last executing test programs: 14m39.126802464s ago: executing program 3 (id=1957): set_mempolicy(0x4005, 0x0, 0x4) openat$userio(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x8, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r8, &(0x7f0000006280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7463e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda451852e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa248000000f858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd6510100000000000080931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x4, 0x10000000000, 0x0, 0x5, 0x0, 0x0, {0x0, 0x1, 0x101, 0x8000000000000000, 0x80000000000, 0x0, 0x10, 0x4, 0x0, 0x2000, 0x2, r10, r11}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r8, &(0x7f0000000380)={0x50, 0x0, r9, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)={0x90, 0x0, 0x4, {0x3, 0x0, 0x0, 0x100000000, 0xf, 0x0, {0x3, 0x20000, 0x0, 0x4, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') syz_fuse_handle_req(r8, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x8, {0x1, 0x100000000000, 0x100000003, 0x0, 0x3, 0x3881fffc, {0x5, 0xff, 0x480000, 0x0, 0x3, 0x0, 0xa, 0x0, 0x0, 0x8000, 0x80000000, 0x0, r11, 0x2, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r12, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x23d0, 0x7, 0x2, 0x8}, {0x2, 0x2, 0x2, 0x0, 0x3, 0x98}, 0x8, 0xca1e, 0x10f4}}, @TCA_TBF_RTAB={0x112, 0x2, [0x10000, 0x5, 0x39723a17, 0x1, 0x664d4621, 0x7f, 0xff, 0x7, 0xd, 0xee8, 0x5a2d, 0xe4, 0x6, 0x80000001, 0x7fffffff, 0x1, 0x4, 0x9de, 0x4, 0x6, 0x0, 0x1, 0x9, 0xffff8000, 0xfffffffd, 0x5, 0xd621, 0x7ff, 0x3, 0x0, 0xe7, 0x4, 0x9, 0x2, 0x6e96, 0x9, 0x80, 0x0, 0x80000000, 0x80000001, 0x2, 0x2, 0x5, 0xd0, 0xc, 0x1, 0x101, 0x5, 0xb, 0xc0, 0xeb5, 0x9, 0x4, 0x8, 0x1, 0x8, 0x2, 0x9, 0x1, 0x5, 0x2, 0x4, 0xeca, 0x1, 0x0, 0xc, 0x8, 0xf, 0x4, 0x1000, 0x6, 0x316b, 0x7, 0x10000, 0x8, 0x2, 0x6, 0x5, 0x8, 0x0, 0x4b0, 0x4, 0x6, 0x1, 0x1, 0x6, 0x2, 0x7, 0x6, 0x7, 0x0, 0x7, 0x3, 0x3, 0x7, 0x0, 0x5, 0x4, 0x7de, 0x12, 0x1, 0x4, 0x6b, 0x1, 0x5, 0x60, 0x0, 0x1, 0x700000, 0x7, 0x3, 0x0, 0xa, 0x0, 0x101, 0x5, 0x6, 0x509, 0x1, 0x9, 0x2, 0xa0000000, 0x0, 0xfff, 0x8, 0x2a, 0x2, 0x1, 0x7, 0x5, 0x9, 0x7, 0xfc3, 0xeda, 0x0, 0x7ff, 0x7, 0x8, 0x9, 0x81, 0x7, 0x9, 0xcb2b, 0x3, 0x4, 0x5d4a, 0x5, 0xffffff7f, 0x4, 0x3, 0xfffffffb, 0x9, 0x3, 0x200, 0x9, 0x9, 0x5, 0x1d1a, 0x5, 0x31400, 0x4001, 0x5, 0xd349, 0x6, 0x8001, 0x9, 0x6, 0x6, 0x6, 0x7a, 0x6, 0x80000000, 0x0, 0x169b, 0xd, 0x0, 0x9, 0x8000, 0x7fff, 0x5c, 0x7, 0x2, 0x2, 0x4, 0xffff, 0x0, 0x4, 0xf, 0x4, 0x1, 0x3, 0x4, 0x442, 0x6, 0xffff0001, 0x1, 0x3, 0x38, 0x81, 0xffffffff, 0x2, 0x3ff, 0x1, 0x7, 0x7, 0x800, 0x8a1b, 0x2, 0x1, 0x8, 0x0, 0xb461, 0x9, 0x0, 0x5, 0xfffffffe, 0x4, 0x7, 0x4, 0x1, 0x9, 0x0, 0x50d, 0xfffffff1, 0x2, 0x3, 0xa, 0x9, 0x2, 0x10001, 0xf, 0x0, 0x9, 0x9, 0x2, 0x1, 0xfffffff8, 0xd0, 0x7, 0x8, 0x2bb, 0x8, 0x1, 0x9, 0x8, 0x2, 0x5, 0x2, 0x0, 0x3, 0x2, 0x6, 0x0, 0x6000000, 0x8000, 0x9]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 14m37.38719772s ago: executing program 3 (id=1959): socket(0x1d, 0x2, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aab5fb91a4fc73b36849c8a9be678e5df8b0291c0daa0a59ee301d2a30c7e3"], 0xc8}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="b0000000daffffff", @ANYRES32, @ANYBLOB="04000000810000000000000000000000000000000200000000000000010000000700"/43], 0xb0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) unshare(0x40020000) socket(0x2, 0x80805, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) eventfd2(0x2a2, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) 14m36.365143163s ago: executing program 3 (id=1961): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYRES8, @ANYRESOCT=r1]) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x13) socket$inet(0x2, 0x3, 0x4) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendto(r7, 0x0, 0x0, 0x4004, 0x0, 0x0) 14m33.079256224s ago: executing program 3 (id=1973): ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000001680), 0x0, 0x0) read$midi(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5111) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) 14m31.575553806s ago: executing program 3 (id=1975): socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0xc094) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r4 = dup2(r3, r3) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="5245434c45560a50484f4e454f55540a535045414b455220274344272030303030303030303030303030303030303030300a4449474954414c32202706b86e652043617074557265272030303030"], 0xb8) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) 14m29.949179846s ago: executing program 3 (id=1981): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x9) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB="000000040000000000000000000010", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xd9, r4}, 0x38) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000)=0x7ff, 0x4) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="78e43b4ba555f9b77b77cffb8654b3909c53a1d1da54ee32ab0c9457fd4fd031afd9d7b54ed19487dd1f902578b632e5184359fde1fc027c6bc6f651c2bf15ec69aedc3c82d5119f9ddd9671c2e3e31c940bdeada0532672c1a92fa7a038816b2478b3a9cfa6966e020e3fd078f5d475491758dadd775ecf4c7ea41d4e08f0f45d7216fd5f207c11fdef596e16ba0a89f2d32af7d0c95fd5c6f3842646259e3e6386795c22fc04ae3583090f483051778939f20cf716ab703d5deedbb1b5ef34c5083c64ea9ea389e6c608f7fc56b5d100ad9f6156302d9bb0ad2aacebefa56c2801f4"], &(0x7f0000000040)='syzkaller\x00', 0x1}, 0x94) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f00000001c0)) readv(r5, &(0x7f0000000140), 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x44001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) 14m14.22731241s ago: executing program 32 (id=1981): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x9) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32, @ANYBLOB="000000040000000000000000000010", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xd9, r4}, 0x38) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000)=0x7ff, 0x4) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="78e43b4ba555f9b77b77cffb8654b3909c53a1d1da54ee32ab0c9457fd4fd031afd9d7b54ed19487dd1f902578b632e5184359fde1fc027c6bc6f651c2bf15ec69aedc3c82d5119f9ddd9671c2e3e31c940bdeada0532672c1a92fa7a038816b2478b3a9cfa6966e020e3fd078f5d475491758dadd775ecf4c7ea41d4e08f0f45d7216fd5f207c11fdef596e16ba0a89f2d32af7d0c95fd5c6f3842646259e3e6386795c22fc04ae3583090f483051778939f20cf716ab703d5deedbb1b5ef34c5083c64ea9ea389e6c608f7fc56b5d100ad9f6156302d9bb0ad2aacebefa56c2801f4"], &(0x7f0000000040)='syzkaller\x00', 0x1}, 0x94) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f00000001c0)) readv(r5, &(0x7f0000000140), 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x44001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) 6m8.500576217s ago: executing program 1 (id=4242): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 6m8.076187084s ago: executing program 1 (id=4245): creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="b8000000000000e3f3e6b68d64c8223f554d1c8b00e7ac687f6254a9c38d"], 0xb8) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x0) 6m7.980823721s ago: executing program 1 (id=4247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00m\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x10) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 6m7.350465416s ago: executing program 1 (id=4251): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x12b) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) move_mount(r0, &(0x7f00000001c0)='./file0/file0\x00', r1, &(0x7f0000000040)='./file0\x00', 0x0) 6m7.213879921s ago: executing program 1 (id=4253): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1345, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setreuid(0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) request_key(&(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) ptrace(0x11, r1) 6m6.956141903s ago: executing program 1 (id=4256): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44880) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) 6m6.840207178s ago: executing program 33 (id=4256): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x44880) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000000000) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000040)) 2m44.589146439s ago: executing program 0 (id=5073): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) recvmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 2m41.214792159s ago: executing program 0 (id=5078): socket(0x1d, 0x2, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aab5fb91a4fc73b36849c8a9be678e5df8"], 0xc8}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="b0000000daffffff", @ANYRES32, @ANYBLOB="04000000810000000000000000000000000000000200000000000000010000000700"/43], 0xb0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) unshare(0x40020000) socket(0x2, 0x80805, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) eventfd2(0x2a2, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) 2m40.094620579s ago: executing program 0 (id=5080): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x4}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000100"], 0x50) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000040601010000000000000500010000070500010007"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 2m39.416443546s ago: executing program 0 (id=5083): creat(&(0x7f00000001c0)='./file0\x00', 0x8) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) init_module(&(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46dc0303070500000000000000030006002e7bd610fd1100000000000440000000000000006c0000000000000007000000070038000100ff00fedc0000020000000c000000360f0000000000000300000000000000"], 0x78, 0x0) r1 = mq_open(&(0x7f0000000180)=' \x01\x9c\x147\xb3\xcf\xfc\xc3\xa2W)\xebs\x93\xa7\xc7!Q\x8f\xf6\xec\xa5fs\xf5l{T\x87r\xd2)r\xa7\xd6\bO\x9a\x98\xf52:\"\xf4\x12\xc0T+\xcd\x9fv|\x8d\xd5\xb2Dvc\x8e\x93\xd8\xd6\xa0\xc56\xd2x\xe3c:\x00\x00\x00\x00\x00\x00\x00\x00\x97\x97\x9c \xdc\xaavt\x18\xcen\xe4\x03\x84;7\xfb\x84r\xf4\xe7\xc9\b\x987\xaa\x85\xfb\x05%\xa8\xe5b\x81\x8e}\xe1r\xf7s2\x82\xe57&b', 0x41, 0x80, 0x0) mmap(&(0x7f000074f000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x11, r1, 0x15b77000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x3d, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x5, 0x24, 0x0, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8f00, 0x642, 0x9, 0xfffffffe, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3, 0x8f, 0x6, 0x4, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x8000078, 0xea4, 0xa, 0x4, 0x4, 0x7d, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x6, 0x1000004, 0x8000009, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x40008, 0x5, 0x3, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0x0, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x9, 0x86, 0x45056a1f, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x9, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x2, 0x54fe12da, 0xbf, 0x5, 0x3, 0x7f, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x1000, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x3, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x0, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x29, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xfff]}, 0x45c) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000030429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3, @ANYBLOB="08001f"], 0x40}}, 0x0) 2m38.995981599s ago: executing program 0 (id=5085): socket(0x1d, 0x2, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aab5fb91a4fc73b36849c8a9be678e5df8b0291c0daa0a59ee301d2a30c7e3"], 0xc8}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0xb0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) unshare(0x40020000) socket(0x2, 0x80805, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) eventfd2(0x2a2, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) 2m37.925357607s ago: executing program 0 (id=5087): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000e60000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x4f33}, 0x18) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x7ffffc, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 2m21.585023831s ago: executing program 34 (id=5087): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000e60000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x4f33}, 0x18) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r3, 0x1, 0x7ffffc, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) 1m32.501485941s ago: executing program 2 (id=5267): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 1m30.867737004s ago: executing program 2 (id=5272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) time(0xfffffffffffffffc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, 0x7, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) 1m29.501565132s ago: executing program 2 (id=5275): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x4) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000180)={0x1, 0x14, 0x4, 0xfffd, 0x72, 0x40, &(0x7f0000000480)="c9ea87d1c0e550f1a28fbc590fe3489fc3b1fa4828b551545d337b76b362d12de25d965d8ebc69c08ff64b72f94c9fde5b730f488f9a6f961aead38ece4e5a72e772805d1e5192819db1d15a6571e6c30246899c933f27eb61a36c978d828f5b691493d08ade579aa4dd705321af6e52887f"}) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000080)="bc5d", 0x2, r1) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m28.175881474s ago: executing program 2 (id=5281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0x1, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m26.799094445s ago: executing program 2 (id=5286): set_mempolicy(0x6, &(0x7f0000000080)=0x9, 0x4) fsopen(0x0, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, 0x0, 0x0, 0x4) socket$kcm(0x10, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sendmmsg(r0, &(0x7f0000000e80), 0x0, 0x10040104) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x0, 0x401eb94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1m22.554645274s ago: executing program 2 (id=5298): socket(0x1d, 0x2, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aab5fb91a4fc73b36849c8a9be678e5df8b0291c0daa0a59ee301d2a30c7e3"], 0xc8}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="b0000000daffffff", @ANYRES32, @ANYBLOB="04000000810000000000000000000000000000000200000000000000010000000700"/43], 0xb0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) unshare(0x40020000) socket(0x2, 0x80805, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) eventfd2(0x2a2, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) 1m7.366316024s ago: executing program 35 (id=5298): socket(0x1d, 0x2, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001800c00028005000100000000002c0001801400030000000000000000000000ffffac1414bb1400040000000000000000000000ffff000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aab5fb91a4fc73b36849c8a9be678e5df8b0291c0daa0a59ee301d2a30c7e3"], 0xc8}}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000840)=ANY=[@ANYBLOB="b0000000daffffff", @ANYRES32, @ANYBLOB="04000000810000000000000000000000000000000200000000000000010000000700"/43], 0xb0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) unshare(0x40020000) socket(0x2, 0x80805, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) eventfd2(0x2a2, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) 26.885082862s ago: executing program 5 (id=5449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000180)={r3}) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000100)={r4}) close(r5) 25.990400898s ago: executing program 5 (id=5453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x2c29, 0x28004) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) 14.896272804s ago: executing program 8 (id=5491): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x600, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_INIT(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) dup(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x18) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x8008700b, &(0x7f0000000080)={0x2e, 0x27, 0x1, 0x1d, 0x1, 0x4, 0x2, 0x16b, 0xffffffffffffffff}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000040), 0x12) r6 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'pids'}]}, 0x6) 12.882274714s ago: executing program 8 (id=5497): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) dup(r0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000}) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x36, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x0, 0x3, 0x7}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x70bd2c, 0x25dfdbfd, {0x2}, [@NHA_FDB={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4402}, 0x100000000000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) syslog(0x4, &(0x7f0000000140)=""/27, 0x1b) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r5, 0x11, 0xd, 0x0, &(0x7f0000002280)) 12.463913853s ago: executing program 6 (id=5499): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) r4 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) connect$inet6(r3, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 10.640217418s ago: executing program 6 (id=5503): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000002180)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00j\x05\xf9\xa1k;L\xb3C\xeb\xf1\xa7\f\xfb\xa8U\t\xc4\x00t\xbb\x03\x01/\x8dQxk\f\xa7\xfd\xa2=\xb9\xfa\x8d\xa4>\x11\xed\a\xd8\xd4NEz[\xb5\xd4\xd05j\xf2}\xa1a\xd9\xdf0*K \xec\xbc\x86>,\x9dLJ\x13\x1a1\x8fI\x12\xc9\xc5\x11\xf9\xa0S\x95\x9dU\xadn\x89v\xe9\x82\xdd=\xf5e\xacq\x0e\x17\xd4\x19\x8dEp\xbd0\xe8\xb5U\x8fx\xa3\xd0\x92\xbb\xd8>\xda\xe1\x9d\x8c\x1b4\x9c\x17\xb2\xec;\xef\xcd\xa1){\x91\xd2\xc9#;9a,x\x93\xb1xN\x02\x91J\x9c\xed\xff\xea\x16^v\x17\xcc\xfe\xa2g\xa9\x9dk\xe4', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x7, 0x4}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0) read$msr(r2, &(0x7f000001b000)=""/102400, 0x19000) rseq(0x0, 0x0, 0x0, 0x0) 9.16378236s ago: executing program 7 (id=5507): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r1, &(0x7f0000000200)=[{0x81, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{0x2, 0x3}, 0xe}}, {0x0, 0x0, 0x0, 0x6, @tick=0x801, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @note={0xf, 0x3, 0x1, 0x81, 0x2}}, {0x0, 0x0, 0x0, 0x0, @tick=0x800, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0x4}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}], 0xc4) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {0xa}, {0x0, 0x5}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x8, 0xf]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32={[0x0, 0x101]}}, {0x1, 0x0, 0x0, 0x0, @tick, {0x0, 0x40}, {}, @connect}, {0x0, 0x4, 0x3, 0x80, @tick=0xfffffffa, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff85}, {}, {}, @time=@time}], 0xc4) write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @tick=0x6, {}, {}, @connect={{0x8}}}, {0x0, 0x0, 0x0, 0x0, @tick=0xfffffffc, {0x6}, {}, @control}], 0xc4) write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x8}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x20}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) write$sndseq(r0, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, @time={0x9, 0xefa}, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x800]}}, {0x0, 0x0, 0x2, 0x6, @time, {}, {}, @control}], 0x54) write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x3}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4) write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c) write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c) write$sndseq(r1, &(0x7f0000000b00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"bfcf9b64bc42ea882d9c04f5"}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @note={0x0, 0x0, 0xff}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b5f8fbe8c20c855083221c33"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {0x4, 0x0, 0x0, 0x0, @time, {}, {}, @quote={{0x5, 0x3}, 0x1000}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x1000000}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}], 0xc4) write$sndseq(r1, &(0x7f00000004c0)=[{0x81, 0x80, 0x2, 0x4, @time={0x8, 0x5}, {0x3, 0x31}, {0xff, 0x7f}, @queue={0x80, {0x8, 0x4}}}, {0x8, 0x2, 0x8f, 0x6, @time={0x3, 0x1cddab93}, {0x0, 0x6e}, {0xf2, 0x30}, @addr={0x9, 0x1}}, {0x8, 0x7, 0x0, 0xe3, @time={0x200, 0x9}, {0x8}, {0x6, 0x1}, @raw8={"7aa27555b79e43403e7fa600"}}, {0x0, 0x7, 0x3, 0x6, @time={0x0, 0x7}, {0x8, 0xfd}, {0x93, 0x80}, @queue={0x14, {0x10, 0x80}}}, {0x6, 0x8, 0x3, 0x40, @tick=0xf6, {0x2, 0x7}, {0x3}, @ext={0x0, 0x0}}, {0xba, 0x6, 0x54, 0x7, @time={0xe5b, 0x10001}, {0x80, 0x8}, {0x2, 0x7f}, @control={0x5, 0x40, 0x5}}, {0x3, 0xc, 0x4, 0x6, @time={0x6, 0x1}, {0x10, 0x4}, {0x8, 0xa}, @raw8={"80408bcf99ee1216e4e59519"}}, {0xd2, 0x5, 0xd9, 0x0, @time={0x8, 0x4}, {0x54, 0x6}, {0x8, 0x8}, @result={0x5, 0x6}}, {0xcf, 0x1, 0xff, 0x5, @tick=0x9, {0x6, 0xb3}, {0x80, 0xd}, @control={0x66, 0x800, 0x3}}], 0xfc) write$sndseq(r1, &(0x7f0000000400)=[{0xfb, 0xb, 0xc1, 0xfc, @time={0x10, 0xfffffffb}, {0xc, 0x10}, {0x6, 0x40}, @raw32={[0x5, 0x100, 0xa4]}}, {0x7, 0xc, 0x3, 0x1, @tick=0x3, {0x40, 0xf8}, {0xa9, 0x6}, @raw32={[0x6, 0x8, 0x3]}}, {0x3, 0x5b, 0x4, 0x8, @tick=0x6, {0xdb, 0x9}, {0x0, 0x7}, @raw8={"ed88a1d5d8d036872b018577"}}], 0x54) write$sndseq(r1, &(0x7f0000000800)=[{0x0, 0x0, 0x0, 0x0, @time={0xb, 0x3}, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0xe7}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"ce274516c7da5b6da0b16993"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"b134b141793d8609365bda4d"}}, {}], 0xfc) write$sndseq(r1, &(0x7f0000000d00)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"49cbee45cad57a0372831665"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}], 0x8c) write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x3}, @quote}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0xfffffffc}, {}, {}, @control}], 0x38) write$sndseq(r1, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) 8.918925836s ago: executing program 7 (id=5509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x1, 0x4, 0xa}, {0xbd1, 0x0, 0x3}, {0x81, 0x2}, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@local, 0x8000, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0xffe0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 8.683781705s ago: executing program 5 (id=5453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0xc0, 0x61) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) mount(&(0x7f0000000500)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x19, 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) syz_open_dev$media(&(0x7f00000006c0), 0x2c29, 0x28004) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) 7.800646773s ago: executing program 7 (id=5511): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 7.772168126s ago: executing program 8 (id=5512): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) syz_open_procfs(0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 7.002078477s ago: executing program 4 (id=5514): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1, {0x0, r5}}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2, 0x0}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x93cea4bee562f1e5, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0xc, 0xa9, &(0x7f00000002c0)=""/169, 0x41100, 0x4c, '\x00', r6, @fallback=0x1d, r1, 0x8, &(0x7f0000000480)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x9, 0x9, 0xf}, 0x10, r7, r1, 0x7, &(0x7f00000003c0)=[r1, r1], &(0x7f0000000400)=[{0x3, 0x2, 0x10, 0x6}, {0x4, 0x3, 0xd, 0x8}, {0x4, 0x1, 0xb, 0xa}, {0x4, 0x1, 0x3, 0x1}, {0x0, 0x4, 0xa, 0xc}, {0x5, 0x3, 0x9, 0xc}, {0x5, 0x1, 0xd, 0x7}], 0x10, 0x5}, 0x94) r8 = socket$kcm(0x10, 0x400000002, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff0, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x172ed}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r15, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r16, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r16, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) 6.672401325s ago: executing program 8 (id=5515): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000300)}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv4_newroute={0x24, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, [@RTA_SPORT={0x6}]}, 0x24}}, 0x24008800) getsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, 0x0, &(0x7f00000000c0)) 6.388162257s ago: executing program 7 (id=5516): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) close_range(r2, 0xffffffffffffffff, 0x0) 6.202051398s ago: executing program 6 (id=5517): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) 5.519097786s ago: executing program 4 (id=5518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r4, 0x0, 0x0, &(0x7f0000000240)=[0x1], 0x0, 0x0) r5 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gr']) mount$fuse(0x0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000340), 0x888000, &(0x7f0000000400)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0xe5a}}, {@blksize={'blksize', 0x3d, 0x400}}]}}) shmctl$IPC_RMID(r5, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) 5.465209806s ago: executing program 5 (id=5519): openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x102, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000002180)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00j\x05\xf9\xa1k;L\xb3C\xeb\xf1\xa7\f\xfb\xa8U\t\xc4\x00t\xbb\x03\x01/\x8dQxk\f\xa7\xfd\xa2=\xb9\xfa\x8d\xa4>\x11\xed\a\xd8\xd4NEz[\xb5\xd4\xd05j\xf2}\xa1a\xd9\xdf0*K \xec\xbc\x86>,\x9dLJ\x13\x1a1\x8fI\x12\xc9\xc5\x11\xf9\xa0S\x95\x9dU\xadn\x89v\xe9\x82\xdd=\xf5e\xacq\x0e\x17\xd4\x19\x8dEp\xbd0\xe8\xb5U\x8fx\xa3\xd0\x92\xbb\xd8>\xda\xe1\x9d\x8c\x1b4\x9c\x17\xb2\xec;\xef\xcd\xa1){\x91\xd2\xc9#;9a,x\x93\xb1xN\x02\x91J\x9c\xed\xff\xea\x16^v\x17\xcc\xfe\xa2g\xa9\x9dk\xe4', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0xfffffffffffffffd, 0x1, 0x7, 0x4}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0xc, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x6ffffffffffffffe, 0x0) read$msr(r3, &(0x7f000001b000)=""/102400, 0x19000) 5.00760018s ago: executing program 6 (id=5520): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r0 = openat$vhost_vsock(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2d8, 0x160, 0x280, 0x280, 0x160, 0x280, 0x248, 0x365, 0x350, 0x248, 0x333, 0x7fffffe, 0x0, {[{{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [], 'veth1_to_bond\x00', 'netpci0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0x7}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x7fffffff, 0x7, 'syz0\x00', {0xffffffff}}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x338) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x3, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$TIOCGPTPEER(r3, 0x5441, 0x8) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x85, 0x0, 0xffffffffffffffff, 0x1800}, 0x50) 4.013985642s ago: executing program 4 (id=5521): pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) vmsplice(r0, &(0x7f0000000140)=[{0x0}], 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000009200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0) mbind(&(0x7f0000bde000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x85, 0x7, 0x0) 3.719934004s ago: executing program 5 (id=5522): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001840)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x24, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'multiport\x00'}]}}}]}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x44}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 3.643957969s ago: executing program 6 (id=5523): sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) epoll_create1(0x80000) socket$inet(0xa, 0x801, 0x84) timerfd_create(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0xfffffffffffffffe, 0x402) syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000bc0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o84I\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HO\x00\x00\x00\x00R\xfc\xcb%u3\xec\xde%\x9d\xe4\x1d\rD\x82S\x17?\xd6\xb1\x9aF\xe2\xba[\xc7QR\x9f\x81\x8b\xdc\xc7\xdc\xdem\xbe\x7f2\x11\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\xa5\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\xae\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x93\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94\xfe2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[z\xb6>\xd3\xe7Y*\xdb\xa7h\nt\xddP\n\xc5\xeb\xb1ux\x94@\x00\x00g\x02D9\x83\xa7\x97\xf4\xb25wL\x97\xfb\xb9\xccj\xb3\x96\xc1@\xee`{\x87\xa8]\x96\x9cjF^+\xcc1l\xcbmA,5\xc4J\xcab\xa6\x91\xa0\xeaU\x92\x01\x1f,\xfa\x10\"+\x01\x00\x91\xe9\x1cz\xd1f\x901\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00o\"\x85Np\xba\x0e<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb8V\xe4\xa1C\x90\x17\xcc{\x9d\xf1\xbd\xb0\xca\x03\x96\x85h}\x8f\x1c)X\xc83rA\x90r\xb6\xba!;\x95\xaf\xe0\xcb\xec\xcd$\x02f\x8c4\x1aH\x8fC\xbfr\xd39\x92\x1fShu\x9e\b\xd4m\xa8\x16\xa6\xd5\xae\xcb\x03oFQ\"\xf7F\xb7\vp\xb6\xe5\x92\xe2O}.\x95A\x9bH\x8d\xa1\x80\x1b\x14u\xfdK\xce\xaf\x94i\xf1s\xf7\xb8Jq\xcb3=M\x84\x7f\x181/\x9bQ|4\xaf\xcf\r\xcfz Z\x19\xad_\x13\x99\xf7\xfdOD\xd3\x9d\x9d\xb8d5g\xf1\x84\xbd\xe5\xa2\xb3\xda\x82\x10n1\xed\xba\xe3\x96\x85\"\xb6\xa6n\xe7\xfd\xd4\a\x97\x85\x810/\xc4o\x11\xc8\x1b\xc0\f\xeec\xa4\x7f|P\x00\x00\x00\x000p\xaf\xfdk\xac\xcc\xac`\xc9\a<\xadIt\x9b\xeb\x8a\xfe\x9b\aO\xa5?h\xe1B\xa8C\x8e;/\xa8\x94\x1bs\xf0\xa9>\x9e\xff\xc9\xd2\x00h\xcb\xfb\xb6Y\xbfp\xd8\x90\x96\xec\x83N\x8bNnx\xb6\x16Y\xf8sU\xae\xa0\b\x8cLq\n\x1f\x99t\xb6\xffozu\xa0B(\xe9?\xcdA\xba\xa8\x13Qc\xda\x16?\xe8z\x8f\x862!\xbf\xa4\xb8\x9bC\xe9Od\xe8\xd32m\x06RX\x7f\xf7\xc2\n\x94\xe5P:l\xd9\xd5\xbd\rH6-\x8a\x12m\xff\xe9\xa0\r\tk\xda\xa4q(\xae\\\xb6\x14I\xf7\xe0z\xf10xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x7c, 0x5, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x8, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0x8, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2000002, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x1, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x6, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x2, 0x2, 0x0, 0x3, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x2, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x1, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0xffffffff, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xae, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x80, 0x2000005, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x7ff]}, 0x45c) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r6 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r5, 0xffffffffffffffff) 2.695058874s ago: executing program 8 (id=5525): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x17, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000004000000000000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000002000000000b702000014000000b703000000000000850000008300000000000000000000005509010000000000950000000000000085100000fbffffff184b0000000000000000000000000000151af4fff0ffffff3008f8ff01000000180000000200000000000000070000002703c0ff04000000bf91000000000000b7020000151df75c8500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) syz_emit_ethernet(0x4e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1286dd60", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000b47378bd4e1e62de"], 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) socket$nl_route(0x10, 0x3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000380)={0x5, 0xd, 0x2, 0x2, '\x00', '\x00', '\x00', 0x3ff, 0x1, 0x5, 0xa8f8, "51b9b64e1681217964f3cd300fee84dd"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$unix(0x1, 0x2, 0x0) r5 = dup(r3) sendmsg$inet(r5, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r7 = accept(r6, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r7}, 0x47) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x6, 0x448, '\x00', 0x9}, 0x1, [0x7, 0xd5, 0x5, 0x9, 0x6, 0xa, 0x2, 0x5, 0xfffffffffffffffb, 0xbd, 0x80000000, 0x102d, 0x8, 0x1, 0x3, 0xffffffffffffffff, 0x1, 0x1ed40, 0x6, 0x1ff, 0x80, 0x7, 0x7, 0x7, 0xc, 0x2, 0x9, 0x7, 0xffffffffffffffff, 0x3, 0x8fffffffe, 0x403, 0x1, 0x4, 0x1, 0x3, 0x3, 0x1, 0x0, 0x6, 0x9, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba58, 0x6, 0xa, 0x9, 0x6, 0xe000000000000000, 0xfffffffffffffffd, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x8, 0x9, 0x1800000, 0x4, 0x82b, 0x8, 0x5, 0x0, 0x4, 0xfffffffffffffffa, 0x5, 0x100000000000006, 0xca4f, 0x2f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x6, 0x201, 0x77d, 0xb3, 0x5, 0x539, 0x623b, 0x6, 0x0, 0x7, 0x4, 0x7fffffffffffffff, 0x7, 0x8, 0x0, 0x9, 0x93, 0x5, 0x401, 0x2, 0x2775e12f, 0x680000000000, 0x5, 0x40007, 0xe88, 0x80000004, 0x0, 0xfffffffffffffffa, 0x10001, 0x5, 0x8, 0x1000, 0x0, 0x5, 0x7, 0xfffffffffffff000, 0x8, 0x7ffd, 0xfffffffffffffff7, 0x6, 0x100000001, 0x8, 0x80000000005, 0x6, 0x20000000004, 0xc3, 0x7f, 0x3]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000000)="619f87dfc70400d5721ff59fe864", 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) 1.542220802s ago: executing program 4 (id=5526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) unshare(0x2040600) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.486624783s ago: executing program 7 (id=5527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000010085000000820000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) listen(0xffffffffffffffff, 0x0) socket(0x1e, 0x805, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$SOUND_MIXER_INFO(0xffffffffffffffff, 0x805c4d65, &(0x7f0000000240)) syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000100)={r5}) socket$kcm(0x2d, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006c00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 57.633765ms ago: executing program 4 (id=5528): prlimit64(0x0, 0x5, &(0x7f0000000140)={0xa, 0x2000000000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) accept4(r0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x0, @private=0xc0586300}], 0x10) 57.042909ms ago: executing program 7 (id=5529): io_uring_setup(0x75b0, &(0x7f0000000100)={0x0, 0xfdcf, 0x1, 0x1}) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {0xb9}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe40, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe1a, 0x4, {{{}, 0x8}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) 56.642157ms ago: executing program 6 (id=5530): r0 = socket$kcm(0x10, 0x3, 0x10) fcntl$setsig(r0, 0xa, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000a40)=@newtaction={0x14, 0x32, 0x216822a75a8bdd29, 0xffe4}, 0x14}}, 0x0) 36.801082ms ago: executing program 8 (id=5531): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1, {0x0, r5}}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2, 0x0}, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x93cea4bee562f1e5, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0xc, 0xa9, &(0x7f00000002c0)=""/169, 0x41100, 0x4c, '\x00', r6, @fallback=0x1d, r1, 0x8, &(0x7f0000000480)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x9, 0x9, 0xf}, 0x10, r7, r1, 0x7, &(0x7f00000003c0)=[r1, r1], &(0x7f0000000400)=[{0x3, 0x2, 0x10, 0x6}, {0x4, 0x3, 0xd, 0x8}, {0x4, 0x1, 0xb, 0xa}, {0x4, 0x1, 0x3, 0x1}, {0x0, 0x4, 0xa, 0xc}, {0x5, 0x3, 0x9, 0xc}, {0x5, 0x1, 0xd, 0x7}], 0x10, 0x5}, 0x94) r8 = socket$kcm(0x10, 0x400000002, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r15, {0x0, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r16, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r16, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) 0s ago: executing program 5 (id=5532): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) r4 = syz_open_pts(r3, 0xa001) dup3(r4, r3, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r5, 0x5608, 0x3) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='ac']) kernel console output (not intermixed with test programs): ysadm_t tclass=mctp_socket permissive=1 [ 1555.165811][ T30] audit: type=1400 audit(2000000986.298:2420): avc: denied { ioctl } for pid=23274 comm="syz.0.4473" path="socket:[66515]" dev="sockfs" ino=66515 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1555.171421][T23275] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4473'. [ 1555.190577][ C0] vkms_vblank_simulate: vblank timer overrun [ 1555.304881][ T48] em28xx 6-1:0.0: AC97 vendor ID = 0x00fc00fe [ 1555.368069][T23279] dummy0 speed is unknown, defaulting to 1000 [ 1555.375488][T23279] lo speed is unknown, defaulting to 1000 [ 1555.512673][ T48] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1555.525093][ T48] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1555.534442][ T48] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1555.542792][ T48] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1555.549937][ T48] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1555.556857][ T48] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1555.571110][ T48] usb 6-1: USB disconnect, device number 28 [ 1555.639720][ T5880] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1555.820364][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 1555.830969][ T5880] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1555.838968][ T5880] usb 1-1: config 0 has no interface number 0 [ 1555.847494][ T5880] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1555.859608][ T5880] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1555.868874][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.894396][ T5880] usb 1-1: config 0 descriptor?? [ 1555.915597][ T5880] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1556.440882][T23301] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4480'. [ 1557.134574][T23315] dummy0 speed is unknown, defaulting to 1000 [ 1557.144631][T23315] lo speed is unknown, defaulting to 1000 [ 1557.934467][T21759] usb 1-1: USB disconnect, device number 43 [ 1559.118978][T23330] trusted_key: syz.2.4485 sent an empty control message without MSG_MORE. [ 1559.195465][T23333] 9pnet: bogus RWRITE count (2 > 1) [ 1559.479949][ T5880] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1559.542547][ T30] audit: type=1400 audit(2000000990.668:2421): avc: denied { setcheckreqprot } for pid=23344 comm="syz.0.4495" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1559.759038][T23349] dummy0 speed is unknown, defaulting to 1000 [ 1559.772320][T23349] lo speed is unknown, defaulting to 1000 [ 1560.151623][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1560.172522][ T5880] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1560.200221][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1560.226312][ T5880] usb 7-1: config 0 descriptor?? [ 1561.187400][T23360] dummy0 speed is unknown, defaulting to 1000 [ 1561.194739][T23360] lo speed is unknown, defaulting to 1000 [ 1561.294407][T23363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4498'. [ 1561.305121][ T5880] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 1561.337605][ T5880] input: HID 0926:3333 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0926:3333.0017/input/input37 [ 1561.505874][T23335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1561.524504][T23335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1561.697110][ T5880] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.6-1/input0 [ 1562.489539][ T5880] usb 7-1: USB disconnect, device number 3 [ 1562.517180][T23385] overlayfs: failed to get inode (-116) [ 1562.548502][T23385] overlayfs: failed to get inode (-116) [ 1563.198086][T23397] dummy0 speed is unknown, defaulting to 1000 [ 1563.212065][T23397] lo speed is unknown, defaulting to 1000 [ 1564.244660][T23412] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4512'. [ 1564.290578][T23414] overlayfs: failed to clone upperpath [ 1564.307162][T23412] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4512'. [ 1565.299524][ T5873] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1565.386091][ T30] audit: type=1400 audit(2000000996.518:2422): avc: denied { getattr } for pid=23431 comm="syz.2.4521" name="/" dev="9p" ino=4412287765254868893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1565.388570][T23432] overlayfs: statfs failed on './file0' [ 1565.452695][ T5873] usb 7-1: Using ep0 maxpacket: 32 [ 1565.464613][ T5873] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1565.538368][ T5873] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1565.558007][ T5873] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1565.574251][ T5873] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.584182][ T5873] usb 7-1: Product: syz [ 1565.588627][ T5873] usb 7-1: Manufacturer: syz [ 1565.595032][ T5873] usb 7-1: SerialNumber: syz [ 1565.919790][T23443] dummy0 speed is unknown, defaulting to 1000 [ 1565.927730][T23443] lo speed is unknown, defaulting to 1000 [ 1566.048148][ T5873] usb 7-1: 0:2 : does not exist [ 1566.102825][ T5873] usb 7-1: USB disconnect, device number 4 [ 1567.443995][T23463] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4527'. [ 1567.471077][T23463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4527'. [ 1567.499461][T23463] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4527'. [ 1567.508969][T23463] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4527'. [ 1568.195084][ T30] audit: type=1400 audit(2000000999.328:2423): avc: denied { map } for pid=23461 comm="syz.5.4530" path="socket:[66885]" dev="sockfs" ino=66885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1568.515080][ T30] audit: type=1400 audit(2000000999.328:2424): avc: denied { read } for pid=23461 comm="syz.5.4530" path="socket:[66885]" dev="sockfs" ino=66885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1568.763724][T23481] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4532'. [ 1569.433687][T23489] dummy0 speed is unknown, defaulting to 1000 [ 1569.441064][T23489] lo speed is unknown, defaulting to 1000 [ 1570.924689][ T30] audit: type=1400 audit(2000001002.058:2425): avc: denied { execute } for pid=23499 comm="syz.0.4537" name="file0" dev="ramfs" ino=67742 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1570.967096][ T30] audit: type=1400 audit(2000001002.058:2426): avc: denied { nosuid_transition } for pid=23499 comm="syz.0.4537" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process2 permissive=1 [ 1571.205592][ T30] audit: type=1400 audit(2000001002.058:2427): avc: denied { transition } for pid=23499 comm="syz.0.4537" path="/file0" dev="ramfs" ino=67742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 1571.415176][ T30] audit: type=1400 audit(2000001002.058:2428): avc: denied { entrypoint } for pid=23499 comm="syz.0.4537" path="/file0" dev="ramfs" ino=67742 scontext=system_u:object_r:hugetlbfs_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1571.438146][ C0] vkms_vblank_simulate: vblank timer overrun [ 1571.446438][ T30] audit: type=1400 audit(2000001002.058:2429): avc: denied { noatsecure } for pid=23499 comm="syz.0.4537" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=process permissive=1 [ 1573.484068][ T30] audit: type=1400 audit(2000001004.618:2430): avc: denied { read } for pid=5171 comm="acpid" name="mouse1" dev="devtmpfs" ino=3798 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1573.505887][ C0] vkms_vblank_simulate: vblank timer overrun [ 1573.576002][T23545] FAT-fs (nullb0): bogus number of reserved sectors [ 1573.582971][T23545] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1573.952951][ T30] audit: type=1400 audit(2000001004.618:2431): avc: denied { open } for pid=5171 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3798 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1573.975720][ C0] vkms_vblank_simulate: vblank timer overrun [ 1573.981909][ T30] audit: type=1400 audit(2000001004.618:2432): avc: denied { ioctl } for pid=5171 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3798 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 1574.006121][ C0] vkms_vblank_simulate: vblank timer overrun [ 1574.047906][ T30] audit: type=1400 audit(2000001004.618:2433): avc: denied { read write } for pid=23538 comm="syz.6.4551" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1574.095339][ T30] audit: type=1400 audit(2000001004.618:2434): avc: denied { open } for pid=23538 comm="syz.6.4551" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1574.310436][T23547] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4554'. [ 1574.347396][T23559] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4556'. [ 1575.956237][T23576] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1576.035940][T23579] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4564'. [ 1576.065203][T23579] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4564'. [ 1576.075708][T23579] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4564'. [ 1578.384770][T23622] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4575'. [ 1578.742697][T23630] overlayfs: failed to get inode (-116) [ 1578.749079][T23630] overlayfs: failed to get inode (-116) [ 1579.399580][ T48] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1579.569464][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 1579.608396][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1579.678887][ T30] audit: type=1400 audit(2000001010.788:2435): avc: denied { connect } for pid=23642 comm="syz.5.4583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1579.707982][ T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1579.758143][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1579.815290][ T48] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1579.857496][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.888169][ T48] usb 3-1: config 0 descriptor?? [ 1579.987106][T23649] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4585'. [ 1580.116189][T23651] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4585'. [ 1580.326814][ T48] shield 0003:0955:7214.0018: unknown main item tag 0x0 [ 1580.368880][ T48] shield 0003:0955:7214.0018: unknown main item tag 0x0 [ 1580.392036][ T48] shield 0003:0955:7214.0018: unknown main item tag 0x0 [ 1580.434176][ T48] shield 0003:0955:7214.0018: unknown main item tag 0x0 [ 1580.450889][ T48] shield 0003:0955:7214.0018: unknown main item tag 0x0 [ 1580.462088][ T48] input: HID 0955:7214 Haptics as /devices/virtual/input/input38 [ 1580.572850][ T48] shield 0003:0955:7214.0018: Registered Thunderstrike controller [ 1580.585795][ T48] shield 0003:0955:7214.0018: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 1580.610798][T23664] random: crng reseeded on system resumption [ 1580.616888][ T30] audit: type=1400 audit(2000001011.748:2436): avc: denied { read write } for pid=23633 comm="syz.2.4579" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1580.640423][ C0] vkms_vblank_simulate: vblank timer overrun [ 1580.930406][T23668] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4589'. [ 1582.196542][T12343] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 1582.259485][T12343] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1582.276783][T12343] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1582.291317][T12343] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1582.319827][T23674] overlayfs: failed to clone upperpath [ 1582.399983][ T5866] usb 3-1: reset high-speed USB device number 57 using dummy_hcd [ 1582.818455][T23679] tmpfs: Unknown parameter 'mPolq' [ 1583.387469][ T30] audit: type=1400 audit(2000001014.518:2437): avc: denied { name_connect } for pid=23681 comm="syz.2.4593" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1583.806855][ T48] usb 3-1: USB disconnect, device number 57 [ 1584.679139][ T30] audit: type=1400 audit(2000001015.808:2438): avc: denied { mount } for pid=23692 comm="syz.2.4597" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1584.772564][ T30] audit: type=1400 audit(2000001015.858:2439): avc: denied { remount } for pid=23692 comm="syz.2.4597" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1584.868277][ T30] audit: type=1400 audit(2000001015.888:2440): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1584.888263][ C0] vkms_vblank_simulate: vblank timer overrun [ 1585.026985][T23706] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4600'. [ 1585.516185][T23708] dummy0 speed is unknown, defaulting to 1000 [ 1585.523002][T23708] lo speed is unknown, defaulting to 1000 [ 1586.759126][ T30] audit: type=1400 audit(2000001017.888:2441): avc: denied { ioctl } for pid=23727 comm="syz.0.4606" path="/dev/usbmon4" dev="devtmpfs" ino=728 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1588.943528][T23751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4614'. [ 1589.109511][ T5873] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1589.260612][ T5873] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1589.767694][ T5873] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1589.776908][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1589.786860][ T5873] usb 7-1: config 0 descriptor?? [ 1589.798332][ T5873] pwc: Askey VC010 type 2 USB webcam detected. [ 1590.206703][ T5873] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1590.218633][ T5873] pwc: recv_control_msg error -32 req 02 val 2700 [ 1590.346757][T23762] xt_nat: multiple ranges no longer supported [ 1591.172398][ T5873] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1591.180041][ T5873] pwc: recv_control_msg error -32 req 04 val 1000 [ 1591.241219][ T5873] pwc: recv_control_msg error -32 req 04 val 1300 [ 1591.598794][ T5873] pwc: recv_control_msg error -32 req 04 val 1400 [ 1591.625320][ T5873] pwc: recv_control_msg error -32 req 02 val 2000 [ 1591.648955][ T5873] pwc: recv_control_msg error -32 req 02 val 2100 [ 1591.667858][ T5873] pwc: recv_control_msg error -32 req 04 val 1500 [ 1591.721848][T23776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1591.763638][T23776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1591.804991][T23776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1591.876569][ T5873] pwc: recv_control_msg error -71 req 02 val 2400 [ 1591.884441][ T5873] pwc: recv_control_msg error -71 req 02 val 2600 [ 1591.891601][ T5873] pwc: recv_control_msg error -71 req 02 val 2900 [ 1591.902552][ T5873] pwc: recv_control_msg error -71 req 02 val 2800 [ 1591.916697][ T5873] pwc: recv_control_msg error -71 req 04 val 1100 [ 1591.931845][ T5873] pwc: recv_control_msg error -71 req 04 val 1200 [ 1591.946896][ T5873] pwc: Registered as video103. [ 1591.957157][ T5873] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input39 [ 1591.996360][ T5873] usb 7-1: USB disconnect, device number 5 [ 1592.581346][ T30] audit: type=1400 audit(2000001023.718:2442): avc: denied { bind } for pid=23785 comm="syz.2.4624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1593.385094][T23814] tmpfs: Unknown parameter 'mPolq' [ 1595.707283][T23830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4633'. [ 1596.939103][T23843] overlayfs: failed to get inode (-116) [ 1596.953560][T23843] overlayfs: failed to get inode (-116) [ 1597.076699][T23847] hugetlbfs: syz.2.4642 (23847): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1597.405996][T23852] ubi31: attaching mtd0 [ 1597.410405][T23852] ubi31 error: ubi_attach_mtd_dev: bad VID header (46848) or data offsets (46912) [ 1598.819232][T23862] kvm: pic: single mode not supported [ 1598.820648][T23862] kvm: pic: level sensitive irq not supported [ 1598.994336][T23862] kvm: pic: single mode not supported [ 1599.000477][T23862] kvm: pic: level sensitive irq not supported [ 1599.013733][T23862] kvm: pic: level sensitive irq not supported [ 1599.020776][T23862] picdev_read: 77 callbacks suppressed [ 1599.020789][T23862] kvm: pic: non byte read [ 1599.037909][T23862] kvm: pic: level sensitive irq not supported [ 1599.047832][T23862] kvm: pic: level sensitive irq not supported [ 1599.054097][T23862] kvm: pic: single mode not supported [ 1599.179825][ T5873] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1599.369931][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 1599.402469][ T5873] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1599.424612][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.446744][ T5873] usb 1-1: Product: syz [ 1599.449753][T23862] kvm: pic: level sensitive irq not supported [ 1599.451028][T23862] kvm: pic: level sensitive irq not supported [ 1599.452219][ T5873] usb 1-1: Manufacturer: syz [ 1599.469075][ T5873] usb 1-1: SerialNumber: syz [ 1599.477507][ T5873] usb 1-1: config 0 descriptor?? [ 1599.480776][T23862] kvm: pic: level sensitive irq not supported [ 1599.482609][T23862] kvm: pic: level sensitive irq not supported [ 1599.488842][T23862] kvm: pic: level sensitive irq not supported [ 1599.756983][ T5873] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1601.031865][ T30] audit: type=1400 audit(2000001032.168:2443): avc: denied { mounton } for pid=23884 comm="syz.6.4656" path="/56/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 1601.054231][ C0] vkms_vblank_simulate: vblank timer overrun [ 1601.268784][ T5873] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1601.791946][ T5873] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1601.808169][ T5873] usb 1-1: media controller created [ 1601.838839][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1602.029188][ T5873] i2c i2c-1: Added multiplexed i2c bus 2 [ 1602.037709][ T5873] rtl2830 1-0010: Realtek RTL2830 successfully attached [ 1602.067882][ T5873] usb 1-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))... [ 1602.073220][T23903] netlink: 'syz.2.4661': attribute type 1 has an invalid length. [ 1602.217405][T23903] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4661'. [ 1602.305046][T23906] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1602.307473][ T5873] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered. [ 1602.359484][T23906] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1602.456592][ T5873] DVB: Unable to find symbol mxl5005s_attach() [ 1602.477570][T23906] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1602.503072][T23906] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1602.580683][T23906] bond3: (slave geneve2): making interface the new active one [ 1602.789759][T23906] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1602.799070][ T5873] usb 1-1: USB disconnect, device number 44 [ 1602.866798][T23903] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1602.995665][ T30] audit: type=1400 audit(2000001034.118:2444): avc: denied { read } for pid=23916 comm="syz.5.4667" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1603.020067][ C0] vkms_vblank_simulate: vblank timer overrun [ 1603.238160][ T30] audit: type=1400 audit(2000001034.118:2445): avc: denied { open } for pid=23916 comm="syz.5.4667" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1603.301851][ T30] audit: type=1400 audit(2000001034.118:2446): avc: denied { ioctl } for pid=23916 comm="syz.5.4667" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1603.439511][ T30] audit: type=1400 audit(2000001034.568:2447): avc: denied { create } for pid=23925 comm="syz.5.4672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1603.472506][ T30] audit: type=1400 audit(2000001034.568:2448): avc: denied { read } for pid=23925 comm="syz.5.4672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1603.496289][ T30] audit: type=1400 audit(2000001034.628:2449): avc: denied { listen } for pid=23928 comm="syz.6.4670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1603.516632][ T30] audit: type=1400 audit(2000001034.628:2450): avc: denied { read } for pid=23928 comm="syz.6.4670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1604.743708][ T5880] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 1604.763704][ T5880] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1605.059488][T16277] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1605.229435][T16277] usb 3-1: Using ep0 maxpacket: 16 [ 1605.243237][T16277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1605.273142][T16277] usb 3-1: New USB device found, idVendor=046d, idProduct=c513, bcdDevice= 0.00 [ 1605.298352][T16277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.302201][T23975] @: renamed from vlan0 (while UP) [ 1605.327633][T16277] usb 3-1: config 0 descriptor?? [ 1605.593616][ T30] audit: type=1400 audit(2000001036.728:2451): avc: denied { write } for pid=23978 comm="syz.0.4687" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1605.766328][T16277] usbhid 3-1:0.0: can't add hid device: -71 [ 1605.772405][T16277] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1605.782320][T16277] usb 3-1: USB disconnect, device number 58 [ 1606.011972][T23985] SELinux: security_context_str_to_sid (5ýÆÉ] ÖS9q#“ë) failed with errno=-22 [ 1606.444711][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880437c4800: rx timeout, send abort [ 1606.453745][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880437c4800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1607.577355][T24017] /dev/nullb0: Can't lookup blockdev [ 1608.347010][T24023] tmpfs: Unknown parameter 'mPolq' [ 1609.239495][ T30] audit: type=1400 audit(2000001040.328:2452): avc: denied { create } for pid=24028 comm="syz.5.4699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1609.830204][ T30] audit: type=1400 audit(2000001040.328:2453): avc: denied { bind } for pid=24028 comm="syz.5.4699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 1611.753041][T24072] dummy0 speed is unknown, defaulting to 1000 [ 1611.766626][T24072] lo speed is unknown, defaulting to 1000 [ 1613.495321][T24099] ptrace attach of "./syz-executor exec"[5811] was attempted by ""[24099] [ 1615.298910][ T5880] hid-generic 0003:0004:0000.001A: unknown main item tag 0x0 [ 1615.339424][ T5880] hid-generic 0003:0004:0000.001A: unknown main item tag 0x0 [ 1615.364402][ T5880] hid-generic 0003:0004:0000.001A: unknown main item tag 0x0 [ 1615.394133][ T5880] hid-generic 0003:0004:0000.001A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1615.479922][T24137] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4729'. [ 1616.293685][T24145] tmpfs: Unknown parameter 'mPolq' [ 1616.923121][ T30] audit: type=1400 audit(2000001048.048:2454): avc: denied { connect } for pid=24147 comm="syz.5.4733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1617.243363][ T30] audit: type=1400 audit(2000001048.048:2455): avc: denied { write } for pid=24147 comm="syz.5.4733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1617.366731][ T30] audit: type=1400 audit(2000001048.108:2456): avc: denied { read } for pid=24147 comm="syz.5.4733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1618.554441][T24170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4748'. [ 1621.231507][T24196] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1623.131786][ T30] audit: type=1400 audit(2000001054.268:2457): avc: denied { read write } for pid=24219 comm="syz.6.4751" name="sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1623.201091][ T30] audit: type=1400 audit(2000001054.268:2458): avc: denied { open } for pid=24219 comm="syz.6.4751" path="/dev/sg0" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1623.225080][ C0] vkms_vblank_simulate: vblank timer overrun [ 1623.388664][T24232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4753'. [ 1624.149070][ T30] audit: type=1400 audit(2000001054.328:2459): avc: denied { ioctl } for pid=24219 comm="syz.6.4751" path="/dev/sg0" dev="devtmpfs" ino=764 ioctlcmd=0x227b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1624.174585][ C0] vkms_vblank_simulate: vblank timer overrun [ 1626.239545][ T5880] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1626.439538][T21759] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1626.589454][ T5880] usb 1-1: device not accepting address 45, error -71 [ 1626.929699][T21759] usb 7-1: Using ep0 maxpacket: 8 [ 1626.943348][T21759] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1626.954248][ T30] audit: type=1400 audit(2000001058.088:2460): avc: denied { mounton } for pid=24255 comm="syz.2.4762" path="/954/file0" dev="tmpfs" ino=5048 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 1626.980480][T21759] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.996795][T21759] usb 7-1: Product: syz [ 1627.005511][T21759] usb 7-1: Manufacturer: syz [ 1627.020840][T21759] usb 7-1: SerialNumber: syz [ 1627.065115][T24265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4759'. [ 1627.093116][T21759] usb 7-1: config 0 descriptor?? [ 1627.131487][T21759] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1628.844959][T21759] gspca_sonixj: reg_w1 err -110 [ 1628.900309][T21759] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 1628.937364][T24297] overlayfs: failed to clone upperpath [ 1629.926940][T24309] mkiss: ax0: crc mode is auto. [ 1630.076284][ T5880] usb 7-1: USB disconnect, device number 6 [ 1630.077806][ T30] audit: type=1400 audit(2000001061.208:2461): avc: denied { write } for pid=24308 comm="syz.0.4772" path="socket:[69272]" dev="sockfs" ino=69272 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1632.217960][T24333] netlink: 'syz.5.4777': attribute type 10 has an invalid length. [ 1632.225863][T24333] bond0: left promiscuous mode [ 1632.243131][T24333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1632.253256][T24333] bond0: entered promiscuous mode [ 1632.261323][T24333] team0: Port device bond0 added [ 1634.304067][T24355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4786'. [ 1634.577420][T24354] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4785'. [ 1635.610965][T24367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1636.047043][T24377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4794'. [ 1636.142051][T24377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4794'. [ 1639.379705][ T48] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1639.652419][ T30] audit: type=1400 audit(2000001070.788:2462): avc: denied { setopt } for pid=24406 comm="syz.4.4805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1639.694128][T19671] Bluetooth: hci0: command 0x0406 tx timeout [ 1639.702831][ T48] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1639.713831][ T48] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1639.731371][ T48] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1639.749411][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.783106][T24401] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1639.978495][ T48] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1640.813230][T24424] dlm: no local IP address has been set [ 1640.820489][T24424] dlm: cannot start dlm midcomms -107 [ 1641.260894][ T30] audit: type=1400 audit(2000001072.388:2463): avc: denied { attach_queue } for pid=24425 comm="syz.5.4810" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1641.298755][ T30] audit: type=1400 audit(2000001072.428:2464): avc: denied { create } for pid=24428 comm="syz.6.4811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1641.570300][ T30] audit: type=1400 audit(2000001072.608:2465): avc: denied { connect } for pid=24428 comm="syz.6.4811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1641.676358][ T30] audit: type=1400 audit(2000001072.658:2466): avc: denied { bind } for pid=24428 comm="syz.6.4811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1641.821488][ T5880] usb 3-1: USB disconnect, device number 59 [ 1643.738856][T24454] dummy0 speed is unknown, defaulting to 1000 [ 1643.753176][T24454] lo speed is unknown, defaulting to 1000 [ 1645.384307][ T30] audit: type=1400 audit(2000001076.488:2467): avc: denied { getopt } for pid=24476 comm="syz.6.4825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1646.550384][T24487] option changes via remount are deprecated (pid=24486 comm=syz.5.4827) [ 1646.559095][ T30] audit: type=1400 audit(2000001077.688:2468): avc: denied { remount } for pid=24486 comm="syz.5.4827" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1646.653667][ T30] audit: type=1400 audit(2000001077.788:2469): avc: denied { unmount } for pid=14919 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1647.367179][ T30] audit: type=1400 audit(2000001078.088:2470): avc: denied { read } for pid=24484 comm="syz.6.4826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1648.176050][T24512] dummy0 speed is unknown, defaulting to 1000 [ 1648.189278][T24512] lo speed is unknown, defaulting to 1000 [ 1651.137180][ T30] audit: type=1400 audit(2000001081.948:2471): avc: denied { shutdown } for pid=24537 comm="syz.4.4836" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1651.233473][T24546] binder_alloc: 24544: pid 24544 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1651.449612][ T30] audit: type=1400 audit(2000001082.068:2472): avc: denied { read } for pid=24537 comm="syz.4.4836" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1651.485406][ T48] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1652.119433][ T48] usb 3-1: Using ep0 maxpacket: 16 [ 1652.209950][ T48] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1652.220420][ T48] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1652.233454][ T48] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1652.243629][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.278759][ T48] usb 3-1: config 0 descriptor?? [ 1652.411914][ T48] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input40 [ 1652.440869][T24562] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4842'. [ 1653.914897][T24543] bcm5974 3-1:0.0: could not read from device [ 1653.915153][ T5866] usb 3-1: USB disconnect, device number 60 [ 1654.069001][T24582] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4845'. [ 1655.479480][ T5866] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 1655.770192][ T5880] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1656.399823][ T5880] usb 3-1: Using ep0 maxpacket: 8 [ 1656.411982][ T5866] usb 7-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1656.433282][ T5866] usb 7-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1656.440881][ T5880] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1656.445630][ T5866] usb 7-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1656.469132][ T5866] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1656.486055][ T5866] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1656.488210][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.495791][ T5866] usb 7-1: SerialNumber: syz [ 1656.535503][ T5880] usb 3-1: Product: syz [ 1656.547431][ T5880] usb 3-1: Manufacturer: syz [ 1656.558583][ T5880] usb 3-1: SerialNumber: syz [ 1656.566899][ T5880] usb 3-1: config 0 descriptor?? [ 1656.666348][ T5880] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1656.766696][T24625] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4857'. [ 1656.791078][T24626] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4850'. [ 1657.055302][T24630] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4859'. [ 1658.373292][ T5866] rndis_host 7-1:253.0: RNDIS init failed, -71 [ 1658.400906][ T5866] rndis_host 7-1:253.0: probe with driver rndis_host failed with error -71 [ 1658.455783][ T5866] usb 7-1: USB disconnect, device number 7 [ 1658.635237][T24651] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4867'. [ 1659.886767][ T5880] gspca_sonixj: reg_w1 err -71 [ 1659.930165][ T5880] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1660.019748][ T5880] usb 3-1: USB disconnect, device number 61 [ 1660.340152][ T30] audit: type=1800 audit(2000001091.358:2473): pid=24667 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4872" name="file1" dev="overlay" ino=2711 res=0 errno=0 [ 1660.365560][T24670] 9pnet_fd: Insufficient options for proto=fd [ 1660.564617][T24678] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4874'. [ 1661.055528][T24681] dummy0 speed is unknown, defaulting to 1000 [ 1661.063420][T24681] lo speed is unknown, defaulting to 1000 [ 1661.479764][ T30] audit: type=1400 audit(2000001092.488:2474): avc: denied { create } for pid=24689 comm="syz.4.4879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1661.894741][ T30] audit: type=1400 audit(2000001092.498:2475): avc: denied { write } for pid=24689 comm="syz.4.4879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1663.994804][T24712] tipc: Started in network mode [ 1664.022152][T24712] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 1664.077122][T24712] tipc: Enabled bearer , priority 10 [ 1665.242714][T24725] dummy0 speed is unknown, defaulting to 1000 [ 1665.250037][T24725] lo speed is unknown, defaulting to 1000 [ 1665.453971][ T5866] tipc: Node number set to 10922666 [ 1665.642743][ T30] audit: type=1400 audit(2000001096.768:2476): avc: denied { write } for pid=24728 comm="syz.5.4887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1666.692133][T24753] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4893'. [ 1666.716186][T24745] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4892'. [ 1667.920809][T24784] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4900'. [ 1668.166140][T24786] dummy0 speed is unknown, defaulting to 1000 [ 1668.179901][T24786] lo speed is unknown, defaulting to 1000 [ 1669.760138][ T30] audit: type=1400 audit(2000001100.878:2477): avc: denied { getopt } for pid=24793 comm="syz.5.4904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1669.969340][ T30] audit: type=1400 audit(2000001101.098:2478): avc: denied { write } for pid=24805 comm="syz.4.4907" path="socket:[71071]" dev="sockfs" ino=71071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1670.788827][T16277] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1671.139585][T16277] usb 7-1: Using ep0 maxpacket: 8 [ 1671.168542][T16277] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1671.181182][T16277] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1671.288437][T16277] usb 7-1: Product: syz [ 1671.412371][T24830] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4914'. [ 1671.924466][T24830] dummy0 speed is unknown, defaulting to 1000 [ 1671.931823][T24830] lo speed is unknown, defaulting to 1000 [ 1672.145756][T16277] usb 7-1: Manufacturer: syz [ 1672.263896][T16277] usb 7-1: SerialNumber: syz [ 1672.279587][T16277] usb 7-1: config 0 descriptor?? [ 1672.286900][T16277] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1672.426072][ T5880] libceph: connect (1)[c::]:6789 error -101 [ 1672.432316][ T5880] libceph: mon0 (1)[c::]:6789 connect error [ 1672.504040][T24837] ceph: No mds server is up or the cluster is laggy [ 1673.769847][T16277] gspca_sonixj: reg_w1 err -110 [ 1673.809762][T16277] sonixj 7-1:0.0: probe with driver sonixj failed with error -110 [ 1675.233099][T12343] usb 7-1: USB disconnect, device number 8 [ 1675.312962][ T30] audit: type=1400 audit(2000001106.448:2479): avc: denied { write } for pid=24861 comm="syz.5.4924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1677.578955][T24900] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4933'. [ 1677.639555][ T30] audit: type=1400 audit(2000001108.758:2480): avc: denied { execute_no_trans } for pid=24902 comm="syz.5.4936" path="/file1" dev="ramfs" ino=72179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1678.176266][ T30] audit: type=1400 audit(2000001109.308:2481): avc: denied { ioctl } for pid=24910 comm="syz.5.4939" path="socket:[72190]" dev="sockfs" ino=72190 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1678.200960][ C0] vkms_vblank_simulate: vblank timer overrun [ 1678.247037][T24911] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4938'. [ 1679.126729][ T30] audit: type=1326 audit(2000001110.258:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24927 comm="syz.4.4944" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa512b8e929 code=0x0 [ 1679.149705][ C0] vkms_vblank_simulate: vblank timer overrun [ 1679.224106][ T30] audit: type=1400 audit(2000001110.358:2483): avc: denied { search } for pid=24897 comm="syz.0.4935" name="/" dev="configfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1679.292013][ T30] audit: type=1400 audit(2000001110.358:2484): avc: denied { search } for pid=24897 comm="syz.0.4935" name="/" dev="configfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1679.856537][ T30] audit: type=1400 audit(2000001110.988:2485): avc: denied { create } for pid=24933 comm="syz.0.4945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1680.053155][T24938] IPv6: Can't replace route, no match found [ 1681.170327][T24957] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4950'. [ 1681.721021][T24953] dummy0 speed is unknown, defaulting to 1000 [ 1681.736975][T24953] lo speed is unknown, defaulting to 1000 [ 1682.288522][T24966] netlink: 'syz.2.4952': attribute type 11 has an invalid length. [ 1683.063232][T24977] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4953'. [ 1683.415754][ T30] audit: type=1400 audit(2000001114.498:2486): avc: denied { watch } for pid=24982 comm="syz.2.4956" path="/982/file1" dev="tmpfs" ino=5193 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1683.779167][ T30] audit: type=1400 audit(2000001114.498:2487): avc: denied { watch_sb watch_reads } for pid=24982 comm="syz.2.4956" path="/982/file1" dev="tmpfs" ino=5193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1683.999691][ T30] audit: type=1400 audit(2000001114.728:2488): avc: denied { bind } for pid=24988 comm="syz.6.4957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1684.160239][T24994] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1686.705036][T25021] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4964'. [ 1687.412399][T25042] netlink: 'syz.0.4970': attribute type 39 has an invalid length. [ 1687.630573][T25044] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4971'. [ 1689.494770][T25066] overlayfs: failed to clone upperpath [ 1690.210253][ T5880] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1690.477767][ T5880] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1690.535684][ T5880] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1690.885834][ T5880] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1690.942645][ T5880] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1690.986319][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1691.001045][ T5880] usb 6-1: SerialNumber: syz [ 1691.014283][ T5880] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1691.026613][ T5880] usb-storage 6-1:1.0: USB Mass Storage device detected [ 1691.035054][ T5880] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1691.192706][ T30] audit: type=1400 audit(2000001122.328:2489): avc: denied { ioctl } for pid=25095 comm="syz.0.4983" path="socket:[72451]" dev="sockfs" ino=72451 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1691.306678][ T5880] usb 6-1: USB disconnect, device number 29 [ 1692.689619][T24282] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1692.849729][T24282] usb 7-1: Using ep0 maxpacket: 16 [ 1693.195910][T24282] usb 7-1: config 1 interface 0 altsetting 174 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1693.224740][T24282] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1693.240286][T24282] usb 7-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.40 [ 1693.249520][T24282] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.257598][T24282] usb 7-1: Product: syz [ 1693.262434][T24282] usb 7-1: Manufacturer: syz [ 1693.264010][T25131] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4994'. [ 1693.267074][T24282] usb 7-1: SerialNumber: syz [ 1693.310854][T25131] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4994'. [ 1694.109573][ T30] audit: type=1400 audit(2000001124.748:2490): avc: denied { write } for pid=25132 comm="syz.5.4995" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1694.495840][T24282] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input41 [ 1694.880854][T24282] usb 7-1: USB disconnect, device number 9 [ 1695.015285][T25154] dummy0 speed is unknown, defaulting to 1000 [ 1695.027776][T25154] lo speed is unknown, defaulting to 1000 [ 1695.386779][T25148] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4999'. [ 1695.506239][T22669] udevd[22669]: Error opening device "/dev/input/event4": No such file or directory [ 1695.594457][T22669] udevd[22669]: Unable to EVIOCGABS device "/dev/input/event4" [ 1695.708208][T22669] udevd[22669]: Unable to EVIOCGABS device "/dev/input/event4" [ 1695.749981][T22669] udevd[22669]: Unable to EVIOCGABS device "/dev/input/event4" [ 1695.760200][T22669] udevd[22669]: Unable to EVIOCGABS device "/dev/input/event4" [ 1697.796333][T25188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5006'. [ 1701.913822][T25237] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5018'. [ 1705.404219][T25294] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5033'. [ 1706.100030][ T30] audit: type=1400 audit(2000001137.228:2491): avc: denied { read } for pid=25303 comm="syz.0.5036" lport=49386 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1706.169486][T24282] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1706.216319][ T30] audit: type=1400 audit(2000001137.348:2492): avc: denied { accept } for pid=25311 comm="syz.6.5040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1706.321916][T24282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1706.334230][T24282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1706.345541][T24282] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1706.361226][T24282] usb 6-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1706.413885][T24282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.446459][T24282] usb 6-1: config 0 descriptor?? [ 1708.254339][T25344] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5047'. [ 1709.255247][T24282] usbhid 6-1:0.0: can't add hid device: -71 [ 1709.275229][T24282] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1709.291354][T24282] usb 6-1: USB disconnect, device number 30 [ 1710.969602][T25372] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5051'. [ 1712.076943][T25390] net_ratelimit: 4 callbacks suppressed [ 1712.076955][T25390] netlink: zone id is out of range [ 1712.241293][T25397] lo: entered allmulticast mode [ 1712.303108][T25401] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1712.303515][T25390] netlink: set zone limit has 4 unknown bytes [ 1712.321286][T25396] lo: left allmulticast mode [ 1712.505601][T25395] kvm: pic: non byte read [ 1712.697027][T25395] pic_ioport_write: 1293 callbacks suppressed [ 1712.697053][T25395] kvm: pic: level sensitive irq not supported [ 1712.722112][T25409] lo: entered allmulticast mode [ 1712.750823][T25395] kvm: pic: non byte read [ 1712.771344][T25395] kvm: pic: level sensitive irq not supported [ 1712.771726][T25395] kvm: pic: non byte read [ 1712.793192][T25409] tunl0: entered allmulticast mode [ 1712.807143][T25409] gre0: entered allmulticast mode [ 1712.820773][T25395] kvm: pic: level sensitive irq not supported [ 1712.820987][T25395] kvm: pic: non byte read [ 1712.832771][T25409] gretap0: entered allmulticast mode [ 1712.838542][T25409] erspan0: entered allmulticast mode [ 1712.844997][T25409] ip_vti0: entered allmulticast mode [ 1712.851036][T25409] ip6_vti0: entered allmulticast mode [ 1712.856954][T25409] sit0: entered allmulticast mode [ 1712.862630][T25409] ip6tnl0: entered allmulticast mode [ 1712.868374][T25409] ip6gre0: entered allmulticast mode [ 1712.874985][T25409] syz_tun: entered allmulticast mode [ 1712.881221][T25409] ip6gretap0: entered allmulticast mode [ 1712.887163][T25409] bond0: entered allmulticast mode [ 1712.894621][T25409] dummy0: entered allmulticast mode [ 1712.900223][T25409] nlmon0: entered allmulticast mode [ 1712.905777][T25409] caif0: entered allmulticast mode [ 1712.915936][T25409] vxcan0: entered allmulticast mode [ 1712.926689][T25409] vxcan1: entered allmulticast mode [ 1712.934818][T25409] veth0: entered allmulticast mode [ 1712.941485][T25409] veth1: entered allmulticast mode [ 1712.947917][T25409] wg0: entered allmulticast mode [ 1712.954642][T25409] wg1: entered allmulticast mode [ 1712.960224][T25409] wg2: entered allmulticast mode [ 1712.965388][T25409] veth0_to_bridge: entered allmulticast mode [ 1712.973225][T25409] bridge_slave_0: entered allmulticast mode [ 1712.979368][T25409] veth1_to_bridge: entered allmulticast mode [ 1712.987529][T25409] bridge_slave_1: entered allmulticast mode [ 1712.993623][T25409] veth0_to_bond: entered allmulticast mode [ 1712.999800][T25409] bond_slave_0: entered allmulticast mode [ 1713.005956][T25409] veth0_to_team: entered allmulticast mode [ 1713.014667][T25409] team_slave_0: entered allmulticast mode [ 1713.025624][T25409] veth1_to_team: entered allmulticast mode [ 1713.033719][T25409] team_slave_1: entered allmulticast mode [ 1713.076418][T25409] veth0_to_batadv: entered allmulticast mode [ 1713.201589][T25409] batadv_slave_0: entered allmulticast mode [ 1713.208131][T25409] veth1_to_batadv: entered allmulticast mode [ 1713.214833][T25409] batadv_slave_1: entered allmulticast mode [ 1713.229219][T25409] xfrm0: entered allmulticast mode [ 1713.436059][T25409] veth0_to_hsr: entered allmulticast mode [ 1713.469639][T25409] hsr_slave_0: entered allmulticast mode [ 1713.521342][T25409] veth1_to_hsr: entered allmulticast mode [ 1713.548123][T25409] hsr_slave_1: entered allmulticast mode [ 1713.711346][T25409] hsr0: entered allmulticast mode [ 1713.861035][T25409] veth1_virt_wifi: entered allmulticast mode [ 1713.867178][T25409] veth0_virt_wifi: entered allmulticast mode [ 1713.882117][T25409] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 1713.917978][T25409] veth1_vlan: entered allmulticast mode [ 1713.946443][T25409] vlan0: entered allmulticast mode [ 1714.059731][T25409] vlan1: entered allmulticast mode [ 1714.065657][T25409] macvlan0: entered allmulticast mode [ 1714.071690][T25409] macvlan1: entered allmulticast mode [ 1714.077254][T25409] ipvlan0: entered allmulticast mode [ 1714.087072][T25409] ipvlan1: entered allmulticast mode [ 1714.103967][T25409] veth1_macvtap: entered allmulticast mode [ 1714.110462][T25409] veth0_macvtap: entered allmulticast mode [ 1714.116453][T25409] macsec0: entered allmulticast mode [ 1714.122228][T25409] geneve1: entered allmulticast mode [ 1714.127690][T25409] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1714.135539][T25409] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 1714.283850][T25409] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 1714.294393][T25409] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 1714.303763][T25409] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 1714.313082][T25409] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 1715.053708][T25409] veth2: entered allmulticast mode [ 1715.059231][T25409] veth3: entered allmulticast mode [ 1715.066643][T25409] gretap1: entered allmulticast mode [ 1715.072263][T25409] bond1: entered allmulticast mode [ 1715.077537][T25409] vxlan0: left promiscuous mode [ 1715.432607][T25409] vxlan0: entered allmulticast mode [ 1715.443168][T25409] vxlan1: entered allmulticast mode [ 1715.448858][T25409] bridge1: entered allmulticast mode [ 1715.454702][T25409] syztnl2: entered allmulticast mode [ 1715.468139][T25409] sit1: entered allmulticast mode [ 1715.548675][T25409] bridge0: entered allmulticast mode [ 1715.554617][T25409] geneve0: left promiscuous mode [ 1715.560150][T25409] syzkaller1: entered allmulticast mode [ 1715.566422][T25409] ipip0: entered allmulticast mode [ 1715.673467][T25409] bridge2: entered allmulticast mode [ 1716.330560][T25449] dummy0 speed is unknown, defaulting to 1000 [ 1716.342954][T25449] lo speed is unknown, defaulting to 1000 [ 1716.796685][T25423] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5061'. [ 1716.897028][ T30] audit: type=1400 audit(2000001148.028:2493): avc: denied { setopt } for pid=25453 comm="syz.4.5072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1717.145492][T25464] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5073'. [ 1719.860173][T25458] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5073'. [ 1720.327584][T25480] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5076'. [ 1720.854012][T25488] dummy0 speed is unknown, defaulting to 1000 [ 1720.868103][T25488] lo speed is unknown, defaulting to 1000 [ 1721.274865][ T30] audit: type=1400 audit(2000001152.398:2494): avc: denied { ioctl } for pid=25491 comm="syz.4.5079" path="socket:[74025]" dev="sockfs" ino=74025 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1721.832576][T25496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5080'. [ 1722.261608][T25509] Invalid ELF header type: 3 != 1 [ 1722.267754][T25509] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 25509 comm: syz.0.5083) [ 1722.297796][T25510] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5084'. [ 1722.308661][ T30] audit: type=1400 audit(2000001153.398:2495): avc: denied { module_load } for pid=25507 comm="syz.0.5083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1722.374029][ T30] audit: type=1800 audit(2000001153.418:2496): pid=25509 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.5083" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=73057 res=0 errno=0 [ 1722.407482][ C0] vkms_vblank_simulate: vblank timer overrun [ 1722.995656][T25517] dummy0 speed is unknown, defaulting to 1000 [ 1723.012910][T25517] lo speed is unknown, defaulting to 1000 [ 1723.387851][T25522] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5086'. [ 1724.540505][ T30] audit: type=1400 audit(2000001155.658:2497): avc: denied { accept } for pid=25532 comm="syz.6.5090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1727.000091][ T48] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1727.150183][ T48] usb 3-1: not running at top speed; connect to a high speed hub [ 1727.204702][ T48] usb 3-1: config 1 has an invalid interface number: 78 but max is 0 [ 1727.206390][T25568] unsupported nlmsg_type 40 [ 1727.255498][ T48] usb 3-1: config 1 has no interface number 0 [ 1727.282580][ T48] usb 3-1: config 1 interface 78 altsetting 3 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1727.321339][ T48] usb 3-1: config 1 interface 78 has no altsetting 0 [ 1727.356417][ T48] usb 3-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=ec.57 [ 1727.374580][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.384990][ T48] usb 3-1: Product: syz [ 1727.389152][ T48] usb 3-1: Manufacturer: Ч [ 1727.395531][ T48] usb 3-1: SerialNumber: syz [ 1728.912093][ T30] audit: type=1800 audit(2000001160.038:2498): pid=25585 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.5105" name="/" dev="9p" ino=4611686018427387906 res=0 errno=0 [ 1730.632335][ T48] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 1730.702916][ T48] usb 3-1: selecting invalid altsetting 0 [ 1730.767849][ T2330] pvrusb2: Failed to submit write-control URB status=-90 [ 1730.849871][ T48] usb 3-1: USB disconnect, device number 62 [ 1730.866246][ T2330] pvrusb2: Device being rendered inoperable [ 1730.944234][ T2330] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1731.065975][ T2330] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1731.334501][ T30] audit: type=1400 audit(2000001162.468:2499): avc: denied { read } for pid=25619 comm="syz.6.5115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1734.788283][ T30] audit: type=1400 audit(2000001165.918:2500): avc: denied { write } for pid=25630 comm="syz.2.5116" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1734.808423][ T30] audit: type=1400 audit(2000001165.918:2501): avc: denied { read } for pid=25630 comm="syz.2.5116" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 1734.827990][ C0] vkms_vblank_simulate: vblank timer overrun [ 1737.373966][T25663] netlink: 'syz.6.5125': attribute type 1 has an invalid length. [ 1737.468349][T25659] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1737.483459][T25663] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1737.496893][T25663] bond1 (unregistering): Released all slaves [ 1739.713239][ T30] audit: type=1400 audit(2000001170.848:2502): avc: denied { create } for pid=25675 comm="syz.5.5130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 1739.920062][ T30] audit: type=1400 audit(2000001170.908:2503): avc: denied { name_bind } for pid=25679 comm="syz.4.5131" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1740.170821][ T30] audit: type=1400 audit(2000001170.918:2504): avc: denied { sys_admin } for pid=25675 comm="syz.5.5130" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 1741.148378][T25692] hsr0 speed is unknown, defaulting to 1000 [ 1741.177508][T25692] hsr0 speed is unknown, defaulting to 1000 [ 1741.196419][T25692] hsr0 speed is unknown, defaulting to 1000 [ 1741.243488][T25692] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1741.307765][T25505] udevd[25505]: setting mode of /dev/infiniband/uverbs0 to 020666 failed: Read-only file system [ 1741.320861][T25692] hsr0 speed is unknown, defaulting to 1000 [ 1741.375020][T25692] hsr0 speed is unknown, defaulting to 1000 [ 1741.385981][T25505] udevd[25505]: setting owner of /dev/infiniband/uverbs0 to uid=0, gid=0 failed: Read-only file system [ 1741.401555][T25692] hsr0 speed is unknown, defaulting to 1000 [ 1741.421907][T25692] hsr0 speed is unknown, defaulting to 1000 [ 1741.449460][T16277] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1741.466955][T25692] hsr0 speed is unknown, defaulting to 1000 [ 1741.689385][T16277] usb 7-1: Using ep0 maxpacket: 16 [ 1741.696223][T16277] usb 7-1: config 0 has an invalid interface number: 198 but max is 0 [ 1741.705578][T16277] usb 7-1: config 0 has no interface number 0 [ 1741.714818][T16277] usb 7-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=30.1d [ 1741.733723][T16277] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.744799][T16277] usb 7-1: Product: syz [ 1741.751070][T16277] usb 7-1: Manufacturer: syz [ 1741.758637][T16277] usb 7-1: SerialNumber: syz [ 1741.976915][T16277] usb 7-1: config 0 descriptor?? [ 1741.999696][T16277] usb_ehset_test 7-1:0.198: probe with driver usb_ehset_test failed with error -32 [ 1742.723599][T19671] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1742.734333][T19671] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1742.742947][T19671] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1742.750690][T19671] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1742.758133][T19671] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1742.793128][T25716] lo speed is unknown, defaulting to 1000 [ 1742.799810][T25716] hsr0 speed is unknown, defaulting to 1000 [ 1742.883852][T25716] chnl_net:caif_netlink_parms(): no params data found [ 1742.971500][T12343] usb 7-1: USB disconnect, device number 10 [ 1743.355411][T25716] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.409487][T25716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1744.448132][T25716] bridge_slave_0: entered allmulticast mode [ 1744.462006][T25716] bridge_slave_0: entered promiscuous mode [ 1744.495072][T25716] bridge0: port 2(bridge_slave_1) entered blocking state [ 1744.502354][T25716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1744.523265][T25716] bridge_slave_1: entered allmulticast mode [ 1744.719824][T25716] bridge_slave_1: entered promiscuous mode [ 1744.799461][ T51] Bluetooth: hci5: command tx timeout [ 1745.530636][T25716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1745.600731][T25749] netlink: 'syz.2.5147': attribute type 9 has an invalid length. [ 1745.608514][T25749] netlink: 211988 bytes leftover after parsing attributes in process `syz.2.5147'. [ 1746.066335][T25716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1746.949357][ T51] Bluetooth: hci5: command tx timeout [ 1747.324603][T25716] team0: Port device team_slave_0 added [ 1747.383232][T25716] team0: Port device team_slave_1 added [ 1748.027346][T25716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1748.045388][T25716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1748.072403][T25716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1748.090680][T25716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1748.110506][T25716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1748.139091][T25716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1748.139478][T16277] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1748.213058][T25716] hsr_slave_0: entered promiscuous mode [ 1748.231952][T25716] hsr_slave_1: entered promiscuous mode [ 1748.248225][T25716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1748.278007][T25716] Cannot create hsr debugfs directory [ 1748.543863][T16277] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1748.557427][T16277] usb 6-1: config 192 has an invalid interface number: 162 but max is 0 [ 1748.589237][T16277] usb 6-1: config 192 has no interface number 0 [ 1748.596217][T16277] usb 6-1: config 192 interface 162 has no altsetting 0 [ 1748.989412][ T51] Bluetooth: hci5: command tx timeout [ 1749.399146][T16277] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=56.c3 [ 1749.412696][T16277] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.459611][T16277] usb 6-1: Product: syz [ 1749.463790][T16277] usb 6-1: Manufacturer: syz [ 1749.471113][T16277] usb 6-1: SerialNumber: syz [ 1749.564375][T25716] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1749.581787][T25716] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1749.604855][T25716] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1749.631440][T25716] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1749.777543][T25796] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1749.835612][T25716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1749.843610][T16277] usb-storage 6-1:192.162: USB Mass Storage device detected [ 1749.886141][T25716] 8021q: adding VLAN 0 to HW filter on device team0 [ 1749.887537][T16277] usb-storage 6-1:192.162: device ignored [ 1749.937123][T24122] bridge0: port 1(bridge_slave_0) entered blocking state [ 1749.944218][T24122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1750.009148][T24122] bridge0: port 2(bridge_slave_1) entered blocking state [ 1750.016318][T24122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1750.032970][T16277] usb 6-1: USB disconnect, device number 31 [ 1750.977778][T25716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1751.053517][ T51] Bluetooth: hci5: command tx timeout [ 1751.068161][T25716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1751.330864][ T30] audit: type=1326 audit(2000001182.468:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25802 comm="syz.5.5162" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0ac38e929 code=0x0 [ 1752.599140][T25716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1754.024533][T25716] veth0_vlan: entered promiscuous mode [ 1754.084779][T25716] veth1_vlan: entered promiscuous mode [ 1754.235883][T25716] veth0_macvtap: entered promiscuous mode [ 1754.265081][T25716] veth1_macvtap: entered promiscuous mode [ 1754.957889][T25716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1755.022281][T25849] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5169'. [ 1755.197530][T25716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1755.248529][T25716] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.289452][T25716] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.298631][T25716] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.319525][T25716] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1755.837464][T13915] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1756.047241][T13915] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1756.700023][T25872] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5172'. [ 1756.765397][T24122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1756.843813][T24122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1758.557792][T25910] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5184'. [ 1761.217316][T25941] netlink: 'syz.5.5191': attribute type 9 has an invalid length. [ 1761.225151][T25941] netlink: 211988 bytes leftover after parsing attributes in process `syz.5.5191'. [ 1763.112207][T25951] loop6: detected capacity change from 0 to 63 [ 1763.339352][ T5866] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1763.443132][T25505] buffer_io_error: 419 callbacks suppressed [ 1763.443142][T25505] Buffer I/O error on dev loop6, logical block 0, async page read [ 1763.465240][T25505] Buffer I/O error on dev loop6, logical block 0, async page read [ 1763.473497][T25505] Buffer I/O error on dev loop6, logical block 0, async page read [ 1763.483292][T25505] Buffer I/O error on dev loop6, logical block 0, async page read [ 1763.492230][T25505] Buffer I/O error on dev loop6, logical block 0, async page read [ 1763.504078][T25505] udevd[25505]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 1763.518929][T25951] Buffer I/O error on dev loop6, logical block 0, async page read [ 1763.537953][T25951] Buffer I/O error on dev loop6, logical block 0, async page read [ 1763.551053][T25951] Buffer I/O error on dev loop6, logical block 0, async page read [ 1763.568744][T25951] Buffer I/O error on dev loop6, logical block 0, async page read [ 1763.582347][T25957] Buffer I/O error on dev loop6, logical block 0, async page read [ 1763.770613][ T5866] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1763.789275][ T5866] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1763.809276][ T5866] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1763.824037][ T5866] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1764.331552][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1764.341026][ T5866] usb 6-1: Product: syz [ 1764.345250][ T5866] usb 6-1: Manufacturer: syz [ 1764.350478][ T5866] usb 6-1: SerialNumber: syz [ 1764.401184][T25505] udevd[25505]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 1764.477801][T25505] udevd[25505]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 1764.563366][T25505] udevd[25505]: symlink '../../loop6' '/dev/disk/by-diskseq/100.tmp-b7:6' failed: Read-only file system [ 1764.598606][T25505] udevd[25505]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1764.628928][ T5866] usb 6-1: 0:2 : does not exist [ 1764.657919][ T5866] usb 6-1: USB disconnect, device number 32 [ 1765.821209][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1766.252172][ T30] audit: type=1400 audit(2000001197.388:2506): avc: denied { mounton } for pid=25981 comm="syz.6.5203" path="/proc/555/task" dev="proc" ino=75174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1768.048193][T26009] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5208'. [ 1768.587032][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1769.574260][T26026] lo speed is unknown, defaulting to 1000 [ 1769.588060][T26026] hsr0 speed is unknown, defaulting to 1000 [ 1770.350754][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1770.718924][ T5866] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 1770.988217][ T5866] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1771.012132][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.442467][ T5866] usb 3-1: config 0 descriptor?? [ 1771.470784][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1771.521706][ T5866] usb 3-1: selecting invalid altsetting 3 [ 1771.591093][ T5866] comedi comedi0: could not set alternate setting 3 in high speed [ 1771.598911][ T5866] usbduxsigma 3-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1771.885281][ T5866] usbduxsigma 3-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1771.906291][ T30] audit: type=1400 audit(2000001203.028:2507): avc: denied { remount } for pid=26030 comm="syz.2.5214" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1772.394456][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1773.919784][ T5866] usb 3-1: USB disconnect, device number 63 [ 1774.208930][T26079] lo speed is unknown, defaulting to 1000 [ 1774.215951][T26079] hsr0 speed is unknown, defaulting to 1000 [ 1775.287148][T25505] udevd[25505]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1775.722725][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1776.450243][T26106] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5226'. [ 1778.082565][T26138] ptrace attach of ""[26139] was attempted by "./syz-executor exec"[26138] [ 1779.048503][T26146] tmpfs: Unknown parameter 'mPolq' [ 1779.696342][T26154] netlink: 'syz.7.5237': attribute type 12 has an invalid length. [ 1781.638201][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1783.091166][ T30] audit: type=1400 audit(2000001213.778:2508): avc: denied { setopt } for pid=26195 comm="syz.7.5248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1783.176351][ T30] audit: type=1400 audit(2000001213.778:2509): avc: denied { write } for pid=26195 comm="syz.7.5248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1785.604805][T25505] udevd[25505]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1786.352354][T26236] veth0: entered promiscuous mode [ 1786.358649][T26236] veth0: left promiscuous mode [ 1786.562950][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1788.466284][T26263] lo speed is unknown, defaulting to 1000 [ 1788.479450][T26263] hsr0 speed is unknown, defaulting to 1000 [ 1788.845527][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1789.536304][T26278] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1789.562595][T26278] CIFS: Unable to determine destination address [ 1790.388064][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1790.528283][T26288] program syz.6.5271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1791.277665][ T30] audit: type=1400 audit(2000001222.388:2510): avc: denied { write } for pid=26292 comm="syz.5.5273" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1791.891127][T26301] program syz.6.5271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1792.171669][T26313] random: crng reseeded on system resumption [ 1792.770242][T26320] lo speed is unknown, defaulting to 1000 [ 1792.782736][T26320] hsr0 speed is unknown, defaulting to 1000 [ 1793.412540][ T30] audit: type=1400 audit(2000001224.548:2511): avc: denied { map } for pid=26323 comm="syz.4.5280" path="socket:[76555]" dev="sockfs" ino=76555 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1794.207068][T26326] tipc: Started in network mode [ 1794.222464][T26326] tipc: Node identity ca790c3d9652, cluster identity 4711 [ 1794.412607][T26326] tipc: Enabled bearer , priority 0 [ 1794.421856][T26332] syzkaller0: entered promiscuous mode [ 1794.427470][T26332] syzkaller0: entered allmulticast mode [ 1794.490426][T26326] tipc: Resetting bearer [ 1795.155184][ T30] audit: type=1400 audit(2000001226.288:2512): avc: denied { checkpoint_restore } for pid=26338 comm="syz.5.5285" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1795.500527][ T5880] tipc: Node number set to 1546325053 [ 1795.729654][ T5866] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1795.968191][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1796.009281][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 1796.630030][ T30] audit: type=1326 audit(2000001227.768:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26362 comm="syz.7.5292" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f128118e929 code=0x0 [ 1796.675632][ T5866] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1796.903797][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1797.376724][ T5866] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1797.415958][ T5866] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1797.456457][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1797.565830][ T5866] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1797.734814][ T5866] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1797.905615][ T5866] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1798.018657][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.041238][ T5866] usb 3-1: config 0 descriptor?? [ 1798.041818][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1798.589934][ T5866] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1798.814878][ T5866] usb 3-1: USB disconnect, device number 64 [ 1798.870676][ T5866] usblp0: removed [ 1800.273144][T26400] lo speed is unknown, defaulting to 1000 [ 1800.820683][T26400] hsr0 speed is unknown, defaulting to 1000 [ 1801.786827][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1803.031041][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1804.253980][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1805.244344][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1807.054126][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1807.404692][T26502] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 8388612, id = 0 [ 1808.561294][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1808.579668][T26513] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5324'. [ 1809.059334][ T5880] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1809.490000][ T5880] usb 7-1: Using ep0 maxpacket: 16 [ 1809.971202][ T5880] usb 7-1: config 0 has no interfaces? [ 1809.994736][ T5880] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1810.140581][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1810.712864][ T5880] usb 7-1: config 0 descriptor?? [ 1812.805563][ T30] audit: type=1400 audit(2000001243.528:2514): avc: denied { setopt } for pid=26550 comm="syz.7.5336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1812.825062][ C0] vkms_vblank_simulate: vblank timer overrun [ 1813.509015][ T5880] usb 7-1: USB disconnect, device number 11 [ 1813.564861][T25505] udevd[25505]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1813.999072][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1814.109911][T26579] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1814.549493][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1814.939952][ T30] audit: type=1400 audit(2000001246.038:2515): avc: denied { setopt } for pid=26583 comm="syz.5.5344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1815.068521][T26591] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5345'. [ 1815.258981][ T30] audit: type=1400 audit(2000001246.038:2516): avc: denied { getopt } for pid=26583 comm="syz.5.5344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1815.696092][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1815.810118][T26598] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5347'. [ 1815.922077][T19671] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1815.936685][T19671] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1815.946822][T19671] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1815.964537][T19671] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1815.977822][T19671] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1816.054149][T26602] lo speed is unknown, defaulting to 1000 [ 1816.074634][T26602] hsr0 speed is unknown, defaulting to 1000 [ 1816.807525][ T30] audit: type=1400 audit(2000001247.918:2517): avc: denied { bind } for pid=26614 comm="syz.5.5350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1816.925508][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1816.961209][T26621] fuse: Bad value for 'fd' [ 1816.968293][T26602] chnl_net:caif_netlink_parms(): no params data found [ 1817.752561][T26602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.765827][T26602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.774642][T26602] bridge_slave_0: entered allmulticast mode [ 1817.782548][T26602] bridge_slave_0: entered promiscuous mode [ 1817.791169][T26602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.798312][T26602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1817.805851][T26602] bridge_slave_1: entered allmulticast mode [ 1817.813438][T26602] bridge_slave_1: entered promiscuous mode [ 1817.847505][T26602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1817.861049][T26602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1817.898383][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1817.978048][T26602] team0: Port device team_slave_0 added [ 1817.993266][T26602] team0: Port device team_slave_1 added [ 1818.145874][ T51] Bluetooth: hci6: command tx timeout [ 1820.169182][ T51] Bluetooth: hci6: command tx timeout [ 1820.185320][T26649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5359'. [ 1820.197485][T26602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1820.218371][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1820.257360][T26602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1820.283737][T26602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1820.297676][T26602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1820.304911][T26602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1820.331776][T26602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1820.713025][T26602] hsr_slave_0: entered promiscuous mode [ 1820.719036][T26602] hsr_slave_1: entered promiscuous mode [ 1820.724709][T26653] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5361'. [ 1820.733683][T26653] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5361'. [ 1820.769952][T26602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1820.777526][T26602] Cannot create hsr debugfs directory [ 1820.917270][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1822.302228][ T51] Bluetooth: hci6: command tx timeout [ 1822.431804][T26602] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1822.478839][T26602] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1822.755214][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1822.782368][T26602] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1822.809653][T26602] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1823.246837][T26682] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1823.253383][T26682] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1823.338780][T26689] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(9) [ 1823.345334][T26689] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1823.388232][T26682] vhci_hcd vhci_hcd.0: Device attached [ 1823.469829][T26689] vhci_hcd vhci_hcd.0: Device attached [ 1823.537920][T26693] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(12) [ 1823.544552][T26693] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1823.628731][T26693] vhci_hcd vhci_hcd.0: Device attached [ 1823.689408][T21759] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 1823.710016][T26689] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1823.823514][T26699] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(8) [ 1823.830064][T26699] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1823.859872][T26699] vhci_hcd vhci_hcd.0: Device attached [ 1823.869301][T26682] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(14) [ 1823.875904][T26682] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1824.215742][T26694] vhci_hcd: connection closed [ 1824.256940][ T7775] vhci_hcd: stop threads [ 1824.269674][T26682] vhci_hcd vhci_hcd.0: Device attached [ 1824.301743][T26705] vhci_hcd: connection closed [ 1824.539479][ T51] Bluetooth: hci6: command tx timeout [ 1824.553839][ T7775] vhci_hcd: release socket [ 1824.566410][T26701] vhci_hcd: connection closed [ 1824.566686][T26690] vhci_hcd: connection closed [ 1824.572809][T26688] vhci_hcd: connection reset by peer [ 1824.615614][ T7775] vhci_hcd: disconnect device [ 1824.642794][ T7775] vhci_hcd: stop threads [ 1824.669072][ T7775] vhci_hcd: release socket [ 1824.696354][ T7775] vhci_hcd: disconnect device [ 1824.730523][ T7775] vhci_hcd: stop threads [ 1824.734910][ T7775] vhci_hcd: release socket [ 1824.802180][ T7775] vhci_hcd: disconnect device [ 1824.809362][ T7775] vhci_hcd: stop threads [ 1824.813610][ T7775] vhci_hcd: release socket [ 1824.829579][ T7775] vhci_hcd: disconnect device [ 1824.920575][T26602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1824.940024][T26602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1824.956561][ T7775] vhci_hcd: stop threads [ 1824.976441][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1824.992992][ T7775] vhci_hcd: release socket [ 1824.997832][ T7775] vhci_hcd: disconnect device [ 1825.465499][ T7073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1825.472616][ T7073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1825.494448][ T7775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1825.501534][ T7775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1825.536499][T26602] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1825.757021][T26719] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5375'. [ 1827.818822][ T30] audit: type=1400 audit(2000001258.948:2518): avc: denied { setopt } for pid=26741 comm="syz.5.5380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1827.848463][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1828.284643][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1829.266528][T21759] vhci_hcd: vhci_device speed not set [ 1829.560220][T26602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1830.508180][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1830.527371][T26602] veth0_vlan: entered promiscuous mode [ 1830.716394][T26602] veth1_vlan: entered promiscuous mode [ 1830.745787][T26602] veth0_macvtap: entered promiscuous mode [ 1830.758083][T26602] veth1_macvtap: entered promiscuous mode [ 1830.936733][T26602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1831.004360][T26602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1831.068449][T26602] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.088877][T26602] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.106934][T26602] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.128959][T26602] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.554638][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1831.570507][T12679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1831.586221][T12679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1831.601862][T26790] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1831.755339][ T7073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1831.783387][T12681] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1831.821902][ T7073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1831.965135][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1834.305276][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1836.731532][T25612] udevd[25612]: symlink '../../loop8' '/dev/disk/by-diskseq/102.tmp-b7:8' failed: Read-only file system [ 1838.682026][T25612] udevd[25612]: symlink '../../loop8' '/dev/disk/by-diskseq/102.tmp-b7:8' failed: Read-only file system [ 1838.727577][T26853] overlayfs: missing 'workdir' [ 1838.798895][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1838.835698][T26853] overlayfs: missing 'workdir' [ 1839.089387][ T30] audit: type=1400 audit(2000001270.218:2519): avc: denied { shutdown } for pid=26860 comm="syz.5.5410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1839.092827][T26866] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1839.921849][ T30] audit: type=1400 audit(2000001270.328:2520): avc: denied { accept } for pid=26862 comm="syz.6.5406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1839.973952][ T30] audit: type=1400 audit(2000001271.108:2521): avc: denied { read write } for pid=14919 comm="syz-executor" name="loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1839.999304][ T30] audit: type=1400 audit(2000001271.108:2522): avc: denied { open } for pid=14919 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1840.023635][ T30] audit: type=1400 audit(2000001271.108:2523): avc: denied { ioctl } for pid=14919 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=652 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1840.045115][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1840.115537][ T30] audit: type=1400 audit(2000001271.228:2524): avc: denied { map_create } for pid=26872 comm="syz.7.5412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1840.157854][ T30] audit: type=1400 audit(2000001271.228:2525): avc: denied { prog_load } for pid=26872 comm="syz.7.5412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1840.189002][ T30] audit: type=1400 audit(2000001271.228:2526): avc: denied { bpf } for pid=26872 comm="syz.7.5412" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1840.217952][ T30] audit: type=1400 audit(2000001271.238:2527): avc: denied { perfmon } for pid=26872 comm="syz.7.5412" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1840.259757][ T30] audit: type=1400 audit(2000001271.268:2528): avc: denied { execmem } for pid=26874 comm="syz.6.5413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1841.387674][T25505] udevd[25505]: symlink '../../loop6' '/dev/disk/by-diskseq/101.tmp-b7:6' failed: Read-only file system [ 1841.416655][T25612] udevd[25612]: symlink '../../loop8' '/dev/disk/by-diskseq/102.tmp-b7:8' failed: Read-only file system [ 1841.967730][T26899] loop6: detected capacity change from 0 to 63 [ 1841.974520][T26899] buffer_io_error: 124 callbacks suppressed [ 1841.974533][T26899] Buffer I/O error on dev loop6, logical block 0, async page read [ 1841.988339][T26899] Buffer I/O error on dev loop6, logical block 0, async page read [ 1841.996290][T26899] Buffer I/O error on dev loop6, logical block 0, async page read [ 1842.004492][T26899] Buffer I/O error on dev loop6, logical block 0, async page read [ 1842.012387][T26899] Buffer I/O error on dev loop6, logical block 0, async page read [ 1842.020699][T26899] Buffer I/O error on dev loop6, logical block 0, async page read [ 1842.028590][T26899] Buffer I/O error on dev loop6, logical block 0, async page read [ 1842.036492][T26899] Buffer I/O error on dev loop6, logical block 0, async page read [ 1842.044363][T26899] ldm_validate_partition_table(): Disk read failed. [ 1842.051009][T26899] Buffer I/O error on dev loop6, logical block 0, async page read [ 1842.058872][T26899] Buffer I/O error on dev loop6, logical block 0, async page read [ 1842.066924][T26899] Dev loop6: unable to read RDB block 0 [ 1842.072818][T26899] loop6: unable to read partition table [ 1842.078597][T26899] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1842.189499][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/103.tmp-b7:6' failed: Read-only file system [ 1842.270860][T25612] udevd[25612]: symlink '../../loop8' '/dev/disk/by-diskseq/102.tmp-b7:8' failed: Read-only file system [ 1842.395420][T25505] udevd[25505]: symlink '../../loop6' '/dev/disk/by-diskseq/103.tmp-b7:6' failed: Read-only file system [ 1843.397470][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/103.tmp-b7:6' failed: Read-only file system [ 1843.452748][T25612] udevd[25612]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1843.685508][T25612] udevd[25612]: symlink '../../loop8' '/dev/disk/by-diskseq/102.tmp-b7:8' failed: Read-only file system [ 1844.461923][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1844.461939][ T30] audit: type=1400 audit(2000001275.578:2559): avc: denied { create } for pid=26912 comm="syz.7.5423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1844.810348][ T30] audit: type=1400 audit(2000001275.948:2560): avc: denied { create } for pid=26925 comm="syz.4.5427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1844.876821][ T30] audit: type=1400 audit(2000001275.968:2561): avc: denied { create } for pid=26923 comm="syz.8.5425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1845.648749][T26933] ptrace attach of ""[26934] was attempted by "./syz-executor exec"[26933] [ 1846.569380][ T30] audit: type=1400 audit(2000001276.778:2562): avc: denied { create } for pid=26923 comm="syz.8.5425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1846.661947][ T30] audit: type=1400 audit(2000001276.778:2563): avc: denied { setopt } for pid=26923 comm="syz.8.5425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1846.737997][ T30] audit: type=1400 audit(2000001276.778:2564): avc: denied { write } for pid=26923 comm="syz.8.5425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1846.973890][ T30] audit: type=1400 audit(2000001278.108:2565): avc: denied { create } for pid=26935 comm="syz.7.5429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1847.379632][T26942] TCP: out of memory -- consider tuning tcp_mem [ 1848.067449][ T30] audit: type=1400 audit(2000001279.198:2566): avc: denied { create } for pid=26944 comm="syz.7.5433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1848.159252][ T30] audit: type=1400 audit(2000001279.288:2567): avc: denied { bind } for pid=26944 comm="syz.7.5433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1848.310420][ T30] audit: type=1400 audit(2000001279.308:2568): avc: denied { setopt } for pid=26944 comm="syz.7.5433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1849.303835][T26957] udevd[26957]: symlink '../../loop8' '/dev/disk/by-diskseq/102.tmp-b7:8' failed: Read-only file system [ 1849.811936][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1849.811947][ T30] audit: type=1400 audit(2000001280.928:2573): avc: denied { connect } for pid=26963 comm="syz.4.5437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1849.879914][ T30] audit: type=1400 audit(2000001280.928:2574): avc: denied { listen } for pid=26963 comm="syz.4.5437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1849.900630][ T30] audit: type=1400 audit(2000001280.928:2575): avc: denied { accept } for pid=26963 comm="syz.4.5437" lport=36632 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1849.921930][ T30] audit: type=1400 audit(2000001280.938:2576): avc: denied { write } for pid=26963 comm="syz.4.5437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1849.941853][ T30] audit: type=1400 audit(2000001281.048:2577): avc: denied { watch } for pid=26966 comm="syz.5.5438" path="/614/file1" dev="tmpfs" ino=3286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1850.130955][ T30] audit: type=1400 audit(2000001281.048:2578): avc: denied { watch_sb watch_reads } for pid=26966 comm="syz.5.5438" path="/614/file1" dev="tmpfs" ino=3286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1850.193691][ T30] audit: type=1400 audit(2000001281.058:2579): avc: denied { execute } for pid=26966 comm="syz.5.5438" path="/614/file1" dev="tmpfs" ino=3286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1850.439873][ T30] audit: type=1400 audit(2000001281.568:2580): avc: denied { ioctl } for pid=26958 comm="syz.8.5430" path="socket:[78742]" dev="sockfs" ino=78742 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1851.941152][ T30] audit: type=1400 audit(2000001283.068:2581): avc: denied { setopt } for pid=26983 comm="syz.7.5443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1851.963333][T16277] IPVS: starting estimator thread 0... [ 1852.109398][ T30] audit: type=1400 audit(2000001283.188:2582): avc: denied { write } for pid=26985 comm="syz.4.5444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1852.130486][T26990] IPVS: using max 40 ests per chain, 96000 per kthread [ 1854.862880][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1854.862912][ T30] audit: type=1400 audit(2000001285.968:2597): avc: denied { bind } for pid=27010 comm="syz.7.5452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1855.215849][ T30] audit: type=1400 audit(2000001285.968:2598): avc: denied { name_bind } for pid=27010 comm="syz.7.5452" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1855.237907][ T30] audit: type=1400 audit(2000001285.968:2599): avc: denied { node_bind } for pid=27010 comm="syz.7.5452" saddr=::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 1855.260403][ T30] audit: type=1400 audit(2000001285.978:2600): avc: denied { shutdown } for pid=27010 comm="syz.7.5452" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1855.284282][ T30] audit: type=1400 audit(2000001285.978:2601): avc: denied { write } for pid=27010 comm="syz.7.5452" laddr=::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1855.306066][ T30] audit: type=1400 audit(2000001285.978:2602): avc: denied { name_connect } for pid=27010 comm="syz.7.5452" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1855.551711][ T30] audit: type=1400 audit(2000001286.678:2603): avc: denied { create } for pid=27019 comm="syz.7.5454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1856.732249][ T30] audit: type=1400 audit(2000001286.728:2604): avc: denied { write } for pid=27022 comm="syz.6.5456" name="tcp" dev="proc" ino=4026533420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1856.936784][T27026] udevd[27026]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1856.978460][ T30] audit: type=1400 audit(2000001286.738:2605): avc: denied { sqpoll } for pid=27022 comm="syz.6.5456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1857.034611][T27026] udevd[27026]: symlink '../../loop8' '/dev/disk/by-diskseq/102.tmp-b7:8' failed: Read-only file system [ 1857.901653][ T30] audit: type=1400 audit(2000001289.018:2606): avc: denied { append } for pid=27035 comm="syz.6.5458" name="001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1858.314719][T27026] udevd[27026]: symlink '../../loop8' '/dev/disk/by-diskseq/102.tmp-b7:8' failed: Read-only file system [ 1858.592520][T27026] udevd[27026]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1859.836703][T27026] udevd[27026]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1859.837104][T24282] IPVS: starting estimator thread 0... [ 1859.868297][T27057] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1860.159403][T27062] IPVS: using max 38 ests per chain, 91200 per kthread [ 1860.244172][T27018] udevd[27018]: symlink '../../loop8' '/dev/disk/by-diskseq/102.tmp-b7:8' failed: Read-only file system [ 1860.407079][T27026] udevd[27026]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1860.491590][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1860.491600][ T30] audit: type=1400 audit(2000001291.628:2614): avc: denied { create } for pid=27080 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1860.528638][ T30] audit: type=1400 audit(2000001291.658:2615): avc: denied { read write } for pid=27080 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1860.553304][ T30] audit: type=1400 audit(2000001291.658:2616): avc: denied { open } for pid=27080 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 1860.587829][T19671] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1860.609354][T19671] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1860.629890][T19671] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1860.645675][T19671] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1860.652741][T10091] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1860.673059][T19671] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1860.704151][ T30] audit: type=1400 audit(2000001291.658:2617): avc: denied { ioctl } for pid=27080 comm="syz-executor" path="socket:[79308]" dev="sockfs" ino=79308 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1860.729505][ C0] vkms_vblank_simulate: vblank timer overrun [ 1860.828224][T27080] lo speed is unknown, defaulting to 1000 [ 1860.834778][T27080] hsr0 speed is unknown, defaulting to 1000 [ 1860.859456][T10091] usb 9-1: Using ep0 maxpacket: 8 [ 1860.867934][T10091] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1860.885528][T10091] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.900342][ T30] audit: type=1400 audit(2000001291.758:2618): avc: denied { read } for pid=27075 comm="syz.6.5469" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1860.923251][ C0] vkms_vblank_simulate: vblank timer overrun [ 1860.984401][T10091] usb 9-1: Product: syz [ 1861.018575][T10091] usb 9-1: Manufacturer: syz [ 1861.033889][ T30] audit: type=1400 audit(2000001291.758:2619): avc: denied { open } for pid=27075 comm="syz.6.5469" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1861.057608][ C0] vkms_vblank_simulate: vblank timer overrun [ 1861.068146][T10091] usb 9-1: SerialNumber: syz [ 1861.086093][T10091] usb 9-1: config 0 descriptor?? [ 1861.231564][ T30] audit: type=1400 audit(2000001291.768:2620): avc: denied { ioctl } for pid=27075 comm="syz.6.5469" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 1861.256787][ C0] vkms_vblank_simulate: vblank timer overrun [ 1861.322502][ T30] audit: type=1400 audit(2000001291.818:2621): avc: denied { mounton } for pid=27080 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1861.431074][ T30] audit: type=1400 audit(2000001292.478:2622): avc: denied { module_request } for pid=27080 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1861.449295][T10091] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1861.481721][T27080] chnl_net:caif_netlink_parms(): no params data found [ 1861.801280][T27018] udevd[27018]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1861.873858][T27093] binder: BINDER_SET_CONTEXT_MGR already set [ 1861.875859][ T30] audit: type=1400 audit(2000001292.998:2623): avc: denied { create } for pid=27092 comm="syz.6.5470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1861.885665][T27093] binder: 27092:27093 ioctl 4018620d 2000000000c0 returned -16 [ 1861.930715][T27080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1861.950136][T27080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1861.981463][T27080] bridge_slave_0: entered allmulticast mode [ 1861.988417][T27080] bridge_slave_0: entered promiscuous mode [ 1862.002834][T27080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1862.016562][T27080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1862.026281][T27080] bridge_slave_1: entered allmulticast mode [ 1862.043146][T27080] bridge_slave_1: entered promiscuous mode [ 1862.094292][T27018] udevd[27018]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1862.147193][T27080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1862.159992][T27080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1862.352737][T27080] team0: Port device team_slave_0 added [ 1862.362919][T27080] team0: Port device team_slave_1 added [ 1862.756961][ T51] Bluetooth: hci1: command tx timeout [ 1862.813391][T27080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1862.828352][T27080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1862.854760][T27080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1862.867120][T27080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1862.874436][T27080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1862.905689][T27080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1862.970538][T27080] hsr_slave_0: entered promiscuous mode [ 1862.977103][T27080] hsr_slave_1: entered promiscuous mode [ 1862.983555][T27018] udevd[27018]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1863.001319][T27080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1863.008897][T27080] Cannot create hsr debugfs directory [ 1863.097693][T27112] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5476'. [ 1863.157508][T10091] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1863.187124][T10091] usb 9-1: USB disconnect, device number 2 [ 1863.335386][T27122] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5478'. [ 1863.975512][T27026] udevd[27026]: symlink '../../loop8' '/dev/disk/by-diskseq/102.tmp-b7:8' failed: Read-only file system [ 1864.476824][T27018] udevd[27018]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1864.519606][T27080] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1864.541511][T27080] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1864.556541][T27080] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1864.572636][T27080] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1864.756847][T27026] udevd[27026]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1864.799353][ T51] Bluetooth: hci1: command tx timeout [ 1864.828664][T27080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1864.846318][T27080] 8021q: adding VLAN 0 to HW filter on device team0 [ 1864.921559][ T7775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1864.928689][ T7775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1864.955065][T27026] udevd[27026]: symlink '../../loop8' '/dev/disk/by-diskseq/102.tmp-b7:8' failed: Read-only file system [ 1864.965103][ T7775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1864.966559][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 1864.973251][ T7775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1865.452406][T27158] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5486'. [ 1866.218105][T27026] udevd[27026]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1866.896201][T19671] Bluetooth: hci1: command tx timeout [ 1866.919430][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1866.919456][ T30] audit: type=1400 audit(2000001298.048:2651): avc: denied { name_bind } for pid=27170 comm="syz.6.5489" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1867.333668][T27026] udevd[27026]: symlink '../../loop8' '/dev/disk/by-diskseq/102.tmp-b7:8' failed: Read-only file system [ 1867.405315][ T30] audit: type=1400 audit(2000001298.528:2652): avc: denied { read write } for pid=27177 comm="syz.8.5491" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1867.464038][ T30] audit: type=1400 audit(2000001298.528:2653): avc: denied { open } for pid=27177 comm="syz.8.5491" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1867.563950][T27026] udevd[27026]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1867.581500][ T30] audit: type=1400 audit(2000001298.538:2654): avc: denied { mount } for pid=27177 comm="syz.8.5491" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1868.128329][ T30] audit: type=1400 audit(2000001298.858:2655): avc: denied { name_bind } for pid=27179 comm="syz.7.5492" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1868.206442][ T30] audit: type=1400 audit(2000001299.338:2656): avc: denied { setopt } for pid=27192 comm="syz.6.5494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1868.208160][T27080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1868.591886][ T30] audit: type=1400 audit(2000001299.458:2657): avc: denied { unmount } for pid=26602 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1868.703668][T27026] udevd[27026]: symlink '../../loop8' '/dev/disk/by-diskseq/102.tmp-b7:8' failed: Read-only file system [ 1868.959416][T19671] Bluetooth: hci1: command tx timeout [ 1869.374483][T27026] udevd[27026]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1869.387314][T27207] ref_ctr_offset mismatch. inode: 0x1be8 offset: 0x0 ref_ctr_offset(old): 0x3c ref_ctr_offset(new): 0x0 [ 1869.406826][ T30] audit: type=1400 audit(2000001300.538:2658): avc: denied { getopt } for pid=27203 comm="syz.8.5497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1870.106694][ T30] audit: type=1400 audit(2000001301.238:2659): avc: denied { mount } for pid=27219 comm="syz.7.5501" name="/" dev="ocfs2_dlmfs" ino=79571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1870.269116][T27223] lo speed is unknown, defaulting to 1000 [ 1870.283090][T27223] hsr0 speed is unknown, defaulting to 1000 [ 1870.633713][ T30] audit: type=1400 audit(2000001301.328:2660): avc: denied { setopt } for pid=27216 comm="syz.4.5500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1870.763770][T27026] udevd[27026]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1870.783616][T27080] veth0_vlan: entered promiscuous mode [ 1871.012927][T27080] veth1_vlan: entered promiscuous mode [ 1871.855840][T27080] veth0_macvtap: entered promiscuous mode [ 1871.869655][T27080] veth1_macvtap: entered promiscuous mode [ 1871.953324][T27080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1871.969509][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1871.969523][ T30] audit: type=1400 audit(2000001303.098:2663): avc: denied { create } for pid=27238 comm="syz.7.5506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1872.076650][ T30] audit: type=1400 audit(2000001303.108:2664): avc: denied { connect } for pid=27238 comm="syz.7.5506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1872.133269][T27080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1872.240059][T27080] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.284731][T27080] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.296036][T27080] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.316923][T27080] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1872.444137][ T30] audit: type=1400 audit(2000001303.578:2665): avc: denied { getopt } for pid=27244 comm="syz.4.5508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1872.453687][T13920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.488720][T13920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1872.490593][ T30] audit: type=1400 audit(2000001303.618:2666): avc: denied { bind } for pid=27244 comm="syz.4.5508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1872.518362][T12671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1872.535338][T12671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1872.561739][ T30] audit: type=1400 audit(2000001303.678:2667): avc: denied { mounton } for pid=27080 comm="syz-executor" path="/root/syzkaller.9HyUqU/syz-tmp" dev="sda1" ino=2055 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1872.645935][ T30] audit: type=1400 audit(2000001303.688:2668): avc: denied { mount } for pid=27080 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1873.384732][ T30] audit: type=1400 audit(2000001303.688:2669): avc: denied { mount } for pid=27080 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1873.406722][ C0] vkms_vblank_simulate: vblank timer overrun [ 1873.419267][ T30] audit: type=1400 audit(2000001303.688:2670): avc: denied { mounton } for pid=27080 comm="syz-executor" path="/root/syzkaller.9HyUqU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1873.446017][ C0] vkms_vblank_simulate: vblank timer overrun [ 1873.566202][T27026] udevd[27026]: symlink '../../loop8' '/dev/disk/by-diskseq/102.tmp-b7:8' failed: Read-only file system [ 1873.598638][ T30] audit: type=1400 audit(2000001303.688:2671): avc: denied { mounton } for pid=27080 comm="syz-executor" path="/root/syzkaller.9HyUqU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=79839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1873.626298][ C0] vkms_vblank_simulate: vblank timer overrun [ 1873.648798][T27257] syz.5.5453: attempt to access beyond end of device [ 1873.648798][T27257] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1873.684496][ T30] audit: type=1400 audit(2000001303.728:2672): avc: denied { mounton } for pid=27080 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1873.707533][ C0] vkms_vblank_simulate: vblank timer overrun [ 1873.810051][T27257] syz.5.5453: attempt to access beyond end of device [ 1873.810051][T27257] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1873.831333][T27257] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1873.843945][T27257] syz.5.5453: attempt to access beyond end of device [ 1873.843945][T27257] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1873.861753][T27257] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1873.874311][T27257] syz.5.5453: attempt to access beyond end of device [ 1873.874311][T27257] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1874.329915][T27257] syz.5.5453: attempt to access beyond end of device [ 1874.329915][T27257] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1874.343434][T27257] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1874.354631][T27257] syz.5.5453: attempt to access beyond end of device [ 1874.354631][T27257] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1874.368670][T27257] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1874.389994][T27257] syz.5.5453: attempt to access beyond end of device [ 1874.389994][T27257] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1874.403529][T27257] syz.5.5453: attempt to access beyond end of device [ 1874.403529][T27257] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1874.418322][T27257] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1874.493131][T27257] syz.5.5453: attempt to access beyond end of device [ 1874.493131][T27257] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1874.507309][T27257] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1874.684832][T27026] udevd[27026]: symlink '../../loop8' '/dev/disk/by-diskseq/102.tmp-b7:8' failed: Read-only file system [ 1874.971379][T27278] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5514'. [ 1875.003683][T27257] syz.5.5453: attempt to access beyond end of device [ 1875.003683][T27257] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1875.054406][T27257] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1875.112643][T27257] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1875.142747][T27026] udevd[27026]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1875.318974][T27257] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1876.598259][T27026] udevd[27026]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1877.650714][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1877.650730][ T30] audit: type=1400 audit(2000001308.788:2683): avc: denied { ioctl } for pid=27305 comm="syz.5.5522" path="socket:[80982]" dev="sockfs" ino=80982 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1877.843223][T27026] udevd[27026]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1878.579265][T10091] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1878.643875][T27026] udevd[27026]: symlink '../../loop8' '/dev/disk/by-diskseq/102.tmp-b7:8' failed: Read-only file system [ 1878.745487][T10091] usb 7-1: config 0 has no interfaces? [ 1878.790035][T10091] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1878.949447][T10091] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.512155][T10091] usb 7-1: Product: syz [ 1879.566640][T10091] usb 7-1: Manufacturer: syz [ 1879.822978][T10091] usb 7-1: SerialNumber: syz [ 1879.909832][T10091] usb 7-1: config 0 descriptor?? [ 1880.983383][ T30] audit: type=1400 audit(2000001312.118:2684): avc: denied { create } for pid=27330 comm="syz.7.5527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1881.021525][ T30] audit: type=1400 audit(2000001312.138:2685): avc: denied { create } for pid=27330 comm="syz.7.5527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1881.217569][T21759] usb 7-1: USB disconnect, device number 12 [ 1881.327924][T27026] udevd[27026]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1881.357999][ T30] audit: type=1400 audit(2000001312.138:2686): avc: denied { ioctl } for pid=27330 comm="syz.7.5527" path="socket:[80505]" dev="sockfs" ino=80505 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1881.578429][T27018] udevd[27018]: symlink '../../loop8' '/dev/disk/by-diskseq/102.tmp-b7:8' failed: Read-only file system [ 1881.739631][T21759] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1882.120432][ T31] INFO: task syz.0.5087:25525 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1882.334205][ T30] audit: type=1400 audit(2000001313.468:2687): avc: denied { write } for pid=5799 comm="syz-executor" path="pipe:[4601]" dev="pipefs" ino=4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1882.370152][T27354] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5529'. [ 1882.396689][ T31] Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 [ 1882.419766][T27355] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5531'. [ 1882.452968][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1882.519403][ T31] task:syz.0.5087 state:D stack:25048 pid:25525 tgid:25524 ppid:5812 task_flags:0x400140 flags:0x00004006 [ 1882.661243][T21759] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1882.753010][ T31] Call Trace: [ 1882.756302][ T31] [ 1882.793385][T21759] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1882.809331][ T31] __schedule+0x116a/0x5de0 [ 1882.813866][ T31] ? rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 1882.884278][T21759] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1882.893594][ T31] ? netlink_unicast+0x53a/0x7f0 [ 1882.898545][ T31] ? netlink_sendmsg+0x8d1/0xdd0 [ 1882.919221][T21759] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.919401][ T31] ? ____sys_sendmsg+0xa98/0xc70 [ 1882.932901][T21759] usb 7-1: config 0 descriptor?? [ 1882.951487][ T31] ? __lock_acquire+0x622/0x1c90 [ 1882.956500][ T31] ? __pfx___schedule+0x10/0x10 [ 1882.968031][ T31] ? find_held_lock+0x2b/0x80 [ 1882.972962][ T31] ? schedule+0x2d7/0x3a0 [ 1882.977323][ T31] schedule+0xe7/0x3a0 [ 1882.986184][ T31] schedule_timeout+0x257/0x290 [ 1882.991298][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1882.996710][ T31] ? mark_held_locks+0x49/0x80 [ 1883.006305][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1883.011744][ T31] __wait_for_common+0x2fc/0x4e0 [ 1883.016711][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1883.026920][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 1883.032611][ T31] ? ib_cq_pool_cleanup+0x220/0x360 [ 1883.037837][ T31] disable_device+0x16f/0x280 [ 1883.048131][ T31] ? __pfx_disable_device+0x10/0x10 [ 1883.069607][ T31] __ib_unregister_device+0x2b4/0x480 [ 1883.075027][ T31] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 1883.093241][ T31] ib_unregister_device_and_put+0x5a/0x80 [ 1883.099010][ T31] nldev_dellink+0x21f/0x320 [ 1883.103969][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 1883.109450][ T31] ? cap_capable+0xb3/0x250 [ 1883.113983][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1883.118692][ T31] ? security_capable+0x7e/0x260 [ 1883.124113][ T31] ? ns_capable+0xd7/0x110 [ 1883.128542][ T31] ? __pfx_nldev_dellink+0x10/0x10 [ 1883.133697][ T31] rdma_nl_rcv_msg+0x38a/0x6e0 [ 1883.138470][ T31] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1883.143803][ T31] ? __lock_acquire+0x622/0x1c90 [ 1883.148756][ T31] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 1883.155234][ T31] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1883.163213][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 1883.168508][ T31] ? is_vmalloc_addr+0x86/0xa0 [ 1883.173607][ T31] netlink_unicast+0x53a/0x7f0 [ 1883.178388][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1883.183794][ T31] netlink_sendmsg+0x8d1/0xdd0 [ 1883.189413][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1883.194710][ T31] ____sys_sendmsg+0xa98/0xc70 [ 1883.199637][ T31] ? copy_msghdr_from_user+0x10a/0x160 [ 1883.205118][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1883.210454][ T31] ? __pfx_futex_wake_mark+0x10/0x10 [ 1883.215762][ T31] ___sys_sendmsg+0x134/0x1d0 [ 1883.220616][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1883.225848][ T31] ? __lock_acquire+0x622/0x1c90 [ 1883.231184][ T31] __sys_sendmsg+0x16d/0x220 [ 1883.235789][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1883.240935][ T31] ? __x64_sys_futex+0x1e0/0x4c0 [ 1883.245897][ T31] do_syscall_64+0xcd/0x4c0 [ 1883.250428][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1883.256325][ T31] RIP: 0033:0x7f16ec18e929 [ 1883.260757][ T31] RSP: 002b:00007f16ecfc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1883.269812][ T31] RAX: ffffffffffffffda RBX: 00007f16ec3b5fa0 RCX: 00007f16ec18e929 [ 1883.277792][ T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1883.285909][ T31] RBP: 00007f16ec210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1883.294011][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1883.302033][ T31] R13: 0000000000000000 R14: 00007f16ec3b5fa0 R15: 00007fffaddc8aa8 [ 1883.310076][ T31] [ 1883.343977][ T31] [ 1883.343977][ T31] Showing all locks held in the system: [ 1883.371076][ T31] 1 lock held by pool_workqueue_/3: [ 1883.376304][ T31] #0: ffffffff8e5cff38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1883.440375][ T31] 1 lock held by khungtaskd/31: [ 1883.445292][ T31] #0: ffffffff8e5c4940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 1883.469268][ T31] 4 locks held by kworker/u8:8/3486: [ 1883.474580][ T31] #0: ffff88801c6f3948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1883.499265][ T31] #1: ffffc9000c987d10 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1883.519247][ T31] #2: ffffffff90336e90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xad/0x890 [ 1883.528596][ T31] #3: ffff888050f906d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 1883.560196][ T31] 2 locks held by getty/5576: [ 1883.564891][ T31] #0: ffff8880374ca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1883.589306][ T31] #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 1883.625090][ T31] 3 locks held by kworker/1:2/16277: [ 1883.630512][ T31] #0: ffff88801b878d48 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1883.641016][ T31] #1: ffffc9000d337d10 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1883.650855][ T31] #2: ffffffff8e5cff38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x1a3/0x3c0 [ 1883.660977][ T31] 1 lock held by syz.4.3323/19653: [ 1883.666088][ T31] #0: ffffffff9034cee8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1883.677064][ T31] 5 locks held by kworker/0:1/21759: [ 1883.682390][ T31] #0: ffff888144acb548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1883.694088][ T31] #1: ffffc9000ee2fd10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1883.705414][ T31] #2: ffff88802a24f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fa0 [ 1883.714613][ T31] #3: ffff888077956198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 1883.723904][ T31] #4: ffff88802a0c5168 (hcd->bandwidth_mutex){+.+.}-{4:4}, at: usb_set_configuration+0x616/0x1e20 [ 1883.734644][ T31] 3 locks held by kworker/u8:0/24122: [ 1883.740101][ T31] #0: ffff88801b881148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 1883.751329][ T31] #1: ffffc900038a7d10 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 1883.761847][ T31] #2: ffffffff9034cee8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 1883.772776][ T31] 2 locks held by syz.0.5087/25525: [ 1883.778788][ T31] #0: ffffffff9b114a78 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv_msg+0x169/0x6e0 [ 1883.789321][ T31] #1: ffff888050f906d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x23b/0x480 [ 1883.800786][ T31] 1 lock held by syz-executor/25716: [ 1883.806058][ T31] #0: ffffffff9034cee8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1883.815078][ T31] 2 locks held by syz.2.5298/26400: [ 1883.820343][ T31] #0: ffffffff90336e90 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x286/0x5f0 [ 1883.829833][ T31] #1: ffff888050f906d0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x30/0x320 [ 1883.841175][ T31] 3 locks held by syz-executor/27080: [ 1883.846538][ T31] #0: ffff888047a5cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 1883.856135][ T31] #1: ffff888047a5c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 1883.865940][ T31] #2: ffffffff905be5c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 1883.876163][ T31] 4 locks held by syz.6.5530/27343: [ 1883.882228][ T31] #0: ffff888058550dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_dev_do_close+0x26/0x90 [ 1883.891866][ T31] #1: ffff8880585500b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x3ae/0x11d0 [ 1883.901589][ T31] #2: ffffffff905be5c8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xbb/0x260 [ 1883.911694][ T31] #3: ffff888023faeb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x80/0x730 [ 1883.921062][ T31] 1 lock held by syz.8.5531/27344: [ 1883.926161][ T31] #0: ffffffff9034cee8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 1883.935176][ T31] [ 1883.937540][ T31] ============================================= [ 1883.937540][ T31] [ 1883.945994][ T31] NMI backtrace for cpu 1 [ 1883.946007][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 1883.946035][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1883.946045][ T31] Call Trace: [ 1883.946051][ T31] [ 1883.946058][ T31] dump_stack_lvl+0x116/0x1f0 [ 1883.946087][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 1883.946106][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1883.946130][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1883.946155][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1883.946177][ T31] watchdog+0xf70/0x12c0 [ 1883.946201][ T31] ? __pfx_watchdog+0x10/0x10 [ 1883.946218][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1883.946243][ T31] ? __kthread_parkme+0x19e/0x250 [ 1883.946267][ T31] ? __pfx_watchdog+0x10/0x10 [ 1883.946285][ T31] kthread+0x3c2/0x780 [ 1883.946302][ T31] ? __pfx_kthread+0x10/0x10 [ 1883.946319][ T31] ? rcu_is_watching+0x12/0xc0 [ 1883.946341][ T31] ? __pfx_kthread+0x10/0x10 [ 1883.946357][ T31] ret_from_fork+0x5d4/0x6f0 [ 1883.946381][ T31] ? __pfx_kthread+0x10/0x10 [ 1883.946397][ T31] ret_from_fork_asm+0x1a/0x30 [ 1883.946427][ T31] [ 1883.946433][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1884.072011][ C0] NMI backtrace for cpu 0 [ 1884.072024][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 1884.072042][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1884.072053][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1884.072076][ C0] Code: bb 71 02 e9 03 fb 02 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 30 29 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1884.072089][ C0] RSP: 0018:ffffffff8e207e08 EFLAGS: 000002c2 [ 1884.072101][ C0] RAX: 0000000008577f29 RBX: 0000000000000000 RCX: ffffffff8b80dc59 [ 1884.072111][ C0] RDX: 0000000000000000 RSI: ffffffff8de1a526 RDI: ffffffff8c157ee0 [ 1884.072120][ C0] RBP: fffffbfff1c52ef0 R08: 0000000000000001 R09: ffffed1017086645 [ 1884.072129][ C0] R10: ffff8880b843322b R11: 0000000000000001 R12: 0000000000000000 [ 1884.072137][ C0] R13: ffffffff8e297780 R14: ffffffff90a81650 R15: 0000000000000000 [ 1884.072147][ C0] FS: 0000000000000000(0000) GS:ffff888124752000(0000) knlGS:0000000000000000 [ 1884.072161][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1884.072171][ C0] CR2: 00007fa606118889 CR3: 000000000e382000 CR4: 00000000003526f0 [ 1884.072180][ C0] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 1884.072189][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1884.072197][ C0] Call Trace: [ 1884.072202][ C0] [ 1884.072207][ C0] default_idle+0x13/0x20 [ 1884.072220][ C0] default_idle_call+0x6d/0xb0 [ 1884.072231][ C0] do_idle+0x391/0x510 [ 1884.072249][ C0] ? __pfx_do_idle+0x10/0x10 [ 1884.072270][ C0] ? trace_sched_exit_tp+0x31/0x130 [ 1884.072290][ C0] cpu_startup_entry+0x4f/0x60 [ 1884.072307][ C0] rest_init+0x16b/0x2b0 [ 1884.072320][ C0] ? acpi_subsystem_init+0x133/0x180 [ 1884.072336][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1884.072356][ C0] start_kernel+0x3ee/0x4d0 [ 1884.072372][ C0] x86_64_start_reservations+0x18/0x30 [ 1884.072390][ C0] x86_64_start_kernel+0x130/0x190 [ 1884.072407][ C0] common_startup_64+0x13e/0x148 [ 1884.072425][ C0] [ 1884.075433][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1884.075448][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 1884.075468][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1884.075478][ T31] Call Trace: [ 1884.075484][ T31] [ 1884.075491][ T31] dump_stack_lvl+0x3d/0x1f0 [ 1884.075517][ T31] panic+0x71c/0x800 [ 1884.075541][ T31] ? __pfx_panic+0x10/0x10 [ 1884.075562][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1884.075585][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1884.075606][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1884.075627][ T31] ? watchdog+0xdda/0x12c0 [ 1884.075644][ T31] ? watchdog+0xdcd/0x12c0 [ 1884.075663][ T31] watchdog+0xdeb/0x12c0 [ 1884.075684][ T31] ? __pfx_watchdog+0x10/0x10 [ 1884.075700][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 1884.075723][ T31] ? __kthread_parkme+0x19e/0x250 [ 1884.075747][ T31] ? __pfx_watchdog+0x10/0x10 [ 1884.075764][ T31] kthread+0x3c2/0x780 [ 1884.075779][ T31] ? __pfx_kthread+0x10/0x10 [ 1884.075795][ T31] ? rcu_is_watching+0x12/0xc0 [ 1884.075814][ T31] ? __pfx_kthread+0x10/0x10 [ 1884.075830][ T31] ret_from_fork+0x5d4/0x6f0 [ 1884.075851][ T31] ? __pfx_kthread+0x10/0x10 [ 1884.075866][ T31] ret_from_fork_asm+0x1a/0x30 [ 1884.075892][ T31] [ 1884.414160][ T31] Kernel Offset: disabled [ 1884.418459][ T31] Rebooting in 86400 seconds..