last executing test programs: 13m50.99448478s ago: executing program 3 (id=835): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='utf8', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000480)='\xecO\xdd\xbd\xfc\xfa\xe1\xea\xea\x00\xb0\xd8Y\x03\x00\x00\x00\x00\x00\x00\x7f.\x14\x89|cW\x11\x0e$]7\x99\x11\xfd\xbe/6&\xe6\x97\x1e\xfbon\'\x0f<;\xbe\xa5`\"E]\xda]\xb9\xeb>\xe9\xf2\x99\xa8\xbeOA\xf8\\\xeb[\xd7:{\r\x91.\xdbxn\x1b\x17\xccMz\x1dc\x1d5\x9fe/\xb7k}\xd7\xa6\xd1\xcf\x1f\xf3\xae\x9e\xd6\x040\x19\x88\xa7:OYw\xfe\xaf\xdf\x16\x88\xfe\xd3\x13\x9f!\xd7\xcf\x86\x9f\xe8)\x01\x01\x00\x00\x06^\xb4', 0x0) ftruncate(r1, 0x8800000) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xff}, 0x1c) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r4 = accept$alg(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)}, 0x20) r7 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, &(0x7f0000000100)={0xc000000b}) signalfd4(r7, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_tracing={0x1a, 0x10, &(0x7f00000005c0)=ANY=[@ANYBLOB="1836000007000000000000009b7e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000003000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000640)='GPL\x00', 0x1200, 0x8a, &(0x7f0000000680)=""/138, 0x40f00, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x1, 0xd, 0x813, 0x9}, 0x10, 0x23c56, 0xffffffffffffffff, 0x2, &(0x7f0000000d40)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0x1, r6, r7], &(0x7f0000000d80)=[{0x4, 0x4, 0x6}, {0x5, 0x3, 0x4, 0x6}], 0x10, 0x3}, 0x94) r8 = dup3(r4, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000340)={{0x7, 0x1, 0x5, 0x2, 'syz0\x00', 0x7f}, 0x1, 0x30, 0x7807, 0x0, 0x1, 0x9dc, 'syz1\x00', &(0x7f00000002c0)=['{#\x00'], 0x3}) sendfile(r8, r1, 0x0, 0x1000009) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, r10, 0x1}, 0x14}}, 0x0) 13m49.935783484s ago: executing program 3 (id=837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 13m49.74212007s ago: executing program 3 (id=838): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x188}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x2080) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 13m44.321198115s ago: executing program 3 (id=856): socket$packet(0x11, 0x3, 0x300) fcntl$lock(0xffffffffffffffff, 0x410, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x8) request_key(0x0, &(0x7f0000000680)={'syz', 0x0}, 0x0, 0x0) syz_open_dev$mtd(&(0x7f0000000000), 0x48a99fbe, 0x500) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@inode32}, {@mpol={'mpol', 0x3d, {'default', '=static', @val={0x3a, [0x39, 0x1b, 0x3a]}}}}]}) chdir(&(0x7f0000000100)='./file0\x00') setuid(0xee00) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) ptrace(0x10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 13m41.659845328s ago: executing program 3 (id=859): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000016a00010027bd7000fcdbdf250200000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4c830) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24008890) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0x31a, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r6, 0x4068aea3, &(0x7f0000000340)={0xcc, 0x0, 0x1}) symlinkat(&(0x7f00000002c0)='./file0\x00', r6, &(0x7f0000000340)='./file0\x00') r7 = socket$netlink(0x10, 0x3, 0x0) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000844) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB='\x00\"\x00\t\x00@'], 0x0}, 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) writev(r8, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f4305f0671271e31c2f8d", 0x1a}, {&(0x7f0000000240)="d26319afcf07e69edb08", 0xa}, {&(0x7f0000000300)="d9a0f0481ae7", 0x6}], 0x3) r10 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r10, 0x114, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="e267bc55"], 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000120a0300000000060000000002000000140000001100010000000000000000000000000a33ea6c195eccf33b7aae09c77afda9b42bc617b40273045f73f5e4b7a825cbd983d7c65ee40fb07998bd8bf03c222f3f63c627548070b40ea7f37a7fc15eebcb97bb39c9e23ea13938acdefe8e1a2555ab53ca8341ea4392237beb6409488cb8e84f4fb1527c68c9c9131f7402838a160d667c1a80920f4cb90e04c802c41a59b947040c423644194e60f329f44166346aba5d9a0c5fb7ae97a8e5ca492fa3cf8b90789f3d839b873fc505a15994afec536b4426201c4cc1aff211"], 0x3c}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) 13m38.323811465s ago: executing program 3 (id=870): syz_open_dev$sndctrl(&(0x7f0000000100), 0x3fe, 0xc2000) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read(r1, &(0x7f0000000500)=""/4096, 0x1000) 13m22.058412444s ago: executing program 32 (id=870): syz_open_dev$sndctrl(&(0x7f0000000100), 0x3fe, 0xc2000) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read(r1, &(0x7f0000000500)=""/4096, 0x1000) 13m22.048881335s ago: executing program 1 (id=917): socket$key(0xf, 0x3, 0x2) r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x7, 0x1, 0x2, 0x40, {{0x12, 0x4, 0x0, 0x3f, 0x48, 0x64, 0x0, 0x2, 0x2f, 0x0, @multicast1, @remote, {[@ssrr={0x89, 0x17, 0x3b, [@multicast1, @broadcast, @loopback, @empty, @private=0xa010101]}, @generic={0x86, 0x10, "9b8ff732391009e5e907cb2dcbd6"}, @timestamp_addr={0x44, 0xc, 0x32, 0x1, 0x5, [{@loopback, 0x9}]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000a00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=@newtclass={0x58, 0x28, 0x200, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0x10}, {0x5, 0x4}, {0xfff2, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x23}}, @TCA_RATE={0x6, 0x5, {0x9c, 0x9}}, @tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_sfb={0x8}, @TCA_RATE={0x6, 0x5, {0x3, 0xc4}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040000}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x4, 0x5}) fcntl$lock(r3, 0x24, &(0x7f0000000100)={0x2, 0x0, 0x3, 0x5}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000001280)={0x1, 0x0, [{0x40000082}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0, @ANYRES16=0x0, @ANYRES32=r0, @ANYRES8=r0, @ANYRESHEX=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$midi(0x3, 0x8a, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x1, 0x1, 0x6, 0x70, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x7, [@midi_in_jack={0x6}, @ms_header={0x7, 0x24, 0x1, 0xa6ce, 0x7}, @midi_out_jack={0x17, 0x24, 0x3, 0x3, 0x0, 0x8, [{0x8, 0x80}, {0x40, 0x36}, {0x2, 0x80}, {0x6, 0x80}, {0x1, 0x2}, {0xd, 0x4a}, {0x80, 0x31}, {0x7f, 0x4}], 0x2}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x3, 0x2}, @ms_header={0x7, 0x24, 0x1, 0xfffb, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x100, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x5d1, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x2, 0x2f, 0x6, [{0x80, 0x1}, {0xaa, 0x12}, {0x8, 0x1}, {0x3, 0x6}, {0x2, 0xb4}, {0x80, 0x6}], 0xe9}], [{{0x9, 0x5, 0x4, 0x0, 0x40, 0x6, 0x7, 0x8, {0xb, 0x25, 0x1, 0x7, "9b472314b09d6d"}}}]}}}}}]}}, &(0x7f0000000580)={0x0, 0x0, 0xdc, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x7, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x860}}, {0x0, 0x0}, {0x12, &(0x7f0000000380)=@string={0x12, 0x3, "59961e0a7a48eb1984eb4d1b19056c3f"}}, {0x20, &(0x7f00000003c0)=ANY=[@ANYBLOB="20034db67e7a0560dc0fd175c8ce5cee"]}, {0xde, &(0x7f0000000640)=@string={0xde, 0x3, "d9aef605b86eaa8784b13f2908e23bab592d62d629ca804c008e1221aeeadca1ee0484a487dbfca6b22cd3e31c634795986feecd36661ec10738efa4ee67e917f347385f10027a3accfdd82933f11a9454ba65d35a2b2862b380942bef718ba4d6cd69f0a5d62d0462448978084330d79ad02439cd9fd9d9dc6c3fa8104990e40c96276dcb84e4be5d7344919fa45f1316e56dd708567391a8511863b0c4d85f741abcabd337d8bba13c3bfb068e52c91369c4f060cb96215b844e230e8260285f22ebebd07f04e780d1fbd67ab4ec4ea46e8df0f326c766cb8bbe6a"}}, {0x0, 0x0}, {0xa, &(0x7f0000000740)=ANY=[@ANYBLOB="0a03d588951841eb1334db88b64a0f0e10be9a87645f48dc78441cc5281f6bd761a9771262693a1862cd21ce60c5566f957936ec137cc869d06838f096571ee9e0c4382e10c5458776ebcd0cc10986da6764080633a808f19c825a88b8fd0b7ae41c17988af43f3828dbf0eb3d072a8e297c94c57f7f3db8059aa82b25f5272a2ac7506a00"]}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x400000, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) dup3(r9, r7, 0x80000) close(r7) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r10, 0x0, 0x0) 13m18.109586586s ago: executing program 1 (id=929): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000001100)=0x3fa, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000002c0)={0x2, &(0x7f0000000240)=[{0x80, 0x81, 0x10, 0xc}, {0x1, 0x7, 0x7, 0xfffffffc}]}, 0x10) r3 = socket(0x1, 0x2, 0x200) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) bind$vsock_stream(r3, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r5, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) recvmmsg(r5, &(0x7f0000001440), 0x0, 0x2121, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000004c0)={0x0, 0x2, 0x1, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x7f], 0x1}}}) 13m16.699949582s ago: executing program 1 (id=934): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') r1 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r1, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000d00", 0x29) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x74, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x57, 0x33, @action={{{}, {}, @device_b}, @mesh_hwmp_psel={0xd, 0x1, {@val={0x82, 0x20, {{0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x8, 0x9, @broadcast, 0x7, @value, 0x2, 0x1}}, @void, @void, @val={0x7e, 0x15, {{0x0, 0x23}, 0x3, 0x2, @broadcast, 0x2d4, 0x8, 0xf3d}}}}}}]}, 0x74}}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, 0x0, 0x80) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x8008b705, 0x0) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0xc40) mmap$IORING_OFF_SQ_RING(0x0, 0x2, 0x2000000, 0x110, r6, 0x0) 13m16.563927931s ago: executing program 1 (id=935): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x57) landlock_restrict_self(0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xfffffd78) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x0) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) socket$inet6(0xa, 0x5, 0x3) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x30e3ee664c18655e, &(0x7f0000000100)=ANY=[@ANYBLOB="0095b0", @ANYRES32=r1]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x4000, 0x3f46137792f68271) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) signalfd4(r4, &(0x7f0000000040)={[0xfff]}, 0x8, 0x0) 13m15.092221566s ago: executing program 1 (id=939): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x8257f) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000008189899a1fea9fd2d3945b80d6327bd32ac2478b7a5b9b719bccbf84270be5534512acf9bfb650ec3118859c9d20dea6ed35bfd82f5672f5ca3cc118080af030596ab97777ddfb143814dceae2472b80613fe5a0e566a7cac03a", @ANYRES16=r1, @ANYBLOB="00082bbd7000fddbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c0c4}, 0x20000810) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x0) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x1) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x42, &(0x7f0000000140), 0x0) socket(0x10, 0x803, 0x0) 13m13.941476776s ago: executing program 1 (id=943): syz_open_dev$sndctrl(&(0x7f0000000100), 0x3fe, 0xc2000) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats\x00') mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read(r3, &(0x7f0000000500)=""/4096, 0x1000) 13m9.663461181s ago: executing program 5 (id=916): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084000000060005"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13m9.486818468s ago: executing program 5 (id=955): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(0x0, 0x0) fgetxattr(r4, &(0x7f0000000700)=@known='system.posix_acl_access\x00', 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="28000000100001002d090000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="380904008300020008001a8004000a80"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x2280) r7 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8000) iopl(0x3) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_trace', 0x284ac3, 0x8) sendfile(r8, r8, 0x0, 0x6) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES64=r7, @ANYRESDEC=r9, @ANYRES64=r1, @ANYRES64=r1, @ANYRES16=r6, @ANYRESHEX=r2], 0x0) recvfrom(r5, &(0x7f00000000c0)=""/10, 0xa, 0x10000, 0x0, 0x0) pwrite64(r7, &(0x7f0000000000)="8d44a7725d5a46d16eab8f531d831d19fecbe9d18f064bd8ac2838de766e0a95bac831e99f", 0x25, 0x151dcafe) mkdirat(0xffffffffffffffff, 0x0, 0x73) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) 13m8.998862891s ago: executing program 5 (id=957): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x4006]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x7fff, 0x400) r1 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[], 0x0) 12m58.890817114s ago: executing program 33 (id=943): syz_open_dev$sndctrl(&(0x7f0000000100), 0x3fe, 0xc2000) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats\x00') mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read(r3, &(0x7f0000000500)=""/4096, 0x1000) 12m58.010991136s ago: executing program 5 (id=995): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = memfd_create(0x0, 0x0) ftruncate(r1, 0x8800000) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xff}, 0x1c) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r4 = accept$alg(r2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{}, &(0x7f0000000bc0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0x1}, 0x0, 0x0}, 0x20) r5 = epoll_create1(0x80000) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xc000000b}) signalfd4(r6, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) r7 = dup3(r4, r2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000340)={{0x7, 0x1, 0x5, 0x2, 'syz0\x00', 0x7f}, 0x1, 0x30, 0x7807, 0x0, 0x0, 0x9dc, 'syz1\x00', &(0x7f00000002c0)}) sendfile(r7, r1, 0x0, 0x1000009) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 12m57.740012061s ago: executing program 5 (id=996): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x24000, 0x10) ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys\x00', 0x1ff) set_mempolicy(0x3, &(0x7f0000000140)=0x5, 0x3) mount(0x0, &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='sys/kernel/debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000004440)=@acquire={0x1fe4, 0x17, 0x1, 0x10000000, 0xfffffffd, {{@in6=@remote, 0x200}, @in=@multicast1, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x73}, {{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x120000}, [@tfcpad={0x8, 0x16, 0x7}, @algo_comp={0x1045, 0x3, {{'lzjh\x00'}, 0x7fe8, "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"}}, @extra_flags={0x8, 0x18, 0x8}, @algo_auth_trunc={0xe62, 0x14, {{'blake2s-256\x00'}, 0x70b0, 0xa0, "9497b7c137271dae5820195a95bcb069449cdba940f6748b85571c81ec53f5a5eab36180be43a7b2736676c4c9c7166b9c299cc2379751565ff91fcac5ea5ce96f48979e1be5c8feca394d397b70609266067d4d5dad337cf445b524a47c3a5b27c10d7c492c775f2bd9a6bf56733bdd52f0ab865c712c22664393260632e573161c9ae527ebdcee5ba4ec50559b0f552f428dc755779a5fcf5808124d35ca3d780837804fc619ffde48284621864872fb145b8c316c5699bf422e1bb20b1c1707e2deb1255e1377493ecd2e38757c99e8c4d6ce617b0d50cfe3da1dde17333b33370c5e947350ef4135fcb1d3db1002bce74e828f72754fbcb90e72f36a02dd59fa4a9b861aededb8a901d13ad4bffd70397424a7cdd42e4021ecd4e8b6e847f701cd77f64f0606658a71ab3e6b52d7018a931002f8358cf772fa5a5a88c914763ad5e2045f6075ca0d899a98a59444ecd215758876fb16fade89c01bad12be55164da9e592c4c94a0ecc2ac1379541ba02b3b610c437ff805ea5d1bcc7250434542d56298e1d6dc6b6563b1dfc8e5d150340a48ac0520421e48432718697d1d805abd43974340bf764e569608d8eb5cc2a57ca298d6a7e73ad3dbb687eb4741ca1ac5b83fdc3c3ef426b3e4122c607b1d270bbeedfd97ca3073e0c49db92b6dd8856f0b8b06d724b0e80841ba1c5ec50240fbfbfa1504a6fe0573c67cb36c54b4b9618cbd3a0fac48925a11f35a281e063be450af39817725803bbc08a4eeea0e600c8fa51e31f0e282e24c1da964de45955169266ab6bf9e2c6f32cfc3895c5f665aaa5038116542111fe7cf7b68945609679942c846d710538877f1e6b28dca4934d9da524533613381e7ccb16575b30bf8da05a1d4921678fb97eb6dd7ff51b8371f9b877aa65f6226e98d332c22ed11665ed7be47d66e6801c257ae6fea5ada25c8a52bf1d3e6f1d00a2d119fdd8555308816cf12851ac8989e59ae8b576daa7a0f6a1ec95571a6d932fa35c0665c72808cdaf1f2a07836871702695dd234bb897a7cace34218f5893a75931c2f86a50ab6753103ccb5420cdbae6df3ef487a55f86d9a12e92972678c3af3e31d9a6d7c884226d5f3df3a4d7ad3b4ca964be14e3a31e6be15540873c313d2337b277b4624407a1b302e9460d3bf415ca84f1b8ea89e255eda0f59399ce3cfff57c1478f41c1a523ecf639404697fd4108490fb1c9481193d1772d6725b3f1cdb6150c83b1b72d4647523e820d565120e5828a8b6dda66082d39312cd25d08ede0a892b85692f446f1d60507cf761e7a9fc03b31ac54ef0af8aef8119c1babed3d1ba222ad28568b9fbc72f38adb48f6e1325ff399a45363c371ed74ac17adca2b82a90b7652da06cf4fceb295b54a8905b921d5297ea1de6e05dbe866eff83aae164f04257f9cfef18a6c2c9193e2b09c7a33f89209c5f08a1b0be805a489bac684c52cfecf15715dbd0538ef778245ad386025bc548e55ca1a831e6f97442fe7bd47a02c37d9b0ee9944cee7e27ae01c008686d12b179edc1836e61af01e065ef94b1778cd92dc4cdf832fb6405024a40132c44c8bc1517c7f504b33a0c01b47342d506102d988c961b2e97fda92ebcc16219c38cff91e38da347a9fa6cb3f768ad3f3a1c88125a6499863fca5e6553d57033d189eb4599912f5fcc73adeb2d09927d474649bb62b4c37700372ce29a776408bfd0f7d99fcc33e6ac03c40beb9ed3b3a093b78f57a3c6d755009ffad1bd3b9b8a6fddd80662166b84fd8e16d66171f70bcd7b6783cc6179e40055fd285783c07a9516160d5e36a6649a333c035f1aabc0f512c5b0b42a3aa31b42fe12870fed4870d987ae2f49648232537f8922fb8fcf0ae572ecdf0a1aa20c8f51664a346c21cd91b1bc9e4128f32a4886eb6c10b4d0c022ee4541e25028488f3fd5ed94f437512d08c05bf370f5aba336dbf118dbb167351c520a6bccb1ee87b66673882679257c0feecc1d5760d421e1e03476c45dca2db394ccd3b1839e103738e82098c91d7176b350f833547cca53e2674e6450ecdb2915fc2633c84c48bd6fbe05ae12c96087d3d58a36d240530844eb409f2331a55c4ec2b454bb1216d2641446899147f43a62eab594fc268f7d045ae9c105b9b34cf666b39262e6e53713da158cbd5abe2af2734d7a3b9ebf28cfe37aae9300fed012d48e6e540a2aa150295f5446062b4efcce8c74fb1ef7e5b63c18c7537611457bab1b72c0d7dae3da1c404d26b928cb534a9e9189a1903a32ca3a76c41b9c80ca62600a423255524e8fab99d46c1f2a90f5ff62ab71e43ba7223f64e128a843e390ae82686ecffd0a61f373a1f94c91befb3c51c6253185323aed8ae9f6c08af88219ee6f24c722a1e99ce3d70f441a75183a3560847f7626cc9a9724a34a3643ab82f398597e1494f594932d0d01f3f10a00da6ed54dfc31b1940bbf3f61ec1dee0322347b6e10caa605032b23c389e9f20a5e4f28c50d3b125381a61a594e9efc70f55f5a8ce253748eba4af0ff4cdd25c580060fd11241a5575dd3061621deb6ea4eb268815aa033eb397e8ad99d9d45ba3a721925153f23dd00e7fe9582f1c3a6e2759a18c9a3f2d8a236314f17a891169f704eeeb0454b144b1ba121ab97b4c38292de9fb992b58bb50cdb31aadf0009c5a5756e59b2693b6c8ee731d0dfba2fa37eee6ff7c3b71088d4baaf57722cf431b4bbed592005f0c27e866c3971c915df5e567697cf66a70e587aa87d2939ab0d18b8aab38fb19d6ca4f9fe895c5768637defc35563bbc1d1e851ab0b91361c789e3b905a05add045fa622954fe5dd7b1c8f58bb36fb9d80d303b4e50b93a4663f6555d4f45416a63ce59d65855bca38efd5f5ffdf65baa1c9e17900c9f972fc57129ae6e4aa1d9dea7261a144804598ecc4ecd41d146546926338de9f669ecbc8f0670c546e0d30f6b24e62760519a764d88ec8a2986ad6e47dc38f86da757a20904181d248cb3dd5cea7d467e5c2478855586018b5bd8d1a6dacc141fe52fff2051076e9d0c631eb50aab437e6d6f5edfcf16be8312bd8173ba352d9e6c2f2bc176d32533db7f63ffe5002b038e9fb4098e9fc7756053177ca651bf830f5a9e80ef90a9620add6b2af4fb72e08944ed3f6e0bf8423a4b72d8c3248e7f5cb914d4612b6b77a31fa2fa91958f9b40b884e66d399abcf820723e47f4e74f3aaf9ed7fa7bbdee5d44c104f1c646d3d328b687be78fe38e124417212734b7090f203127cd586ca90f2cebfe94ed3b8218ac71ff03e4264df3407eba81a0b1f49dec763194bfff3655213a98820aad8fa8b2138fe173b6b4be4ff322eadd01a6bb0e99f1296279d7d075388a12bd7f5dd9cb7fd95e76b92b247fecd5b375b6b44dc2b885767c8a6e3b9abd8bcfbabcb0934e167a1aba7a28946e2a88fa7488939a8e27704e456e26012a47f083d26f0444fa5c5da3f76170c7eb6944ffda9bc192d0f03f83ee51389ac6eb89e52e9734791ec7d20a9235eedbfe9475c9eda73ea4ee962aec8be617ea6da590a930449aeff37024358ee23872bf45daae908bb90726c40d3c759a0adbb9ff8ab8165b065190df44e924b23956c9c3cad6fef807ee0416e327207b0d64dc83b719cd0a2d8f36ff3d6d139428b62db206bf4df0ad4992903b04a43ef35242e6915fc1868f7fba7bdefcdbbb8cb73834ef7d9d9e51f5e8276964d5c7cd6aeb2590987038cbdf9ad49fe0f8c824799a66b18aeca6f25a30ee1ab04320d6c91ee25e8707f5fc4d2a9795699390ffb4de0df65a5f114b8c6c3e7d867f1887699b1068fb7089a23b0f56b648f0edc8fcf5a80b801aacd48e758aadef76403cbe9dba012957c05e192b3648af9ca40eb5b524985b371cfa346b23e848f472fc20b75f3f39f1d47e3482db8786c4bd11eff19948e38327178dac1add5698ccaa2eb2bda5dd5ec965b457cfbdf9a3cb9f3c43745496a04750b049afd85f7f45500019691371f4f78c46b20b07a2ab441fc48268c60ff1b2c5cecc7d11e4249dc612e5c6db5fa9020c25980973c4a063c10a763765efd4b531795d2a138acbb18fd8d7875153eacad0dd5e640ee94863da11820c4cd54f7937fc10c2a1f84d91c75165990b9ec66ebf9edc2fe1fee691141737d973ff390c83d8c36c3c5558c9e620ef669ff107eeba0d9ffc1ff13d33d6c75cce0b45fd1734b0d4f07018b2c8be4e257fbac90f7886a00e4ee914989174bcab737d76e00c0e20c1b0bcc52a0adfa97330e44307e7b0384ae53e92c31d076a4b4059b3b2957efc5c0329dcf4face4c37f22d2b52977c01e9f9bed4c80984958807ad8069206c36b487439c5adc665627cd69833de4c06f781bba7a856e115e948f230129339c7adcecf78388c33e8d6a231206549ca2c94ef0b2a0d65d108568b0656bdb620932f99535e95ebb3f8af9f0ef7c4aeb06d258a213384cf51849ac925e404be2b8e4f4418b2f6455c8b695492619df7d086eeb4e3fb58c6657e5136c48599f63b8523f0734963de9e3670dd9294585b87c4e4492590800e5812e55ded42d9f69d49224f950f5b90a9eb1eced567b7ec8e6df8564e178d0e73258b4e70a976ff1c2b78e190f3c456f5a83aef9fa757cec5928b8671a406629bfada7699b336453642c76c86badbb4a76a28ab43bca4d64d08e43024c1acabde7b3e4438247c82715e19c87e9251504c8224f9930f540c739977d0d36e03069922b7ab018909028193b835064aeed819ec8bdd3c924e597682f566473bc409ab32026b316952d6c1a4ed42c474b6d808bc3330e8dc425411650f2a79ee9a4edf782ff5e978fc39b9b50823101927d9d0521a2b0145347d8397aeffbe43673842a5b2f6b5917cca54bc4ec0d32545352893dbbeecbf15b9b99505ba2cbe50a0ef4599e63b8fe0ab731d968682d14b990ce58a5b722cef8703732f633e2a959931c20ce39b2a5f4a6b4f792275d3f1aa838a7f1b075c1062f909ee77007f5cd6986925d12f9338200c51c94e4bc730a5c4aaf04376aa3221e51041896b9a8e19201d360860a28d17215a57ec31b0ed3790c1d33af0c81b"}}]}, 0x1fe4}}, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x9, 0x20, 0xa6, 0x2, 0x5, 0x9, 0x3}, {0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2, 0xce, 0x0, 0x4, 0xff, 0x0, 0x0, 0x800000000000000}, {0xffffff01, 0x35, 0x20, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7e, 0x1, 0x1000000000000004}], 0xa}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 12m55.866172643s ago: executing program 5 (id=1000): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x8000) syz_usb_disconnect(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x9902) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000680)=0x522, 0x4) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000140)={0x0, 0x20, 0x3, '\x00', &(0x7f0000000100)=0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x3, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x8, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0xffff, 0x2, 0xa51, 0xc, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffff7, 0x83, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x0, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x491, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffa, 0xfffffffffffffffd, 0x5bc, 0x4, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x8, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x6, 0x7, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x4]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12m40.149275921s ago: executing program 34 (id=1000): r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x8000) syz_usb_disconnect(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x9902) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000680)=0x522, 0x4) ioctl$VIDIOC_G_EDID(r1, 0xc0285628, &(0x7f0000000140)={0x0, 0x20, 0x3, '\x00', &(0x7f0000000100)=0x2}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x3, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x8, 0x0, 0x802, 0x9, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x1000000000005, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x8, 0x8, 0xffff, 0x2, 0xa51, 0xc, 0x401, 0x800000000000003, 0x7, 0xfffffffffffffff7, 0x83, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x0, 0x1, 0x8, 0x8, 0x6aa, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffff7, 0x4, 0x491, 0x4, 0x5, 0x8, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffa, 0xfffffffffffffffd, 0x5bc, 0x4, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x8, 0x8, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x6, 0x7, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x8, 0x3, 0x4]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 15.561927848s ago: executing program 6 (id=3171): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = socket$inet6(0xa, 0x2, 0x0) rt_sigsuspend(&(0x7f0000000140)={[0x3]}, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x103, 0x1}, 0x20) process_madvise(0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000940)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?Y\x96\xab\xc7\x06F\x8e\xab\xc8\x1e\x89]\x13bZ\x8d \x19\x00k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4\x19\x80\xb7\xeby\x81\xa8\x00A\x06yK\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\xf4f\x8c\x87\xc2\x01\x00\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]Z\x88\xecIf\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec\xd1\xf4kG##\x1f2\xee\xce\x17\x89vr\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xc7\x90\x9fU\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\a\x84\xb2j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe0\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f000001cd00)=""/102400, 0x19000) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e24, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, 0x1}, 0xc) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r7, 0x8004e500, &(0x7f0000000240)=r6) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000009400004803c0001800b00010065787468647200002c000280080004400000000308000740000000170800064000000001050002000000000008000340000040010900010073797a30000000000900020073797a32"], 0x94}}, 0xc084) 10.949506259s ago: executing program 2 (id=3184): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') read$FUSE(r0, &(0x7f0000002fc0)={0x2020}, 0x2020) 10.64982705s ago: executing program 2 (id=3188): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) accept4(0xffffffffffffffff, &(0x7f0000000080)=@alg, &(0x7f0000000100)=0x80, 0x80800) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019300)=""/102392, 0x18ff8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0x74}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x800) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8, 0x80800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000f30300007b8af9ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x8, &(0x7f0000000040)=""/8, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 10.43261994s ago: executing program 6 (id=3189): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x570, 0x0, 0x1}]}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x0) set_mempolicy(0x3, 0x0, 0x5) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)="8a", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x8075, @dev={0xfe, 0x80, '\x00', 0x6}, 0x2}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000ac0)='^', 0x1}], 0x1}}], 0x2, 0x40000c0) shutdown(r4, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000822000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="3e0f320fdd71ceb91d020000b81900c0feba000000000f30b9800000c00f3235000400000f30c4c3917af80c440f20c03503000000440f22c00f0fb7020000008e66b861000f00d066b874000f00d8b9e5090000b808000000ba000000000f30", 0x60}], 0x1, 0x12, &(0x7f0000000480), 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x20, 0x36, 0x1, 0x470fd2b, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x2}, @typed={0x4, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040050}, 0x24000080) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x7fffffff, @private1, 0xff}], 0x1c) 9.067504987s ago: executing program 2 (id=3194): setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000840)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f00003ab000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, 0xffffffffffffffff, 0x877bb000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000}) socket$l2tp(0x2, 0x2, 0x73) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r3, 0x4b41, 0x10000000000004) r4 = socket$netlink(0x10, 0x3, 0x4) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, &(0x7f0000000100)) mq_open(&(0x7f000084dff0)='.selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) listen(r1, 0x3) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_open_dev$vcsn(&(0x7f00000001c0), 0x1, 0x2280) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f00000005c0)={0xfffffffc, 0xc91a, 0x2, {0xa, @raw_data="36a233ccacbf9a5cb3e75daa2e11d337b7d6f3d76a2264f1214aaf1b890899c87ee6b8cf9123ff8c2e48b5b9001fba79238e705555a63de4c160ee4b58b83e1aa72a6206466354a8091db1465db3f237746d59a2cf7cd551536af5e7f91bd836d2cc9cf9f93a6d98470148f97f5b23fb7c54b10bda1aa37479098088076a52731c9a818a6e7d3aa6e512a1817e5871b52c60bd3ad4034b3a5df345cb3989b16326b064b988aa497277884d8fdfc6c0823db8950ca2ff8a2ff472de58f362e2011ba35ba32b2a8515"}, 0x1}) r8 = socket$unix(0x1, 0x5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r9, 0x7, 0xe80, 0x0, &(0x7f0000000040)="24c2afc3a2e0527bea33d6541650", 0x0, 0xffb0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) connect$unix(r8, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 8.241176279s ago: executing program 7 (id=3196): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6bfd190ba319524c, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000080)={0xf0f007, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x9a974000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) rt_sigpending(0x0, 0x0) sendmsg$nl_generic(r3, 0x0, 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="80", 0x1}], 0x1}, 0x44010) syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000300), 0x10007, 0xbc03) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) 7.162324217s ago: executing program 0 (id=3200): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x13, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0], 0x0, 0xe2, 0x0, 0x0, 0x10, &(0x7f0000000280), 0x0, 0x0, 0x7d, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') 6.997326324s ago: executing program 0 (id=3201): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x15) ioctl$TCSETS(r2, 0xc0384707, &(0x7f0000000500)={0x5, 0x0, 0xfffffffe, 0x5, 0x0, "3eccd8f9d20000000000001000000200000500"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e27}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003d00)=[{{0x0, 0xfffffffffffffc4e, &(0x7f0000000840)=[{&(0x7f0000004d40)=""/4107, 0x100b}, {&(0x7f0000001840)=""/218, 0xda}, {&(0x7f0000001940)=""/146, 0x92}, {&(0x7f0000001a00)=""/85, 0x55}, {&(0x7f0000001a80)=""/209, 0xd1}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000003d40)=""/4096, 0x1000}], 0x7, &(0x7f0000003c00)=""/250, 0xfa}, 0xf6aa}], 0x1, 0x2102, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$revoke(0x3, r3) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r4, 0x1) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x13, 0x0, &(0x7f0000000100)) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5f0, 0xe0, 0xe0, 0x0, 0x0, 0x1c0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x4, 0x1}, {0xffffffffffffffff, 0x4}, 0x5, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x108, 0x130, 0x48000000, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e23], [0x4e21, 0x4e21]}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@empty, 0x2c, 0x16, 0x4}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x7ff, 0x2, 0x1, [0xff, 0x4239, 0x1, 0x8001, 0xb1, 0xfff5, 0x5, 0xd, 0xfff, 0x3, 0xb, 0xa, 0x5, 0x10, 0x2, 0xc], 0xd}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000000)=0x1c, 0x4) r8 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) unshare(0x22020600) 6.687507428s ago: executing program 6 (id=3202): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) accept4(0xffffffffffffffff, &(0x7f0000000080)=@alg, &(0x7f0000000100)=0x80, 0x80800) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019300)=""/102392, 0x18ff8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="740000000206010200000000000000000200000314000780080008400000003708000640000008000e0003006269746d61703a6970000000050005000a00000005000400040000000900020073797a310000000005000100070000000d0003006c6973743a736574"], 0x74}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x800) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8, 0x80800) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 5.919250534s ago: executing program 2 (id=3204): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000023c0), r0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003bc0)={'wlan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000009c0)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x4, 0x1}, [@NDA_DST_IPV6={0x14, 0x1, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x20}, 0x24000010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x140, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x9}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x7}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc4, 0x3, 0x0, 0x1, [{0xc0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xba, 0x1, "459fcdbe69424f75060a877181997e3f3843636320c870ceea81489ff9cf00c5c95a8131d126a51b1731d3f93cccc6269298a5d51d6665dfde80f51da229dbdcb0e5b0e3af2eced94b699cc2c4879c5773b3aedc7be9e73bdd0c761bea5ebd5023e898dd3ef8df506ca836fabb05adfa7c0105e61a55deb3a1bfa5c3134b74195535de84c71b1e5c0416314b09d3b8e49a00916c50a5da7324aab6b69cbe8e7259aae623fb9beb83fd722540bee9cf59e65bc6dcd20d"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x44, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x9}}, {0x28, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0x22, 0x1, "b19622fc5aab6a4c32306208bb4b9432c6cd35af264544b22595fca8bc41"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}]}, 0x140}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004014) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r1, 0x11, 0x70bd2c, 0x25dfd9fe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4002) 5.712760441s ago: executing program 0 (id=3205): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff000015599a8f44c693d3555e10993e3a914992c5223c936b6bfa34a776962364cd288f826a2a6727bc1ae2c2f759348aeba6e913aa68375759b7d1745c733315204e1de04762889687ad723f63d4cbc6bf354b69ce9928620b4a507949d1ab", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$int_in(r1, 0x5452, &(0x7f0000002480)=0x3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20600, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.820388961s ago: executing program 2 (id=3207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x1800087}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f000001cd00)=""/102400, 0x19000) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000002140)={0xa, 0x4e24, 0x1, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4, 0x1}, 0xc) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r7, 0x8004e500, &(0x7f0000000240)=r6) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000009400004803c0001800b00010065787468647200002c000280080004400000000308000740000000170800064000000001050002000000000008000340000040010900010073797a30000000000900020073797a32"], 0x94}}, 0xc084) 4.58234852s ago: executing program 7 (id=3208): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) accept4(0xffffffffffffffff, &(0x7f0000000080)=@alg, &(0x7f0000000100)=0x80, 0x80800) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019300)=""/102392, 0x18ff8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="740000000206010200000000000000000200000314000780080008400000003708000640000008000e0003006269746d61703a69"], 0x74}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x800) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8, 0x80800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000001000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000f30300007b8af9ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x8, &(0x7f0000000040)=""/8, 0x41000, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100002}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) 4.475106027s ago: executing program 4 (id=3209): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x83, 0xffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b4050000000000006110a400000000001f010000000000009500000000000000704fff7649b0983f42d01eccd13e9ec8a0a0ba6f00720c38fb17c6973e6361f5710065aaf625b96d173daf810865508ce8e9e1fa28e8bc8620294d24b6e609fa8a42156ea7394b8e0f09362f9e2576fd38cecff65abf747c96f88c9e0d54c135a1666ac39044329aaff9afb6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) openat$mixer(0xffffffffffffff9c, 0x0, 0x20200, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f00000000c0)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000005880), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x20, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20044045}, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @remote, 0x9}, 0x1c) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xfffffffffffffe26, &(0x7f0000000080)=[{&(0x7f00000000c0)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4044) bind$inet(r0, 0x0, 0x0) 3.8924606s ago: executing program 0 (id=3210): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket(0x10, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e0006000000080001", @ANYRES64=r1], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) close(0x3) close$binfmt(0xffffffffffffffff) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) syz_usbip_server_init(0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800645275c0fb4efba80000fcbfffff81162871351a542253aa28f63cbc1600000000950000000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 3.834827054s ago: executing program 7 (id=3211): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x13, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x1031c2, 0x12) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000100)=[0x0, 0x0], 0x0, 0xe2, 0x0, 0x0, 0x10, &(0x7f0000000280), 0x0, 0x0, 0x7d, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') 3.678605876s ago: executing program 7 (id=3212): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers_probe\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='pcspkr', 0x6) 3.447795882s ago: executing program 4 (id=3213): syz_init_net_socket$llc(0x1a, 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@delchain={0x3c, 0x64, 0x100, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xc}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000800008b350600280012800b00010065727370616e0000180002800500160002000000040012000500170008000000"], 0x48}, 0x1, 0x0, 0x0, 0x15}, 0xc084) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x8000, 0x3ff}) prctl$PR_SCHED_CORE(0x23, 0x3, 0x0, 0x0, &(0x7f0000000000)) mprotect(&(0x7f00000a9000/0x3000)=nil, 0x3000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x6000000d}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r7, &(0x7f0000000040)='\f\x00', 0x25, 0x800, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x400c800) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r8 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f00000000c0)=0xff) 3.221062201s ago: executing program 6 (id=3214): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x188}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x2080) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x238}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x0, 0xdd, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff}}], 0x1, 0x0, 0x0) 3.217049254s ago: executing program 4 (id=3215): socket$igmp(0x2, 0x3, 0x2) socket$inet_icmp(0x2, 0x2, 0x1) linkat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$rds(0x15, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) bind$rds(r3, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='dummy_hcd.0', 0xb) 3.152639139s ago: executing program 0 (id=3216): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x2f08, 0xe, 0x0, &(0x7f0000000380)="a162cef0563a20f5177241ee8f52", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) 2.522917613s ago: executing program 0 (id=3217): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) syz_usb_connect$uac3(0x0, 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100030000002082052b0040000102030109026e000301008004080b0002012530060904000000010130"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) fchdir(r2) socket(0x1, 0x3, 0x20000001) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="4c494e45202743442043617074757265272030303030303030303030303030303030303030300a5350454139a64b9f73cba0e2a22bf149324b455220274344204361707475726527203030303030303030fced707a3dbe9ee5303030300a564f4c554d4520274d"], 0xbb) close(r5) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x6, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r6 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r6, &(0x7f0000000680)=""/102396, 0x18ffc) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$eventfd(r7, 0x0, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, 0x0, 0x0) 2.155912069s ago: executing program 4 (id=3218): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000009b40)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x64, 0x18, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[]) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) r6 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r6) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffffe, 0x0, {0x0, 0x0, 0x0, 0x8000000000, 0xfffffffd, 0x0, {0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xc000, 0x0, 0x0, r3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xffffffffffffffda, 0x4, {0x5, 0x0, 0x3, 0x0, 0x0, 0x6, {0x2, 0x2, 0x8000000000, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x2000, 0x0, r2, 0xee00, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d2}, 0x4000000) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, 0x0, &(0x7f0000000040)) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r9, 0x6, 0x1e, 0x0, &(0x7f0000002000)) 1.648789924s ago: executing program 4 (id=3219): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) accept4(0xffffffffffffffff, &(0x7f0000000080)=@alg, &(0x7f0000000100)=0x80, 0x80800) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019300)=""/102392, 0x18ff8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400400010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010000000140035006d6163766c616e300000000000000000"], 0x34}}, 0x8000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8, 0x80800) socket$inet_smc(0x2b, 0x1, 0x0) 968.381847ms ago: executing program 2 (id=3220): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x88}, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvfrom(r2, &(0x7f00000005c0)=""/35, 0x23, 0x1, &(0x7f0000000600)=@in={0x2, 0x4e21, @multicast2}, 0x80) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000002700)) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000180)=0x1) 967.399841ms ago: executing program 7 (id=3221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004800}, 0x4000000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket(0x10, 0x80002, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2a, 0xffffffff, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x1, 0x0, 0x0, {@ip4=@multicast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x884}, 0x4cd0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x0, 0x0) recvmmsg(r8, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') ioctl$sock_SIOCGIFBR(r9, 0x8940, &(0x7f0000000340)=@generic={0x1, 0xb3, 0xd}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000380)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) timer_create(0x3, 0x0, &(0x7f00000005c0)) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@mmap={0x201, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r10}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 631.758088ms ago: executing program 4 (id=3222): socket$inet6(0xa, 0x2, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7c, 0x7fff7ffc}]}) symlink(0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@OVL_FILEID_V1={0x18, 0xf8, {'\x00', {0x0, 0xfb, 0x15, 0x0, 0x7, "81850cfdd65e9f6fee9f011d77c94c1f"}}}, &(0x7f0000002300), 0x600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="feffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000007a000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000002060b0100000000000000000000000005000100070000000900020073797a30000000000c00078008000640000000000500050002000000050004000000000016000300686173683a6e6574"], 0x5c}}, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601080008000000000000000000000500010006"], 0x1c}}, 0x8050) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) read(r6, &(0x7f0000000140)=""/87, 0x57) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000025300)=""/102392, 0x18ff8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) sendto$inet6(r3, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=3223): r0 = socket$kcm(0xa, 0x5, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, &(0x7f0000000580)="b3"}) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) prlimit64(r5, 0xd, &(0x7f0000000140)={0x2d, 0x10}, &(0x7f0000000300)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019300)=""/102378, 0xfffffffffffffe84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = socket(0x1d, 0x2, 0x6) r7 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000380)={'veth1_to_hsr\x00', 0x1000}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r8, 0x2, {0x2, 0x0, 0x1}, 0xfd}, 0x18) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}}, 0x44001) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9926}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x20000041) kernel console output (not intermixed with test programs): filter on device netdevsim1 [ 1054.621334][T16321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1055.147316][T16321] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1055.282388][T16321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1055.355872][T16545] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 1055.394578][T16321] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1055.407263][T16545] audit: out of memory in audit_log_start [ 1056.006373][T16558] ubi0: attaching mtd0 [ 1056.096066][T16558] ubi0: scanning is finished [ 1056.108273][T16558] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1057.180254][T16321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.246122][T16321] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.289973][ T29] audit: type=1400 audit(1785125387.325:1187): avc: denied { create } for pid=16567 comm="syz.6.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1057.312140][T16568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2807'. [ 1057.340652][T10118] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.347832][T10118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1057.358340][T10118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.365539][T10118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1057.472740][T16558] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1057.704499][ T5744] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1057.908872][ T29] audit: type=1400 audit(1785125387.945:1188): avc: denied { write } for pid=16540 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1058.408538][ T5744] usb 7-1: Using ep0 maxpacket: 32 [ 1058.461060][ T29] audit: type=1400 audit(1785125388.495:1189): avc: denied { connect } for pid=16567 comm="syz.6.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1058.499368][ T29] audit: type=1400 audit(1785125388.535:1190): avc: denied { getopt } for pid=16567 comm="syz.6.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1058.529664][T16591] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.536961][T16591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.545101][ T29] audit: type=1400 audit(1785125388.555:1191): avc: denied { connect } for pid=16567 comm="syz.6.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1058.572094][ T29] audit: type=1400 audit(1785125388.555:1192): avc: denied { name_connect } for pid=16567 comm="syz.6.2807" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1058.605350][ T29] audit: type=1400 audit(1785125388.585:1193): avc: denied { write } for pid=16592 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1058.690178][T16591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1058.702935][T16591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1058.815069][T16591] bridge1: left promiscuous mode [ 1058.822064][T16591] bridge2: left promiscuous mode [ 1058.829071][T16591] bridge3: left promiscuous mode [ 1058.866286][ T5724] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1058.972767][T16595] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1058.985018][T15759] lo speed is unknown, defaulting to 1000 [ 1058.991169][ T13] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.000155][T15759] syz2: Port: 1 Link DOWN [ 1059.005043][ T13] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.020073][ T13] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.047904][T16609] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2812'. [ 1059.057191][ T13] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.134432][T16612] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2812'. [ 1059.315978][T16321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1059.358569][T16321] veth0_vlan: entered promiscuous mode [ 1059.369973][T16321] veth1_vlan: entered promiscuous mode [ 1059.395277][T16321] veth0_macvtap: entered promiscuous mode [ 1059.406325][T16321] veth1_macvtap: entered promiscuous mode [ 1059.429080][T16321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1059.447856][T16321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1059.461648][ T6521] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.470658][ T6521] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.479913][ T6521] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.488625][ T6521] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1059.505576][ T5724] usb 5-1: Using ep0 maxpacket: 32 [ 1059.592070][T10117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.600668][T10117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.623320][T16595] usb 3-1: Using ep0 maxpacket: 32 [ 1059.646238][T10118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.654304][T10118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.824394][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1059.824411][ T29] audit: type=1400 audit(1785125389.865:1196): avc: denied { mounton } for pid=16321 comm="syz-executor" path="/root/syzkaller.SzKmW0/syz-tmp" dev="sda1" ino=2054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1059.855818][ T29] audit: type=1400 audit(1785125389.865:1197): avc: denied { mount } for pid=16321 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1059.882061][ T29] audit: type=1400 audit(1785125389.865:1198): avc: denied { mounton } for pid=16321 comm="syz-executor" path="/root/syzkaller.SzKmW0/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1059.909599][ T29] audit: type=1400 audit(1785125389.865:1199): avc: denied { mounton } for pid=16321 comm="syz-executor" path="/root/syzkaller.SzKmW0/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=71869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 1059.956785][ T29] audit: type=1400 audit(1785125389.865:1200): avc: denied { unmount } for pid=16321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1059.977577][ T29] audit: type=1400 audit(1785125389.915:1201): avc: denied { mounton } for pid=16321 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 1060.001069][ T29] audit: type=1400 audit(1785125389.915:1202): avc: denied { mount } for pid=16321 comm="syz-executor" name="/" dev="gadgetfs" ino=7011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1060.023610][T16620] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1060.030130][T16620] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1060.048376][T16620] vhci_hcd vhci_hcd.0: Device attached [ 1060.058108][T16621] vhci_hcd: connection closed [ 1060.061400][T10117] vhci_hcd vhci_hcd.0: stop threads [ 1060.066228][ T29] audit: type=1400 audit(1785125389.915:1203): avc: denied { mount } for pid=16321 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1060.094154][ T29] audit: type=1400 audit(1785125389.915:1204): avc: denied { mounton } for pid=16321 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 1060.095688][T10117] vhci_hcd vhci_hcd.0: release socket [ 1060.125257][T10117] vhci_hcd vhci_hcd.0: disconnect device [ 1060.302140][T16626] binder: BC_ATTEMPT_ACQUIRE not supported [ 1060.308001][T16626] binder: 16624:16626 ioctl c0306201 200000000c00 returned -22 [ 1060.468615][ T5744] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1060.488058][T16595] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1060.916548][T16595] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1060.942895][T16595] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1061.152457][ T5724] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1061.215151][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.486710][ T5744] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1061.510579][ T5744] usb 7-1: can't read configurations, error -71 [ 1061.520424][T16628] Invalid logical block size (1275) [ 1061.558357][ T5724] usb 5-1: Product: syz [ 1061.581925][ T5724] usb 5-1: Manufacturer: syz [ 1061.612957][ T5724] usb 5-1: SerialNumber: syz [ 1061.646412][T16595] usb 3-1: string descriptor 0 read error: -71 [ 1061.661759][ T5724] usb 5-1: config 0 descriptor?? [ 1061.674731][T16595] usb 3-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 1061.695334][ T5724] usb 5-1: can't set config #0, error -71 [ 1061.716203][ T5724] usb 5-1: USB disconnect, device number 62 [ 1061.723127][T16595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.776531][T16595] usb 3-1: can't set config #1, error -71 [ 1061.815999][T16595] usb 3-1: USB disconnect, device number 68 [ 1061.903976][ T5744] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1062.074015][ T5744] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1062.099698][ T5724] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1062.202403][ T5744] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1062.493486][ T5724] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.505687][ T5724] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1062.516197][ T5744] usb 7-1: New USB device found, idVendor=056a, idProduct=fe4f, bcdDevice= 0.00 [ 1062.518914][ T5724] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1062.527197][ T5744] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.600988][ T5744] usb 7-1: config 0 descriptor?? [ 1062.650975][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.715671][ T5724] usb 5-1: config 0 descriptor?? [ 1062.753583][ T5724] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1062.787303][ T5724] dvb-usb: bulk message failed: -22 (3/0) [ 1062.851591][ T5724] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1062.893967][ T5724] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1062.905446][ T5724] usb 5-1: media controller created [ 1062.914233][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1062.937788][ T5724] dvb-usb: bulk message failed: -22 (6/0) [ 1062.949251][ T5724] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1063.035965][T16576] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1063.050239][ T5744] wacom 0003:056A:FE4F.0006: unknown main item tag 0x0 [ 1063.067420][ T5744] wacom 0003:056A:FE4F.0006: unknown main item tag 0x0 [ 1063.088565][ T5744] wacom 0003:056A:FE4F.0006: unknown main item tag 0x0 [ 1063.109370][ T29] audit: type=1400 audit(1785125393.145:1205): avc: denied { setopt } for pid=16635 comm="syz.4.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1063.152177][ T5724] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 1063.169447][ T5724] dvb-usb: schedule remote query interval to 150 msecs. [ 1063.188711][ T5724] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1063.224247][T16576] usb 8-1: Using ep0 maxpacket: 16 [ 1063.231855][T16628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.256425][T16628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.258098][T16576] usb 8-1: config 1 has an invalid interface number: 105 but max is 0 [ 1063.267246][ T5724] usb 7-1: USB disconnect, device number 36 [ 1063.306687][T16576] usb 8-1: config 1 has no interface number 0 [ 1063.323483][T16576] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1063.351019][T16576] usb 8-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1063.368299][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1063.374224][ T10] dvb-usb: error while querying for an remote control event. [ 1063.381677][T16576] usb 8-1: config 1 interface 105 has no altsetting 0 [ 1063.407255][T16576] usb 8-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1063.424757][T16576] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1063.436683][T16576] usb 8-1: Product: syz [ 1063.441018][T16576] usb 8-1: Manufacturer: syz [ 1063.446617][T16576] usb 8-1: SerialNumber: syz [ 1063.457998][T16649] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1063.501763][T16649] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1063.513364][T16650] Cannot find del_set index 0 as target [ 1063.575724][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1063.581507][ T10] dvb-usb: error while querying for an remote control event. [ 1063.892763][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1063.898545][ T10] dvb-usb: error while querying for an remote control event. [ 1063.942556][T16649] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1063.952936][T16649] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1064.263843][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1064.271872][ T10] dvb-usb: error while querying for an remote control event. [ 1064.960563][ T5744] usb 5-1: USB disconnect, device number 63 [ 1065.032032][T16576] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1065.069207][ T5744] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1065.096410][T16576] aqc111 8-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1065.122360][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1065.122378][ T29] audit: type=1400 audit(1785125395.155:1211): avc: denied { remount } for pid=16647 comm="syz.7.2820" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1065.242124][T16669] binder: 16668:16669 ioctl c0306201 0 returned -14 [ 1065.305584][T16664] i2c i2c-0: new_device: Can't parse I2C address [ 1065.415767][T16576] aqc111 8-1:1.105 eth13: register 'aqc111' at usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, f0:40:ad:97:ea:c2 [ 1066.046920][T16576] usb 8-1: USB disconnect, device number 35 [ 1066.091753][T16576] aqc111 8-1:1.105 eth13: unregister 'aqc111' usb-dummy_hcd.7-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1066.412636][T16682] binder: BC_ATTEMPT_ACQUIRE not supported [ 1066.419663][T16682] binder: 16679:16682 ioctl c0306201 200000000c00 returned -22 [ 1067.897751][ T29] audit: type=1400 audit(1785125397.815:1212): avc: denied { unmount } for pid=9677 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1067.946908][T16576] aqc111 8-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1067.956452][T16684] tipc: Cannot configure node identity twice [ 1067.962996][T16576] aqc111 8-1:1.105 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1067.984088][T16576] aqc111 8-1:1.105 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1068.923513][ T29] audit: type=1400 audit(1785125398.105:1213): avc: denied { accept } for pid=16694 comm="syz.7.2833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1070.239553][T16701] input: syz1 as /devices/virtual/input/input32 [ 1070.611942][ T29] audit: type=1400 audit(1785125400.645:1214): avc: denied { ioctl } for pid=16711 comm="syz.6.2836" path="socket:[71540]" dev="sockfs" ino=71540 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1070.812679][T10118] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1072.081416][T16720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2837'. [ 1072.140634][ T29] audit: type=1400 audit(1785125400.945:1215): avc: denied { ioctl } for pid=16711 comm="syz.6.2836" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1072.220173][T16724] binder: 16723:16724 ioctl c0306201 0 returned -14 [ 1072.362595][ T29] audit: type=1400 audit(1785125402.395:1216): avc: denied { write } for pid=16681 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1072.731904][T10118] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1073.057244][ T29] audit: type=1400 audit(1785125403.095:1217): avc: denied { write } for pid=16734 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1073.420203][T16741] i2c i2c-0: new_device: Can't parse I2C address [ 1074.286600][T16748] syzkaller0: entered promiscuous mode [ 1074.321916][T16748] syzkaller0: entered allmulticast mode [ 1074.343856][T16730] Cannot find map_set index 135 as target [ 1075.066515][T16765] xt_connbytes: Forcing CT accounting to be enabled [ 1075.081022][ T29] audit: type=1400 audit(1785125405.095:1218): avc: denied { connect } for pid=16760 comm="syz.6.2849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1075.155659][T16765] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1075.423056][ T29] audit: type=1400 audit(1785125405.455:1219): avc: denied { setattr } for pid=16771 comm="syz.7.2850" path="socket:[76919]" dev="sockfs" ino=76919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1075.876161][ T29] audit: type=1400 audit(1785125405.865:1220): avc: denied { write } for pid=16743 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1075.969489][T16781] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 1076.102661][T16784] binder: 16783:16784 ioctl c0306201 0 returned -14 [ 1076.190280][ T29] audit: type=1400 audit(1785125406.225:1221): avc: denied { write } for pid=16785 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1076.492769][T16799] i2c i2c-0: new_device: Can't parse I2C address [ 1076.673788][T16807] netlink: 157 bytes leftover after parsing attributes in process `syz.2.2857'. [ 1076.715047][T16810] FAULT_INJECTION: forcing a failure. [ 1076.715047][T16810] name failslab, interval 1, probability 0, space 0, times 0 [ 1076.727728][T16810] CPU: 1 UID: 0 PID: 16810 Comm: syz.6.2858 Tainted: G L syzkaller #0 PREEMPT(full) [ 1076.727748][T16810] Tainted: [L]=SOFTLOCKUP [ 1076.727752][T16810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1076.727760][T16810] Call Trace: [ 1076.727766][T16810] [ 1076.727771][T16810] dump_stack_lvl+0x100/0x190 [ 1076.727791][T16810] should_fail_ex.cold+0x5/0xa [ 1076.727807][T16810] should_failslab+0xc2/0x120 [ 1076.727823][T16810] __kvmalloc_node_noprof+0x116/0x970 [ 1076.727839][T16810] ? percpu_ref_init+0xec/0x3f0 [ 1076.727852][T16810] ? io_alloc_cache_init+0x38/0x170 [ 1076.727869][T16810] io_alloc_cache_init+0x38/0x170 [ 1076.727883][T16810] io_uring_setup.cold+0x450/0x1cae [ 1076.727905][T16810] ? __pfx_io_uring_setup+0x10/0x10 [ 1076.727923][T16810] ? find_held_lock+0x2b/0x80 [ 1076.727942][T16810] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1076.727956][T16810] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1076.727980][T16810] ? ksys_write+0x1ac/0x250 [ 1076.727999][T16810] ? __pfx_ksys_write+0x10/0x10 [ 1076.728020][T16810] __x64_sys_io_uring_setup+0xc2/0x170 [ 1076.728039][T16810] do_syscall_64+0x115/0x870 [ 1076.728053][T16810] ? clear_bhb_loop+0x40/0x90 [ 1076.728068][T16810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.728081][T16810] RIP: 0033:0x7f5328d9de99 [ 1076.728092][T16810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.728104][T16810] RSP: 002b:00007f5329cbeee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1076.728121][T16810] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f5328d9de99 [ 1076.728129][T16810] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 0000000000000c41 [ 1076.728136][T16810] RBP: 0000200000000800 R08: 0000000000000000 R09: 0000000000000000 [ 1076.728143][T16810] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 1076.728151][T16810] R13: 0000200000000890 R14: 00007f5329cbefd8 R15: 0000000000000000 [ 1076.728167][T16810] [ 1077.002358][T16813] syzkaller0: entered promiscuous mode [ 1077.007842][T16813] syzkaller0: entered allmulticast mode [ 1078.406982][ T29] audit: type=1400 audit(1785125408.445:1222): avc: denied { name_bind } for pid=16826 comm="syz.4.2864" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1078.638217][ T24] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1078.853950][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 1078.870497][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.898833][ T24] usb 8-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1078.962498][ T24] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1078.988168][ T24] usb 8-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1079.025276][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1079.414342][ T24] usb 8-1: config 0 descriptor?? [ 1080.035856][ T29] audit: type=1400 audit(1785125410.065:1223): avc: denied { setopt } for pid=16840 comm="syz.0.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1080.470238][ T24] usbhid 8-1:0.0: can't add hid device: -71 [ 1080.484766][ T29] audit: type=1400 audit(1785125410.515:1224): avc: denied { write } for pid=16840 comm="syz.0.2868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1080.507366][ T24] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1080.558644][ T24] usb 8-1: USB disconnect, device number 36 [ 1080.825865][T16847] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 1080.913294][T16835] Cannot find map_set index 135 as target [ 1081.192611][ T29] audit: type=1400 audit(1785125411.225:1225): avc: denied { ioctl } for pid=16852 comm="syz.2.2871" path="socket:[78078]" dev="sockfs" ino=78078 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1081.452397][ T29] audit: type=1400 audit(1785125411.485:1226): avc: denied { mount } for pid=16859 comm="syz.6.2873" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 1081.572144][T16863] syzkaller0: entered promiscuous mode [ 1081.578979][T16863] syzkaller0: entered allmulticast mode [ 1081.785757][ T24] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1082.017881][ T24] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 1082.253812][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1082.372405][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1082.444757][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1082.478906][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1082.543603][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1082.585339][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1082.597559][T16879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2876'. [ 1082.616789][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1082.650734][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1082.721439][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1082.780743][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1082.809861][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1082.855690][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1082.883328][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1082.930930][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1082.963516][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1082.989143][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1083.027160][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1083.074109][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1083.099714][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1083.134488][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1083.188009][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1083.230169][ T24] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1083.299274][ T24] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1083.322068][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1083.357784][ T24] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1083.450574][ T24] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1083.743118][ T24] usb 7-1: Product: syz [ 1083.758288][ T24] usb 7-1: Manufacturer: syz [ 1083.778202][ T24] usb 7-1: SerialNumber: syz [ 1083.817611][ T24] usb 7-1: config 0 descriptor?? [ 1083.860796][ T24] yurex 7-1:0.0: Could not find endpoints [ 1084.010988][T16893] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2881'. [ 1084.091023][ T24] usb 7-1: USB disconnect, device number 37 [ 1084.121305][T16893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2881'. [ 1084.454149][T16576] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1084.612521][T16902] ubi0: attaching mtd0 [ 1084.636569][T16576] usb 8-1: Using ep0 maxpacket: 16 [ 1084.646834][T16902] ubi0: scanning is finished [ 1084.653917][T16576] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.668944][T16902] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1084.684894][T16576] usb 8-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1084.731760][T16576] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1084.757130][T16576] usb 8-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1084.766955][T16576] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.791520][T16576] usb 8-1: config 0 descriptor?? [ 1084.834861][T16902] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1084.972045][T16904] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1084.978596][T16904] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1085.035808][T16904] vhci_hcd vhci_hcd.0: Device attached [ 1085.104519][T16905] vhci_hcd: connection closed [ 1085.108868][T10117] vhci_hcd vhci_hcd.6: stop threads [ 1085.151650][T10117] vhci_hcd vhci_hcd.6: release socket [ 1085.178951][T10117] vhci_hcd vhci_hcd.6: disconnect device [ 1085.191399][T16910] syzkaller0: entered promiscuous mode [ 1085.210080][T16910] syzkaller0: entered allmulticast mode [ 1085.235290][ T24] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1085.741460][T16576] usbhid 8-1:0.0: can't add hid device: -71 [ 1085.755817][T16576] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1085.766640][T16576] usb 8-1: USB disconnect, device number 37 [ 1085.809692][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1085.827559][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1085.846454][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1085.855255][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1085.863103][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1086.899687][T16923] netlink: zone id is out of range [ 1086.912662][T16923] netlink: get zone limit has 4 unknown bytes [ 1087.832861][ T6822] smbdirect: ib_dev[syz1] removed [ 1087.840156][T15759] syz1: Port: 1 Link DOWN [ 1088.032171][ T5618] Bluetooth: hci3: command tx timeout [ 1088.176593][T16942] EXT4-fs (loop0): unable to read superblock [ 1088.494270][ T29] audit: type=1400 audit(1785125418.205:1227): avc: denied { mounton } for pid=16935 comm="syz.0.2892" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1089.074537][T16952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.087958][T16952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.123137][T16914] lo speed is unknown, defaulting to 1000 [ 1089.790050][T16959] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1089.796599][T16959] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1089.895126][T16959] vhci_hcd vhci_hcd.0: Device attached [ 1089.937519][T16960] vhci_hcd: connection closed [ 1089.938119][T12983] vhci_hcd vhci_hcd.2: stop threads [ 1089.963063][T12983] vhci_hcd vhci_hcd.2: release socket [ 1089.975881][T12983] vhci_hcd vhci_hcd.2: disconnect device [ 1090.115304][ T5618] Bluetooth: hci3: command tx timeout [ 1090.335475][ T6521] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1090.383393][ T6521] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.105437][T16576] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1091.394121][ T6521] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1091.413998][ T6521] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.486732][T16981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.489957][T16576] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1091.505701][T16981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.945661][T16576] usb 7-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1092.046983][T16576] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.076505][T16576] usb 7-1: config 0 descriptor?? [ 1092.100124][T16970] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1092.129470][ T6521] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1092.164930][ T6521] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.233969][ T5618] Bluetooth: hci3: command tx timeout [ 1092.295711][T16976] Cannot find map_set index 135 as target [ 1092.521654][ T6521] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1092.533707][ T6521] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1092.583109][T16914] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.596360][T16914] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.614301][T16914] bridge_slave_0: entered allmulticast mode [ 1092.644588][T16914] bridge_slave_0: entered promiscuous mode [ 1092.667479][T16576] kye 0003:0458:0138.0007: unknown main item tag 0x0 [ 1092.676794][T16914] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.683850][T16914] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.698418][T16576] kye 0003:0458:0138.0007: unknown main item tag 0x0 [ 1092.712502][T16914] bridge_slave_1: entered allmulticast mode [ 1092.725552][T16914] bridge_slave_1: entered promiscuous mode [ 1092.902546][T16576] kye 0003:0458:0138.0007: unknown main item tag 0x0 [ 1092.954967][T16576] kye 0003:0458:0138.0007: unknown main item tag 0x0 [ 1093.125915][T16576] kye 0003:0458:0138.0007: unknown main item tag 0x0 [ 1093.142327][T16576] kye 0003:0458:0138.0007: unknown main item tag 0x0 [ 1093.177762][T16576] kye 0003:0458:0138.0007: unknown main item tag 0x0 [ 1093.216452][T16914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.235884][T16576] kye 0003:0458:0138.0007: unknown main item tag 0x0 [ 1093.262682][T16576] kye 0003:0458:0138.0007: unknown main item tag 0x0 [ 1093.273987][T16914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.295580][T16576] kye 0003:0458:0138.0007: unknown main item tag 0x0 [ 1093.438209][T16576] kye 0003:0458:0138.0007: hidraw0: USB HID v7b.fd Device [HID 0458:0138] on usb-dummy_hcd.6-1/input0 [ 1093.537881][T16576] usb 7-1: USB disconnect, device number 38 [ 1093.546526][T16914] team0: Port device team_slave_0 added [ 1093.623407][T16914] team0: Port device team_slave_1 added [ 1093.716629][T17000] fido_id[17000]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 1093.784675][ T29] audit: type=1400 audit(1785125423.815:1228): avc: denied { map } for pid=17001 comm="syz.6.2908" path="socket:[78430]" dev="sockfs" ino=78430 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1094.289123][ T5618] Bluetooth: hci3: command tx timeout [ 1094.318549][T16914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.349204][T16914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1094.414595][ T29] audit: type=1400 audit(1785125424.445:1229): avc: denied { ioctl } for pid=17005 comm="syz.2.2909" path="socket:[77381]" dev="sockfs" ino=77381 ioctlcmd=0xf513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 1094.458064][T16914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.936442][T16914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.955891][T16914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.011920][T16914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.257702][ T29] audit: type=1400 audit(1785125425.295:1230): avc: denied { create } for pid=17014 comm="syz.2.2912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1095.292635][T16914] hsr_slave_0: entered promiscuous mode [ 1095.308567][T16914] hsr_slave_1: entered promiscuous mode [ 1095.682940][T16914] debugfs: 'hsr0' already exists in 'hsr' [ 1095.718835][T16914] Cannot create hsr debugfs directory [ 1095.745193][ T6521] bridge_slave_1: left allmulticast mode [ 1095.767775][ T6521] bridge_slave_1: left promiscuous mode [ 1095.802718][ T6521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.816947][T17022] EXT4-fs (loop0): unable to read superblock [ 1095.846564][ T6521] bridge_slave_0: left allmulticast mode [ 1095.865173][ T6521] bridge_slave_0: left promiscuous mode [ 1095.865350][ T6521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.539029][ T6521] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 1096.922662][ T6521] bond1 (unregistering): Released all slaves [ 1096.975042][ T6521] bond2 (unregistering): Released all slaves [ 1097.003799][ T6521] bond3 (unregistering): Released all slaves [ 1097.615797][ T6521] tipc: Left network mode [ 1098.174198][ T9319] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1098.445243][T17051] FAULT_INJECTION: forcing a failure. [ 1098.445243][T17051] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.480512][T17051] CPU: 0 UID: 0 PID: 17051 Comm: syz.7.2918 Tainted: G L syzkaller #0 PREEMPT(full) [ 1098.480556][T17051] Tainted: [L]=SOFTLOCKUP [ 1098.480564][T17051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1098.480576][T17051] Call Trace: [ 1098.480583][T17051] [ 1098.480592][T17051] dump_stack_lvl+0x100/0x190 [ 1098.480624][T17051] should_fail_ex.cold+0x5/0xa [ 1098.480652][T17051] should_failslab+0xc2/0x120 [ 1098.480678][T17051] __kmalloc_cache_noprof+0x91/0x6c0 [ 1098.480712][T17051] ? fscontext_alloc_log+0x4a/0x1b0 [ 1098.480746][T17051] fscontext_alloc_log+0x4a/0x1b0 [ 1098.480779][T17051] __x64_sys_fsopen+0x159/0x220 [ 1098.480811][T17051] do_syscall_64+0x115/0x870 [ 1098.480835][T17051] ? clear_bhb_loop+0x40/0x90 [ 1098.480863][T17051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.480886][T17051] RIP: 0033:0x7f415a39de99 [ 1098.480905][T17051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.480927][T17051] RSP: 002b:00007f415b2df028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1098.480947][T17051] RAX: ffffffffffffffda RBX: 00007f415a625fa0 RCX: 00007f415a39de99 [ 1098.480961][T17051] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 1098.480975][T17051] RBP: 00007f415b2df090 R08: 0000000000000000 R09: 0000000000000000 [ 1098.480989][T17051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.481002][T17051] R13: 00007f415a626038 R14: 00007f415a625fa0 R15: 00007ffc968cdcf8 [ 1098.481034][T17051] [ 1098.584095][ T9319] usb 3-1: Using ep0 maxpacket: 16 [ 1098.992737][ T9319] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.004027][ T9319] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1099.077495][ T9319] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1099.084571][ T9319] usb 3-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1099.094159][ T9319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.106122][ T9319] usb 3-1: config 0 descriptor?? [ 1099.558078][ T29] audit: type=1400 audit(1785125429.595:1231): avc: denied { write } for pid=17037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1100.072418][ T9319] usbhid 3-1:0.0: can't add hid device: -71 [ 1100.100569][ T9319] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1100.180830][ T9319] usb 3-1: USB disconnect, device number 69 [ 1100.231072][ T29] audit: type=1400 audit(1785125430.225:1232): avc: denied { write } for pid=17066 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1100.375731][ T6521] hsr_slave_0: left promiscuous mode [ 1100.396463][ T6521] hsr_slave_1: left promiscuous mode [ 1100.407468][ T6521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1100.424711][ T6521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1100.598122][ T6521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1100.605676][ T6521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1100.757336][T17072] EXT4-fs (loop0): unable to read superblock [ 1101.072449][ T6521] veth1_macvtap: left promiscuous mode [ 1101.077978][ T6521] veth0_macvtap: left promiscuous mode [ 1101.083546][ T6521] veth1_vlan: left promiscuous mode [ 1101.088860][ T6521] veth0_vlan: left promiscuous mode [ 1103.132862][T17095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.147620][T17095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.645954][T15759] usb 8-1: new full-speed USB device number 38 using dummy_hcd [ 1103.717160][ T6521] team0 (unregistering): Port device team_slave_1 removed [ 1103.731193][ T6521] team0 (unregistering): Port device team_slave_0 removed [ 1103.816045][T15759] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.832533][T15759] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1103.856295][T15759] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1103.873321][T15759] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.951915][T15759] usb 8-1: config 0 descriptor?? [ 1103.986371][T15759] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1104.016049][T15759] dvb-usb: bulk message failed: -22 (3/0) [ 1104.037711][T15759] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1104.082903][T15759] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1104.124361][T15759] usb 8-1: media controller created [ 1104.146624][T15759] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1104.482864][T15759] dvb-usb: bulk message failed: -22 (6/0) [ 1104.674814][ T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1104.705759][T15759] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1104.861655][T15759] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input38 [ 1104.912812][T15759] dvb-usb: schedule remote query interval to 150 msecs. [ 1105.007503][T15759] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1105.163959][T15759] dvb-usb: bulk message failed: -22 (1/0) [ 1105.189953][ T29] audit: type=1400 audit(1785125435.215:1233): avc: denied { write } for pid=17105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1105.215610][T15759] dvb-usb: error while querying for an remote control event. [ 1105.271873][ T29] audit: type=1400 audit(1785125435.305:1234): avc: denied { listen } for pid=17124 comm="syz.6.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1105.309235][ T29] audit: type=1400 audit(1785125435.305:1235): avc: denied { write } for pid=17124 comm="syz.6.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1105.314248][T17129] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2934'. [ 1105.371487][ T29] audit: type=1400 audit(1785125435.395:1236): avc: denied { write } for pid=17130 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1105.395084][T15759] dvb-usb: bulk message failed: -22 (1/0) [ 1105.405874][T15759] dvb-usb: error while querying for an remote control event. [ 1105.411375][ T6521] IPVS: stop unused estimator thread 0... [ 1105.527834][T16914] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1105.565452][T15759] dvb-usb: bulk message failed: -22 (1/0) [ 1105.577834][T15759] dvb-usb: error while querying for an remote control event. [ 1105.586196][T16914] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1105.602742][T16914] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1105.624582][T16914] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1105.649012][T16914] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1105.702560][T16914] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1105.730343][T16914] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1105.763964][T15759] dvb-usb: bulk message failed: -22 (1/0) [ 1105.776538][T16914] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1105.787623][T15759] dvb-usb: error while querying for an remote control event. [ 1105.816845][ T29] audit: type=1400 audit(1785125435.845:1237): avc: denied { write } for pid=17135 comm="syz.6.2937" name="route" dev="proc" ino=4026534334 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1105.908810][ T29] audit: type=1400 audit(1785125435.855:1238): avc: denied { create } for pid=16914 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1105.983423][ T29] audit: type=1400 audit(1785125435.855:1239): avc: denied { write } for pid=16914 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1106.005338][ T5724] dvb-usb: bulk message failed: -22 (1/0) [ 1106.012816][ T5724] dvb-usb: error while querying for an remote control event. [ 1106.053829][ T29] audit: type=1400 audit(1785125435.875:1240): avc: denied { read } for pid=16914 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1106.113804][ T29] audit: type=1400 audit(1785125435.915:1241): avc: denied { read write } for pid=17135 comm="syz.6.2937" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1106.143244][T16914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.154034][ T9319] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1106.178909][T16914] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.194868][T10813] dvb-usb: bulk message failed: -22 (1/0) [ 1106.200724][T10813] dvb-usb: error while querying for an remote control event. [ 1106.215098][ T29] audit: type=1400 audit(1785125435.925:1242): avc: denied { open } for pid=17135 comm="syz.6.2937" path="/dev/raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1106.270453][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.277607][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.319281][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.326397][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.374084][ T9319] usb 7-1: Using ep0 maxpacket: 16 [ 1106.389918][ T9319] usb 7-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1106.394361][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 1106.404765][ T9319] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.404955][ T9319] usb 7-1: Product: syz [ 1106.479187][ T10] dvb-usb: error while querying for an remote control event. [ 1106.588167][T10813] usb 8-1: USB disconnect, device number 38 [ 1106.861615][ T9319] usb 7-1: Manufacturer: syz [ 1106.867030][ T9319] usb 7-1: SerialNumber: syz [ 1106.884876][ T9319] usb 7-1: config 0 descriptor?? [ 1106.902141][ T9319] usb 7-1: selecting invalid altsetting 1 [ 1106.908477][ T9319] technisat-usb2: could not set alternate setting to 0 [ 1107.141371][T17159] i2c i2c-0: new_device: Can't parse I2C address [ 1107.164925][T10813] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1107.439615][ T9319] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in cold state, will try to load a firmware [ 1107.493036][ T9319] usb 7-1: Direct firmware load for dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw failed with error -2 [ 1107.524696][T17132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1108.284936][ T9319] usb 7-1: Falling back to sysfs fallback for: dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw [ 1109.159740][T16914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1109.551701][T16914] veth0_vlan: entered promiscuous mode [ 1109.588200][T16914] veth1_vlan: entered promiscuous mode [ 1109.701617][T17199] EXT4-fs (loop0): unable to read superblock [ 1110.106674][T16914] veth0_macvtap: entered promiscuous mode [ 1110.131628][T16914] veth1_macvtap: entered promiscuous mode [ 1110.137623][ T24] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1110.170018][T16914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1110.201408][T16914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1110.217161][T17207] netlink: 4664 bytes leftover after parsing attributes in process `syz.6.2946'. [ 1110.274459][ T6697] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.331752][ T6697] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.360618][ T5618] Bluetooth: hci7: unexpected event for opcode 0x1009 [ 1110.410043][T17210] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2948'. [ 1110.427931][ T6697] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.472858][ T6697] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.550560][T17203] lo speed is unknown, defaulting to 1000 [ 1110.927026][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 1110.940017][ T29] audit: type=1400 audit(1785125440.965:1284): avc: denied { read write } for pid=17211 comm="syz.0.2947" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1111.071376][ T29] audit: type=1400 audit(1785125440.965:1285): avc: denied { open } for pid=17211 comm="syz.0.2947" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1111.143805][T17206] lo speed is unknown, defaulting to 1000 [ 1111.176735][ T29] audit: type=1400 audit(1785125441.215:1286): avc: denied { ioctl } for pid=17211 comm="syz.0.2947" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1111.410222][ T6410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.422758][ T6410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.710648][ T29] audit: type=1400 audit(1785125441.745:1287): avc: denied { mount } for pid=17219 comm="syz.6.2950" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 1112.249600][ T6824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.281524][ T6824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1112.360122][ T29] audit: type=1400 audit(1785125442.395:1288): avc: denied { mounton } for pid=16914 comm="syz-executor" path="/root/syzkaller.3UwPYq/syz-tmp" dev="sda1" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1112.473248][ T29] audit: type=1400 audit(1785125442.395:1289): avc: denied { mount } for pid=16914 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1112.550093][ T29] audit: type=1400 audit(1785125442.395:1290): avc: denied { mount } for pid=16914 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1112.667501][ T29] audit: type=1400 audit(1785125442.445:1291): avc: denied { mounton } for pid=16914 comm="syz-executor" path="/root/syzkaller.3UwPYq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1112.775831][ T29] audit: type=1400 audit(1785125442.445:1293): avc: denied { ioctl } for pid=17223 comm="syz.2.2951" path="/dev/video2" dev="devtmpfs" ino=935 ioctlcmd=0x5605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1112.821460][T17228] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 1112.869750][ T29] audit: type=1400 audit(1785125442.445:1294): avc: denied { read } for pid=17223 comm="syz.2.2951" dev="nsfs" ino=4026532806 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1113.538697][T17239] netlink: 4664 bytes leftover after parsing attributes in process `syz.2.2956'. [ 1115.556998][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.563425][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.748145][T17256] i2c i2c-0: new_device: Can't parse I2C address [ 1116.050005][T17261] i2c i2c-0: new_device: Can't parse I2C address [ 1116.113681][T17262] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 1116.385718][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 1116.385733][ T29] audit: type=1400 audit(1785125446.425:1330): avc: denied { bind } for pid=17263 comm="syz.0.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1116.413259][ T29] audit: type=1400 audit(1785125446.445:1331): avc: denied { setopt } for pid=17263 comm="syz.0.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1116.439215][ T29] audit: type=1400 audit(1785125446.445:1332): avc: denied { accept } for pid=17263 comm="syz.0.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1116.471476][ T29] audit: type=1400 audit(1785125446.445:1333): avc: denied { read } for pid=17263 comm="syz.0.2965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1116.954007][ T29] audit: type=1400 audit(1785125446.985:1334): avc: denied { create } for pid=17268 comm="syz.6.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1117.292546][ T29] audit: type=1400 audit(1785125446.985:1335): avc: denied { bind } for pid=17268 comm="syz.6.2966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1117.385760][ T29] audit: type=1400 audit(1785125447.035:1336): avc: denied { ioctl } for pid=17268 comm="syz.6.2966" path="socket:[79531]" dev="sockfs" ino=79531 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1117.528453][ T29] audit: type=1400 audit(1785125447.565:1337): avc: denied { create } for pid=17276 comm="syz.4.2970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1118.166354][ T29] audit: type=1400 audit(1785125448.195:1338): avc: denied { checkpoint_restore } for pid=17272 comm="syz.2.2968" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1118.221983][ T29] audit: type=1400 audit(1785125448.195:1339): avc: denied { execute } for pid=17272 comm="syz.2.2968" name="file0" dev="tmpfs" ino=3230 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1118.490483][T17288] EXT4-fs (loop6): unable to read superblock [ 1119.191010][T17292] FAULT_INJECTION: forcing a failure. [ 1119.191010][T17292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1119.204690][T17292] CPU: 0 UID: 0 PID: 17292 Comm: syz.4.2972 Tainted: G L syzkaller #0 PREEMPT(full) [ 1119.204709][T17292] Tainted: [L]=SOFTLOCKUP [ 1119.204713][T17292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1119.204721][T17292] Call Trace: [ 1119.204725][T17292] [ 1119.204730][T17292] dump_stack_lvl+0x100/0x190 [ 1119.204750][T17292] should_fail_ex.cold+0x5/0xa [ 1119.204767][T17292] _copy_from_user+0x2e/0xd0 [ 1119.204784][T17292] __x64_sys_signalfd4+0x125/0x1d0 [ 1119.204806][T17292] ? __pfx___x64_sys_signalfd4+0x10/0x10 [ 1119.204828][T17292] do_syscall_64+0x115/0x870 [ 1119.204843][T17292] ? clear_bhb_loop+0x40/0x90 [ 1119.204858][T17292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.204871][T17292] RIP: 0033:0x7fd07499de99 [ 1119.204882][T17292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1119.204893][T17292] RSP: 002b:00007fd0757d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 1119.204906][T17292] RAX: ffffffffffffffda RBX: 00007fd074c25fa0 RCX: 00007fd07499de99 [ 1119.204914][T17292] RDX: 0000000000000008 RSI: 0000200000000140 RDI: 000000000000000a [ 1119.204921][T17292] RBP: 00007fd0757d6090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.204929][T17292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1119.204936][T17292] R13: 00007fd074c26038 R14: 00007fd074c25fa0 R15: 00007ffd520df888 [ 1119.204952][T17292] [ 1119.981885][T17298] netlink: 'syz.4.2974': attribute type 1 has an invalid length. [ 1120.468130][T17305] i2c i2c-0: new_device: Can't parse I2C address [ 1120.650822][T17310] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 1122.685582][T17333] IPVS: persistence engine module ip_vs_pe_ not found [ 1122.916982][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1122.917000][ T29] audit: type=1400 audit(1785125452.955:1344): avc: denied { read write } for pid=17342 comm="syz.2.2989" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1123.291842][ T29] audit: type=1400 audit(1785125452.955:1345): avc: denied { open } for pid=17342 comm="syz.2.2989" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1123.649409][T17353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1123.683932][T17353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.725146][ T29] audit: type=1400 audit(1785125452.955:1346): avc: denied { map } for pid=17342 comm="syz.2.2989" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1123.901638][ T29] audit: type=1400 audit(1785125453.735:1347): avc: denied { create } for pid=17342 comm="syz.2.2989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1124.146413][T17357] syzkaller0: entered promiscuous mode [ 1124.170380][T17357] syzkaller0: entered allmulticast mode [ 1124.203799][ T29] audit: type=1400 audit(1785125454.235:1348): avc: denied { create } for pid=17356 comm="syz.7.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1124.326276][ T29] audit: type=1400 audit(1785125454.285:1349): avc: denied { write } for pid=17356 comm="syz.7.2993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1124.464583][ T29] audit: type=1400 audit(1785125454.505:1350): avc: denied { ioctl } for pid=17361 comm="syz-executor" path="socket:[79683]" dev="sockfs" ino=79683 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1124.491272][T16508] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1124.503211][T16508] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1124.512687][T16508] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1124.534828][T16508] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1124.544196][T16508] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1124.598784][ T29] audit: type=1400 audit(1785125454.595:1351): avc: denied { mounton } for pid=17361 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1125.740449][ T6824] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.800460][ T5618] Bluetooth: hci0: command tx timeout [ 1125.827166][ T29] audit: type=1400 audit(1785125455.865:1352): avc: denied { shutdown } for pid=17364 comm="syz.0.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1125.927193][ T29] audit: type=1400 audit(1785125455.895:1353): avc: denied { getopt } for pid=17364 comm="syz.0.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1126.639843][ T5618] Bluetooth: hci1: command tx timeout [ 1126.747866][ T6824] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.897549][T17361] lo speed is unknown, defaulting to 1000 [ 1126.985120][T17390] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2997'. [ 1127.069908][ T6824] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.674381][ T6824] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 1127.686424][ T6824] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.018431][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1128.018449][ T29] audit: type=1400 audit(1785125458.055:1355): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 1128.137266][ T29] audit: type=1400 audit(1785125458.175:1356): avc: denied { search } for pid=5271 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1128.223585][ T29] audit: type=1400 audit(1785125458.175:1357): avc: denied { search } for pid=5271 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1128.324675][ T29] audit: type=1400 audit(1785125458.175:1358): avc: denied { search } for pid=5271 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1128.381689][T17410] binder: BC_ATTEMPT_ACQUIRE not supported [ 1128.387692][T17410] binder: 17407:17410 ioctl c0306201 200000000c00 returned -22 [ 1128.614642][ T29] audit: type=1400 audit(1785125458.175:1359): avc: denied { read } for pid=5271 comm="dhcpcd" name="n58" dev="tmpfs" ino=13408 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1128.682880][ T5618] Bluetooth: hci1: command tx timeout [ 1128.910206][ T29] audit: type=1400 audit(1785125458.175:1360): avc: denied { open } for pid=5271 comm="dhcpcd" path="/run/udev/data/n58" dev="tmpfs" ino=13408 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1129.124100][ T29] audit: type=1400 audit(1785125458.175:1361): avc: denied { getattr } for pid=5271 comm="dhcpcd" path="/run/udev/data/n58" dev="tmpfs" ino=13408 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 1129.161531][ T6824] bridge_slave_1: left allmulticast mode [ 1129.167590][ T6824] bridge_slave_1: left promiscuous mode [ 1129.173548][ T6824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.270501][ T6824] bridge_slave_0: left allmulticast mode [ 1129.294516][ T29] audit: type=1400 audit(1785125458.245:1362): avc: denied { write } for pid=17407 comm="syz.0.3004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1129.328345][ T6824] bridge_slave_0: left promiscuous mode [ 1129.342352][ T6824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.359365][ T29] audit: type=1400 audit(1785125458.295:1363): avc: denied { ioctl } for pid=17387 comm="syz.7.3000" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1129.394123][T17419] Invalid logical block size (1275) [ 1129.462979][ T29] audit: type=1400 audit(1785125458.295:1364): avc: denied { read } for pid=17387 comm="syz.7.3000" path="socket:[90150]" dev="sockfs" ino=90150 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1129.533326][T17428] FAULT_INJECTION: forcing a failure. [ 1129.533326][T17428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1129.568369][T17428] CPU: 0 UID: 0 PID: 17428 Comm: syz.0.3008 Tainted: G L syzkaller #0 PREEMPT(full) [ 1129.568406][T17428] Tainted: [L]=SOFTLOCKUP [ 1129.568414][T17428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1129.568427][T17428] Call Trace: [ 1129.568435][T17428] [ 1129.568444][T17428] dump_stack_lvl+0x100/0x190 [ 1129.568478][T17428] should_fail_ex.cold+0x5/0xa [ 1129.568506][T17428] _copy_from_user+0x2e/0xd0 [ 1129.568536][T17428] kstrtouint_from_user+0xd6/0x1d0 [ 1129.568560][T17428] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1129.568582][T17428] ? __lock_acquire+0x49f/0x1a40 [ 1129.568622][T17428] proc_fail_nth_write+0x83/0x220 [ 1129.568658][T17428] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1129.568699][T17428] vfs_write+0x2aa/0x1050 [ 1129.568733][T17428] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1129.568769][T17428] ? __pfx_vfs_write+0x10/0x10 [ 1129.568802][T17428] ? __fget_files+0x215/0x3d0 [ 1129.568832][T17428] ? __fget_files+0x21f/0x3d0 [ 1129.568863][T17428] ksys_write+0x12a/0x250 [ 1129.568896][T17428] ? __pfx_ksys_write+0x10/0x10 [ 1129.568937][T17428] do_syscall_64+0x115/0x870 [ 1129.568961][T17428] ? clear_bhb_loop+0x40/0x90 [ 1129.568989][T17428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.569012][T17428] RIP: 0033:0x7f6d1695e6ce [ 1129.569031][T17428] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1129.569052][T17428] RSP: 002b:00007f6d178cdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1129.569074][T17428] RAX: ffffffffffffffda RBX: 00007f6d178ce6c0 RCX: 00007f6d1695e6ce [ 1129.569090][T17428] RDX: 0000000000000001 RSI: 00007f6d178ce0a0 RDI: 0000000000000004 [ 1129.569103][T17428] RBP: 00007f6d178ce090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.569117][T17428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1129.569131][T17428] R13: 00007f6d16c26038 R14: 00007f6d16c25fa0 R15: 00007fffa0fa86b8 [ 1129.569162][T17428] [ 1130.155179][T17441] EXT4-fs (loop0): unable to read superblock [ 1130.462858][ T5724] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1130.471532][T15759] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1130.625445][T15759] usb 8-1: Using ep0 maxpacket: 8 [ 1130.632194][T15759] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.645028][ T5724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.656165][T15759] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1130.670462][ T5724] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1130.691005][T15759] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.708252][T15759] usb 8-1: config 0 descriptor?? [ 1130.729871][ T5724] usb 5-1: New USB device found, idVendor=056a, idProduct=fe4f, bcdDevice= 0.00 [ 1130.739938][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.751855][T15759] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1130.764040][ T5618] Bluetooth: hci1: command tx timeout [ 1130.776913][ T5724] usb 5-1: config 0 descriptor?? [ 1130.918868][T17450] i2c i2c-0: new_device: Can't parse I2C address [ 1131.038251][ T6824] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1131.204949][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3012'. [ 1131.217076][T15759] gspca_vc032x: reg_w err -71 [ 1131.225635][T15759] vc032x 8-1:0.0: probe with driver vc032x failed with error -71 [ 1131.239958][ T5724] hid_parser_main: 470 callbacks suppressed [ 1131.239982][ T5724] wacom 0003:056A:FE4F.0008: unknown main item tag 0x0 [ 1131.257679][T15759] usb 8-1: USB disconnect, device number 39 [ 1131.266676][ T5724] wacom 0003:056A:FE4F.0008: unknown main item tag 0x0 [ 1131.299964][ T6824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.301803][ T5724] wacom 0003:056A:FE4F.0008: unknown main item tag 0x0 [ 1131.328074][ T6824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.351477][ T6824] bond0 (unregistering): Released all slaves [ 1131.380862][ T6824] bond1 (unregistering): Released all slaves [ 1131.456762][T15759] usb 5-1: USB disconnect, device number 64 [ 1131.520164][ T5271] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1131.606739][ T6824] tipc: Left network mode [ 1131.615153][T17361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1131.624428][T17361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.651327][T17361] bridge_slave_0: entered allmulticast mode [ 1131.663115][T17361] bridge_slave_0: entered promiscuous mode [ 1131.702663][T17361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1131.715000][T17361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.738360][T17361] bridge_slave_1: entered allmulticast mode [ 1131.767432][T17361] bridge_slave_1: entered promiscuous mode [ 1132.343216][ T6824] IPVS: stopping master sync thread 7258 ... [ 1132.395912][T17361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1132.449956][T17361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1132.844078][ T5618] Bluetooth: hci1: command tx timeout [ 1133.001476][T17361] team0: Port device team_slave_0 added [ 1133.092591][T17361] team0: Port device team_slave_1 added [ 1133.519773][T17361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.552085][T17361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1133.675064][T17361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.738735][ T6824] batadv0: left promiscuous mode [ 1133.761108][ T6824] hsr_slave_0: left promiscuous mode [ 1133.797548][ T6824] hsr_slave_1: left promiscuous mode [ 1133.810060][ T6824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.833365][ T6824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.851787][ T6824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1133.871572][ T6824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.906604][ T6824] veth1_macvtap: left promiscuous mode [ 1133.917575][ T6824] veth0_macvtap: left promiscuous mode [ 1133.938180][ T6824] veth1_vlan: left promiscuous mode [ 1133.944579][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1133.944605][ T29] audit: type=1400 audit(1785125463.975:1384): avc: denied { write } for pid=17461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1133.980184][ T6824] veth0_vlan: left promiscuous mode [ 1134.045583][ T24] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1134.158619][ T29] audit: type=1400 audit(1785125464.195:1385): avc: denied { write } for pid=17490 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1134.237089][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.257205][ T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1134.285310][ T24] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1134.323279][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.352323][ T24] usb 5-1: config 0 descriptor?? [ 1134.387738][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1134.394957][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 1134.433800][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1134.449314][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1134.466568][ T24] usb 5-1: media controller created [ 1134.481330][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1134.539014][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 1134.557906][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1134.582531][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input39 [ 1134.679740][ T29] audit: type=1400 audit(1785125464.715:1386): avc: denied { shutdown } for pid=17477 comm="syz.4.3017" laddr=fe80::e lport=60338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1134.712468][ T29] audit: type=1400 audit(1785125464.715:1387): avc: denied { getopt } for pid=17477 comm="syz.4.3017" laddr=fe80::e lport=60338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1134.736384][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 1134.744817][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1134.798579][ T29] audit: type=1400 audit(1785125464.775:1388): avc: denied { read } for pid=4961 comm="acpid" name="event4" dev="devtmpfs" ino=3471 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1134.847863][ T6824] team0 (unregistering): Port device team_slave_1 removed [ 1134.870249][ T29] audit: type=1400 audit(1785125464.775:1389): avc: denied { open } for pid=4961 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3471 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1134.894761][ T6824] team0 (unregistering): Port device team_slave_0 removed [ 1134.906720][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1134.928661][ T24] dvb-usb: error while querying for an remote control event. [ 1134.989051][ T29] audit: type=1400 audit(1785125464.775:1390): avc: denied { ioctl } for pid=4961 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3471 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1135.094377][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1135.100555][ T24] dvb-usb: error while querying for an remote control event. [ 1135.153497][T17361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1135.169858][T17361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1135.214179][T17496] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3020'. [ 1135.224819][ T29] audit: type=1400 audit(1785125465.245:1391): avc: denied { setopt } for pid=17495 comm="syz.6.3020" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1135.256954][T17361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1135.285127][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1135.291026][T17497] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1135.297546][T17497] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1135.307279][ T24] dvb-usb: error while querying for an remote control event. [ 1135.365953][ T5271] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1135.371276][T17497] vhci_hcd vhci_hcd.0: Device attached [ 1135.557836][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1135.564237][ T24] dvb-usb: error while querying for an remote control event. [ 1135.586491][T17499] vhci_hcd: connection closed [ 1135.586860][ T6410] vhci_hcd vhci_hcd.6: stop threads [ 1135.614882][ T6410] vhci_hcd vhci_hcd.6: release socket [ 1135.655737][ T6410] vhci_hcd vhci_hcd.6: disconnect device [ 1135.685144][T17505] EXT4-fs (loop7): unable to read superblock [ 1135.691800][ T29] audit: type=1400 audit(1785125465.715:1392): avc: denied { mounton } for pid=17502 comm="syz.7.3021" path="/syzcgroup/unified/syz7" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 1135.724908][T17361] hsr_slave_0: entered promiscuous mode [ 1135.755698][T17361] hsr_slave_1: entered promiscuous mode [ 1135.770531][T17361] debugfs: 'hsr0' already exists in 'hsr' [ 1136.007120][T17204] dvb-usb: bulk message failed: -22 (1/0) [ 1136.012975][ T24] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1136.020713][T17204] dvb-usb: error while querying for an remote control event. [ 1136.053338][T17361] Cannot create hsr debugfs directory [ 1136.245470][T17204] dvb-usb: bulk message failed: -22 (1/0) [ 1136.259310][T17204] dvb-usb: error while querying for an remote control event. [ 1136.375653][T17512] gfs2: not a GFS2 filesystem [ 1136.567370][ T29] audit: type=1400 audit(1785125466.405:1393): avc: denied { mount } for pid=17509 comm="syz.0.3022" name="/" dev="pstore" ino=1721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 1136.749712][T17204] dvb-usb: bulk message failed: -22 (1/0) [ 1136.755831][T17204] dvb-usb: error while querying for an remote control event. [ 1136.868584][T16595] usb 5-1: USB disconnect, device number 65 [ 1136.930334][ T6824] IPVS: stop unused estimator thread 0... [ 1136.950426][T17517] i2c i2c-0: new_device: Can't parse I2C address [ 1137.439391][T16595] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1138.960003][ T24] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1139.402771][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1139.402784][ T29] audit: type=1400 audit(1785125469.435:1401): avc: denied { write } for pid=17553 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1139.553766][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1139.918211][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1139.956237][ T5271] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1139.978098][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1140.059260][ T24] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1140.118823][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.195534][ T24] usb 5-1: Product: syz [ 1140.209850][ T24] usb 5-1: Manufacturer: syz [ 1140.228739][ T24] usb 5-1: SerialNumber: syz [ 1140.507370][ T24] usb 5-1: unit 0 not found! [ 1140.743044][ T24] usb 5-1: USB disconnect, device number 66 [ 1140.780952][T17568] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3033'. [ 1140.829354][ T6259] udevd[6259]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1140.851318][T17571] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1140.857879][T17571] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1140.882350][T17571] vhci_hcd vhci_hcd.0: Device attached [ 1141.054911][ T5744] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1141.137338][T17572] vhci_hcd: connection closed [ 1141.137745][ T1100] vhci_hcd vhci_hcd.6: stop threads [ 1141.150762][ T5744] usb 45-1: new full-speed USB device number 5 using vhci_hcd [ 1141.182721][ T1100] vhci_hcd vhci_hcd.6: release socket [ 1141.220335][ T1100] vhci_hcd vhci_hcd.6: disconnect device [ 1141.873486][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3035'. [ 1142.067572][T17599] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17599 comm=syz.6.3037 [ 1142.226104][T17596] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=17596 comm=syz.6.3037 [ 1143.158805][ T29] audit: type=1400 audit(1785125472.385:1402): avc: denied { setopt } for pid=17600 comm="syz.7.3039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1143.178703][ T29] audit: type=1400 audit(1785125472.385:1403): avc: denied { connect } for pid=17600 comm="syz.7.3039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1143.299807][ T29] audit: type=1400 audit(1785125473.335:1404): avc: denied { read append } for pid=17595 comm="syz.6.3037" name="mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1143.312315][T17361] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1143.424932][ T29] audit: type=1400 audit(1785125473.335:1405): avc: denied { open } for pid=17595 comm="syz.6.3037" path="/dev/input/mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1143.517149][T17361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1143.561280][T17361] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1143.587706][ T29] audit: type=1400 audit(1785125473.335:1406): avc: denied { map } for pid=17595 comm="syz.6.3037" path="/dev/input/mice" dev="devtmpfs" ino=917 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1143.858871][ T29] audit: type=1400 audit(1785125473.425:1407): avc: denied { write } for pid=17570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1144.197186][ T29] audit: type=1400 audit(1785125473.605:1408): avc: denied { read write } for pid=17610 comm="syz.6.3041" name="uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1144.464855][T17361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1144.472186][ T29] audit: type=1400 audit(1785125473.605:1409): avc: denied { open } for pid=17610 comm="syz.6.3041" path="/dev/uinput" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1144.500894][T17361] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1144.558020][T17361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1144.590871][T17361] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1144.621919][ T29] audit: type=1400 audit(1785125473.685:1410): avc: denied { ioctl } for pid=17610 comm="syz.6.3041" path="socket:[90562]" dev="sockfs" ino=90562 ioctlcmd=0x9441 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1144.677544][T17361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1144.744476][ T29] audit: type=1400 audit(1785125474.465:1411): avc: denied { write } for pid=17612 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1145.328330][T17361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.443466][T17361] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.478844][T10117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.486007][T10117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.523972][T16595] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1145.533672][T10117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.540758][T10117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1145.647336][ T29] audit: type=1400 audit(1785125475.685:1412): avc: denied { ioctl } for pid=17646 comm="syz.6.3045" path="socket:[91512]" dev="sockfs" ino=91512 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1145.724639][T16595] usb 8-1: Using ep0 maxpacket: 8 [ 1145.754583][T16595] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 1145.780517][ T29] audit: type=1400 audit(1785125475.735:1413): avc: denied { connect } for pid=17646 comm="syz.6.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1145.809971][T16595] usb 8-1: can't read configurations, error -22 [ 1145.887698][ T29] audit: type=1400 audit(1785125475.735:1414): avc: denied { write } for pid=17646 comm="syz.6.3045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1145.995620][T16595] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1146.069675][ T29] audit: type=1400 audit(1785125476.105:1415): avc: denied { write } for pid=17633 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1146.108834][T17661] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3046'. [ 1146.170516][T17664] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1146.177076][T17664] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1146.214585][T17664] vhci_hcd vhci_hcd.0: Device attached [ 1146.216208][T16595] usb 8-1: Using ep0 maxpacket: 8 [ 1146.264709][ T5744] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 1146.267852][T16595] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 1146.292157][T17665] vhci_hcd: connection closed [ 1146.292561][T10118] vhci_hcd vhci_hcd.4: stop threads [ 1146.314790][T10118] vhci_hcd vhci_hcd.4: release socket [ 1146.322032][ T29] audit: type=1400 audit(1785125476.355:1416): avc: denied { setopt } for pid=17668 comm="syz.6.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1146.330511][T16595] usb 8-1: can't read configurations, error -22 [ 1146.359074][T10118] vhci_hcd vhci_hcd.4: disconnect device [ 1146.371747][ T29] audit: type=1400 audit(1785125476.355:1417): avc: denied { create } for pid=17668 comm="syz.6.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1146.389122][T16595] usb usb8-port1: attempt power cycle [ 1146.414150][T17204] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 1146.461850][ T29] audit: type=1400 audit(1785125476.355:1418): avc: denied { write } for pid=17668 comm="syz.6.3047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1146.824386][T17682] EXT4-fs (loop6): unable to read superblock [ 1147.216285][T16595] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1147.246792][T16595] usb 8-1: Using ep0 maxpacket: 8 [ 1147.272938][T16595] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 1147.300481][T16595] usb 8-1: can't read configurations, error -22 [ 1147.461944][T17361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1147.494256][T16595] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1147.688612][T16595] usb 8-1: Using ep0 maxpacket: 8 [ 1147.839816][T16595] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 1147.857529][T16595] usb 8-1: can't read configurations, error -22 [ 1147.875989][T16595] usb usb8-port1: unable to enumerate USB device [ 1147.965239][T17361] veth0_vlan: entered promiscuous mode [ 1148.001453][T17361] veth1_vlan: entered promiscuous mode [ 1148.075226][T17361] veth0_macvtap: entered promiscuous mode [ 1148.110087][T17361] veth1_macvtap: entered promiscuous mode [ 1148.182714][T17361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1148.218525][T17361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1148.260272][T12983] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.342118][T12983] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.380330][T12983] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.411645][T12983] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1148.607000][T17705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.690310][T17705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.766586][ T6824] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.842291][ T6824] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.193081][ T6822] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1149.223973][ T6822] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1149.429539][T17717] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17717 comm=syz.7.3055 [ 1149.524471][T17720] Invalid logical block size (1275) [ 1149.640398][T17717] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=17717 comm=syz.7.3055 [ 1151.133289][T17744] EXT4-fs (loop0): unable to read superblock [ 1151.139840][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1151.139872][ T29] audit: type=1400 audit(1785125481.165:1424): avc: denied { mounton } for pid=17735 comm="syz.0.3059" path="/syzcgroup/unified/syz0" dev="pstore" ino=1721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=dir permissive=1 [ 1151.554749][ T29] audit: type=1400 audit(1785125481.585:1425): avc: denied { create } for pid=17738 comm="syz.7.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1151.641508][ T29] audit: type=1400 audit(1785125481.615:1426): avc: denied { setopt } for pid=17738 comm="syz.7.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1151.739246][ T29] audit: type=1400 audit(1785125481.765:1427): avc: denied { write } for pid=17715 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1151.823984][T10813] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1152.032570][T10813] usb 8-1: Using ep0 maxpacket: 16 [ 1152.054340][T10813] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.276321][T10813] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.558375][T10813] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1152.614334][ T29] audit: type=1400 audit(1785125482.655:1428): avc: denied { write } for pid=17760 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1152.636762][T10813] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1152.656587][T10813] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.673499][T10813] usb 8-1: config 0 descriptor?? [ 1153.143552][ T29] audit: type=1400 audit(1785125483.175:1429): avc: denied { read write } for pid=17770 comm="syz.6.3065" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1153.209976][ T29] audit: type=1400 audit(1785125483.175:1430): avc: denied { open } for pid=17770 comm="syz.6.3065" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1153.272649][ T29] audit: type=1400 audit(1785125483.175:1431): avc: denied { ioctl } for pid=17770 comm="syz.6.3065" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 1153.385389][T10813] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0 [ 1153.408581][T10813] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 1153.441742][T10813] microsoft 0003:045E:07DA.0009: no inputs found [ 1154.264499][ T29] audit: type=1400 audit(1785125484.295:1432): avc: denied { write } for pid=17738 comm="syz.7.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1154.292837][T17739] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3060'. [ 1154.339333][T10813] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 1154.573674][T17739] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3060'. [ 1154.682181][T17782] EXT4-fs (loop6): unable to read superblock [ 1154.973977][ T29] audit: type=1400 audit(1785125484.295:1433): avc: denied { nlmsg_write } for pid=17738 comm="syz.7.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1155.029311][T10813] usb 8-1: USB disconnect, device number 44 [ 1155.107221][T17786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3069'. [ 1155.133606][T17786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3069'. [ 1155.206648][T17786] fuse: Bad value for 'fd' [ 1155.337927][T17792] i2c i2c-0: new_device: Can't parse I2C address [ 1155.640027][T17803] EXT4-fs (loop6): unable to read superblock [ 1156.855801][T17816] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3077'. [ 1157.044892][T17816] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 1157.051438][T17816] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1157.146070][T17816] vhci_hcd vhci_hcd.0: Device attached [ 1157.153371][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1157.153387][ T29] audit: type=1400 audit(1785125487.185:1439): avc: denied { ioctl } for pid=17820 comm="syz.2.3078" path="socket:[91091]" dev="sockfs" ino=91091 ioctlcmd=0x4b6c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1157.307389][T17821] vhci_hcd: connection closed [ 1157.364827][ T24] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1157.611447][ T13] vhci_hcd vhci_hcd.7: stop threads [ 1157.783941][ T13] vhci_hcd vhci_hcd.7: release socket [ 1157.811045][ T13] vhci_hcd vhci_hcd.7: disconnect device [ 1157.824125][ T24] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1157.831768][ T24] usb 47-1: enqueue for inactive port 0 [ 1157.856632][T17827] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17827 comm=syz.4.3081 [ 1157.905188][ T24] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 1157.947147][T17835] i2c i2c-0: new_device: Can't parse I2C address [ 1157.971209][T17827] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=17827 comm=syz.4.3081 [ 1158.163388][T17840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3083'. [ 1159.008792][T17851] overlay: Bad value for 'metacopy' [ 1159.077324][T17853] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3088'. [ 1159.491322][T17853] gre0: entered promiscuous mode [ 1159.496346][T17853] gre0: entered allmulticast mode [ 1159.503009][ T29] audit: type=1400 audit(1785125489.045:1440): avc: denied { mounton } for pid=17848 comm="syz.7.3088" path="/361/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1159.549940][ T29] audit: type=1400 audit(1785125489.095:1441): avc: denied { read } for pid=17848 comm="syz.7.3088" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1159.584106][ T29] audit: type=1400 audit(1785125489.105:1442): avc: denied { open } for pid=17848 comm="syz.7.3088" path="/361/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 1159.680061][ T29] audit: type=1400 audit(1785125489.715:1443): avc: denied { unmount } for pid=9677 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 1160.482148][T17847] Cannot find del_set index 0 as target [ 1160.611118][T17864] EXT4-fs (loop0): unable to read superblock [ 1164.563964][ T5716] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1164.659411][T17893] i2c i2c-0: new_device: Can't parse I2C address [ 1164.754038][ T5716] usb 8-1: Using ep0 maxpacket: 16 [ 1164.768997][ T5716] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1164.789358][ T5716] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 1164.804280][ T5716] usb 8-1: can't read configurations, error -22 [ 1164.959072][ T5716] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1165.133933][ T5716] usb 8-1: Using ep0 maxpacket: 16 [ 1165.175322][T17907] EXT4-fs (loop2): unable to read superblock [ 1165.287511][ T5716] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1165.410114][ T5716] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 1165.420535][ T5716] usb 8-1: can't read configurations, error -22 [ 1165.431029][ T5716] usb usb8-port1: attempt power cycle [ 1165.551837][ T29] audit: type=1400 audit(1785125495.585:1444): avc: denied { write } for pid=17914 comm="syz.6.3109" name="binder0" dev="binder" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1165.794678][ T5716] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1165.860328][ T5716] usb 8-1: Using ep0 maxpacket: 16 [ 1166.114567][ T5716] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1166.439693][ T5716] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 1166.458452][ T5716] usb 8-1: can't read configurations, error -22 [ 1166.594335][ T5716] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1166.976064][ T5716] usb 8-1: Using ep0 maxpacket: 16 [ 1166.999631][ T5716] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1167.032814][ T5716] usb 8-1: config index 0 descriptor too short (expected 9, got 0) [ 1167.057450][ T5716] usb 8-1: can't read configurations, error -22 [ 1167.074358][ T5716] usb usb8-port1: unable to enumerate USB device [ 1167.198901][T17932] netlink: 'syz.0.3115': attribute type 1 has an invalid length. [ 1167.226252][T17932] netlink: 'syz.0.3115': attribute type 1 has an invalid length. [ 1167.298501][T17934] EXT4-fs (loop4): unable to read superblock [ 1167.724007][ T29] audit: type=1400 audit(1785125497.755:1445): avc: denied { read } for pid=17937 comm="syz.7.3116" name="sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1167.751810][ T29] audit: type=1400 audit(1785125497.755:1446): avc: denied { open } for pid=17937 comm="syz.7.3116" path="/dev/sg0" dev="devtmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1168.088118][T17932] netlink: 'syz.0.3115': attribute type 2 has an invalid length. [ 1168.095989][ T29] audit: type=1400 audit(1785125497.785:1447): avc: denied { ioctl } for pid=17937 comm="syz.7.3116" path="/dev/sg0" dev="devtmpfs" ino=718 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1168.122880][T17932] netlink: 'syz.0.3115': attribute type 1 has an invalid length. [ 1168.164173][ T24] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1168.164270][T17932] netlink: 'syz.0.3115': attribute type 1 has an invalid length. [ 1168.267777][ T29] audit: type=1400 audit(1785125498.305:1448): avc: denied { create } for pid=17931 comm="syz.0.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1168.352193][ T29] audit: type=1400 audit(1785125498.305:1449): avc: denied { write } for pid=17931 comm="syz.0.3115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1168.372477][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 1168.431164][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1168.480844][ T24] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.492597][ T29] audit: type=1400 audit(1785125498.305:1450): avc: denied { setopt } for pid=17931 comm="syz.0.3115" lport=47050 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1168.545599][ T24] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1168.564086][ T29] audit: type=1400 audit(1785125498.305:1451): avc: denied { getopt } for pid=17931 comm="syz.0.3115" lport=47050 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1168.598584][ T24] usb 8-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice= 0.40 [ 1168.674846][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.719718][ T24] usb 8-1: Product: syz [ 1168.748987][ T24] usb 8-1: Manufacturer: syz [ 1168.778249][ T24] usb 8-1: SerialNumber: syz [ 1168.864970][ T24] usb 8-1: 0:1 : does not exist [ 1168.874049][ T29] audit: type=1400 audit(1785125498.905:1452): avc: denied { read append } for pid=17944 comm="syz.4.3118" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1168.887682][ T24] usb 8-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 1169.083152][ T29] audit: type=1400 audit(1785125498.905:1453): avc: denied { open } for pid=17944 comm="syz.4.3118" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1169.145324][T17955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3121'. [ 1169.167251][T17955] netlink: 'syz.2.3121': attribute type 1 has an invalid length. [ 1169.183159][T17959] ALSA: mixer_oss: invalid OSS volume 'SPEA9Ksˠ+I2KER' [ 1169.260870][ T24] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1169.323249][T10854] udevd[10854]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1169.367296][T17963] netlink: 'syz.2.3121': attribute type 10 has an invalid length. [ 1169.390452][T17963] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3121'. [ 1169.451859][T17963] dummy0: entered promiscuous mode [ 1170.771518][ T5744] usb 8-1: USB disconnect, device number 49 [ 1170.944154][T17204] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1171.394099][T17204] usb 3-1: Using ep0 maxpacket: 16 [ 1171.604483][T17204] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 1171.717494][T17204] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.746913][T17204] usb 3-1: Product: syz [ 1171.760606][T17204] usb 3-1: Manufacturer: syz [ 1171.795556][T17204] usb 3-1: SerialNumber: syz [ 1171.914169][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1171.914186][ T29] audit: type=1400 audit(1785125501.945:1459): avc: denied { name_bind } for pid=17968 comm="syz.0.3123" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1171.971704][ T9319] dvb-usb: did not find the firmware file 'dvb-usb-SkyStar_USB_HD_FW_v17_63.HEX.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1172.009800][T17204] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1172.059785][ T9319] usb 7-1: USB disconnect, device number 39 [ 1172.758861][ T29] audit: type=1400 audit(1785125502.775:1460): avc: denied { mount } for pid=17970 comm="syz.2.3124" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1172.782910][T17987] i2c i2c-0: new_device: Can't parse I2C address [ 1172.843601][T17204] snd-usb-audio 3-1:222.0: probe with driver snd-usb-audio failed with error -2 [ 1172.881302][T15759] usb 3-1: USB disconnect, device number 71 [ 1172.942015][ T6257] udevd[6257]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:222.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1174.468984][ T29] audit: type=1400 audit(1785125504.505:1461): avc: denied { set_context_mgr } for pid=18009 comm="syz.4.3134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1174.532190][T18010] binder: 18009:18010 ioctl c0306201 200000000080 returned -14 [ 1175.299279][T18017] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18017 comm=syz.0.3136 [ 1175.321494][T18017] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=18017 comm=syz.0.3136 [ 1176.074003][ T9319] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1176.246859][ T9319] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1176.272260][ T9319] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1176.313851][ T9319] usb 8-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1176.339266][ T9319] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.367269][ T9319] usb 8-1: Product: syz [ 1176.377944][ T9319] usb 8-1: Manufacturer: syz [ 1176.383173][ T9319] usb 8-1: SerialNumber: syz [ 1176.434513][ T9319] usb 8-1: config 0 descriptor?? [ 1176.458612][T18022] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1176.469726][T18022] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1176.715653][T18022] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1177.094605][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.694150][T18022] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1177.701553][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.737669][T18044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.507849][T18044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.633319][T18048] ALSA: mixer_oss: invalid OSS volume 'SPEA9Ksˠ+I2KER' [ 1179.279312][T18055] binder: BC_ATTEMPT_ACQUIRE not supported [ 1179.288959][T18055] binder: 18049:18055 ioctl c0306201 200000000c00 returned -22 [ 1180.305700][T18062] Invalid logical block size (1275) [ 1180.450330][ T29] audit: type=1400 audit(1785125510.485:1462): avc: denied { append } for pid=18064 comm="syz.0.3151" name="dvr0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 1180.589313][T18066] FAULT_INJECTION: forcing a failure. [ 1180.589313][T18066] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.603287][T18066] CPU: 0 UID: 0 PID: 18066 Comm: syz.0.3151 Tainted: G L syzkaller #0 PREEMPT(full) [ 1180.603323][T18066] Tainted: [L]=SOFTLOCKUP [ 1180.603332][T18066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1180.603346][T18066] Call Trace: [ 1180.603354][T18066] [ 1180.603363][T18066] dump_stack_lvl+0x100/0x190 [ 1180.603398][T18066] should_fail_ex.cold+0x5/0xa [ 1180.603427][T18066] should_failslab+0xc2/0x120 [ 1180.603457][T18066] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1180.603487][T18066] ? ima_inode_get+0x11f/0x580 [ 1180.603524][T18066] ima_inode_get+0x11f/0x580 [ 1180.603551][T18066] process_measurement+0x1213/0x2350 [ 1180.603584][T18066] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1180.603611][T18066] ? __pfx_process_measurement+0x10/0x10 [ 1180.603642][T18066] ? __pfx_avc_has_perm+0x10/0x10 [ 1180.603668][T18066] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 1180.603725][T18066] ? __file_map_prot_check+0x256/0x830 [ 1180.603758][T18066] ima_file_mmap+0x1bb/0x1e0 [ 1180.603783][T18066] ? __pfx_ima_file_mmap+0x10/0x10 [ 1180.603810][T18066] ? __schedule+0x126e/0x6730 [ 1180.603837][T18066] security_mmap_file+0x278/0x9b0 [ 1180.603864][T18066] vm_mmap_pgoff+0xec/0x470 [ 1180.603893][T18066] ? find_held_lock+0x2b/0x80 [ 1180.603927][T18066] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1180.603954][T18066] ? __fget_files+0x215/0x3d0 [ 1180.603983][T18066] ? __fget_files+0x21f/0x3d0 [ 1180.604013][T18066] ksys_mmap_pgoff+0x3cb/0x610 [ 1180.604046][T18066] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1180.604080][T18066] __x64_sys_mmap+0x125/0x190 [ 1180.604115][T18066] do_syscall_64+0x115/0x870 [ 1180.604139][T18066] ? clear_bhb_loop+0x40/0x90 [ 1180.604168][T18066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.604192][T18066] RIP: 0033:0x7f6d1699de99 [ 1180.604211][T18066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1180.604233][T18066] RSP: 002b:00007f6d178ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1180.604255][T18066] RAX: ffffffffffffffda RBX: 00007f6d16c26090 RCX: 00007f6d1699de99 [ 1180.604271][T18066] RDX: 0000000002000006 RSI: 0000000000001000 RDI: 0000200000ffd000 [ 1180.604286][T18066] RBP: 00007f6d178ad090 R08: 000000000000000c R09: 0000000000000000 [ 1180.604300][T18066] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 1180.604315][T18066] R13: 00007f6d16c26128 R14: 00007f6d16c26090 R15: 00007fffa0fa86b8 [ 1180.604347][T18066] [ 1181.131826][T15759] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1181.143540][ T9319] dm9601 8-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 1181.227988][ T9319] usb 8-1: USB disconnect, device number 50 [ 1181.296225][T15759] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.314938][T15759] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1181.351062][T15759] usb 3-1: New USB device found, idVendor=056a, idProduct=fe4f, bcdDevice= 0.00 [ 1181.368154][T15759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.380549][T15759] usb 3-1: config 0 descriptor?? [ 1182.279647][T18080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1182.313684][T18080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1182.531473][T18086] loop7: detected capacity change from 0 to 7 [ 1182.813709][T15759] wacom 0003:056A:FE4F.000A: unknown main item tag 0x0 [ 1183.765023][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1183.774789][ C0] buffer_io_error: 325 callbacks suppressed [ 1183.774807][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 1183.842653][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1183.852395][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1184.252770][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1184.262482][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1184.273775][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1184.283443][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1184.302171][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1184.311926][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1184.321858][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1184.331553][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1184.340467][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1184.350150][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1184.358199][T18086] ldm_validate_partition_table(): Disk read failed. [ 1184.367143][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1184.377053][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1184.393778][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1184.403505][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1184.415681][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1184.425427][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 1184.434347][T18086] Dev loop7: unable to read RDB block 0 [ 1184.471738][T18086] loop7: unable to read partition table [ 1184.510081][T18086] loop7: partition table beyond EOD, truncated [ 1184.519976][T18086] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 1186.026450][T15759] wacom 0003:056A:FE4F.000A: unknown main item tag 0x0 [ 1186.283962][T15759] wacom 0003:056A:FE4F.000A: unknown main item tag 0x0 [ 1186.449871][T15759] usb 3-1: USB disconnect, device number 72 [ 1186.576306][T18104] /dev/nullb0: Can't open blockdev [ 1186.863825][T18108] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3162'. [ 1187.144147][T15759] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1187.216431][ T29] audit: type=1400 audit(1785125517.195:1463): avc: denied { create } for pid=18097 comm="syz.4.3160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1187.429665][T15759] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.606468][ T29] audit: type=1400 audit(1785125517.355:1464): avc: denied { write } for pid=18097 comm="syz.4.3160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1187.628373][T15759] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1187.651953][T18113] No source specified [ 1187.686318][T18113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3163'. [ 1187.700803][T15759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.765080][ T29] audit: type=1400 audit(1785125517.445:1465): avc: denied { getopt } for pid=18097 comm="syz.4.3160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1187.767058][T15759] usb 3-1: config 0 descriptor?? [ 1187.980404][T15759] usbhid 3-1:0.0: can't add hid device: -71 [ 1187.980468][T15759] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1188.057777][T18122] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1188.058269][ T29] audit: type=1400 audit(1785125518.085:1466): avc: denied { bind } for pid=18115 comm="syz.6.3165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1188.058462][ T29] audit: type=1400 audit(1785125518.085:1467): avc: denied { node_bind } for pid=18115 comm="syz.6.3165" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 1188.490035][T15759] usb 3-1: USB disconnect, device number 73 [ 1189.136203][T15759] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1189.298704][T15759] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.298754][T15759] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1189.298780][T15759] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.302307][T15759] usb 3-1: config 0 descriptor?? [ 1189.331670][T15759] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 1189.333782][T15759] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input41 [ 1189.505033][T15759] usb 3-1: USB disconnect, device number 74 [ 1189.505085][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1190.034598][T18138] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1190.339078][T18136] EXT4-fs (loop4): unable to read superblock [ 1190.587487][ T29] audit: type=1400 audit(1785125520.625:1468): avc: denied { setopt } for pid=18141 comm="syz.2.3170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1192.322755][T18155] i2c i2c-0: new_device: Can't parse I2C address [ 1192.554488][T18159] EXT4-fs (loop2): unable to read superblock [ 1192.841451][ T29] audit: type=1400 audit(1785125522.875:1469): avc: denied { create } for pid=18163 comm="syz.7.3177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1194.067415][ T29] audit: type=1400 audit(1785125523.105:1470): avc: denied { bind } for pid=18163 comm="syz.7.3177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1194.756292][T18181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.768246][T18179] i2c i2c-0: new_device: Can't parse I2C address [ 1194.775519][T18181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1196.633144][T18205] openvswitch: netlink: Flow key attr not present in new flow. [ 1196.675761][ T9319] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 1196.797523][ T29] audit: type=1400 audit(1785125526.835:1471): avc: denied { unlink } for pid=18206 comm="syz.7.3191" name="#15" dev="tmpfs" ino=2035 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1196.829963][ T29] audit: type=1400 audit(1785125526.855:1472): avc: denied { mount } for pid=18206 comm="syz.7.3191" name="/" dev="overlay" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1196.858272][T18207] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1197.085799][ T9319] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.097060][ T9319] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1197.115648][ T9319] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1197.142829][ T9319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1197.175872][ T9319] usb 7-1: config 0 descriptor?? [ 1197.193002][ T9319] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1197.200061][ T9319] dvb-usb: bulk message failed: -22 (3/0) [ 1197.402890][ T9319] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1197.550352][ T9319] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1197.771802][ T9319] usb 7-1: media controller created [ 1197.790963][ T9319] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1197.889762][ T9319] dvb-usb: bulk message failed: -22 (6/0) [ 1197.917924][ T9319] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1197.954959][ T9319] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input42 [ 1197.994899][ T29] audit: type=1400 audit(1785125528.025:1473): avc: denied { map } for pid=18222 comm="syz.0.3195" path="socket:[139676]" dev="sockfs" ino=139676 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1198.026978][ T9319] dvb-usb: schedule remote query interval to 150 msecs. [ 1198.047657][ T9319] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1198.208827][ T9319] dvb-usb: bulk message failed: -22 (1/0) [ 1198.240123][ T9319] dvb-usb: error while querying for an remote control event. [ 1198.326980][T18230] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1198.333524][T18230] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1198.360124][ T29] audit: type=1400 audit(1785125528.385:1474): avc: denied { listen } for pid=18212 comm="syz.2.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1198.380595][T18230] vhci_hcd vhci_hcd.0: Device attached [ 1198.399495][T18231] vhci_hcd: connection closed [ 1198.401560][ T6822] vhci_hcd vhci_hcd.0: stop threads [ 1198.413463][ T6822] vhci_hcd vhci_hcd.0: release socket [ 1198.423087][ T6822] vhci_hcd vhci_hcd.0: disconnect device [ 1198.441838][T17204] dvb-usb: bulk message failed: -22 (1/0) [ 1198.452526][T17204] dvb-usb: error while querying for an remote control event. [ 1198.914933][T17204] dvb-usb: bulk message failed: -22 (1/0) [ 1198.928010][T17204] dvb-usb: error while querying for an remote control event. [ 1199.116348][T17204] dvb-usb: bulk message failed: -22 (1/0) [ 1199.148531][T17204] dvb-usb: error while querying for an remote control event. [ 1199.333979][T17204] dvb-usb: bulk message failed: -22 (1/0) [ 1199.339960][T17204] dvb-usb: error while querying for an remote control event. [ 1199.373969][T10813] usb 8-1: new full-speed USB device number 51 using dummy_hcd [ 1199.468267][T17204] usb 7-1: USB disconnect, device number 40 [ 1199.536926][T17204] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1199.537850][T10813] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1199.599660][T10813] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1199.631586][T10813] usb 8-1: Product: syz [ 1199.641582][T10813] usb 8-1: Manufacturer: syz [ 1199.656024][T10813] usb 8-1: SerialNumber: syz [ 1199.672057][T18245] Cannot find map_set index 135 as target [ 1199.675139][T10813] usb 8-1: config 0 descriptor?? [ 1199.994740][T18254] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1200.005189][T18254] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1200.016360][T18254] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1200.026113][T18254] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1200.038475][T18254] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1200.048266][T18254] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1200.058754][T18254] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1200.068486][T18254] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1200.080024][T18254] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 1200.261598][T18256] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3202'. [ 1200.370084][T10813] usb 8-1: USB disconnect, device number 51 [ 1200.425143][ T29] audit: type=1400 audit(1785125530.465:1475): avc: denied { map } for pid=18257 comm="syz.2.3204" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1201.919050][T18278] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3208'. [ 1202.429502][T18281] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1202.436026][T18281] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1202.475308][T18281] vhci_hcd vhci_hcd.0: Device attached [ 1202.520710][T18284] vhci_hcd: connection closed [ 1202.520864][ T6822] vhci_hcd vhci_hcd.0: stop threads [ 1202.549220][ T6822] vhci_hcd vhci_hcd.0: release socket [ 1202.582432][ T6822] vhci_hcd vhci_hcd.0: disconnect device [ 1202.774507][ T29] audit: type=1400 audit(1785125532.805:1476): avc: denied { create } for pid=18289 comm="syz.4.3213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1202.856852][T18290] raw_sendmsg: syz.4.3213 forgot to set AF_INET. Fix it! [ 1203.307182][T18298] dummy_hcd dummy_hcd.0: remove, state 1 [ 1203.314721][T18298] usb usb1: USB disconnect, device number 1 [ 1203.321535][T18298] usb 1-1: USB disconnect, device number 6 [ 1203.526726][T18298] dummy_hcd dummy_hcd.0: stopped [ 1203.532039][T18298] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 1203.795635][T18303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1203.838943][T18303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1203.976192][T18306] ALSA: mixer_oss: invalid OSS volume 'SPEA9Ksˠ+I2KER' [ 1204.377547][ T29] audit: type=1400 audit(1785125534.275:1477): avc: denied { getopt } for pid=18307 comm="syz.4.3218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1205.296226][ T29] audit: type=1400 audit(1785125535.335:1478): avc: denied { ioctl } for pid=18315 comm="syz.7.3221" path="socket:[139824]" dev="sockfs" ino=139824 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1206.200318][ T29] audit: type=1400 audit(1785125536.235:1479): avc: denied { map } for pid=18326 comm="syz.7.3223" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1206.277801][ T29] audit: type=1400 audit(1785125536.315:1480): avc: denied { ioctl } for pid=18326 comm="syz.7.3223" path="socket:[139839]" dev="sockfs" ino=139839 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1206.356924][ T29] audit: type=1400 audit(1785125536.365:1481): avc: denied { bind } for pid=18326 comm="syz.7.3223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1206.418248][ T1684] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN NOPTI [ 1206.430354][ T1684] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 1206.438776][ T1684] CPU: 0 UID: 0 PID: 1684 Comm: kworker/0:1H Tainted: G L syzkaller #0 PREEMPT(full) [ 1206.449800][ T1684] Tainted: [L]=SOFTLOCKUP [ 1206.454111][ T1684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1206.464183][ T1684] Workqueue: events_highpri f_midi_in_work [ 1206.470004][ T1684] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 1206.475213][ T1684] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 6b 32 39 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 1206.494822][ T1684] RSP: 0018:ffffc90006dd7a28 EFLAGS: 00010006 [ 1206.500883][ T1684] RAX: dffffc0000000000 RBX: ffff8880554d4310 RCX: ffffffff87d12d5f [ 1206.508845][ T1684] RDX: 000000000000000c RSI: ffffffff87d12dd5 RDI: 0000000000000060 [ 1206.516804][ T1684] RBP: ffff888026f340e0 R08: 0000000000000005 R09: 0000000000000005 [ 1206.524760][ T1684] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888026f34c00 [ 1206.532724][ T1684] R13: ffff8880554d4300 R14: ffff888026f340d8 R15: 0000000000000000 [ 1206.540682][ T1684] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 1206.549599][ T1684] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1206.556183][ T1684] CR2: 0000001b2dcf6ff8 CR3: 000000007bc7b000 CR4: 00000000003526f0 [ 1206.564142][ T1684] DR0: 0000000000000013 DR1: 00000000000001f8 DR2: 0000000000000084 [ 1206.572099][ T1684] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1206.580057][ T1684] Call Trace: [ 1206.583326][ T1684] [ 1206.586244][ T1684] ? do_raw_spin_unlock+0x145/0x1e0 [ 1206.591445][ T1684] usb_ep_queue+0xfa/0x3c0 [ 1206.595856][ T1684] f_midi_in_work+0x9b0/0x1580 [ 1206.600622][ T1684] ? __pfx_f_midi_in_work+0x10/0x10 [ 1206.605818][ T1684] ? rcu_is_watching+0x12/0xc0 [ 1206.610584][ T1684] process_one_work+0xa23/0x1940 [ 1206.615518][ T1684] ? __pfx_process_one_work+0x10/0x10 [ 1206.620885][ T1684] ? __pfx_f_midi_in_work+0x10/0x10 [ 1206.626084][ T1684] worker_thread+0x5ef/0xe50 [ 1206.630666][ T1684] ? __pfx_worker_thread+0x10/0x10 [ 1206.635765][ T1684] ? kthread+0x13a/0x450 [ 1206.639992][ T1684] ? __pfx_worker_thread+0x10/0x10 [ 1206.645090][ T1684] kthread+0x370/0x450 [ 1206.649146][ T1684] ? __pfx_kthread+0x10/0x10 [ 1206.653723][ T1684] ret_from_fork+0x72b/0xd50 [ 1206.658307][ T1684] ? __pfx_ret_from_fork+0x10/0x10 [ 1206.663411][ T1684] ? __switch_to+0x800/0x10f0 [ 1206.668079][ T1684] ? __pfx_kthread+0x10/0x10 [ 1206.672656][ T1684] ret_from_fork_asm+0x1a/0x30 [ 1206.677422][ T1684] [ 1206.680432][ T1684] Modules linked in: [ 1206.684318][ T1684] ---[ end trace 0000000000000000 ]--- [ 1206.689759][ T1684] RIP: 0010:dummy_queue+0x1ba/0xb00 [ 1206.694958][ T1684] Code: 00 49 83 bc 24 c8 05 00 00 00 0f 84 a6 07 00 00 e8 6b 32 39 fa 49 8d 7f 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e 4f 07 00 00 45 8b 7f 60 31 ff [ 1206.714555][ T1684] RSP: 0018:ffffc90006dd7a28 EFLAGS: 00010006 [ 1206.720613][ T1684] RAX: dffffc0000000000 RBX: ffff8880554d4310 RCX: ffffffff87d12d5f [ 1206.728599][ T1684] RDX: 000000000000000c RSI: ffffffff87d12dd5 RDI: 0000000000000060 [ 1206.736555][ T1684] RBP: ffff888026f340e0 R08: 0000000000000005 R09: 0000000000000005 [ 1206.744511][ T1684] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888026f34c00 [ 1206.752466][ T1684] R13: ffff8880554d4300 R14: ffff888026f340d8 R15: 0000000000000000 [ 1206.760423][ T1684] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 1206.769341][ T1684] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1206.775913][ T1684] CR2: 0000001b2dcf6ff8 CR3: 000000007bc7b000 CR4: 00000000003526f0 [ 1206.783872][ T1684] DR0: 0000000000000013 DR1: 00000000000001f8 DR2: 0000000000000084 [ 1206.791827][ T1684] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1206.799795][ T1684] Kernel panic - not syncing: Fatal exception [ 1206.806052][ T1684] Kernel Offset: disabled [ 1206.810360][ T1684] Rebooting in 86400 seconds..