] kauditd_printk_skb: 407 callbacks suppressed [ 1064.331944][ T30] audit: type=1400 audit(1760434064.761:43388): avc: denied { create } for pid=19732 comm="syz.1.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1064.433591][ T5885] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1064.470728][ T30] audit: type=1400 audit(1760434064.791:43389): avc: denied { create } for pid=19732 comm="syz.1.3316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1064.484633][T19736] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1064.490559][ T5885] usb 8-1: device descriptor read/8, error -71 [ 1064.512780][ T30] audit: type=1400 audit(1760434064.821:43390): avc: denied { ioctl } for pid=19732 comm="syz.1.3316" path="socket:[73731]" dev="sockfs" ino=73731 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1064.538047][ T30] audit: type=1400 audit(1760434064.841:43391): avc: denied { write } for pid=19732 comm="syz.1.3316" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1064.547352][T19736] vlan2: entered allmulticast mode [ 1064.559002][ T30] audit: type=1400 audit(1760434064.861:43392): avc: denied { recv } for pid=19732 comm="syz.1.3316" saddr=172.20.20.170 daddr=224.0.0.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1064.646938][ T30] audit: type=1400 audit(1760434064.941:43393): avc: denied { read } for pid=19732 comm="syz.1.3316" path="socket:[73731]" dev="sockfs" ino=73731 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1064.686598][T19736] macsec0: entered allmulticast mode [ 1064.695841][ T30] audit: type=1400 audit(1760434064.941:43394): avc: denied { read } for pid=19732 comm="syz.1.3316" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1064.742263][T19736] veth1_macvtap: entered allmulticast mode [ 1064.748864][T19736] bond4: (slave vlan2): Error -34 calling dev_set_mtu [ 1064.759762][ T30] audit: type=1400 audit(1760434065.011:43395): avc: denied { recv } for pid=19732 comm="syz.1.3316" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1064.787154][ T30] audit: type=1400 audit(1760434065.161:43396): avc: denied { ioctl } for pid=19726 comm="syz.7.3314" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1064.809556][ T5885] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1064.871987][ T5885] usb 8-1: device descriptor read/8, error -71 [ 1064.886065][ T30] audit: type=1400 audit(1760434065.161:43397): avc: denied { ioctl } for pid=19726 comm="syz.7.3314" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1064.989596][ T5885] usb usb8-port1: unable to enumerate USB device [ 1065.088263][T19746] SELinux: policydb magic number 0x519c7875 does not match expected magic number 0xf97cff8c [ 1065.102727][T19746] sel_write_load: 10 callbacks suppressed [ 1065.102741][T19746] SELinux: failed to load policy [ 1065.963071][T19752] loop3: detected capacity change from 0 to 7 [ 1066.196778][T19752] Dev loop3: unable to read RDB block 7 [ 1066.253614][T19752] loop3: unable to read partition table [ 1066.279917][T19752] loop3: partition table beyond EOD, truncated [ 1066.286108][T19752] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1066.931646][T19758] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 1066.939171][T19758] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1066.947063][T19758] comedi comedi3: 8255: I/O port conflict (0x16,4) [ 1066.953934][T19758] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1067.382114][T19758] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1067.407393][T19758] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 1067.428615][T19758] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1067.441255][T19758] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 1067.475332][T19758] comedi comedi3: 8255: I/O port conflict (0xfd,4) [ 1067.485355][T19758] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1067.494135][T19758] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1067.507314][T19758] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1067.515313][T19758] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1067.530113][T19758] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 1067.551295][T19758] comedi comedi3: 8255: I/O port conflict (0x80009,4) [ 1067.916504][T19758] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 1067.949921][T19758] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 1068.005864][T19758] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1068.056766][T19758] comedi comedi3: 8255: I/O port conflict (0x40000003,4) [ 1068.066506][T19758] comedi comedi3: 8255: I/O port conflict (0x89,4) [ 1068.086922][T19758] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1068.096069][T19758] comedi comedi3: 8255: I/O port conflict (0x20001e58,4) [ 1068.109521][T19758] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 1068.121707][T19758] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 1068.143686][T19758] comedi comedi3: 8255: I/O port conflict (0x995d000,4) [ 1068.903029][T18381] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 1068.995546][T19790] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1069.037593][T19790] overlayfs: overlapping lowerdir path [ 1069.126241][T18381] usb 2-1: not running at top speed; connect to a high speed hub [ 1069.153817][T18381] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.189554][T18381] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1069.229714][ T5885] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1069.237537][T18381] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1069.247015][T18381] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.268284][T18381] usb 2-1: Product: syz [ 1069.291316][T18381] usb 2-1: Manufacturer: syz [ 1069.298453][T18381] usb 2-1: SerialNumber: syz [ 1069.344675][ T30] kauditd_printk_skb: 412 callbacks suppressed [ 1069.344690][ T30] audit: type=1400 audit(1760434070.041:43810): avc: denied { create } for pid=19796 comm="syz.7.3336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1069.371804][ C0] vkms_vblank_simulate: vblank timer overrun [ 1069.409703][ T30] audit: type=1400 audit(1760434070.081:43811): avc: denied { unmount } for pid=17110 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1069.449943][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 1069.452683][ T30] audit: type=1400 audit(1760434070.101:43812): avc: denied { write } for pid=19796 comm="syz.7.3336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1069.481878][ T5885] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1069.492791][ T5885] usb 4-1: config 0 has no interface number 0 [ 1069.498921][ T5885] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1069.513975][ T30] audit: type=1400 audit(1760434070.101:43813): avc: denied { map_create } for pid=19796 comm="syz.7.3336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1069.553711][ T30] audit: type=1400 audit(1760434070.101:43814): avc: denied { bpf } for pid=19796 comm="syz.7.3336" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1069.609549][ T30] audit: type=1400 audit(1760434070.101:43815): avc: denied { map_read map_write } for pid=19796 comm="syz.7.3336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1069.694883][T18381] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 1069.707217][ T30] audit: type=1400 audit(1760434070.131:43816): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1069.732924][T18381] usb 2-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1069.749441][ T5885] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1069.762831][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.776901][T18381] usb 2-1: USB disconnect, device number 112 [ 1069.783075][ T5885] usb 4-1: Product: syz [ 1069.787230][ T5885] usb 4-1: Manufacturer: syz [ 1069.792339][ T30] audit: type=1400 audit(1760434070.131:43817): avc: denied { recv } for pid=17110 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1069.824118][ T5885] usb 4-1: SerialNumber: syz [ 1069.857886][ T5885] usb 4-1: config 0 descriptor?? [ 1069.870638][ T30] audit: type=1400 audit(1760434070.131:43818): avc: denied { recv } for pid=17110 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1069.896264][ C0] vkms_vblank_simulate: vblank timer overrun [ 1069.908277][ T30] audit: type=1400 audit(1760434070.141:43819): avc: denied { prog_load } for pid=19796 comm="syz.7.3336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1069.935080][T19803] loop3: detected capacity change from 0 to 7 [ 1069.942301][T19803] Dev loop3: unable to read RDB block 7 [ 1069.947920][T19803] loop3: unable to read partition table [ 1069.954185][T19803] loop3: partition table beyond EOD, truncated [ 1069.960459][T19803] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1070.087889][T19794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.100108][T19794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.184410][ T5885] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 1070.199757][ T5885] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1070.231593][ T5885] usb 4-1: USB disconnect, device number 113 [ 1070.511409][T19815] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3340'. [ 1071.146229][T19823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3345'. [ 1071.180245][T19823] siw: device registration error -23 [ 1072.346104][T19838] overlayfs: overlapping lowerdir path [ 1072.386542][T19840] loop3: detected capacity change from 0 to 7 [ 1072.452838][T19838] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1072.472030][T19840] Dev loop3: unable to read RDB block 7 [ 1072.477618][T19840] loop3: unable to read partition table [ 1072.543418][T19840] loop3: partition table beyond EOD, truncated [ 1072.559841][T19840] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1073.503455][T19862] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 19862 comm: syz.6.3355) [ 1073.549677][T18299] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 1073.689674][T18299] usb 4-1: device descriptor read/64, error -71 [ 1073.949570][T18299] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 1074.180762][T18299] usb 4-1: device descriptor read/64, error -71 [ 1074.418836][ T30] kauditd_printk_skb: 862 callbacks suppressed [ 1074.418872][ T30] audit: type=1400 audit(1760434075.111:44682): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1074.613546][ T30] audit: type=1400 audit(1760434075.111:44683): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1c daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1074.641799][ T30] audit: type=1400 audit(1760434075.341:44684): avc: denied { read write } for pid=18392 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1074.689864][T18299] usb usb4-port1: attempt power cycle [ 1074.709553][ T30] audit: type=1400 audit(1760434075.361:44685): avc: denied { read write open } for pid=18392 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1074.758639][ T30] audit: type=1400 audit(1760434075.361:44686): avc: denied { ioctl } for pid=18392 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1074.823684][ T30] audit: type=1400 audit(1760434075.401:44687): avc: denied { ioctl } for pid=19857 comm="syz.3.3354" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1074.864708][ T30] audit: type=1400 audit(1760434075.401:44688): avc: denied { ioctl } for pid=19857 comm="syz.3.3354" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1074.890168][ T30] audit: type=1400 audit(1760434075.401:44689): avc: denied { ioctl } for pid=19857 comm="syz.3.3354" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1074.920613][ T30] audit: type=1400 audit(1760434075.501:44690): avc: denied { prog_load } for pid=19871 comm="syz.1.3359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1074.964676][ T30] audit: type=1400 audit(1760434075.501:44691): avc: denied { bpf } for pid=19871 comm="syz.1.3359" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1075.449538][T18299] usb 4-1: new full-speed USB device number 116 using dummy_hcd [ 1075.470743][T18299] usb 4-1: device descriptor read/8, error -71 [ 1075.519580][ T5870] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1075.669642][ T5870] usb 8-1: Using ep0 maxpacket: 16 [ 1075.688937][ T5870] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 1075.697610][ T5870] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.707944][ T5870] usb 8-1: config 0 has no interface number 0 [ 1075.714234][T18299] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 1075.723467][ T5870] usb 8-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 1075.735464][ T5870] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.750207][ T5870] usb 8-1: config 0 descriptor?? [ 1075.756955][T18299] usb 4-1: device descriptor read/8, error -71 [ 1075.766503][ T5870] uvcvideo 8-1:0.64: Found UVC 0.00 device (0bd3:05f4) [ 1075.776108][ T5870] uvcvideo 8-1:0.64: No valid video chain found. [ 1075.912811][T18299] usb usb4-port1: unable to enumerate USB device [ 1076.275832][T19886] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1076.558963][ T5885] usb 8-1: USB disconnect, device number 11 [ 1077.413879][T19897] 9pnet_fd: Insufficient options for proto=fd [ 1077.453009][T13548] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1077.749543][T13548] usb 2-1: Using ep0 maxpacket: 16 [ 1077.878949][T13548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1077.900948][T13548] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1077.930590][T13548] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1077.977840][T13548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1077.998505][T13548] usb 2-1: config 0 descriptor?? [ 1077.999385][T19904] netlink: 'syz.7.3367': attribute type 1 has an invalid length. [ 1078.148366][T19909] gretap1: entered promiscuous mode [ 1078.252524][T19904] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3367'. [ 1078.291124][T19904] bond1: entered promiscuous mode [ 1078.309317][T19904] bond1: entered allmulticast mode [ 1078.325689][T19904] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1078.538197][T13548] corsair 0003:1B1C:1B02.0023: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 1078.741430][T13548] corsair 0003:1B1C:1B02.0023: Failed to get K90 initial state (error -71). [ 1078.873077][T13548] usb 2-1: USB disconnect, device number 113 [ 1079.530161][ T30] kauditd_printk_skb: 373 callbacks suppressed [ 1079.530179][ T30] audit: type=1400 audit(1760434080.011:45065): avc: denied { execmem } for pid=19918 comm="syz.7.3372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1079.645905][ T30] audit: type=1400 audit(1760434080.281:45066): avc: denied { read write } for pid=14632 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1079.706027][ T30] audit: type=1400 audit(1760434080.281:45067): avc: denied { read write open } for pid=14632 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1079.783476][ T30] audit: type=1400 audit(1760434080.291:45068): avc: denied { recv } for pid=5794 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1079.853357][ T30] audit: type=1400 audit(1760434080.291:45069): avc: denied { recv } for pid=5794 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1079.925095][ T30] audit: type=1400 audit(1760434080.311:45070): avc: denied { create } for pid=19918 comm="syz.7.3372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1079.980794][ T30] audit: type=1400 audit(1760434080.311:45071): avc: denied { setopt } for pid=19918 comm="syz.7.3372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1080.006596][ T30] audit: type=1400 audit(1760434080.311:45072): avc: denied { create } for pid=19918 comm="syz.7.3372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1080.030483][ T30] audit: type=1400 audit(1760434080.311:45073): avc: denied { write } for pid=19918 comm="syz.7.3372" name="anycast6" dev="proc" ino=4026534263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1080.059549][ T30] audit: type=1400 audit(1760434080.311:45074): avc: denied { write } for pid=19918 comm="syz.7.3372" path="/proc/312/net/anycast6" dev="proc" ino=4026534263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1080.219553][T18381] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1080.389995][T18381] usb 7-1: Using ep0 maxpacket: 16 [ 1080.426110][T18381] usb 7-1: too many configurations: 97, using maximum allowed: 8 [ 1080.510138][T18381] usb 7-1: config 0 has no interfaces? [ 1080.606595][T18381] usb 7-1: config 0 has no interfaces? [ 1080.693555][T18381] usb 7-1: config 0 has no interfaces? [ 1080.718638][T18381] usb 7-1: config 0 has no interfaces? [ 1080.734791][T18381] usb 7-1: config 0 has no interfaces? [ 1080.760289][T18381] usb 7-1: config 0 has no interfaces? [ 1080.772807][T18381] usb 7-1: config 0 has no interfaces? [ 1080.791578][T18381] usb 7-1: config 0 has no interfaces? [ 1080.912016][T18381] usb 7-1: string descriptor 0 read error: -71 [ 1080.961790][T18381] usb 7-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 1081.005220][T18381] usb 7-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 1081.031572][T18381] usb 7-1: config 0 descriptor?? [ 1081.059775][T18381] usb 7-1: can't set config #0, error -71 [ 1081.097264][T18381] usb 7-1: USB disconnect, device number 50 [ 1081.255830][T19941] loop3: detected capacity change from 0 to 7 [ 1081.280279][T19941] Dev loop3: unable to read RDB block 7 [ 1081.296035][T19941] loop3: unable to read partition table [ 1081.311871][T19941] loop3: partition table beyond EOD, truncated [ 1081.329637][T19941] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1081.556435][T19944] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3379'. [ 1082.347207][ T5885] usb 7-1: new low-speed USB device number 51 using dummy_hcd [ 1082.572747][ T5885] usb 7-1: config 7 has an invalid interface number: 252 but max is 0 [ 1082.589515][ T5885] usb 7-1: config 7 has no interface number 0 [ 1082.602874][ T5885] usb 7-1: config 7 interface 252 has no altsetting 0 [ 1082.657339][ T5885] usb 7-1: string descriptor 0 read error: -22 [ 1082.684970][ T5885] usb 7-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 1082.695999][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.756722][T19961] bond1: option arp_validate: invalid value (18446744073709551614) [ 1082.771157][T19961] bond1 (unregistering): Released all slaves [ 1082.972635][T13548] usb 7-1: USB disconnect, device number 51 [ 1083.810541][T13548] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1083.860720][T19982] qnx4: no qnx4 filesystem (no root dir). [ 1083.979548][T13548] usb 2-1: Using ep0 maxpacket: 8 [ 1084.009842][T13548] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 1084.032124][T13548] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.059566][T13548] usb 2-1: config 0 has no interface number 0 [ 1084.086758][T13548] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1084.109771][T13548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.117854][T13548] usb 2-1: Product: syz [ 1084.122583][T13548] usb 2-1: Manufacturer: syz [ 1084.128828][T13548] usb 2-1: SerialNumber: syz [ 1084.150531][T13548] usb 2-1: config 0 descriptor?? [ 1084.471734][T19973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.503325][T19973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.542652][ T30] kauditd_printk_skb: 462 callbacks suppressed [ 1084.542665][ T30] audit: type=1400 audit(1760434085.211:45537): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1084.619965][T19973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.647989][ T30] audit: type=1400 audit(1760434085.211:45538): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1084.659713][T19973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.730940][ T30] audit: type=1400 audit(1760434085.211:45539): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1084.774511][T19973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.809671][ T30] audit: type=1400 audit(1760434085.221:45540): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1084.827530][T19973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.885624][T19973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1084.914649][T19973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1084.929312][ T30] audit: type=1400 audit(1760434085.221:45541): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1084.975443][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1084.979310][T20002] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1084.981976][ C0] audit: audit_lost=2891 audit_rate_limit=0 audit_backlog_limit=64 [ 1084.981994][ C0] audit: backlog limit exceeded [ 1084.989051][T20002] audit: audit_lost=2892 audit_rate_limit=0 audit_backlog_limit=64 [ 1085.003450][T19973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.060060][T19973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.569825][T13548] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1085.580498][T13548] uvcvideo 2-1:0.31: No valid video chain found. [ 1085.662207][T20014] xt_TCPMSS: Only works on TCP SYN packets [ 1085.772309][T13548] usb 2-1: USB disconnect, device number 114 [ 1085.782173][T20010] tipc: Started in network mode [ 1085.794076][T20010] tipc: Node identity 8a3704983dbc, cluster identity 4711 [ 1085.803597][T20010] tipc: Enabled bearer , priority 0 [ 1085.877207][T20016] syzkaller0: entered promiscuous mode [ 1085.901422][T20016] syzkaller0: entered allmulticast mode [ 1086.053121][T20008] tipc: Resetting bearer [ 1086.423111][T20005] tipc: Resetting bearer [ 1086.443491][T20005] tipc: Disabling bearer [ 1087.508346][T20038] sctp: [Deprecated]: syz.7.3407 (pid 20038) Use of int in max_burst socket option. [ 1087.508346][T20038] Use struct sctp_assoc_value instead [ 1087.559806][ T5857] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1087.729622][ T5857] usb 4-1: Using ep0 maxpacket: 16 [ 1087.750460][ T5857] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1087.767246][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.784872][ T5857] usb 4-1: Product: syz [ 1087.794842][ T5857] usb 4-1: Manufacturer: syz [ 1087.805229][ T5857] usb 4-1: SerialNumber: syz [ 1087.952003][ T5857] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1087.976428][ T5857] r8152-cfgselector 4-1: config 0 descriptor?? [ 1088.289884][ T5857] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1088.302136][ T5857] r8152-cfgselector 4-1: bad CDC descriptors [ 1088.354620][ T5857] r8152-cfgselector 4-1: USB disconnect, device number 118 [ 1088.411536][T20052] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1296 sclass=netlink_xfrm_socket pid=20052 comm=syz.0.3414 [ 1088.484197][T20053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3414'. [ 1088.841532][ T5857] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1089.000795][ T5857] usb 7-1: Using ep0 maxpacket: 32 [ 1089.036604][ T5857] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1089.058753][ T5857] usb 7-1: config 0 has no interface number 0 [ 1089.065427][ T5857] usb 7-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 27392, setting to 1024 [ 1089.079802][ T5857] usb 7-1: config 0 interface 184 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 1024 [ 1089.092109][ T5857] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1089.108912][ T5857] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1089.131444][ T5857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.139551][ T5857] usb 7-1: Product: syz [ 1089.144156][ T5857] usb 7-1: Manufacturer: syz [ 1089.148953][ T5857] usb 7-1: SerialNumber: syz [ 1089.158351][ T5857] usb 7-1: config 0 descriptor?? [ 1089.166527][T20056] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1089.185618][ T5857] smsc75xx v1.0.0 [ 1089.264443][T20064] hub 8-0:1.0: USB hub found [ 1089.287705][T20064] hub 8-0:1.0: 1 port detected [ 1089.391023][T20056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.410603][T20056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.594124][ T30] kauditd_printk_skb: 515 callbacks suppressed [ 1089.594146][ T30] audit: type=1400 audit(1760434090.291:46047): avc: denied { write } for pid=20073 comm="syz.0.3422" name="ptype" dev="proc" ino=4026533541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1089.668410][ T30] audit: type=1400 audit(1760434090.321:46048): avc: denied { write } for pid=20073 comm="syz.0.3422" path="/proc/485/net/ptype" dev="proc" ino=4026533541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1089.699527][ T30] audit: type=1400 audit(1760434090.341:46049): avc: denied { execmem } for pid=20054 comm="syz.6.3415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1089.727897][ T30] audit: type=1400 audit(1760434090.421:46050): avc: denied { read } for pid=20073 comm="syz.0.3422" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1089.861422][ T30] audit: type=1400 audit(1760434090.451:46051): avc: denied { read open } for pid=20073 comm="syz.0.3422" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1089.935653][T20080] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 20080 comm: syz.1.3423) [ 1089.970536][ T30] audit: type=1400 audit(1760434090.471:46052): avc: denied { prog_load } for pid=20069 comm="syz.3.3421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1089.993131][ T30] audit: type=1400 audit(1760434090.471:46053): avc: denied { bpf } for pid=20069 comm="syz.3.3421" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1090.075460][ T30] audit: type=1400 audit(1760434090.471:46054): avc: denied { perfmon } for pid=20069 comm="syz.3.3421" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1090.168037][ T30] audit: type=1400 audit(1760434090.471:46055): avc: denied { perfmon } for pid=20069 comm="syz.3.3421" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1090.226306][ T30] audit: type=1400 audit(1760434090.471:46056): avc: denied { perfmon } for pid=20069 comm="syz.3.3421" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1090.398200][T20087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3426'. [ 1090.427221][T20087] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3426'. [ 1090.489599][ T5857] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1090.510282][ T5857] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1090.537493][ T5857] usb 7-1: USB disconnect, device number 52 [ 1090.549566][T13548] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1090.709920][T13548] usb 2-1: Using ep0 maxpacket: 16 [ 1090.726397][T13548] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1090.749656][T13548] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.969599][T13548] usb 2-1: config 0 has no interface number 0 [ 1090.975767][T13548] usb 2-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 1090.984853][T13548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.994962][T13548] usb 2-1: config 0 descriptor?? [ 1091.022837][T13548] uvcvideo 2-1:0.64: Found UVC 0.00 device (0bd3:05f4) [ 1091.042519][T13548] uvcvideo 2-1:0.64: No valid video chain found. [ 1091.154547][T20099] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1091.542854][T13548] usb 2-1: USB disconnect, device number 115 [ 1092.969795][T20122] mkiss: ax0: crc mode is auto. [ 1094.283032][T20149] macsec1: entered promiscuous mode [ 1094.288326][T20149] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode [ 1094.632505][ T30] kauditd_printk_skb: 392 callbacks suppressed [ 1094.632520][ T30] audit: type=1400 audit(1760434095.331:46449): avc: denied { read write } for pid=14632 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1094.674572][ T30] audit: type=1400 audit(1760434095.341:46450): avc: denied { read write } for pid=17997 comm="syz-executor" name="loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1094.704800][T20149] mac80211_hwsim hwsim32 wlan1: left promiscuous mode [ 1094.768874][ T30] audit: type=1400 audit(1760434095.341:46451): avc: denied { read write open } for pid=17997 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1094.848508][ T30] audit: type=1400 audit(1760434095.341:46452): avc: denied { ioctl } for pid=17997 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1094.874248][ C1] vkms_vblank_simulate: vblank timer overrun [ 1094.890973][T18299] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1094.969990][ T30] audit: type=1400 audit(1760434095.361:46453): avc: denied { recv } for pid=14632 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1095.050943][ T30] audit: type=1400 audit(1760434095.361:46454): avc: denied { recv } for pid=14632 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1095.079551][ T5857] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1095.099543][T18299] usb 2-1: Using ep0 maxpacket: 32 [ 1095.108919][T20150] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1095.110560][T20156] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1095.115528][T20150] audit: audit_lost=2896 audit_rate_limit=0 audit_backlog_limit=64 [ 1095.129848][T20150] audit: backlog limit exceeded [ 1095.151730][T18299] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 1095.169538][T18299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.199617][T18299] usb 2-1: Product: syz [ 1095.212737][T18299] usb 2-1: Manufacturer: syz [ 1095.217363][T18299] usb 2-1: SerialNumber: syz [ 1095.240168][T18299] usb 2-1: config 0 descriptor?? [ 1095.279950][ T5857] usb 8-1: Using ep0 maxpacket: 16 [ 1095.299555][ T5857] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 1095.318021][ T5857] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1095.563679][ T5857] usb 8-1: config 0 has no interface number 0 [ 1095.578541][ T5857] usb 8-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 1095.589644][ T42] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1095.789787][ T5857] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.799899][ T5857] usb 8-1: config 0 descriptor?? [ 1095.811607][ T5857] uvcvideo 8-1:0.64: Found UVC 0.00 device (0bd3:05f4) [ 1095.819344][ T5857] uvcvideo 8-1:0.64: No valid video chain found. [ 1095.917336][T13548] IPVS: starting estimator thread 0... [ 1095.920220][T20166] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1095.933917][ T42] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 1095.946042][ T42] usb 7-1: config 1 has no interface number 0 [ 1095.954328][ T42] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1095.976681][ T42] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1095.988011][ T42] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x7 has an invalid bInterval 192, changing to 11 [ 1096.017616][ T42] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1096.027905][T20167] IPVS: using max 45 ests per chain, 108000 per kthread [ 1096.037351][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.045562][ T42] usb 7-1: Product: syz [ 1096.050484][ T42] usb 7-1: Manufacturer: syz [ 1096.055143][ T42] usb 7-1: SerialNumber: syz [ 1096.064779][T20163] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1096.072684][T20163] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1096.096135][ T42] usb 7-1: Error in usbnet_get_endpoints (-22) [ 1096.276287][ T5857] usb 8-1: USB disconnect, device number 12 [ 1096.771643][T20174] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1096.856488][T18299] snd-usb-6fire 2-1:0.0: unable to receive device firmware state. [ 1096.864434][T18299] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 1096.938183][T18299] usb 2-1: USB disconnect, device number 116 [ 1097.356048][T20181] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3453'. [ 1098.464412][T13548] usb 7-1: USB disconnect, device number 53 [ 1098.721530][T20193] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 20193 comm: syz.1.3457) [ 1098.777023][T20194] SELinux: policydb magic number 0x6 does not match expected magic number 0xf97cff8c [ 1098.829568][T20194] SELinux: failed to load policy [ 1099.644230][ T30] kauditd_printk_skb: 426 callbacks suppressed [ 1099.644247][ T30] audit: type=1400 audit(1760434100.341:46864): avc: denied { create } for pid=20204 comm="syz.3.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1099.900139][ T30] audit: type=1400 audit(1760434100.341:46865): avc: denied { connect } for pid=20204 comm="syz.3.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1100.009111][T14632] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1100.012166][ T30] audit: type=1400 audit(1760434100.351:46866): avc: denied { write } for pid=20204 comm="syz.3.3461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1100.025808][T14632] audit: audit_lost=2903 audit_rate_limit=0 audit_backlog_limit=64 [ 1100.041359][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1100.052785][ C0] audit: audit_lost=2904 audit_rate_limit=0 audit_backlog_limit=64 [ 1100.060682][ C0] audit: backlog limit exceeded [ 1100.067381][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1100.073892][ C0] audit: audit_lost=2905 audit_rate_limit=0 audit_backlog_limit=64 [ 1100.369573][T18299] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1100.649804][ T5857] usb 7-1: new low-speed USB device number 54 using dummy_hcd [ 1100.670212][T18299] usb 2-1: Using ep0 maxpacket: 16 [ 1100.732411][T18299] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1100.763796][T18299] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.790718][T18299] usb 2-1: config 0 has no interface number 0 [ 1100.806084][T18299] usb 2-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 1100.826150][T18299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.989394][ T5857] usb 7-1: device descriptor read/64, error -71 [ 1101.255338][T18299] usb 2-1: config 0 descriptor?? [ 1101.302152][T18299] uvcvideo 2-1:0.64: Found UVC 0.00 device (0bd3:05f4) [ 1101.309761][ T5857] usb 7-1: new low-speed USB device number 55 using dummy_hcd [ 1101.327888][T18299] uvcvideo 2-1:0.64: No valid video chain found. [ 1101.439574][ T5857] usb 7-1: device descriptor read/64, error -71 [ 1101.551812][ T5857] usb usb7-port1: attempt power cycle [ 1101.791599][T18299] usb 2-1: USB disconnect, device number 117 [ 1101.999541][ T5857] usb 7-1: new low-speed USB device number 56 using dummy_hcd [ 1102.047588][ T5857] usb 7-1: device descriptor read/8, error -71 [ 1102.339734][ T5857] usb 7-1: new low-speed USB device number 57 using dummy_hcd [ 1102.399115][ T5857] usb 7-1: device descriptor read/8, error -71 [ 1102.537678][ T5857] usb usb7-port1: unable to enumerate USB device [ 1102.846104][T20240] loop3: detected capacity change from 0 to 7 [ 1102.852929][T20240] Dev loop3: unable to read RDB block 7 [ 1102.858598][T20240] loop3: unable to read partition table [ 1102.869177][T20240] loop3: partition table beyond EOD, truncated [ 1102.878787][T20240] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 1103.110448][T20244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1104.075455][T20256] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3475'. [ 1104.095628][T20255] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3477'. [ 1104.198066][T20256] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1104.255816][T20256] vlan2: entered allmulticast mode [ 1104.266540][T20256] bond0: entered allmulticast mode [ 1104.275020][T20260] program syz.7.3479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1104.282866][T20256] bond_slave_0: entered allmulticast mode [ 1104.294491][T20256] bond_slave_1: entered allmulticast mode [ 1104.787071][ T30] kauditd_printk_skb: 508 callbacks suppressed [ 1104.787086][ T30] audit: type=1400 audit(1760434105.481:47367): avc: denied { read write } for pid=14632 comm="syz-executor" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1104.872456][ T30] audit: type=1400 audit(1760434105.491:47368): avc: denied { ioctl } for pid=20263 comm="syz.7.3480" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1104.904264][ T30] audit: type=1400 audit(1760434105.521:47369): avc: denied { recv } for pid=20257 comm="syz.3.3478" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1104.929977][ T42] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1104.946325][ T30] audit: type=1400 audit(1760434105.521:47370): avc: denied { recv } for pid=20257 comm="syz.3.3478" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1104.978016][ T30] audit: type=1400 audit(1760434105.521:47371): avc: denied { recv } for pid=20257 comm="syz.3.3478" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1105.011764][ T30] audit: type=1400 audit(1760434105.531:47372): avc: denied { read write open } for pid=14632 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1105.041882][ T30] audit: type=1400 audit(1760434105.531:47373): avc: denied { ioctl } for pid=14632 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=653 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1105.156055][ T30] audit: type=1400 audit(1760434105.561:47374): avc: denied { ioctl } for pid=20263 comm="syz.7.3480" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1105.181286][ T30] audit: type=1400 audit(1760434105.641:47375): avc: denied { ioctl } for pid=20263 comm="syz.7.3480" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1105.206395][ T42] usb 8-1: Using ep0 maxpacket: 16 [ 1105.211612][ T30] audit: type=1400 audit(1760434105.641:47376): avc: denied { ioctl } for pid=20263 comm="syz.7.3480" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1105.271456][ T42] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 1105.279768][ T42] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.295683][ T42] usb 8-1: config 0 has no interface number 0 [ 1105.309571][ T42] usb 8-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 1105.318647][ T42] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.328782][ T42] usb 8-1: config 0 descriptor?? [ 1105.345742][ T42] uvcvideo 8-1:0.64: Found UVC 0.00 device (0bd3:05f4) [ 1105.371817][ T42] uvcvideo 8-1:0.64: No valid video chain found. [ 1106.061458][ T42] usb 8-1: USB disconnect, device number 13 [ 1106.335176][T20287] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1106.345596][T20287] F2FS-fs (loop13): Can't find valid F2FS filesystem in 1th superblock [ 1106.375587][T20287] F2FS-fs (loop13): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1106.399800][T20287] F2FS-fs (loop13): Can't find valid F2FS filesystem in 2th superblock [ 1106.805009][ T42] IPVS: starting estimator thread 0... [ 1106.899901][T20296] IPVS: using max 41 ests per chain, 98400 per kthread [ 1107.219538][ T42] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1107.379541][ T42] usb 2-1: Using ep0 maxpacket: 32 [ 1107.380801][T20313] overlayfs: failed to resolve './file1': -2 [ 1107.388797][T20311] overlayfs: missing 'lowerdir' [ 1107.417751][ T42] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1107.468453][ T42] usb 2-1: config 0 has no interface number 0 [ 1107.716832][ T42] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1107.727741][ T42] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1107.738032][ T42] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1107.748258][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.759129][ T42] usb 2-1: config 0 descriptor?? [ 1108.087944][ T42] usbhid 2-1:0.1: can't add hid device: -71 [ 1108.107769][ T42] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 1108.132306][ T42] usb 2-1: USB disconnect, device number 118 [ 1109.277934][ T42] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1109.375592][T20339] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 1109.409561][T13548] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1109.439489][ T42] usb 8-1: Using ep0 maxpacket: 8 [ 1109.468975][ T42] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 1109.485463][ T42] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 1109.504160][ T42] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1109.524363][ T42] usb 8-1: config 250 has no interface number 0 [ 1109.538675][ T42] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1109.561043][ T42] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1109.571553][T13548] usb 2-1: Using ep0 maxpacket: 16 [ 1109.582487][ T42] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12336, setting to 1024 [ 1109.604982][T20344] binder: 20343:20344 ioctl 4018620d 0 returned -22 [ 1109.608191][ T42] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1109.649498][ T42] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1109.655026][T20345] 9pnet_fd: Insufficient options for proto=fd [ 1109.681952][ T42] usb 8-1: config 250 interface 228 has no altsetting 0 [ 1109.683471][T20344] 9pnet_fd: Insufficient options for proto=fd [ 1109.881733][ T30] kauditd_printk_skb: 638 callbacks suppressed [ 1109.881812][ T30] audit: type=1400 audit(1760434110.471:48015): avc: denied { write } for pid=20331 comm="syz.7.3499" name="event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1110.025336][T13548] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1110.079782][T13548] usb 2-1: can't read configurations, error -71 [ 1110.090921][T20344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3504'. [ 1110.095218][ T30] audit: type=1400 audit(1760434110.481:48016): avc: denied { write open } for pid=20331 comm="syz.7.3499" path="/dev/input/event2" dev="devtmpfs" ino=922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1110.103032][ T42] usb 8-1: string descriptor 0 read error: -71 [ 1110.124802][ C0] vkms_vblank_simulate: vblank timer overrun [ 1110.143543][ T30] audit: type=1400 audit(1760434110.481:48017): avc: denied { ioctl } for pid=20331 comm="syz.7.3499" path="/dev/input/event2" dev="devtmpfs" ino=922 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1110.169268][ C0] vkms_vblank_simulate: vblank timer overrun [ 1110.185869][ T30] audit: type=1400 audit(1760434110.491:48018): avc: denied { prog_load } for pid=20331 comm="syz.7.3499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1110.226685][ T30] audit: type=1400 audit(1760434110.491:48019): avc: denied { bpf } for pid=20331 comm="syz.7.3499" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1110.269554][ T42] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1110.290984][ T42] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1110.308693][ T30] audit: type=1400 audit(1760434110.491:48020): avc: denied { perfmon } for pid=20331 comm="syz.7.3499" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1110.308845][ T42] usb 8-1: can't set config #250, error -71 [ 1110.341337][ T42] usb 8-1: USB disconnect, device number 14 [ 1110.369023][ T30] audit: type=1400 audit(1760434110.501:48021): avc: denied { perfmon } for pid=20331 comm="syz.7.3499" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1110.391765][ T30] audit: type=1400 audit(1760434110.501:48022): avc: denied { perfmon } for pid=20331 comm="syz.7.3499" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1110.419083][ T30] audit: type=1400 audit(1760434110.501:48023): avc: denied { perfmon } for pid=20331 comm="syz.7.3499" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1110.440856][ T30] audit: type=1400 audit(1760434110.511:48024): avc: denied { perfmon } for pid=20331 comm="syz.7.3499" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1110.476242][T20354] overlay: Unknown parameter '/' [ 1110.523291][T20354] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1110.609594][ T5950] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1110.869513][ T5950] usb 7-1: Using ep0 maxpacket: 16 [ 1110.938692][ T5950] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1111.026915][ T5950] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1111.066778][ T5950] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1111.189661][T13548] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1111.210610][ T5950] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1111.219781][ T5950] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.231631][ T5950] usb 7-1: config 0 descriptor?? [ 1111.369595][T13548] usb 2-1: Using ep0 maxpacket: 16 [ 1111.426395][T13548] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.172096][T20372] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1112.178864][T20372] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1112.433544][T13548] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1112.501128][T13548] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.763677][T13548] usb 2-1: Product: syz [ 1113.331823][T13548] usb 2-1: Manufacturer: syz [ 1113.375825][T13548] usb 2-1: SerialNumber: syz [ 1113.386052][ T5950] microsoft 0003:045E:07DA.0024: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1113.408744][T13548] usb 2-1: config 0 descriptor?? [ 1113.414361][ T5950] microsoft 0003:045E:07DA.0024: no inputs found [ 1113.423132][ T5950] microsoft 0003:045E:07DA.0024: could not initialize ff, continuing anyway [ 1113.441831][T13548] CoreChips 2-1:0.0: probe with driver CoreChips failed with error -22 [ 1113.658589][T13548] usb 7-1: USB disconnect, device number 58 [ 1115.177692][ T5885] usb 2-1: USB disconnect, device number 120 [ 1115.186165][ T30] kauditd_printk_skb: 208 callbacks suppressed [ 1115.186179][ T30] audit: type=1400 audit(1760434115.611:48233): avc: denied { map_create } for pid=20376 comm="syz.7.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1115.321188][ T30] audit: type=1400 audit(1760434115.611:48234): avc: denied { bpf } for pid=20376 comm="syz.7.3511" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1115.412928][ T30] audit: type=1400 audit(1760434115.611:48235): avc: denied { prog_load } for pid=20376 comm="syz.7.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1115.450659][ T30] audit: type=1400 audit(1760434115.611:48236): avc: denied { bpf } for pid=20376 comm="syz.7.3511" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1115.516923][ T30] audit: type=1400 audit(1760434115.621:48237): avc: denied { prog_load } for pid=20376 comm="syz.7.3511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1115.532264][T20397] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1115.538407][T14632] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1115.553038][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1115.557337][T20397] audit: audit_lost=2908 audit_rate_limit=0 audit_backlog_limit=64 [ 1115.559583][ C0] audit: audit_lost=2909 audit_rate_limit=0 audit_backlog_limit=64 [ 1115.781450][T20407] overlay: Unknown parameter '/' [ 1115.800084][T20407] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1116.004237][T13548] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1116.139877][ T5885] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1116.169528][T13548] usb 8-1: Using ep0 maxpacket: 16 [ 1116.186029][T13548] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 1116.194220][T13548] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.207821][T13548] usb 8-1: config 0 has no interface number 0 [ 1116.215184][T13548] usb 8-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 1116.224296][T13548] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.240226][T13548] usb 8-1: config 0 descriptor?? [ 1116.252653][T13548] uvcvideo 8-1:0.64: Found UVC 0.00 device (0bd3:05f4) [ 1116.264285][T13548] uvcvideo 8-1:0.64: No valid video chain found. [ 1116.379841][ T5885] usb 7-1: Using ep0 maxpacket: 16 [ 1116.397823][ T5885] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1116.406993][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.415167][ T5885] usb 7-1: Product: syz [ 1116.419367][ T5885] usb 7-1: Manufacturer: syz [ 1116.519483][ T5885] usb 7-1: SerialNumber: syz [ 1116.585926][ T5885] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1116.608172][ T5885] r8152-cfgselector 7-1: config 0 descriptor?? [ 1116.785179][ T5857] usb 8-1: USB disconnect, device number 15 [ 1116.846615][T20414] 9pnet_virtio: no channels available for device qY3aK [ 1116.889890][ T5885] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1116.907642][ T5885] r8152-cfgselector 7-1: bad CDC descriptors [ 1116.938551][ T5885] r8152-cfgselector 7-1: USB disconnect, device number 59 [ 1117.563753][T20420] erspan1: entered allmulticast mode [ 1117.989526][ T5885] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 1118.922067][ T5885] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 1118.937510][ T5885] usb 8-1: config 0 has no interface number 0 [ 1118.953907][ T5885] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1118.974606][ T5885] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1119.039168][ T5885] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1119.079805][ T5885] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1119.116609][ T5885] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1119.154476][ T5885] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1119.187958][ T5885] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1119.219481][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.240631][ T5885] usb 8-1: config 0 descriptor?? [ 1119.251387][T20423] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1119.260622][T20423] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1119.289624][ T5885] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1119.331636][T20451] overlay: Unknown parameter '/' [ 1119.342675][T20447] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3535'. [ 1119.367167][T20451] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1119.389732][T13548] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1119.627269][T13548] usb 2-1: config 0 has no interfaces? [ 1119.633954][T13548] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1119.644730][T13548] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.654678][T13548] usb 2-1: config 0 descriptor?? [ 1120.038700][T20443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.047641][T20443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.135246][ T5885] usb 2-1: USB disconnect, device number 121 [ 1120.247590][ T30] kauditd_printk_skb: 554 callbacks suppressed [ 1120.247605][ T30] audit: type=1400 audit(1760434120.941:48776): avc: denied { recv } for pid=5794 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1120.310946][ T30] audit: type=1400 audit(1760434120.991:48777): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1120.344317][ T30] audit: type=1400 audit(1760434121.001:48778): avc: denied { unmount } for pid=17110 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1120.365330][ T30] audit: type=1400 audit(1760434121.001:48779): avc: denied { recv } for pid=17110 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1120.401218][ T30] audit: type=1400 audit(1760434121.001:48780): avc: denied { recv } for pid=17110 comm="syz-executor" saddr=10.128.0.169 src=30006 daddr=10.128.0.27 dest=41110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1120.428989][ T30] audit: type=1400 audit(1760434121.031:48781): avc: denied { unmount } for pid=17110 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1120.451658][ T30] audit: type=1400 audit(1760434121.041:48782): avc: denied { read write } for pid=20441 comm="syz.1.3532" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1120.514054][ T5918] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1120.533755][ T5918] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1120.539554][ T30] audit: type=1400 audit(1760434121.041:48783): avc: denied { read write open } for pid=20441 comm="syz.1.3532" path="/dev/raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1120.545244][ T5918] usb 1-1: USB disconnect, device number 107 [ 1120.575006][ T30] audit: type=1400 audit(1760434121.041:48784): avc: denied { ioctl } for pid=20441 comm="syz.1.3532" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1120.600418][ T30] audit: type=1400 audit(1760434121.041:48785): avc: denied { ioctl } for pid=20441 comm="syz.1.3532" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1120.612285][ T5885] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1120.634114][T18381] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1120.789498][ T5885] usb 2-1: Using ep0 maxpacket: 16 [ 1120.794695][T18381] usb 7-1: Using ep0 maxpacket: 16 [ 1120.808384][ T5885] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1120.818832][ T5885] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1120.836902][ T5885] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 1120.856676][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.858274][T18381] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1120.875893][ T5885] usb 2-1: Product: syz [ 1120.882288][ T5885] usb 2-1: Manufacturer: syz [ 1120.891802][ T5885] usb 2-1: SerialNumber: syz [ 1120.900353][T18381] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.908341][T18381] usb 7-1: Product: syz [ 1120.914367][T18381] usb 7-1: Manufacturer: syz [ 1120.925458][T18381] usb 7-1: SerialNumber: syz [ 1120.939675][ T5918] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1120.950458][T18381] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1120.958179][T18381] r8152-cfgselector 7-1: config 0 descriptor?? [ 1121.115138][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 1121.161163][ T5918] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1121.179523][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.183319][ T5950] usb 8-1: USB disconnect, device number 16 [ 1121.208158][ T5918] usb 1-1: config 0 has no interface number 0 [ 1121.231632][ T5918] usb 1-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 1121.241631][ T5950] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 1121.253562][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.269867][ T5918] usb 1-1: config 0 descriptor?? [ 1121.284283][ T5918] uvcvideo 1-1:0.64: Found UVC 0.00 device (0bd3:05f4) [ 1121.298768][ T5918] uvcvideo 1-1:0.64: No valid video chain found. [ 1121.333359][ T5885] usb 2-1: 0:2 : does not exist [ 1121.445195][T18381] r8152-cfgselector 7-1: Unknown version 0x0000 [ 1121.452103][T18381] r8152-cfgselector 7-1: bad CDC descriptors [ 1121.466167][T18381] r8152-cfgselector 7-1: USB disconnect, device number 60 [ 1121.602494][ T5918] usb 1-1: USB disconnect, device number 108 [ 1122.394827][T20478] netlink: 'syz.6.3541': attribute type 4 has an invalid length. [ 1124.021039][T20496] overlayfs: failed to resolve './file1': -2 [ 1124.037323][T20493] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 20493 comm: syz.0.3546) [ 1125.406395][ T30] kauditd_printk_skb: 363 callbacks suppressed [ 1125.406413][ T30] audit: type=1400 audit(1760434125.421:49149): avc: denied { read } for pid=20501 comm="syz.3.3549" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1125.439984][ T30] audit: type=1400 audit(1760434125.421:49150): avc: denied { read open } for pid=20501 comm="syz.3.3549" path="/dev/rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1125.580362][ T30] audit: type=1400 audit(1760434125.421:49151): avc: denied { ioctl } for pid=20501 comm="syz.3.3549" path="/dev/rtc0" dev="devtmpfs" ino=921 ioctlcmd=0x7007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1125.645000][ T30] audit: type=1400 audit(1760434125.541:49152): avc: denied { read } for pid=20500 comm="syz.7.3548" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1125.825483][ T30] audit: type=1400 audit(1760434125.551:49153): avc: denied { read open } for pid=20500 comm="syz.7.3548" path="/dev/iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1125.914549][ T30] audit: type=1400 audit(1760434125.581:49154): avc: denied { bpf } for pid=20500 comm="syz.7.3548" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1126.132789][ T30] audit: type=1400 audit(1760434125.591:49155): avc: denied { prog_load } for pid=20500 comm="syz.7.3548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1126.203886][ T30] audit: type=1400 audit(1760434125.591:49156): avc: denied { bpf } for pid=20500 comm="syz.7.3548" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1126.290919][ T30] audit: type=1400 audit(1760434125.591:49157): avc: denied { prog_load } for pid=20500 comm="syz.7.3548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1126.325551][ T30] audit: type=1400 audit(1760434125.591:49158): avc: denied { bpf } for pid=20500 comm="syz.7.3548" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1126.550899][ T5885] usb 2-1: 5:0: failed to get current value for ch 0 (-110) [ 1126.586935][ T5885] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1126.635125][ T5885] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1126.734211][ T5885] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1126.759948][ T5918] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1126.940285][ T5918] usb 8-1: Using ep0 maxpacket: 16 [ 1126.963479][ T5918] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 1126.990339][ T5918] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.019545][ T5918] usb 8-1: config 0 has no interface number 0 [ 1127.029799][ T5918] usb 8-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 1127.049010][ T5918] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.080032][ T5918] usb 8-1: config 0 descriptor?? [ 1127.102520][ T5918] uvcvideo 8-1:0.64: Found UVC 0.00 device (0bd3:05f4) [ 1127.119816][ T5918] uvcvideo 8-1:0.64: No valid video chain found. [ 1127.189573][ T5950] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1127.398290][T20542] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1127.864737][ T5950] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1127.890871][ T5950] usb 4-1: config 1 has no interface number 0 [ 1127.937748][T20543] ================================================================== [ 1127.945818][T20543] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70 [ 1127.953789][T20543] Read of size 8 at addr ffff888068ad0030 by task syz.6.3556/20543 [ 1127.961656][T20543] [ 1127.963961][T20543] CPU: 0 UID: 0 PID: 20543 Comm: syz.6.3556 Not tainted syzkaller #0 PREEMPT(full) [ 1127.963979][T20543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1127.963988][T20543] Call Trace: [ 1127.963993][T20543] [ 1127.964000][T20543] dump_stack_lvl+0x116/0x1f0 [ 1127.964019][T20543] print_report+0xcd/0x630 [ 1127.964039][T20543] ? __virt_addr_valid+0x81/0x610 [ 1127.964054][T20543] ? __phys_addr+0xe8/0x180 [ 1127.964070][T20543] ? sysfs_remove_file_ns+0x63/0x70 [ 1127.964090][T20543] kasan_report+0xe0/0x110 [ 1127.964110][T20543] ? sysfs_remove_file_ns+0x63/0x70 [ 1127.964133][T20543] sysfs_remove_file_ns+0x63/0x70 [ 1127.964155][T20543] driver_remove_file+0x4a/0x60 [ 1127.964172][T20543] bus_remove_driver+0x224/0x2c0 [ 1127.964195][T20543] driver_unregister+0x76/0xb0 [ 1127.964210][T20543] comedi_device_detach_locked+0x12f/0xa50 [ 1127.964229][T20543] do_devconfig_ioctl+0x555/0x710 [ 1127.964247][T20543] ? __mutex_lock+0x1c5/0x1060 [ 1127.964265][T20543] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1127.964290][T20543] ? find_held_lock+0x2b/0x80 [ 1127.964305][T20543] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1127.964330][T20543] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1127.964353][T20543] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1127.964377][T20543] ? do_vfs_ioctl+0x128/0x14f0 [ 1127.964392][T20543] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1127.964406][T20543] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1127.964430][T20543] ? hook_file_ioctl_common+0x145/0x410 [ 1127.964447][T20543] ? selinux_file_ioctl+0x180/0x270 [ 1127.964465][T20543] ? selinux_file_ioctl+0xb4/0x270 [ 1127.964484][T20543] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1127.964505][T20543] __x64_sys_ioctl+0x18e/0x210 [ 1127.964520][T20543] do_syscall_64+0xcd/0xfa0 [ 1127.964538][T20543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.964552][T20543] RIP: 0033:0x7fe96f58eec9 [ 1127.964563][T20543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1127.964578][T20543] RSP: 002b:00007fe96d7b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1127.964592][T20543] RAX: ffffffffffffffda RBX: 00007fe96f7e6180 RCX: 00007fe96f58eec9 [ 1127.964602][T20543] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000006 [ 1127.964612][T20543] RBP: 00007fe96f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1127.964621][T20543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1127.964629][T20543] R13: 00007fe96f7e6218 R14: 00007fe96f7e6180 R15: 00007ffd17a0e188 [ 1127.964645][T20543] [ 1127.964650][T20543] [ 1128.215927][T20543] Allocated by task 20199: [ 1128.220319][T20543] kasan_save_stack+0x33/0x60 [ 1128.224982][T20543] kasan_save_track+0x14/0x30 [ 1128.229642][T20543] __kasan_kmalloc+0xaa/0xb0 [ 1128.234212][T20543] __kmalloc_noprof+0x32f/0x880 [ 1128.239038][T20543] security_inode_init_security+0x13f/0x390 [ 1128.244910][T20543] shmem_symlink+0x135/0x9f0 [ 1128.249483][T20543] vfs_symlink+0x403/0x680 [ 1128.253877][T20543] do_symlinkat+0x261/0x310 [ 1128.258371][T20543] __x64_sys_symlinkat+0x93/0xc0 [ 1128.263306][T20543] do_syscall_64+0xcd/0xfa0 [ 1128.267805][T20543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.273685][T20543] [ 1128.275990][T20543] Freed by task 20199: [ 1128.280033][T20543] kasan_save_stack+0x33/0x60 [ 1128.284703][T20543] kasan_save_track+0x14/0x30 [ 1128.289362][T20543] __kasan_save_free_info+0x3b/0x60 [ 1128.294541][T20543] __kasan_slab_free+0x5f/0x80 [ 1128.299292][T20543] kfree+0x2b8/0x6d0 [ 1128.303164][T20543] security_inode_init_security+0x2eb/0x390 [ 1128.309037][T20543] shmem_symlink+0x135/0x9f0 [ 1128.313607][T20543] vfs_symlink+0x403/0x680 [ 1128.318003][T20543] do_symlinkat+0x261/0x310 [ 1128.322493][T20543] __x64_sys_symlinkat+0x93/0xc0 [ 1128.327416][T20543] do_syscall_64+0xcd/0xfa0 [ 1128.331906][T20543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1128.337790][T20543] [ 1128.340097][T20543] The buggy address belongs to the object at ffff888068ad0000 [ 1128.340097][T20543] which belongs to the cache kmalloc-256 of size 256 [ 1128.354127][T20543] The buggy address is located 48 bytes inside of [ 1128.354127][T20543] freed 256-byte region [ffff888068ad0000, ffff888068ad0100) [ 1128.367822][T20543] [ 1128.370134][T20543] The buggy address belongs to the physical page: [ 1128.376523][T20543] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888068ad1600 pfn:0x68ad0 [ 1128.386581][T20543] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1128.395063][T20543] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1128.403543][T20543] page_type: f5(slab) [ 1128.407511][T20543] raw: 00fff00000000240 ffff88813ff26b40 ffffea0000c76390 ffffea0000c7eb90 [ 1128.416079][T20543] raw: ffff888068ad1600 0000000000100004 00000000f5000000 0000000000000000 [ 1128.424642][T20543] head: 00fff00000000240 ffff88813ff26b40 ffffea0000c76390 ffffea0000c7eb90 [ 1128.433289][T20543] head: ffff888068ad1600 0000000000100004 00000000f5000000 0000000000000000 [ 1128.441938][T20543] head: 00fff00000000001 ffffea0001a2b401 00000000ffffffff 00000000ffffffff [ 1128.450591][T20543] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1128.459242][T20543] page dumped because: kasan: bad access detected [ 1128.465654][T20543] page_owner tracks the page as allocated [ 1128.471343][T20543] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5806, tgid 5806 (syz-executor), ts 62241120211, free_ts 62223049217 [ 1128.492684][T20543] post_alloc_hook+0x1c0/0x230 [ 1128.497473][T20543] get_page_from_freelist+0x10a3/0x3a30 [ 1128.503008][T20543] __alloc_frozen_pages_noprof+0x25f/0x2470 [ 1128.508888][T20543] alloc_pages_mpol+0x1fb/0x550 [ 1128.513727][T20543] new_slab+0x24a/0x360 [ 1128.517865][T20543] ___slab_alloc+0xdc4/0x1ae0 [ 1128.522521][T20543] __slab_alloc.constprop.0+0x63/0x110 [ 1128.527962][T20543] __kmalloc_noprof+0x501/0x880 [ 1128.532793][T20543] __register_sysctl_table+0xea2/0x1900 [ 1128.538319][T20543] __devinet_sysctl_register+0x1b9/0x360 [ 1128.543938][T20543] devinet_sysctl_register+0x17b/0x200 [ 1128.549381][T20543] inetdev_event+0x1638/0x18a0 [ 1128.554131][T20543] notifier_call_chain+0xbc/0x410 [ 1128.559137][T20543] call_netdevice_notifiers_info+0xbe/0x140 [ 1128.565013][T20543] netif_change_name+0x557/0x920 [ 1128.569933][T20543] do_setlink.constprop.0+0x3362/0x4380 [ 1128.575460][T20543] page last free pid 5820 tgid 5820 stack trace: [ 1128.581761][T20543] __free_frozen_pages+0x7df/0x1160 [ 1128.586936][T20543] qlist_free_all+0x4d/0x120 [ 1128.591506][T20543] kasan_quarantine_reduce+0x195/0x1e0 [ 1128.596961][T20543] __kasan_slab_alloc+0x69/0x90 [ 1128.601800][T20543] __kmalloc_noprof+0x2e8/0x880 [ 1128.606628][T20543] fib6_info_alloc+0x40/0x160 [ 1128.611286][T20543] ip6_route_info_create+0x14c/0x870 [ 1128.616549][T20543] ip6_route_add.part.0+0x22/0x1d0 [ 1128.621643][T20543] ip6_route_add+0x45/0x60 [ 1128.626034][T20543] addrconf_add_mroute+0x1dd/0x350 [ 1128.631123][T20543] addrconf_add_dev+0x14e/0x1c0 [ 1128.635953][T20543] inet6_addr_add+0xfe/0x960 [ 1128.640528][T20543] inet6_rtm_newaddr+0x1619/0x1c70 [ 1128.645624][T20543] rtnetlink_rcv_msg+0x95e/0xe90 [ 1128.650542][T20543] netlink_rcv_skb+0x158/0x420 [ 1128.655814][T20543] netlink_unicast+0x5aa/0x870 [ 1128.660560][T20543] [ 1128.662864][T20543] Memory state around the buggy address: [ 1128.668467][T20543] ffff888068acff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1128.676507][T20543] ffff888068acff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1128.684546][T20543] >ffff888068ad0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1128.692583][T20543] ^ [ 1128.698189][T20543] ffff888068ad0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1128.706228][T20543] ffff888068ad0100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1128.714263][T20543] ================================================================== [ 1128.762888][ T5950] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1128.780504][ T5950] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1128.799805][ T5950] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.858222][ T5950] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1128.868696][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.898031][ T5950] usb 4-1: Product: syz [ 1128.903841][ T5950] usb 4-1: Manufacturer: syz [ 1128.909661][ T5950] usb 4-1: SerialNumber: syz [ 1128.915915][T20543] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1128.923099][T20543] CPU: 1 UID: 0 PID: 20543 Comm: syz.6.3556 Not tainted syzkaller #0 PREEMPT(full) [ 1128.932460][T20543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1128.942487][T20543] Call Trace: [ 1128.945739][T20543] [ 1128.948645][T20543] dump_stack_lvl+0x3d/0x1f0 [ 1128.953212][T20543] vpanic+0x640/0x6f0 [ 1128.957173][T20543] panic+0xca/0xd0 [ 1128.960868][T20543] ? __pfx_panic+0x10/0x10 [ 1128.965257][T20543] ? sysfs_remove_file_ns+0x63/0x70 [ 1128.970440][T20543] ? preempt_schedule_common+0x44/0xc0 [ 1128.975895][T20543] ? preempt_schedule_thunk+0x16/0x30 [ 1128.981257][T20543] check_panic_on_warn+0xab/0xb0 [ 1128.986181][T20543] end_report+0x107/0x170 [ 1128.990502][T20543] kasan_report+0xee/0x110 [ 1128.994904][T20543] ? sysfs_remove_file_ns+0x63/0x70 [ 1129.000097][T20543] sysfs_remove_file_ns+0x63/0x70 [ 1129.005110][T20543] driver_remove_file+0x4a/0x60 [ 1129.009943][T20543] bus_remove_driver+0x224/0x2c0 [ 1129.014871][T20543] driver_unregister+0x76/0xb0 [ 1129.019617][T20543] comedi_device_detach_locked+0x12f/0xa50 [ 1129.025413][T20543] do_devconfig_ioctl+0x555/0x710 [ 1129.030422][T20543] ? __mutex_lock+0x1c5/0x1060 [ 1129.035170][T20543] ? __pfx_do_devconfig_ioctl+0x10/0x10 [ 1129.040706][T20543] ? find_held_lock+0x2b/0x80 [ 1129.045364][T20543] comedi_unlocked_ioctl+0x165d/0x2f00 [ 1129.050812][T20543] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1129.056610][T20543] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1129.062496][T20543] ? do_vfs_ioctl+0x128/0x14f0 [ 1129.067239][T20543] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1129.072245][T20543] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1129.079084][T20543] ? hook_file_ioctl_common+0x145/0x410 [ 1129.084623][T20543] ? selinux_file_ioctl+0x180/0x270 [ 1129.089805][T20543] ? selinux_file_ioctl+0xb4/0x270 [ 1129.094908][T20543] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1129.100700][T20543] __x64_sys_ioctl+0x18e/0x210 [ 1129.105443][T20543] do_syscall_64+0xcd/0xfa0 [ 1129.109929][T20543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.115803][T20543] RIP: 0033:0x7fe96f58eec9 [ 1129.120199][T20543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1129.139785][T20543] RSP: 002b:00007fe96d7b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1129.148183][T20543] RAX: ffffffffffffffda RBX: 00007fe96f7e6180 RCX: 00007fe96f58eec9 [ 1129.156133][T20543] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000006 [ 1129.164086][T20543] RBP: 00007fe96f611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1129.172035][T20543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1129.179985][T20543] R13: 00007fe96f7e6218 R14: 00007fe96f7e6180 R15: 00007ffd17a0e188 [ 1129.187943][T20543] [ 1129.191121][T20543] Kernel Offset: disabled [ 1129.195419][T20543] Rebooting in 86400 seconds..