last executing test programs: 2m48.998565005s ago: executing program 0 (id=298): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (rerun: 64) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r3, r3, 0x0, 0x8000002) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002600)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x20000000}, 0x2000810) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r2, 0x8008f512, &(0x7f0000000100)) (async) recvmmsg(r5, &(0x7f0000001140), 0x700, 0x2, 0x0) (async) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c00080001000000feff3d0000004500007400000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="840003009078001c0e0300050a07ffffff000000000008d58838068b91fe06e2d4c3d90100000000020000000513123c0c32cd82779813bf9e05bf22323b0a1312b01510a3774c21774a31c0f39bb06e30000000"], 0x82) 2m48.857032355s ago: executing program 0 (id=304): write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000100)={0x14, 0x67, 0x2, {0x4, 0x2, 0x3}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000080)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x5, 0x4, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000002280)=ANY=[@ANYRESHEX=r1, @ANYRES64=r1, @ANYRESDEC=r1, @ANYRESOCT=r1], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x4e, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$nfc_llcp(r3, &(0x7f0000002200)={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x3, "bb8ed5519e0a9c8d46eb5f454d2d1a1ebc0a89c478f877cf2e739378b26f4edafe615b8f07c11a6042056601d488ebe3b8a9f006ae0c89a625bc6ded4b048f", 0x8}, 0x60) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0x0, &(0x7f0000002000/0x3000)=nil, 0x3000}) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') ioctl$FS_IOC_GETVERSION(r4, 0xc0145b0d, &(0x7f0000000040)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b40500000000000079102800efe9469c3103149efafa02a04b13ea6dbf0000000000009502000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000080)={0x3, r7, 0xff7fff01, 0xffff, 0xa, 0x1ff, 0x1}) 2m48.223118438s ago: executing program 0 (id=320): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f00000002c0)=0x10000, 0x4) syz_emit_ethernet(0x3e, &(0x7f00000001c0)={@local, @random="fad1e048716e", @void, {@ipv4={0x800, @udp={{0xa, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x8, [{@multicast2, 0x1}, {@local, 0x3}]}]}}, {0x0, 0x4e20, 0x8}}}}}, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x8000000000000003, {}, 0xfd}, 0x18) sendmmsg$sock(r2, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f0000003240)="63c761", 0x3}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000000) r4 = fsmount(r1, 0x0, 0x0) fchdir(r4) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x48}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x38, r5, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc851}, 0x40800) recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) 2m48.154141491s ago: executing program 0 (id=321): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1098, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000440)=0x1000, 0x4) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe, @mcast2}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000005c0)="81c81b9a7c56271506e47a7ba4d3ffd35c67618cf50c18d204007edfe333b366e3a6116b3a4e4ec6ae8a048c39a9dfbfacb72bf4652aa87a08ad4f10f1b1acd3008c6a71e53b8103e55892997146d070d1938becb1ae3051dc24518b5315ae47fa6aa208c59788f6f041a4605e13fd3ee3bf00af4ed81e28b2e5070f50e0277216e50dcfb0cd9fd01a9c5ec24e4d3627b98b8d6ca17f3d4f45d37dde1bd4a5e0921bd9510b553f828b", 0xa9}, {&(0x7f0000000000)="a93c40dc6665bb199596b0b455b8a6bc3b681dbc0b7a91d5b437b75783cd27330d3a31ba54f4f159df", 0x29}, {&(0x7f0000002280)="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", 0x2e6}, {&(0x7f0000000cc0)="d58c14891d05379556cdc88f1b735534226426cc4c3e395cedfb1f56f4929fbcc166385578841af00aa8a0f045558fb0c1762502eb9481e9881710b57353b2b9d8603d3d9d9d7475ae63695441513b3b0ed314519dfe305db37ee1779cfa7d42ea6a8f34673e3e979500239f6cca6a5ea09ff529a00c9e8ed25cddb4cd6e92ddbf012fd4618387d784409c0d63cf60c9f5c63c3a70656f10b3a7b749c32457854259e90935865e3f2fcfa4a45cfb0dc1ee7e057789de6d63081777fd25629331ab1ec2c3040cac18008e334fad475e2da3db1d3191", 0xd5}], 0x4, &(0x7f0000000700)=[@hopopts={{0x80, 0x29, 0x36, {0x2f, 0xc, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x1, 0x8, [0xdc97, 0x9, 0x10000000006, 0x2, 0x8]}}, @jumbo={0xc2, 0x4, 0xfffffffd}, @generic={0x80, 0x2d, "fa143e1a106b19c70ea0542d6d63da3d5e395944f9b3a32d7d56f9ac88221c36e046c8dd1b3bbdbc12f0ebac42"}]}}}], 0x80}}], 0x1, 0x80) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='syscall\x00') read$FUSE(r2, &(0x7f00000024c0)={0x2020, 0x0, 0x0}, 0x2020) r4 = syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r4, 0x40305652, &(0x7f0000000000)={0x0, 0x1, 0x8000, 0x0, 0x0, 0x4, 0x65f40}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) ioctl$MON_IOCG_STATS(r2, 0x80089203, &(0x7f00000004c0)) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000180021010029696ca69234ed2d00000027aa229825c0dffc759a9447aecae6d8470e50e04a1fbe8bdae70dcccfc780e36432607d8608c0a9ac571f79b92207ed7f2e241f6cbb9603708a24dc4aad83533eb6d06c7871fb1b56d3e1391741c849e493c1b6b02062ac67d54cf75f47baa2593b4fdcba13a3b98fff874d8091e42fbf4c5cddeecf847f3318f0909005394b3db5a5f08baf73c9ad04006c59098652217817b09905a0d84a", @ANYRES32=0x0], 0x18}}, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000480), 0x80, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r5, &(0x7f0000000400)={0x50, 0x0, r7, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x9a51, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x10, 0xfffffffffffffffd, 0x8, 0x4, 0x0, 0x6000, 0xf, r8, 0x0, 0x800004, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000500)={0xa0, 0x0, r3, {{0x1, 0x0, 0x0, 0x1000, 0x499, 0x2, {0x3, 0x6ed8d2fd, 0x512, 0x100000001, 0x33, 0x7f, 0x2, 0xc8, 0x0, 0x6000, 0x6, r8, r9, 0x80000001, 0x100}}, {0x0, 0x1}}}, 0xa0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x3, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r8, r9, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VT_ACTIVATE(r2, 0x5606, 0x7fff) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 2m48.054268602s ago: executing program 0 (id=323): mkdir(&(0x7f0000000100)='./file0\x00', 0x11c) r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f00000001c0)={0x0, "b092da9c31dfdfdc2db069e0001016144c604bd2dae768763e8a31e904611e82b9c799fb5de8dee01e66c481b8d5fa296ea4a5dd6259b38f420bb87e6164c923", 0x24}, 0x48, r0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000240)='vxfs\x00', 0x11, 0x0) setxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x8, 0x3) 2m47.624422303s ago: executing program 0 (id=324): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r5, &(0x7f0000000540)={0xa, 0x4e22, 0x7651, @empty, 0x200}, 0x1c) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000001340)) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = fsopen(&(0x7f0000000280)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) poll(&(0x7f0000000000)=[{r0, 0xa500}, {r6, 0x500}], 0x2, 0x853) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) (async) bind$inet6(r5, &(0x7f0000000540)={0xa, 0x4e22, 0x7651, @empty, 0x200}, 0x1c) (async) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000001340)) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) fsopen(&(0x7f0000000280)='smb3\x00', 0x1) (async) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) poll(&(0x7f0000000000)=[{r0, 0xa500}, {r6, 0x500}], 0x2, 0x853) (async) 2m47.588982621s ago: executing program 32 (id=324): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r5, &(0x7f0000000540)={0xa, 0x4e22, 0x7651, @empty, 0x200}, 0x1c) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000001340)) r6 = socket$vsock_stream(0x28, 0x1, 0x0) r7 = fsopen(&(0x7f0000000280)='smb3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) poll(&(0x7f0000000000)=[{r0, 0xa500}, {r6, 0x500}], 0x2, 0x853) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) (async) bind$inet6(r5, &(0x7f0000000540)={0xa, 0x4e22, 0x7651, @empty, 0x200}, 0x1c) (async) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000001340)) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) fsopen(&(0x7f0000000280)='smb3\x00', 0x1) (async) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) poll(&(0x7f0000000000)=[{r0, 0xa500}, {r6, 0x500}], 0x2, 0x853) (async) 2m45.642661738s ago: executing program 2 (id=341): r0 = open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x2}}], 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[0x0, 0x0], 0x0, 0x0, 0x2, 0x2}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)="a39c1fb4d127f197e8e3a41c9fe5567d9137e293a21d262ad6ead1253f31493569f5737c8ed607d03401d5a3edcb", 0x2e}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf25cd2c0e73358f698", 0x8f}, {&(0x7f00000006c0)="8d4fb001cf69a4e5d8cea7569c780cc8598d314562f2d2e8bf22047e364764a56d8d35000cc37feb758a43590f1bb28a3713bd28dfa24e670fb5eae6020d6fe9b35b93159c3e7d2cbf38d5f548bd105beea848805a6a01", 0x57}, {&(0x7f0000000780)}, {0x0}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e19998eb5c5", 0xb8}], 0x6}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmmsg$alg(r0, &(0x7f00000010c0)=[{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000300)="bd5410fa38a3d2a350462d2e25a4c48abc29cc8468caca4d2e698699fe415bf8d1168939db039319a1f7604e435d4716b17a5d38e3619e60b70b878e43a115c8ffdb4244849f9fe088e4383b4640e51ab6d511a14fab90297171ea48", 0x5c}, {&(0x7f0000000780)="4b2dc7723929432fb58c26f9201ca0b0a22c36f01853bdd417f1bf32c5d7bec1d9b4a36a8f6a411097de55542570bebd35d5443945493ed4560b45875923a780275c7202c5f9a50162fb65568148e4aad63329e8ffc9b65e93ff0aeffa7dccc7cc1c8ad82d0e19a08fee702ae3705ba23b8b762b99fd954eefc2baeaab534996159b1b8cfc9f123bd512b1cfc19ca72e688c8756292e8f053ab17591288624dd", 0xa0}, {&(0x7f0000000600)="1b446104dc4f86fe5d8fa90c3568733790786e33eba50355446300b57b0752ef31fbffc1108c618144202910523b11a4cb1c9aba13734ffaa4c18c167331ded2aaced19be2fa7fb38d4d6c3b8c9cf01ff1ee8d859ba2feb4af1da04f", 0x5c}, {&(0x7f0000000b40)="b9f69745b8c8b819f0fca6bbaa005b34f1cc3e5861e836ddbefebc34d26a8dd8620c5326b483e2ec2a5c8fe136567a73fdfeb85fc98784e47dc96083cffdb90fb76b301e664d7cc2fab073aabda9b239da910078f9a9f612a4c20c672cab4c29e68a424dc3ff276e6d2834e774930c62685d5f6bc9d9d8221487ccdd99cb6fd38fa4e3101e40315932f5aea0f8812bc7488e5d600da7c3cf77102d4d20a72cc21f5ccc278a4893e342a2a4d5408593f95fe33b3404bb92f7b6795f2b5386e9835e7f72c61bc5a6384c", 0xc9}, {&(0x7f0000000880)="08bafcaee3362ebd2dea74853af39bbbd7f6d0cee1b8a4dfe800049c1b28960267e31549e75d0beff437c6ea0a69be97459849f001192a916029ebe82be3d4c164dab0c6953e5e620f05f622a089fae816a3d172bd2ba742ec7a892d3e0c411a7be91b08359bf0b4c5153bed73b89f31f6fe5555b5428358ffaa0f681db80fa168eab38e2158badbaf8fbfedad42f30f4a09d67aac14ba44a7ae351d0cc5deac17ced88219feddff22dbf0e7a132fff2a84e47afcd", 0xb5}, {&(0x7f0000000c40)="7c60b72e7739f78b9bcfa1b30cd5ee22e4754c76e08b1856201fde9dca0d87036270a32926f95812f8f7da55aa1f2682851e489ed33c1f719d0da21dd18cf154d593a9032199e9bbcd8f1260aff77d08150b886023f8d95e4c1e55173bdfd641f902fc2555fb9043e93f8258250be634e523b27a2e44aebbdff4f572642cbe0fcc43bec5479a13caccad0b818179875e7c062c412d8ee38a3c6c2c9ff8903e2072", 0xa1}, {&(0x7f0000000d00)="66c0b20b3a52b4763dd9c562555fca83d2ff99588dadc7eeb2046c8b97bf94ef7ac125dbbd93ef7547a4d008f3a1a8c4183a585f9406b36d85b89e72a367a9afe954fe9d10a63dc847ea6c1b2cdd8cf31cc8fab116a5a73b8f6c25928305c71b443113354823c145ae85569228014535f8d8bdc68854df59", 0x78}, {&(0x7f0000000d80)="5470613746265435d600d359b82fca8581ac598248eb326084be4420c0dfed6de981ad8cb5c607239404a9700a7b31f8ba2eadb6be8aee7783873d63a10592089b484664ba56d298d2e077e69da5993fe3e9bdd273368349b1ea1601a2b5f132717d7906f41cd21aef4073ed55559f60c2cb5f3b743ea7c66751b6316a01f440a323223e78c74344eb44381b0fd5264e6b0ae622a06b017c89010b21962ee2b9ae625afce5ac6801003ca2f6ae4bbef460c25da99f5938586a740683f08e71363031df8ad4a7edfcbd3a44cc49ace31aae779a894939e33c1441e218fbf3ef2d5996b50aca005ee3769a32adddd67f21eaa7bf", 0xf3}, {&(0x7f0000000e80)="e4620a349e78778831dd553d376a63ed087926b13ce200b2d919a2e32f4ee589196480dfd64e05cce90f2d30e1768f0dcadf785397c739bfbdec90c472942de7c6f9cce34c583d0244d2741be5dc2df88179125229f06f76f3b4ed1095bd45466e28b9f2be15b0aa2d9ca2548ce6f86d8e9541a9c46cacc2db74b88fc517d9313c43b7fde291bee246f4365575625c0d286394f66316e0617efc55aeac836171a0a2910a9a4f57efac68476d070c789cfc4466c9846346a115179ed114d42a295b23e1f431145bda0acdc0a48023f13a6c032518", 0xd4}], 0x9, &(0x7f0000002840)=[@op={0x18}, @iv={0xd0, 0x117, 0x2, 0xb8, "638a77392a66e3c4daea048d4ade12f00aecef7666f55856d5b85182b96039ddc999b67023622160e1430bb8aa3cae6dfdf9c01f9d2313bf1c5839d1f7e5fc829e46670d2c64aa68b8504cbd0a8dde383987b774261d9f95f039053b0abcd59257087bf61efad256a6e55070958c8ed95efbfb42efa49206c358d7fa75601bd405b548016631820fad6a47254e48dce4997c45288d4b77447b30af48fbd7d4d22bce135486c9854c992fc5f5651b7bdee055d148606ded0c"}, @iv={0x18, 0x117, 0x2, 0x1, '\"'}, @iv={0x18}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18, 0x117, 0x3, 0x1}], 0x1148, 0x4}, {0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000001040)="2955aa770f02cd8f77fe47e36b343b59cf2da3546f8ee835556f6a4e63df1dded228406320a1560ea09cd738e9276182de0f7729f8bc27c8b6d2584858aad2a5b377b1fc6e5c77793b893975088537add14841eae6d848ab13fe3c61b8cdb58adc36c4bb6a12e09d", 0x68}], 0x1, &(0x7f0000000ac0)=[@assoc={0x18, 0x117, 0x4, 0x48c}], 0x18, 0x8000}], 0x2, 0x20004010) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m45.483907162s ago: executing program 2 (id=342): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f00000002c0)={0x9a00000000000000, 0x5000, 0x5, 0x8, 0x2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000018000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x70, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x420f, r2, 0x0, 0x60000000000000) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f00000000c0)={0xd880000000000000, 0x4, 0xfffffffffffffffd, 0x2, 0x2}) socket$kcm(0x29, 0x7, 0x0) syz_open_dev$rtc(&(0x7f0000000140), 0xc, 0xdad03) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000000)=0x2) ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000040)={0x2, 0x6}, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) bind$tipc(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r6 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000000a00)=[{{&(0x7f00000004c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000f40)="a905000000007464000100000000000000e5c01104b61aa67bf2154694dfa033fe5312e4", 0x2c}], 0x1}}], 0x1, 0xc044) r7 = syz_open_dev$video4linux(&(0x7f0000001dc0), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r7, 0xc038563c, &(0x7f0000000000)={0x1, 0x0, {0x846, 0x4, 0x7ff}}) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f000001d000/0x1000)=nil, r8, 0x13, 0x4000010, r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2m45.414170341s ago: executing program 2 (id=343): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00001c9000/0x4000)=nil, 0x4000, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x24004001) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x1, @local, @local, {[], {{0x4, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x42, 0x0, 0x0, 0x3c}}}}}}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000140)={0x4, r0, 'id1\x00'}) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r2, 0xc008aec1, &(0x7f00000004c0)={0x9, 0x0, [{0x2, 0x8, 0x4, 0x2, 0x3, 0x1, 0x7}, {0x7, 0x2, 0x3, 0x1, 0x9, 0x3b066ae3, 0xfff}, {0x4, 0x4, 0x6, 0x0, 0x8, 0x9, 0x2}, {0xd, 0x87, 0x0, 0x3, 0xaf, 0x8, 0xa7e1}, {0xc0000000, 0x4, 0x1, 0x34, 0x7f, 0xfffffc00, 0xa3a}, {0xccea8d5c9e4d959c, 0x2, 0x4, 0xb, 0x9, 0x1}, {0x40000000, 0xffff879c, 0x7, 0x3, 0x1, 0x8, 0x2ea}, {0x80000018, 0x80000000, 0x0, 0x7, 0x7, 0x9, 0x574c9b98}, {0xa, 0x3, 0x4, 0x1, 0x9, 0x6, 0xffffffff}]}) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x59, 0x3, 0x0, "05fcff410400001bf9585253b800c495f2000500"}) r3 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r4 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000080), 0x408000, 0x0) write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x207) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f00000000c0), &(0x7f0000000100)=0x28) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x20040, 0x0) ioctl$COMEDI_DEVINFO(r5, 0x80b06401, &(0x7f0000000100)) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x2, &(0x7f0000000180)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x5110, r6, 0x8000000) clock_gettime(0x3, &(0x7f0000000400)) syz_io_uring_complete(r9) splice(r6, 0x0, r7, 0x0, 0x80, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4, 0x7fff7ffc}]}) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r11, 0x6, 0x9, 0x0, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) 2m45.294184636s ago: executing program 2 (id=344): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x8001, 0x1, 0x2, 0xc, 0x6b, 0x8}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x202}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bond={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x6}, @IFLA_BOND_ARP_IP_TARGET={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x5, 0x0, 0x386561e9, 0x4000000}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) 2m45.121169051s ago: executing program 2 (id=345): mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000001ea000000000000000000000000052cb0000000000"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x4e21}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e31, @multicast1}, 0x10) read$qrtrtun(0xffffffffffffffff, &(0x7f00000004c0)=""/57, 0x39) shutdown(r0, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="3ccc8bc228b437650a3365743f5468e97885a67a792234242dddb7158e3234bb4de9c8bbebcde2f6c5cc60fe3cdc5636a33b2c76ffffefcabd4d4d25a8c1f26b42bede477fcbcea97cf4565d22657b40fc32dd3c6a702039a9765ca2c7ead4e5f1ca7ede", 0x64}, {&(0x7f0000000380)="a31be4e64f6bc442b79a331ef7f26ea27d5144610cb039fb1615749661a3d40a7f0c2bf2c9", 0x25}], 0x2}, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000540), 0x4) sendmsg$tipc(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x118) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0xee01, &(0x7f0000000080)={0xf, 0x0, 0x3, 0x8001, 0x80000001, 0x6, 0x3, 0x100, 0x6}) 2m45.074083826s ago: executing program 2 (id=346): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000000000000000008000f00fe"], 0x24}}, 0x0) unshare(0x20000000) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0xa, 0x4e22, 0x108, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000500)="dea315a572e62d085d4dc71d75b6372b0cafb527f8ed3f3822b33d7ec788234a5bcdb34ab3d012ee1135516daeae136fc65495164b275023531bbb8310e5a411298dfdba78d8246aa4f64974279136d9d2218abf4bb3978d6f2b03d3033aa2e2c08318157ed03fe74ebcbe4deab4f8e0f0a88b2d76866d2ecf924c8b5b029b1bc0e77fc5cbf45b60f711e635da6e5776eece", 0x92}, {&(0x7f00000005c0)="e1e12dd2c70a085ac56ddbc749ef64bf459e12db97630b1aafe022434e75f2304e7ea7f28dcd52c6a5f5fc692c2063f31bcfb7962ad25ef5f923831e242d0286c9810dad7855e0e276b05592641400cd29e82150b437d3f8af80f97e7769f738def2061a780a0caf822e8dde9e8f071cd167b84cb443555dd94c8225f82c58b17effa74922007b583905e5be4f260c4c402d448f8051af06e9ee21bfefa37d7c", 0xa0}], 0x2}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000, 0x8000000000}, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) 2m30.07729706s ago: executing program 33 (id=346): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a000100000000000000000081000000000000000000000008000f00fe"], 0x24}}, 0x0) unshare(0x20000000) syz_clone(0x4808280, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0xa, 0x4e22, 0x108, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000500)="dea315a572e62d085d4dc71d75b6372b0cafb527f8ed3f3822b33d7ec788234a5bcdb34ab3d012ee1135516daeae136fc65495164b275023531bbb8310e5a411298dfdba78d8246aa4f64974279136d9d2218abf4bb3978d6f2b03d3033aa2e2c08318157ed03fe74ebcbe4deab4f8e0f0a88b2d76866d2ecf924c8b5b029b1bc0e77fc5cbf45b60f711e635da6e5776eece", 0x92}, {&(0x7f00000005c0)="e1e12dd2c70a085ac56ddbc749ef64bf459e12db97630b1aafe022434e75f2304e7ea7f28dcd52c6a5f5fc692c2063f31bcfb7962ad25ef5f923831e242d0286c9810dad7855e0e276b05592641400cd29e82150b437d3f8af80f97e7769f738def2061a780a0caf822e8dde9e8f071cd167b84cb443555dd94c8225f82c58b17effa74922007b583905e5be4f260c4c402d448f8051af06e9ee21bfefa37d7c", 0xa0}], 0x2}, 0x800) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000, 0x8000000000}, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') ioctl$NS_GET_PARENT(r6, 0xb702, 0x0) 3.481353309s ago: executing program 5 (id=1696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x5c, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x20040040) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0x4004550f, 0x0) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, 0x0, 0x0, 0x8000}, 0x20000000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000240)=0x4) syz_usb_control_io$lan78xx(r2, &(0x7f0000001440)={0x14, &(0x7f0000001380)={0x20, 0x1, 0x66, {0x66, 0x4, "8281137b843c3940110c3bf2f44102e65339bb7ae0da8f6c70b95786c4c40270f6708e2ae14a72ddde0b5e5ee25c053138e7a9700d621392970984ed06e2ff67d5ed3b80d8556550d7f9a96378e4bfa9f205a111eae2e72b25904135e29ea9fc112b4309"}}, &(0x7f0000001400)={0x0, 0x3, 0x33, @string={0x33, 0x3, "cdf40d46080d5d876439c01b92f5fd8df8d6bca897025d68d31b7cbe5b399bc06605b71fa9a43ab906d523200f0142e690"}}}, &(0x7f0000003880)={0x34, &(0x7f0000001580)={0x20, 0xf, 0x28, "c78b1569386eadcf05285c05310f33e035be6a4158e7a24587462f11571481350dd9fe5ad31a9cc8"}, &(0x7f00000015c0)={0x0, 0xa, 0x1, 0xbe}, &(0x7f0000001600)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000001680)={0xc0, 0xa1, 0x4, 0x3c50}, &(0x7f0000003800)={0x40, 0xa0, 0x4, 0x7}, &(0x7f0000003840)={0xc0, 0xa2, 0x2f, "8a73a644b9ec08c26dd509722eaf19f3a474244a85cc549579d0bcf0931e1dbd5c61b2b7a75d8b0f771fe0124ad1a6"}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect$uac1(0x2, 0xd6, &(0x7f0000001480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x3, 0x1, 0x85, 0x20, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}, [@processing_unit={0xc, 0x24, 0x7, 0x6, 0x3, 0x7, "817a18b206"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x204, 0x4, 0x3, 0xffff, 0x3, 0x82}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0x3, "dc9179"}, @feature_unit={0x13, 0x24, 0x6, 0x4, 0x2, 0x6, [0x4, 0x6, 0x3, 0x4, 0x5, 0x6], 0x72}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x3, 0xfc, 0x7c, {0x7, 0x25, 0x1, 0x2, 0x6, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9, 0x3, 0x2, 0x3d, "1d"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xd8e6, 0x200, 0xf, "23a5f77c5d251324"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x8, 0x1001}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x7, 0x3, 0x80, 0xf, "fe", "18"}, @as_header={0x7, 0x24, 0x1, 0x4e, 0xc, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x2, 0x2, {0x7, 0x25, 0x1, 0x82, 0x8}}}}}}}]}}, &(0x7f0000001a40)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x9, 0x1, 0x8, 0x20, 0xc0}, 0x25, &(0x7f00000016c0)={0x5, 0xf, 0x25, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x70, 0x4, 0x48, 0x10, 0x8}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x10, 0xd6, 0x652}, @wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0x6, 0xf, 0x0, 0x2}]}, 0x8, [{0x92, &(0x7f0000001700)=@string={0x92, 0x3, "0e7e7209bbccd34ce0f66cac645adee39bdef79dcebc70241d80d13f98f8a6d13834ebd2c8affc92a571caefcc95dc8dd8acfb0ee16ab43f4ac1f24cfc0e72a480837401150a7d7b4874868ad0121dd541f3372687ed757664bf823d0bc7d83ca6f14c645dea2db03543542030c7e323e7dd1c7283d88899d51ba5e9cb43a44233d8e349664d7ab2b40b67dfa59f18b6"}}, {0x62, &(0x7f00000017c0)=@string={0x62, 0x3, "39f452e1ec54f604ac41c7d3c69e40cfcb8849115961a50908dfe3e94a6d839d66d4f000122b4bc43c670a4018a030fb45fe60dc4a185d102672dc6ddd1cf6310558517401a7c2efaa105b6dce81a2fe75332e734b3807ebcb6c91145802b2fc"}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x1c09}}, {0xb5, &(0x7f00000018c0)=@string={0xb5, 0x3, "33d2f2c8fd26b9756d062fd2cd5fb9bcd77a13c1f990ca4cffe9b85ee25b4470d0aa1834cda1d91e916e3f7bceb4b6786af644988bffb09ac25f4c45761bd77e6251e73afdddd365ce9b04fb6aebdda58fe4c9d6511b81814b027974bbe393ca78e2a65ff00fbd8210b1732d6b63684b1b872f486e1eeffacebb47d2eed1f9d520f0ebd599cc0129bad7caf7d98fece4798437470d58b3b31746acbe7b4642d7d687d1948ce6cfe7f5dc13e5c26789df14f68a"}}, {0x4, &(0x7f0000001980)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x1801}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000001bc0)={0x14, &(0x7f0000001ac0)={0x0, 0x11, 0x7b, {0x7b, 0x21, "2276470a52b04bffb6bfc7ceabd2f17fc94ce22b791bcf78bab373253a78ae8b23efa72d30fc53fd4378f4366c960eb5e92842b47d1c5c8d91f3a5a6222e8a7ea6b3883298cc2a96182e2922cb421a40e6530f5da923bec4285c1568dedbf6333569651ed8502a70467c21a1843d34886769050796e7f9032f"}}, &(0x7f0000001b80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c0a}}}, &(0x7f0000001ec0)={0x44, &(0x7f0000001c00)={0x20, 0x13, 0xcb, "af4ab19d233111ee2eaf5c585757c28a68469e16830d908ec2a8a919ffa398541de3372bdb148fb9ea9a502460c67df4e4025ba014e38ef376b7e63c9c591260e58f8eb5c255cc3a3de859ca93bd3a79fd5e74470af0a5522400a4eb226859d54371e1b80a774ff4119f1cf09e83e4feadf92e2ce19fb6d7f1f15ca0000e71509d8e720486d781aee9f75064b5f5f15a59e4c74461b5a1d82f2612844b8051b4f40501f89c7d519c5c2e454a9c0f6777d3d36bffb5fc548e78ba8466cdaa93d6a1682cea5bf0cbe543bf3e"}, &(0x7f0000001d00)={0x0, 0xa, 0x1, 0x34}, &(0x7f0000001d40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000001d80)=ANY=[@ANYBLOB="208103000002f6deb7"], &(0x7f0000001dc0)={0x20, 0x82, 0x1, "a6"}, &(0x7f0000001e00)={0x20, 0x83, 0x3, "a3bdbc"}, &(0x7f0000001e40)={0x20, 0x84, 0x1, "9d"}, &(0x7f0000001e80)={0x20, 0x85, 0x3, "3352d8"}}) r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f00000000c0)={0x8, 0x9, {}, {0xee01}, 0x3, 0x4}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000040)="07000000010001", 0x7) socket$inet_udplite(0x2, 0x2, 0x88) r9 = syz_clone3(&(0x7f0000001300)={0x4180000, &(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)=0x0, {0x12}, &(0x7f0000000200)=""/146, 0x92, &(0x7f00000002c0)=""/4096, &(0x7f00000012c0)=[0xffffffffffffffff, 0x0], 0x2}, 0x58) ioctl$FICLONE(r3, 0x40049409, r3) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xf, 0x6, 0x8001) r11 = syz_open_dev$vim2m(&(0x7f0000000e40), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r11, 0xc0405602, &(0x7f0000000000)={0x8, 0x2, 0x3, "a677c17a5a000000009e7379d557d1ea22000000000200000000004000", 0x30314742}) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001f40)={0x18a0, 0x36, 0x1, 0x7fffd, 0x25dfdbfd, {0x5}, [@nested={0x188b, 0xc8, 0x0, 0x1, [@typed={0x8, 0x114, 0x0, 0x0, @uid=r7}, @nested={0x1793, 0x10f, 0x0, 0x1, [@generic="2b8162eb897ca96156b328376a8e9e1f306e998845413d8be6f96a31367fb7db9b3f372bb48bb5e3ecc73355781b1b1eb114651dd620be00bf673642748deb410ed8aeb60e77dc213bd9a5b4df7c981ed1ffce9c53ff2571f204213af2915f290cc3d3463a7160409f6c5bc6172e5b5dd2909c4e462f27d4f04f48", @nested={0x16b8, 0x142, 0x0, 0x1, [@generic="213b736657f0419e2d3641cac20baa2eed7d10d7e60e3fb39cc89235807a6cb85d2c22fc022477ceb51c034a617cc32b8caf521836dfc7403845e046cc3c597ee8495c8f7ab2512779fea245af65e0d043d7173cb75c14ad2788b25ba4bd6557c773b603972d0f4f8bb3745d73b94fd6fa721daf58720bc1975905ef99cec7f9e2c970aebbe93530edf2ead5d4d67f5d3a8a99f596b5cbaaf7cdc8e22b78532a319c96b5430bd5ecd46065aa7f5f44043b6ec0f169a9e2517d49dccd771b359ae7037aa775795eff3afebbfb2b3b4f60a2fa1e968fbef5c6cbc4f6f2445064b8971274ed1bccefcda51c193015df32144eaed268", @nested={0x15be, 0x11a, 0x0, 0x1, [@nested={0x2d2, 0x119, 0x0, 0x1, [@generic="4e180ff0b6b87d54d34091ed0870c74f0184e403f2fe3d4b263495ab369cc905a66e2bb4b0d51d7b047327726bf3ef56a0407fe9e42c30934539113a0f4bf7ebc4274e9aa41f8348717a03b926ca91", @nested={0x4, 0xff}, @generic="f8fabb4173e756355facb02db3e7dfd158949e956466b35db8007cd3d13e8c3e074b39e3ab87d63f2895f8858f434dd87a648998d52a74c8814e604989e471cb2657738244cf83c096592e2e3d45aaa4d78b376abc542f7f5f0e594766367bf7d6fba4fcd451bef46c0316796d708b9b4a6d30c126e251e416e6f374ebb8261edbba88b21a596f429affa018701f59111e320e7baf66eb0b01aea83d109cf1a9bfd6ab5433a31d5f8a79a76a615746f0b645fa4ba6846398927f98f1febbe8a3d11f50b8daf80f977a68b0dd2c7b816cfa7d505a31778a84a830e3f70a73c4f4898ea636177f0978555fe205b877e170", @nested={0x4, 0x61}, @generic="f8a17b768ff209ebd5d9c3503403e7717366739e9f09533783237ee2cfeb2a33d557ca2113b8cb9398c8bc0b171ed20a44a4b7cbf5e365b9dae61ffe8de59287e04459dcac42b180de630e711196cd6fe3bcca4ab7868658c4697db9f1ba071791db0e642f71ded7d2191bdec03b6a90", @nested={0x4, 0x13}, @generic="6f21ed8dfbb17b477acbb29d6bb8800849540db3e3b6f02585a6d48cedd08404907e7712b61d26dd75aa91f9ba5978be20da0b463b361ec4d503d8a6a46013411cf2945beda1a2fa2751745fbcc3b2dae82184094fec6dfdb247587d834994b2", @generic="65a9e04af3e149311870df5e2fa027c5f6c5fe4ffeb8f217a67507c5fa8025ed0c0c1b2d3741b674b61fa401587873ea9fb9c1b6279f960b768c56da711325243c9119a37c7baaee176e396f2ca91cb984fbb558f2ddcda713b3f6db4621a4e8c33b14665e697301b1b1c83cd289d469553b0eb2094b8f93cf7e23028fc82a242fb2a1ece53209f11d6599c2139bb6263f75188c2adf53a5eb596bfe43b5c9886f24b5dcea02a8dac88ab438d5c4f8", @nested={0x4, 0x2f}]}, @nested={0x1b9, 0x2e, 0x0, 0x1, [@nested={0x4, 0x147}, @generic="9c86ebcff2f83036514ebac5d7df97f92b8ac8eb7d45162ffb5eaf4cb4bb3d3f86b8e11ac55f18e2e18d9470d49e63bf2f08fc525fc89cdc5ab2e590555fcb95ec4ba28a8641b461881d054c7cf99ae35ed9785f5d79febbf87b407a71949170b4c0b6daa772720747d378c92cc498c85931904f7438f10dc2d5ee648055b41c9e4cad5ea1f88a322ef8ba4f53d003042dae52c0d35f8a9566117e7533af1d32c32fcaafca55b1855cacca2a50e0e52e179edf2553e403810b73032f9ec2cfbbf524685687d4ec50c3f5e8f38047522ee420c2a710b002783d09875a805364081b96c5e8c8d9", @generic="bfb60852966ffa22fadcf9e9874d17aaf2891d87210809edcf4be8318e048d9e8bed6bd64e63d8c5745905ead1b86ca1e1f37e63b67d5967dbdf0132e4a571906a7f9cdab06cb9", @generic="94b7311899eb2be2a224b75553e4b5aed1df4c9821e1eb315ca20c7cf27262f63483419b2d20a9f81092b730b8a833dd500601d911fd146dd4d65f35336adb112b3a643524e22ff5fcd27bb105c60b78e8cdf78185c044af9ec92936fe108095df7712d8e961ce20804519ce5203e6a16a6648664f8fe7376c8240cb4b6a04e53e65eaf9"]}, @typed={0x8, 0x26, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0x4, 0x138}, @typed={0xc3, 0xeb, 0x0, 0x0, @binary="5fae701ebc67ca67840ac6997aa29241d0941f5e8ea422046e896fc868aa50a7731dae4d39c3f5ee1fd83d059727c7a03a4113ab4c66ef02a4c8fef0443cb7af57aa7bed886c5a446983bac9bc99dd475463395f9220e7b71cdc9ad0390e9b3f4be8b9f4a71eccda636a83e4b1e30d7e71b31a9009f219785e31e82cb378ec7cdb6ecff02ab15b42701e5b951c31d470ac602190139ebceb4cf6d78b524717b276a0c99b353be10dc25ed7b06ad4dc38a5d405fd94bf234ab30a1b212c7460"}, @typed={0x8, 0x25, 0x0, 0x0, @pid=r10}, @generic="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", @generic="08edaea75626190d3b1aae30362ce766198db07062ffa5c13eeb8311b7d9c31696dbd1dc16aa3acd6605741d9080de31a32bd84fd5370dd4d658dc65d4211562667535d1aa0f3fcdba97583962dba9b091a7"]}]}, @generic="831989bd2f4c934f79d6b06b41c7f87301c426f6edd8e288dc958accb08ba57004850f334723aec57bff8e03", @nested={0x4, 0xbb}, @typed={0x16, 0x82, 0x0, 0x0, @str='/dev/input/event#\x00'}, @typed={0xc, 0x8, 0x0, 0x0, @u64=0x1000}, @typed={0x8, 0x5, 0x0, 0x0, @fd=r6}]}, @typed={0x4, 0x148}, @typed={0x8, 0x9, 0x0, 0x0, @ipv4=@private=0xa010100}, @generic="255d004386f139fcd22c3184a7ff6164bfc8ffc75b0f221e6a40696349b0a2b53e1d3b818d5029d0830c514dcabfd22110e68ecd9a30c33303fa283877d23363362f551a390f5313b30fc1d9331e79ab3bb59340bd4af9c14cea8c617ba338f18c12ff580f7c5cd023307cf8d1", @generic="2c512499f3b7c3c228c9eaa47e034e7e1d4a09a09d7ebfe82f5a74fa7654bac2b0722ebeeb591d7fe9ef57e9df0066f1dd6e16e3aead9150ad9d55b9acaf7e00867f485d335e2bddaffc2f7a437c0728922d6ca09077fd80d67a802f47e403cc82ba03ff5cda55030075", @typed={0x8, 0xbb, 0x0, 0x0, @pid=r9}]}]}, 0x18a0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) 2.351731957s ago: executing program 1 (id=1720): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xf, 0xf0, 0x40, 0xfd, 0x7, 0xd4, 0x0, 0x4, 0x7, 0x6}, {0xffff1000, 0x2, 0xd, 0x9, 0x8, 0x40, 0x6, 0x8, 0x5, 0xf, 0x7, 0xca}, {0xeeee0000, 0xe6e50002, 0x8, 0x0, 0x22, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0xeeef0000, 0xb000, 0xd, 0xf, 0x43, 0x46, 0x2, 0xd, 0x6, 0x3, 0xfc, 0x1}, {0x100000, 0x0, 0x3, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x1, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x4, 0x6e, 0x2, 0xfb, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x2000, 0xf, 0x9d, 0x3, 0x3d, 0xf, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0x6, 0x2, 0x7}, {0x100000, 0x5}, {0xd000, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x9, 0x0, 0xeeef0000, [0x4, 0x402, 0x8, 0x8]}) (async) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000880)={{0x0, 0x10000, 0x0, 0x49, 0x1, 0x7, 0x4, 0xe, 0x0, 0x0, 0x8, 0x2}, {0xf000, 0xdddd0000, 0x0, 0x9, 0xbb, 0x5, 0x38, 0x8, 0x5, 0xfd, 0xd9, 0x2}, {0xf7f31ffd, 0x10000, 0xd, 0xe4, 0x3, 0xd, 0x6, 0xb, 0x0, 0x5, 0x42, 0xa}, {0x7000, 0x8000000, 0xc, 0x9, 0x44, 0xcb, 0x5, 0x9, 0x40, 0x9, 0x1, 0x5}, {0xffff1000, 0x2000, 0xb, 0x7, 0xe, 0x2, 0x6, 0x8f, 0x1, 0xd, 0x5, 0x1}, {0x80a0001, 0x80a0000, 0xc, 0x5, 0x61, 0x18, 0x7, 0xfd, 0xc, 0x9, 0x6, 0x4}, {0x3000, 0x7000, 0x1b, 0xff, 0xbc, 0x80, 0x1, 0x4, 0x5, 0x0, 0xbf, 0x9}, {0x8000000, 0x2000, 0xf, 0x3, 0x4, 0x6, 0x9, 0xfa, 0xf8, 0xc6, 0x0, 0x81}, {0xf000, 0x3}, {0x2000, 0x8}, 0x14, 0x0, 0xeeee8000, 0x20, 0x0, 0x4801, 0x33339800, [0x9, 0x1ff, 0x86d, 0x8001]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB='/\x00'/11, @ANYRES32, @ANYBLOB="62bf"], 0x20) 2.199510187s ago: executing program 1 (id=1724): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)={0x18, 0x76, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@broadcast}]}, 0x18}], 0x1}, 0x0) sendto$packet(r0, &(0x7f0000000d00)="280320000500140001007ef506be00000000000000000000000000143baa111f1f858ce632f470425f0365124944d5563629ef0400195eb3cf545a41b6d78839980700e67bee78895e16239c375e37f5c4ddaaacb1c7b131f2464a43b164824ee1c99c405435a22cd59b6b4cb80a05eb8de8af57a0846b8fd50b0c3743a7054af9ca06f7183719cbfea04bb26760afe1152d0f1babd8238ff800c6bd40b52bd652154f3752a85d8ba5c74ee29f7379afdd8ea0eb92b5038c2edc45c1edf3", 0xbe, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x14) 2.131707819s ago: executing program 1 (id=1726): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001a00100029bd7000000000000a0000000000ff0000000000080006000400000008000400", @ANYRES32=0x0, @ANYBLOB="6e3694d0c4313047"], 0x34}}, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0003"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.131282009s ago: executing program 1 (id=1727): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x18c400) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000200)={0x80000000, 0x9, 0x80000001, 0xfff, 0x10000, 0x2}) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000600)=ANY=[@ANYBLOB="54010000100001000000000000000000ac1e0101000000000000000000000000fe8000000000000000000000000002dcbb00"/66, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb000000146c000000000000140000000000000000000000000200000000000000001000000000000000000000000000003e000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000004000000000000000000000000000000fcffffffffffffff0000000001040000030000000000000000000000020001060000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040000004e204e220000e000000200"/268], 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) (async, rerun: 32) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r3 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) recvmsg(r3, &(0x7f0000000900)={&(0x7f0000000280)=@hci, 0x80, &(0x7f0000000880)=[{&(0x7f0000000480)=""/139, 0x8b}, {&(0x7f0000000540)=""/119, 0x77}, {&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000380)=""/9, 0x9}, {&(0x7f0000000400)=""/7, 0x7}, {&(0x7f0000000780)=""/213, 0xd5}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x8}, 0x40000000) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x6, &(0x7f0000000100)=0x7f, 0x4) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x8, 0x7}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) (async) unshare(0x6020400) (async) unshare(0x10000c00) (async) acct(&(0x7f0000000000)='./file0\x00') unshare(0x8020200) 1.948812267s ago: executing program 1 (id=1731): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) syz_open_dev$sndctrl(&(0x7f0000000000), 0x400000000, 0x755701) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000040), 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x4801) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 1.127609518s ago: executing program 3 (id=1747): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000340)=0x8, &(0x7f0000000380)=0x2) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80801) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {&(0x7f00000005c0)="f2b314", 0x3}], 0x2}}], 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000700)={&(0x7f0000000680)=[0x0, 0x0], 0x0, 0x0, 0x2, 0x2}) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)="a39c1fb4d127f197e8e3a41c9fe5567d9137e293a21d262ad6ead1253f31493569f5737c8ed607d03401d5a3edcb", 0x2e}, {&(0x7f0000000500)="a608e5f2e2724fd7d00b71dc97e13f5a2a987046270dc61632cb51d1ec3c7912901302ff866747b05d5e18a21bc5d2d55d87d4683de5d6dc5aa63b9f6e1c4883c3fcae54300a236a34f1fc74e8ca8e2e807635dc41b9bc8ff385223d7d528b631d0f0538f807e106df999fba2f884d84cb60dd41aa1811cf1e995a246881f986041125fc245cf2", 0x87}, {&(0x7f00000006c0)}, {&(0x7f0000000780)}, {&(0x7f0000000880)="bf0171aab45469f23a3e11b9c8fb004572d990a78a7a7b3b7b4a4d2def1e711b6d7fb1742ebbca750dca13be6d89a7c1ba6f2af52f77b7735ad9ec4ccb265d37075afa82a0dbb371487e9124126e5b4e245dee2fafc80ac8609a2acd770acccafd112e302e93afbf01f8bfd4262df4ad9a09f59efecff400e2b06fb698b1641a41e82a2369875f9a2fe3e358420a8b3371f3713c1ae2", 0x96}, {&(0x7f0000000940)="a25473c28cca42abe4e2e2ff22c40b099dc8d1401b3d70b005a30c5dee9bb2914b8ab87826d866fa20f13f1e1ea3215b34735fd7c72736516bea3e0ec3dd8bc9164fcb7f6d46dc26d12f4a78890a9492d56ef482f6861fd3d92b5e5f40a6c7362d23a3f9f3f32d32266a8d15882a83ee2d5226afe3ef90088f5082d6c986922dbac25ddabb11695f3317ba3118eb03269fff79cd4fb24c379c832eabf54dea07c0837ff258638f66bcf415e967dbba00e0120e", 0xb3}], 0x6}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x703, 0x270bd24, 0x25dfdbf8, {0xd}}, 0x14}}, 0x4008800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0x0, 0x700, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 1.06951481s ago: executing program 1 (id=1749): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = io_uring_setup(0x6ddd, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0xffffffff00000000}], &(0x7f0000000100), 0x7}, 0x20) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) 941.190468ms ago: executing program 3 (id=1751): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) memfd_secret(0x80000) (async) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000002"], 0x24}}, 0x0) (async) r1 = syz_io_uring_setup(0x2a80, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB='4'], 0x118) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x8ab43, 0x0) (async) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r6, 0xc0404806, &(0x7f0000000040)) (async) write$UHID_SET_REPORT_REPLY(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) (async, rerun: 32) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000f00)=@nat={'nat\x00', 0x670, 0x5, 0x4f0, 0x2c8, 0x1b8, 0xffffffff, 0x0, 0x2c8, 0x458, 0x458, 0xffffffff, 0x458, 0x458, 0x5, 0x0, {[{{@uncond, 0x0, 0x180, 0x1b8, 0x48, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@rand_addr=0x64010102, [0xffffff00, 0xff, 0xffffffff, 0xff000000], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0x0, 0xffffff00, 0xffffff00], @ipv6=@local, [0xff, 0xff, 0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xffffffff, 0xff000000], 0xc9, 0x4, 0x0, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x1800, 0x100}, 0x40, 0x800, 0x4e24, 0x4e24, 0x4e23, 0x4e22}}, @common=@unspec=@helper={{0x48}, {0x0, 'tftp-20000\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x19, @multicast2, @loopback, @icmp_id=0x66, @port=0x4e24}}}}, {{@ip={@broadcast, @remote, 0xff, 0xff, 'nicvf0\x00', 'ipvlan1\x00', {0xff}, {}, 0xc, 0x0, 0x30}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gre0\x00', {0x8, 0x5, 0xfffffffc, 0x8, 0x8, 0x51f2, 0x6dc0}, {0xff}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x11, @ipv6=@mcast1, @ipv4=@loopback, @icmp_id=0x64, @port=0x4e23}}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00'}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x890, 0x218, 0x0, 0x1}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @gre_key}}}, {{@ip={@broadcast, @rand_addr=0x1, 0x0, 0x0, 'nicvf0\x00', 'pim6reg\x00', {}, {0xff}, 0x1}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0xc0000000, {0x21, @broadcast, @dev={0xac, 0x14, 0x14, 0x1c}, @gre_key=0x40, @port=0x4e23}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x550) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r8, &(0x7f0000000200)={0x2, 0x0, {&(0x7f00000006c0)=""/185, 0xb9, 0x0, 0x2, 0x2}}, 0x48) (async, rerun: 32) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (rerun: 32) fcntl$notify(r9, 0x402, 0x8000001f) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r10, 0x402, 0x8000003d) (async) write$vhost_msg(r8, &(0x7f0000000100)={0x1, {&(0x7f00000007c0)=""/194, 0xc2, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r8, &(0x7f0000000180)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 828.402777ms ago: executing program 4 (id=1752): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x300, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x801) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 827.775876ms ago: executing program 3 (id=1753): mount(&(0x7f0000000040)=@sg0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x2000010, 0x0) 823.990201ms ago: executing program 3 (id=1754): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x7}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) (async) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e20, @loopback}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) (async) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000340)="0a000300010000", 0x7) (async) recvmmsg(r8, &(0x7f0000005340)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) (async) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xc, 0x0, @tid=r9}, &(0x7f0000000380)) (async) syz_open_procfs$namespace(r9, &(0x7f0000000440)='ns/time\x00') (async) bind$bt_l2cap(r7, &(0x7f0000000400), 0xe) (async) setsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f0000002200)=0x1, 0x4) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000000300)={{0xa, 0x4e21, 0x2, @private2, 0x8}, {0xa, 0x4e21, 0x0, @empty, 0xfffffffb}, 0xffffffffffffffff, {[0x1000, 0x0, 0x5, 0xe7a, 0x3ff, 0x6, 0x40, 0x5]}}, 0x5c) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=@gettaction={0x18c, 0x32, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'vlan\x00'}}, {0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}]}, @action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd278}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x84, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xffffffffffffff54, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x18c}}, 0x4000800) (async) openat$sr(0xffffffffffffff9c, &(0x7f0000000200), 0x412001, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=@delchain={0x30, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff3, 0xffff}, {0xfff2, 0x1b}}, [@filter_kind_options=@f_fw={{0xfffffffffffffdf4}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 742.153064ms ago: executing program 3 (id=1755): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c114", 0xe) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000840)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000980)="cfe7c7426f605e5b9f5519f5ac7f5f063f", 0x11}], 0x1, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x50}], 0x1, 0x200000d1) recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1}, 0x40000000) 741.865893ms ago: executing program 3 (id=1756): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) r1 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}], 0x1, 0x1000, 0x3f2f0fde) ioctl$VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)=@multiplanar_userptr={0x3, 0xb, 0x4, 0x10000, 0x2, {}, {0x3, 0x0, 0x80, 0x2, 0x1, 0x7f, "e9383c9c"}, 0x9, 0x2, {0x0}, 0x4}) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) 632.128957ms ago: executing program 4 (id=1757): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x5, &(0x7f0000000100)=[{0x2, 0xf1, 0xfd, 0x6}, {0x7, 0x2, 0x62, 0x7}, {0x1, 0x5, 0x3, 0x4}, {0x3313, 0x4, 0x4, 0xd85}, {0x4, 0x4, 0x8, 0x3}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000000)=r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x5, &(0x7f0000000100)=[{0x2, 0xf1, 0xfd, 0x6}, {0x7, 0x2, 0x62, 0x7}, {0x1, 0x5, 0x3, 0x4}, {0x3313, 0x4, 0x4, 0xd85}, {0x4, 0x4, 0x8, 0x3}]}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)) (async) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000000)=r1) (async) 630.915556ms ago: executing program 4 (id=1758): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x48000000000, 0x8001) (async) r1 = socket$rds(0x15, 0x5, 0x0) close_range(r0, r0, 0x2) (async) bind$rds(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x6, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0x18}, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000280)=""/113) 541.104048ms ago: executing program 4 (id=1759): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fsopen(&(0x7f0000000240)='sysfs\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000a14000/0x2000)=nil, 0x2000, 0x1000002, 0x13, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x2a1, 0x21, &(0x7f0000000240)={0x0, 0x6, 0xd, 0x360}, 0x8, 0x7, 0x7f, 0x0, 0x1, 0x101, 0x0}) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r3 = socket$nl_generic(0x11, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x24, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000840) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@ll={0x11, 0xcf68f07c3445529e, r7, 0x1, 0x6}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) listen(r1, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f900f500180601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020000907800001e0200003d8e7e09b65aa7cd1bc8d90ce7693ae5259519e71a12af01d39e17a2964ea664"], 0x0) 452.486333ms ago: executing program 5 (id=1760): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f0000000240)={0x7f, 0x81}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000300)={0x3, @sliced={0x3e, [0x5, 0x8, 0x2, 0x10, 0x4, 0x7b5, 0xf, 0x3, 0x2, 0x9, 0x0, 0x400, 0x4, 0x9, 0x8, 0x5, 0x0, 0x9, 0xd, 0x3, 0x2, 0x2, 0x7, 0x0, 0x1, 0x2, 0x6b, 0x49d, 0x5, 0x6, 0x0, 0x5, 0x9d, 0x5dde, 0x8, 0x1f, 0x5, 0xffff, 0x7, 0x8, 0x5, 0xff, 0x3, 0x7, 0x7, 0x4, 0x33df, 0x2], 0x3}}) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'dt2817\x00', [0x9, 0x7ff, 0xffffffff, 0x0, 0x0, 0xcca, 0x8, 0x7, 0xa, 0xfc, 0x2, 0x1, 0x684b, 0x4, 0x6, 0xffffffff, 0x1, 0x1a447, 0x3, 0x40000006, 0x100, 0x2, 0xf27, 0x6, 0xb, 0xa, 0x5, 0x8, 0x4, 0x10000, 0x6]}) sendmsg$nl_xfrm(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000003680)=ANY=[@ANYBLOB="ac00000021000101000000000000000000000004000000000000000000000000ac1414aaa50c24efefab043c00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000005000110000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000000000000000000000000a0010000200000000000000"], 0xac}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x4000800) chdir(&(0x7f0000000080)='./file0\x00') ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000000)={0x2, "94c492eb0165203d36bec70800890100000000000000e1100a0000005900"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x81, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0xfd, 0x0, 0x0, 0x0, 0x42}, {0x200003, 0xa, 0x20, 0x80, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x1ffffff}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x3ef, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000080)=ANY=[@ANYRESOCT]) 392.538065ms ago: executing program 5 (id=1761): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x30, r0, 0x1c214000) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0x5) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f00000004c0)={&(0x7f0000000080)={{@my=0x0, 0x8}, {@my=0x0, 0x30}, 0x400, "97255006d6789ecd1c4fdeae05bb23a288b2781b93970a6b538490a6a122e462ba9fb199ff53f504e1098eb0f983764e9a057316f88547be23f073263256bc6952ca144f8a53a0cad3109ae1d03b3818d83c4bffc00dbfda8c0f038214c6708405a718bc95509f268989aa0eeb55251ae906d9e63d6e3fc29224c5d3cea33c5a179070ba5678de7f56a5eff83bca81384a404fdf9a43cf3824de10774a1ecc1aefdd642782ea47e8f6d326b01a4ebd0a2c089eb59df57a7d4dc252400065c530a801f673b02d8574f5c9d32ef89aa4f7102bfac69c7cdccb1e01fe755c42ee1c690159523014a1698e4a18fc01e6cbf0b43d18b2d2b2efb0e76534420eddfeaaa2251a4b41e975db50c8d286e7825dbf796e0eba13c2075bcd01edb37d68edf2187a5ea7fc2c178a4bbd64591d8355e551345169472fcb6085b91d1c66ec2443111ea2dc2377b2d18494c6aaa40baa09f7d98ee126f949af4f0fda0d126086e2b1680f53a757bfa3da91460e3709f3607e5c60d7a154200d28aeac542d029e327d8bd1db8ca137ca8fe7d1ef17ee4f86475e084a726c3c3e3d1c052a56bbaedc8805ed76f8abfbf9a0d1af4d6242e499c7758c12152ec062dcf4afbf141bde97d559212c496ae5496918aced05631ddf209c98f2aade9d6e7e4ee2687905f685142fb9a4ecf257ac50ffe382977c0693c8854e2eccb62a0cebe3def009b29b3473d4c5fe216e2234e7189eee34ebead8a9de2db5c3b5224edef1e236bf988f0c0f407bda7deb939f284b9cb8082e9e7b6427921ef74da06c2d890f702f97da444fc1222cb056b230bdb218b7f14d22a7039e798db1acb97907d2d82acdf73f422e47e06559c5c766ff2ebedfc935030f942a83a3eab2c212276a38e7311c6cad0030f5602b97590217b65fa5d8a4503938f0a2ca60d4605abb030e0346d358a1505bae939e13370f4fd8fed6658fd48718d304ae84b8858708a353c414d2c6ea41e0322262b5554aec86029b143a36c79eae405f9b892c786e2eeb7b9042bd356f9157ef6b885df3146d471e32fa3e41c5640e54e7bc2b7c8b61772ea06497f5712dadd019149e21df1193f83fc7bdc83d128a62f49cec6ff73a599e53f91b93da9f52dee3492a1817b120dad0648fa0380a06185659b6b2a127c1f8faf74b077dbd79c23399b62eb646851056fb878e816874f5de9f069996f2f52694f0f7c4cd1eeaba7726870941d959c0ac2ab7b9b03d01f32760219567ece13b48b6281b89f2d180d0023c0ed08cc4556b8601bde251993d8ff7f7debb34d3c592fde76257dacdc54213a5e5ef81adb30ef0dd4f7bdf3cd58ce7c3861f29e61037ec7185ef2827ac05445b5f194eb18acd07334546a1b7d37683c27ef898db309db36db352708acc00d254bb603f1e0269e0c8049378dcc95ba7c69b1019979edae1d6c6"}, 0x418, 0x5}) (async) close_range(r0, r0, 0x2) (async, rerun: 32) r1 = socket$l2tp(0x2, 0x2, 0x73) (rerun: 32) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000540)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e22, @loopback}, {0x2, 0x4e23, @local}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)='vcan0\x00', 0x8, 0x2, 0x9}) (async, rerun: 64) pwritev(r0, &(0x7f0000000b80)=[{&(0x7f00000005c0)="46785da5a11195368fc2f230fb634667956301d4eeb234e129117ec8a0a3fbd3ad70997466fa231018593b37c6f92c177edfba004ae004a4ea6ae6328c431b11c8cd706e6a97dffcf4ed46cb507f057d49934228b591d3ecc513b4a5eb01d1687f72fb8cadb7c8ab7aab4e330b975b44969b544ec3b4dd09af463afb06b073cb115ec85683ca5135e3a639b533753c02e36bd085da35573eb4d4eeeca5a4f43beba0612d0fbe6f4364d6c1821860420b7add93b715730ef0fd2dae68ee994b6160bf856bbd6ea0fec4ac376f3f3f9d20a27854246301182ae6e24be5fd4162beda5df8535484731fb9a1bfa6", 0xec}, {&(0x7f00000006c0)="62fd851a73cb15ad194c941e08af09dd4796ae352a926928b44bbd0cf6fc413a9d055a177f85b3a58e76567fba6d0deda95b325071cc290bd335232d12a340f6d9b7f69bb18c171afee17ce8db6fd000446ed8966ca272a1fd9fe1b5eeb049bcdd4462849f25b01def52ef75d44cb9f3fa5ce99adcbfa786fa80b60b797209eb8ce0a5fa05ce", 0x86}, {&(0x7f0000000780)="58a56207e349994f6cf7bce9b5af961951666e5684f981f39b149bd6270f8ea7a169a7f698840f7991da63af400f091dd1b2bc50448072ba7eff46461c916c225154b311fdf89d179862a119d63f591f27e99e345817c1f767a41be5850b202accccdf7db6e1f77197253ad31dfcdd48c89a50fe386ecb2ebfadb1b4b393a276899969c43ac0a950", 0x88}, {&(0x7f0000000840)="b584e5ad4bf32e6ae54e62e5e44779640177cc190224d0bb6c61fa81fd9ce0d1919514844da394b511dccc4dc1753618a6f970516ad5a6fc694116d3f29537ae44188731b4dfa8668dab62", 0x4b}, {&(0x7f00000008c0)="1cdf9e1e271cfa72a06cc97b7c360256a10725b0bbe7acb2441f70389320895e5ebe898ef389b00cff7fac1d6ddd98fd791a60fff29729e193dc28011061172e27f806c9b95480833899fb999f0a4a", 0x4f}, {&(0x7f0000000940)="056e070c8294e734f8759d02580dd303184014fbce308657a85216e9f12d798cf3fee43de7cda087bfa8583d33b2ecb064ceb448096662e4a5e4cce2d35630fb9eafd64103d1068212f2f2e3dadc67aa1408753a921db686f5a32daab7cf21dbc07322d6064d4b1b82247ccc242e515c612892d6aa79a197597f9ac445a4cde5216f", 0x82}, {&(0x7f0000000a00)="ae5c40faabfe1a2375f1053493ad3e6b30ee7ab3533f8b271e6e896c2b6d900a0b954d4536c878d078b0ab7959c6a07e48fdb1159788a915a28446710747dc67b77f96680bb5193b5d6d208cd956495d0331ff8d7e263c7cbbaecf8ab299c7bed3391122ed1346948f982ba7781af178a6ca6f4cf90254cff0c4939a786bb6f46238264944557d4eac45aaa8b58bf75e7109bc81b269975f42a8afc2c0c60f7b853cffc9b13da3c997287e5a7a0f6d958c2fa76b0941a8a92b6ed5651465cd9a70d4b8699e65bf7ee7f10622ae3e7ee26d79fd1a97016c75b53f16eb2311", 0xde}, {&(0x7f0000000b00)="d907cb7615e828b61667f852df45285b015c197ac1936486cf6b32a182b2fd9318d5f07040912ce9bfb36a2d904398aa8dd9f6dca270b248b0c4223070f6060580edb322", 0x44}], 0x8, 0x7ce8, 0x4) (rerun: 64) r2 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000c00), 0x2040, 0x0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000c40)={0x6a}) r3 = fcntl$dupfd(r0, 0x0, r0) (async, rerun: 64) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, r4, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xc, 0x34, @random="00313db649771b7a"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f0000000e00)) fcntl$setstatus(r0, 0x4, 0x4000) (async) close_range(r3, r3, 0x2) write$rfkill(0xffffffffffffffff, &(0x7f0000000e40)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000e80)='wlan1\x00', 0x0, r2) (async) close_range(r0, r0, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x38, r4, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8000, 0x54}}}}, [@NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x6, 0x3}], "2816ced222f0a357"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000010) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000fc0)={0x0, 0x9, 0x1, 0x9, 0x7, 0x0, [{0x0, 0x6, 0x1, '\x00', 0x503}, {0x69b, 0xd44, 0x7, '\x00', 0x1500}, {0x8, 0x2, 0x4, '\x00', 0x782}, {0x9, 0x1, 0x1, '\x00', 0x2000}, {0xa, 0x8, 0x9a9, '\x00', 0xe86}, {0x0, 0x3, 0x9, '\x00', 0x180}, {0x5, 0x100000000, 0xfffffffffffffffe, '\x00', 0x1c00}]}) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000001180)=0x9, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000011c0)={r3, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001280)={{r3, 0xffffffffffffffff}, &(0x7f0000001200), &(0x7f0000001240)=r3}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001680)={r3, 0x20, &(0x7f0000001640)={&(0x7f0000001580)=""/43, 0x2b, 0x0, &(0x7f00000015c0)=""/106, 0x6a}}, 0x10) (async) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000016c0)={0x0, 0xffffffa5}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0xe, 0x24, &(0x7f00000012c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @alu={0x4, 0x0, 0x3, 0x4, 0x9, 0x17, 0xfffffffffffffff8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @exit, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0xf8c}], &(0x7f0000001400)='GPL\x00', 0xc7d8, 0xb1, &(0x7f0000001440)=""/177, 0x60600, 0x0, '\x00', 0x0, @fallback=0x1b, r3, 0x8, &(0x7f0000001500)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000001540)={0x5, 0x1, 0x5, 0x8}, 0x10, r8, r3, 0x0, &(0x7f0000001700)=[r3, r3, r9, r3, 0x1, r3, r3], &(0x7f0000001740), 0x10, 0xc442}, 0x94) (async) read$msr(r3, &(0x7f0000001840)=""/82, 0x52) 312.513579ms ago: executing program 5 (id=1762): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x40) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0xabf4, 0x8}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) r5 = open$dir(&(0x7f0000000200)='./file0\x00', 0x101000, 0x43) move_mount(r4, &(0x7f0000000140)='./file0\x00', r5, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r2}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000009d00000001000100090000af01000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@empty, @remote, @val={@void, {0x8100, 0x3, 0x1, 0x1}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @random="4356bdd11827", @private2={0xfc, 0x2, '\x00', 0x1}}}}}, &(0x7f0000000040)={0x0, 0x1, [0x7e8, 0x106, 0x7a9, 0x30c]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r6, &(0x7f0000000080), 0x0}, 0x20) keyctl$join(0x1, &(0x7f0000000180)={'syz', 0x0}) 312.052912ms ago: executing program 5 (id=1763): syz_emit_vhci(&(0x7f00000008c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_commands={{0x7}, {0x1, "cf521e122983747531924c0f37cce1ec3013066553cdcb6810ca727aba701a82040d1b1b4f069645ad25b0c3d8a04d415d32a40e643fe35b701c3cd675dbf136"}}}}, 0x47) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) syz_emit_vhci(&(0x7f00000008c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x44}, @hci_rp_read_local_commands={{0x7}, {0x1, "cf521e122983747531924c0f37cce1ec3013066553cdcb6810ca727aba701a82040d1b1b4f069645ad25b0c3d8a04d415d32a40e643fe35b701c3cd675dbf136"}}}}, 0x47) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async) 61.088199ms ago: executing program 5 (id=1764): syz_emit_ethernet(0xb0, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xa2, 0x4, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x4e20, 0xffff, 0x8e, 0x0, @opaque="b4e1fa95765798262e83e352be7290daa680842f452c30d6843ee7dcce1682a338848cde35b72a6259f080b611ec951e601467dd381201b1a8402587b51fe0ecbb44d049159db7957b28fbe8c64d72d611c9fd925a63a17d293d4874869f579b49a172a01db8e3c1ca14d62f67b63c9d73042381663f9da046b3dfb5d4a86fd5252a29297973"}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x400, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x5, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_ifreq(r0, 0x8926, &(0x7f0000000180)={'virt_wifi0\x00', @ifru_mtu=0x9b}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r3, 0xc02064cc, &(0x7f00000001c0)={r4, r4, 0x80000001, 0x6, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r3, 0xc01864cd, &(0x7f0000000200)={&(0x7f0000000140)=[r5, r4, r4], &(0x7f0000000100)=[0xffffffffffff7ffd, 0x8], 0x3}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000040)=0x2108003, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x11) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1, 0x0, 0x0, 0x4044}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 60.745263ms ago: executing program 4 (id=1765): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x62, @private=0xa010100, 0x4e22, 0x3, 'wlc\x00', 0x39, 0x5, 0x2b}, 0x2c) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x480, 0x0) ioctl$BLKGETNRZONES(r1, 0x80041285, &(0x7f00000000c0)=0x3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x67ab}}, './file0\x00'}) umount2(&(0x7f0000000180)='./file0\x00', 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0xc, @void}, 0x10) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x400100, 0x0) ioctl$IOC_PR_REGISTER(r5, 0x401870c8, &(0x7f0000000280)={0x7, 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)=@newqdisc={0x1f0, 0x24, 0x100, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe, 0x3}, {0x3, 0xd}, {0x10, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}, @qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_STAB={0x194, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xda, 0x7, 0xf89f, 0x81, 0x2, 0xffffffff, 0x9, 0x7}}, {0x12, 0x2, [0x40, 0xf50, 0x2606, 0xffd5, 0x0, 0x9, 0x320]}}, {{0x1c, 0x1, {0xd, 0x8, 0x3, 0x0, 0x2, 0x8, 0x3, 0x5}}, {0xe, 0x2, [0xfd1c, 0xfffd, 0x9, 0x6, 0x7ff]}}, {{0x1c, 0x1, {0x40, 0xff, 0x3, 0x4, 0x1, 0x1, 0x7, 0x9}}, {0x16, 0x2, [0xffff, 0x2, 0x1000, 0x6, 0x401, 0xf78a, 0x1, 0xa, 0x7145]}}, {{0x1c, 0x1, {0x81, 0x2, 0x84, 0x8, 0x0, 0x8, 0x7ff, 0x9}}, {0x16, 0x2, [0x8, 0x6, 0x7e2c, 0x8, 0x7, 0x1, 0x9, 0x7, 0x2]}}, {{0x1c, 0x1, {0x7, 0x9, 0x0, 0x788, 0x1, 0x5, 0x10, 0x6}}, {0x10, 0x2, [0x0, 0x5, 0x81, 0x5, 0x1, 0xd]}}, {{0x1c, 0x1, {0x8, 0xe, 0x8, 0x40, 0x0, 0x4, 0x95, 0x9}}, {0x16, 0x2, [0x5, 0xfbff, 0x400, 0x3, 0x8, 0x80, 0x7218, 0x3, 0x5]}}, {{0x1c, 0x1, {0x8, 0x7f, 0xc, 0x5, 0x2, 0x6, 0x2, 0x2}}, {0x8, 0x2, [0x2, 0xfffe]}}, {{0x1c, 0x1, {0x3, 0x37, 0x7, 0x1, 0x0, 0x9, 0x4, 0x1}}, {0x6, 0x2, [0x8cac]}}, {{0x1c, 0x1, {0xe, 0x1, 0x1, 0x0, 0x0, 0x81, 0xd479, 0x1}}, {0x6, 0x2, [0x401]}}]}, @qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x81, 0x7}}}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x40}, 0x850) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x10, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x8, 0x7}, {0x10, 0x9}, {0x0, 0xc}}, [@TCA_EGRESS_BLOCK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000680)=0x3) r6 = socket(0x9, 0x1, 0x2) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) select(0x40, &(0x7f00000006c0)={0x6, 0x2, 0x3ff, 0x2, 0xfffffffffffffff9, 0x377ffc62, 0x1ff, 0xffff}, &(0x7f0000000700)={0x5, 0xdf, 0x1, 0x85, 0x9, 0x5, 0x3, 0x9}, &(0x7f0000000740)={0x8, 0x6, 0x5, 0x9a9, 0x0, 0x9, 0x9, 0x6}, &(0x7f00000007c0)={r7, r8/1000+60000}) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x80010, r2, 0x8000000) syz_io_uring_setup(0x3fd4, &(0x7f0000000800)={0x0, 0xc9d0, 0x10, 0x0, 0x156, 0x0, r2}, &(0x7f0000000880), &(0x7f00000008c0)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r12 = epoll_create1(0x80000) syz_io_uring_submit(r9, r10, &(0x7f0000000900)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd_index=0x1, 0x3, {0x0, r5}, 0x800, 0x3, 0x1, {0x0, r11, r12}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000c00)={r13, &(0x7f0000000a00)="9abfc76c124db1269f53bf2fae2645738820920b3fcb997111720db2b5d3023b0a4b93fcb467e3c6ad1fa58aa9752c579ee39b61b3978940f72964949e7936eb1afb9256e84262eaa9f03af95cc775fe179db4e71ba94d4520dc836619d0309559b2c256c0f1279e5b1c5814e68221735828c1e8c0a78f25a38ab5f9f2a27e3e52ca48cca80c27717a533e8843fd7e9824285cd97b0b95d67e43168318d15858905a81e81f365bf8fe0e751a50586d3c697121a3fb14ecb6c0fe18a22aaff42bfca4153b3c70848113b9330c2e001221ad5d", &(0x7f0000000b00)=""/225}, 0x20) getdents64(r3, &(0x7f0000000c40)=""/127, 0x7f) ioctl$int_out(r0, 0x0, &(0x7f0000000cc0)) sendmsg$AUDIT_MAKE_EQUIV(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x6336c067e3b40a27}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x28, 0x3f7, 0x2, 0x70bd27, 0x25dfdbfe, {0x7, 0x7, './file0', './file1'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x40101) utimes(&(0x7f0000000e00)='./file1\x00', &(0x7f0000000e40)={{0x0, 0x2710}, {0x0, 0x2710}}) getsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000e80), &(0x7f0000000ec0)=0x10) 0s ago: executing program 4 (id=1766): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x40001) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000480)={[{0x7ff, 0x7fff, 0xe0, 0xfc, 0x3c, 0x7, 0x4, 0x21, 0x0, 0xfe, 0x7d, 0x5, 0x400001}, {0x7fffffff, 0x2, 0xff, 0xff, 0x4, 0x0, 0x1e, 0x0, 0x20, 0x2, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x11, 0x1, 0x9, 0xf8, 0x2, 0xfd, 0x6, 0x0, 0x8, 0xe0ee}], 0x7c1d}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, r4, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x79}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="000000000000000085"]) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f00000000c0)=0xffffff18, 0x3) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x3fffff) kernel console output (not intermixed with test programs): ct gi model size [ 114.850677][ T9039] netem: change failed [ 114.918971][ T9006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.928644][ T9006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.002644][ T6021] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 115.006132][ T6021] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 115.009607][ T6021] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 115.015227][ T6021] usb 9-1: string descriptor 0 read error: -22 [ 115.017402][ T6021] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.020889][ T6021] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.025887][ T9033] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 115.136736][ T9006] random: crng reseeded on system resumption [ 115.147013][ T142] usbhid 10-1:0.0: can't add hid device: -71 [ 115.152329][ T142] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 115.158352][ T142] usb 10-1: USB disconnect, device number 7 [ 115.231076][ T9033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.237776][ T9033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.246357][ T6021] cdc_ncm 9-1:1.0: bind() failure [ 115.252023][ T6021] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 115.255394][ T6021] cdc_ncm 9-1:1.1: bind() failure [ 115.259687][ T6021] usb 9-1: USB disconnect, device number 9 [ 115.790458][ T9048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=512 sclass=netlink_route_socket pid=9048 comm=syz.5.820 [ 115.872699][ T9065] netlink: 'syz.1.824': attribute type 10 has an invalid length. [ 115.880476][ T9065] bond2: (slave dummy0): Releasing active interface [ 115.883171][ T9065] dummy0: left allmulticast mode [ 115.890921][ T9065] team0: Port device dummy0 added [ 116.062717][ T9082] __nla_validate_parse: 6 callbacks suppressed [ 116.062728][ T9082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.829'. [ 116.112296][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 116.112308][ T40] audit: type=1400 audit(1766589918.661:584): avc: denied { mount } for pid=9087 comm="syz.4.832" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 116.114905][ T9089] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=764 sclass=netlink_xfrm_socket pid=9089 comm=syz.4.832 [ 116.142116][ T9091] netlink: 60 bytes leftover after parsing attributes in process `syz.1.833'. [ 116.188942][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.835'. [ 116.222729][ T9091] netlink: 'syz.1.833': attribute type 7 has an invalid length. [ 116.225705][ T9091] netlink: 'syz.1.833': attribute type 8 has an invalid length. [ 116.286062][ T9102] xt_nat: multiple ranges no longer supported [ 116.358224][ T9108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9108 comm=syz.3.839 [ 116.363363][ T9108] bridge0: port 1(syz_tun) entered blocking state [ 116.365885][ T9108] bridge0: port 1(syz_tun) entered disabled state [ 116.368520][ T9108] syz_tun: entered allmulticast mode [ 116.371558][ T9108] syz_tun: entered promiscuous mode [ 116.375797][ T9108] bridge0: port 1(syz_tun) entered blocking state [ 116.378232][ T9108] bridge0: port 1(syz_tun) entered forwarding state [ 116.405090][ T40] audit: type=1400 audit(1766589918.951:585): avc: denied { set_context_mgr } for pid=9107 comm="syz.3.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 116.414920][ T40] audit: type=1400 audit(1766589918.961:586): avc: denied { call } for pid=9107 comm="syz.3.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 116.420910][ T40] audit: type=1400 audit(1766589918.961:587): avc: denied { transfer } for pid=9107 comm="syz.3.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 116.443106][ T9121] input: syz1 as /devices/virtual/input/input21 [ 116.505389][ T9126] netlink: 696 bytes leftover after parsing attributes in process `syz.3.844'. [ 116.534451][ T9121] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 116.562919][ T9128] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 116.601343][ T9128] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.844'. [ 116.605678][ T40] audit: type=1400 audit(1766589919.151:588): avc: denied { lock } for pid=9123 comm="syz.3.844" path="socket:[26512]" dev="sockfs" ino=26512 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.648865][ T40] audit: type=1400 audit(1766589919.191:589): avc: denied { mounton } for pid=9135 comm="syz.4.848" path="/149/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 116.657044][ T40] audit: type=1400 audit(1766589919.211:590): avc: denied { remount } for pid=9135 comm="syz.4.848" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 116.824110][ T9143] fuse: Unknown parameter 'rootmode-0000000000000"p›ªwVýù8sser_ò7zÕD4Ö' [ 117.053504][ T9145] netlink: 36 bytes leftover after parsing attributes in process `syz.5.850'. [ 117.063755][ T9145] netlink: 32 bytes leftover after parsing attributes in process `syz.5.850'. [ 117.070551][ T40] audit: type=1400 audit(1766589919.611:591): avc: granted { setsecparam } for pid=9144 comm="syz.5.850" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 117.077596][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.850'. [ 117.299238][ T9151] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1420284373 (45449099936 ns) > initial count (5257758976 ns). Using initial count to start timer. [ 117.574013][ T40] audit: type=1326 audit(1766589920.121:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9167 comm="syz.4.858" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e1698f7c9 code=0x0 [ 117.765803][ T40] audit: type=1400 audit(1766589920.311:593): avc: denied { ioctl } for pid=9173 comm="syz.1.860" path="socket:[29653]" dev="sockfs" ino=29653 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 117.919370][ T6850] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 118.069241][ T6850] usb 8-1: Using ep0 maxpacket: 16 [ 118.073848][ T6850] usb 8-1: config 1 interface 1 has no altsetting 0 [ 118.078562][ T6850] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 118.082076][ T6850] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.085457][ T6850] usb 8-1: Product: п [ 118.086976][ T6850] usb 8-1: Manufacturer: Э [ 118.088738][ T6850] usb 8-1: SerialNumber: syz [ 118.153669][ T9178] EXT4-fs: Conflicting test_dummy_encryption options [ 118.300861][ T9172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.304963][ T9172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.318809][ T6850] usb 8-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 118.321767][ T6850] usb 8-1: found format II with max.bitrate = 6, frame size=56990 [ 118.324470][ T6850] usb 8-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 118.327401][ T6850] usb 8-1: found format II with max.bitrate = 6, frame size=56990 [ 118.356207][ T6850] usb 8-1: USB disconnect, device number 8 [ 118.387274][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 118.569004][ T9204] bridge5: entered promiscuous mode [ 118.571442][ T9204] bridge5: entered allmulticast mode [ 118.576715][ T9204] team0: Port device bridge5 added [ 118.585356][ T9208] bridge6: entered promiscuous mode [ 118.587143][ T9208] bridge6: entered allmulticast mode [ 118.591825][ T9208] team0: Port device bridge6 added [ 118.919726][ T29] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 118.956311][ T9230] tmpfs: Group quota inode hardlimit too large. [ 119.029253][ T6032] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 119.069336][ T29] usb 10-1: Using ep0 maxpacket: 16 [ 119.073056][ T29] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 119.076297][ T29] usb 10-1: config 0 interface 0 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 119.079559][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 119.083415][ T29] usb 10-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 119.086316][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.088931][ T29] usb 10-1: Product: syz [ 119.090590][ T29] usb 10-1: Manufacturer: syz [ 119.092127][ T29] usb 10-1: SerialNumber: syz [ 119.099929][ T29] usb 10-1: config 0 descriptor?? [ 119.109152][ T6022] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 119.181869][ T6032] usb 9-1: config 0 has an invalid interface number: 52 but max is 1 [ 119.185897][ T6032] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.191994][ T6032] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 119.195480][ T6032] usb 9-1: config 0 has no interface number 0 [ 119.198028][ T6032] usb 9-1: too many endpoints for config 0 interface 52 altsetting 82: 134, using maximum allowed: 30 [ 119.202165][ T6032] usb 9-1: config 0 interface 52 altsetting 82 has 0 endpoint descriptors, different from the interface descriptor's value: 134 [ 119.206863][ T6032] usb 9-1: config 0 interface 52 has no altsetting 0 [ 119.209588][ T6032] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 119.213497][ T6032] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.218365][ T6032] usb 9-1: config 0 descriptor?? [ 119.282714][ T6022] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 119.286471][ T6022] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.290208][ T6022] usb 6-1: Product: syz [ 119.292389][ T6022] usb 6-1: Manufacturer: syz [ 119.294335][ T6022] usb 6-1: SerialNumber: syz [ 119.306153][ T6022] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 119.334815][ T53] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 119.431191][ T9241] netlink: 20 bytes leftover after parsing attributes in process `syz.3.879'. [ 119.579405][ T6022] usb 10-1: USB disconnect, device number 8 [ 119.744962][ T29] usb 6-1: USB disconnect, device number 19 [ 120.169544][ T9259] 9p: Bad value for 'wfdno' [ 120.174781][ T9259] loop6: detected capacity change from 0 to 2640 [ 120.183253][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.186744][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.190449][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.194338][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.198153][ T5941] Buffer I/O error on dev loop6, logical block 0, async page read [ 120.325207][ T9265] kvm: Disabled LAPIC found during irq injection [ 120.359381][ T53] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 120.361946][ T53] ath9k_htc: Failed to initialize the device [ 120.364425][ T29] usb 6-1: ath9k_htc: USB layer deinitialized [ 120.464628][ T9281] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.894'. [ 120.488417][ T9284] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 120.515726][ T9289] netlink: 'syz.3.896': attribute type 1 has an invalid length. [ 120.527685][ T9289] bond5: entered promiscuous mode [ 120.529788][ T9289] 8021q: adding VLAN 0 to HW filter on device bond5 [ 120.739180][ T29] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 120.760862][ T9303] ufs: You didn't specify the type of your ufs filesystem [ 120.760862][ T9303] [ 120.760862][ T9303] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 120.760862][ T9303] [ 120.760862][ T9303] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 120.772133][ T9303] ufs: ufstype=old is supported read-only [ 120.889145][ T29] usb 6-1: Using ep0 maxpacket: 8 [ 120.892441][ T29] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 120.895106][ T29] usb 6-1: config 0 has no interface number 0 [ 120.897280][ T29] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 120.901035][ T29] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 120.904837][ T29] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 120.908418][ T29] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 120.912753][ T29] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 120.915758][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.920979][ T29] usb 6-1: config 0 descriptor?? [ 120.926609][ T29] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 120.982991][ T9311] dvmrp6: entered allmulticast mode [ 121.040912][ T9313] erspan1: entered promiscuous mode [ 121.126408][ T40] kauditd_printk_skb: 186 callbacks suppressed [ 121.126418][ T40] audit: type=1400 audit(1766589923.671:780): avc: denied { write } for pid=9275 comm="syz.1.892" name="ldusb0" dev="devtmpfs" ino=3002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.135876][ T40] audit: type=1400 audit(1766589923.671:781): avc: denied { read write } for pid=9275 comm="syz.1.892" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.144698][ T9276] __nla_validate_parse: 6 callbacks suppressed [ 121.144709][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.892'. [ 121.146592][ T40] audit: type=1400 audit(1766589923.671:782): avc: denied { open } for pid=9275 comm="syz.1.892" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.149598][ T6021] usb 6-1: USB disconnect, device number 20 [ 121.150879][ T40] audit: type=1400 audit(1766589923.671:783): avc: denied { ioctl } for pid=9275 comm="syz.1.892" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.162885][ T6021] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 121.171287][ T40] audit: type=1400 audit(1766589923.691:784): avc: denied { set_context_mgr } for pid=9275 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 121.179576][ T40] audit: type=1400 audit(1766589923.691:785): avc: denied { append } for pid=9275 comm="syz.1.892" name="comedi3" dev="devtmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 121.190227][ T40] audit: type=1400 audit(1766589923.691:786): avc: denied { map } for pid=9275 comm="syz.1.892" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 121.201007][ T40] audit: type=1400 audit(1766589923.701:787): avc: denied { create } for pid=9275 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.208993][ T40] audit: type=1400 audit(1766589923.701:788): avc: denied { write } for pid=9275 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.216403][ T40] audit: type=1400 audit(1766589923.701:789): avc: denied { nlmsg_write } for pid=9275 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.633424][ T6032] usb 9-1: string descriptor 0 read error: -71 [ 121.638165][ T6032] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 121.641818][ T6032] dvb-usb: bulk message failed: -22 (3/0) [ 121.649002][ T6032] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 121.654242][ T6032] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 121.656738][ T6032] usb 9-1: media controller created [ 121.660755][ T6032] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.678940][ T6032] dvb-usb: bulk message failed: -22 (6/0) [ 121.681351][ T6032] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 121.689688][ T6032] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb9/9-1/input/input22 [ 121.698746][ T6032] dvb-usb: schedule remote query interval to 150 msecs. [ 121.701367][ T6032] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 121.701727][ T9348] netlink: 'syz.1.915': attribute type 2 has an invalid length. [ 121.705250][ T6032] usb 9-1: USB disconnect, device number 10 [ 121.707348][ T9350] netlink: 'syz.1.915': attribute type 2 has an invalid length. [ 121.724425][ T6032] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 121.864815][ T9355] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.918'. [ 121.893773][ T9361] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 121.898529][ T9361] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 121.927599][ T9365] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 121.959109][ T6021] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 121.977697][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.4.921'. [ 122.119253][ T6021] usb 8-1: Using ep0 maxpacket: 32 [ 122.123317][ T6021] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 122.127098][ T6021] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 122.131043][ T6021] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 122.134732][ T6021] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.138770][ T6021] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 122.144484][ T6021] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 122.149186][ T6021] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 122.153441][ T6021] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 122.158998][ T6021] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 122.163118][ T6021] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.180368][ T6021] usb 8-1: config 0 descriptor?? [ 122.183504][ T9346] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 122.241346][ T1116] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 122.244458][ T1116] ata1: failed to read log page 10h (errno=-5) [ 122.247228][ T1116] ata1.00: exception Emask 0x1 SAct 0x40 SErr 0x0 action 0x0 [ 122.251249][ T1116] ata1.00: irq_stat 0x40000000 [ 122.253466][ T1116] ata1.00: failed command: READ FPDMA QUEUED [ 122.256140][ T1116] ata1.00: cmd 60/00:30:6e:46:01/01:00:00:00:00/40 tag 6 ncq dma 131072 in [ 122.256140][ T1116] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 122.263959][ T1116] ata1.00: status: { DRDY } [ 122.266046][ T1116] ata1.00: error: { ABRT } [ 122.273104][ T1116] ata1.00: configured for UDMA/100 [ 122.275882][ T1116] sd 0:0:0:0: [sda] tag#6 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 122.280275][ T1116] sd 0:0:0:0: [sda] tag#6 Sense Key : Aborted Command [current] [ 122.282851][ T1116] sd 0:0:0:0: [sda] tag#6 Add. Sense: No additional sense information [ 122.285625][ T1116] sd 0:0:0:0: [sda] tag#6 CDB: Read(10) 28 00 00 01 46 6e 00 01 00 00 [ 122.288536][ T1116] I/O error, dev sda, sector 83566 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 122.291964][ T1116] ata1: EH complete [ 122.336747][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.929'. [ 122.340771][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.929'. [ 122.400338][ T6021] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 122.600448][ T9346] ip6t_srh: unknown srh invflags 4000 [ 122.606555][ C0] usblp0: nonzero read bulk status received: -71 [ 122.616793][ T6021] usb 8-1: USB disconnect, device number 9 [ 122.626493][ T6021] usblp0: removed [ 122.688773][ T9406] netlink: 'syz.5.934': attribute type 7 has an invalid length. [ 122.692906][ T9406] netlink: 'syz.5.934': attribute type 8 has an invalid length. [ 122.979135][ T60] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 123.055146][ T9420] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.938'. [ 123.056379][ T9418] tmpfs: Bad value for 'mpol' [ 123.058311][ T9420] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 123.064039][ T9418] tmpfs: Unknown parameter '/dev/uinput' [ 123.066798][ T9420] input: syz0 as /devices/virtual/input/input23 [ 123.108062][ T9425] 9pnet_virtio: no channels available for device syz [ 123.111561][ T9425] overlayfs: overlapping lowerdir path [ 123.130623][ T60] usb 10-1: Using ep0 maxpacket: 8 [ 123.133670][ T60] usb 10-1: config 0 has an invalid interface number: 55 but max is 0 [ 123.136796][ T60] usb 10-1: config 0 has no interface number 0 [ 123.138800][ T60] usb 10-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 123.142517][ T60] usb 10-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 123.146714][ T60] usb 10-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 123.150483][ T60] usb 10-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 123.154729][ T60] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 123.157778][ T60] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.162857][ T60] usb 10-1: config 0 descriptor?? [ 123.173898][ T60] ldusb 10-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 123.290526][ T9428] overlay: ./file0 is not a directory [ 123.293038][ T9427] overlay: ./file0 is not a directory [ 123.299797][ T9428] overlay: ./file0 is not a directory [ 123.302548][ T9427] overlay: ./file0 is not a directory [ 123.372329][ T9408] binder: BINDER_SET_CONTEXT_MGR already set [ 123.374436][ T9408] binder: 9407:9408 ioctl 4018620d 200000000100 returned -16 [ 123.451358][ T9409] binder_alloc: binder_alloc_mmap_handler: 9407 200000ffd000-200001000000 already mapped failed -16 [ 123.457189][ T9446] binder: BINDER_SET_CONTEXT_MGR already set [ 123.459366][ T9446] binder: 9407:9446 ioctl 4018620d 200000004a80 returned -16 [ 123.462412][ T9409] binder_alloc: 9407: binder_alloc_buf, no vma [ 123.611617][ T9452] netlink: 44 bytes leftover after parsing attributes in process `syz.1.947'. [ 123.646003][ T9462] netlink: 'syz.1.952': attribute type 13 has an invalid length. [ 123.646438][ T9463] netlink: 'syz.1.952': attribute type 13 has an invalid length. [ 123.704933][ T9471] geneve3: entered promiscuous mode [ 123.708896][ T53] IPVS: starting estimator thread 0... [ 123.761787][ T9478] comedi: valid board names for 8255 driver are: [ 123.763930][ T9478] 8255 [ 123.764908][ T9478] comedi: valid board names for vmk80xx driver are: [ 123.767114][ T9478] vmk80xx [ 123.768210][ T9478] comedi: valid board names for usbduxsigma driver are: [ 123.770837][ T9478] usbduxsigma [ 123.772011][ T9478] comedi: valid board names for usbduxfast driver are: [ 123.774306][ T9478] usbduxfast [ 123.775440][ T9478] comedi: valid board names for usbdux driver are: [ 123.777643][ T9478] usbdux [ 123.778648][ T9478] comedi: valid board names for ni6501 driver are: [ 123.781394][ T9478] ni6501 [ 123.783025][ T9478] comedi: valid board names for dt9812 driver are: [ 123.785191][ T9478] dt9812 [ 123.786210][ T9478] comedi: valid board names for ni_labpc_cs driver are: [ 123.788630][ T9478] ni_labpc_cs [ 123.790333][ T9478] comedi: valid board names for ni_daq_700 driver are: [ 123.792607][ T9478] ni_daq_700 [ 123.793739][ T9478] comedi: valid board names for labpc_pci driver are: [ 123.795984][ T9478] labpc_pci [ 123.797076][ T9478] comedi: valid board names for adl_pci9118 driver are: [ 123.799394][ T9473] IPVS: using max 45 ests per chain, 108000 per kthread [ 123.804581][ T9478] pci9118dg [ 123.806984][ T9478] pci9118hg [ 123.808157][ T9478] pci9118hr [ 123.809682][ T9478] comedi: valid board names for 8255_pci driver are: [ 123.811889][ T9478] 8255_pci [ 123.812975][ T9478] comedi: valid board names for s526 driver are: [ 123.815069][ T9478] s526 [ 123.816070][ T9478] comedi: valid board names for multiq3 driver are: [ 123.818274][ T9478] multiq3 [ 123.820586][ T9478] comedi: valid board names for pcmuio driver are: [ 123.822885][ T9478] pcmuio48 [ 123.824035][ T9478] pcmuio96 [ 123.825202][ T9478] comedi: valid board names for pcmmio driver are: [ 123.827476][ T9478] pcmmio [ 123.828476][ T9478] comedi: valid board names for pcmda12 driver are: [ 123.831195][ T9478] pcmda12 [ 123.832351][ T9478] comedi: valid board names for pcmad driver are: [ 123.834967][ T9478] pcmad12 [ 123.836107][ T9478] pcmad16 [ 123.837641][ T9478] comedi: valid board names for ni_labpc driver are: [ 123.840710][ T9478] lab-pc-1200 [ 123.841894][ T9478] lab-pc-1200ai [ 123.843087][ T9478] lab-pc+ [ 123.844092][ T9478] comedi: valid board names for atmio16 driver are: [ 123.846200][ T9478] atmio16 [ 123.847258][ T9478] atmio16d [ 123.848379][ T9478] comedi: valid board names for ni_at_ao driver are: [ 123.851813][ T9478] at-ao-6 [ 123.852906][ T9478] at-ao-10 [ 123.853985][ T9478] comedi: valid board names for ni_at_a2150 driver are: [ 123.856273][ T9478] ni_at_a2150 [ 123.857455][ T9478] comedi: valid board names for adq12b driver are: [ 123.860227][ T9478] adq12b [ 123.861268][ T9478] comedi: valid board names for mpc624 driver are: [ 123.863449][ T9478] mpc624 [ 123.864471][ T9478] comedi: valid board names for c6xdigio driver are: [ 123.866687][ T9478] c6xdigio [ 123.867814][ T9478] comedi: valid board names for aio_iiro_16 driver are: [ 123.870263][ T9478] aio_iiro_16 [ 123.872080][ T9478] comedi: valid board names for aio_aio12_8 driver are: [ 123.874510][ T9478] aio_aio12_8 [ 123.876010][ T9478] aio_ai12_8 [ 123.877251][ T9478] aio_ao12_4 [ 123.878527][ T9478] comedi: valid board names for fl512 driver are: [ 123.881464][ T9478] fl512 [ 123.882460][ T9478] comedi: valid board names for dmm32at driver are: [ 123.884675][ T9478] dmm32at [ 123.885743][ T9478] comedi: valid board names for dt282x driver are: [ 123.887948][ T9478] dt2821 [ 123.888983][ T9478] dt2821-f [ 123.890157][ T9478] dt2821-g [ 123.891250][ T9478] dt2823 [ 123.892283][ T9478] dt2824-pgh [ 123.893422][ T9478] dt2824-pgl [ 123.894563][ T9478] dt2825 [ 123.895602][ T9478] dt2827 [ 123.896633][ T9478] dt2828 [ 123.897662][ T9478] dt2829 [ 123.898683][ T9478] dt21-ez [ 123.899868][ T9478] dt23-ez [ 123.900945][ T9478] dt24-ez [ 123.902004][ T9478] dt24-ez-pgl [ 123.903156][ T9478] comedi: valid board names for dt2817 driver are: [ 123.905330][ T9478] dt2817 [ 123.906404][ T9478] comedi: valid board names for dt2815 driver are: [ 123.908768][ T9478] dt2815 [ 123.910064][ T9478] comedi: valid board names for dt2814 driver are: [ 123.912270][ T9478] dt2814 [ 123.913300][ T9478] comedi: valid board names for dt2811 driver are: [ 123.915528][ T9478] dt2811-pgh [ 123.916701][ T9478] dt2811-pgl [ 123.917875][ T9478] comedi: valid board names for dt2801 driver are: [ 123.920258][ T9478] dt2801 [ 123.921278][ T9478] comedi: valid board names for das6402 driver are: [ 123.923554][ T9478] das6402-12 [ 123.924715][ T9478] das6402-16 [ 123.925880][ T9478] comedi: valid board names for das1800 driver are: [ 123.928085][ T9478] das-1701st [ 123.929399][ T9478] das-1701st-da [ 123.930633][ T9478] das-1702st [ 123.931789][ T9478] das-1702st-da [ 123.933026][ T9478] das-1702hr [ 123.934174][ T9478] das-1702hr-da [ 123.935397][ T9478] das-1701ao [ 123.936583][ T9478] das-1702ao [ 123.937712][ T9478] das-1801st [ 123.938858][ T9478] das-1801st-da [ 123.940350][ T9478] das-1802st [ 123.941847][ T9478] das-1802st-da [ 123.943071][ T9478] das-1802hr [ 123.944221][ T9478] das-1802hr-da [ 123.945437][ T9478] das-1801hc [ 123.946579][ T9478] das-1802hc [ 123.947737][ T9478] das-1801ao [ 123.948914][ T9478] das-1802ao [ 123.950211][ T9478] comedi: valid board names for das800 driver are: [ 123.952404][ T9478] das-800 [ 123.953484][ T9478] cio-das800 [ 123.954634][ T9478] das-801 [ 123.955780][ T9478] cio-das801 [ 123.956950][ T9478] das-802 [ 123.958035][ T9478] cio-das802 [ 123.959455][ T9478] cio-das802/16 [ 123.960713][ T9478] comedi: valid board names for isa-das08 driver are: [ 123.964870][ T9478] isa-das08 [ 123.966046][ T9478] das08-pgm [ 123.967165][ T9478] das08-pgh [ 123.968317][ T9478] das08-pgl [ 123.969904][ T9478] das08-aoh [ 123.971104][ T9478] das08-aol [ 123.972241][ T9478] das08-aom [ 123.973354][ T9478] das08/jr-ao [ 123.974516][ T9478] das08jr-16-ao [ 123.975773][ T9478] pc104-das08 [ 123.976957][ T9478] das08jr/16 [ 123.978124][ T9478] comedi: valid board names for das16m1 driver are: [ 123.980719][ T9478] das16m1 [ 123.981806][ T9478] comedi: valid board names for dac02 driver are: [ 123.983964][ T9478] dac02 [ 123.984965][ T9478] comedi: valid board names for rti802 driver are: [ 123.987175][ T9478] rti802 [ 123.989101][ T9478] comedi: valid board names for rti800 driver are: [ 123.991535][ T9478] rti800 [ 123.992591][ T9478] rti815 [ 123.993586][ T9478] comedi: valid board names for pcm3724 driver are: [ 123.995806][ T9478] pcm3724 [ 123.996884][ T9478] comedi: valid board names for pcl818 driver are: [ 123.999309][ T9478] pcl818l [ 124.000379][ T9478] pcl818h [ 124.001601][ T9478] pcl818hd [ 124.002666][ T9478] pcl818hg [ 124.003735][ T9478] pcl818 [ 124.004774][ T9478] pcl718 [ 124.005836][ T9478] pcm3718 [ 124.006878][ T9478] comedi: valid board names for pcl816 driver are: [ 124.009026][ T9478] pcl816 [ 124.010214][ T9478] pcl814b [ 124.011357][ T9478] comedi: valid board names for pcl812 driver are: [ 124.013511][ T9478] pcl812 [ 124.014521][ T9478] pcl812pg [ 124.015678][ T9478] acl8112pg [ 124.016806][ T9478] acl8112dg [ 124.017925][ T9478] acl8112hg [ 124.019030][ T9478] a821pgl [ 124.020397][ T9478] a821pglnda [ 124.021765][ T9478] a821pgh [ 124.022817][ T9478] a822pgl [ 124.023853][ T9478] a822pgh [ 124.024910][ T9478] a823pgl [ 124.025991][ T9478] a823pgh [ 124.027036][ T9478] pcl813 [ 124.028048][ T9478] pcl813b [ 124.029210][ T9478] acl8113 [ 124.030363][ T9478] iso813 [ 124.031764][ T9478] acl8216 [ 124.032829][ T9478] a826pg [ 124.033823][ T9478] comedi: valid board names for pcl730 driver are: [ 124.035972][ T9478] pcl730 [ 124.036998][ T9478] iso730 [ 124.037973][ T9478] acl7130 [ 124.038995][ T9478] pcm3730 [ 124.040306][ T9478] pcl725 [ 124.041318][ T9478] p8r8dio [ 124.042440][ T9478] acl7225b [ 124.043662][ T9478] p16r16dio [ 124.044790][ T9478] pcl733 [ 124.045806][ T9478] pcl734 [ 124.046798][ T9478] opmm-1616-xt [ 124.048064][ T9478] pearl-mm-p [ 124.049276][ T9478] ir104-pbf [ 124.050378][ T9478] comedi: valid board names for pcl726 driver are: [ 124.052670][ T9478] pcl726 [ 124.053680][ T9478] pcl727 [ 124.054667][ T9478] pcl728 [ 124.055704][ T9478] acl6126 [ 124.056759][ T9478] acl6128 [ 124.057813][ T9478] comedi: valid board names for pcl724 driver are: [ 124.060227][ T9478] pcl724 [ 124.061321][ T9478] pcl722 [ 124.062313][ T9478] pcl731 [ 124.063414][ T9478] acl7122 [ 124.064537][ T9478] acl7124 [ 124.065684][ T9478] pet48dio [ 124.066826][ T9478] pcmio48 [ 124.067941][ T9478] onyx-mm-dio [ 124.069195][ T9478] comedi: valid board names for pcl711 driver are: [ 124.071399][ T9478] pcl711 [ 124.072398][ T9478] pcl711b [ 124.073546][ T9478] acl8112hg [ 124.074715][ T9478] acl8112dg [ 124.075895][ T9478] comedi: valid board names for amplc_pc263 driver are: [ 124.078254][ T9478] pc263 [ 124.079563][ T9478] comedi: valid board names for amplc_pc236 driver are: [ 124.081837][ T9478] pc36at [ 124.082844][ T9478] comedi: valid board names for amplc_dio200 driver are: [ 124.085234][ T9478] pc212e [ 124.086358][ T9478] pc214e [ 124.087362][ T9478] pc215e [ 124.088442][ T9478] pc218e [ 124.089762][ T9478] pc272e [ 124.090950][ T9478] comedi: valid board names for comedi_parport driver are: [ 124.093396][ T9478] comedi_parport [ 124.094674][ T9478] comedi: valid board names for comedi_test driver are: [ 124.097089][ T9478] comedi_test [ 124.098341][ T9478] comedi: valid board names for comedi_bond driver are: [ 124.101125][ T9478] comedi_bond [ 124.512667][ T9504] netlink: 68 bytes leftover after parsing attributes in process `syz.4.963'. [ 124.517790][ T9505] netlink: 68 bytes leftover after parsing attributes in process `syz.4.963'. [ 124.521184][ T9505] netlink: 68 bytes leftover after parsing attributes in process `syz.4.963'. [ 124.623408][ T9512] futex_wake_op: syz.5.966 tries to shift op by -1; fix this program [ 126.168667][ T40] kauditd_printk_skb: 284 callbacks suppressed [ 126.168680][ T40] audit: type=1400 audit(1766589928.711:1074): avc: denied { ioctl } for pid=9560 comm="syz.5.980" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=33413 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 126.180185][ T40] audit: type=1400 audit(1766589928.711:1075): avc: denied { ioctl } for pid=9560 comm="syz.5.980" path="socket:[33415]" dev="sockfs" ino=33415 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.251664][ T9531] kexec: Could not allocate control_code_buffer [ 126.316197][ T40] audit: type=1400 audit(1766589928.861:1076): avc: denied { read write } for pid=9562 comm="syz.5.981" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.325942][ T9563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.332588][ T9563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.339214][ T40] audit: type=1400 audit(1766589928.881:1077): avc: denied { open } for pid=9562 comm="syz.5.981" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.349731][ T40] audit: type=1400 audit(1766589928.881:1078): avc: denied { ioctl } for pid=9562 comm="syz.5.981" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.360827][ T40] audit: type=1400 audit(1766589928.891:1079): avc: denied { watch watch_reads } for pid=9562 comm="syz.5.981" path="pipe:[22258]" dev="pipefs" ino=22258 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 126.371229][ T40] audit: type=1400 audit(1766589928.891:1080): avc: denied { relabelfrom } for pid=9562 comm="syz.5.981" name="" dev="pipefs" ino=30680 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 126.380865][ T40] audit: type=1400 audit(1766589928.921:1081): avc: denied { create } for pid=9571 comm="syz.3.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 126.432546][ T40] audit: type=1400 audit(1766589928.981:1082): avc: denied { create } for pid=9571 comm="syz.3.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.439497][ T40] audit: type=1400 audit(1766589928.981:1083): avc: denied { write } for pid=9571 comm="syz.3.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 126.580556][ T9588] __nla_validate_parse: 108 callbacks suppressed [ 126.580569][ T9588] netlink: 76 bytes leftover after parsing attributes in process `syz.4.989'. [ 126.831259][ T9609] overlayfs: failed to resolve './file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -2 [ 126.900220][ T9614] netlink: 36 bytes leftover after parsing attributes in process `syz.5.996'. [ 126.986544][ T9614] netlink: 40 bytes leftover after parsing attributes in process `syz.5.996'. [ 127.046503][ T9627] loop2: detected capacity change from 0 to 7 [ 127.049665][ T9627] Dev loop2: unable to read RDB block 7 [ 127.051982][ T9627] loop2: AHDI p1 p2 p3 [ 127.053411][ T9627] loop2: partition table partially beyond EOD, truncated [ 127.055931][ T9627] loop2: p1 start 1601398130 is beyond EOD, truncated [ 127.058126][ T9627] loop2: p2 start 1702059890 is beyond EOD, truncated [ 127.071456][ T9629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1002'. [ 127.089124][ T60] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 127.127549][ T9635] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 127.137461][ T9635] CIFS mount error: No usable UNC path provided in device string! [ 127.137461][ T9635] [ 127.142064][ T9635] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 127.187790][ T9641] overlayfs: failed to clone upperpath [ 127.241812][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 127.244968][ T60] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 127.247734][ T60] usb 6-1: config 0 has no interface number 0 [ 127.250688][ T60] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 127.254192][ T60] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 127.257942][ T60] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 127.261769][ T60] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 127.265947][ T60] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 127.268939][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.274384][ T60] usb 6-1: config 0 descriptor?? [ 127.284093][ T60] ldusb 6-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 127.284581][ T9655] bridge4: entered allmulticast mode [ 127.445942][ T9660] openvswitch: netlink: Message has 592 unknown bytes. [ 127.449030][ T9660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.484447][ T60] usb 6-1: USB disconnect, device number 21 [ 127.492835][ T60] ldusb 6-1:0.55: LD USB Device #1 now disconnected [ 127.757099][ T9681] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1019'. [ 128.825616][ T9708] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 129.879320][ T6850] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 130.259290][ T6850] usb 9-1: Using ep0 maxpacket: 32 [ 130.262499][ T6850] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.267813][ T6850] usb 9-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 130.270763][ T6850] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.273906][ T6850] usb 9-1: Product: syz [ 130.275465][ T6850] usb 9-1: Manufacturer: syz [ 130.277004][ T6850] usb 9-1: SerialNumber: syz [ 130.281407][ T6850] usb 9-1: config 0 descriptor?? [ 130.285111][ T6850] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 130.487470][ T6850] gspca_sunplus: reg_r err -32 [ 130.569476][ T9771] program syz.5.1034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.698015][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 131.703043][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 131.706072][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 131.710178][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 131.713246][ T9801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1041'. [ 132.494974][ T6850] sunplus 9-1:0.0: probe with driver sunplus failed with error -32 [ 132.536466][ T40] kauditd_printk_skb: 136 callbacks suppressed [ 132.536484][ T40] audit: type=1400 audit(1766589935.081:1220): avc: denied { read } for pid=9803 comm="syz.1.1043" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 132.578989][ T40] audit: type=1400 audit(1766589935.081:1221): avc: denied { open } for pid=9803 comm="syz.1.1043" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 132.593055][ T40] audit: type=1400 audit(1766589935.101:1222): avc: denied { ioctl } for pid=9803 comm="syz.1.1043" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 132.603262][ T40] audit: type=1400 audit(1766589935.101:1223): avc: denied { ioctl } for pid=9803 comm="syz.1.1043" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 132.874794][ T9818] Driver unsupported XDP return value 0 on prog (id 230) dev N/A, expect packet loss! [ 133.022810][ T40] audit: type=1400 audit(1766589935.421:1224): avc: denied { map_read map_write } for pid=9812 comm="syz.3.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 133.047137][ T40] audit: type=1400 audit(1766589935.471:1225): avc: denied { create } for pid=9814 comm="syz.5.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.069218][ T40] audit: type=1400 audit(1766589935.481:1226): avc: denied { setopt } for pid=9814 comm="syz.5.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.100588][ T6023] usb 9-1: USB disconnect, device number 11 [ 133.160800][ T40] audit: type=1400 audit(1766589935.711:1227): avc: denied { read } for pid=9820 comm="syz.4.1047" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.168043][ T40] audit: type=1400 audit(1766589935.711:1228): avc: denied { open } for pid=9820 comm="syz.4.1047" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.285574][ T40] audit: type=1400 audit(1766589935.831:1229): avc: denied { read } for pid=9820 comm="syz.4.1047" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 133.970888][ T9825] bond0: (slave bridge0): Releasing backup interface [ 133.995268][ T9825] bridge0: left allmulticast mode [ 133.997514][ T9825] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.000288][ T9825] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.031047][ T9825] bridge_slave_0: left allmulticast mode [ 134.033500][ T9825] bridge_slave_0: left promiscuous mode [ 134.036483][ T9825] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.409361][ T60] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 134.488386][ T9825] bridge_slave_1: left allmulticast mode [ 134.521167][ T9825] bridge_slave_1: left promiscuous mode [ 134.523231][ T9825] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.554552][ T9825] bond0: (slave bond_slave_0): Releasing backup interface [ 134.561187][ T9825] bond_slave_0: left allmulticast mode [ 134.571137][ T60] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 134.575146][ T60] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.589622][ T60] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.593731][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.786687][ T9825] bond0: (slave bond_slave_1): Releasing backup interface [ 134.790377][ T9825] bond_slave_1: left allmulticast mode [ 134.801857][ T9825] team0: Port device team_slave_1 removed [ 134.804184][ T9825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.806642][ T9825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.814808][ T9825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.817273][ T9825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.019812][ T9825] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 135.096352][ T9845] overlayfs: failed to clone upperpath [ 135.936614][ T60] usb 6-1: usb_control_msg returned -32 [ 135.971566][ T60] usbtmc 6-1:16.0: can't read capabilities [ 136.391575][ T9860] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1058'. [ 136.478666][ T9864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.506127][ T9864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.382128][ T6850] usb 6-1: USB disconnect, device number 22 [ 137.480310][ T9872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.484456][ T9872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.551827][ T9877] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 137.686277][ T40] kauditd_printk_skb: 33 callbacks suppressed [ 137.701175][ T40] audit: type=1400 audit(1766589940.231:1263): avc: denied { create } for pid=9880 comm="syz.1.1067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 137.737662][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.740062][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.819221][ T40] audit: type=1400 audit(1766589940.311:1264): avc: denied { execute } for pid=9880 comm="syz.1.1067" name="file0" dev="tmpfs" ino=1353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.838407][ T40] audit: type=1400 audit(1766589940.311:1265): avc: denied { execute_no_trans } for pid=9880 comm="syz.1.1067" path="/249/file0" dev="tmpfs" ino=1353 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 137.979317][ T40] audit: type=1400 audit(1766589940.481:1266): avc: denied { ioctl } for pid=9884 comm="syz.4.1068" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 137.990146][ T40] audit: type=1400 audit(1766589940.481:1267): avc: denied { set_context_mgr } for pid=9884 comm="syz.4.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 137.996727][ T40] audit: type=1400 audit(1766589940.481:1268): avc: denied { map } for pid=9884 comm="syz.4.1068" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 138.004729][ T40] audit: type=1400 audit(1766589940.481:1269): avc: denied { call } for pid=9884 comm="syz.4.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 138.011020][ T40] audit: type=1400 audit(1766589940.481:1270): avc: denied { transfer } for pid=9884 comm="syz.4.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 138.236626][ T40] audit: type=1400 audit(1766589940.781:1271): avc: denied { bpf } for pid=9888 comm="syz.5.1070" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.244943][ T40] audit: type=1400 audit(1766589940.781:1272): avc: denied { perfmon } for pid=9888 comm="syz.5.1070" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 138.493027][ T9891] 9p: Bad value for 'rfdno' [ 139.220337][ T9912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.243212][ T9912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.144786][ T40] kauditd_printk_skb: 56 callbacks suppressed [ 143.144803][ T40] audit: type=1400 audit(1766589945.691:1329): avc: denied { create } for pid=9993 comm="syz.4.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.642996][ T40] audit: type=1400 audit(1766589945.971:1330): avc: denied { map_create } for pid=9993 comm="syz.4.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 143.651586][ T40] audit: type=1400 audit(1766589945.971:1331): avc: denied { map_read map_write } for pid=9993 comm="syz.4.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 143.658259][ T40] audit: type=1400 audit(1766589945.971:1332): avc: denied { prog_load } for pid=9993 comm="syz.4.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 143.664859][ T40] audit: type=1400 audit(1766589946.031:1333): avc: denied { write } for pid=9995 comm="syz.1.1106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 144.038021][ T40] audit: type=1400 audit(1766589946.581:1334): avc: denied { wake_alarm } for pid=10004 comm="syz.4.1108" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 144.309509][ T40] audit: type=1400 audit(1766589946.861:1335): avc: denied { create } for pid=10008 comm="syz.3.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 144.329689][ T40] audit: type=1400 audit(1766589946.881:1336): avc: denied { prog_run } for pid=10006 comm="syz.4.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 144.342475][ T40] audit: type=1400 audit(1766589946.891:1337): avc: denied { bind } for pid=10008 comm="syz.3.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 144.423603][ T40] audit: type=1400 audit(1766589946.971:1338): avc: denied { ioctl } for pid=10014 comm="syz.1.1111" path="socket:[34065]" dev="sockfs" ino=34065 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 144.432297][T10015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1111'. [ 144.735976][T10022] Unsupported ieee802154 address type: 0 [ 148.103322][ C3] hrtimer: interrupt took 15798 ns [ 148.159896][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 148.159908][ T40] audit: type=1400 audit(1766589950.711:1367): avc: denied { create } for pid=10096 comm="syz.4.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 148.559171][ T40] audit: type=1400 audit(1766589951.091:1368): avc: denied { relabelfrom } for pid=10103 comm="syz.4.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 148.567737][ T40] audit: type=1400 audit(1766589951.091:1369): avc: denied { relabelto } for pid=10103 comm="syz.4.1137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 148.604488][ T40] audit: type=1400 audit(1766589951.151:1370): avc: denied { read } for pid=10110 comm="syz.4.1139" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 148.615931][ T40] audit: type=1400 audit(1766589951.151:1371): avc: denied { open } for pid=10110 comm="syz.4.1139" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 148.741091][ T29] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 148.912808][ T29] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 148.918448][ T29] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.922450][ T29] usb 6-1: config 0 interface 0 has no altsetting 0 [ 148.925352][ T29] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 148.929139][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.946208][ T29] usb 6-1: config 0 descriptor?? [ 148.952231][ T40] audit: type=1400 audit(1766589951.501:1372): avc: denied { ioctl } for pid=10106 comm="syz.1.1136" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 149.400979][ T40] audit: type=1400 audit(1766589951.951:1373): avc: denied { setopt } for pid=10118 comm="syz.3.1141" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 149.428482][ T40] audit: type=1400 audit(1766589951.971:1374): avc: denied { read write } for pid=7205 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.436763][ T40] audit: type=1400 audit(1766589951.971:1375): avc: denied { open } for pid=7205 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.446827][ T40] audit: type=1400 audit(1766589951.971:1376): avc: denied { ioctl } for pid=7205 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 149.789632][ T29] hid_parser_main: 22 callbacks suppressed [ 149.789791][ T29] hid-steam 0003:28DE:1102.000B: unknown main item tag 0x0 [ 151.091590][ T29] hid-steam 0003:28DE:1102.000B: unknown main item tag 0x0 [ 151.096194][ T29] hid-steam 0003:28DE:1102.000B: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 151.171249][ T29] hid-steam 0003:28DE:1102.000B: Steam Controller 'XXXXXXXXXX' connected [ 151.181930][ T29] input: Steam Controller as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:28DE:1102.000B/input/input24 [ 151.263458][ T29] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 151.279640][ T29] hid-steam 0003:28DE:1102.000C: unknown main item tag 0x0 [ 151.378818][ T29] hid-steam 0003:28DE:1102.000C: hidraw1: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.1-1/input0 [ 151.446353][ T29] usb 6-1: USB disconnect, device number 23 [ 151.497986][T10149] fido_id[10149]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/6-1/report_descriptor': No such file or directory [ 152.225790][T10158] gfs2: not a GFS2 filesystem [ 152.409455][ T29] hid-steam 0003:28DE:1102.000B: Steam Controller 'XXXXXXXXXX' disconnected [ 153.107739][T10169] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1157'. [ 153.112252][T10169] smc: net device bond0 applied user defined pnetid SYZ0 [ 153.279975][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 153.279992][ T40] audit: type=1400 audit(1766589955.781:1404): avc: denied { setopt } for pid=10172 comm="syz.1.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.288622][ T40] audit: type=1400 audit(1766589955.781:1405): avc: denied { create } for pid=10172 comm="syz.1.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 153.458430][ T40] audit: type=1400 audit(1766589956.001:1406): avc: denied { create } for pid=10172 comm="syz.1.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 153.478455][ T40] audit: type=1400 audit(1766589956.011:1407): avc: denied { perfmon } for pid=10172 comm="syz.1.1159" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 153.485736][ T40] audit: type=1400 audit(1766589956.011:1408): avc: denied { prog_run } for pid=10172 comm="syz.1.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 153.523113][ T40] audit: type=1400 audit(1766589956.071:1409): avc: denied { read write } for pid=10172 comm="syz.1.1159" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 153.650059][ T40] audit: type=1400 audit(1766589956.071:1410): avc: denied { open } for pid=10172 comm="syz.1.1159" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 153.660134][ T40] audit: type=1400 audit(1766589956.081:1411): avc: denied { allowed } for pid=10172 comm="syz.1.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 153.690627][ T40] audit: type=1400 audit(1766589956.241:1412): avc: denied { read write } for pid=10181 comm="syz.4.1163" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.706618][ T40] audit: type=1400 audit(1766589956.241:1413): avc: denied { open } for pid=10181 comm="syz.4.1163" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.989332][ T5990] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 154.221283][ T5990] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 154.225146][ T5990] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 154.229422][ T5990] usb 9-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 154.232525][ T5990] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.237233][ T5990] usb 9-1: config 0 descriptor?? [ 154.262738][T10182] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 154.520536][ T5990] usbhid 9-1:0.0: can't add hid device: -71 [ 154.522675][ T5990] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 154.540538][ T5990] usb 9-1: USB disconnect, device number 12 [ 155.283614][ T5990] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 155.842891][T10230] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input25 [ 156.059959][ T5990] usb 9-1: Using ep0 maxpacket: 32 [ 156.064352][ T5990] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 156.069353][ T5990] usb 9-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 156.072615][ T5990] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.097386][ T5990] usb 9-1: config 0 descriptor?? [ 156.531341][ T5990] hid-multitouch 0003:0EEF:72C4.000D: reserved main item tag 0xd [ 156.544662][ T5990] hid-multitouch 0003:0EEF:72C4.000D: hidraw1: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 156.836341][ T53] usb 9-1: USB disconnect, device number 13 [ 157.478052][T10270] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1184'. [ 157.482789][T10270] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1184'. [ 157.485935][T10270] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1184'. [ 157.488950][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1184'. [ 157.873584][T10283] tipc: Started in network mode [ 157.875428][T10283] tipc: Node identity ac1414aa, cluster identity 4711 [ 157.878779][T10283] tipc: Enabled bearer , priority 10 [ 157.881754][T10283] tipc: Enabled bearer , priority 0 [ 158.322296][ T40] kauditd_printk_skb: 90 callbacks suppressed [ 158.322307][ T40] audit: type=1400 audit(1766589960.871:1504): avc: denied { create } for pid=10288 comm="syz.4.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 158.385582][ T40] audit: type=1400 audit(1766589960.931:1505): avc: denied { allowed } for pid=10288 comm="syz.4.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 158.399455][ T40] audit: type=1400 audit(1766589960.941:1506): avc: denied { create } for pid=10288 comm="syz.4.1190" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 158.409371][ T40] audit: type=1400 audit(1766589960.941:1507): avc: denied { map } for pid=10288 comm="syz.4.1190" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 158.417417][ T40] audit: type=1400 audit(1766589960.941:1508): avc: denied { read write } for pid=10288 comm="syz.4.1190" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35952 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 158.634190][ T40] audit: type=1400 audit(1766589961.181:1509): avc: denied { ioctl } for pid=10293 comm="syz.5.1192" path="socket:[32623]" dev="sockfs" ino=32623 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 158.660150][ T40] audit: type=1400 audit(1766589961.211:1510): avc: denied { create } for pid=10297 comm="syz.5.1194" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 158.666987][ T40] audit: type=1400 audit(1766589961.211:1511): avc: denied { read write } for pid=10297 comm="syz.5.1194" name="file0" dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 158.667014][ T40] audit: type=1400 audit(1766589961.211:1512): avc: denied { open } for pid=10297 comm="syz.5.1194" path="/152/file0" dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 158.716632][ T40] audit: type=1400 audit(1766589961.261:1513): avc: denied { unlink } for pid=8046 comm="syz-executor" name="file0" dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 158.879255][ T5990] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 159.021120][ T6003] tipc: Node number set to 2886997162 [ 159.069155][ T5990] usb 9-1: Using ep0 maxpacket: 16 [ 159.790138][ T5990] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.793732][ T5990] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.797021][ T5990] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.809700][ T5990] usb 9-1: config 1 interface 0 has no altsetting 0 [ 159.823647][ T5990] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 159.826859][ T5990] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.835031][ T5990] usb 9-1: Product: syz [ 159.836522][ T5990] usb 9-1: Manufacturer: syz [ 159.838076][ T5990] usb 9-1: SerialNumber: syz [ 159.953129][T10313] netlink: 'syz.5.1198': attribute type 10 has an invalid length. [ 159.987731][T10313] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 160.139598][ T5990] usblp 9-1:1.0: usblp1: USB Unidirectional printer dev 14 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 160.793122][T10325] IPVS: ip_vs_add_dest(): server weight less than zero [ 161.451053][T10347] overlayfs: failed to clone lowerpath [ 161.665708][T10356] input: syz1 as /devices/virtual/input/input26 [ 161.810446][ T5990] usb 9-1: USB disconnect, device number 14 [ 161.815537][ T5990] usblp1: removed [ 162.441240][ T5298] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 163.919621][ T40] kauditd_printk_skb: 64 callbacks suppressed [ 163.920058][ T40] audit: type=1400 audit(1766589966.191:1578): avc: denied { create } for pid=10400 comm="syz.3.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 163.930322][ T40] audit: type=1400 audit(1766589966.211:1579): avc: denied { map_create } for pid=10402 comm="syz.5.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 163.936723][ T40] audit: type=1400 audit(1766589966.211:1580): avc: denied { map_read map_write } for pid=10402 comm="syz.5.1231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 163.943879][ T40] audit: type=1400 audit(1766589966.301:1581): avc: denied { setopt } for pid=10400 comm="syz.3.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 164.048245][ T40] audit: type=1400 audit(1766589966.591:1582): avc: denied { read } for pid=10410 comm="syz.4.1235" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 164.100254][ T40] audit: type=1400 audit(1766589966.591:1583): avc: denied { open } for pid=10410 comm="syz.4.1235" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 164.126424][T10415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.135210][T10415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.137818][ T40] audit: type=1400 audit(1766589966.681:1584): avc: denied { write } for pid=10412 comm="syz.1.1232" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 164.156313][ T40] audit: type=1400 audit(1766589966.701:1585): avc: denied { create } for pid=10416 comm="syz.4.1236" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 164.167133][ T40] audit: type=1400 audit(1766589966.711:1586): avc: denied { ioctl } for pid=10416 comm="syz.4.1236" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=35139 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 164.727324][ T40] audit: type=1400 audit(1766589967.271:1587): avc: denied { sqpoll } for pid=10423 comm="syz.5.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 167.164771][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1250'. [ 168.172070][T10500] syzkaller0: entered promiscuous mode [ 168.267655][T10506] netlink: 160 bytes leftover after parsing attributes in process `syz.4.1255'. [ 168.564298][T10517] can0: slcan on ttyS3. [ 169.209280][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 169.209368][ T40] audit: type=1400 audit(1766589971.101:1613): avc: denied { create } for pid=10505 comm="syz.1.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.251838][ T40] audit: type=1400 audit(1766589971.601:1614): avc: denied { connect } for pid=10511 comm="syz.3.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.285348][ T40] audit: type=1400 audit(1766589971.601:1615): avc: denied { write } for pid=10511 comm="syz.3.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 169.313689][ T40] audit: type=1400 audit(1766589971.621:1616): avc: denied { sys_module } for pid=10511 comm="syz.3.1258" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 169.349519][ T40] audit: type=1400 audit(1766589971.761:1617): avc: denied { create } for pid=10518 comm="syz.4.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 169.392756][ T40] audit: type=1400 audit(1766589971.761:1618): avc: denied { write } for pid=10518 comm="syz.4.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 169.419738][ T40] audit: type=1400 audit(1766589971.761:1619): avc: denied { read } for pid=10518 comm="syz.4.1259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 169.829375][ T40] audit: type=1400 audit(1766589972.051:1620): avc: denied { read } for pid=5649 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 169.880708][T10505] can0 (unregistered): slcan off ttyS3. [ 170.008493][ T40] audit: type=1400 audit(1766589972.481:1621): avc: denied { prog_load } for pid=10531 comm="syz.4.1263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 170.073745][ T40] audit: type=1400 audit(1766589972.591:1622): avc: denied { create } for pid=10538 comm="syz.1.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 171.446558][T10563] netlink: 'syz.3.1269': attribute type 1 has an invalid length. [ 172.086864][T10577] netlink: 'syz.5.1274': attribute type 13 has an invalid length. [ 172.127716][T10577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.215800][T10574] futex_wake_op: syz.1.1273 tries to shift op by -1; fix this program [ 172.592788][T10587] 9p: Bad value for 'rfdno' [ 172.613954][T10582] usb usb8: usbfs: process 10582 (syz.1.1273) did not claim interface 12 before use [ 172.618094][T10582] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1273'. [ 174.145487][T10630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.456702][T10636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1291'. [ 174.628491][ T40] kauditd_printk_skb: 66 callbacks suppressed [ 174.628503][ T40] audit: type=1400 audit(1766589977.171:1689): avc: denied { read } for pid=10641 comm="syz.4.1293" dev="nsfs" ino=4026533519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 174.641331][ T40] audit: type=1400 audit(1766589977.181:1690): avc: denied { open } for pid=10641 comm="syz.4.1293" path="net:[4026533519]" dev="nsfs" ino=4026533519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 174.658957][ T40] audit: type=1400 audit(1766589977.191:1691): avc: denied { create } for pid=10641 comm="syz.4.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 174.667954][ T40] audit: type=1400 audit(1766589977.201:1692): avc: denied { setopt } for pid=10641 comm="syz.4.1293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 174.817769][ T40] audit: type=1400 audit(1766589977.361:1693): avc: denied { create } for pid=10645 comm="syz.4.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 174.892027][ T40] audit: type=1400 audit(1766589977.441:1694): avc: denied { create } for pid=10649 comm="syz.5.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 174.904376][T10650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.904515][ T40] audit: type=1400 audit(1766589977.451:1695): avc: denied { read write } for pid=10649 comm="syz.5.1297" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.908461][T10650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.923626][ T40] audit: type=1400 audit(1766589977.451:1696): avc: denied { open } for pid=10649 comm="syz.5.1297" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.940632][ T40] audit: type=1400 audit(1766589977.451:1697): avc: denied { ioctl } for pid=10649 comm="syz.5.1297" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 174.968469][ T40] audit: type=1400 audit(1766589977.511:1698): avc: denied { execmem } for pid=10649 comm="syz.5.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 177.538363][T10679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.552113][T10679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.090189][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 180.090200][ T40] audit: type=1400 audit(1766589982.641:1726): avc: denied { write } for pid=10723 comm="syz.3.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 180.148603][ T40] audit: type=1400 audit(1766589982.691:1727): avc: denied { relabelfrom } for pid=10722 comm="syz.4.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 180.156558][ T40] audit: type=1400 audit(1766589982.711:1728): avc: denied { relabelto } for pid=10722 comm="syz.4.1321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 180.544165][ T40] audit: type=1400 audit(1766589983.091:1729): avc: denied { map_create } for pid=10729 comm="syz.4.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.615277][ T40] audit: type=1400 audit(1766589983.091:1730): avc: denied { map_read map_write } for pid=10729 comm="syz.4.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.678728][ T40] audit: type=1400 audit(1766589983.091:1731): avc: denied { prog_load } for pid=10729 comm="syz.4.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.686065][ T40] audit: type=1400 audit(1766589983.091:1732): avc: denied { prog_run } for pid=10729 comm="syz.4.1324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 180.858895][ T40] audit: type=1400 audit(1766589983.401:1733): avc: denied { read write } for pid=10737 comm="syz.5.1327" name="video2" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 180.867560][ T40] audit: type=1400 audit(1766589983.401:1734): avc: denied { open } for pid=10737 comm="syz.5.1327" path="/dev/video2" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 180.973873][ T40] audit: type=1400 audit(1766589983.521:1735): avc: denied { create } for pid=10733 comm="syz.1.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 184.201550][T10775] netlink: 29868 bytes leftover after parsing attributes in process `syz.3.1337'. [ 185.506198][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 185.506209][ T40] audit: type=1400 audit(1766589988.051:1747): avc: denied { read } for pid=10788 comm="syz.5.1343" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 185.524595][ T40] audit: type=1400 audit(1766589988.051:1748): avc: denied { open } for pid=10788 comm="syz.5.1343" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 185.583997][ T40] audit: type=1400 audit(1766589988.131:1749): avc: denied { mount } for pid=10788 comm="syz.5.1343" name="/" dev="rpc_pipefs" ino=35399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 185.598900][ T40] audit: type=1400 audit(1766589988.141:1750): avc: denied { create } for pid=10799 comm="syz.3.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.633345][T10800] bond2: left promiscuous mode [ 185.635327][T10800] bond3: left promiscuous mode [ 185.638624][T10800] bond5: left promiscuous mode [ 185.641484][T10800] erspan1: left promiscuous mode [ 185.643358][T10800] geneve3: left promiscuous mode [ 185.657977][ T40] audit: type=1400 audit(1766589988.191:1751): avc: denied { getopt } for pid=10799 comm="syz.3.1347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 185.879976][ T40] audit: type=1400 audit(1766589988.431:1752): avc: denied { create } for pid=10805 comm="syz.3.1348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 185.887711][ T40] audit: type=1400 audit(1766589988.431:1753): avc: denied { ioctl } for pid=10805 comm="syz.3.1348" path="socket:[35422]" dev="sockfs" ino=35422 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 185.986753][ T40] audit: type=1400 audit(1766589988.531:1754): avc: denied { create } for pid=10807 comm="syz.3.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 185.998809][ T40] audit: type=1400 audit(1766589988.531:1755): avc: denied { setopt } for pid=10807 comm="syz.3.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 186.013278][ T40] audit: type=1400 audit(1766589988.531:1756): avc: denied { create } for pid=10807 comm="syz.3.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 187.129993][T10818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.133062][T10818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.250252][ T5298] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 189.520541][ T53] libceph: connect (1)[c::]:6789 error -97 [ 189.524025][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 189.550880][T10865] ceph: No mds server is up or the cluster is laggy [ 189.564381][T10868] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 191.100156][T10890] tmpfs: Bad value for 'mpol' [ 191.319389][ T5952] Bluetooth: hci2: command 0x0c1a tx timeout [ 191.381714][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 191.381856][ T40] audit: type=1400 audit(1766589993.121:1787): avc: denied { execmem } for pid=10881 comm="syz.4.1369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 191.391001][ T40] audit: type=1400 audit(1766589993.361:1788): avc: denied { create } for pid=10884 comm="syz.1.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.401744][T10895] binder: BINDER_SET_CONTEXT_MGR already set [ 191.403756][ T40] audit: type=1400 audit(1766589993.361:1789): avc: denied { write } for pid=10884 comm="syz.1.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.404003][T10895] binder: 10881:10895 ioctl 4018620d 200000000300 returned -16 [ 191.410793][ T40] audit: type=1400 audit(1766589993.361:1790): avc: denied { read } for pid=10884 comm="syz.1.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.421272][ T40] audit: type=1400 audit(1766589993.361:1791): avc: denied { create } for pid=10884 comm="syz.1.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 191.429161][ T40] audit: type=1400 audit(1766589993.371:1792): avc: denied { write } for pid=10884 comm="syz.1.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 191.437426][ T40] audit: type=1400 audit(1766589993.421:1793): avc: denied { ioctl } for pid=10884 comm="syz.1.1370" path="socket:[35475]" dev="sockfs" ino=35475 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 191.447308][ T40] audit: type=1400 audit(1766589993.661:1794): avc: denied { write } for pid=10887 comm="syz.5.1371" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 191.456375][ T40] audit: type=1400 audit(1766589993.661:1795): avc: denied { open } for pid=10887 comm="syz.5.1371" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 191.807172][ T40] audit: type=1400 audit(1766589994.351:1796): avc: denied { read write } for pid=5937 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.082925][T10904] xt_CT: You must specify a L4 protocol and not use inversions on it [ 193.399264][ T5952] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.408151][T10920] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 196.359211][ T5990] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 196.562829][ T5990] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.566626][ T5990] usb 6-1: config 0 has no interfaces? [ 196.568548][ T5990] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 196.577675][ T5990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.585273][ T5990] usb 6-1: config 0 descriptor?? [ 196.674687][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 196.674698][ T40] audit: type=1400 audit(1766589999.221:1819): avc: denied { prog_load } for pid=10968 comm="syz.3.1392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 196.710030][ T40] audit: type=1400 audit(1766589999.251:1820): avc: denied { relabelfrom } for pid=10972 comm="syz.4.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 196.737176][ T40] audit: type=1400 audit(1766589999.251:1821): avc: denied { relabelto } for pid=10972 comm="syz.4.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 196.814594][ T40] audit: type=1400 audit(1766589999.361:1822): avc: denied { map_create } for pid=10974 comm="syz.4.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 196.826333][ T40] audit: type=1400 audit(1766589999.361:1823): avc: denied { map_read map_write } for pid=10974 comm="syz.4.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 196.849529][ T40] audit: type=1400 audit(1766589999.361:1824): avc: denied { prog_run } for pid=10974 comm="syz.4.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 196.856306][ T40] audit: type=1400 audit(1766589999.361:1825): avc: denied { allowed } for pid=10974 comm="syz.4.1394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 197.167584][ T40] audit: type=1400 audit(1766589999.671:1826): avc: denied { read } for pid=10980 comm="syz.5.1397" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 197.279668][ T40] audit: type=1400 audit(1766589999.671:1827): avc: denied { open } for pid=10980 comm="syz.5.1397" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 197.287446][ T40] audit: type=1400 audit(1766589999.721:1828): avc: denied { create } for pid=10980 comm="syz.5.1397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 198.306354][ T5990] IPVS: starting estimator thread 0... [ 198.409168][T10997] IPVS: using max 45 ests per chain, 108000 per kthread [ 199.163309][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.166103][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.267007][ T53] usb 6-1: USB disconnect, device number 24 [ 201.433687][T11047] netlink: 14316 bytes leftover after parsing attributes in process `syz.1.1415'. [ 201.437500][T11047] netlink: 14316 bytes leftover after parsing attributes in process `syz.1.1415'. [ 201.701552][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 201.701562][ T40] audit: type=1400 audit(1766590004.251:1869): avc: denied { unmount } for pid=7205 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 201.710179][ T40] audit: type=1400 audit(1766590004.261:1870): avc: denied { read } for pid=11050 comm="syz.3.1417" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=37941 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 201.825825][ T40] audit: type=1400 audit(1766590004.341:1871): avc: denied { module_request } for pid=11052 comm="syz.1.1418" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 201.838734][T11059] Cannot find del_set index 2 as target [ 201.852354][ T40] audit: type=1400 audit(1766590004.401:1872): avc: denied { read } for pid=11052 comm="syz.1.1418" name="v4l-subdev0" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.860489][ T40] audit: type=1400 audit(1766590004.401:1873): avc: denied { open } for pid=11052 comm="syz.1.1418" path="/dev/v4l-subdev0" dev="devtmpfs" ino=965 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 201.868965][ T40] audit: type=1400 audit(1766590004.411:1874): avc: denied { ioctl } for pid=11052 comm="syz.1.1418" path="/dev/v4l-subdev0" dev="devtmpfs" ino=965 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 202.147596][ T40] audit: type=1400 audit(1766590004.511:1875): avc: denied { create } for pid=11056 comm="syz.4.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 202.154283][ T40] audit: type=1400 audit(1766590004.511:1876): avc: denied { write } for pid=11056 comm="syz.4.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 202.161279][ T40] audit: type=1400 audit(1766590004.711:1877): avc: denied { execmem } for pid=11064 comm="syz.3.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 202.513444][ T40] audit: type=1400 audit(1766590005.061:1878): avc: denied { bind } for pid=11069 comm="syz.1.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 203.749528][ T5298] Bluetooth: hci4: link tx timeout [ 203.751714][ T5298] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 205.170080][T11105] futex_wake_op: syz.4.1432 tries to shift op by -1; fix this program [ 205.799158][ T5952] Bluetooth: hci4: command 0x0406 tx timeout [ 206.020493][T11126] xt_socket: unknown flags 0x4c [ 206.569757][T11134] fuse: Unknown parameter '0xffffffffffffffff' [ 206.840655][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 206.840885][ T40] audit: type=1400 audit(1766590009.391:1913): avc: denied { read } for pid=11135 comm="syz.4.1444" dev="nsfs" ino=4026533519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 206.953538][ T40] audit: type=1400 audit(1766590009.401:1914): avc: denied { open } for pid=11135 comm="syz.4.1444" path="net:[4026533519]" dev="nsfs" ino=4026533519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 206.977716][ T40] audit: type=1400 audit(1766590009.401:1915): avc: denied { create } for pid=11135 comm="syz.4.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 207.131692][ T40] audit: type=1400 audit(1766590009.401:1916): avc: denied { shutdown } for pid=11135 comm="syz.4.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 207.280376][ T40] audit: type=1400 audit(1766590009.591:1917): avc: denied { bpf } for pid=11135 comm="syz.4.1444" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 207.297695][ T40] audit: type=1400 audit(1766590009.601:1918): avc: denied { create } for pid=11135 comm="syz.4.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 208.022128][ T40] audit: type=1400 audit(1766590010.571:1919): avc: denied { create } for pid=11147 comm="syz.4.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.030579][ T40] audit: type=1400 audit(1766590010.581:1920): avc: denied { read } for pid=11147 comm="syz.4.1446" path="socket:[36447]" dev="sockfs" ino=36447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 208.277027][ T40] audit: type=1400 audit(1766590010.821:1921): avc: denied { create } for pid=11152 comm="syz.3.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 208.284059][ T40] audit: type=1400 audit(1766590010.821:1922): avc: denied { perfmon } for pid=11152 comm="syz.3.1448" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 209.359551][ T6003] hid-generic 0003:0004:0000.000E: unknown main item tag 0x7 [ 209.362003][ T6003] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 209.364483][ T6003] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 209.366969][ T6003] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 209.370042][ T6003] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 209.372746][ T6003] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 209.375617][ T6003] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 209.378218][ T6003] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 209.381804][ T6003] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 209.384404][ T6003] hid-generic 0003:0004:0000.000E: unknown main item tag 0x0 [ 209.394412][ T6003] hid-generic 0003:0004:0000.000E: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 209.443357][T11191] fido_id[11191]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 210.400020][T11210] IPVS: rr: FWM 3 0x00000003 - no destination available [ 211.915347][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 211.915365][ T40] audit: type=1400 audit(1766590014.461:1954): avc: denied { module_request } for pid=11236 comm="syz.4.1466" kmod="net-pf-10-proto-9-type-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 212.002453][ T40] audit: type=1400 audit(1766590014.551:1955): avc: denied { create } for pid=11236 comm="syz.4.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 212.009962][ T40] audit: type=1400 audit(1766590014.561:1956): avc: denied { bind } for pid=11236 comm="syz.4.1466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 212.016670][ T40] audit: type=1400 audit(1766590014.561:1957): avc: denied { name_bind } for pid=11236 comm="syz.4.1466" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 212.023928][ T40] audit: type=1400 audit(1766590014.561:1958): avc: denied { node_bind } for pid=11236 comm="syz.4.1466" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 212.177405][ T40] audit: type=1400 audit(1766590014.721:1959): avc: denied { ioctl } for pid=11236 comm="syz.4.1466" path="socket:[37258]" dev="sockfs" ino=37258 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 212.190342][T11241] tipc: Started in network mode [ 212.192406][T11241] tipc: Node identity ac1414aa, cluster identity 4711 [ 212.195983][T11241] tipc: Enabled bearer , priority 10 [ 212.198896][T11241] tipc: Enabled bearer , priority 0 [ 212.204287][ T40] audit: type=1400 audit(1766590014.751:1960): avc: denied { read write } for pid=8046 comm="syz-executor" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 212.217066][ T40] audit: type=1400 audit(1766590014.751:1961): avc: denied { open } for pid=8046 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 212.228193][ T40] audit: type=1400 audit(1766590014.751:1962): avc: denied { ioctl } for pid=8046 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=663 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 212.591129][ T40] audit: type=1400 audit(1766590015.121:1963): avc: denied { create } for pid=11252 comm="syz.1.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 213.785979][ T6850] tipc: Node number set to 2886997162 [ 214.100281][T11288] netlink: 'syz.3.1481': attribute type 5 has an invalid length. [ 214.297675][T11293] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 216.943672][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 216.943690][ T40] audit: type=1400 audit(1766590019.481:2009): avc: denied { bind } for pid=11333 comm="syz.1.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 217.243207][ T40] audit: type=1400 audit(1766590019.481:2010): avc: denied { name_bind } for pid=11333 comm="syz.1.1497" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 217.259480][ T40] audit: type=1400 audit(1766590019.481:2011): avc: denied { write } for pid=11333 comm="syz.1.1497" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 217.268395][ T40] audit: type=1400 audit(1766590019.481:2012): avc: denied { connect } for pid=11333 comm="syz.1.1497" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 217.275647][ T40] audit: type=1400 audit(1766590019.481:2013): avc: denied { name_connect } for pid=11333 comm="syz.1.1497" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 217.282735][ T40] audit: type=1400 audit(1766590019.621:2014): avc: denied { read } for pid=11336 comm="syz.4.1498" dev="nsfs" ino=4026533519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 217.290073][ T40] audit: type=1400 audit(1766590019.621:2015): avc: denied { open } for pid=11336 comm="syz.4.1498" path="net:[4026533519]" dev="nsfs" ino=4026533519 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 217.297669][ T40] audit: type=1400 audit(1766590019.621:2016): avc: denied { create } for pid=11336 comm="syz.4.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 217.305365][ T40] audit: type=1400 audit(1766590019.621:2017): avc: denied { bind } for pid=11336 comm="syz.4.1498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 217.313436][ T40] audit: type=1400 audit(1766590019.621:2018): avc: denied { write } for pid=11336 comm="syz.4.1498" path="socket:[38099]" dev="sockfs" ino=38099 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 217.370298][T11347] netlink: 'syz.3.1500': attribute type 11 has an invalid length. [ 217.373470][T11347] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1500'. [ 217.379152][T11347] netlink: 'syz.3.1500': attribute type 11 has an invalid length. [ 217.382470][T11347] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1500'. [ 217.386750][T11347] netlink: 'syz.3.1500': attribute type 11 has an invalid length. [ 217.391603][T11347] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1500'. [ 220.384185][T11404] wireguard0: entered promiscuous mode [ 220.396056][T11404] wireguard0: entered allmulticast mode [ 222.321848][ T5298] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 223.147720][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 223.147733][ T40] audit: type=1400 audit(1766590025.671:2059): avc: denied { bind } for pid=11422 comm="syz.5.1528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 223.299742][ T40] audit: type=1400 audit(1766590025.851:2060): avc: denied { read write } for pid=11431 comm="syz.4.1532" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 223.330159][ T40] audit: type=1400 audit(1766590025.851:2061): avc: denied { open } for pid=11431 comm="syz.4.1532" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 223.353268][ T40] audit: type=1400 audit(1766590025.861:2062): avc: denied { create } for pid=11431 comm="syz.4.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 224.101582][ T40] audit: type=1400 audit(1766590026.381:2063): avc: denied { node_bind } for pid=11440 comm="syz.5.1534" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 224.806091][ T34] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 224.860141][ T40] audit: type=1400 audit(1766590027.411:2064): avc: denied { create } for pid=11449 comm="syz.5.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 224.867584][ T40] audit: type=1400 audit(1766590027.411:2065): avc: denied { setopt } for pid=11449 comm="syz.5.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 224.999218][ T60] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 225.140686][ T34] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.144353][ T34] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 225.147636][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.149205][ T60] usb 6-1: device descriptor read/64, error -71 [ 225.159497][ T34] usb 9-1: config 0 descriptor?? [ 225.173959][ T34] pwc: Askey VC010 type 2 USB webcam detected. [ 225.409777][ T60] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 225.567403][ T34] pwc: recv_control_msg error -32 req 02 val 2b00 [ 225.577442][ T34] pwc: recv_control_msg error -32 req 02 val 2700 [ 225.580509][ T34] pwc: recv_control_msg error -32 req 02 val 2c00 [ 225.583239][ T34] pwc: recv_control_msg error -32 req 04 val 1000 [ 225.589218][ T34] pwc: recv_control_msg error -32 req 04 val 1300 [ 225.601402][ T40] audit: type=1400 audit(1766590028.151:2066): avc: denied { create } for pid=11460 comm="syz.3.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 225.605831][ T34] pwc: recv_control_msg error -32 req 04 val 1400 [ 225.605955][ T60] usb 6-1: device descriptor read/64, error -71 [ 225.618221][ T34] pwc: recv_control_msg error -32 req 02 val 2000 [ 225.620163][ T40] audit: type=1400 audit(1766590028.151:2067): avc: denied { allowed } for pid=11460 comm="syz.3.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 225.702406][ T34] pwc: recv_control_msg error -32 req 02 val 2100 [ 225.706648][ T34] pwc: recv_control_msg error -32 req 04 val 1500 [ 225.710238][ T34] pwc: recv_control_msg error -32 req 02 val 2500 [ 225.714150][ T34] pwc: recv_control_msg error -32 req 02 val 2400 [ 225.717001][ T34] pwc: recv_control_msg error -32 req 02 val 2600 [ 225.719685][ T60] usb usb6-port1: attempt power cycle [ 225.719949][ T34] pwc: recv_control_msg error -32 req 02 val 2900 [ 225.725043][ T34] pwc: recv_control_msg error -32 req 02 val 2800 [ 225.728171][ T34] pwc: recv_control_msg error -32 req 04 val 1100 [ 225.762435][ T34] pwc: Registered as video103. [ 225.770157][ T34] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb9/9-1/input/input27 [ 225.799403][ T40] audit: type=1400 audit(1766590028.351:2068): avc: denied { read } for pid=5332 comm="acpid" name="event5" dev="devtmpfs" ino=3209 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 225.958539][ T34] usb 9-1: USB disconnect, device number 15 [ 226.079176][ T60] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 226.112202][ T60] usb 6-1: device descriptor read/8, error -71 [ 226.401587][T11480] netlink: 'syz.3.1545': attribute type 13 has an invalid length. [ 226.449195][ T60] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 226.491339][ T60] usb 6-1: device descriptor read/8, error -71 [ 226.613867][ T60] usb usb6-port1: unable to enumerate USB device [ 227.190676][T11500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.209189][T11500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.219171][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 228.219770][ T40] audit: type=1400 audit(1766590030.441:2091): avc: denied { create } for pid=11505 comm="syz.3.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 228.258898][ T40] audit: type=1400 audit(1766590030.581:2092): avc: denied { setopt } for pid=11505 comm="syz.3.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 228.303955][ T40] audit: type=1400 audit(1766590030.581:2093): avc: denied { accept } for pid=11505 comm="syz.3.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 228.341395][ T40] audit: type=1400 audit(1766590030.611:2094): avc: denied { read write } for pid=11508 comm="syz.5.1556" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 228.398151][ T40] audit: type=1400 audit(1766590030.621:2095): avc: denied { open } for pid=11508 comm="syz.5.1556" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 228.637620][ T40] audit: type=1400 audit(1766590030.621:2096): avc: denied { ioctl } for pid=11508 comm="syz.5.1556" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 228.669200][ T40] audit: type=1400 audit(1766590030.651:2097): avc: denied { bind } for pid=11505 comm="syz.3.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 228.676050][ T40] audit: type=1400 audit(1766590030.691:2098): avc: denied { write } for pid=11508 comm="syz.5.1556" name="ip6_tables_matches" dev="proc" ino=4026533424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 228.712364][ T40] audit: type=1400 audit(1766590031.261:2099): avc: denied { module_request } for pid=11517 comm="syz.3.1558" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 228.725990][ T40] audit: type=1400 audit(1766590031.271:2100): avc: denied { create } for pid=11520 comm="syz.1.1557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 228.799367][T11522] tipc: Enabling of bearer rejected, failed to enable media [ 233.262708][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 233.262800][ T40] audit: type=1400 audit(1766590035.811:2145): avc: denied { read } for pid=11574 comm="syz.5.1577" dev="nsfs" ino=4026533323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 233.280242][ T40] audit: type=1400 audit(1766590035.811:2146): avc: denied { open } for pid=11574 comm="syz.5.1577" path="net:[4026533323]" dev="nsfs" ino=4026533323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 233.288078][ T40] audit: type=1400 audit(1766590035.811:2147): avc: denied { create } for pid=11574 comm="syz.5.1577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 233.295760][ T40] audit: type=1400 audit(1766590035.821:2148): avc: denied { ioctl } for pid=11574 comm="syz.5.1577" path="socket:[36754]" dev="sockfs" ino=36754 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 233.781990][ T40] audit: type=1400 audit(1766590036.331:2149): avc: denied { create } for pid=11571 comm="syz.1.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 233.801602][ T40] audit: type=1400 audit(1766590036.351:2150): avc: denied { connect } for pid=11571 comm="syz.1.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 233.860073][ T40] audit: type=1400 audit(1766590036.411:2151): avc: denied { listen } for pid=11571 comm="syz.1.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 233.909767][ T40] audit: type=1400 audit(1766590036.411:2152): avc: denied { accept } for pid=11571 comm="syz.1.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 234.029199][ T40] audit: type=1400 audit(1766590036.531:2153): avc: denied { node_bind } for pid=11590 comm="syz.3.1580" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 234.042099][ T40] audit: type=1400 audit(1766590036.541:2154): avc: denied { create } for pid=11583 comm="syz.4.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 234.450887][ T29] kernel write not supported for file /input/mice (pid: 29 comm: kworker/1:0) [ 234.620152][T11602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1583'. [ 234.623729][T11602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1583'. [ 235.734926][T11631] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1594'. [ 236.316403][T11649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.320769][T11649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.682277][T11655] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 237.442899][T11670] netlink: 'syz.4.1605': attribute type 4 has an invalid length. [ 238.308185][ T40] kauditd_printk_skb: 82 callbacks suppressed [ 238.308231][ T40] audit: type=1400 audit(1766590040.851:2237): avc: denied { create } for pid=11690 comm="syz.3.1618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 238.337477][ T40] audit: type=1400 audit(1766590040.861:2238): avc: denied { setopt } for pid=11690 comm="syz.3.1618" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 238.350127][ T40] audit: type=1400 audit(1766590040.881:2239): avc: denied { create } for pid=11692 comm="syz.1.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 238.358027][ T40] audit: type=1400 audit(1766590040.891:2240): avc: denied { prog_run } for pid=11692 comm="syz.1.1617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 238.365086][ T40] audit: type=1400 audit(1766590040.891:2241): avc: denied { read write } for pid=11692 comm="syz.1.1617" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 238.373178][ T40] audit: type=1400 audit(1766590040.891:2242): avc: denied { open } for pid=11692 comm="syz.1.1617" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 238.682761][ T40] audit: type=1400 audit(1766590041.231:2243): avc: denied { write } for pid=11708 comm="syz.5.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 238.683714][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1621'. [ 238.692923][ T40] audit: type=1400 audit(1766590041.231:2244): avc: denied { mount } for pid=11708 comm="syz.5.1621" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 238.826770][ T40] audit: type=1400 audit(1766590041.271:2245): avc: denied { create } for pid=11710 comm="syz.4.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 238.833836][T11717] netlink: 'syz.5.1623': attribute type 1 has an invalid length. [ 238.837263][ T40] audit: type=1400 audit(1766590041.381:2246): avc: denied { mounton } for pid=11716 comm="syz.5.1623" path="/248/file0" dev="tmpfs" ino=1324 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 239.089324][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1626'. [ 239.412161][T11747] netlink: 'syz.3.1633': attribute type 1 has an invalid length. [ 239.662001][T11759] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.749126][ T6785] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 239.757253][T11770] netlink: 'syz.1.1640': attribute type 1 has an invalid length. [ 239.761065][T11770] netlink: 'syz.1.1640': attribute type 3 has an invalid length. [ 239.764475][T11770] netlink: 'syz.1.1640': attribute type 3 has an invalid length. [ 239.893013][T11772] netlink: 'syz.1.1641': attribute type 1 has an invalid length. [ 239.897396][T11772] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 239.899343][ T6785] usb 9-1: Using ep0 maxpacket: 8 [ 239.902905][ T6785] usb 9-1: config 0 has an invalid interface number: 186 but max is 0 [ 239.909269][ T6785] usb 9-1: config 0 has no interface number 0 [ 239.911361][ T6785] usb 9-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 239.914966][ T6785] usb 9-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 239.918833][ T6785] usb 9-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 239.929594][ T6785] usb 9-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.949430][ T6785] usb 9-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 239.952442][ T6785] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.955044][ T6785] usb 9-1: Product: syz [ 239.956435][ T6785] usb 9-1: Manufacturer: syz [ 239.957959][ T6785] usb 9-1: SerialNumber: syz [ 239.967373][ T6785] usb 9-1: config 0 descriptor?? [ 240.181809][ T6785] iowarrior 9-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior1 [ 240.385204][ T60] usb 9-1: USB disconnect, device number 16 [ 240.909217][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1653'. [ 240.912909][T11818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1653'. [ 240.922302][T11818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1653'. [ 240.926211][T11818] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1653'. [ 241.106829][T11834] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 241.263579][T11843] netlink: 'syz.4.1660': attribute type 11 has an invalid length. [ 241.265378][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1661'. [ 241.353554][T11849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1663'. [ 241.413336][T11852] 9pnet_virtio: no channels available for device syz [ 241.632635][T11863] overlayfs: failed to resolve './file1': -2 [ 241.635477][ T5298] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 241.660328][T11860] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=11860 comm=syz.1.1665 [ 241.752467][T11872] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1668'. [ 241.759269][T11872] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1668'. [ 241.762346][T11872] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1668'. [ 241.765489][T11872] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1668'. [ 241.818517][T11866] block nbd4: shutting down sockets [ 242.097991][T11898] netlink: 'syz.1.1678': attribute type 1 has an invalid length. [ 242.101043][T11898] netlink: 'syz.1.1678': attribute type 4 has an invalid length. [ 242.106441][T11898] binder: BINDER_SET_CONTEXT_MGR already set [ 242.108511][T11898] binder: 11896:11898 ioctl 4018620d 200000000040 returned -16 [ 242.349317][ T6003] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 242.531819][ T6003] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 242.535498][ T6003] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 242.539142][ T6003] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 242.542249][ T6003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.549858][T11898] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 242.556548][ T6003] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 242.754831][ T34] usb 6-1: USB disconnect, device number 29 [ 242.766072][T11898] binder: 11896:11898 ioctl c0306201 200000000240 returned -11 [ 242.852457][T11929] netlink: 'syz.3.1688': attribute type 9 has an invalid length. [ 242.855075][T11929] netlink: 'syz.3.1688': attribute type 11 has an invalid length. [ 242.857700][T11929] netlink: 'syz.3.1688': attribute type 12 has an invalid length. [ 242.904253][T11939] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11939 comm=syz.5.1690 [ 242.970554][T11947] Mount JFS Failure: -5 [ 242.971968][T11947] jfs_mount failed w/return code = -5 [ 243.043521][T11947] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.046332][T11947] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.071234][T11947] tipc: Resetting bearer [ 243.101807][T11947] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.107324][T11947] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.153854][T11947] geneve2: left promiscuous mode [ 243.155616][T11947] geneve2: left allmulticast mode [ 243.177154][T10431] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.180517][T10431] netdevsim netdevsim5 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 243.183781][T10431] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.186740][T10431] netdevsim netdevsim5 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 243.215181][T10431] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.218487][T10431] netdevsim netdevsim5 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 243.221693][T10431] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.224687][T10431] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 243.320935][T11969] openvswitch: netlink: Flow actions attr not present in new flow. [ 243.324257][ T40] kauditd_printk_skb: 227 callbacks suppressed [ 243.324267][ T40] audit: type=1400 audit(1766590045.871:2474): avc: denied { getopt } for pid=11968 comm="syz.1.1701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 243.347168][ T40] audit: type=1400 audit(1766590045.891:2475): avc: denied { allowed } for pid=11972 comm="syz.4.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 243.359382][ T40] audit: type=1400 audit(1766590045.911:2476): avc: denied { ioctl } for pid=11974 comm="syz.1.1704" path="socket:[37855]" dev="sockfs" ino=37855 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 243.373501][ T40] audit: type=1400 audit(1766590045.921:2477): avc: denied { create } for pid=11972 comm="syz.4.1702" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 243.385102][ T40] audit: type=1400 audit(1766590045.921:2478): avc: denied { map } for pid=11972 comm="syz.4.1702" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 243.398008][ T40] audit: type=1400 audit(1766590045.921:2479): avc: denied { read write } for pid=11972 comm="syz.4.1702" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 243.411154][ T40] audit: type=1400 audit(1766590045.961:2480): avc: denied { execmem } for pid=11972 comm="syz.4.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 243.413756][T11975] 9p: Bad value for 'rfdno' [ 243.417441][ T40] audit: type=1400 audit(1766590045.961:2481): avc: denied { create } for pid=11972 comm="syz.4.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.425957][ T40] audit: type=1400 audit(1766590045.961:2482): avc: denied { getopt } for pid=11972 comm="syz.4.1702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.432828][ T40] audit: type=1400 audit(1766590045.961:2483): avc: denied { read write } for pid=11955 comm="syz.5.1696" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 243.465758][T11986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.480224][T11986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.482542][ T5298] Bluetooth: hci1: unexpected event for opcode 0x080f [ 243.550437][T11988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11988 comm=syz.1.1706 [ 243.555017][ T5298] Bluetooth: hci1: SCO packet for unknown connection handle 1948 [ 243.558203][T11989] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.567888][T11997] 9pnet_virtio: no channels available for device syz [ 243.568279][T11998] 9pnet_virtio: no channels available for device syz [ 243.579913][T11989] bridge_slave_0 (unregistering): left allmulticast mode [ 243.582674][T11989] bridge_slave_0 (unregistering): left promiscuous mode [ 243.585150][T11989] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.675192][T11998] netlink: 'syz.4.1710': attribute type 2 has an invalid length. [ 243.679145][T12003] 9pnet_virtio: no channels available for device syz [ 244.494914][T12047] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 244.558601][T12051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.657294][T12064] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 244.660329][T12064] overlayfs: overlapping lowerdir path [ 245.298377][T12096] syzkaller0: entered allmulticast mode [ 245.396253][T12094] tipc: Enabling of bearer rejected, failed to enable media [ 245.542329][T12119] ipt_ECN: cannot use operation on non-tcp rule [ 245.583676][T12124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=12124 comm=syz.4.1746 [ 245.899284][ T6785] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 245.957763][T12145] ceph: No mds server is up or the cluster is laggy [ 246.049164][ T6785] usb 6-1: Using ep0 maxpacket: 16 [ 246.053495][ T6785] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.057763][ T6785] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.064886][ T6785] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 246.070321][ T6785] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 246.073961][ T6785] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.080234][ T6785] usb 6-1: config 0 descriptor?? [ 246.236763][T12172] binder: 12171:12172 ioctl c0306201 200000000640 returned -22 [ 246.239555][T12172] binder: 12171:12172 ioctl c008561b 200000000240 returned -22 [ 246.250438][T12172] binder: 12171:12172 ioctl c0d05605 200000000300 returned -22 [ 246.253162][T12172] comedi comedi3: dt2817: I/O port conflict (0x9,5) [ 246.413826][ T5298] Bluetooth: hci4: unexpected event for opcode 0x1002 [ 246.442469][T12180] __nla_validate_parse: 112 callbacks suppressed [ 246.442482][T12180] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1763'. [ 246.447632][T12180] bridge_slave_1: left allmulticast mode [ 246.449537][T12180] bridge_slave_1: left promiscuous mode [ 246.451527][T12180] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.457425][T12180] bridge_slave_0: left allmulticast mode [ 246.459351][T12180] bridge_slave_0: left promiscuous mode [ 246.461346][T12180] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.488377][T12180] bond0: (slave bridge0): Releasing backup interface [ 246.491997][ T6785] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 246.494259][ T6785] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 246.495972][ T5298] Bluetooth: hci4: unexpected event for opcode 0x1002 [ 246.498713][ T6785] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 246.498731][ T6785] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 246.498744][ T6785] shield 0003:0955:7214.000F: unknown main item tag 0x0 [ 246.507009][ T6785] input: HID 0955:7214 Haptics as /devices/virtual/input/input29 [ 246.523835][ T6785] shield 0003:0955:7214.000F: Registered Thunderstrike controller [ 246.528197][ T6785] shield 0003:0955:7214.000F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 246.637637][T12187] IPVS: set_ctl: invalid protocol: 98 10.1.1.0:20002 [ 246.686582][T12190] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.1764'. [ 246.688144][T12189] program syz.4.1766 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.691479][T12130] random: crng reseeded on system resumption [ 246.707405][ T6785] usb 6-1: USB disconnect, device number 30 [ 246.713435][ T5990] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 246.717379][ T5990] shield 0003:0955:7214.000F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 246.725433][ T6785] ------------[ cut here ]------------ [ 246.727250][ T6785] workqueue: work disable count underflowed [ 246.729165][ T6785] WARNING: kernel/workqueue.c:4359 at enable_work+0x2ca/0x310, CPU#0: kworker/0:6/6785 [ 246.732296][ T6785] Modules linked in: [ 246.734150][ T6785] CPU: 0 UID: 0 PID: 6785 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.738618][ T6785] Tainted: [L]=SOFTLOCKUP [ 246.740421][ T6785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 246.744910][ T6785] Workqueue: usb_hub_wq hub_event [ 246.747018][ T6785] RIP: 0010:enable_work+0x2ca/0x310 [ 246.749305][ T6785] Code: ff e8 da 0d 3a 00 90 0f 0b 90 e9 b4 fe ff ff e8 cc 0d 3a 00 e8 17 29 f3 09 e9 49 ff ff ff e8 bd 0d 3a 00 48 8d 3d 36 ce 06 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 a4 e7 a3 00 e9 f7 fd ff [ 246.757584][ T6785] RSP: 0018:ffffc9000d0cf348 EFLAGS: 00010083 [ 246.760344][ T6785] RAX: 000000000000aaf4 RBX: 0000000000000000 RCX: ffffc900301dc000 [ 246.763872][ T6785] RDX: 0000000000100000 RSI: ffffffff8184d8b3 RDI: ffffffff908ba6f0 [ 246.767385][ T6785] RBP: ffff88803d154738 R08: 0000000000000005 R09: 0000000000000000 [ 246.770683][ T6785] R10: 0000000000000000 R11: ffff888029f42ff0 R12: 1ffff92001a19e6a [ 246.773337][ T6785] R13: ffffffff8fc4e8bf R14: ffff88803d154698 R15: ffff88803d154730 [ 246.776023][ T6785] FS: 0000000000000000(0000) GS:ffff8880d68f5000(0000) knlGS:0000000000000000 [ 246.779040][ T6785] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 246.781714][ T6785] CR2: 000000110c2e0f89 CR3: 00000000363d6000 CR4: 0000000000352ef0 [ 246.784977][ T6785] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 246.788384][ T6785] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 246.791045][ T6785] Call Trace: [ 246.792213][ T6785] [ 246.793238][ T6785] ? __pfx_enable_work+0x10/0x10 [ 246.794968][ T6785] cancel_delayed_work_sync+0x96/0xf0 [ 246.796812][ T6785] thermal_zone_device_unregister+0x28e/0x4d0 [ 246.799391][ T6785] ? __pfx_shield_remove+0x10/0x10 [ 246.801406][ T6785] power_supply_unregister+0x10a/0x150 [ 246.803931][ T6785] shield_remove+0x75/0x130 [ 246.805958][ T6785] ? __pfx_shield_remove+0x10/0x10 [ 246.808147][ T6785] hid_device_remove+0xd1/0x260 [ 246.809883][ T6785] ? __pfx_hid_device_remove+0x10/0x10 [ 246.811735][ T6785] device_remove+0xcb/0x170 [ 246.813280][ T6785] device_release_driver_internal+0x44b/0x620 [ 246.815558][ T6785] bus_remove_device+0x22f/0x450 [ 246.817254][ T6785] device_del+0x396/0x9f0 [ 246.818956][ T6785] ? __pfx_device_del+0x10/0x10 [ 246.821077][ T6785] ? do_raw_spin_lock+0x12c/0x2b0 [ 246.823287][ T6785] hid_destroy_device+0x19c/0x240 [ 246.825269][ T6785] usbhid_disconnect+0xa0/0xe0 [ 246.826909][ T6785] usb_unbind_interface+0x1dd/0x9e0 [ 246.828988][ T6785] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 246.830892][ T6785] ? __pfx_usb_unbind_interface+0x10/0x10 [ 246.832815][ T6785] device_remove+0x125/0x170 [ 246.834433][ T6785] device_release_driver_internal+0x44b/0x620 [ 246.836452][ T6785] bus_remove_device+0x22f/0x450 [ 246.838423][ T6785] device_del+0x396/0x9f0 [ 246.840201][ T6785] ? __pfx_device_del+0x10/0x10 [ 246.841846][ T6785] ? kobject_put+0x218/0x6f0 [ 246.843421][ T6785] usb_disable_device+0x355/0x820 [ 246.845145][ T6785] usb_disconnect+0x2e1/0x9e0 [ 246.846737][ T6785] hub_event+0x1d84/0x52f0 [ 246.848315][ T6785] ? __lock_acquire+0x436/0x2890 [ 246.849984][ T6785] ? do_raw_spin_unlock+0x172/0x230 [ 246.851754][ T6785] ? __pfx_hub_event+0x10/0x10 [ 246.853416][ T6785] ? debug_objects_fill_pool+0x3a0/0x660 [ 246.855376][ T6785] ? finish_task_switch.isra.0+0x202/0xbd0 [ 246.857425][ T6785] ? rcu_is_watching+0x12/0xc0 [ 246.859119][ T6785] process_one_work+0x9ba/0x1b20 [ 246.860795][ T6785] ? __pfx_process_one_work+0x10/0x10 [ 246.862603][ T6785] ? assign_work+0x1a0/0x250 [ 246.864172][ T6785] worker_thread+0x6c8/0xf10 [ 246.865769][ T6785] ? __kthread_parkme+0x19e/0x250 [ 246.867636][ T6785] ? __pfx_worker_thread+0x10/0x10 [ 246.869439][ T6785] kthread+0x3c5/0x780 [ 246.870844][ T6785] ? __pfx_kthread+0x10/0x10 [ 246.872501][ T6785] ? rcu_is_watching+0x12/0xc0 [ 246.874137][ T6785] ? __pfx_kthread+0x10/0x10 [ 246.875826][ T6785] ret_from_fork+0x983/0xb10 [ 246.877428][ T6785] ? __pfx_ret_from_fork+0x10/0x10 [ 246.879412][ T6785] ? rcu_is_watching+0x12/0xc0 [ 246.881268][ T6785] ? __switch_to+0x7af/0x10d0 [ 246.882919][ T6785] ? __pfx_kthread+0x10/0x10 [ 246.884553][ T6785] ret_from_fork_asm+0x1a/0x30 [ 246.886187][ T6785] [ 246.887275][ T6785] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 246.889851][ T6785] CPU: 0 UID: 0 PID: 6785 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.893475][ T6785] Tainted: [L]=SOFTLOCKUP [ 246.895051][ T6785] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 246.898868][ T6785] Workqueue: usb_hub_wq hub_event [ 246.900607][ T6785] Call Trace: [ 246.901745][ T6785] [ 246.902757][ T6785] dump_stack_lvl+0x3d/0x1f0 [ 246.904387][ T6785] vpanic+0x640/0x6f0 [ 246.905922][ T6785] ? enable_work+0x2ca/0x310 [ 246.907877][ T6785] panic+0xca/0xd0 [ 246.909387][ T6785] ? __pfx_panic+0x10/0x10 [ 246.910902][ T6785] check_panic_on_warn+0xab/0xb0 [ 246.912588][ T6785] __warn+0x108/0x3c0 [ 246.913920][ T6785] __report_bug+0x2a0/0x520 [ 246.915480][ T6785] ? enable_work+0x2ca/0x310 [ 246.917045][ T6785] ? __pfx___report_bug+0x10/0x10 [ 246.918794][ T6785] ? __wait_for_common+0x1e0/0x4e0 [ 246.920486][ T6785] ? enable_work+0x2c3/0x310 [ 246.922087][ T6785] ? find_held_lock+0x2b/0x80 [ 246.923638][ T6785] report_bug_entry+0xe1/0x290 [ 246.925256][ T6785] ? enable_work+0x2ca/0x310 [ 246.926770][ T6785] handle_bug+0x18a/0x260 [ 246.928368][ T6785] exc_invalid_op+0x17/0x50 [ 246.929937][ T6785] asm_exc_invalid_op+0x1a/0x20 [ 246.931544][ T6785] RIP: 0010:enable_work+0x2ca/0x310 [ 246.933217][ T6785] Code: ff e8 da 0d 3a 00 90 0f 0b 90 e9 b4 fe ff ff e8 cc 0d 3a 00 e8 17 29 f3 09 e9 49 ff ff ff e8 bd 0d 3a 00 48 8d 3d 36 ce 06 0f <67> 48 0f b9 3a e9 33 fe ff ff 48 89 ef e8 a4 e7 a3 00 e9 f7 fd ff [ 246.940156][ T6785] RSP: 0018:ffffc9000d0cf348 EFLAGS: 00010083 [ 246.942193][ T6785] RAX: 000000000000aaf4 RBX: 0000000000000000 RCX: ffffc900301dc000 [ 246.944848][ T6785] RDX: 0000000000100000 RSI: ffffffff8184d8b3 RDI: ffffffff908ba6f0 [ 246.947498][ T6785] RBP: ffff88803d154738 R08: 0000000000000005 R09: 0000000000000000 [ 246.950137][ T6785] R10: 0000000000000000 R11: ffff888029f42ff0 R12: 1ffff92001a19e6a [ 246.952759][ T6785] R13: ffffffff8fc4e8bf R14: ffff88803d154698 R15: ffff88803d154730 [ 246.955401][ T6785] ? enable_work+0x2c3/0x310 [ 246.956961][ T6785] ? enable_work+0x2c3/0x310 [ 246.958846][ T6785] ? __pfx_enable_work+0x10/0x10 [ 246.960484][ T6785] cancel_delayed_work_sync+0x96/0xf0 [ 246.962223][ T6785] thermal_zone_device_unregister+0x28e/0x4d0 [ 246.964216][ T6785] ? __pfx_shield_remove+0x10/0x10 [ 246.965964][ T6785] power_supply_unregister+0x10a/0x150 [ 246.967849][ T6785] shield_remove+0x75/0x130 [ 246.969420][ T6785] ? __pfx_shield_remove+0x10/0x10 [ 246.971145][ T6785] hid_device_remove+0xd1/0x260 [ 246.972775][ T6785] ? __pfx_hid_device_remove+0x10/0x10 [ 246.974628][ T6785] device_remove+0xcb/0x170 [ 246.976190][ T6785] device_release_driver_internal+0x44b/0x620 [ 246.978392][ T6785] bus_remove_device+0x22f/0x450 [ 246.980069][ T6785] device_del+0x396/0x9f0 [ 246.981550][ T6785] ? __pfx_device_del+0x10/0x10 [ 246.983204][ T6785] ? do_raw_spin_lock+0x12c/0x2b0 [ 246.984931][ T6785] hid_destroy_device+0x19c/0x240 [ 246.986621][ T6785] usbhid_disconnect+0xa0/0xe0 [ 246.988486][ T6785] usb_unbind_interface+0x1dd/0x9e0 [ 246.990247][ T6785] ? kernfs_remove_by_name_ns+0xbe/0x100 [ 246.992156][ T6785] ? __pfx_usb_unbind_interface+0x10/0x10 [ 246.994164][ T6785] device_remove+0x125/0x170 [ 246.995801][ T6785] device_release_driver_internal+0x44b/0x620 [ 246.998194][ T6785] bus_remove_device+0x22f/0x450 [ 247.000477][ T6785] device_del+0x396/0x9f0 [ 247.002446][ T6785] ? __pfx_device_del+0x10/0x10 [ 247.004781][ T6785] ? kobject_put+0x218/0x6f0 [ 247.006851][ T6785] usb_disable_device+0x355/0x820 [ 247.009124][ T6785] usb_disconnect+0x2e1/0x9e0 [ 247.011271][ T6785] hub_event+0x1d84/0x52f0 [ 247.013310][ T6785] ? __lock_acquire+0x436/0x2890 [ 247.015590][ T6785] ? do_raw_spin_unlock+0x172/0x230 [ 247.017911][ T6785] ? __pfx_hub_event+0x10/0x10 [ 247.020086][ T6785] ? debug_objects_fill_pool+0x3a0/0x660 [ 247.022529][ T6785] ? finish_task_switch.isra.0+0x202/0xbd0 [ 247.024594][ T6785] ? rcu_is_watching+0x12/0xc0 [ 247.026216][ T6785] process_one_work+0x9ba/0x1b20 [ 247.028016][ T6785] ? __pfx_process_one_work+0x10/0x10 [ 247.029792][ T6785] ? assign_work+0x1a0/0x250 [ 247.031345][ T6785] worker_thread+0x6c8/0xf10 [ 247.032921][ T6785] ? __kthread_parkme+0x19e/0x250 [ 247.034676][ T6785] ? __pfx_worker_thread+0x10/0x10 [ 247.036445][ T6785] kthread+0x3c5/0x780 [ 247.037987][ T6785] ? __pfx_kthread+0x10/0x10 [ 247.039588][ T6785] ? rcu_is_watching+0x12/0xc0 [ 247.041226][ T6785] ? __pfx_kthread+0x10/0x10 [ 247.042805][ T6785] ret_from_fork+0x983/0xb10 [ 247.044416][ T6785] ? __pfx_ret_from_fork+0x10/0x10 [ 247.046165][ T6785] ? rcu_is_watching+0x12/0xc0 [ 247.047861][ T6785] ? __switch_to+0x7af/0x10d0 [ 247.049479][ T6785] ? __pfx_kthread+0x10/0x10 [ 247.051108][ T6785] ret_from_fork_asm+0x1a/0x30 [ 247.052764][ T6785] [ 247.054410][ T6785] Kernel Offset: disabled [ 247.055987][ T6785] Rebooting in 86400 seconds..