last executing test programs: 16m21.987918523s ago: executing program 32 (id=137): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x3beb947}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x10}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES16=r0], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x82, 0x0, &(0x7f0000000000)) ioctl$FS_IOC_GETVERSION(r3, 0x5b06, 0x0) 15m39.619921238s ago: executing program 33 (id=288): ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x800, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r3, &(0x7f0000000140)={0xffffffffffffffff, r3, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1d, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 13m50.573262196s ago: executing program 1 (id=620): pipe2$9p(0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r5, @ANYBLOB="0b00000000000000cc001a8018000a80140007"], 0xec}}, 0x0) 13m49.098950266s ago: executing program 1 (id=622): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) socket$packet(0x11, 0x2, 0x300) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f00000001c0)="43c401e5dabbc589f31f877f7d6455b9f630e4fc5b3b2e4e48d644dd2f034b6da655d034992bb8eb17f36f7c0c5be64184bb50422d0c5f8cdd4b09c27c971752ddaa0cfe7dc6f90e2d6f4d5adc261c4a1aa8ee4b536d12952d10f54b1549ba9aecfe3e201fbc652c88100ae8d49da15127", 0x71) io_setup(0x239f, &(0x7f0000000380)) r1 = syz_open_dev$loop(&(0x7f0000000380), 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x36b78000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000020201000000000700000a0a98adab486cf9307a29dd64ad091dc9fdaaa0f8d4d05fd87c300d00d309a8b8ca60d7"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20040000) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000002940)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000240)=0x1e) 13m43.116426919s ago: executing program 1 (id=632): pipe2$9p(0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x5}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = dup(0xffffffffffffffff) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r6, @ANYBLOB="0b00000000000000cc001a8018000a80140007"], 0xec}}, 0x0) 13m41.77882562s ago: executing program 1 (id=633): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0/../file0/../file0/file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0/file0\x00') 13m38.573199138s ago: executing program 1 (id=639): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e3002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0000}]}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) close_range(r2, 0xffffffffffffffff, 0x0) 13m36.738780813s ago: executing program 1 (id=645): r0 = socket(0x1d, 0x80000, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x218b}, &(0x7f0000000180)=0xc) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x45, 0x7, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x5, 0x0, 0x3a8f5e}) close_range(r5, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r9, 0x3}, 0x8) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x60240) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={r1, 0x0, 0xfffffff7, 0x6, 0xdc8c, 0x34e, 0x5, 0x9, {r1, @in6={{0xa, 0x4e21, 0x321, @private2, 0xb}}, 0xb, 0x7, 0x1, 0x4, 0x7557}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r10, 0x7, 0x4}, &(0x7f0000000200)=0xc) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x2, 0x20000002, 0x3) 13m36.727637314s ago: executing program 34 (id=645): r0 = socket(0x1d, 0x80000, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x218b}, &(0x7f0000000180)=0xc) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000080)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) sendmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000440)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x45, 0x7, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x5, 0x0, 0x3a8f5e}) close_range(r5, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r9, 0x3}, 0x8) syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x60240) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={r1, 0x0, 0xfffffff7, 0x6, 0xdc8c, 0x34e, 0x5, 0x9, {r1, @in6={{0xa, 0x4e21, 0x321, @private2, 0xb}}, 0xb, 0x7, 0x1, 0x4, 0x7557}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r10, 0x7, 0x4}, &(0x7f0000000200)=0xc) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x2, 0x20000002, 0x3) 11m0.836693256s ago: executing program 7 (id=1011): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) socket$l2tp(0x2, 0x2, 0x73) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x80000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) r6 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000000)=0x2, 0x8) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x3f, 0x107, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 10m59.663590517s ago: executing program 7 (id=1014): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffe0, 0xffff}, {0x14}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x300, 0x56, &(0x7f0000000440)=""/86}, &(0x7f0000000380)="259374c94982", 0x0, 0x0, 0x14, 0x0, 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000300)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) syz_emit_ethernet(0x76, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x40, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @time_exceed={0x4, 0x0, 0x0, 0x9, '\x00', {0x0, 0x6, "f99063", 0x800, 0x3a, 0xff, @mcast1, @loopback, [@fragment={0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x67}], "1b8d2069162baf34"}}}}}}}, 0x0) syz_extract_tcp_res(&(0x7f0000000080), 0x1000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYRES8=r0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1001010000000000000000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) recvmmsg(r0, &(0x7f0000003780), 0x0, 0x71, &(0x7f0000003880)={0x0, 0x989680}) pipe(&(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xf, 0x800000000004, @thr={&(0x7f00000000c0)="f9bfc1bc1a54f51596cd7c8612a2621f99", 0x0}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="294fcf5a1122f0d49df400"/26], 0x1c}}, 0x24000090) 10m57.63633671s ago: executing program 7 (id=1019): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x81200000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x44, r2, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000051}, 0x4004000) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000440)=""/130, &(0x7f0000000340)=0x82) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x7}, 0x8) 10m56.422255782s ago: executing program 7 (id=1022): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x2a72, 0x0) io_uring_setup(0x5d59, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)={0xc8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @local}}}]}]}, 0xc8}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 10m55.478305392s ago: executing program 7 (id=1025): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setregid(0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000000100)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[0x0]) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x800) 10m48.972328738s ago: executing program 7 (id=1033): io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000340), &(0x7f0000000080)) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40040) syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0xa00, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x1) 10m33.74781116s ago: executing program 35 (id=1033): io_setup(0x81, &(0x7f0000001440)=0x0) r1 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000340), &(0x7f0000000080)) io_submit(r0, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40040) syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) pselect6(0x40, &(0x7f00000001c0)={0xa00, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x1) 10m29.059339151s ago: executing program 4 (id=1076): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f0000000100)=[{{}, {0x80000000}}]}) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$kcm(0x10, 0x3, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000902b8010b40b7e0ac460010203010902240001010000000904450202fbd4030009050498100000fa000905810240"], 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000280)={r1, 0x0, &(0x7f0000000080)=[{{0x80000000, 0x0}}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000040)={{0x80000000, r3, 0x6, [0x1]}, {r4, 0x0, 0x4, [0xd, 0x1]}, 0x10000000, [0xed, 0xcd6]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r5, 0x0, 0x0) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 10m25.009796944s ago: executing program 4 (id=1084): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9feb010018000000000000008201220082010000770c9087d64801f4b739c8040000000f0000000700000604000000100000000c0000000d000000010000000c000000a30700000200000004000000070000000300000003000000030000000200000000000000000000000000000801000000100000000600000f0200000002000000070000000900000004000000b3000000020000000400000000000000050000000500000000000000000000000200000006000000100000000100000007000000cb0200005b130000000000000003000000000400000001000000bd53a856000000000300000d0000000000000000120000000e000000000000000a000000050000000600000008000084810000000600000004000000000000000600000009000000fc0000000600000002000000f8ffffff0700000004000000f7ffffff0e00000005000000434500000600000003000000090099000600000000000000f9ffffff0e0000000000000007000b000000000000000003000000000100000004000000010000000600000000000001000000007f00500605000000000000100c0000000000002e3000"], &(0x7f0000000640)=""/152, 0x1a0, 0x98, 0x0, 0x9}, 0x28) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0xd, 0xba, &(0x7f00000003c0)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r6}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000004c0)={[{@subsystem='cpu'}, {@subsystem='memory'}, {@nofavordynmods}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x0) unshare(0x40020000) 10m23.00749012s ago: executing program 4 (id=1088): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) 10m21.657009078s ago: executing program 4 (id=1091): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'ip6gre0\x00', 'sit0\x00', {}, {0xff}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@srh={{0x30}, {0x11, 0xbd, 0xb5, 0x4, 0x0, 0x80, 0x40}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00', {0x4}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x80}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000680), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0xf08, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000bf00)=@newtaction={0x14, 0x30, 0x200, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000040)=[{0x3, 0x2801, 0x50, &(0x7f0000000340)="eeaa050d541d7df15012e16d3af8d29ff8616bc2bde7fba4dc23af378668d88d36b841d9a97119ac4e05393719abe666371fbf64116f81ff8067e5212bed812a913b81a1b91bbeb195c95a660e66c6d2"}], 0x1}) 10m18.871491012s ago: executing program 4 (id=1097): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000f74000000050f7400030710021a76feff0a1003020b0001d8f4ff5e1002286eaa2af1283279f2102f96fe5bd2a102e210686284d3ec03d07c5a6c0c715a36e93f82bb1c3507188fdb1481063f08cedc33d684a7426a14b40824a084b31760a1a7060000000000000004a0cb83ba6e0f5a1f4d6e88e6f0b9fb"], 0x0, 0x0}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x201f00) r1 = syz_open_dev$vbi(&(0x7f00000002c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x2) preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000340)=""/162, 0xca80}], 0x1, 0x80000001, 0x3f7a) 10m17.212830445s ago: executing program 4 (id=1101): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="e0000000130001002b", @ANYRESOCT=0x0, @ANYRES64=r0, @ANYRES32=r0, @ANYRES64=r0], 0xe0}], 0x1, 0x0, 0x0, 0x20008020}, 0x8880) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000780)=0x101, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, 0x0, &(0x7f0000000100)}, 0x20) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f0000000180)) socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ldst={0x2, 0x0, 0x0, 0x6, 0x1, 0x8, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x339d63c8d6513bfd, 0xb, 0x3, 0x18, 0x1}, @alu={0x4, 0x1, 0x8, 0xb, 0x2, 0x80, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x885}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000480)='GPL\x00', 0x5, 0x87, &(0x7f00000004c0)=""/135, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000680)=[{0x0, 0x1, 0x2, 0x5}, {0x2, 0x1, 0x2, 0x3}, {0x5, 0x5, 0x2, 0x1}], 0x10, 0xde}, 0x94) socket$xdp(0x2c, 0x3, 0x0) getpid() 10m1.984747081s ago: executing program 36 (id=1101): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="e0000000130001002b", @ANYRESOCT=0x0, @ANYRES64=r0, @ANYRES32=r0, @ANYRES64=r0], 0xe0}], 0x1, 0x0, 0x0, 0x20008020}, 0x8880) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000780)=0x101, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{0x1}, 0x0, &(0x7f0000000100)}, 0x20) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r5 = dup3(r3, r4, 0x0) ioctl$MON_IOCG_STATS(r5, 0xc0109207, &(0x7f0000000180)) socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @ldst={0x2, 0x0, 0x0, 0x6, 0x1, 0x8, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @jmp={0x5, 0x1, 0x339d63c8d6513bfd, 0xb, 0x3, 0x18, 0x1}, @alu={0x4, 0x1, 0x8, 0xb, 0x2, 0x80, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x885}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000480)='GPL\x00', 0x5, 0x87, &(0x7f00000004c0)=""/135, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000680)=[{0x0, 0x1, 0x2, 0x5}, {0x2, 0x1, 0x2, 0x3}, {0x5, 0x5, 0x2, 0x1}], 0x10, 0xde}, 0x94) socket$xdp(0x2c, 0x3, 0x0) getpid() 7m41.556165616s ago: executing program 6 (id=1473): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000580)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180d], [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c00000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x45c) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x300) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0x18) 7m40.213415058s ago: executing program 6 (id=1476): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000003, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) dup3(r1, r2, 0x80000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$l2tp6(r0, &(0x7f0000000680)={0xa, 0x0, 0x7fff, @mcast1, 0x9, 0x3}, 0x20) syz_emit_ethernet(0xab, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c20000002059249b379086dd601081140075110000000000000000000000000000000000ff02000000000000000000000000000100000e22"], 0x0) 7m37.174354622s ago: executing program 6 (id=1484): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='nv', 0x2) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f030000000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) (fail_nth: 6) 7m36.644736181s ago: executing program 6 (id=1486): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@loopback, @in6=@private0}}, {{@in=@private}, 0x0, @in6=@private0}}, &(0x7f0000000080)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000400000014001680100008800c00038008000200000000042f5c9e7e106ddd1e1bf66e280262b02efbad72b25832b2d3fb"], 0x38}}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r5 = socket$netlink(0x10, 0x3, 0xb) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80000) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@deltclass={0x24, 0x29, 0x10, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0x1, 0xffff}, {0xa, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc894) close_range(r5, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000001c0)=0x1, &(0x7f0000000400)=0x4) setsockopt$inet_mreq(r7, 0x0, 0x24, &(0x7f0000000000)={@multicast1=0xe0000300, @loopback}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004500001c00000000800290780000886d3153030000009078000000d2"], 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r8, 0x81, 0x1, &(0x7f0000000140)="a9") 7m33.47124877s ago: executing program 6 (id=1491): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000040)={0x5, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) rmdir(&(0x7f0000000040)='./cgroup/../file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) r3 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f00000000c0)='./cgroup/../file0\x00', 0x1cf) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r4) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000000000000000, 0x0, &(0x7f0000006680)=0x9) r5 = mq_open(&(0x7f0000000080)='\xef\x00', 0x40, 0x0, 0x0) mq_getsetattr(r5, 0x0, 0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_RATE_NEW(r6, 0x0, 0x40000) socket$alg(0x26, 0x5, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x24) setsockopt$RXRPC_SECURITY_KEYRING(r7, 0x110, 0x2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) keyctl$instantiate(0xc, 0x0, 0xfffffffffffffffd, 0x2a, 0x0) 7m30.588377606s ago: executing program 6 (id=1499): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x24000000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0xffffff75, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4018854}, 0x24004090) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r7, &(0x7f0000000400)=""/4096, 0xc00) 7m15.216530761s ago: executing program 37 (id=1499): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x24000000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0xffffff75, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4018854}, 0x24004090) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r7, &(0x7f0000000400)=""/4096, 0xc00) 2m50.032283543s ago: executing program 3 (id=2136): link(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_usb_connect(0x1, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x46, 0x36, 0x56, 0x8, 0x4b4, 0x8613, 0x958f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xd1, 0x6e, 0xa5}}]}}]}}, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r1], 0x18}, 0x1, 0x0, 0x0, 0x404c8d2}, 0x0) 2m47.134559302s ago: executing program 3 (id=2142): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="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", 0x10e, 0x0, &(0x7f00000000c0)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m45.744565256s ago: executing program 3 (id=2145): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000300)=@newtaction={0xac, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x98, 0x1, [@m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x3ff, 0xf, 0x401, 0x6}}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e00000"], 0x40}}, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x28, r6, 0x1, 0x70bd09, 0xa5dfdbfb, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xb, 0x40043}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40080a4}, 0x810) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, 0x0, 0x4040040) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000200000010ac053002400001020301090224000101030000090400040103010206092105000701221e030905814320000a040096d9f34789d03a5cd6bc6a539bcb82955d75ce5242ebe305c03e2dd70be59fcb4f5b50da519d291e5b424959233187e1e396aebb6a24289d12a5e54c6dbc6c4ccd8c046d81f4"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000020605a3cfc8647108024e0000000007120003006269746d61703a69702c6d616300000005000400010000000900020073797a3000000000240007800c00028008000140000000020c0001800800014000000004080008400000005c05000500020000000500010006"], 0x70}}, 0x8000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x44040) 2m41.931231489s ago: executing program 3 (id=2153): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x9}) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001500192340834b80040d8c560a067f0258ff000000000600000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000100090810000000000000040000", 0x58}], 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cpuinfo\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4c26, 0x7d, @empty, 0x20000007}, 0x1c) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x6a, 0x4, 0x20000000, 0x4) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r4 = syz_open_pts(0xffffffffffffffff, 0x101) r5 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x4, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x20040800) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x50) ioctl$UI_DEV_CREATE(r0, 0x5501) r6 = syz_open_dev$evdev(&(0x7f0000000100), 0x72, 0x0) ioctl$EVIOCSFF(r6, 0x40304580, &(0x7f0000000500)={0x50, 0xf, 0x1d, {0x12, 0xcac}, {0x8000, 0x7}, @ramp={0x400, 0x7, {0x8, 0xfffb, 0xeb4d, 0xf7f3}}}) 2m41.433614258s ago: executing program 3 (id=2154): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0xff40) r2 = syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0x80243) ioctl$CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000180)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x8, 0x5, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) 2m40.892723604s ago: executing program 3 (id=2155): r0 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='qnx4\x00', 0x200000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x600, 0xfffffffffffffffc, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10167, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) read$ptp(r6, &(0x7f0000000540)=""/17, 0x11) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f00000b5000/0x3000)=nil, 0x3000, 0x3000, 0x7f2f6a0d92b43734, &(0x7f00006e6000/0x3000)=nil) r7 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x54}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) bind$alg(r7, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002c40)=[{{&(0x7f0000001180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001200)=""/46, 0x2e}, {&(0x7f0000001240)=""/49, 0x31}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/100, 0x64}, {&(0x7f0000001380)=""/99, 0x63}], 0x5, &(0x7f0000001480)=""/191, 0xbf}, 0x6}, {{&(0x7f0000001540)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002b80)=[{&(0x7f00000015c0)=""/216, 0xd8}, {&(0x7f00000016c0)=""/94, 0x5e}, {&(0x7f0000001740)=""/97, 0x61}, {&(0x7f00000017c0)=""/40, 0x28}, {&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001900)=""/61, 0x3d}, {&(0x7f0000001940)=""/240, 0xf0}, {&(0x7f0000001a40)=""/248, 0xf8}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/44, 0x2c}], 0xa}}], 0x2, 0x60002002, &(0x7f0000002cc0)={0x77359400}) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1010}}, 0x10) io_uring_enter(0xffffffffffffffff, 0x541d, 0xd699, 0x4, &(0x7f0000001140)={[0x7fff]}, 0x8) 2m24.777861986s ago: executing program 38 (id=2155): r0 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='qnx4\x00', 0x200000, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x600, 0xfffffffffffffffc, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10167, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) read$ptp(r6, &(0x7f0000000540)=""/17, 0x11) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f00000b5000/0x3000)=nil, 0x3000, 0x3000, 0x7f2f6a0d92b43734, &(0x7f00006e6000/0x3000)=nil) r7 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x54}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) bind$alg(r7, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002c40)=[{{&(0x7f0000001180)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001200)=""/46, 0x2e}, {&(0x7f0000001240)=""/49, 0x31}, {&(0x7f0000001280)=""/124, 0x7c}, {&(0x7f0000001300)=""/100, 0x64}, {&(0x7f0000001380)=""/99, 0x63}], 0x5, &(0x7f0000001480)=""/191, 0xbf}, 0x6}, {{&(0x7f0000001540)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000002b80)=[{&(0x7f00000015c0)=""/216, 0xd8}, {&(0x7f00000016c0)=""/94, 0x5e}, {&(0x7f0000001740)=""/97, 0x61}, {&(0x7f00000017c0)=""/40, 0x28}, {&(0x7f0000001800)=""/230, 0xe6}, {&(0x7f0000001900)=""/61, 0x3d}, {&(0x7f0000001940)=""/240, 0xf0}, {&(0x7f0000001a40)=""/248, 0xf8}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/44, 0x2c}], 0xa}}], 0x2, 0x60002002, &(0x7f0000002cc0)={0x77359400}) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000001100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1010}}, 0x10) io_uring_enter(0xffffffffffffffff, 0x541d, 0xd699, 0x4, &(0x7f0000001140)={[0x7fff]}, 0x8) 18.364969942s ago: executing program 8 (id=2470): socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={&(0x7f00000005c0), 0x6e, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000240)=""/22, 0x16}, {&(0x7f00000002c0)=""/40, 0x28}], 0x3, &(0x7f00000004c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0xe8}, 0x10000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7fff, 0x0, 0x3, 0x0, 0x8001, 0xfa11, 0x9}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="0122094900005200", @ANYRES16=r4, @ANYBLOB="01002bbd7000fedbdf2506000000140008007866726d30000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x800) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x80800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r6 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x60f4, 0x10100, 0xffffffff, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 17.374077115s ago: executing program 9 (id=2474): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904150001da0900000905", @ANYRES16], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r6 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679c, 0x80, 0x2000006, 0x403ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x40480d7, 0x1}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x0) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') getdents(r9, &(0x7f0000001fc0)=""/184, 0xb8) r10 = openat$cgroup_ro(r9, &(0x7f0000002180)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$char_usb(r9, &(0x7f0000000040)="5fede3dcd480a81f2927503576a8e4bd9ee20be2b153111ce9f2f9ce95c91b602197eefb33c8df7fe37a5fb990ddb2b0b4dd907012d3781dc78be294f629245bec0c9f15219d87858f28f513b4e475f15d8a97", 0x53) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(r10, &(0x7f0000000140)={'#! ', './file0', [{0x20, '}'}, {0x20, 'map_files\x00'}, {0x20, '\x00'}, {0x20, ')^'}, {0x20, '&{)*@@$:\xf0$\'\':C.--{+\\,*]!(-'}, {0x20, 'syz1\x00'}, {0x20, '-'}, {0x20, '\''}, {0x20, '@\''}], 0xa, "1ab8f3810b3d5c45f404a1c4309088bbf3d5dfd9ad26c96c080be4a9f36c37de1a2bb75ff9d865bf6e9a3e36d2112523102beec429065b61d55521e6db588f794d1e38309da742b2193098b9"}, 0x91) syz_usb_control_io(r0, 0x0, 0x0) 17.296642997s ago: executing program 2 (id=2475): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc298, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x401, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x17b, 0x4c801}}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x20040844) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @alu={0x4, 0x0, 0xc, 0x7, 0x8, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x23}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x3, 0x3, 0x2, 0x5, 0x3, 0xc, 0x10}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}], &(0x7f00000008c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 16.652672571s ago: executing program 8 (id=2477): ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000080)={{0x4100d, 0x0, 0x0, 0x5, 'syz0\x00', 0x2}, 0x3, 0x10, 0x1, 0x0, 0x0, 0x10, 'syz1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000140)={@private1, @multicast2, 0x13, 0xffff}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24) sendmsg$sock(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="b5d9f6745bbc6ce981", 0x9}, {0x0}], 0x2}, 0x400c011) close(r3) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0xed, 0xc, 0x0, 0x1, 0x40, 0x2, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x0, 0x106c, 0x100, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.170112432s ago: executing program 0 (id=2478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x1, 0x5002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xed5fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) clock_adjtime(0x0, &(0x7f0000000000)={0x66b7, 0x0, 0x0, 0x7, 0x0, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0x0, 0x3, 0x248a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x5, 0x0, 0xf439}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000380)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r4, 0x201, &(0x7f00000001c0)={0x0}) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2a09004, 0x0) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) mount(0x0, 0x0, 0x0, 0x40078, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 15.048220244s ago: executing program 8 (id=2479): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042801000018006000600894f000004001c000400"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x20, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) 13.425864937s ago: executing program 0 (id=2480): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x18689, 0x0) 11.466190328s ago: executing program 0 (id=2482): syz_open_dev$vbi(0x0, 0x0, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000000340), 0xffffffffffffffff, 0x20201) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="814c8d"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0x26004885) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r5, &(0x7f0000009b80)=""/102392, 0x18ff8) gettid() r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="320200007d00000005f1000000"], 0x232) r8 = syz_io_uring_setup(0x1e1a, &(0x7f0000000300)={0x0, 0x86f7, 0x2000, 0x0, 0xef, 0x0, r1}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) io_uring_enter(r8, 0x48e9, 0x0, 0x2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r6, 0x0, 0x0, 0x80800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}, {0x0}], 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000100)=0x4) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r12, 0xae03, 0xd0) 11.464917241s ago: executing program 9 (id=2483): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x24000000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0xffffff75, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4018854}, 0x24004090) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f00000000c0)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r8, &(0x7f0000000400)=""/4096, 0xc00) 11.33204427s ago: executing program 2 (id=2484): mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x8, 0x1001f5, 0x40000}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r3) r4 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x3fffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc25c4110, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x121000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) write$UHID_INPUT(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, 0xe, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(0x0, r10) sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="f4fffeff62bc639fbb1671d9bc2084147f1012400675cb17ad6b50ffbde069c766aeeb94ed902893950090477ddda2fa723c0e78e104a8425581c7f05b4a7b3b43bf4ca3fc00fb448bdd78926c97b5c6efb4972da6ebf9d550b5441aa30abae00eb29cc413ea97efbaa1e74afb49f15000"/124, @ANYRES16=r11, @ANYRESDEC=r0], 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000"], 0x0, 0x26}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r12}, 0x8) 9.487708292s ago: executing program 8 (id=2487): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904150001da0900000905", @ANYRES16], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r4 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679c, 0x80, 0x2000006, 0x403ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x40480d7, 0x1}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x0) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 9.30563057s ago: executing program 5 (id=2488): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x60, 0x0, 0x1, 0x3, 0x25dfdc01, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x40010) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, 0x0, 0x20000010) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1a, &(0x7f00000000c0)={@mcast1, 0x0}, &(0x7f0000000100)=0x14) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x304, r1, 0x400, 0x400, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x130, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xd}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x4}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xd4, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_STRSET_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x304}, 0x1, 0x0, 0x0, 0x10010}, 0x20000010) sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x70bd25, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_LE_SET_ADV_PARAM={{0x79}, 0xce}}}, 0x7) 8.251497148s ago: executing program 9 (id=2489): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x12) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) syz_open_dev$video(0x0, 0x7f, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r3, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x1, 0x5000003a, r0, 0x0) 7.663825009s ago: executing program 2 (id=2490): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x408001, 0x0, 0xa, 0x0, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042801000018006000600894f000004001c000400"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x20, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, 0x0, 0x0) 7.662190441s ago: executing program 5 (id=2491): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) socket$packet(0x11, 0x2, 0x300) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f00000001c0)="43c401e5dabbc589f31f877f7d6455b9f630e4fc5b3b2e4e48d644dd2f034b6da655d034992bb8eb17f36f7c0c5be64184bb50422d0c5f8cdd4b09c27c971752ddaa0cfe7dc6f90e2d6f4d5adc261c4a1aa8ee4b536d12952d10f54b1549ba9aecfe3e201fbc652c88100ae8d49da15127", 0x71) io_setup(0x239f, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x36b78000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000020201000000000700000a0a98adab486cf9307a29dd64ad091dc9fdaaa0f8d4d05fd87c300d00d309a8b8ca60d7"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20040000) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000002940)) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000140)={'ah\x00'}, &(0x7f0000000240)=0x1e) 4.82012997s ago: executing program 8 (id=2492): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x24000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000ffff27bd7037fcff732500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000002800128009000100766c616e000000001800028006000100fe0f00000c000200110000001300000008000500", @ANYRES32=r6, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x31, "2a161d2d7137f20a8f1597f02515fcead4e153309c703be3a0d6416f3528fe1da7e47629e5d7afc1f95c9cf965056b4c89"}}) 4.374335087s ago: executing program 5 (id=2493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x18689, 0x0) 3.736351211s ago: executing program 5 (id=2494): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x400000000010, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0xc, [{{0x9, 0x4, 0x0, 0x3, 0x3e, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0xd, 0x20}}}}}]}}]}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x9}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x10) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000180)) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) write(r2, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 3.287454136s ago: executing program 0 (id=2495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0xf}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000001c0), 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r4, 0x2) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r2, 0xab00, r6) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) 2.463253939s ago: executing program 9 (id=2496): syz_open_dev$video(&(0x7f0000000040), 0x3, 0x101002) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') fcntl$setstatus(r0, 0x4, 0x40800) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000440)={0x0, 0x79a8, 0x8, 0x2, 0x29a}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000000)=[{&(0x7f0000001800)=""/203, 0xcb}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r5 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x10044, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') ioctl$FE_GET_PROPERTY(r7, 0x80106f53, &(0x7f0000000040)={0x25, &(0x7f0000000300)=[{0x1a, '\x00', @buffer={"3c7550499a8b94154b6c70e89814b07e6c83d472aca932eab8ce956522ff5aa0", 0x20}, 0x9}, {0x20, '\x00', @data=0x9, 0x5}, {0x37, '\x00', @st={0x4, [{0x2, @uvalue=0x5}, {0x2, @uvalue=0xfef}, {0x0, @uvalue=0x3}, {0x1, @uvalue=0x7}]}, 0xfffffff5}]}) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r8, 0x40045731, &(0x7f0000000240)=0x1) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xc, 0x4}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfe, 0x200000}, 0xc) 2.455362263s ago: executing program 2 (id=2497): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x762, 0x0) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') syz_clone(0x1144280, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigtimedwait(&(0x7f00000001c0)={[0x100000000023fa]}, 0x0, 0x0, 0x8) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) close(r4) ioctl$KDSKBMETA(r4, 0x4b63, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00'}) sendmmsg(r5, &(0x7f0000002d40)=[{{&(0x7f0000000240)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f00000004c0)}}, {{&(0x7f0000000580)=@llc={0x1a, 0x304, 0x2, 0x6, 0x48, 0xcc, @remote}, 0x80, &(0x7f0000002980)=[{&(0x7f0000000380)="bbb090b7377df545bd30411e952eff57dd3f7c09729035ad69611ba8bc3cdbc2c44092a16a74daffa24bcb01b7f093eea4ff0c86552cc195d82c8b55159030e74eb465d173e6d7c9dbb286298a8250ac94c647fb5e08531c5fe0d72a21fa4641a932d13d5cc17565cd63f69bb4d5ef4d6a1387b0a93bfdcd2f9444b3c5f672ca565b765ebf58f819ddb44d7f94b42a57fea8308e28", 0x95}, {&(0x7f00000006c0)="6b168d554cf363ccd3e8fe4590f6d027838b5b75060ca54f421a3c39bc594123e4ad74691c50f69031a9f22a7217d3b2bfb2746bbe740a0519f6fad6835f1c4e641d6dfedc836014a578c85f6d4beb31fcfbcca5c9ffa5c6b3cf88dc9dec16962253521cfa3739e7f810ff54db1f56dda7f2699e061a43a8136a63534c5ce3ef7ad8917d4b78877087c58db3d911997065c825a87864b0989e420fe28f0c53b7bc91efd488964a747c0f9f93212e1b9b4641f977e40f22188b7d40b7648530a5fd632eb1075d910331b126b552730da01528a8d979384116dba5ee0d00032b0e14fc9abfd43db5b27cd9f59352a98c5022f67df7dff1ef64594994a31ce306d0055b72da90932a42f235f0faf2", 0xffffffffffffffcd}, {&(0x7f00000002c0)="5dc59cc1ea7f57e395c71820e82cb4e260612814e03435403dab78a3aac5c2724642bfc188bb9b4fe562a7884ef7504bfea4fede957dcf00e56996dca76ca655121dc420c09ead89f3ce2cca07a2ac9a2fb59e553ffed1579c3b90c6751853dcb4e6db0f4486365d675adfb4586e67f007a1a3f1a88bc61cb6c54062adfd7e6f29b7230319da618efd", 0x89}, {&(0x7f0000002880)="e128984230de982b830d6d32b8810091f00298f2382bc1ccf0c0107cec09114c2169926fa07a2c55912ab2f08fadfd033f43494758b2e18b07403140a3f0047a20f387afd41fdb8b715561c124b4d3638cb5b774f21ac0af1dd31ed2cc446bd4db141236e10930cea50b0127a75bb541aa5b05c1a3cfab6824b211ee60192ddfcc9f721f77d66645ee54bd85699f63552e93d4951aa52e7112ec9074fd4eed8740dda2e9dfd048dd971ca80335229815251ba80b100123eab2ef134514cee6823984537ea48a58e3adbbf977d496c8e5162bd381af5b34b1fca4fa8fee35a9879cb3cdcc17", 0xe5}], 0x4, &(0x7f0000000440)=ANY=[], 0x350}}], 0x2, 0x80) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r4, 0x107, 0x18, &(0x7f00000029c0)=0xf3f, 0x4) 1.834548303s ago: executing program 0 (id=2499): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22102, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f0000000080)='reno\x00', 0x5) (async) sendmmsg$inet(r1, &(0x7f0000001380)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000001c80)="eced09c14f8d672fdf1c9abf972eb256c943bfb14b5025f78decdacde7a06af3949b1e4d84df6ab9023f900b60a4f902a069ec21839c468ac49145c33a2980dcbbbf1d79933e2b659815aaf84b6bcfc3b959a9d17f6f2a476a3b0f478f5ccda4263969fa85027036f7d49360b90f6d6db96cadebe5a84a52ba19235e93efd56a7d569d2d8cc8a9d6aeb2b649331df6666fe4bd023e868cc9d3ea1db1e6253250807302f59d1fc9a7b9a716c5fe98ad37f1cdd0407d196a608cde9c008f1b2ab6ea48ee93d08f4b99a9156ef53af0cbe7c733d8d771159c05495a9aed3efa5979b6e14f77abe4a9d21873ff03c05ee4d525544cd1a386951ef5bafdd5a7d221be5f257d6cd03a8b54557bd7b469a6a9f4040760b8f3bb14a34801300efd8582aebddac64516403da88386f131bd1783335b8411a0347ae73e798b43ef3837499d38a5d7c68c76ebe2fb2026b11ab349d74c939921f0f92af9ae0548180f5cbf679d715ba04aa878cc859904d2917b58c9f1072ecee373b2878525dca882c709d015c3cacef99b420afff509027b8b47ef53f428879988eef6930be04d8377b810a112d7f6bfcaadbcfab1ea334ea74f5f1ff5d3e9dc41922c999484f937cfaf31ea4f7c0ec907f0c4f20803c1a17a98db7d11a3926d72d92d1379316a351d2f228cd21617e3e96c11ed892ed98d6a1bb71b3348103ad51110bd6214317953d94d29184e899ae5dac43431cffbe164d1040fbed26699d7ecee78ac2513f8a3f98814b329de9b68e3f2832366e7c77a1fc7be482a1a4ccadd6f9c5bcb0fe21054a8969770d7fc70765c256bbb079288a69560c78fcca3fb6c40fc2f5c4379726a36c55655e8ae5729091548c4e047c2b388aa5d23a7f170a006b86067ec72fc6eec651054b3ad4d2db5c615303d4d7bc9a93a02e54e6b4026079b45b9432cfc6702af716ebbc5c5ed870b3d042bb8523a71694ae35665e91218f809f979901b4c769989f058eb4c788a012cf43e09a53c689e973a61b7135aabde156796b076e515321a3f305a174887e0c9c265872c839e064ad5559d6fb240fc0b3b15ffbfba9c2a1d29e530047dcbb8d32812ca268bcb1af959cba3054667a2d1325f170c1abb4cfe52a2f6e4719604e7a16004c38bc1bbec8a9bf3386e2d4c1d11a4e120f4d6a90dbfd5fef59df6e29c5f8b6dc7e579fde368135e928f6c16224163d9b44605bbde345f062f50c2bbd4e3c5ea23676f3d260f48a4c2fb710b4657c266c970706270", 0x382}, {0x0, 0x53}], 0x2}}], 0x2, 0x8014) (async) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r0, 0xc008aec1, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TCSETA(r3, 0x4b6a, &(0x7f0000000340)={0x200c, 0x0, 0x0, 0x0, 0x11, "0e7700"}) 1.809325584s ago: executing program 2 (id=2500): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000), 0x400, 0x2000) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000040)) fcntl$setstatus(r0, 0x4, 0x2000) 1.552098096s ago: executing program 0 (id=2501): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x400}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010002000000401008010000000000000109022400010000808409040000fe0300000009210000000122050009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000580)={0x2c, &(0x7f0000000180)={0x20, 0x1, 0x91, {0x91, 0x9, "de82b59d26495afd18ee14e5ad76e8a9aece9909a80a0ba5bf92b89a82aa655fe5db0846468813f60b00cf9558d20fb63a42f6930c5f2cb2b1bc2be59508425c9ed1741198baa8eff66f4e394dbb53e332ddcfe8adf80c9aca3d73d5e707cda5a55dd5be9dedd4e4783a54396e7c8bb009996a1788c353fc5868caf4767123de98aa3310df9d6671b7343e483479e5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10014400, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x6bb3, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80000000, 0x5, 0x200000, 0xa000, 0x0, r6, 0x0, 0xfffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x50, 0xfffffffffffffff5, 0x800, {0x7, 0x2d, 0x5, 0x5, 0x7, 0xfffc, 0x7, 0x7ff, 0x0, 0x0, 0x80, 0x2f46}}, &(0x7f0000000140)={0x18, 0xffffffffffffffda, 0x80, {0x6}}, &(0x7f0000000300)={0x18, 0x0, 0x7, {0x2}}, &(0x7f0000000340)={0x18, 0x0, 0x2, {0x8}}, &(0x7f0000000380)={0x18, 0x0, 0x1d, {0x6}}, &(0x7f00000003c0)={0x28, 0x0, 0x9, {{0x62eb, 0xa306, 0x0, r8}}}, &(0x7f00000004c0)={0x60, 0x0, 0x6, {{0x100000000000, 0x7, 0x8, 0x8, 0x9, 0x7, 0x9, 0x4}}}, &(0x7f0000000440)={0x18, 0xffffffffffffffda, 0x7, {0x10000}}, &(0x7f00000005c0)=ANY=[@ANYBLOB="25b100550100003700"], &(0x7f0000000600)={0x20, 0x0, 0xd, {0x0, 0x5}}, &(0x7f0000000640)={0x78, 0x0, 0x6, {0xffff, 0xac1, 0x0, {0x6, 0x2, 0xffffffffffff077c, 0xfffffffffffffffe, 0x3, 0x81, 0x6bc0d317, 0x4, 0xff, 0xa000, 0x7fffffff, r6, r7, 0x2, 0x1ff}}}, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffff5, {0x5, 0x0, 0x3, 0xfffffffffffffff9, 0x5, 0xfffffffb, {0x3, 0x26, 0x8, 0x5, 0xd, 0x2, 0x6, 0x0, 0x2, 0xa000, 0x5, r6, r7, 0x6, 0x4}}}, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/399], &(0x7f0000000840)={0xb0, 0xfffffffffffffff5, 0x2, [{{0x2, 0x3, 0x9, 0x5e, 0x8, 0x7, {0x1, 0x0, 0x7, 0x8000, 0x0, 0x60, 0xfffffeff, 0x7, 0x8e2b, 0x6000, 0xacb, r6, r7, 0x8}}, {0x1, 0x0, 0x6, 0x1000, '-}}O:^'}}]}, &(0x7f0000000900)={0xa0, 0x0, 0x0, {{0xcac, 0x0, 0xfffffffffffffffc, 0x8, 0x3, 0x3, {0x5, 0x5, 0x1, 0x4a32, 0x0, 0x10, 0x5, 0x7, 0x5ff, 0xc000, 0x200, r6, r7, 0xeb2, 0x5}}, {0x0, 0x4}}}, &(0x7f00000009c0)={0x20, 0xffffffffffffffda, 0x8, {0x3, 0x4, 0x3d827cd7, 0x2}}, &(0x7f0000000a00)={0x130, 0xffffffffffffffda, 0x7fffffff, {0xfffffffffffffff0, 0xdb, 0x0, '\x00', {0x0, 0x8001, 0x5, 0x5, r6, r7, 0x8000, '\x00', 0xfffffffffffffffd, 0x7, 0x2ee, 0x9, {0x7, 0x2}, {0x5, 0xc000}, {0x8, 0x6}, {0x4, 0x4}, 0x4, 0x9, 0x9, 0x1ff}}}}) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) listxattr(&(0x7f0000000b80)='./file0\x00', 0x0, 0x0) 1.516783698s ago: executing program 2 (id=2502): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4921f01000109021b1901000000f30904150001da0900000905", @ANYRES16], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r4 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679c, 0x80, 0x2000006, 0x403ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4defe495b5744eed6801d1d51e1d3fcdcf25bdf4a5f2ef4b45d6898757795c858f0c3d4b26bd644", 0x38, 0x40480d7, 0x1}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="05000000"], 0x48}}, 0x0) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.459171957s ago: executing program 9 (id=2503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x200) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[], 0x0}, 0x94) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x20802, 0x0) write$dsp(r5, &(0x7f0000000140)="2f1966d988dd", 0x6) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x0, 0xa0, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0xa0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x287, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3]}, {0x0, [0x1]}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x91e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 1.44525036s ago: executing program 5 (id=2504): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x18689, 0x0) 685.462765ms ago: executing program 5 (id=2505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x4800) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd300800100000008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000) 0s ago: executing program 9 (id=2506): sendto$inet(0xffffffffffffffff, &(0x7f0000000400)='R', 0x1, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe80900", 0x40}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x403, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x113, 0x4}}, 0x20) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0x0, 0xf5, 0x3, 0x7fffffffffffd, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x200040001, 0xbdb], 0x40000, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1cb201, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x1d, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000a95faf344d10674e44d1563ec5f70000000000000000000000000085000000ae0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135}, 0x21) fcntl$lock(r3, 0x25, &(0x7f0000000040)={0x2, 0x0, 0x6, 0x8, 0xffffffffffffffff}) kernel console output (not intermixed with test programs): parsing attributes in process `syz.2.2146'. [ 939.911186][T15677] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 939.912618][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 939.912630][ T29] audit: type=1400 audit(2000000835.720:59577): avc: denied { create } for pid=15674 comm="syz.2.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 940.117797][ T29] audit: type=1400 audit(2000000835.748:59578): avc: denied { write } for pid=15674 comm="syz.2.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 940.169919][ T29] audit: type=1400 audit(2000000835.832:59579): avc: denied { ioctl } for pid=15666 comm="syz.3.2145" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 940.233940][ T24] usb 9-1: USB disconnect, device number 59 [ 940.266431][ T29] audit: type=1400 audit(2000000835.832:59580): avc: denied { ioctl } for pid=15666 comm="syz.3.2145" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 940.385853][ T29] audit: type=1400 audit(2000000835.832:59581): avc: denied { ioctl } for pid=15666 comm="syz.3.2145" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 940.507359][ T29] audit: type=1400 audit(2000000835.832:59582): avc: denied { ioctl } for pid=15666 comm="syz.3.2145" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 940.595304][ T29] audit: type=1400 audit(2000000835.898:59583): avc: denied { create } for pid=15674 comm="syz.2.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 940.709401][ T29] audit: type=1400 audit(2000000835.916:59584): avc: denied { setopt } for pid=15674 comm="syz.2.2146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 940.791139][ T29] audit: type=1400 audit(2000000835.973:59585): avc: denied { create } for pid=15678 comm="syz.5.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 940.863878][ T29] audit: type=1400 audit(2000000835.973:59586): avc: denied { write } for pid=15678 comm="syz.5.2147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 941.485087][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2149'. [ 941.575787][T15690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2149'. [ 941.674198][T11156] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input65 [ 941.768141][ T5161] bcm5974 4-1:1.0: could not read from device [ 941.778841][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.786403][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.845607][T11156] usb 4-1: USB disconnect, device number 26 [ 941.862255][ T5161] bcm5974 4-1:1.0: could not read from device [ 941.877248][T15696] openvswitch: netlink: Flow actions attr not present in new flow. [ 942.014149][T15697] snd_dummy snd_dummy.0: control 1:-1:-8:syz0:32 is already present [ 942.142430][T15699] input: syz1 as /devices/virtual/input/input66 [ 943.147787][T13285] block nbd3: Possible stuck request ffff888027ec0000: control (read@0,1024B). Runtime 120 seconds [ 943.158756][T13285] block nbd3: Possible stuck request ffff888027ec0200: control (read@1024,1024B). Runtime 120 seconds [ 943.169938][T13285] block nbd3: Possible stuck request ffff888027ec0400: control (read@2048,1024B). Runtime 120 seconds [ 943.181236][T13285] block nbd3: Possible stuck request ffff888027ec0600: control (read@3072,1024B). Runtime 120 seconds [ 945.038761][T15721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=15721 comm=syz.5.2157 [ 945.065494][T15721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=15721 comm=syz.5.2157 [ 945.099341][T15721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=15721 comm=syz.5.2157 [ 945.309852][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 945.309867][ T29] audit: type=1400 audit(2000000840.799:59791): avc: denied { map_create } for pid=15729 comm="syz.9.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 945.372504][ T29] audit: type=1400 audit(2000000840.799:59792): avc: denied { bpf } for pid=15729 comm="syz.9.2160" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 945.423034][ T29] audit: type=1400 audit(2000000840.809:59793): avc: denied { map_create } for pid=15729 comm="syz.9.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 945.591845][ T29] audit: type=1400 audit(2000000840.809:59794): avc: denied { map_read map_write } for pid=15729 comm="syz.9.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 945.863047][ T29] audit: type=1400 audit(2000000840.809:59795): avc: denied { read } for pid=15729 comm="syz.9.2160" dev="nsfs" ino=4026534210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 945.913530][ T29] audit: type=1400 audit(2000000840.809:59796): avc: denied { read open } for pid=15729 comm="syz.9.2160" path="net:[4026534210]" dev="nsfs" ino=4026534210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 946.070409][ T29] audit: type=1400 audit(2000000840.809:59797): avc: denied { create } for pid=15729 comm="syz.9.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 946.646509][ T29] audit: type=1400 audit(2000000840.809:59798): avc: denied { read } for pid=15730 comm="syz.8.2161" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 946.797347][ T29] audit: type=1400 audit(2000000840.809:59799): avc: denied { read open } for pid=15730 comm="syz.8.2161" path="net:[4026532886]" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 946.898867][ T29] audit: type=1400 audit(2000000840.818:59800): avc: denied { create } for pid=15729 comm="syz.9.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 948.763929][T15766] openvswitch: netlink: Flow actions attr not present in new flow. [ 949.044684][T15769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 949.475920][ T792] kernel read not supported for file /media6 (pid: 792 comm: kworker/1:2) [ 949.601375][T15777] openvswitch: netlink: Flow actions attr not present in new flow. [ 950.665067][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 950.665078][ T29] audit: type=1400 audit(2000000845.813:60002): avc: denied { read write } for pid=10797 comm="syz-executor" name="loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 950.743620][ T29] audit: type=1400 audit(2000000845.850:60003): avc: denied { read write open } for pid=10797 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 950.775987][ T29] audit: type=1400 audit(2000000845.850:60004): avc: denied { ioctl } for pid=10797 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=655 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 950.853434][ T29] audit: type=1400 audit(2000000845.981:60005): avc: denied { read write } for pid=5802 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 950.916976][ T29] audit: type=1400 audit(2000000845.981:60006): avc: denied { read write open } for pid=5802 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 950.948624][ T29] audit: type=1400 audit(2000000845.981:60007): avc: denied { ioctl } for pid=5802 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 950.989293][ T29] audit: type=1400 audit(2000000846.112:60008): avc: denied { read } for pid=15795 comm="syz.2.2176" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 951.057102][ T29] audit: type=1400 audit(2000000846.112:60009): avc: denied { read open } for pid=15795 comm="syz.2.2176" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 951.123467][ T29] audit: type=1400 audit(2000000846.122:60010): avc: denied { create } for pid=15795 comm="syz.2.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 951.598130][ T29] audit: type=1400 audit(2000000846.206:60011): avc: denied { create } for pid=15795 comm="syz.2.2176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 952.064719][T15808] netlink: 'syz.9.2179': attribute type 1 has an invalid length. [ 952.084654][T15808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 952.128225][T15808] FAULT_INJECTION: forcing a failure. [ 952.128225][T15808] name failslab, interval 1, probability 0, space 0, times 0 [ 952.192611][T15808] CPU: 0 UID: 0 PID: 15808 Comm: syz.9.2179 Tainted: G L syzkaller #0 PREEMPT(full) [ 952.192641][T15808] Tainted: [L]=SOFTLOCKUP [ 952.192648][T15808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 952.192658][T15808] Call Trace: [ 952.192666][T15808] [ 952.192673][T15808] dump_stack_lvl+0x100/0x190 [ 952.192706][T15808] should_fail_ex.cold+0x5/0xa [ 952.192729][T15808] should_failslab+0xc2/0x120 [ 952.192755][T15808] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 952.192778][T15808] ? __alloc_skb+0x140/0x710 [ 952.192802][T15808] __alloc_skb+0x140/0x710 [ 952.192819][T15808] ? __alloc_skb+0x5b7/0x710 [ 952.192844][T15808] ? __pfx___alloc_skb+0x10/0x10 [ 952.192870][T15808] netlink_alloc_large_skb+0x69/0x150 [ 952.192896][T15808] netlink_sendmsg+0x680/0xda0 [ 952.192923][T15808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 952.192945][T15808] ? __might_fault+0x20/0x140 [ 952.192974][T15808] ____sys_sendmsg+0xa54/0xc30 [ 952.193002][T15808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 952.193037][T15808] ___sys_sendmsg+0x190/0x1e0 [ 952.193065][T15808] ? __pfx____sys_sendmsg+0x10/0x10 [ 952.193120][T15808] __sys_sendmsg+0x170/0x220 [ 952.193141][T15808] ? __pfx___sys_sendmsg+0x10/0x10 [ 952.193178][T15808] do_syscall_64+0x106/0xf80 [ 952.193199][T15808] ? clear_bhb_loop+0x40/0x90 [ 952.193221][T15808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.193239][T15808] RIP: 0033:0x7f378ed9bf79 [ 952.193254][T15808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.193271][T15808] RSP: 002b:00007f378fd3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 952.193289][T15808] RAX: ffffffffffffffda RBX: 00007f378f015fa0 RCX: 00007f378ed9bf79 [ 952.193301][T15808] RDX: 0000000000000804 RSI: 00002000000000c0 RDI: 0000000000000003 [ 952.193312][T15808] RBP: 00007f378fd3d090 R08: 0000000000000000 R09: 0000000000000000 [ 952.193323][T15808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 952.193333][T15808] R13: 00007f378f016038 R14: 00007f378f015fa0 R15: 00007fff0a961c48 [ 952.193358][T15808] [ 954.620189][T15840] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2187'. [ 954.727611][T15840] veth0_macvtap: left promiscuous mode [ 955.205160][T15844] raw_sendmsg: syz.2.2189 forgot to set AF_INET. Fix it! [ 956.428894][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 956.428913][ T29] audit: type=1400 audit(2000000850.303:60188): avc: denied { execmem } for pid=15858 comm="syz.9.2191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 956.557991][ T29] audit: type=1400 audit(2000000850.499:60189): avc: denied { read } for pid=15858 comm="syz.9.2191" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 956.676198][ T29] audit: type=1400 audit(2000000850.499:60190): avc: denied { read open } for pid=15858 comm="syz.9.2191" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 956.750326][ T29] audit: type=1400 audit(2000000850.593:60191): avc: denied { mounton } for pid=15858 comm="syz.9.2191" path="/209" dev="tmpfs" ino=1151 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 956.769134][T15863] audit: audit_backlog=65 > audit_backlog_limit=64 [ 956.779240][T15863] audit: audit_lost=17448 audit_rate_limit=0 audit_backlog_limit=64 [ 956.804008][T15865] audit: audit_backlog=65 > audit_backlog_limit=64 [ 956.810561][T15865] audit: audit_lost=17449 audit_rate_limit=0 audit_backlog_limit=64 [ 956.818901][T15863] audit: backlog limit exceeded [ 956.828984][T15863] audit: audit_backlog=65 > audit_backlog_limit=64 [ 956.942899][ T5874] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 957.135249][ T5874] usb 9-1: Using ep0 maxpacket: 32 [ 957.176849][ T5874] usb 9-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 957.216177][ T5874] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.231569][ T5874] usb 9-1: Product: syz [ 957.235733][ T5874] usb 9-1: Manufacturer: syz [ 957.263441][ T5874] usb 9-1: SerialNumber: syz [ 957.275189][ T5874] usb 9-1: config 0 descriptor?? [ 957.294379][ T5874] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 957.315385][ T5874] dvb-usb: bulk message failed: -22 (2/0) [ 957.341997][ T5874] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 957.367159][ T5874] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 957.381579][ T5874] usb 9-1: media controller created [ 957.415742][ T5874] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 957.452417][ T5874] usb 9-1: selecting invalid altsetting 7 [ 957.498737][ T5874] cxusb: set interface failed [ 957.503440][ T5874] dvb-usb: bulk message failed: -22 (1/0) [ 957.674903][ T5874] DVB: Unable to find symbol lgdt330x_attach() [ 957.687244][ T5874] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 957.815954][ T5874] rc_core: IR keymap rc-dvico-portable not found [ 957.830051][ T5874] Registered IR keymap rc-empty [ 957.844321][ T5874] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 957.921737][ T5874] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input67 [ 958.340213][ T5874] dvb-usb: schedule remote query interval to 100 msecs. [ 958.353126][ T5874] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 958.433945][ T24] usb 9-1: USB disconnect, device number 60 [ 958.524129][ T24] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 959.391874][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 959.404442][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 959.423148][ T5820] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 959.438138][ T5820] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 959.446121][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 959.499278][T15039] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 959.517748][T15039] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 959.525731][T15039] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 959.553396][T15039] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 959.573217][T15039] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 959.753614][T15900] vxcan1 speed is unknown, defaulting to 1000 [ 961.323892][T15900] chnl_net:caif_netlink_parms(): no params data found [ 961.337794][ T5874] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 961.667454][ T5874] usb 9-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 961.699460][ T5874] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 961.720079][T15900] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.731765][ T5874] usb 9-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 961.751853][ T5874] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.760299][T15900] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.778328][T15900] bridge_slave_0: entered allmulticast mode [ 961.785682][ T5820] Bluetooth: hci3: command tx timeout [ 961.791885][ T5874] usb 9-1: config 0 descriptor?? [ 961.808407][T15900] bridge_slave_0: entered promiscuous mode [ 961.841678][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 961.841700][ T29] audit: type=1400 audit(2000000856.271:60480): avc: denied { ioctl } for pid=15907 comm="syz.8.2203" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 961.897349][T15900] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.910033][T15900] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.919932][T15900] bridge_slave_1: entered allmulticast mode [ 961.936435][T15900] bridge_slave_1: entered promiscuous mode [ 961.944471][ T29] audit: type=1400 audit(2000000856.271:60481): avc: denied { ioctl } for pid=15907 comm="syz.8.2203" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 961.992379][ T29] audit: type=1400 audit(2000000856.318:60482): avc: denied { ioctl } for pid=15907 comm="syz.8.2203" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 962.055682][ T29] audit: type=1400 audit(2000000856.327:60483): avc: denied { read write } for pid=11087 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 962.108830][T15900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.127221][ T792] usb 9-1: USB disconnect, device number 61 [ 962.152793][T15900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.172971][ T29] audit: type=1400 audit(2000000856.327:60484): avc: denied { read write open } for pid=11087 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 962.240636][ T29] audit: type=1400 audit(2000000856.327:60485): avc: denied { ioctl } for pid=11087 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 962.290928][T15900] team0: Port device team_slave_0 added [ 962.301514][T15900] team0: Port device team_slave_1 added [ 962.340212][ T29] audit: type=1400 audit(2000000856.729:60486): avc: denied { create } for pid=15937 comm="syz.9.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 962.515173][T15900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.526443][T15900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.576772][ T29] audit: type=1400 audit(2000000856.767:60487): avc: denied { allowed } for pid=15937 comm="syz.9.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 962.656391][ T29] audit: type=1400 audit(2000000856.767:60488): avc: denied { create } for pid=15937 comm="syz.9.2210" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 962.685703][T15900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.763988][T15900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.771048][ T29] audit: type=1400 audit(2000000856.767:60489): avc: denied { map } for pid=15937 comm="syz.9.2210" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=46477 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 962.806267][T15900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.914022][T15900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 963.452204][T15948] overlayfs: failed to clone upperpath [ 963.522290][T15900] hsr_slave_0: entered promiscuous mode [ 963.543208][T15900] hsr_slave_1: entered promiscuous mode [ 963.557360][T15900] debugfs: 'hsr0' already exists in 'hsr' [ 963.565062][T15900] Cannot create hsr debugfs directory [ 963.610729][T15949] xt_l2tp: missing protocol rule (udp|l2tpip) [ 963.792185][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 963.799527][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 964.009556][ T5820] Bluetooth: hci3: command tx timeout [ 964.118173][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 964.124267][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 964.715146][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 964.736321][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 965.817085][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 965.823172][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 966.232980][ T5820] Bluetooth: hci3: command tx timeout [ 966.252648][T15900] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 966.328861][T15984] macsec1: entered allmulticast mode [ 966.340977][T15984] macsec0: entered allmulticast mode [ 966.363298][T15984] veth1_macvtap: entered allmulticast mode [ 966.386040][T15900] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 966.394155][ T24] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 966.441985][T15981] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 966.450518][T15981] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 966.473086][T15900] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 966.509478][T15900] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 966.515604][T15981] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 966.547522][T15951] ceph: No mds server is up or the cluster is laggy [ 966.577238][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 966.615064][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 966.654884][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 966.704325][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 966.767256][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 966.803531][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 966.852934][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 966.894020][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.971432][ T24] usbtmc 3-1:16.0: probe with driver usbtmc failed with error -22 [ 967.127800][T15900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.232848][ T29] kauditd_printk_skb: 1151 callbacks suppressed [ 967.232864][ T29] audit: type=1400 audit(2000000861.313:61065): avc: denied { read } for pid=15977 comm="syz.2.2218" dev="nsfs" ino=4026533388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 967.303169][T15900] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.367435][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.374587][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.387717][ T29] audit: type=1400 audit(2000000861.341:61066): avc: denied { read open } for pid=15977 comm="syz.2.2218" path="net:[4026533388]" dev="nsfs" ino=4026533388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 967.478282][ T29] audit: type=1400 audit(2000000861.341:61067): avc: denied { create } for pid=15977 comm="syz.2.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 967.632285][ T29] audit: type=1400 audit(2000000861.359:61068): avc: denied { bind } for pid=15977 comm="syz.2.2218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 967.656650][ T7748] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.663758][ T7748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 967.688080][ T9] usb 3-1: USB disconnect, device number 60 [ 967.755197][ T29] audit: type=1400 audit(2000000861.378:61069): avc: denied { search } for pid=15956 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 967.838279][ T29] audit: type=1400 audit(2000000861.378:61070): avc: denied { search } for pid=15956 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 967.978373][T16011] audit: audit_backlog=65 > audit_backlog_limit=64 [ 967.985043][ T29] audit: type=1400 audit(2000000861.378:61071): avc: denied { search } for pid=15956 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 968.013595][T16011] audit: audit_lost=17652 audit_rate_limit=0 audit_backlog_limit=64 [ 968.034441][T16009] audit: audit_backlog=65 > audit_backlog_limit=64 [ 968.627949][ T5820] Bluetooth: hci3: command 0x0c1a tx timeout [ 969.535269][ T24] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 969.750503][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 970.092353][ T24] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 970.460885][ T24] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 970.482859][T16037] macsec1: entered allmulticast mode [ 970.495245][T16037] macsec0: entered allmulticast mode [ 970.508300][T16037] veth1_macvtap: entered allmulticast mode [ 970.516882][ T24] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 970.556103][ T24] usb 9-1: Product: syz [ 970.585933][ T24] usb 9-1: Manufacturer: syz [ 970.602714][ T24] usb 9-1: SerialNumber: syz [ 970.640384][T15900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 971.155370][ T5820] Bluetooth: hci3: command 0x0c1a tx timeout [ 971.183422][ T24] usb 9-1: config 0 descriptor?? [ 971.193707][T16030] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 971.240281][ T24] hub 9-1:0.0: bad descriptor, ignoring hub [ 971.252715][ T24] hub 9-1:0.0: probe with driver hub failed with error -5 [ 971.454306][T15900] veth0_vlan: entered promiscuous mode [ 971.490301][T16027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.498902][T16027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.205836][T11156] usb 9-1: USB disconnect, device number 62 [ 972.259705][T15900] veth1_vlan: entered promiscuous mode [ 972.658365][ T29] kauditd_printk_skb: 590 callbacks suppressed [ 972.658398][ T29] audit: type=1400 audit(2000000866.298:61635): avc: denied { create } for pid=16046 comm="syz.9.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 972.932675][ T29] audit: type=1400 audit(2000000866.308:61636): avc: denied { write } for pid=16046 comm="syz.9.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 972.978740][ T29] audit: type=1400 audit(2000000866.317:61637): avc: denied { create } for pid=16046 comm="syz.9.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 973.014774][T15900] veth0_macvtap: entered promiscuous mode [ 973.053570][ T29] audit: type=1400 audit(2000000866.326:61638): avc: denied { write } for pid=16046 comm="syz.9.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 973.086554][T15900] veth1_macvtap: entered promiscuous mode [ 973.170879][ T29] audit: type=1400 audit(2000000866.326:61639): avc: denied { nlmsg_write } for pid=16046 comm="syz.9.2233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 973.243370][T15900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 973.277022][T15900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 973.315417][ T29] audit: type=1400 audit(2000000866.354:61640): avc: denied { read } for pid=16046 comm="syz.9.2233" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 973.339864][ T5820] Bluetooth: hci3: command 0x0c1a tx timeout [ 973.346359][ T29] audit: type=1400 audit(2000000866.354:61641): avc: denied { read open } for pid=16046 comm="syz.9.2233" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 973.395652][ T29] audit: type=1400 audit(2000000866.364:61642): avc: denied { ioctl } for pid=16046 comm="syz.9.2233" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 973.481881][ T7748] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.490001][ T29] audit: type=1400 audit(2000000866.373:61643): avc: denied { read open } for pid=16046 comm="syz.9.2233" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 973.524996][ T6624] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.578138][ T7748] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.603046][ T7748] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.635935][ T29] audit: type=1400 audit(2000000866.382:61644): avc: denied { ioctl } for pid=16046 comm="syz.9.2233" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 973.908826][ T6624] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.950094][ T6624] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.457758][ T9] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 974.543069][ T297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.567871][ T297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.626232][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 974.691728][ T9] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 974.709471][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.731996][ T9] usb 10-1: Product: syz [ 974.736272][ T9] usb 10-1: Manufacturer: syz [ 974.740948][ T9] usb 10-1: SerialNumber: syz [ 975.060185][ T9] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 975.122093][ T9] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 975.175063][ T9] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 975.210847][ T9] usb 10-1: media controller created [ 975.299789][T13285] block nbd3: Possible stuck request ffff888027ec0000: control (read@0,1024B). Runtime 150 seconds [ 975.310696][T13285] block nbd3: Possible stuck request ffff888027ec0200: control (read@1024,1024B). Runtime 150 seconds [ 975.321736][T13285] block nbd3: Possible stuck request ffff888027ec0400: control (read@2048,1024B). Runtime 150 seconds [ 975.332790][T13285] block nbd3: Possible stuck request ffff888027ec0600: control (read@3072,1024B). Runtime 150 seconds [ 975.346190][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 975.664572][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 975.752007][ T9] dvb_usb_gl861 10-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 975.767381][T12772] libceph: connect (1)[c::]:6789 error -101 [ 975.782241][T12772] libceph: mon0 (1)[c::]:6789 connect error [ 975.813711][ T9] usb 10-1: USB disconnect, device number 24 [ 975.832148][ T5806] udevd[5806]: setting owner of /dev/bus/usb/010/024 to uid=0, gid=0 failed: No such file or directory [ 976.100778][T12772] libceph: connect (1)[c::]:6789 error -101 [ 976.127909][T12772] libceph: mon0 (1)[c::]:6789 connect error [ 976.366658][T16087] ceph: No mds server is up or the cluster is laggy [ 977.524313][T16106] geneve2: entered promiscuous mode [ 977.529598][T16106] geneve2: entered allmulticast mode [ 978.131179][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 978.131197][ T29] audit: type=1400 audit(2000000871.499:61914): avc: denied { read write } for pid=11087 comm="syz-executor" name="loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 978.877900][ T29] audit: type=1400 audit(2000000871.518:61915): avc: denied { read write } for pid=5802 comm="syz-executor" name="loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 979.228267][ T29] audit: type=1400 audit(2000000871.518:61916): avc: denied { read write open } for pid=5802 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 979.308194][T16120] audit: audit_backlog=65 > audit_backlog_limit=64 [ 979.314774][T16120] audit: audit_lost=17662 audit_rate_limit=0 audit_backlog_limit=64 [ 979.333640][T16125] audit: audit_backlog=65 > audit_backlog_limit=64 [ 979.356983][ T29] audit: type=1400 audit(2000000871.546:61917): avc: denied { read write open } for pid=11087 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=656 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 979.359278][T16120] audit: backlog limit exceeded [ 979.394925][T16125] audit: audit_lost=17663 audit_rate_limit=0 audit_backlog_limit=64 [ 979.420794][T16129] audit: audit_backlog=65 > audit_backlog_limit=64 [ 982.517110][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 982.597512][T16156] vlan2: entered promiscuous mode [ 982.602670][T16156] vlan2: entered allmulticast mode [ 982.618635][T16156] hsr_slave_1: entered allmulticast mode [ 982.696445][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 982.846191][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 982.854888][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 983.179272][T16165] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2258'. [ 983.323220][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 983.345418][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 983.382175][T16165] gretap0: refused to change device tx_queue_len [ 983.388982][T16165] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 983.434195][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 983.541921][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 983.551006][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.637215][ T29] kauditd_printk_skb: 582 callbacks suppressed [ 983.637230][ T29] audit: type=1400 audit(2000000876.653:62479): avc: denied { ioctl } for pid=16149 comm="syz.2.2255" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 983.836570][ T29] audit: type=1400 audit(2000000876.662:62480): avc: denied { ioctl } for pid=16149 comm="syz.2.2255" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 983.933720][ T29] audit: type=1400 audit(2000000876.662:62481): avc: denied { ioctl } for pid=16149 comm="syz.2.2255" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 984.071317][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 984.076925][ T29] audit: type=1400 audit(2000000876.812:62482): avc: denied { search } for pid=16171 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 984.077461][ T9] usbtmc 3-1:16.0: can't read capabilities [ 984.171816][ T29] audit: type=1400 audit(2000000876.812:62483): avc: denied { search } for pid=16171 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 984.975419][ T9] usb 3-1: USB disconnect, device number 61 [ 985.612982][T16184] audit: audit_backlog=65 > audit_backlog_limit=64 [ 985.619562][T16184] audit: audit_lost=17671 audit_rate_limit=0 audit_backlog_limit=64 [ 985.627598][T16184] audit: backlog limit exceeded [ 985.637042][T16172] audit: audit_backlog=65 > audit_backlog_limit=64 [ 985.643570][T16181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 985.644416][T16180] audit: audit_backlog=65 > audit_backlog_limit=64 [ 985.682038][T16180] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2261'. [ 987.081178][ T24] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 987.322864][ T24] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 987.336306][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.441143][ T24] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 987.458944][ T24] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 987.478027][ T24] usb 10-1: Manufacturer: syz [ 987.626029][T16213] overlayfs: overlapping lowerdir path [ 988.047396][ T24] usb 10-1: config 0 descriptor?? [ 989.193964][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 989.193983][ T29] audit: type=1400 audit(2000000881.040:62717): avc: denied { read write } for pid=15900 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 989.271178][ T29] audit: type=1400 audit(2000000881.049:62719): avc: denied { execmem } for pid=16195 comm="syz.9.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 989.290756][ T29] audit: type=1400 audit(2000000881.330:62720): avc: denied { read } for pid=16195 comm="syz.9.2264" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 989.407775][ T29] audit: type=1400 audit(2000000881.330:62721): avc: denied { read open } for pid=16195 comm="syz.9.2264" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 989.454660][T16224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2268'. [ 989.479622][ T29] audit: type=1400 audit(2000000881.480:62722): avc: denied { create } for pid=16195 comm="syz.9.2264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 989.506218][ T24] rc_core: IR keymap rc-hauppauge not found [ 989.548905][ T24] Registered IR keymap rc-empty [ 989.560540][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 989.606676][T16226] audit: audit_backlog=65 > audit_backlog_limit=64 [ 989.607936][T16218] audit: audit_backlog=66 > audit_backlog_limit=64 [ 989.620189][T16216] audit: audit_backlog=66 > audit_backlog_limit=64 [ 989.621993][T16223] audit: audit_backlog=66 > audit_backlog_limit=64 [ 989.633453][T16226] audit: audit_lost=17682 audit_rate_limit=0 audit_backlog_limit=64 [ 989.636345][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input68 [ 989.827139][ T24] usb 10-1: USB disconnect, device number 25 [ 990.577968][T16233] FAT-fs (nbd2): unable to read boot sector [ 992.027167][T11156] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 992.093700][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 992.275436][T11156] usb 9-1: Using ep0 maxpacket: 32 [ 992.413830][T11156] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 992.439261][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 992.462879][T11156] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 992.484763][ T24] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 992.496637][T11156] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 992.511128][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 992.539678][T11156] usb 9-1: config 1 has no interface number 0 [ 992.550516][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 992.566364][T11156] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 992.587351][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 992.599311][T11156] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 992.612543][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 992.629032][T11156] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 992.638207][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 992.650300][T11156] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.658370][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.704798][T11156] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 992.914720][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 992.920979][ T24] usbtmc 1-1:16.0: can't read capabilities [ 992.971862][T11156] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 993.262699][T11156] usb 1-1: USB disconnect, device number 7 [ 993.301731][T16252] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 993.573131][ T9] usb 9-1: USB disconnect, device number 63 [ 993.700841][ T9] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 994.522201][T16284] vxcan1 speed is unknown, defaulting to 1000 [ 994.697572][ T29] kauditd_printk_skb: 695 callbacks suppressed [ 994.697589][ T29] audit: type=1400 audit(2000000000.458:63410): avc: denied { read } for pid=16273 comm="syz.2.2280" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 994.987541][ T29] audit: type=1400 audit(2000000000.495:63411): avc: denied { read write } for pid=15900 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 995.089236][T16290] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20002 [ 995.118987][ T29] audit: type=1400 audit(2000000000.505:63412): avc: denied { read write open } for pid=15900 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 995.152144][ T29] audit: type=1400 audit(2000000000.523:63413): avc: denied { ioctl } for pid=15900 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 995.236179][ T29] audit: type=1400 audit(2000000000.523:63414): avc: denied { read open } for pid=16273 comm="syz.2.2280" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 995.249353][T16293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2282'. [ 995.311433][T16293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2282'. [ 995.331101][ T29] audit: type=1400 audit(2000000000.776:63415): avc: denied { create } for pid=16289 comm="syz.8.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 995.397002][ T29] audit: type=1400 audit(2000000000.795:63416): avc: denied { create } for pid=16289 comm="syz.8.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 995.422170][T16293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2282'. [ 995.442701][T16293] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2282'. [ 995.487219][ T29] audit: type=1400 audit(2000000000.795:63417): avc: denied { write } for pid=16289 comm="syz.8.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 995.555032][ T29] audit: type=1400 audit(2000000000.795:63418): avc: denied { read } for pid=16289 comm="syz.8.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 995.621971][ T29] audit: type=1400 audit(2000000000.795:63419): avc: denied { read } for pid=16289 comm="syz.8.2281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 995.671412][T16293] input: syz0 as /devices/virtual/input/input69 [ 996.700152][T16307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2285'. [ 996.798417][T16308] vlan2: entered allmulticast mode [ 996.803565][T16308] team0: entered allmulticast mode [ 996.872237][T16308] team_slave_0: entered allmulticast mode [ 996.886143][T16308] team_slave_1: entered allmulticast mode [ 996.998921][T16314] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 997.374852][T12772] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 997.601949][T12772] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 997.636370][T12772] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.694427][T12772] usb 9-1: config 0 descriptor?? [ 998.008259][T12772] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 998.299686][T12772] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 998.329762][T12772] [drm] Initialized udl on minor 2 [ 998.411813][ T24] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 998.485034][T12772] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 998.540717][ T5888] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 998.548687][T12772] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 998.582184][ T9] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 998.603938][T12772] usb 9-1: USB disconnect, device number 64 [ 998.624473][ T9] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 998.764452][ T5888] usb 1-1: Using ep0 maxpacket: 8 [ 998.771402][ T24] usb 10-1: config 0 has an invalid interface number: 69 but max is 0 [ 998.793902][ T24] usb 10-1: config 0 has no interface number 0 [ 998.800791][ T24] usb 10-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 999.156815][ T24] usb 10-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 999.223857][ T5888] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 999.232751][ T5888] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 999.242537][ T5888] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 999.252751][ T5888] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 999.274153][ T24] usb 10-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 999.284819][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.292953][ T5888] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 999.293004][ T5888] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 999.293027][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.328127][ T24] usb 10-1: Product: syz [ 999.366319][ T24] usb 10-1: Manufacturer: syz [ 999.405682][ T24] usb 10-1: SerialNumber: syz [ 999.436898][ T24] usb 10-1: config 0 descriptor?? [ 999.458862][T16325] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 999.490881][ T24] cyberjack 10-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 999.656602][ T24] usb 10-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 999.884239][T16351] syz_tun: entered allmulticast mode [ 999.956381][ T5888] usb 1-1: GET_CAPABILITIES returned 0 [ 999.983338][ T5888] usbtmc 1-1:16.0: can't read capabilities [ 999.997586][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1000.018764][T16351] dvmrp6: entered allmulticast mode [ 1000.050904][ T29] kauditd_printk_skb: 655 callbacks suppressed [ 1000.050919][ T29] audit: type=1400 audit(2000000005.472:64075): avc: denied { create } for pid=16344 comm="syz.8.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1000.155132][ T29] audit: type=1400 audit(2000000005.518:64076): avc: denied { setopt } for pid=16344 comm="syz.8.2295" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1000.252923][ T29] audit: type=1400 audit(2000000005.537:64077): avc: denied { create } for pid=16344 comm="syz.8.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1000.342734][ T5888] usb 1-1: USB disconnect, device number 8 [ 1000.354793][T16331] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 1000.416027][T16355] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -19 [ 1000.427976][ T24] usb 10-1: USB disconnect, device number 26 [ 1000.431838][ T29] audit: type=1400 audit(2000000005.556:64078): avc: denied { create } for pid=16344 comm="syz.8.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1000.489080][ T29] audit: type=1400 audit(2000000005.603:64079): avc: denied { setopt } for pid=16344 comm="syz.8.2295" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1000.500133][ T24] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1000.573891][ T24] cyberjack 10-1:0.69: device disconnected [ 1000.598388][ T29] audit: type=1400 audit(2000000005.612:64080): avc: denied { write } for pid=16328 comm="syz.0.2292" name="usbtmc0" dev="devtmpfs" ino=3592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1000.701838][ T29] audit: type=1400 audit(2000000005.612:64081): avc: denied { write } for pid=16328 comm="syz.0.2292" path="/dev/usbtmc0" dev="devtmpfs" ino=3592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1000.777736][ T29] audit: type=1400 audit(2000000005.621:64082): avc: denied { setopt } for pid=16344 comm="syz.8.2295" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1000.825295][ T29] audit: type=1400 audit(2000000005.621:64083): avc: denied { write } for pid=16328 comm="syz.0.2292" name="usbtmc0" dev="devtmpfs" ino=3592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1000.865800][T16358] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1000.905279][T16358] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20003 [ 1000.926820][T16361] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2296'. [ 1003.628650][ T792] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1003.765120][T16394] /dev/nullb0: Can't lookup blockdev [ 1003.778732][ T792] usb 9-1: device descriptor read/64, error -71 [ 1004.442160][T16396] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1004.693905][T16393] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1004.816412][T16393] ovl_remap_lower_ino: 7 callbacks suppressed [ 1004.816424][T16393] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 1004.830543][T16393] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 1004.841722][T16393] overlayfs: d_ino too big (233, ino=9223372036854777097, xinobits=3) [ 1004.853031][T16393] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 1004.864606][T16393] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 1004.876297][T16393] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 1004.887271][T16393] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 1004.899024][T16393] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 1004.910092][T16393] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3) [ 1004.922134][T16393] overlayfs: d_ino too big (kernel, ino=4611686018427389298, xinobits=3) [ 1005.168880][ T792] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1005.319404][ T792] usb 9-1: device descriptor read/64, error -71 [ 1005.405039][ T29] kauditd_printk_skb: 525 callbacks suppressed [ 1005.405055][ T29] audit: type=1400 audit(2000000010.476:64595): avc: denied { read open } for pid=16395 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1005.477476][ T792] usb usb9-port1: attempt power cycle [ 1005.520886][ T29] audit: type=1400 audit(2000000010.485:64596): avc: denied { write } for pid=16398 comm="syz.0.2306" name="system" dev="devtmpfs" ino=700 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1005.547620][T16395] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1005.559821][T16395] audit: audit_lost=17691 audit_rate_limit=0 audit_backlog_limit=64 [ 1005.573073][T16389] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1005.590491][T16389] audit: audit_lost=17692 audit_rate_limit=0 audit_backlog_limit=64 [ 1005.605379][ T5802] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1005.625177][T16389] audit: backlog limit exceeded [ 1005.645407][T16389] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1005.657467][T16395] audit: backlog limit exceeded [ 1006.055409][ T792] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1006.206629][ T792] usb 9-1: device descriptor read/8, error -71 [ 1006.247756][T16410] openvswitch: netlink: Flow actions attr not present in new flow. [ 1006.483104][ T792] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1006.560895][ T792] usb 9-1: device descriptor read/8, error -71 [ 1006.697295][ T792] usb usb9-port1: unable to enumerate USB device [ 1007.465715][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1007.472321][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1007.473546][T13285] block nbd3: Possible stuck request ffff888027ec0000: control (read@0,1024B). Runtime 180 seconds [ 1007.490659][T13285] block nbd3: Possible stuck request ffff888027ec0200: control (read@1024,1024B). Runtime 180 seconds [ 1007.501682][T13285] block nbd3: Possible stuck request ffff888027ec0400: control (read@2048,1024B). Runtime 180 seconds [ 1007.512799][T13285] block nbd3: Possible stuck request ffff888027ec0600: control (read@3072,1024B). Runtime 180 seconds [ 1007.659262][T12772] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1007.904953][T12772] usb 3-1: Using ep0 maxpacket: 8 [ 1007.947781][T12772] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1007.955996][T12772] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1007.988932][T12772] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1008.011826][T12772] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1008.033224][T12772] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1008.099559][ T792] usb 9-1: new full-speed USB device number 69 using dummy_hcd [ 1008.139305][T12772] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1008.163660][T12772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.630766][ T792] usb 9-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1008.674595][ T792] usb 9-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1008.706258][ T792] usb 9-1: config 0 interface 0 altsetting 254 has 2 endpoint descriptors, different from the interface descriptor's value: 253 [ 1008.738517][ T792] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1008.750900][ T792] usb 9-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.00 [ 1008.769757][ T792] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.811608][ T792] usb 9-1: config 0 descriptor?? [ 1008.952117][T12772] usb 3-1: GET_CAPABILITIES returned 0 [ 1008.960840][T12772] usbtmc 3-1:16.0: can't read capabilities [ 1009.395793][T16447] tipc: Enabling of bearer rejected, failed to enable media [ 1009.417449][T16416] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 1009.424568][T12772] usb 3-1: USB disconnect, device number 62 [ 1009.452354][ T792] usbhid 9-1:0.0: can't add hid device: -71 [ 1009.458695][T16446] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -19 [ 1009.468473][ T792] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1009.524097][ T792] usb 9-1: USB disconnect, device number 69 [ 1010.768001][ T29] kauditd_printk_skb: 783 callbacks suppressed [ 1010.768013][ T29] audit: type=1400 audit(2000000015.490:65376): avc: denied { write } for pid=16448 comm="syz.9.2316" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1010.904129][T16455] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1010.904829][T16450] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1010.910842][T16455] audit: audit_lost=17695 audit_rate_limit=0 audit_backlog_limit=64 [ 1010.917414][T16450] audit: audit_lost=17696 audit_rate_limit=0 audit_backlog_limit=64 [ 1010.925458][T16455] audit: backlog limit exceeded [ 1010.933371][T16450] audit: backlog limit exceeded [ 1010.934121][T16450] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1010.939267][T16455] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1010.943242][T16450] audit: audit_lost=17697 audit_rate_limit=0 audit_backlog_limit=64 [ 1012.277380][ T24] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 1012.501887][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 1012.545403][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1012.577112][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 1012.623707][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.668150][ T24] usb 3-1: Product: syz [ 1012.687095][ T24] usb 3-1: Manufacturer: syz [ 1012.707053][ T24] usb 3-1: SerialNumber: syz [ 1014.447827][ T24] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input70 [ 1014.516667][ T5161] bcm5974 3-1:1.0: could not read from device [ 1014.570335][ T24] usb 3-1: USB disconnect, device number 63 [ 1014.600936][ T5161] bcm5974 3-1:1.0: could not read from device [ 1016.115339][ T29] kauditd_printk_skb: 1371 callbacks suppressed [ 1016.115357][ T29] audit: type=1400 audit(2000000020.485:66682): avc: denied { write } for pid=16494 comm="syz.2.2328" laddr=172.20.20.170 lport=255 faddr=172.20.20.170 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1016.264054][ T29] audit: type=1400 audit(2000000020.485:66683): avc: denied { write } for pid=16494 comm="syz.2.2328" laddr=172.20.20.170 lport=255 faddr=172.20.20.170 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1016.426078][ T29] audit: type=1400 audit(2000000020.485:66684): avc: denied { write } for pid=16494 comm="syz.2.2328" laddr=172.20.20.170 lport=255 faddr=172.20.20.170 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1016.455931][ T29] audit: type=1400 audit(2000000020.485:66685): avc: denied { create } for pid=16505 comm="syz.9.2329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1016.564628][T16510] random: crng reseeded on system resumption [ 1016.654296][T16511] openvswitch: netlink: Flow actions attr not present in new flow. [ 1016.806402][ T29] audit: type=1400 audit(2000000020.532:66686): avc: denied { write } for pid=16494 comm="syz.2.2328" laddr=172.20.20.170 lport=255 faddr=172.20.20.170 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1016.827500][T16513] overlayfs: missing 'lowerdir' [ 1016.863770][ T6033] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1016.877824][T16509] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1016.889195][T16513] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1016.898998][T16509] audit: audit_lost=17720 audit_rate_limit=0 audit_backlog_limit=64 [ 1016.917838][T16513] audit: audit_lost=17721 audit_rate_limit=0 audit_backlog_limit=64 [ 1016.925829][T16513] audit: backlog limit exceeded [ 1017.098856][ T6033] usb 1-1: Using ep0 maxpacket: 8 [ 1017.147950][ T6033] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1017.165157][ T6033] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1017.188085][ T6033] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1017.217252][ T6033] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1017.242256][ T6033] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1017.273627][ T6033] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1017.306074][ T6033] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.687180][ T6033] usb 1-1: GET_CAPABILITIES returned 0 [ 1017.695544][ T6033] usbtmc 1-1:16.0: can't read capabilities [ 1018.587249][ T6033] usb 1-1: USB disconnect, device number 9 [ 1019.594171][T16543] bond1: option lp_interval: invalid value (0) [ 1019.613660][T16543] bond1: option lp_interval: allowed values 1 - 2147483647 [ 1019.719413][T16543] bond1 (unregistering): Released all slaves [ 1019.867725][T12772] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1020.030541][T12772] usb 1-1: device descriptor read/64, error -71 [ 1020.316693][T12772] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1020.840859][ T5888] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 1020.875473][T12772] usb 1-1: device descriptor read/64, error -71 [ 1021.022806][T12772] usb usb1-port1: attempt power cycle [ 1021.069673][ T5888] usb 10-1: not running at top speed; connect to a high speed hub [ 1021.107132][ T5888] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1021.139214][ T5888] usb 10-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 1021.174808][ T5888] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.204171][ T5888] usb 10-1: Product: syz [ 1021.209326][ T5888] usb 10-1: Manufacturer: syz [ 1021.214031][ T5888] usb 10-1: SerialNumber: syz [ 1021.480687][ T29] kauditd_printk_skb: 640 callbacks suppressed [ 1021.480703][ T29] audit: type=1400 audit(2000000025.508:67275): avc: denied { search } for pid=16564 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1021.522229][T12772] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1022.229178][ T29] audit: type=1400 audit(2000000025.508:67276): avc: denied { search } for pid=16564 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1022.252436][ T29] audit: type=1400 audit(2000000025.508:67277): avc: denied { search } for pid=16564 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1022.277815][T12772] usb 1-1: device descriptor read/8, error -71 [ 1022.300474][T16564] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1022.319936][ T29] audit: type=1400 audit(2000000025.508:67278): avc: denied { search } for pid=16564 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1022.358591][T16574] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1022.367406][T16574] audit: audit_lost=17739 audit_rate_limit=0 audit_backlog_limit=64 [ 1022.375837][T16574] audit: backlog limit exceeded [ 1022.385470][T16574] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1022.403115][T16546] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1022.561742][T12772] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1022.584974][T12772] usb 1-1: device descriptor read/8, error -71 [ 1022.802172][T12772] usb usb1-port1: unable to enumerate USB device [ 1023.954818][ T5888] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input71 [ 1024.141300][ T5161] bcm5974 10-1:1.0: could not read from device [ 1024.147797][ T5888] usb 10-1: USB disconnect, device number 27 [ 1025.384076][ T5888] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 1025.590125][ T5888] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1025.616600][ T5888] usb 10-1: not running at top speed; connect to a high speed hub [ 1025.643479][ T5888] usb 10-1: config 106 has 0 interfaces, different from the descriptor's value: 1 [ 1025.679855][ T5888] usb 10-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 1025.700590][ T5888] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.715437][ T5888] usb 10-1: Product: syz [ 1025.726556][ T5888] usb 10-1: Manufacturer: syz [ 1025.731392][ T5888] usb 10-1: SerialNumber: syz [ 1025.822647][ T5887] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1025.996161][ T5888] usb 10-1: USB disconnect, device number 28 [ 1026.037739][ T5887] usb 9-1: device descriptor read/64, error -71 [ 1026.341739][ T5887] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1026.506762][ T5887] usb 9-1: device descriptor read/64, error -71 [ 1026.625906][ T5887] usb usb9-port1: attempt power cycle [ 1026.645644][T16613] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2351'. [ 1026.688018][T16613] openvswitch: netlink: Flow key attr not present in new flow. [ 1026.860184][ T29] kauditd_printk_skb: 575 callbacks suppressed [ 1026.860200][ T29] audit: type=1400 audit(2000000030.550:67701): avc: denied { create } for pid=16619 comm="syz.9.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1026.893342][ T29] audit: type=1400 audit(2000000030.578:67702): avc: denied { write } for pid=16619 comm="syz.9.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1026.919352][ T29] audit: type=1400 audit(2000000030.578:67703): avc: denied { read } for pid=16619 comm="syz.9.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1026.985179][ T29] audit: type=1400 audit(2000000030.578:67704): avc: denied { read } for pid=16619 comm="syz.9.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1027.027432][ T5887] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1027.033767][T16623] openvswitch: netlink: Flow actions attr not present in new flow. [ 1027.083878][ T5887] usb 9-1: device descriptor read/8, error -71 [ 1027.146664][ T29] audit: type=1400 audit(2000000030.578:67705): avc: denied { create } for pid=16619 comm="syz.9.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1027.239157][ T29] audit: type=1400 audit(2000000030.653:67706): avc: denied { ioctl } for pid=16598 comm="syz.8.2349" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1027.434737][ T5887] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1027.554099][ T5887] usb 9-1: device descriptor read/8, error -71 [ 1027.581830][ T29] audit: type=1400 audit(2000000030.690:67707): avc: denied { create } for pid=16610 comm="syz.5.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1027.604785][ T29] audit: type=1400 audit(2000000030.690:67708): avc: denied { create } for pid=16610 comm="syz.5.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1027.675936][ T29] audit: type=1400 audit(2000000030.690:67709): avc: denied { write } for pid=16610 comm="syz.5.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1027.698717][ T5887] usb usb9-port1: unable to enumerate USB device [ 1027.744445][ T29] audit: type=1400 audit(2000000030.699:67710): avc: denied { read } for pid=16610 comm="syz.5.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1028.454269][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2354'. [ 1028.515067][T16634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2354'. [ 1029.873398][T16652] bond2: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1029.887119][T16652] bond2 (unregistering): Released all slaves [ 1030.569053][ T6033] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1030.740583][ T6033] usb 3-1: Using ep0 maxpacket: 8 [ 1030.788677][ T6033] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1030.798792][ T6033] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1030.810954][ T6033] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1030.824353][ T6033] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1030.903122][ T6033] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1030.957432][ T6033] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1031.013899][ T6033] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.365227][ T6033] usb 3-1: GET_CAPABILITIES returned 0 [ 1031.374590][ T6033] usbtmc 3-1:16.0: can't read capabilities [ 1031.625770][T16656] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1031.712207][ T6033] usb 3-1: USB disconnect, device number 64 [ 1032.408774][ T29] kauditd_printk_skb: 1101 callbacks suppressed [ 1032.408809][ T29] audit: type=1400 audit(2000000035.489:68410): avc: denied { create } for pid=16674 comm="syz.0.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1032.436373][ T29] audit: type=1400 audit(2000000035.498:68411): avc: denied { write } for pid=16674 comm="syz.0.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1032.460599][ T29] audit: type=1400 audit(2000000035.498:68412): avc: denied { read } for pid=16674 comm="syz.0.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1032.484144][ T29] audit: type=1400 audit(2000000035.526:68413): avc: denied { mounton } for pid=16674 comm="syz.0.2362" path="/22/bus" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1032.507076][ T29] audit: type=1400 audit(2000000035.610:68414): avc: denied { unlink } for pid=16674 comm="syz.0.2362" name="#51" dev="tmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1032.530406][ T29] audit: type=1400 audit(2000000035.722:68415): avc: denied { mount } for pid=16674 comm="syz.0.2362" name="/" dev="overlay" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1032.695721][ T29] audit: type=1400 audit(2000000036.003:68416): avc: denied { search } for pid=16680 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.727718][ T29] audit: type=1400 audit(2000000036.012:68417): avc: denied { search } for pid=16680 comm="rm" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.775032][ T29] audit: type=1400 audit(2000000036.012:68418): avc: denied { search } for pid=16680 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1032.937871][ T29] audit: type=1400 audit(2000000036.031:68419): avc: denied { search } for pid=16680 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1033.189561][T16685] vxcan1 speed is unknown, defaulting to 1000 [ 1034.007887][T16691] netlink: 'syz.2.2365': attribute type 5 has an invalid length. [ 1034.567806][ T6033] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1035.034307][T16701] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2368'. [ 1035.065799][T16701] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2368'. [ 1036.124491][ T6033] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1036.132621][ T792] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1036.144229][ T6033] usb 3-1: config 0 has no interface number 0 [ 1036.202060][ T6033] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1036.247716][ T6033] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.277822][ T792] usb 9-1: device descriptor read/64, error -71 [ 1036.288134][ T6033] usb 3-1: Product: syz [ 1036.303756][ T6033] usb 3-1: Manufacturer: syz [ 1036.319287][ T6033] usb 3-1: SerialNumber: syz [ 1036.349333][ T6033] usb 3-1: config 0 descriptor?? [ 1036.561240][ T792] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1036.729727][ T792] usb 9-1: device descriptor read/64, error -71 [ 1036.757262][ T6033] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1036.791384][ T6033] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1036.826966][ T6033] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1037.478131][ T792] usb usb9-port1: attempt power cycle [ 1037.484430][ T6033] usb 3-1: media controller created [ 1037.501904][ T6033] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1037.554475][T16689] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2365'. [ 1037.705427][ T6033] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1037.768546][ T29] kauditd_printk_skb: 479 callbacks suppressed [ 1037.768563][ T29] audit: type=1400 audit(2000000040.746:68899): avc: denied { read write } for pid=15900 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1037.812268][ T6033] usb 3-1: USB disconnect, device number 65 [ 1037.872122][ T792] usb 9-1: new high-speed USB device number 76 using dummy_hcd [ 1037.924424][ T29] audit: type=1400 audit(2000000040.755:68900): avc: denied { read write open } for pid=15900 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1037.952139][ T792] usb 9-1: device descriptor read/8, error -71 [ 1038.098468][ T29] audit: type=1400 audit(2000000040.755:68901): avc: denied { ioctl } for pid=15900 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1038.234767][ T29] audit: type=1400 audit(2000000040.792:68902): avc: denied { ioctl } for pid=16697 comm="syz.8.2367" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1038.375078][ T29] audit: type=1400 audit(2000000040.811:68903): avc: denied { search } for pid=16714 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1038.516953][ T29] audit: type=1400 audit(2000000040.811:68904): avc: denied { search } for pid=16714 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1038.604747][ T29] audit: type=1400 audit(2000000040.811:68905): avc: denied { search } for pid=16714 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1038.708866][ T29] audit: type=1400 audit(2000000040.811:68906): avc: denied { search } for pid=16714 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1038.737270][ T29] audit: type=1400 audit(2000000040.998:68907): avc: denied { name_bind } for pid=16715 comm="syz.9.2374" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 1038.779590][ T792] usb 9-1: new high-speed USB device number 77 using dummy_hcd [ 1038.781078][ T29] audit: type=1400 audit(2000000040.998:68908): avc: denied { node_bind } for pid=16715 comm="syz.9.2374" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 1038.870923][ T792] usb 9-1: Using ep0 maxpacket: 8 [ 1038.898866][ T792] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1038.950074][ T792] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1038.963794][ T24] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 1038.977146][ T792] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1039.000958][ T792] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1039.024768][ T792] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1039.040341][ T792] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1039.051972][ T792] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.235654][ T24] usb 10-1: not running at top speed; connect to a high speed hub [ 1039.269754][ T24] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1039.310439][ T24] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1039.355330][ T24] usb 10-1: config 1 has no interface number 1 [ 1039.384868][ T792] usb 9-1: GET_CAPABILITIES returned 0 [ 1039.390658][ T24] usb 10-1: config 1 interface 2 has no altsetting 0 [ 1039.397425][ T792] usbtmc 9-1:16.0: can't read capabilities [ 1039.444692][ T24] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1039.467475][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.495681][ T24] usb 10-1: Product: syz [ 1039.504816][ T24] usb 10-1: Manufacturer: syz [ 1039.527156][ T24] usb 10-1: SerialNumber: syz [ 1039.615496][T13285] block nbd3: Possible stuck request ffff888027ec0000: control (read@0,1024B). Runtime 210 seconds [ 1039.626742][T13285] block nbd3: Possible stuck request ffff888027ec0200: control (read@1024,1024B). Runtime 210 seconds [ 1039.637782][T13285] block nbd3: Possible stuck request ffff888027ec0400: control (read@2048,1024B). Runtime 210 seconds [ 1039.653647][T13285] block nbd3: Possible stuck request ffff888027ec0600: control (read@3072,1024B). Runtime 210 seconds [ 1039.658048][T16721] usbtmc 9-1:16.0: send_request_dev_dep_msg_in returned -90 [ 1039.779874][ T792] usb 9-1: USB disconnect, device number 77 [ 1040.112653][ T24] usb 10-1: selecting invalid altsetting 0 [ 1040.166236][ T24] usb 10-1: failed to enable PITCH for EP 0x82 [ 1040.190997][ T24] usb 10-1: selecting invalid altsetting 0 [ 1040.426050][ T24] usb 10-1: USB disconnect, device number 29 [ 1040.465208][T16748] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1040.506239][T16742] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1040.860164][T13451] udevd[13451]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1041.595219][ T6626] Bluetooth: hci4: Frame reassembly failed (-90) [ 1042.108676][T16749] overlayfs: failed to clone lowerpath [ 1042.161146][T16755] overlayfs: failed to clone lowerpath [ 1042.512522][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2386'. [ 1042.573637][T16771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2386'. [ 1043.137239][ T29] kauditd_printk_skb: 421 callbacks suppressed [ 1043.138316][ T29] audit: type=1400 audit(2000000045.769:69330): avc: denied { search } for pid=16775 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.504520][ T29] audit: type=1400 audit(2000000045.806:69331): avc: denied { search } for pid=16775 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1043.539758][T16775] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1043.547969][T16773] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1043.554939][T16775] audit: audit_lost=17926 audit_rate_limit=0 audit_backlog_limit=64 [ 1043.566088][T16775] audit: backlog limit exceeded [ 1043.573987][ T29] audit: type=1400 audit(2000000045.806:69333): avc: denied { write } for pid=16770 comm="syz.2.2385" laddr=172.20.20.170 lport=255 faddr=172.20.20.170 fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1043.606292][T16775] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1043.615329][T16773] audit: audit_lost=17927 audit_rate_limit=0 audit_backlog_limit=64 [ 1043.624424][T16775] audit: audit_lost=17928 audit_rate_limit=0 audit_backlog_limit=64 [ 1043.719029][ T5820] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1044.094843][T16781] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2388'. [ 1044.234089][T16784] netlink: 558 bytes leftover after parsing attributes in process `syz.5.2388'. [ 1044.735624][T16790] openvswitch: netlink: Flow actions attr not present in new flow. [ 1045.425841][T16789] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2390'. [ 1045.831798][T16789] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 1045.841400][T16789] SELinux: failed to load policy [ 1046.283263][T16797] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2391'. [ 1046.342601][T16797] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2391'. [ 1048.553292][ T29] kauditd_printk_skb: 439 callbacks suppressed [ 1048.553310][ T29] audit: type=1400 audit(2000000050.838:69716): avc: denied { unlink } for pid=16809 comm="syz.8.2396" name="#53" dev="tmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1048.700364][ T29] audit: type=1400 audit(2000000050.960:69717): avc: denied { map_create } for pid=16815 comm="syz.9.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1048.797255][ T29] audit: type=1400 audit(2000000050.960:69718): avc: denied { map_create } for pid=16815 comm="syz.9.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1049.511563][ T29] audit: type=1400 audit(2000000050.960:69719): avc: denied { map_read map_write } for pid=16815 comm="syz.9.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1049.531893][ T29] audit: type=1400 audit(2000000050.969:69720): avc: denied { prog_load } for pid=16815 comm="syz.9.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1049.573393][ T29] audit: type=1400 audit(2000000050.969:69721): avc: denied { bpf } for pid=16815 comm="syz.9.2398" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1049.738610][ T29] audit: type=1400 audit(2000000050.969:69722): avc: denied { prog_load } for pid=16815 comm="syz.9.2398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1049.783722][T16814] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1049.786597][T16821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1049.816412][T16822] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1053.031401][ T6033] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1053.384914][ T6033] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1053.393280][ T6033] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.522045][ T6033] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1053.550936][ T6033] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1053.585874][ T6033] usb 3-1: Manufacturer: syz [ 1053.693149][ T6033] usb 3-1: config 0 descriptor?? [ 1054.249270][T16857] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2403'. [ 1054.307110][T16857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2403'. [ 1054.318388][ T29] kauditd_printk_skb: 959 callbacks suppressed [ 1054.318425][ T29] audit: type=1400 audit(2000000056.039:70340): avc: denied { module_request } for pid=16850 comm="syz.5.2403" kmod="netdev-batadv_slave_0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1055.114636][ T29] audit: type=1400 audit(2000000056.105:70341): avc: denied { create } for pid=16850 comm="syz.5.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1055.272024][ T29] audit: type=1400 audit(2000000056.114:70342): avc: denied { create } for pid=16850 comm="syz.5.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1055.419657][ T29] audit: type=1400 audit(2000000056.133:70343): avc: denied { write } for pid=16850 comm="syz.5.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1055.497386][ T29] audit: type=1400 audit(2000000056.133:70344): avc: denied { read } for pid=16850 comm="syz.5.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1055.621366][ T792] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 1055.669335][ T29] audit: type=1400 audit(2000000056.142:70345): avc: denied { read } for pid=16850 comm="syz.5.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1056.194107][ T792] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1056.226486][ T29] audit: type=1400 audit(2000000056.152:70346): avc: denied { write } for pid=16850 comm="syz.5.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1056.256874][ T792] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1056.285152][ T792] usb 9-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1056.330269][ T29] audit: type=1400 audit(2000000056.367:70347): avc: denied { execmem } for pid=16839 comm="syz.2.2393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1056.353152][ T792] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.417604][ T792] usb 9-1: config 0 descriptor?? [ 1056.502952][ T29] audit: type=1400 audit(2000000056.647:70348): avc: denied { read } for pid=16839 comm="syz.2.2393" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1056.617140][ T29] audit: type=1400 audit(2000000056.647:70349): avc: denied { read open } for pid=16839 comm="syz.2.2393" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1056.803863][ T6033] rc_core: IR keymap rc-hauppauge not found [ 1056.810511][ T6033] Registered IR keymap rc-empty [ 1056.834954][ T6033] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1056.859400][T16864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.890607][T16864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.905354][ T6033] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input72 [ 1056.959496][ T6151] usb 9-1: USB disconnect, device number 78 [ 1057.038398][ T6033] usb 3-1: USB disconnect, device number 66 [ 1058.136420][T16892] 9p: Bad value for 'wfdno' [ 1058.520629][T16895] overlayfs: failed to resolve './file1': -2 [ 1060.659623][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 1060.659644][ T29] audit: type=1400 audit(2000000060.791:70566): avc: denied { search } for pid=16907 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1061.156071][ T29] audit: type=1400 audit(2000000060.791:70567): avc: denied { search } for pid=16907 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1061.207031][T16910] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1061.213664][ T29] audit: type=1400 audit(2000000060.791:70568): avc: denied { search } for pid=16907 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1061.214239][T16910] audit: audit_lost=18062 audit_rate_limit=0 audit_backlog_limit=64 [ 1061.237638][ T29] audit: type=1400 audit(2000000060.791:70569): avc: denied { read open } for pid=16907 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1061.237682][ T29] audit: type=1400 audit(2000000060.791:70570): avc: denied { getattr } for pid=16907 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1061.237720][ T29] audit: type=1400 audit(2000000060.791:70571): avc: denied { search } for pid=16907 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1061.237756][ T29] audit: type=1400 audit(2000000060.791:70572): avc: denied { search } for pid=16907 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1837 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1061.237793][ T29] audit: type=1400 audit(2000000060.791:70573): avc: denied { search } for pid=16907 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1062.378237][T16916] overlayfs: failed to resolve './file1': -2 [ 1062.421251][T16916] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2414'. [ 1062.882897][T16930] overlayfs: failed to clone upperpath [ 1064.868004][T16945] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1065.265116][T16959] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2425'. [ 1065.799686][ T24] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1065.959479][T16970] netdevsim netdevsim8: Direct firmware load for  failed with error -2 [ 1065.970164][T16970] netdevsim netdevsim8: Falling back to sysfs fallback for:  [ 1066.013035][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 1066.032868][ T29] kauditd_printk_skb: 560 callbacks suppressed [ 1066.032886][ T29] audit: type=1400 audit(2000000067.189:71121): avc: denied { create } for pid=16968 comm="syz.2.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1066.056708][T16969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2427'. [ 1066.082115][ T24] usb 10-1: config 0 has no interfaces? [ 1066.131053][ T24] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1066.155724][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.176585][ T24] usb 10-1: Product: syz [ 1066.207437][ T29] audit: type=1400 audit(2000000067.189:71122): avc: denied { create } for pid=16968 comm="syz.2.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1066.212736][ T24] usb 10-1: Manufacturer: syz [ 1066.300200][ T24] usb 10-1: SerialNumber: syz [ 1066.308053][ T29] audit: type=1400 audit(2000000067.189:71123): avc: denied { write } for pid=16968 comm="syz.2.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1066.401281][ T29] audit: type=1400 audit(2000000067.189:71124): avc: denied { read } for pid=16968 comm="syz.2.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1066.426458][ T24] usb 10-1: config 0 descriptor?? [ 1066.487974][ T29] audit: type=1400 audit(2000000067.208:71125): avc: denied { read } for pid=16968 comm="syz.2.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1066.584302][ T29] audit: type=1400 audit(2000000067.208:71126): avc: denied { ioctl } for pid=16961 comm="syz.9.2422" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1066.658233][ T29] audit: type=1400 audit(2000000067.208:71127): avc: denied { write } for pid=16968 comm="syz.2.2427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1066.701241][T16974] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1066.724821][ T29] audit: type=1400 audit(2000000067.227:71128): avc: denied { ioctl } for pid=16961 comm="syz.9.2422" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1066.738505][T16982] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1066.906867][ T5874] usb 10-1: USB disconnect, device number 30 [ 1067.291222][T16990] overlayfs: missing 'lowerdir' [ 1067.484966][T16995] openvswitch: netlink: Flow actions attr not present in new flow. [ 1068.931369][T17008] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1068.994572][T17012] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1069.012729][T17012] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1069.503869][T16962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1069.512814][ T6033] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1069.686645][ T6033] usb 1-1: Using ep0 maxpacket: 8 [ 1069.727135][ T6033] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 1069.746502][ T6033] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 1069.763796][ T6033] usb 1-1: config 0 has no interface number 0 [ 1069.770159][ T6033] usb 1-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1069.784716][ T6033] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1069.798217][ T6033] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1069.832097][ T6033] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1069.848273][ T6033] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1069.861101][ T6033] usb 1-1: Product: syz [ 1069.867281][ T6033] usb 1-1: Manufacturer: syz [ 1069.900759][ T6033] usb 1-1: config 0 descriptor?? [ 1071.385989][T17026] audit_log_start: 615 callbacks suppressed [ 1071.386003][T17026] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1071.398471][T17026] audit: audit_lost=18159 audit_rate_limit=0 audit_backlog_limit=64 [ 1071.406435][T17026] audit: backlog limit exceeded [ 1071.412057][T17026] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1071.418949][T17026] audit: audit_lost=18160 audit_rate_limit=0 audit_backlog_limit=64 [ 1071.426913][T17026] audit: backlog limit exceeded [ 1071.432514][T17026] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1071.439020][T17026] audit: audit_lost=18161 audit_rate_limit=0 audit_backlog_limit=64 [ 1071.447020][T17026] audit: backlog limit exceeded [ 1071.452589][T17026] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1072.380801][T13285] block nbd3: Possible stuck request ffff888027ec0000: control (read@0,1024B). Runtime 240 seconds [ 1072.391573][T13285] block nbd3: Possible stuck request ffff888027ec0200: control (read@1024,1024B). Runtime 240 seconds [ 1072.403056][T13285] block nbd3: Possible stuck request ffff888027ec0400: control (read@2048,1024B). Runtime 240 seconds [ 1072.414047][T13285] block nbd3: Possible stuck request ffff888027ec0600: control (read@3072,1024B). Runtime 240 seconds [ 1072.754479][ T6033] usb 1-1: USB disconnect, device number 14 [ 1073.350012][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1073.363544][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1073.944356][T17039] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1075.880332][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2451'. [ 1075.904961][T17060] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2451'. [ 1076.370521][T17044] overlayfs: failed to clone lowerpath [ 1076.419492][T17044] overlayfs: failed to clone lowerpath [ 1076.474484][ T5874] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 1076.689671][ T5874] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1076.722760][ T5874] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 1076.756568][ T29] kauditd_printk_skb: 6109 callbacks suppressed [ 1076.756584][ T29] audit: type=1400 audit(2000000077.217:71775): avc: denied { ioctl } for pid=17052 comm="syz.8.2450" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1076.808861][ T5874] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1076.823640][T17070] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2454'. [ 1076.834225][ T29] audit: type=1400 audit(2000000077.217:71776): avc: denied { ioctl } for pid=17052 comm="syz.8.2450" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1076.839974][ T5874] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.860819][ T29] audit: type=1400 audit(2000000077.254:71777): avc: denied { ioctl } for pid=17052 comm="syz.8.2450" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1076.884761][ T5874] usb 9-1: Product: syz [ 1076.893018][ T29] audit: type=1400 audit(2000000077.254:71778): avc: denied { ioctl } for pid=17052 comm="syz.8.2450" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1076.941006][ T29] audit: type=1400 audit(2000000077.254:71779): avc: denied { ioctl } for pid=17052 comm="syz.8.2450" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1076.969214][ T29] audit: type=1400 audit(2000000077.254:71780): avc: denied { ioctl } for pid=17052 comm="syz.8.2450" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1076.973896][ T5874] usb 9-1: Manufacturer: syz [ 1076.997153][ T29] audit: type=1400 audit(2000000077.273:71781): avc: denied { ioctl } for pid=17067 comm="syz.0.2444" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1077.027383][ T29] audit: type=1400 audit(2000000077.273:71782): avc: denied { ioctl } for pid=17052 comm="syz.8.2450" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1077.060367][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1077.135135][ T5874] usb 9-1: SerialNumber: syz [ 1078.214423][ T29] audit: type=1400 audit(2000000077.282:71783): avc: denied { create } for pid=17069 comm="syz.2.2454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1078.235393][ T29] audit: type=1400 audit(2000000077.282:71784): avc: denied { write } for pid=17069 comm="syz.2.2454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1078.293669][ T5874] usb 9-1: config 0 descriptor?? [ 1078.329068][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1078.346286][ T9] usb 1-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 1078.368451][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.426637][ T9] usb 1-1: config 0 descriptor?? [ 1078.683035][ T5874] usb 9-1: USB disconnect, device number 79 [ 1079.110749][T17083] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1079.491598][T13453] udevd[13453]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1080.798116][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1080.866081][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1080.925711][ T9] usb 1-1: USB disconnect, device number 15 [ 1081.408363][ T9] usb 9-1: new full-speed USB device number 80 using dummy_hcd [ 1081.638038][ T9] usb 9-1: config 252 has an invalid interface number: 251 but max is 0 [ 1081.666536][ T9] usb 9-1: config 252 has no interface number 0 [ 1081.900538][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2462'. [ 1081.956445][T17102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2462'. [ 1082.116867][ T9] usb 9-1: config 252 interface 251 has no altsetting 0 [ 1082.137441][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 1082.137457][ T29] audit: type=1400 audit(2000000082.249:71942): avc: denied { ioctl } for pid=17078 comm="syz.8.2458" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1082.237131][ T9] usb 9-1: string descriptor 0 read error: -71 [ 1082.262952][T17099] netlink: 'syz.2.2457': attribute type 8 has an invalid length. [ 1082.278855][ T9] usb 9-1: New USB device found, idVendor=0c45, idProduct=6253, bcdDevice=e6.a9 [ 1082.295482][ T29] audit: type=1400 audit(2000000082.305:71943): avc: denied { create } for pid=17097 comm="syz.2.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1082.336391][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.358545][T17099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2457'. [ 1082.422974][ T9] usb 9-1: can't set config #252, error -71 [ 1082.428514][T17099] bond0: entered promiscuous mode [ 1082.434700][T17099] bond_slave_0: entered promiscuous mode [ 1082.456125][T17099] bond_slave_1: entered promiscuous mode [ 1082.467976][T17099] batadv0: entered promiscuous mode [ 1082.472243][ T9] usb 9-1: USB disconnect, device number 80 [ 1082.483990][T17099] gretap0: entered promiscuous mode [ 1082.558392][T17099] bond0: left promiscuous mode [ 1082.583783][ T29] audit: type=1400 audit(2000000082.305:71944): avc: denied { create } for pid=17097 comm="syz.2.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1082.610012][T17099] bond_slave_0: left promiscuous mode [ 1082.679702][ T29] audit: type=1400 audit(2000000082.305:71945): avc: denied { create } for pid=17097 comm="syz.2.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1082.763507][ T29] audit: type=1400 audit(2000000082.305:71946): avc: denied { write } for pid=17097 comm="syz.2.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1082.763538][ T29] audit: type=1400 audit(2000000082.315:71947): avc: denied { read } for pid=17097 comm="syz.2.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1082.763562][ T29] audit: type=1400 audit(2000000082.352:71948): avc: denied { read } for pid=17097 comm="syz.2.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1082.763583][ T29] audit: type=1400 audit(2000000082.361:71949): avc: denied { write } for pid=17097 comm="syz.2.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1082.763607][ T29] audit: type=1400 audit(2000000082.539:71950): avc: denied { read } for pid=17091 comm="syz.0.2461" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1082.763630][ T29] audit: type=1400 audit(2000000082.567:71951): avc: denied { read open } for pid=17091 comm="syz.0.2461" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1082.794414][T17099] bond_slave_1: left promiscuous mode [ 1082.794499][T17099] batadv0: left promiscuous mode [ 1082.829516][T17099] gretap0: left promiscuous mode [ 1085.918579][T17144] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2472'. [ 1086.430531][T17143] netlink: 'syz.0.2471': attribute type 4 has an invalid length. [ 1086.491662][T17143] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2471'. [ 1086.526329][T17143] .`: renamed from bond0 (while UP) [ 1087.015744][ T9] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1087.079780][ T5874] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1087.378790][T17162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2476'. [ 1087.454203][T17159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2476'. [ 1087.475269][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1087.499967][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 1087.499983][ T29] audit: type=1400 audit(2000000087.272:72230): avc: denied { ioctl } for pid=17154 comm="syz.9.2474" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1087.517351][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1087.582769][ T5874] usb 10-1: Using ep0 maxpacket: 8 [ 1087.619014][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1087.628315][ T5874] usb 10-1: config index 0 descriptor too short (expected 6427, got 27) [ 1087.634894][ T29] audit: type=1400 audit(2000000087.272:72231): avc: denied { ioctl } for pid=17152 comm="syz.2.2475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1087.646409][ T5874] usb 10-1: config 0 has an invalid interface number: 21 but max is 0 [ 1087.697316][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.727911][ T9] usb 3-1: config 0 descriptor?? [ 1087.742614][ T5874] usb 10-1: config 0 has no interface number 0 [ 1087.774973][ T5874] usb 10-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1087.782053][ T29] audit: type=1400 audit(2000000087.272:72232): avc: denied { ioctl } for pid=17152 comm="syz.2.2475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1087.807248][ T5874] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1087.871342][ T5874] usb 10-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1087.912327][T17168] kvm: pic: non byte read [ 1087.930260][T17168] kvm: pic: single mode not supported [ 1087.930287][T17168] kvm: pic: level sensitive irq not supported [ 1087.958253][ T5874] usb 10-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1087.991549][ T5874] usb 10-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1088.015173][ T29] audit: type=1400 audit(2000000087.272:72233): avc: denied { ioctl } for pid=17152 comm="syz.2.2475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1088.068172][ T5874] usb 10-1: Product: syz [ 1088.069424][ T29] audit: type=1400 audit(2000000087.272:72234): avc: denied { ioctl } for pid=17152 comm="syz.2.2475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1088.072490][ T5874] usb 10-1: Manufacturer: syz [ 1088.104905][ T29] audit: type=1400 audit(2000000087.272:72235): avc: denied { ioctl } for pid=17152 comm="syz.2.2475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1088.155251][ T29] audit: type=1400 audit(2000000087.319:72236): avc: denied { ioctl } for pid=17152 comm="syz.2.2475" path="/dev/raw-gadget" dev="devtmpfs" ino=820 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1088.217713][T17171] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1088.492834][ T5874] usb 10-1: config 0 descriptor?? [ 1088.523222][ T29] audit: type=1400 audit(2000000087.328:72237): avc: denied { read write } for pid=15900 comm="syz-executor" name="loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1088.628527][ T29] audit: type=1400 audit(2000000087.328:72238): avc: denied { read write open } for pid=15900 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1088.664891][ T29] audit: type=1400 audit(2000000087.328:72239): avc: denied { ioctl } for pid=15900 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=647 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1091.117574][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 1091.148338][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1091.210682][ T9] usb 3-1: USB disconnect, device number 67 [ 1091.374201][ T5874] usb 10-1: USB disconnect, device number 31 [ 1093.047642][ T29] kauditd_printk_skb: 5813 callbacks suppressed [ 1093.047675][ T29] audit: type=1400 audit(2000000092.221:72500): avc: denied { prog_load } for pid=17191 comm="syz.5.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1093.245040][ T29] audit: type=1400 audit(2000000092.230:72501): avc: denied { bpf } for pid=17191 comm="syz.5.2485" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1093.327176][T17182] openvswitch: netlink: Flow actions attr not present in new flow. [ 1093.420058][ T29] audit: type=1400 audit(2000000092.230:72502): avc: denied { perfmon } for pid=17191 comm="syz.5.2485" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1093.526049][ T29] audit: type=1400 audit(2000000092.239:72503): avc: denied { prog_load } for pid=17191 comm="syz.5.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 1093.593328][ T29] audit: type=1400 audit(2000000092.239:72504): avc: denied { perfmon } for pid=17191 comm="syz.5.2485" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1093.647036][ T29] audit: type=1400 audit(2000000092.249:72505): avc: denied { perfmon } for pid=17191 comm="syz.5.2485" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1093.815336][ T29] audit: type=1400 audit(2000000092.249:72506): avc: denied { perfmon } for pid=17191 comm="syz.5.2485" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1093.848148][ T29] audit: type=1400 audit(2000000092.258:72507): avc: denied { perfmon } for pid=17191 comm="syz.5.2485" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1093.886263][ T29] audit: type=1400 audit(2000000092.258:72508): avc: denied { bpf } for pid=17191 comm="syz.5.2485" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1093.919873][ T29] audit: type=1400 audit(2000000092.267:72509): avc: denied { bpf } for pid=17191 comm="syz.5.2485" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1095.137692][T17203] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1095.155580][T17203] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1095.203724][T17203] ovl_remap_lower_ino: 8 callbacks suppressed [ 1095.203735][T17203] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 1095.218298][T17203] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 1095.229649][T17203] overlayfs: d_ino too big (263, ino=9223372036854777299, xinobits=3) [ 1095.240569][T17203] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 1095.252004][T17203] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 1095.263541][T17203] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 1095.274455][T17203] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 1095.285758][T17203] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 1095.296769][T17203] overlayfs: d_ino too big (dev, ino=4611686018427387912, xinobits=3) [ 1095.309018][T17203] overlayfs: d_ino too big (kernel, ino=4611686018427389298, xinobits=3) [ 1095.760415][ T6151] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 1095.942468][ T6151] usb 9-1: Using ep0 maxpacket: 8 [ 1095.979217][ T6151] usb 9-1: config index 0 descriptor too short (expected 6427, got 27) [ 1096.014521][ T6151] usb 9-1: config 0 has an invalid interface number: 21 but max is 0 [ 1096.046248][ T6151] usb 9-1: config 0 has no interface number 0 [ 1096.059142][ T6151] usb 9-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1096.090353][ T6151] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1096.125554][ T6151] usb 9-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1096.188716][ T6151] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1096.208099][ T6151] usb 9-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1096.252075][ T6151] usb 9-1: Product: syz [ 1096.271022][ T6151] usb 9-1: Manufacturer: syz [ 1096.300030][ T6151] usb 9-1: config 0 descriptor?? [ 1098.690219][ T29] kauditd_printk_skb: 6015 callbacks suppressed [ 1098.690237][ T29] audit: type=1400 audit(2000000095.850:72702): avc: denied { execmem } for pid=17205 comm="syz.8.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1098.854106][ T29] audit: type=1400 audit(2000000095.962:72703): avc: denied { read } for pid=17205 comm="syz.8.2487" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1099.063961][ T29] audit: type=1400 audit(2000000095.962:72704): avc: denied { read open } for pid=17205 comm="syz.8.2487" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1099.091740][ T29] audit: type=1400 audit(2000000096.037:72705): avc: denied { connect } for pid=17205 comm="syz.8.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1099.138684][ T29] audit: type=1400 audit(2000000096.046:72706): avc: denied { allowed } for pid=17205 comm="syz.8.2487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1099.149358][ T6151] usb 9-1: USB disconnect, device number 81 [ 1099.212476][ T29] audit: type=1400 audit(2000000096.046:72707): avc: denied { create } for pid=17205 comm="syz.8.2487" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1099.258626][ T29] audit: type=1400 audit(2000000096.046:72708): avc: denied { map } for pid=17205 comm="syz.8.2487" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1099.323325][T17226] overlayfs: missing 'lowerdir' [ 1099.397298][ T29] audit: type=1400 audit(2000000096.046:72709): avc: denied { read write } for pid=17205 comm="syz.8.2487" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1099.937349][T17226] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1099.954772][ T29] audit: type=1400 audit(2000000096.046:72710): avc: denied { map } for pid=17205 comm="syz.8.2487" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51091 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1100.212838][T17236] openvswitch: netlink: Flow actions attr not present in new flow. [ 1100.859958][T17235] vlan3: entered promiscuous mode [ 1100.929750][T17235] bridge0: entered promiscuous mode [ 1101.242545][T17243] block nbd0: shutting down sockets [ 1101.451296][T17247] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2494'. [ 1101.516691][T17247] netlink: 550 bytes leftover after parsing attributes in process `syz.5.2494'. [ 1101.517347][T17250] loop0: detected capacity change from 0 to 16384 [ 1101.696189][T17250] loop0: detected capacity change from 16384 to 0 [ 1101.699299][ C0] blk_print_req_error: 138 callbacks suppressed [ 1101.699316][ C0] I/O error, dev loop0, sector 128 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1101.718677][ C0] buffer_io_error: 138 callbacks suppressed [ 1101.718694][ C0] Buffer I/O error on dev loop0, logical block 16, async page read [ 1102.281689][ T24] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 1102.441994][ T24] usb 9-1: device descriptor read/64, error -71 [ 1102.484951][ T792] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1103.102107][ T792] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1103.113109][ T6151] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1103.122749][ T24] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 1103.167285][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1103.193441][ T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1103.211867][ T792] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1103.399749][T17276] Cannot find del_set index 2334 as target [ 1103.414021][ T24] usb 9-1: device descriptor read/64, error -71 [ 1103.436231][ T6151] usb 3-1: Using ep0 maxpacket: 8 [ 1103.447068][ T792] usb 1-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1103.580042][ T24] usb usb9-port1: attempt power cycle [ 1103.602011][ T6151] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 1103.610553][ T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.633120][ T6151] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 1103.655707][ T792] usb 1-1: config 0 descriptor?? [ 1103.693110][ T6151] usb 3-1: config 0 has no interface number 0 [ 1103.724902][ T6151] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1103.757820][ T6151] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1103.780550][ T6151] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1103.830864][ T6151] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1103.842715][ T6151] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 1103.850849][ T6151] usb 3-1: Product: syz [ 1103.859346][ T6151] usb 3-1: Manufacturer: syz [ 1103.874072][ T6151] usb 3-1: config 0 descriptor?? [ 1103.962116][T17278] random: crng reseeded on system resumption [ 1103.981591][ T24] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 1104.000193][T17281] tipc: Started in network mode [ 1104.006517][ T24] usb 9-1: device descriptor read/8, error -71 [ 1104.007690][T17281] tipc: Node identity ac1414aa, cluster identity 4711 [ 1104.021571][T17281] tipc: Enabling of bearer rejected, failed to enable media [ 1104.053410][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 1104.053427][ T29] audit: type=1400 audit(2000000102.753:73043): avc: denied { write } for pid=17280 comm="syz.5.2505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1105.186351][ T30] INFO: task syz.3.2155:15712 blocked for more than 144 seconds. [ 1105.186946][T13285] block nbd3: Possible stuck request ffff888027ec0000: control (read@0,1024B). Runtime 270 seconds [ 1105.204877][T13285] block nbd3: Possible stuck request ffff888027ec0200: control (read@1024,1024B). Runtime 270 seconds [ 1105.215879][T13285] block nbd3: Possible stuck request ffff888027ec0400: control (read@2048,1024B). Runtime 270 seconds [ 1105.221608][ T30] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1105.232207][T13285] block nbd3: Possible stuck request ffff888027ec0600: control (read@3072,1024B). Runtime 270 seconds [ 1105.233763][ T6151] usb 3-1: USB disconnect, device number 68 [ 1105.249290][ T29] audit: type=1400 audit(2000000102.800:73044): avc: denied { execmem } for pid=17268 comm="syz.2.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1105.270865][ T29] audit: type=1400 audit(2000000103.099:73045): avc: denied { read } for pid=17268 comm="syz.2.2502" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1105.297154][ T29] audit: type=1400 audit(2000000103.099:73046): avc: denied { read open } for pid=17268 comm="syz.2.2502" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 1105.346025][ T29] audit: type=1400 audit(2000000103.249:73047): avc: denied { allowed } for pid=17268 comm="syz.2.2502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1105.372781][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1105.386141][ T24] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 1105.446632][ T792] pantherlord 0003:0810:0001.0012: hidraw0: USB HID v0.00 Device [HID 0810:0001] on usb-dummy_hcd.0-1/input0 [ 1105.532987][ T29] audit: type=1400 audit(2000000103.249:73048): avc: denied { create } for pid=17268 comm="syz.2.2502" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1105.562643][ T30] task:syz.3.2155 state:D stack:26952 pid:15712 tgid:15709 ppid:12907 task_flags:0x400140 flags:0x00080002 [ 1105.580440][ T24] usb 9-1: device descriptor read/8, error -71 [ 1105.601367][ T792] pantherlord 0003:0810:0001.0012: Force feedback for PantherLord/GreenAsia devices by Anssi Hannula [ 1105.777122][ T29] audit: type=1400 audit(2000000103.258:73049): avc: denied { map } for pid=17268 comm="syz.2.2502" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1105.822410][ T30] Call Trace: [ 1105.825719][ T30] [ 1105.828650][ T30] __schedule+0xfee/0x60e0 [ 1105.844941][ T792] usb 1-1: USB disconnect, device number 16 [ 1105.887473][ T24] usb usb9-port1: unable to enumerate USB device [ 1106.027258][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1106.032252][ T30] ? __pfx___schedule+0x10/0x10 [ 1106.087476][ T29] audit: type=1400 audit(2000000103.258:73050): avc: denied { read write } for pid=17268 comm="syz.2.2502" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1106.116554][ T30] ? find_held_lock+0x2b/0x80 [ 1106.125858][T17285] fido_id[17285]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1106.145057][ T30] ? schedule+0x2bf/0x390 [ 1106.149421][ T30] schedule+0xdd/0x390 [ 1106.183671][ T30] schedule_preempt_disabled+0x13/0x30 [ 1106.189174][ T30] __mutex_lock+0xc9a/0x1b90 [ 1106.193779][ T30] ? bdev_open+0xa2/0xe40 [ 1106.209873][ T29] audit: type=1400 audit(2000000103.258:73051): avc: denied { map } for pid=17268 comm="syz.2.2502" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1106.246968][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1106.254246][ T30] ? bd_prepare_to_claim+0x1e0/0x280 [ 1106.273027][ T30] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 1106.278700][ T30] ? file_init_path+0x48e/0x670 [ 1106.291765][ T29] audit: type=1400 audit(2000000103.268:73052): avc: denied { read write } for pid=17268 comm="syz.2.2502" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1106.319962][ T30] ? bdev_open+0xa2/0xe40 [ 1106.332226][ T30] bdev_open+0xa2/0xe40 [ 1106.342907][ T30] ? iput+0x3a/0x40 [ 1106.354156][ T30] bdev_file_open_by_dev+0x179/0x210 [ 1106.359514][ T30] setup_bdev_super+0x385/0x730 [ 1106.364377][ T30] get_tree_bdev_flags+0x363/0x620 [ 1106.369596][ T30] ? __pfx_qnx4_fill_super+0x10/0x10 [ 1106.374889][ T30] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1106.380567][ T30] ? cap_capable+0x107/0x460 [ 1106.385157][ T30] ? bpf_lsm_capable+0x9/0x10 [ 1106.390130][ T30] ? security_capable+0x80/0x260 [ 1106.395080][ T30] vfs_get_tree+0x92/0x320 [ 1106.399562][ T30] path_mount+0x7d0/0x23d0 [ 1106.403977][ T30] ? __pfx_path_mount+0x10/0x10 [ 1106.408855][ T30] ? lockdep_hardirqs_on+0x78/0x100 [ 1106.414050][ T30] ? putname+0xb1/0x110 [ 1106.418186][ T30] ? kmem_cache_free+0x124/0x6a0 [ 1106.423170][ T30] ? __x64_sys_mount+0x293/0x310 [ 1106.428109][ T30] __x64_sys_mount+0x293/0x310 [ 1106.432949][ T30] ? __pfx___x64_sys_mount+0x10/0x10 [ 1106.438236][ T30] ? kcov_ioctl+0x16a/0x720 [ 1106.442781][ T30] do_syscall_64+0x106/0xf80 [ 1106.447365][ T30] ? clear_bhb_loop+0x40/0x90 [ 1106.452091][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1106.457978][ T30] RIP: 0033:0x7fd77159bf79 [ 1106.462414][ T30] RSP: 002b:00007fd7723f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1106.470816][ T30] RAX: ffffffffffffffda RBX: 00007fd771816180 RCX: 00007fd77159bf79 [ 1106.478831][ T30] RDX: 0000200000000100 RSI: 0000200000000000 RDI: 0000200000000080 [ 1106.486848][ T30] RBP: 00007fd7716327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1106.494869][ T30] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 1106.502842][ T30] R13: 00007fd771816218 R14: 00007fd771816180 R15: 00007ffefb2e0a88 [ 1106.511085][ T30] [ 1107.060369][ T30] [ 1107.060369][ T30] Showing all locks held in the system: [ 1107.068116][ T30] 2 locks held by kworker/u8:0/12: [ 1107.124446][ T30] 3 locks held by kworker/1:0/24: [ 1107.129501][ T30] #0: ffff88813fe63548 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1107.167187][ T30] #1: ffffc900001e7d08 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1107.176893][ T30] #2: ffffffff8e7f50b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1107.231409][ T30] 1 lock held by khungtaskd/30: [ 1107.236258][ T30] #0: ffffffff8e7e94a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1107.263730][ T30] 2 locks held by kworker/u8:2/35: [ 1107.268867][ T30] #0: ffff888020787148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 1107.288053][ T30] #1: ffffc90000ab7d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 1107.301418][ T30] 2 locks held by getty/5566: [ 1107.306103][ T30] #0: ffff888033eed0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1107.319464][ T30] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1107.331888][ T30] 1 lock held by udevd/5813: [ 1107.336476][ T30] #0: ffff888027108358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0x41a/0xe40 [ 1107.354180][ T30] 4 locks held by kworker/1:6/6151: [ 1107.359418][ T30] 1 lock held by syz.2.1963/14884: [ 1107.367654][ T30] #0: ffffffff9060cd28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1107.378530][ T30] 2 locks held by syz.3.2155/15712: [ 1107.385588][ T30] #0: ffff888057bd60e0 (&type->s_umount_key#98/1){+.+.}-{4:4}, at: alloc_super+0x244/0xd20 [ 1107.400103][ T30] #1: ffff888027108358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xa2/0xe40 [ 1107.411309][ T30] 2 locks held by syz.0.2478/17172: [ 1107.418399][ T30] #0: ffffffff9060cd28 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 1107.429278][ T30] #1: ffffffff8e7f50b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1107.446907][ T30] 1 lock held by syz.9.2506/17277: [ 1107.452047][ T30] #0: ffffffff8e7f4f80 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1107.465044][ T30] [ 1107.477240][ T30] ============================================= [ 1107.477240][ T30] [ 1107.485671][ T30] NMI backtrace for cpu 0 [ 1107.485691][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1107.485718][ T30] Tainted: [L]=SOFTLOCKUP [ 1107.485724][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1107.485734][ T30] Call Trace: [ 1107.485741][ T30] [ 1107.485748][ T30] dump_stack_lvl+0x100/0x190 [ 1107.485781][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1107.485800][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1107.485828][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1107.485858][ T30] sys_info+0x141/0x190 [ 1107.485882][ T30] watchdog+0xd25/0x1050 [ 1107.485910][ T30] ? __pfx_watchdog+0x10/0x10 [ 1107.485937][ T30] ? __kthread_parkme+0x18c/0x230 [ 1107.485963][ T30] ? kthread+0x13a/0x450 [ 1107.485977][ T30] ? __pfx_watchdog+0x10/0x10 [ 1107.485996][ T30] kthread+0x370/0x450 [ 1107.486011][ T30] ? __pfx_kthread+0x10/0x10 [ 1107.486039][ T30] ret_from_fork+0x754/0xd80 [ 1107.486057][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1107.486076][ T30] ? __switch_to+0x7b4/0x1120 [ 1107.486096][ T30] ? __pfx_kthread+0x10/0x10 [ 1107.486124][ T30] ret_from_fork_asm+0x1a/0x30 [ 1107.486156][ T30] [ 1107.486162][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1107.611964][ C1] NMI backtrace for cpu 1 [ 1107.611981][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1107.612001][ C1] Tainted: [L]=SOFTLOCKUP [ 1107.612006][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1107.612015][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1107.612037][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1107.612056][ C1] Code: 66 be 5a 00 48 89 df 5b e9 7d 36 60 00 be 03 00 00 00 5b e9 a2 e8 eb 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 8b 05 65 47 04 12 48 8b 34 24 65 48 8b 15 41 47 04 [ 1107.612068][ C1] RSP: 0018:ffffc90000117878 EFLAGS: 00000002 [ 1107.612079][ C1] RAX: 0000000000000000 RBX: 000000000e598000 RCX: ffffffff81b9c21a [ 1107.612088][ C1] RDX: 000000000e598000 RSI: ffffffff8e598000 RDI: ffff88801e29c900 [ 1107.612097][ C1] RBP: ffffffff8e598000 R08: 0000000000000006 R09: ffffffff8e598000 [ 1107.612106][ C1] R10: 000000000e598000 R11: 0000000000000000 R12: 0000000000000001 [ 1107.612114][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88813fe88c40 [ 1107.612123][ C1] FS: 0000000000000000(0000) GS:ffff888124452000(0000) knlGS:0000000000000000 [ 1107.612137][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1107.612146][ C1] CR2: 00005648beae7a78 CR3: 000000000e598000 CR4: 00000000003526f0 [ 1107.612154][ C1] Call Trace: [ 1107.612159][ C1] [ 1107.612164][ C1] __phys_addr+0x101/0x180 [ 1107.612183][ C1] build_cr3.constprop.0+0x8/0x50 [ 1107.612202][ C1] switch_mm_irqs_off+0x83/0x7a0 [ 1107.612224][ C1] use_temporary_mm+0x95/0x140 [ 1107.612236][ C1] ? __kmalloc_node_noprof+0xfe/0x850 [ 1107.612252][ C1] __text_poke+0x3e2/0xae0 [ 1107.612267][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 1107.612283][ C1] ? __pfx___text_poke+0x10/0x10 [ 1107.612297][ C1] ? __kmalloc_node_noprof+0xfe/0x850 [ 1107.612314][ C1] smp_text_poke_batch_finish+0x57d/0xc60 [ 1107.612333][ C1] ? kmem_cache_alloc_from_sheaf_noprof+0x39/0x190 [ 1107.612351][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 1107.612369][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 1107.612390][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1107.612408][ C1] jump_label_update+0x37a/0x550 [ 1107.612429][ C1] static_key_enable_cpuslocked+0x1bc/0x270 [ 1107.612449][ C1] static_key_enable+0x1a/0x20 [ 1107.612467][ C1] toggle_allocation_gate+0xfe/0x2d0 [ 1107.612484][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1107.612503][ C1] ? rcu_is_watching+0x12/0xc0 [ 1107.612519][ C1] process_one_work+0x9d7/0x1920 [ 1107.612536][ C1] ? __pfx_process_one_work+0x10/0x10 [ 1107.612552][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1107.612571][ C1] worker_thread+0x5da/0xe40 [ 1107.612588][ C1] ? kthread+0x13a/0x450 [ 1107.612598][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1107.612610][ C1] kthread+0x370/0x450 [ 1107.612621][ C1] ? __pfx_kthread+0x10/0x10 [ 1107.612640][ C1] ret_from_fork+0x754/0xd80 [ 1107.612653][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1107.612666][ C1] ? __switch_to+0x7b4/0x1120 [ 1107.612688][ C1] ? __pfx_kthread+0x10/0x10 [ 1107.612707][ C1] ret_from_fork_asm+0x1a/0x30 [ 1107.612727][ C1] [ 1107.989470][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1107.996340][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1108.006986][ T30] Tainted: [L]=SOFTLOCKUP [ 1108.011279][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1108.021320][ T30] Call Trace: [ 1108.024573][ T30] [ 1108.027477][ T30] dump_stack_lvl+0x100/0x190 [ 1108.032134][ T30] vpanic+0x552/0x970 [ 1108.036086][ T30] ? __pfx_vpanic+0x10/0x10 [ 1108.040560][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1108.046710][ T30] panic+0xd1/0xe0 [ 1108.050406][ T30] ? __pfx_panic+0x10/0x10 [ 1108.054793][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1108.060924][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1108.067055][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1108.073197][ T30] ? watchdog.cold+0x198/0x1ca [ 1108.077934][ T30] ? watchdog+0xd35/0x1050 [ 1108.082339][ T30] watchdog.cold+0x1a9/0x1ca [ 1108.086914][ T30] ? __pfx_watchdog+0x10/0x10 [ 1108.091585][ T30] ? __kthread_parkme+0x18c/0x230 [ 1108.096588][ T30] ? kthread+0x13a/0x450 [ 1108.100807][ T30] ? __pfx_watchdog+0x10/0x10 [ 1108.105479][ T30] kthread+0x370/0x450 [ 1108.109537][ T30] ? __pfx_kthread+0x10/0x10 [ 1108.114118][ T30] ret_from_fork+0x754/0xd80 [ 1108.118682][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1108.123777][ T30] ? __switch_to+0x7b4/0x1120 [ 1108.128437][ T30] ? __pfx_kthread+0x10/0x10 [ 1108.133007][ T30] ret_from_fork_asm+0x1a/0x30 [ 1108.137751][ T30] [ 1108.141018][ T30] Kernel Offset: disabled [ 1108.145329][ T30] Rebooting in 86400 seconds..