last executing test programs: 15.082685942s ago: executing program 0 (id=45): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)) (async) ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={0x0}) (async, rerun: 32) r2 = dup(r0) (rerun: 32) write$binfmt_elf64(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x2, 0x5, 0x4, 0x8000000000000001, 0x3, 0x3, 0xa179, 0x3da, 0x40, 0x203, 0x63, 0xc5, 0x38, 0x4, 0x400, 0x7, 0x7ff}, [{0x60000000, 0x10, 0x7ff, 0x6, 0x9, 0x7fffffffffffffff, 0x9, 0x4}, {0x70000000, 0x5, 0x6, 0xe, 0xc8f, 0x80000000, 0x60, 0x44}, {0x3, 0x3, 0x4, 0x8, 0x5, 0x1, 0x3a57, 0xb15d}, {0x3, 0x1000, 0xfffffffffffffffb, 0x50000000000, 0x7fffffffffffffff, 0x8, 0x101, 0x7f}], "fa7a9a1b554128b1d2902289a0107c303d683de1ab4d7de85c7be22ced5781b03d586f0b33f94c8138dd49051270a9458f4d43906b2ffc477cd69e30ee2fc3fcb317de6c2d28418bcf65cf5a01865d7c090aa3efb603fdbdb6db35f802232c3021d18f12e665828bd80218592a3ae11c025a95ad900c0febc0a276adb87eb5aeedcf6e64ac579b15093caabd6233042c63599a710f12abb69654bb6900eecc4a98a5d6886bb06417c64892f9897f7b030605619951fd3b1873e851f0b2088897e7894562f645567ca0603eb12323bf6a752b24c1a2cca60d820270d5e19a4bc1307bbdc22ee94c3932ba76e475368b4f0813639024", ['\x00', '\x00']}, 0x415) (async) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0xf0b, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, {0x4, 0xc}, {0xb, 0x1}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) (async) write$UHID_INPUT(r2, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 15.059382599s ago: executing program 0 (id=46): prlimit64(0x0, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, 0x0, 0xfdfd, &(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r1, &(0x7f0000000200)=""/26, 0x1a) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$nl_generic(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="940000c6d6bde300190002002bbd7000fedbdf25080000000800a800040000007800fc8073004600e5e74ff4d40dd4fc05282f90aadf5a1c2e28faa03331f5bbd2f03ea001b1108ceaa7a90692e4b1fd6d8fdbcd55412c61b58975295d60fd0de6b5272a5139e6ce3da6927904cb326570d52f106de8267ecc9b4b6b4e0146fc9f34082d8fa95244b28ee7a394b87f91e48222c8"], 0x94}, 0x1, 0x0, 0x0, 0x44850}, 0x20014804) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x32, 0x8, 0xfffffffe}, 0x14}}, 0x8000) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) iopl(0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000001280)="b7f2288a91", 0x5) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000380), 0x4924a03, 0x20040000) 14.638815436s ago: executing program 0 (id=47): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x6}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000340)={0x8f, 0x0, 0x4}) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) setsockopt$PNPIPE_ENCAP(r7, 0x113, 0x1, &(0x7f0000000200), 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x59, 0x0, 0x0) 14.079152547s ago: executing program 0 (id=53): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="5c00000014006b03000e0000006c1d000a847ea622fb564500004e23e3f58e76110165f450e71b007534b2f65299036b664b9511845ec32088933015eef4f1563bd4d18d1048df085f2f227f84e5aee477e2ec0828ed6fd10556ec009ba57e76ecdfda2634bca20f9d7a03d1e4a3300638c694e232aecc172e376ea20a8a968dda0e53c40525170117a6657440a73c009c91", 0x92}, {&(0x7f0000000100)="32a20b99f7c49616efbe8d504ff39827a47c343eb526076ef221fd8913d0ef03473232e97be0ef7035f2340e599bff9817b97ec8b7356fe9c25ef004609041e4c5607528954e05d1eaaf90f66932461f", 0x50}, {&(0x7f0000000180)="80f1569bc0b92bc041ec0c2acd5b5b1b6266719cffa51e3d599d736d634e305b5b31928f6cd8f52ff3721732c45d1f9745b9b61eec6a82746e70c8a18755", 0x3e}, {&(0x7f0000000240)="ae23c386e37d1ad0a87e7e571afd02ee7cd95891b477009dd066a8d6e14db4", 0x1f}, {&(0x7f0000000280)="70596a8a854cd832682fbefe6ba5a9cfa978fe9533648848e5e764c6c598bcde2cfb0b6e33e2bc4754fb526149e799", 0x2f}, {&(0x7f00000002c0)="404d74b599cb1623954ccb67fa6a0dbcdaa173bcfb56caba0efff845df2469071ef985c5a175f6e59e7b0ee5f394d7499e88afe8120679fac22ca67854701818ec7f385edd789b6582d5c74378b88ad6a0401757eaa62cca55f58517d141b886681f8be8632248a936dc0b85a8a47421746e8c029ba8f729e4f4440ba10d480ddac93162ba10e01db445536eb804c79e939438edbae94cdb90f54422d515812b85c418f61d40281c88bf8855791d0f009a18079d4e12d0145b84cb8160455963c352", 0xc2}, {&(0x7f00000003c0)="47e52b0b5bd4708963d5e0501d8ce6ac26c5dc89d79f4edde596bbef7c0fe30ff9bafb5fefed5f96ff0b7d4a8ba67b4491a81509e34bab47a0560fe71397", 0x3e}], 0x7, 0x0, 0x0, 0x1f00c00e}, 0x40811) rseq(0xfffffffffffffffd, 0x41, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b02010000000009040000018ea44300090585d1"], 0x0) 11.161746037s ago: executing program 3 (id=62): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = dup2(r2, r0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000002000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 11.140498668s ago: executing program 0 (id=63): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef28"], 0xffdd) 10.788353108s ago: executing program 3 (id=66): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3fd}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) r7 = getpid() tgkill(r7, r7, 0x26) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x80, 0x3, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x40000}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4040884) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.304476027s ago: executing program 2 (id=67): ioperm(0x0, 0x9, 0x2) prctl$PR_SCHED_CORE(0x42, 0x4, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff004}, {0x6}]}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0xf, 0x4, 0x4000, 0x3}, 0x26, 0x200, 0x8, 0x0, 0x0, 0x6, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="015907101400fcdbdf250301000008000100000027"], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0xc0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) 8.987432147s ago: executing program 4 (id=69): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x1f, 0xc9, 0x8, 0x2}}}, 0x9) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r3, 0x4bfb, &(0x7f0000000040)) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000000c0), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000cc0)={'gretap0\x00', 0x0, 0x10, 0x8000, 0x1, 0x80, {{0x3f, 0x4, 0x1, 0x3, 0xfc, 0x64, 0x0, 0x1, 0x2f, 0x0, @private=0xa010100, @empty, {[@rr={0x7, 0x23, 0x11, [@private=0xa010100, @empty, @multicast1, @empty, @empty, @loopback, @rand_addr=0x64010102, @private=0xa010101]}, @ssrr={0x89, 0xf, 0x6f, [@local, @loopback, @empty]}, @cipso={0x86, 0x47, 0x0, [{0x2, 0x8, "7531535a56fa"}, {0x5, 0x9, "c13c44181d0585"}, {0x7, 0xf, "35f51f80da3f2c0cb0e7ee898e"}, {0x6, 0x4, "1df9"}, {0x0, 0xa, "d10b58598d0b58bc"}, {0x0, 0x3, "d8"}, {0x1, 0x10, "f67e9cb483a736c2035164f851d1"}]}, @generic={0x44, 0x8, "c56975c3bbfb"}, @ssrr={0x89, 0x3, 0x6f}, @timestamp_prespec={0x44, 0x44, 0x2a, 0x3, 0xf, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010100, 0x1}, {@loopback, 0x4c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff8}, {@private=0xa010101, 0x612f2ae3}, {@local, 0xfffffffd}, {@multicast2, 0x5}]}, @lsrr={0x83, 0x13, 0x6, [@dev={0xac, 0x14, 0x14, 0xe}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @timestamp={0x44, 0xc, 0xd6, 0x0, 0x7, [0x119, 0x0]}]}}}}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @loopback, @dev}, &(0x7f0000000280)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f0000000580)=ANY=[@ANYRESHEX], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff7ffffc, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r9, 0x0) r10 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) vmsplice(r10, &(0x7f0000002600)=[{&(0x7f0000000380)="88", 0x1}], 0x1, 0x0) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, [@generic={0x3, 0x2, 0x8, 0x1, 0x9}]}, &(0x7f0000000480)='GPL\x00', 0x800, 0x4e, &(0x7f0000000840)=""/78, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x2, 0x3, 0x9, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000a40)=[r0, r1, r9, r10, r1, r11, r1, r1, r1, r3], &(0x7f0000000a80)=[{0x4, 0x2, 0x3, 0xb}, {0x4, 0x4, 0xb, 0x3}, {0x4, 0x4, 0xe, 0x7}], 0x10, 0x2, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000780)={'syztnl1\x00', 0x0, 0x700, 0x80, 0xfffffff8, 0x3, {{0x20, 0x4, 0x2, 0x34, 0x80, 0x68, 0x0, 0xfd, 0x0, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x44}, {[@generic={0x7, 0x10, "7f1f4e11b1ecca28cf8177f6bf3c"}, @noop, @rr={0x7, 0xf, 0x6f, [@local, @empty, @private=0xa010102]}, @lsrr={0x83, 0xb, 0x46, [@broadcast, @loopback]}, @lsrr={0x83, 0x23, 0x83, [@private=0xa010100, @private=0xa010101, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x18}, @multicast2, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x35}]}, @rr={0x7, 0xb, 0x63, [@multicast2, @loopback]}, @generic={0x83, 0x11, "99ba22af57c00ebc621382d247d64c"}]}}}}}) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000500)={@mcast2, 0x0}, &(0x7f0000000540)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000580)={@local, @initdev, 0x0}, &(0x7f00000005c0)=0xc) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x100, r5, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x40001}, 0x8040) syz_usb_connect(0x0, 0x4bc, &(0x7f0000000000)=ANY=[@ANYBLOB="d93a6791baad5fd4c0c25ac1df1745eb9e031ab9a787eda62186dd2c4e0658ac804326c2b30c733dce8bfc0c2722"], 0x0) 8.935651662s ago: executing program 3 (id=70): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b01, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0}) 8.890434805s ago: executing program 2 (id=71): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) timer_create(0x2, 0x0, &(0x7f0000000040)) connect$bt_rfcomm(r5, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000ac1e00010000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000efff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000001000000006c00020002000000ac1414aa000000000000"], 0xfc}}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0xe8ed, @private1, 0x80}}, 0x4, 0x8000}, &(0x7f0000000080)=0x90) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 8.048652465s ago: executing program 1 (id=73): r0 = syz_open_dev$media(&(0x7f0000000000), 0x4, 0x20000) (async) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) (async) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) readv(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/145, 0x91}], 0x1) (async) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50}, 0xffd3) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f00000001c0)) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000020601080000000000000000000000000500050002000000ad9031a172f34d730000000005000100070000000c00078008000840000000d3050004000080cfdef77860ecd4cca7db00000011000300686173683a6e65742c6e657400000000"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) (async, rerun: 32) syz_usb_connect(0x6, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="2991731b16e803a2627a4be36f77b1445979ee3126ffaca2143ba204fbc46ff740fbca5dd9547612f640fff6aca2b13979dd3dba34a02a38c8dae419646852a254ea46c32944346d8bd0a3b516f2649b8f2c33636d60c180a2daec324d6749417c4f767017e278d81248e3b2a6097c948e89d3949025f6e691f74161b597e967e2eeb74841ad9d56cb74047d4ac056009c2b48c772e8a94f08209fe17161c65c602bf5ba2a67d03fa61aaecf1da5a01a91d6e10ab9de27ca03bc162e2a0d335cdeb3e3c3d1a5ec8e9087b42ccbea1308e917cb4f0bbba603"], 0x0) (rerun: 32) 7.935694203s ago: executing program 1 (id=74): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000780)=ANY=[@ANYBLOB="01800000b00c000050257c32767ad4e745db6581922d994a74d38a46e35bbe62b530740c325cbdb06b195c12796ad45c4942e6be7ff28607d246be7c1106dcd797bd55fb37b0aed85adf8643b76a1fc082457a1cd9dbf266d4a4480193e83ff3ca4aa1c1aa02c9f3df0d7a460b7b3977129159b503af1eb823589d242566ccde783524e08a55d2b9f0719ffeffd406ec76a6f84e67aa38af3993a83f6993344d1e27f480707198ebaa93b5ecacd716da6d97409579569eb915f629ba281e6c53f4a7bd4246d6c52b17f29c956e12dd756c80786d35768c0b54fb672a553357a414cb7681091447ffbf127880da614658b3945538b0c27ee1761f8a208c46879ad7a7b53b869a5ae5cb9aca648bd0640ad32c24e3cf3393e5764b6c8e40c087bfea4e49bc104221fc8a5343921da9ae02bb6320e04efa029d86f7ec77ab14ede23e8d0756159b8625b3ce45efa266d2cca55b6d5272732891a8fa1c1c6e9b2b5eb0fbf02510606615835c14b44ae5c36989f4b9f368c3b9cbffc2743a68944f1d542e3c71d52f96c67d570f8bf266561739974eaf115207d662ebeddbc673c47f044fd42238c1e28c639c7f86d2748a025f8d609dfd2ad9e82a3455367eecd2f3dcb04afe9b1f5071084a0c8f5c92f98fa038af77abe43bfb60476eb686d6a830cdf1e519c4abe98a459f03572c99ecb05725d30e2580f609f939dcd43b57b0a59041120f2768f8207b7b44a372a21b27655293b3f32477e625407174ec1e98773477c3f2236ec9367fd40488c1bb811db53b78bd1f5f8c5fc17dd7e3b3d4b47022f1796a00fe38bd28710cbce99597f234ebd9039dc038c6ede63d4e8f0dccebf69ecb2462da3c78b6242d92964383703a167d8352a9abdae80da2f70f0847799afd00ec50267324e45bd4eea53df1995f3aedbb635b36690c3cd42092cf3eeed48e92855fbf2b61b5e82fa446e63447c57f6baefd2a27b630ac9e126e1168554c014e0a9fc61db9f6a57a60b1b863e58535664eaeb9d874caa56e32f6287072c5c41839cd7d9e2c6d00466e8b8dc31fd6c53f4dc3fd5b221deddf6dea61e70ad84ba6437fbd6ba09caf2688ab51321d3dd0d68c66c6220d17a5356dc2def60fcf2295d98ab94f8ed9c2d6e086c99404f8ace4f968af7a1e32e7ff5abb186095e92cbc82d1665f4c713afdb145fa2c68057829292d7fdfaeddb291990271306e9aea27609df7a50361b84ac91ef317a0181a819a57f5bfb3c423b36d531e026dbe83d28ec574a6352d2b9fbfa1bd0b02dcbbde4fe652c3f91bd1d38002921f2f2667910257ea81ea37522b7687649be34942e105f98851d45cd1059d407145e542b5a47c0e6340ab124560e8f8327bf14906f4b7cd59921d7b6bdfe3f501d6b713c1a73b7d457f55ccd93161994d3faa091373298cd45300185adc0de24f0cc76eabe7770ea68abebf9d74b1e27564469738e9a36d59a696d5f2e5a5747e450ece88cf72abb6372a58243592ffbc6e96477f9a40bec6b4b0d648795cb62ffa61f6dec6a9a5523abfbe363f2cf3a7c9b7babc3ae102c76f59854d0e3909f6a0bcaa17875192259f5b2a2256043c1e9995c02d9e1a8515decb43d32c36e8b76b4c18dc0ca409212c3f88c9ab7429d43bb8a83640f2ee52d468b3050f5393562e2ef45625df4e1e10eb6b288dbd159985541a006a2ec28fb16ed075a1ba8454509182146644df360108f989649be0c3e27ffbc039f726b93e28b9b53d6ff13fab15ef4af345dd407d767950598520e79a36f2007d0a97b4ae8c92a0fac430d73b14399b99d3e9b73509e947ff22f31696d146da59e5a2365cba6b5db0e3c34acbb047e643886a8b129d3b4f53975dd763ca4434d67d2c832b02d0c7562bba702e335b60b967be5cf221b01cb604ea794fd027352b89a7007458ad9da32a8edab2a1036000b99f6e670c08abd6ba8a3b14dd8d81a3ed17b433b701608f19e2322d68b8560628d3d4a4b88e19b3b3007dbb64f9fcd57554833f5e278723678d8a6925e464b912584d9e46a2b0b6544ec0bf33a61d7f535f2ecded9efcc28f2e46071f3f42610826689213261a3fc0ae9cf469ac03afbe3a9fe9c62bacf7b8b9e330a003ce4eff6cccef6c545874de2dfd4288d0ce9ada97a13a99474dd05b174016c09d8303d5f4189ee5dfbd178128ccbb85561ba0925c3a8c91dbeee4409438fbd987eb566749e2e16f00cb46a8153e3c15b63c9d10e2fca88e081b334898338e778ceb7054c2acd9f7dc0228f078fa1b3747ce8a453b125d0b7c8d299853f741bd7c0fad392f31be33f5224f859ff22149daec046e1245043cfeee504a39d04ae2655cf34fa44fdf8bdb36f28fd550c875e75297c5ee87857b0007766ae3fadeb142bfa67ac78e43fe9566b3160f564224e11e46bbd9c8a72494b1e9bf4aee7c694b2d6f1278ff89f80ff400feadc7dcc84cdd5ce61e0534d6e6535027771ae80d45b8a8b9e066de728fd621208cf59bd8d744c03d514035a27163ac08345b2b36def6ade8f9a88da5c2d50ae6f59c9531c108b2c664a5866f5a80789bd6795e3e99bc5f7fc85e42851b3f89c50376b8f79ac1e37c21870a9b243d3b38e7c1542c5fa9817b515f7321de62a0542f326981780af6070870396b98d6c659c8b40e54d3e0a273fd711b46527caf1dafeac98797d5f550708cec2991a50513d06ba268301d756ff925e33f8c5285ae219d9b8e173cda1fd3cf52b0523262adff048423d5a0ba5622e1a93697b70b61e432cb06e76d494e7a3be7f19c389042f1c1f84685e1d8e52a41d5b0cf6a6c74fa5fcc09eaef1b87c7abb68a589f0de330db30951f530530bbc2bdc2f0990751a4327ee10a1b2dfc3d20c505fab23daeabf61a803d9056198af086d75328b8fac8f48ed1545e490d16c6962ba28465392cfcbbd4732211d82ff7b9ac8999402638cbe20a41497b991eb2246e3112f743a93317bcc5e9c14f4911f45ff3991b6935294925fafa84191d8cf9bb6eafbeb89546f307047bdfeb1fa7561829af58ef258339656f7373ffae8903f63537bc4456abc45173ed3d3e3252fcecf5d84e1b520d8059a4ce2e576ca2b3eb5bc09a1ee1b014277a87909ccbadc72eb37b22dba81b3ccbf25fe6f6687fec25c3c14f5f5825f0471695a77980396fdc14ebbe3034120bd3338a50ea2b2e7ed49e20b4a54444413166dd3ebfd6a73691c14b2ee334f95118e7b618f3b7403dbeca6604ea4b83e4c0a0b095f58b811e5a6cadc94c05ed1bfc9e834c30e132141a893ce703e9455dd9fec370c10ca0bfa520a383120109c508b1d0092fdd63cd9f00dac1b74120d828c3e9025bfffd25b34453328439450cee00852612907eb466c2a0a150c46060281ba8e37dc1aa32bb907995b3542a77b410b6414391a516b099a14b2e6884c1d321cff33c5df10e1e36bffdbfba0fa25e12566a5ec63ded2129301036dda639e00326497fb7dfc4924efb14ca504b318d32708f980d04195f0579d4ea8fb7700fab95d3e36783c63ea273dffe4921ad871c0be518056c63018219ff8f9bd77b3bf0a8f949100e6e0a2624ced642e0d3596e40fd128f295789c323f82ee7b81c26b8a20c3bd46177d575d6c7e81d168acc2eeaff10307272ba93fdefba0dfd33a0de77687671b7e2e484f5b1e262b54e48c9194a376dc22b17442d86b3ee329ee45bb600c4f19a26bd39072b65eabf02e243f1e63f7bc5031f668201de7a54c5497f569eb1031655078e7b9b69445331b48665b5fa4457d6d440f5b3c2b010ffebd7228e713a4a529f4ad9c883fa4a8f031c9d070000005f40302e02a6f3d2cb6747d3a6b370ba9de1ba459a465f27cc34da873f670cb09a33410cb3a91044533608115bae3f631d420f5e68fa6dc91ce0831e94826d6a7afb765eb736a90e7220755949186a025959d9d035519c1b3020091e0065ecc3fac9cac143b08757074de1feddc8bf56570a04e5fea14923840f869e9875bbc0873a97c435200d0d5ea061d6637f4aa04f87a6522d24cd19d0662a2e6293a5ef8b8104399bf527a4e7b52507d921dea454ed637310bbad3f4a869b74aab8052f59f1243df277e9cf80a293d8e671c099206fcd2fcf06cb965064cdcc8680e31731df44767f84aea22d3077f726c19a03fdf678c308b4cc7519b0bbe0516cd408e9537a0b910aa4d27252ed1ff868101435a49363b23cebffc0cbed6de6363124205f815b955ea6c04fe7ddbd0401123e6c2bacd7bf08d488f964ed4a54ec545614b6e45a8dd17e2f9c3daf775bf1737b89b0bb731e72454c6c8576e0b810565723828aea0712f8d6fb3446539eb845b05548c4df8b93fbb9e439be7097eacdd8b55c84d9d08e58b93230a45a8200f882ff29ad76c37f42ba957aab47ee69ebaea1d1a0a5e1c9fb4854c10f247772a113fab1a5d310ddd6fbfd55f5231a684a362d18105ca1f773ca660228a8af7e197c04cec7ec25108d739caf8d92e917e43354b36cbdeadd04ff362edb3543f837c5fcb6d5f558e13afdeaf64ac22f9484c61b4223ff76f6e66a597467bca54307fbc6225aa6717cc9a6b5b544d35e732d13339b"]) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='coredump_filter\x00') write$cgroup_pid(r2, &(0x7f0000000140), 0x12) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r4, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) r8 = syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000100)=0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r8, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) syz_io_uring_submit(r9, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r7, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x372c6fbf, 0xa2b9, 0x6, 0x9, 0xe4, 0x9, 0x2, 0x3, 0xbbf, 0x0, 0x8, 0xffff, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x6, 0x8a, 0xfffffff8, 0x558e0d31, 0x4, 0xfffeffff, 0x91, 0x5, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x0, 0x4a7, 0x81, 0x6, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xfffffff7, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0x8, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x8, 0x1, 0x2, 0x8d7, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x104, 0x0, 0x7, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0xb, 0x2, 0x401, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x7, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffffb, 0x200004, 0x1000, 0x4, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e63f783, 0x80000001, 0xb, 0x1, 0x491, 0x8d3, 0xc, 0x108, 0x402, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0x4, 0xd3, 0x7, 0x3435, 0x5, 0x7, 0xfd, 0x401, 0xff, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0xa, 0x4, 0x9, 0x82, 0x3, 0x9d86, 0x9, 0xfefffff7, 0x6, 0x40f2, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x203, 0xfffffffe, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x806, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)="d8000000140081044e81f782db44b904021f080219000000040060a118000200e800000a09000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c046100a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed04ffece0b42a9ecbee5de6ccd40dd68adbeffa447ef4a6fbd3824305240c000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 7.795753254s ago: executing program 2 (id=75): r0 = socket$inet6(0xa, 0x80002, 0x0) socket$kcm(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb45, 0x0, 0x8, 0x0, 0x3}, 0x0) link(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$inet6(r0, 0x0, 0x0, 0x4001c11) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x41, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x80002, 0x0) (async) socket$kcm(0xf, 0x3, 0x2) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0xb45, 0x0, 0x8, 0x0, 0x3}, 0x0) (async) link(0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmmsg$inet6(r0, 0x0, 0x0, 0x4001c11) (async) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) shutdown(r3, 0x0) (async) recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x41, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) 6.496473705s ago: executing program 3 (id=76): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000180)) r1 = timerfd_create(0x9, 0x0) timerfd_settime(r1, 0x1, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) timerfd_gettime(r1, &(0x7f0000000000)) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000000ed0010ac0541820000000000eb08022400010000000009040000010300000009210000002322050009168103000000de855279705e3012737830894c6f57963a9b201db63b10fec52c1a23d5ab6680ad07b42b638ceea76574"], 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000b8d20ad09baefed3000000c4000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000100"/28], 0x48) (rerun: 64) syz_usb_control_io(r2, 0x0, 0x0) (async) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) (async) shutdown(r5, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r6 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) (async) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000000)="2e00000011008188046b5b79deacbc0413a1f8480b0000005e141140ca3dd24d0602000000000e0027001000000002", 0x2f}], 0x1}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESDEC=0x0]) (async) read$FUSE(r3, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0xffff2000, 0x0) (async, rerun: 32) write$FUSE_INIT(r3, &(0x7f0000000380)={0x50, 0x0, r7, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) (async, rerun: 32) pipe2$9p(0x0, 0x4000) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x1300042, 0x0) (async, rerun: 64) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 64) 6.171113014s ago: executing program 2 (id=77): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000000c0)={{@host}, @host, 0x0, 0x0, 0x1, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={0x0, 0xa7, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffe300000800030000000000080001"], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) io_setup(0x3, &(0x7f00000002c0)=0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_submit(r5, 0x1, &(0x7f0000000000)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) sendmmsg$inet(r6, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000003c0)="a73af396df05f083334d7e1fff157406723007f5d80e41e2b9ca9a007222c3a8b0b11527d5d76e26ab2acc910556697a03db3178b215d0fe863851223dcede48eff74cb6e5de77e71061206fc44f6ec886abdf742c71144b1ee2a0999f796de892886f8cb3417c5840b143ce9309f7a178f0300236067e4cea14949356686843e167bd50debe688f74259ec91256c0158fa8", 0x92}, {&(0x7f0000000340)}, {&(0x7f0000000480)}], 0x3, &(0x7f0000000500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x50}}, {{&(0x7f0000000480)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f00000005c0)="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", 0xfa}], 0x1, &(0x7f0000000c40)=[@ip_retopts={{0x88, 0x0, 0x7, {[@generic={0x83, 0x7, "0e834f2cc6"}, @timestamp={0x44, 0x18, 0xf1, 0x0, 0x5, [0x0, 0x1, 0xfffffff5, 0x3, 0x7]}, @generic={0x7, 0x10, "28ec8fff09701d9628d33d4885ce"}, @noop, @generic={0x83, 0xa, "925bbca67822c304"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x27, 0xd7, [@dev={0xac, 0x14, 0x14, 0x40}, @broadcast, @empty, @multicast1, @loopback, @broadcast, @private=0xa010102, @multicast2, @multicast2]}, @end, @lsrr={0x83, 0xb, 0xaa, [@dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x7, 0xe6, [@multicast1]}]}}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@end, @end, @timestamp_prespec={0x44, 0x3c, 0x53, 0x3, 0xa, [{@local, 0xb}, {@loopback}, {@private=0xa010101, 0x1}, {@remote, 0xe}, {@rand_addr=0x64010102, 0x1}, {@private=0xa010100, 0x9}, {@local, 0xfff}]}, @timestamp_addr={0x44, 0x1c, 0x39, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}, {@empty, 0x12a54412}, {@multicast1, 0x2}]}, @generic={0x86, 0x10, "027e62f1e960bc6897d5b6d7aa05"}]}}}], 0x108}}, {{&(0x7f0000000800)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000840)="7bd54b7077e17d1227e35d299065d1e9ce9de31ddb2b983fc85dd07fbd294e0830ecd84da192b81da5d931d1c65d02", 0x2f}, {&(0x7f0000000880)="b99d001e8592b7ea2a7107fb7b5c4514507ad33c1e1827d064d683c8926fe57173c066c94116904f302f584824833d7d204ba98ad18827895286bafad9adf2f189375d89fdfc33978adb49a565ed4bccfdbd2dcbfb7e104c0a1801742e53acadb2ef3649d2", 0x65}], 0x2, &(0x7f0000000ec0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp_addr={0x44, 0x44, 0xc0, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@broadcast, 0x7}, {@remote, 0xfffffff6}, {@multicast1, 0x4}, {@local, 0x1}, {@multicast2, 0x1}, {@remote, 0xfffffff2}, {@private=0xa010100, 0x5}]}, @noop]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}}}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xc9, [@multicast1]}, @rr={0x7, 0x17, 0x83, [@loopback, @multicast2, @local, @local, @remote]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc}}], 0x120}}], 0x4, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r7, @ANYBLOB="7eeeac8312bc766457055e7b93afafb657c8ea34af638f5ff38fde5a79d059252f5c74"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) prctl$PR_SET_THP_DISABLE(0x41, 0x3) prctl$PR_SET_THP_DISABLE(0x42, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth1\x00'}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x600}, 0x0) 6.103505563s ago: executing program 3 (id=78): socket$netlink(0x10, 0x3, 0xe) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) close(r3) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d85, 0x4000, 0x0, 0x132}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000280)=0x800) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0}) io_uring_enter(r5, 0x8aa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000000)={0x0, r4, 0x11, {0x27fffffffffffff, 0x6}, 0x54}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd0007008019000000000000000000000000af1e4ccfb7b3cad800", [0x0, 0x2000000000001]}}) syz_usbip_server_init(0x5) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffe, 0x1d, 0x6b, @buffer={0x0, 0x8a, &(0x7f0000000500)=""/138}, &(0x7f00000001c0)="00000000000045e94cb755b692d5a5351918b4420e54b142ee861b611b", &(0x7f0000002240)=""/4103, 0x0, 0x10010, 0x0, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007655f66361a3d82d6e"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r11, r10, 0x25, 0x8, @val=@iter={0x0}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0004}]}) 5.51238523s ago: executing program 4 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = dup(r2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) poll(0x0, 0x0, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f00000002c0)='./file1\x00', 0x100, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file1\x00') 3.884264171s ago: executing program 4 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x5ce, 0x0, &(0x7f0000000000), 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b00)=0x7) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace(0x4208, r1) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000b00)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8993, &(0x7f0000000180)={'bond0\x00', &(0x7f0000000040)=@ethtool_eee={0x44, 0x1, 0x0, 0x5, 0x7, 0x0, 0x3, 0x80, [0x200, 0x8923]}}) r5 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f0000000100)=0xf5) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x6, 0x0, &(0x7f0000003000)) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x103103) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000440)={r6, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e83323650000000000001f3fff", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) 3.824392628s ago: executing program 1 (id=81): socket$netlink(0x10, 0x3, 0xf) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3578045173d8c9e653bb83b87beee6b745d2f89ea28f901c469d759bfcbede2d638055858760f822f48fc6691c90e518bce495c96d6a6a3fa488b840fb95905f4a9b158fde59922b1a9ffcc33bcb6228ce5ab8634277330000000000000000", @ANYRESDEC=r3, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000211400040063797a6b6102000000000000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'vxcan1\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0), 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x602000, 0xc0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x4, &(0x7f0000000580)=ANY=[@ANYRESOCT=r5], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) umount2(&(0x7f0000000240)='./file0\x00', 0xb) ioctl$AUTOFS_IOC_CATATONIC(r8, 0x80049370, 0x1000000000000) r9 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x2, &(0x7f00000002c0)='#]\x00', 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000340)='percpu_alloc_percpu\x00', r10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0xf, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r6, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70000000000008500000083000000bf09000000000000550901000000000000bf9100000000000000000000000000008500000084000000b700000000000000950000000000002efc102aefd578ad"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff5, @void, @value}, 0x94) 2.894216255s ago: executing program 2 (id=82): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x4}) fsopen(&(0x7f0000000140)='ufs\x00', 0x0) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x4}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x440, 0x6, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], 0x0, 0x200306}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'gretap0\x00', 0x0, 0x80, 0x1, 0x4, 0x3, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x68, 0x0, 0x1, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000d80)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c80)={0xa8, r10, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8e083ae375"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6f2d3f6cb893c9c056cec17291"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_SEQ={0x10, 0x4, "b4934335b1d2d6a26cd359d5"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d792b444f5"}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8bf7596743"}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "03aede91ec"}, @NL80211_KEY_MODE={0x5}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000895}, 0x4000000) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000080)=@e={0xff, 0xa}) io_uring_enter(r2, 0x47ba, 0x30000000, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) sendmmsg(r1, &(0x7f00000006c0)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @multicast1}, 0x3, 0x1, 0x2, 0x3}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000400)="bf0259ff1beb84125ec428d10be59974f9056dd6b6b386a82312e201b73f42e63c4db216f12bb804d9fbcd37b172da9df8903653f2102485254a87b2670b256f2e69c60c1374acf0b8d926dbd9693735d8cc526807bcf994fb13e93a0b775e475726505ff7c61a5301cf66388460e1d89d2f0bd39d06ebf65adae0923670e92b1f0445fa70", 0x85}, {&(0x7f0000000000)="7bcdc353aaa0e0595707d5f38eb99ae603dc4a0d", 0x14}, {&(0x7f00000004c0)="e85d535a96e7639fa1b9fbc808a99f5ee958c068b5fc2bbfd1478739f59e88089a16dbc4c1e3ccce9c69c586c869d58c698cf8a13dd63092c73ea4e8ecd334ca4171ad01c7dca7250225daac65be5ea3fab4dfe0948dc667df90064a88c99c785b145448f08efc7116e4f8dd3d2e435e98c87f4afd26294803bc984d982f3ea5f385e9ea93345c7950d2ae869d9c816768e6c9bb1df7246842c7a80597059bd786bd30f2e1d8419683b25cd8531a26882175f10099653d6f5f7a84c9f7d40ef3ed6a9fcd2f72dce1dabf9143a92a06036f8928f8aea173c24060333f846ca5", 0xdf}, {&(0x7f00000005c0)}, {&(0x7f0000000600)="58c01eb25a504761088e02c38dbf7f97ce56dc3769c64ba548345f246ed4f577980c593f0a159deb793ad59a7a8db5517498", 0x32}, {&(0x7f0000000780)="3828b2e6817c5da6fc179a4281ac7312ea13c0db103fddfb55702b775665170a85d08c81b4838c3ed5cfd5c0edb6fd68e925edd23336c0e016d0747e5fc7368b222b50ff393913833696f0999dccf94b3b42086e454eae5c2badb83d63edfae8de3220d846eead6da9226e261cc86e897b86ec72a04c7f55125dd5b4d6335ff0f1ef41bc9f32568da26422098c10c10210a5a39036e64d6deb32d8a37a5d9acfc62af8cbabab4824cff01b84ea4fce23a256d5dc6e83ecf2d77584e3f88404eda192fbe86dec40bd3c3eeada5a789c3b2e6bf1f74643ac18c64c7c437d4643fde102ae", 0xe3}, {&(0x7f0000000880)="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", 0xfe}], 0x7, &(0x7f0000000980)=[{0xb0, 0x5c3aa10a1383da80, 0x4, "d6341cd4f65073222ded31d07bdac119da867733026dd4d7bff0aed9156c60e6979d79af66470b54ba798e21dbcf4c4bb6cddd51c64fea1317e42875bee0d357955585d83387c81e61d81e3712f8d3a7307221af8c877caf898b6169e89adecf769d70399b4c9622c88d2251edc5e3b95a0611576cbbc98eea852e14c9cc81ff94460bf0d054dbbafa4c64e7eb220adc8ffb284f78f1ee4f74e3a8e655b64c"}, {0x110, 0x107, 0x7, "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"}, {0xb8, 0x18, 0x1, "769ac543b8a53addb40a6c4609095f7b29fecaea3d0debe77e95f2410f13e1f4242419cee8c760c24150a37cbf05e47dac17144ee9f1467fe9081e2c0ef66e30f95a6cf4d59e4f555b6794dcd1ad6084d32dc0cdeceb592460396dbdf1c7cfb85f305d077dc123092a0bf406e40f2a8d3f092db06f9ef4c3e446c1c53d18f7252ff0b4cdcd41a70ed6bc70af7ca0c8b29685dabc4c40273493f195507157855201a6b3"}, {0x30, 0x1, 0x9e, "c55f7340c0e4eac088830fef9c382e9a5fd4606a25846f97cf6790c6"}], 0x2a8}}], 0x1, 0x10) 2.85925026s ago: executing program 3 (id=83): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@code={0x1, 0x63, {"f2aec40335694320000f3065450f2005c74424006a000000c744240200800000ff1c24420f01b900000000f30f5e3c90f20f38f00c8bb99f0a0000b800100000ba000000000f300f20e035000002000f22e0"}}, @uexit={0x0, 0x18, 0x1}, @code={0x1, 0x6d, {"c462c9b89cb70f000000c744240077000000c7442402b2900000ff2c24c482f91e4cddcac7442400d8000000c744240202000000ff1c2466b805008ec0b9800000c00f3235000100000f306645f40fc71ec4a291acc866b8a5008ed0"}}, @cpuid={0x2, 0x18, {0x0, 0x3ff}}, @uexit={0x0, 0x18, 0xb791}, @cpuid={0x2, 0x18, {0xffffe312, 0x7fff}}, @uexit={0x0, 0x18, 0x9}, @uexit={0x0, 0x18, 0x4}, @uexit={0x0, 0x18, 0x10000}, @code={0x1, 0x51, {"66b85a000f00d02e0f01c266420f3882569c0f2227643e44c052d400640fc79d008000004d0fc71f8194914900000015eff24d3e3e0f0fb0c08b00009e450f0b"}}, @cpuid={0x2, 0x18, {0x1, 0x2}}, @code={0x1, 0x5f, {"66b89c000f00d8f3440f019cf400180000c403e57b57e30066ba430066b8000066eff3460f09400f072e26450f789573516876b8010000000f01c166b8aa008ee0b805000000b9040000000f01d9"}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x4}, @cpuid={0x2, 0x18, {0x6, 0x2161}}, @cpuid={0x2, 0x18, {0xd6b, 0xf1}}, @cpuid={0x2, 0x18, {0x0, 0x2}}, @uexit={0x0, 0x18, 0xdfa}, @code={0x1, 0x58, {"0fc799731c000066baf80cb8060e1d8eef66bafc0cb0d4ee66430f38804998f30f1c06b9800000c00f3235008000000f30400f01c40f21e5f20f38f1866c9137f5660fc7320f09"}}], 0x328}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) (async, rerun: 64) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) (async, rerun: 64) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2db4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="0021ac"], 0x0, 0x0, 0x0, 0x0}, 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp6\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/165, 0xa5}], 0x10000000000002f1, 0x4, 0x0) (async, rerun: 64) r6 = getpid() (rerun: 64) sched_setscheduler(r6, 0x1, &(0x7f0000000500)=0x7) statx(0xffffffffffffffff, &(0x7f0000002600)='./file0\x00', 0x6000, 0x7ff, &(0x7f0000002640)) (async) fstat(0xffffffffffffffff, &(0x7f0000002740)) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) (async) r9 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, &(0x7f0000cab000)=0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r10}}}], 0x20}}], 0x1, 0x0) 2.849848245s ago: executing program 0 (id=84): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b000000850000004000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect$uac1(0x0, 0x9d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000206b1d010140000102030109028b0003010070000904000000010120000a24010800000201020d240600000301000100000001ff0f020401010408000010000c24020800000600fcff080009040100000102000009040101010102000009050109000040931007250182008000090402000001"], 0x0) 2.702719199s ago: executing program 1 (id=85): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x4, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080), 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x995e1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2.70240276s ago: executing program 4 (id=86): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}}, 0x108) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb0800452000907800000000e00000011100907800"/42, @ANYRES64=r0], 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x500) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='f2fs_readpages\x00', r1, 0x0, 0x9}, 0x18) socket$packet(0x11, 0x2, 0x300) 1.726348493s ago: executing program 1 (id=87): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) recvfrom(r0, &(0x7f0000000100)=""/2, 0x2, 0x102, &(0x7f0000000200)=@nfc_llcp={0x27, r1, 0x0, 0x3, 0x2, 0x1, "26d2b9d0eb86cc5094129e3f63bc8844b59ec4333971a84dbaa02a62573e99ad0722348fe9459d4e5bb11e68d81b4eb2e510a85ddee9a038c938ddf05854cb", 0x18}, 0x80) r2 = socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4498}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x5}, 0x24040000) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', r6, 0x2f, 0x4, 0xca, 0x10001, 0x42, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x1, 0x3ff, 0x80000000}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x0, 0x1, 0x355998b1d375ab, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x20, 0x20, 0x3, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000640)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000680)={@rand_addr, 0x0}, &(0x7f00000006c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f0000000740)={'ip6_vti0\x00', 0x0, 0x2f, 0x4, 0x79, 0x4, 0x28, @local, @remote, 0x15dc8669572ca4e3, 0x40, 0x80000001, 0x2}}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c040000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fedbdf250a000000680001801400020074756e6c300000000000000000000000080003000100000014000200626f6e645f736c6176655f3100000000140002007866726d300000000000000000000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="50000180080003000300000008000300020000000800030003000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f6272696467650008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="5f000300f55f1c0a51e2a479aa72236cfa6dfd13fbda428f2fc8c35e334050e331f720a99810426c3f7ea5a69043a461b5b66c0a169bb434c0c36bf35e6a4a6b3f4a8a46d9c2275fac65d24903e74828bc291ef3417f1b9949d55b8a4dcf3800790003008e75a29e9a9e2bcade11d0afd83c76dee130dc7d7bc1b2a0e6498bc94b58c6599721d4b55c2d01693e81d5b181fbeb3cd4b6719a31c8bc7fce041ff627d22a30784ca0a4375b65688767d37050e77553a688e9e086e74600cbfe08fea6f59dd80f2c9523b503baef8628842116eab58fb6cf976c2a0000000c0002800500050078000000a7000300ca42c7f06172a4c5b5cc2dc67bc0264676d7a62d3023769fdf5bd0885e334066bb5460e93d6b18a5ff6fefd5df79ae775eda7192b500a955243be26fa8e92ffcba3cafc2374976301847ae36819d1891bab437a81c26635c459f9a0264346ad779fa03b3a8ef7acb85e9c2f31cad47b3c038f236cad742b1e912f87d806093030e3f19c0a880fc0285aa2f16d9bc061a458c858bdff47c4b3891bc5d3dcf69aee2c1c2002c0001800800030000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="080003000200000008000100", @ANYRES32=r7, @ANYBLOB="03000300fa6e000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB], 0x41c}, 0x1, 0x0, 0x0, 0x40001}, 0x24004000) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000000)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016f64b4ef8a9cedaf6bec340dee49474360b24cb8", 0x0, 0x48) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$usbfs(0x0, 0xa, 0x155703) r12 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r12, &(0x7f0000019680)=""/102392, 0x18ff8) 1.621370868s ago: executing program 4 (id=88): r0 = socket(0x1f, 0x803, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1b, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x50, 0x0, &(0x7f0000000400)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001400000100000000000000000c00000008000100", @ANYRES32=r0, @ANYBLOB="1b61f0f6dc611665a4080344403be9ba12112f5227fd95dce0ffc6edb8c1734967eafb66ab6c2cd87039a5510b641817fa76cfda143b9010ef73944b"], 0x1c}, 0x1, 0x0, 0x0, 0x2400c041}, 0x4000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0), 0x0, 0x0, 0x0, 0x20041000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x8802) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000100)={0x10001, 0x10009, 0xfffffffc}) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="44008000", @ANYRES16=0x0, @ANYBLOB="04002abd7000fcdbdf2501000000080001000000000008000100020000000800020002000000080001000100000008000200020000000800020002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000810}, 0x5) 1.380132359s ago: executing program 4 (id=89): openat$mixer(0xffffff9c, 0x0, 0x200, 0x0) mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x20000000005, 0x21, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00<\x00'}, 0xd8) bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) getgroups(0x0, 0x0) open$dir(0x0, 0x200400, 0x8) sendto$inet(r3, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 1.329291383s ago: executing program 2 (id=90): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x4f, 0x86, 0x49, 0x20, 0x7ca, 0xa868, 0x8a99, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe3, 0x0, 0x0, 0xa6, 0x63, 0x62}}]}}]}}, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}]}}]}, 0x138}}, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, 0x0, 0x0) 0s ago: executing program 1 (id=91): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3fd}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) r7 = getpid() tgkill(r7, r7, 0x26) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) openat$cgroup(0xffffffffffffffff, &(0x7f0000000500)='syz0\x00', 0x200002, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x80, 0x3, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x86dd}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x40000}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4040884) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. [ 59.380402][ T30] audit: type=1400 audit(1749907441.237:62): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.384041][ T5802] cgroup: Unknown subsys name 'net' [ 59.403184][ T30] audit: type=1400 audit(1749907441.247:63): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.430515][ T30] audit: type=1400 audit(1749907441.277:64): avc: denied { unmount } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.553685][ T5802] cgroup: Unknown subsys name 'cpuset' [ 59.561443][ T5802] cgroup: Unknown subsys name 'rlimit' [ 59.686926][ T30] audit: type=1400 audit(1749907441.547:65): avc: denied { setattr } for pid=5802 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.710418][ T30] audit: type=1400 audit(1749907441.547:66): avc: denied { create } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.743495][ T30] audit: type=1400 audit(1749907441.547:67): avc: denied { write } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.764013][ T30] audit: type=1400 audit(1749907441.547:68): avc: denied { read } for pid=5802 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.784398][ T30] audit: type=1400 audit(1749907441.577:69): avc: denied { mounton } for pid=5802 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 59.809367][ T30] audit: type=1400 audit(1749907441.577:70): avc: denied { mount } for pid=5802 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 59.832770][ T30] audit: type=1400 audit(1749907441.587:71): avc: denied { read } for pid=5484 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 59.833010][ T5804] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 60.713536][ T5802] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.929174][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.937841][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.945785][ T5827] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.953622][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.961693][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.961721][ T5827] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.962213][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.969189][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.977147][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.995276][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.998784][ T5827] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.005938][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.012966][ T5827] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.018099][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.025925][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.034821][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.040240][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.047059][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.060211][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.060816][ T5827] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.075940][ T5139] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.085052][ T5139] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.092408][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.099876][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.101451][ T5139] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.546958][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 63.644204][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 63.657201][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 63.729304][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 63.738571][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 63.757337][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.764533][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.772331][ T5815] bridge_slave_0: entered allmulticast mode [ 63.778996][ T5815] bridge_slave_0: entered promiscuous mode [ 63.817237][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.825139][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.832363][ T5815] bridge_slave_1: entered allmulticast mode [ 63.839027][ T5815] bridge_slave_1: entered promiscuous mode [ 63.926810][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.934190][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.941646][ T5824] bridge_slave_0: entered allmulticast mode [ 63.948234][ T5824] bridge_slave_0: entered promiscuous mode [ 63.960067][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.969257][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.976807][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.984007][ T5812] bridge_slave_0: entered allmulticast mode [ 63.990682][ T5812] bridge_slave_0: entered promiscuous mode [ 64.008389][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.015469][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.022912][ T5824] bridge_slave_1: entered allmulticast mode [ 64.029510][ T5824] bridge_slave_1: entered promiscuous mode [ 64.045886][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.055177][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.062471][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.069566][ T5812] bridge_slave_1: entered allmulticast mode [ 64.076277][ T5812] bridge_slave_1: entered promiscuous mode [ 64.138724][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.148189][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.156832][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.164204][ T5819] bridge_slave_0: entered allmulticast mode [ 64.170780][ T5819] bridge_slave_0: entered promiscuous mode [ 64.178975][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.186611][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.194029][ T5819] bridge_slave_1: entered allmulticast mode [ 64.200641][ T5819] bridge_slave_1: entered promiscuous mode [ 64.208819][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.221649][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.230790][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.237909][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.245067][ T5813] bridge_slave_0: entered allmulticast mode [ 64.252643][ T5813] bridge_slave_0: entered promiscuous mode [ 64.267232][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.299801][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.306981][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.314509][ T5813] bridge_slave_1: entered allmulticast mode [ 64.321414][ T5813] bridge_slave_1: entered promiscuous mode [ 64.329922][ T5815] team0: Port device team_slave_0 added [ 64.337312][ T5815] team0: Port device team_slave_1 added [ 64.352201][ T5812] team0: Port device team_slave_0 added [ 64.405614][ T5812] team0: Port device team_slave_1 added [ 64.412927][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.425040][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.435817][ T5824] team0: Port device team_slave_0 added [ 64.445001][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.455164][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.462264][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.488209][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.515869][ T5824] team0: Port device team_slave_1 added [ 64.537189][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.555458][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.564110][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.590363][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.638347][ T5813] team0: Port device team_slave_0 added [ 64.646325][ T5813] team0: Port device team_slave_1 added [ 64.652899][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.659831][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.686224][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.698626][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.707039][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.733351][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.746230][ T5819] team0: Port device team_slave_0 added [ 64.754774][ T5819] team0: Port device team_slave_1 added [ 64.761062][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.768082][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.794370][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.806448][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.813526][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.839435][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.897014][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.904134][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.931353][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.953697][ T5815] hsr_slave_0: entered promiscuous mode [ 64.959702][ T5815] hsr_slave_1: entered promiscuous mode [ 64.984391][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.991434][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.017703][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.028922][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.036101][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.062086][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.074249][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.081215][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.107721][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.107742][ T5827] Bluetooth: hci2: command tx timeout [ 65.126817][ T5822] Bluetooth: hci0: command tx timeout [ 65.153459][ T5812] hsr_slave_0: entered promiscuous mode [ 65.159465][ T5812] hsr_slave_1: entered promiscuous mode [ 65.165470][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.173166][ T5822] Bluetooth: hci1: command tx timeout [ 65.173382][ T5822] Bluetooth: hci4: command tx timeout [ 65.179108][ T5812] Cannot create hsr debugfs directory [ 65.189491][ T5827] Bluetooth: hci3: command tx timeout [ 65.212283][ T5824] hsr_slave_0: entered promiscuous mode [ 65.218271][ T5824] hsr_slave_1: entered promiscuous mode [ 65.224291][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.231958][ T5824] Cannot create hsr debugfs directory [ 65.325599][ T5813] hsr_slave_0: entered promiscuous mode [ 65.331973][ T5813] hsr_slave_1: entered promiscuous mode [ 65.337787][ T5813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.347392][ T5813] Cannot create hsr debugfs directory [ 65.393872][ T5819] hsr_slave_0: entered promiscuous mode [ 65.399865][ T5819] hsr_slave_1: entered promiscuous mode [ 65.405883][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.413903][ T5819] Cannot create hsr debugfs directory [ 65.663183][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.674265][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.700323][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.716921][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.784724][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.815827][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.825708][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.838000][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.882887][ T5812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.892398][ T5812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.915317][ T5812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.935956][ T5812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.984613][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.997129][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.026791][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.048384][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.058523][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.071573][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.100457][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.107759][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.136288][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.143401][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.156676][ T5819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.166865][ T5819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.177647][ T5819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.189945][ T5819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.275006][ T5815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.345512][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.364237][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 66.364252][ T30] audit: type=1400 audit(1749907448.227:86): avc: denied { sys_module } for pid=5815 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.366656][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.446272][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.459681][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.478657][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.494131][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.501267][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.534149][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.541367][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.554463][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.561582][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.578380][ T3011] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.585499][ T3011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.614457][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.639343][ T2988] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.646543][ T2988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.658746][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.669100][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.697668][ T5812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.708475][ T5812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.725219][ T2988] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.732368][ T2988] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.867177][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.898698][ T5815] veth0_vlan: entered promiscuous mode [ 66.946080][ T3011] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.953235][ T3011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.986632][ T5815] veth1_vlan: entered promiscuous mode [ 67.034398][ T1339] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.042372][ T1339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.116693][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.135316][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.146544][ T5815] veth0_macvtap: entered promiscuous mode [ 67.174662][ T5827] Bluetooth: hci2: command tx timeout [ 67.180092][ T5827] Bluetooth: hci0: command tx timeout [ 67.199804][ T5815] veth1_macvtap: entered promiscuous mode [ 67.252549][ T5822] Bluetooth: hci3: command tx timeout [ 67.254199][ T50] Bluetooth: hci1: command tx timeout [ 67.258001][ T5827] Bluetooth: hci4: command tx timeout [ 67.273980][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.307095][ T5824] veth0_vlan: entered promiscuous mode [ 67.325737][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.344583][ T5812] veth0_vlan: entered promiscuous mode [ 67.355419][ T5824] veth1_vlan: entered promiscuous mode [ 67.377330][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.405228][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.416064][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.425854][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.434863][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.463307][ T5812] veth1_vlan: entered promiscuous mode [ 67.478777][ T5824] veth0_macvtap: entered promiscuous mode [ 67.497619][ T5824] veth1_macvtap: entered promiscuous mode [ 67.516061][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.549886][ T5813] veth0_vlan: entered promiscuous mode [ 67.616284][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.646722][ T5813] veth1_vlan: entered promiscuous mode [ 67.696122][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.719219][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.747280][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.748909][ T5824] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.766375][ T5824] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.775967][ T5824] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.785269][ T5824] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.796693][ T5812] veth0_macvtap: entered promiscuous mode [ 67.809409][ T5812] veth1_macvtap: entered promiscuous mode [ 67.837796][ T5813] veth0_macvtap: entered promiscuous mode [ 67.847827][ T5813] veth1_macvtap: entered promiscuous mode [ 67.892093][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.899931][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.907018][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.935685][ T30] audit: type=1400 audit(1749907449.797:87): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.EVlkam/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 67.961413][ T5819] veth0_vlan: entered promiscuous mode [ 67.967191][ T30] audit: type=1400 audit(1749907449.797:88): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 67.985541][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.994571][ T30] audit: type=1400 audit(1749907449.797:89): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.EVlkam/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.000118][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.028743][ T30] audit: type=1400 audit(1749907449.797:90): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.053769][ T30] audit: type=1400 audit(1749907449.797:91): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.EVlkam/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.080980][ T30] audit: type=1400 audit(1749907449.797:92): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/root/syzkaller.EVlkam/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5112 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.095647][ T5812] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.109982][ T30] audit: type=1400 audit(1749907449.797:93): avc: denied { unmount } for pid=5815 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.146355][ T5812] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.148004][ T30] audit: type=1400 audit(1749907449.827:94): avc: denied { mounton } for pid=5815 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.155136][ T5812] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.180707][ T30] audit: type=1400 audit(1749907449.827:95): avc: denied { mount } for pid=5815 comm="syz-executor" name="/" dev="gadgetfs" ino=7169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.187549][ T5812] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.220278][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.226321][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.274172][ T5819] veth1_vlan: entered promiscuous mode [ 68.358404][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.368616][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.382622][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.392054][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.441136][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.510770][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.858455][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.926731][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.111355][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.119932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.151308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.290732][ T5827] Bluetooth: hci0: command tx timeout [ 69.296357][ T5827] Bluetooth: hci2: command tx timeout [ 69.298136][ T5819] veth0_macvtap: entered promiscuous mode [ 69.337360][ T50] Bluetooth: hci1: command tx timeout [ 69.342831][ T50] Bluetooth: hci4: command tx timeout [ 69.348272][ T50] Bluetooth: hci3: command tx timeout [ 69.354623][ T5819] veth1_macvtap: entered promiscuous mode [ 69.388306][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.426988][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.450788][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.463805][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.495380][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.564256][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.575519][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.588253][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.605685][ T5819] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.616938][ T5930] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.626532][ T5819] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.639367][ T5819] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.648449][ T5819] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.692179][ T1339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.705551][ T1339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.729693][ T5941] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3'. [ 69.793432][ T5930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 69.807844][ T5946] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.824117][ T5930] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 178 [ 69.841585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 69.844418][ T5943] overlayfs: missing 'lowerdir' [ 69.888162][ T5930] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 69.901441][ T5930] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=31.c9 [ 69.910514][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.922567][ T5930] usb 2-1: config 0 descriptor?? [ 69.929877][ T5938] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.104359][ T5954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 70.117647][ T1339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.148369][ T1339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.173324][ T5930] ath6kl: Failed to submit usb control message: -71 [ 70.185992][ T5930] ath6kl: unable to send the bmi data to the device: -71 [ 70.197023][ T5930] ath6kl: Unable to send get target info: -71 [ 70.208391][ T5930] ath6kl: Failed to init ath6kl core: -71 [ 70.219552][ T5930] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 70.254544][ T5930] usb 2-1: USB disconnect, device number 2 [ 70.855015][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.872101][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.890511][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.950092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 71.332956][ T5827] Bluetooth: hci2: command tx timeout [ 71.333009][ T50] Bluetooth: hci0: command tx timeout [ 71.370758][ T5968] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 71.370758][ T5968] program syz.3.9 not setting count and/or reply_len properly [ 71.388180][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 71.388226][ T30] audit: type=1400 audit(1749907453.227:137): avc: denied { ioctl } for pid=5966 comm="syz.3.9" path="/dev/sg0" dev="devtmpfs" ino=765 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.419982][ C0] vkms_vblank_simulate: vblank timer overrun [ 71.421288][ T50] Bluetooth: hci3: command tx timeout [ 71.431544][ T5968] fuse: Bad value for 'fd' [ 71.433415][ T50] Bluetooth: hci4: command tx timeout [ 71.452634][ T50] Bluetooth: hci1: command tx timeout [ 71.458886][ T5954] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.461985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 71.755263][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.877732][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.885918][ T30] audit: type=1400 audit(1749907453.317:138): avc: denied { create } for pid=5966 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.964349][ T5976] futex_wake_op: syz.0.11 tries to shift op by -1; fix this program [ 72.051505][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.045481][ T30] audit: type=1400 audit(1749907454.897:139): avc: denied { create } for pid=5978 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 73.102265][ T5983] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 73.144065][ T5981] netlink: 'syz.1.12': attribute type 1 has an invalid length. [ 73.153743][ T30] audit: type=1400 audit(1749907454.907:140): avc: denied { ioctl } for pid=5978 comm="syz.1.12" path="socket:[7769]" dev="sockfs" ino=7769 ioctlcmd=0x89e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 73.231206][ T30] audit: type=1400 audit(1749907454.957:141): avc: denied { create } for pid=5978 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.268464][ T30] audit: type=1400 audit(1749907454.987:142): avc: denied { write } for pid=5978 comm="syz.1.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 73.363783][ T30] audit: type=1400 audit(1749907455.117:143): avc: denied { create } for pid=5980 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 73.363826][ T30] audit: type=1400 audit(1749907455.127:144): avc: denied { listen } for pid=5980 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 73.363861][ T30] audit: type=1400 audit(1749907455.127:145): avc: denied { accept } for pid=5980 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 73.363895][ T30] audit: type=1400 audit(1749907455.167:146): avc: denied { read append } for pid=5980 comm="syz.3.13" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 73.597639][ T5989] netlink: 176 bytes leftover after parsing attributes in process `syz.0.15'. [ 73.610481][ T5989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 73.688782][ T5871] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.862766][ T5871] usb 3-1: Using ep0 maxpacket: 8 [ 74.165093][ T5871] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 74.231101][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.351652][ T5871] usb 3-1: config 0 descriptor?? [ 74.501426][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 75.148460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.211690][ T6018] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19'. [ 75.642174][ T6018] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19'. [ 75.903611][ T6027] trusted_key: syz.0.24 sent an empty control message without MSG_MORE. [ 76.035754][ T973] cfg80211: failed to load regulatory.db [ 76.200100][ T6028] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 76.208280][ T6028] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 76.430381][ T6032] futex_wake_op: syz.1.25 tries to shift op by -1; fix this program [ 77.596413][ T5871] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 77.608284][ T5871] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 77.608551][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 77.608562][ T30] audit: type=1400 audit(1749907459.477:177): avc: denied { name_bind } for pid=6034 comm="syz.0.26" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 77.665928][ T5871] asix 3-1:0.0: probe with driver asix failed with error -71 [ 77.710323][ T5871] usb 3-1: USB disconnect, device number 2 [ 77.855294][ T30] audit: type=1400 audit(1749907459.477:178): avc: denied { node_bind } for pid=6034 comm="syz.0.26" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 77.991730][ T30] audit: type=1400 audit(1749907459.827:179): avc: denied { read write } for pid=6039 comm="syz.2.28" name="video2" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.590258][ T6043] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 78.731239][ T30] audit: type=1400 audit(1749907459.827:180): avc: denied { open } for pid=6039 comm="syz.2.28" path="/dev/video2" dev="devtmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.763363][ T30] audit: type=1400 audit(1749907459.827:181): avc: denied { ioctl } for pid=6039 comm="syz.2.28" path="/dev/video2" dev="devtmpfs" ino=933 ioctlcmd=0x563a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 78.788415][ T30] audit: type=1400 audit(1749907459.847:182): avc: denied { create } for pid=6039 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.807998][ T30] audit: type=1400 audit(1749907459.847:183): avc: denied { getopt } for pid=6039 comm="syz.2.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.828552][ T30] audit: type=1400 audit(1749907460.217:184): avc: denied { create } for pid=6036 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.848823][ T30] audit: type=1400 audit(1749907460.217:185): avc: denied { bind } for pid=6036 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.869394][ T30] audit: type=1400 audit(1749907460.227:186): avc: denied { write } for pid=6036 comm="syz.1.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.911868][ T6048] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 78.923335][ T6047] netlink: 'syz.2.29': attribute type 1 has an invalid length. [ 79.055659][ T6053] netlink: 176 bytes leftover after parsing attributes in process `syz.0.31'. [ 79.070311][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 80.256617][ T6077] netlink: 56 bytes leftover after parsing attributes in process `syz.2.38'. [ 81.191379][ T5977] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.291219][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.493255][ T5977] usb 5-1: Using ep0 maxpacket: 16 [ 81.508694][ T5977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.531873][ T5977] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 81.550090][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.566768][ T5977] usb 5-1: Product: syz [ 81.579011][ T5977] usb 5-1: Manufacturer: syz [ 81.589123][ T5977] usb 5-1: SerialNumber: syz [ 81.626231][ T5977] usb 5-1: config 0 descriptor?? [ 81.654167][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 81.658201][ T5977] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 81.666025][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.678348][ T10] usb 4-1: Product: syz [ 81.682629][ T10] usb 4-1: Manufacturer: syz [ 81.692037][ T10] usb 4-1: SerialNumber: syz [ 81.706343][ T10] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 81.735189][ T5945] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 81.879212][ T6093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.902922][ T6093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.719562][ T5977] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 82.727596][ T5977] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 82.738316][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 82.738329][ T30] audit: type=1400 audit(1749907463.827:196): avc: denied { create } for pid=6089 comm="syz.0.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 82.775121][ T5945] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 82.791827][ T5945] ath9k_htc: Failed to initialize the device [ 82.875031][ T5945] usb 4-1: ath9k_htc: USB layer deinitialized [ 82.882293][ T5871] usb 5-1: USB disconnect, device number 2 [ 82.966744][ T6100] netlink: 'syz.4.44': attribute type 1 has an invalid length. [ 83.023724][ T6101] [U]  [ 83.026668][ T6101] [U] K{ [ 83.030088][ T6101] [U] T 1ŠFFˊ`GJǘGO/MC [ 83.040380][ T6101] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 83.056726][ T6101] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 83.070719][ T6101] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 83.114394][ T6101] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 83.139606][ T6101] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 83.152049][ T6101] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 83.165631][ T6101] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 83.262886][ T6101] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 83.272841][ T6101] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 83.286571][ T6101] [U] 22Ʃ۩X?0;3U [ 83.293425][ T6101] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 83.319394][ T6101] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 83.329402][ T6101] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 83.338589][ T6101] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 83.346017][ T6101] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 83.358800][ T6101] [U] EC [ 83.362921][ T6101] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 83.411702][ T30] audit: type=1400 audit(1749907464.967:197): avc: denied { create } for pid=6082 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.466360][ T30] audit: type=1400 audit(1749907465.077:198): avc: denied { setopt } for pid=6082 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 83.528349][ T30] audit: type=1400 audit(1749907465.267:199): avc: denied { create } for pid=6098 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.668627][ T5930] usb 4-1: USB disconnect, device number 2 [ 83.799940][ T6098] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 84.401513][ T6114] syz.0.47 uses obsolete (PF_INET,SOCK_PACKET) [ 84.408894][ T30] audit: type=1400 audit(1749907466.267:200): avc: denied { ioctl } for pid=6113 comm="syz.0.47" path="socket:[7958]" dev="sockfs" ino=7958 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.497129][ T30] audit: type=1400 audit(1749907466.367:201): avc: denied { read append } for pid=6113 comm="syz.0.47" name="btrfs-control" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 84.529763][ T30] audit: type=1400 audit(1749907466.367:202): avc: denied { setopt } for pid=6117 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.549525][ T30] audit: type=1400 audit(1749907466.367:203): avc: denied { connect } for pid=6117 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.570672][ T30] audit: type=1400 audit(1749907466.387:204): avc: denied { open } for pid=6113 comm="syz.0.47" path="/dev/btrfs-control" dev="devtmpfs" ino=1310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 84.701955][ T30] audit: type=1400 audit(1749907466.557:205): avc: denied { mounton } for pid=6122 comm="syz.2.50" path="/8/file0" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 84.745444][ T6114] warning: `syz.0.47' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.781091][ T5871] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.953085][ T5871] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 84.966543][ T5871] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.983878][ T5871] usb 4-1: too many endpoints for config 1 interface 1 altsetting 145: 217, using maximum allowed: 30 [ 84.996142][ T5871] usb 4-1: config 1 interface 1 altsetting 145 has 0 endpoint descriptors, different from the interface descriptor's value: 217 [ 85.010961][ T5871] usb 4-1: config 1 interface 1 has no altsetting 0 [ 85.029081][ T6128] syz_tun: entered allmulticast mode [ 85.042155][ T5871] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 85.046716][ T6133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 85.058627][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.067619][ T5871] usb 4-1: Product: syz [ 85.247489][ T5871] usb 4-1: Manufacturer: syz [ 85.250265][ T6136] netlink: 348 bytes leftover after parsing attributes in process `syz.1.52'. [ 85.263889][ T5871] usb 4-1: SerialNumber: syz [ 85.273865][ T5871] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22 [ 85.351141][ T5903] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 85.782442][ T6118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.907616][ T6139] SELinux: failed to load policy [ 86.120322][ T6118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.138645][ T5871] usb 4-1: USB disconnect, device number 3 [ 86.302532][ T6127] syz_tun: left allmulticast mode [ 86.323459][ T5903] usb 1-1: config index 0 descriptor too short (expected 539, got 27) [ 86.334274][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 4 [ 86.365486][ T5903] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 86.380839][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.423996][ T5903] usb 1-1: Product: syz [ 86.436006][ T5903] usb 1-1: Manufacturer: syz [ 86.450306][ T5903] usb 1-1: SerialNumber: syz [ 86.468811][ T5903] usb 1-1: config 0 descriptor?? [ 86.498059][ T5903] hub 1-1:0.0: bad descriptor, ignoring hub [ 86.512234][ T5903] hub 1-1:0.0: probe with driver hub failed with error -5 [ 86.558099][ T5903] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 86.636542][ T5903] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 86.661352][ T5945] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 86.703770][ T5903] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 86.773966][ T5903] usb 1-1: USB disconnect, device number 2 [ 86.827138][ T5945] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.873916][ T5945] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 87.261393][ T5945] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 87.278242][ T5945] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 87.289420][ T5945] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 87.298215][ T5945] usb 3-1: Manufacturer: syz [ 87.303388][ T5945] usb 3-1: SerialNumber: syz [ 87.562833][ T6145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.56'. [ 87.733723][ T6159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.60'. [ 87.919383][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 87.919398][ T30] audit: type=1400 audit(1749907469.777:220): avc: denied { mounton } for pid=6163 comm="syz.3.62" path="/13/file0" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 88.098068][ T78] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 88.199128][ T30] audit: type=1400 audit(1749907470.057:221): avc: denied { ioctl } for pid=6168 comm="syz.4.64" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8723 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 88.376072][ T5957] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.668439][ T5957] usb 2-1: Using ep0 maxpacket: 32 [ 88.693570][ T5957] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 88.701828][ T5957] usb 2-1: config 0 has no interface number 0 [ 88.732708][ T5957] usb 2-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68 [ 88.776302][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.838963][ T5957] usb 2-1: Product: syz [ 88.935481][ T5957] usb 2-1: Manufacturer: syz [ 89.207371][ T5957] usb 2-1: SerialNumber: syz [ 89.275172][ T6183] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 89.283485][ T6183] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 89.563498][ T5957] usb 2-1: config 0 descriptor?? [ 89.614031][ T5957] hub 2-1:0.89: bad descriptor, ignoring hub [ 89.642204][ T5957] hub 2-1:0.89: probe with driver hub failed with error -5 [ 89.647195][ T6186] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 89.652201][ T5957] option 2-1:0.89: GSM modem (1-port) converter detected [ 89.664301][ T6186] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 89.999680][ T5957] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 90.094226][ T5957] usb 2-1: USB disconnect, device number 3 [ 90.104451][ T6189] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.159192][ T5957] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 90.203175][ T5957] option 2-1:0.89: device disconnected [ 90.209259][ T30] audit: type=1400 audit(1749907472.067:222): avc: denied { getopt } for pid=6188 comm="syz.4.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.501190][ T5871] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.561984][ T5885] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.636089][ T6197] netlink: 'syz.2.71': attribute type 1 has an invalid length. [ 90.643934][ T6197] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.71'. [ 90.729812][ T30] audit: type=1400 audit(1749907472.487:223): avc: denied { getopt } for pid=6192 comm="syz.2.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.781007][ T5885] usb 5-1: device descriptor read/64, error -71 [ 90.931324][ T5871] usb 4-1: Using ep0 maxpacket: 8 [ 90.942721][ T5871] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 90.959503][ T5871] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.975429][ T5871] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.985730][ T5871] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 90.997312][ T5871] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 91.157488][ T5885] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.165215][ T5871] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 91.177601][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.244359][ T30] audit: type=1400 audit(1749907473.117:224): avc: denied { bind } for pid=6205 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.282162][ T30] audit: type=1400 audit(1749907473.127:225): avc: denied { setopt } for pid=6205 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 91.306410][ T30] audit: type=1400 audit(1749907473.147:226): avc: denied { create } for pid=6207 comm="syz.2.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 91.334168][ T5885] usb 5-1: device descriptor read/64, error -71 [ 91.431141][ T5871] usb 4-1: GET_CAPABILITIES returned 0 [ 91.436871][ T6209] netlink: 'syz.1.74': attribute type 2 has an invalid length. [ 91.444712][ T6209] netlink: 'syz.1.74': attribute type 8 has an invalid length. [ 91.456074][ T5871] usbtmc 4-1:16.0: can't read capabilities [ 91.465338][ T6209] netlink: 32 bytes leftover after parsing attributes in process `syz.1.74'. [ 91.487841][ T5885] usb usb5-port1: attempt power cycle [ 91.638607][ T30] audit: type=1400 audit(1749907473.497:227): avc: denied { write } for pid=6190 comm="syz.3.70" name="usbtmc0" dev="devtmpfs" ino=2806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 91.689837][ T6191] usbtmc 4-1:16.0: INDICATOR_PULSE returned 0 [ 91.890259][ T5871] usb 4-1: USB disconnect, device number 4 [ 91.932770][ T5885] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 91.970341][ T5885] usb 5-1: device descriptor read/8, error -71 [ 92.131328][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 92.241767][ T5885] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 92.282589][ T5885] usb 5-1: device descriptor read/8, error -71 [ 92.382026][ T5945] yealink 3-1:36.0: invalid payload size 0, expected 16 [ 92.401152][ T5945] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input6 [ 92.421794][ T5885] usb usb5-port1: unable to enumerate USB device [ 92.444992][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -32 [ 92.452007][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -32 [ 92.459851][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -32 [ 92.466781][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -32 [ 92.475411][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -32 [ 92.484727][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -32 [ 92.491914][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -32 [ 92.498838][ C0] yealink 3-1:36.0: urb_ctl_callback - urb status -32 [ 92.505582][ C0] yealink 3-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 92.541206][ T6215] vivid-002: ================= START STATUS ================= [ 92.571092][ T30] audit: type=1400 audit(1749907474.427:228): avc: denied { wake_alarm } for pid=6214 comm="syz.3.76" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.571899][ T6215] vivid-002: Radio HW Seek Mode: [ 92.612304][ T5822] Bluetooth: hci4: command 0x0405 tx timeout [ 92.615382][ T6215] Bounded [ 92.658191][ T6215] vivid-002: Radio Programmable HW Seek: false [ 92.676480][ T6215] vivid-002: RDS Rx I/O Mode: Block I/O [ 92.692420][ T6215] vivid-002: Generate RBDS Instead of RDS: false [ 92.698753][ T6215] vivid-002: RDS Reception: true [ 92.742712][ T6215] vivid-002: RDS Program Type: 0 inactive [ 92.748797][ T6215] vivid-002: RDS PS Name: inactive [ 92.769060][ T6215] vivid-002: RDS Radio Text: inactive [ 92.776922][ T6215] vivid-002: RDS Traffic Announcement: false inactive [ 92.784386][ T6215] vivid-002: RDS Traffic Program: false inactive [ 92.790881][ T6215] vivid-002: RDS Music: false inactive [ 92.831620][ T6215] vivid-002: ================== END STATUS ================== [ 92.909121][ T30] audit: type=1400 audit(1749907474.767:229): avc: denied { create } for pid=6221 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 93.043352][ T6225] loop2: detected capacity change from 0 to 7 [ 93.069070][ T6225] Dev loop2: unable to read RDB block 7 [ 93.075054][ T6225] loop2: unable to read partition table [ 93.081944][ T6225] loop2: partition table beyond EOD, truncated [ 93.088183][ T6225] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 93.141600][ T6226] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 93.148361][ T6226] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 93.156935][ T6226] vhci_hcd vhci_hcd.0: Device attached [ 93.222772][ T6224] netlink: 'syz.2.77': attribute type 1 has an invalid length. [ 93.350938][ T30] audit: type=1400 audit(1749907474.837:230): avc: denied { read append } for pid=6221 comm="syz.3.78" name="sg0" dev="devtmpfs" ino=765 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 93.482721][ T5930] usb 40-1: SetAddress Request (2) to port 0 [ 93.537169][ T5930] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 93.579329][ T6230] Zero length message leads to an empty skb [ 93.779221][ T6227] vhci_hcd: connection reset by peer [ 93.866552][ T13] vhci_hcd: stop threads [ 93.933232][ T13] vhci_hcd: release socket [ 94.016163][ T13] vhci_hcd: disconnect device [ 94.498244][ T5885] usb 3-1: USB disconnect, device number 3 [ 94.627675][ T6235] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 94.767079][ T30] audit: type=1400 audit(1749907476.457:231): avc: denied { mount } for pid=6232 comm="syz.4.79" name="/" dev="ramfs" ino=9257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 95.130487][ T6237] No control pipe specified [ 95.146245][ T30] audit: type=1400 audit(1749907477.007:232): avc: denied { unmount } for pid=5819 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 95.222630][ T30] audit: type=1400 audit(1749907477.087:233): avc: denied { ioctl } for pid=6236 comm="syz.1.81" path="socket:[8818]" dev="sockfs" ino=8818 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 95.487916][ T6243] loop9: detected capacity change from 0 to 524288000 [ 96.052850][ T30] audit: type=1400 audit(1749907477.337:234): avc: denied { read write } for pid=6238 comm="syz.4.80" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 96.089174][ T30] audit: type=1400 audit(1749907477.337:235): avc: denied { open } for pid=6238 comm="syz.4.80" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 96.239166][ T30] audit: type=1400 audit(1749907478.097:236): avc: denied { write } for pid=6246 comm="syz.2.82" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 96.444826][ T30] audit: type=1400 audit(1749907478.297:237): avc: denied { block_suspend } for pid=6246 comm="syz.2.82" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 96.472481][ T5871] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.480269][ T5945] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.401699][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 97.407616][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 97.417111][ T5945] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.429442][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.431523][ T30] audit: type=1400 audit(1749907479.297:238): avc: denied { write } for pid=6266 comm="syz.4.88" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 97.445616][ T5945] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 97.476823][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.489950][ T5871] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 97.500517][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.520672][ T5945] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.542365][ T5871] usb 4-1: config 0 descriptor?? [ 97.581962][ T5945] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.595315][ T30] audit: type=1400 audit(1749907479.297:239): avc: denied { ioctl } for pid=6264 comm="syz.1.87" path="socket:[8910]" dev="sockfs" ino=8910 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 97.613159][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.769338][ T5945] usb 1-1: Product: syz [ 97.829933][ T5945] usb 1-1: Manufacturer: syz [ 98.465887][ T6253] loop8: detected capacity change from 0 to 16384 [ 98.548175][ T5945] usb 1-1: SerialNumber: syz [ 98.669978][ T30] audit: type=1400 audit(1749907479.337:240): avc: denied { ioctl } for pid=6266 comm="syz.4.88" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 98.683041][ T6249] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 98.705099][ T5930] usb 40-1: device descriptor read/8, error -110 [ 98.705382][ T30] audit: type=1400 audit(1749907479.457:241): avc: denied { sys_module } for pid=6264 comm="syz.1.87" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 98.705558][ T30] audit: type=1400 audit(1749907479.497:242): avc: denied { create } for pid=6274 comm="syz.4.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 98.705728][ T30] audit: type=1400 audit(1749907479.827:243): avc: denied { write } for pid=6248 comm="syz.3.83" name="tcp6" dev="proc" ino=4026533175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 99.010483][ T6252] loop8: detected capacity change from 16384 to 16320 [ 99.041924][ T6252] [ 99.044274][ T6252] ====================================================== [ 99.051278][ T6252] WARNING: possible circular locking dependency detected [ 99.058272][ T6252] 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 Not tainted [ 99.065357][ T6252] ------------------------------------------------------ [ 99.072348][ T6252] syz.3.83/6252 is trying to acquire lock: [ 99.078128][ T6252] ffffffff908b35a8 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xb36/0x1870 [ 99.087849][ T6252] [ 99.087849][ T6252] but task is already holding lock: [ 99.095184][ T6252] ffff88802690ec40 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 99.106383][ T6252] [ 99.106383][ T6252] which lock already depends on the new lock. [ 99.106383][ T6252] [ 99.116760][ T6252] [ 99.116760][ T6252] the existing dependency chain (in reverse order) is: [ 99.125751][ T6252] [ 99.125751][ T6252] -> #2 (&q->q_usage_counter(io)#25){++++}-{0:0}: [ 99.134336][ T6252] blk_alloc_queue+0x619/0x760 [ 99.139607][ T6252] blk_mq_alloc_queue+0x175/0x290 [ 99.145134][ T6252] __blk_mq_alloc_disk+0x29/0x120 [ 99.150658][ T6252] loop_add+0x49e/0xb70 [ 99.155316][ T6252] loop_init+0x164/0x270 [ 99.160061][ T6252] do_one_initcall+0x120/0x6e0 [ 99.165322][ T6252] kernel_init_freeable+0x5c2/0x900 [ 99.171025][ T6252] kernel_init+0x1c/0x2b0 [ 99.175854][ T6252] ret_from_fork+0x5d7/0x6f0 [ 99.180946][ T6252] ret_from_fork_asm+0x1a/0x30 [ 99.186215][ T6252] [ 99.186215][ T6252] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 99.193401][ T6252] fs_reclaim_acquire+0x102/0x150 [ 99.198922][ T6252] kmem_cache_alloc_node_noprof+0x57/0x3b0 [ 99.205229][ T6252] __alloc_skb+0x2b2/0x380 [ 99.210148][ T6252] alloc_uevent_skb+0x7d/0x210 [ 99.215411][ T6252] kobject_uevent_env+0xca4/0x1870 [ 99.221023][ T6252] kobject_synth_uevent+0x7d4/0x8a0 [ 99.226725][ T6252] bus_uevent_store+0x3d/0x90 [ 99.231908][ T6252] bus_attr_store+0x71/0xb0 [ 99.236914][ T6252] sysfs_kf_write+0xf2/0x150 [ 99.242009][ T6252] kernfs_fop_write_iter+0x351/0x510 [ 99.247800][ T6252] vfs_write+0x6c7/0x1150 [ 99.252634][ T6252] ksys_write+0x12a/0x250 [ 99.257468][ T6252] do_syscall_64+0xcd/0x4c0 [ 99.262478][ T6252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.268872][ T6252] [ 99.268872][ T6252] -> #0 (uevent_sock_mutex){+.+.}-{4:4}: [ 99.276676][ T6252] __lock_acquire+0x126f/0x1c90 [ 99.282034][ T6252] lock_acquire+0x179/0x350 [ 99.287046][ T6252] __mutex_lock+0x199/0xb90 [ 99.292059][ T6252] kobject_uevent_env+0xb36/0x1870 [ 99.297671][ T6252] set_capacity_and_notify+0x1ca/0x240 [ 99.303634][ T6252] loop_set_status+0x94c/0xb90 [ 99.308910][ T6252] loop_set_status_old+0x162/0x1d0 [ 99.314523][ T6252] lo_ioctl+0xb3f/0x2760 [ 99.319265][ T6252] blkdev_ioctl+0x277/0x6d0 [ 99.324270][ T6252] __x64_sys_ioctl+0x18b/0x210 [ 99.329537][ T6252] do_syscall_64+0xcd/0x4c0 [ 99.334548][ T6252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.340954][ T6252] [ 99.340954][ T6252] other info that might help us debug this: [ 99.340954][ T6252] [ 99.351175][ T6252] Chain exists of: [ 99.351175][ T6252] uevent_sock_mutex --> fs_reclaim --> &q->q_usage_counter(io)#25 [ 99.351175][ T6252] [ 99.364894][ T6252] Possible unsafe locking scenario: [ 99.364894][ T6252] [ 99.372320][ T6252] CPU0 CPU1 [ 99.377664][ T6252] ---- ---- [ 99.383011][ T6252] lock(&q->q_usage_counter(io)#25); [ 99.388366][ T6252] lock(fs_reclaim); [ 99.394848][ T6252] lock(&q->q_usage_counter(io)#25); [ 99.402724][ T6252] lock(uevent_sock_mutex); [ 99.407293][ T6252] [ 99.407293][ T6252] *** DEADLOCK *** [ 99.407293][ T6252] [ 99.415419][ T6252] 3 locks held by syz.3.83/6252: [ 99.420337][ T6252] #0: ffff888026a46400 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_set_status+0x2c/0xb90 [ 99.429713][ T6252] #1: ffff88802690ec40 (&q->q_usage_counter(io)#25){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 99.441354][ T6252] #2: ffff88802690ec78 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 99.453251][ T6252] [ 99.453251][ T6252] stack backtrace: [ 99.459118][ T6252] CPU: 1 UID: 0 PID: 6252 Comm: syz.3.83 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(full) [ 99.459135][ T6252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 99.459142][ T6252] Call Trace: [ 99.459147][ T6252] [ 99.459152][ T6252] dump_stack_lvl+0x116/0x1f0 [ 99.459173][ T6252] print_circular_bug+0x275/0x350 [ 99.459194][ T6252] check_noncircular+0x14c/0x170 [ 99.459215][ T6252] __lock_acquire+0x126f/0x1c90 [ 99.459237][ T6252] lock_acquire+0x179/0x350 [ 99.459256][ T6252] ? kobject_uevent_env+0xb36/0x1870 [ 99.459270][ T6252] ? __pfx___might_resched+0x10/0x10 [ 99.459287][ T6252] __mutex_lock+0x199/0xb90 [ 99.459306][ T6252] ? kobject_uevent_env+0xb36/0x1870 [ 99.459320][ T6252] ? kobject_uevent_env+0xb36/0x1870 [ 99.459334][ T6252] ? __pfx___mutex_lock+0x10/0x10 [ 99.459356][ T6252] ? __asan_memcpy+0x3c/0x60 [ 99.459370][ T6252] ? kobject_get_path+0x8e/0x2a0 [ 99.459382][ T6252] ? kobject_uevent_env+0xb36/0x1870 [ 99.459395][ T6252] kobject_uevent_env+0xb36/0x1870 [ 99.459409][ T6252] ? set_capacity_and_notify+0xce/0x240 [ 99.459425][ T6252] set_capacity_and_notify+0x1ca/0x240 [ 99.459443][ T6252] ? __pfx_set_capacity_and_notify+0x10/0x10 [ 99.459458][ T6252] ? __asan_memcpy+0x3c/0x60 [ 99.459474][ T6252] loop_set_status+0x94c/0xb90 [ 99.459490][ T6252] loop_set_status_old+0x162/0x1d0 [ 99.459503][ T6252] ? __pfx_loop_set_status_old+0x10/0x10 [ 99.459517][ T6252] ? __lock_acquire+0x622/0x1c90 [ 99.459538][ T6252] ? find_held_lock+0x2b/0x80 [ 99.459553][ T6252] ? is_bpf_text_address+0x8a/0x1a0 [ 99.459574][ T6252] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.459588][ T6252] lo_ioctl+0xb3f/0x2760 [ 99.459602][ T6252] ? __lock_acquire+0xb8a/0x1c90 [ 99.459623][ T6252] ? __lock_acquire+0x622/0x1c90 [ 99.459644][ T6252] ? __pfx_lo_ioctl+0x10/0x10 [ 99.459657][ T6252] ? find_held_lock+0x2b/0x80 [ 99.459671][ T6252] ? avc_has_extended_perms+0x33a/0x1090 [ 99.459684][ T6252] ? avc_has_extended_perms+0x47c/0x1090 [ 99.459697][ T6252] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 99.459709][ T6252] ? kasan_quarantine_put+0x10a/0x240 [ 99.459724][ T6252] ? lockdep_hardirqs_on+0x7c/0x110 [ 99.459744][ T6252] ? find_held_lock+0x2b/0x80 [ 99.459760][ T6252] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.459774][ T6252] ? blkdev_common_ioctl+0x1dd/0x2480 [ 99.459787][ T6252] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 99.459800][ T6252] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 99.459813][ T6252] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 99.459828][ T6252] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 99.459850][ T6252] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 99.459869][ T6252] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 99.459891][ T6252] ? __pfx_lo_ioctl+0x10/0x10 [ 99.459904][ T6252] blkdev_ioctl+0x277/0x6d0 [ 99.459917][ T6252] ? __pfx_blkdev_ioctl+0x10/0x10 [ 99.459929][ T6252] ? selinux_file_ioctl+0x180/0x270 [ 99.459945][ T6252] ? selinux_file_ioctl+0xb4/0x270 [ 99.459962][ T6252] ? __pfx_blkdev_ioctl+0x10/0x10 [ 99.459975][ T6252] __x64_sys_ioctl+0x18b/0x210 [ 99.459988][ T6252] do_syscall_64+0xcd/0x4c0 [ 99.460010][ T6252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.460023][ T6252] RIP: 0033:0x7f87b558e929 [ 99.460034][ T6252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.460046][ T6252] RSP: 002b:00007f87b639b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.460058][ T6252] RAX: ffffffffffffffda RBX: 00007f87b57b6080 RCX: 00007f87b558e929 [ 99.460066][ T6252] RDX: 00002000000001c0 RSI: 0000000000004c02 RDI: 0000000000000007 [ 99.460074][ T6252] RBP: 00007f87b5610b39 R08: 0000000000000000 R09: 0000000000000000 [ 99.460081][ T6252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.460088][ T6252] R13: 0000000000000000 R14: 00007f87b57b6080 R15: 00007ffe4a420988 [ 99.460099][ T6252] [ 99.460350][ T5885] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 99.613965][ T5930] usb usb40-port1: attempt power cycle [ 99.615650][ T5945] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 100.223740][ T5871] usbhid 4-1:0.0: can't add hid device: -71 [ 100.229717][ T5871] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 100.239916][ T5871] usb 4-1: USB disconnect, device number 5 [ 100.254570][ T5945] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 100.273830][ T5945] usb 1-1: USB disconnect, device number 3 [ 100.291123][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 100.305474][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.393258][ T5885] usb 3-1: Using ep0 maxpacket: 32 [ 100.399654][ T5885] usb 3-1: config 3 has an invalid interface number: 227 but max is 0 [ 100.407854][ T5885] usb 3-1: config 3 has no interface number 0 [ 100.415657][ T5885] usb 3-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=8a.99 [ 100.424750][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.432730][ T5885] usb 3-1: Product: syz [ 100.436860][ T5885] usb 3-1: Manufacturer: syz [ 100.441531][ T5930] usb usb40-port1: unable to enumerate USB device [ 100.448548][ T5885] usb 3-1: SerialNumber: syz [ 100.455200][ T5885] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 100.463329][ T5885] cxusb: set interface failed [ 100.467988][ T5885] dvb-usb: bulk message failed: -22 (1/0) [ 100.474556][ T5885] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 100.484650][ T5885] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 100.493227][ T5885] usb 3-1: media controller created [ 100.503721][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.529955][ T5885] DVB: Unable to find symbol lgdt330x_attach() [ 100.536164][ T5885] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 100.545879][ T5885] dvb-usb: bulk message failed: -22 (1/0) [ 100.551637][ T5885] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 100.662440][ T5885] usb 3-1: USB disconnect, device number 4 [ 100.677210][ T5885] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected.