last executing test programs: 14m0.627956932s ago: executing program 4 (id=93): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, 0x2, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x6d}, @NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x101}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb8}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x21}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}]}, 0x88}}, 0x24044850) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 14m0.086533317s ago: executing program 4 (id=98): syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) userfaultfd(0x80001) r0 = socket(0x1d, 0x4, 0x7) getsockopt(r0, 0x29, 0x40, 0x0, &(0x7f0000001ffc)) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x4, "d30f388c52647600", 0x0, 0x5, 0x4000004, 0xffffffde}, 0x3c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r2, 0x0, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000240)={"89f71dd6", 0xfffd, 0x4f, 0x3, 0x2, 0x8004, "aa74006c517507a702000000008000", "87401b7c", '\x00', '\x00', ["11723b8de2659ed9176222ce", "e1e23899ecf421b1e889af72", "0ee277c9040000008c0900", "d4584f11faffd9223e88dbff"]}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, 0x0, 0x4) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000003c0)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x8081}, 0x20000800) fcntl$dupfd(r2, 0x406, r2) 13m58.561462549s ago: executing program 4 (id=107): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000040e704500000000000000109022d00010000500009040000020300000009210000000122180009058103"], 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r1, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_connect$midi(0x5, 0x49, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37, 0x1, 0x1, 0x0, 0x20, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x20, 0x6, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x1, 0x90}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}], [{{0x9, 0x5, 0xf, 0x10, 0x20, 0x4, 0x8, 0x6, {0xf, 0x25, 0x1, 0xb, "8df16308c492e28f40dca0"}}}]}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x1, 0x1, 0x40, 0x38}, 0x30, &(0x7f0000000140)={0x5, 0xf, 0x30, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x1f, 0x5, 0x2, 0x0, 0x8, [0xff000f, 0xc030, 0x3f, 0x30, 0x3f0f]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x36, 0x18, 0x3, 0x8, 0x6}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x946c574917c1a0bc}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x429}}, {0x7a, &(0x7f0000000200)=@string={0x7a, 0x3, "92870c853e150a799d53945bb7bb34000e6266e2023fb7c590d84d955e031b85700c7a04e73ff4f404df603a50e3b48494276ea6c3dabd82408bd19892985e4a7a13ebcbe1e70c3651e64c85569748ac0923d30e1080e638dbe40b53e73f878fac9d5c97e8185650824886bf48e0aec718e1173563800108"}}]}) 13m56.208142971s ago: executing program 4 (id=120): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000340)='./file0\x00', 0x1) 13m55.934403313s ago: executing program 4 (id=122): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = memfd_secret(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futimesat(r0, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000100100000a"], 0x30}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(&(0x7f0000000000), 0x202, 0x40) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0xed, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 13m54.902825575s ago: executing program 4 (id=127): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xca6e, 0x6, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x3, 0x1}) prlimit64(r0, 0x1, &(0x7f00000000c0)={0x2, 0x80000000}, &(0x7f0000000180)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x1, 0xb61, 0x0, 0x0, 0x1000, 0xff, r0, 0x0, 0x18}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) ioperm(0x1, 0xb2be, 0x163f) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/uts\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000006c00010025bd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="8000010018000000180034801400350069703665727370616e", @ANYBLOB='4'], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x201, &(0x7f00000001c0)={0x0, 0x300}) r7 = dup(r3) syz_ublk_setup_queues(r7, r2, &(0x7f00000003c0)={0x0, 0xbd, 0x1000, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x900b, 0xfffffff8, 0x1a6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x3, 0x2b6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x80, 0x8001, 0xe9}}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200201, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet6_int(r8, 0x29, 0x43, 0x0, &(0x7f0000000380)) 13m54.588845604s ago: executing program 32 (id=127): openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0xca6e, 0x6, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x3, 0x1}) prlimit64(r0, 0x1, &(0x7f00000000c0)={0x2, 0x80000000}, &(0x7f0000000180)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x1, 0xb61, 0x0, 0x0, 0x1000, 0xff, r0, 0x0, 0x18}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) ioperm(0x1, 0xb2be, 0x163f) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/uts\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000006c00010025bd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="8000010018000000180034801400350069703665727370616e", @ANYBLOB='4'], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008010) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x201, &(0x7f00000001c0)={0x0, 0x300}) r7 = dup(r3) syz_ublk_setup_queues(r7, r2, &(0x7f00000003c0)={0x0, 0xbd, 0x1000, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x900b, 0xfffffff8, 0x1a6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x3, 0x2b6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x80, 0x8001, 0xe9}}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200201, 0x0) r8 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet6_int(r8, 0x29, 0x43, 0x0, &(0x7f0000000380)) 9m48.968354216s ago: executing program 0 (id=990): syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b52, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r3, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0xfffffffffffffffc) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x159a83, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x3, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f0000000040)=@mmap={0x10001, 0x1, 0x4, 0x70000, 0x2, {0x77359400}, {0x2, 0xc, 0x2, 0x4, 0xfd, 0x4, "7365981f"}, 0xb24, 0x1, {}, 0x7}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, 0x0, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000200)=0x40003) 9m46.816615395s ago: executing program 0 (id=992): socket(0x2, 0x80805, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000340)=""/102400, 0x19000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xf000000) 9m41.288258826s ago: executing program 0 (id=1000): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone3(&(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x40}, 0x1, 0x0, 0x0, 0x4000850}, 0x24040840) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r4) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r3, @ANYRES16=r5, @ANYBLOB="09000000000000000000140000000c0003800800010008000000580007"], 0x19c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r9, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x5c, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6755490}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2a3fe8ac}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6bd0c4c6}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x125c9d0a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3170a8be}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbe98}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x74df4e9f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd270}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9e57}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x66424a81}]}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40045}, 0xc0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r13 = fanotify_init(0x0, 0x0) read$FUSE(r10, &(0x7f0000000280)={0x2020}, 0x2020) fanotify_mark(r13, 0x1, 0x800002b, r12, 0x0) write$FUSE_INIT(r11, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200, 0x0, 0x0, 0xffff}}, 0x50) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f0000000000)) r14 = syz_pidfd_open(r3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r14, 0xff02) syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r4) 9m37.540168974s ago: executing program 0 (id=1011): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)="6252657175657374547970653d2daf", 0xf) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) io_setup(0x7, &(0x7f0000000280)=0x0) sysfs$3(0x3) mmap$dsp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x110, r1, 0x0) io_pgetevents(r2, 0x8000000000002, 0x0, &(0x7f00000002c0), &(0x7f0000000180)={0x77359400}, 0x0) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) 9m35.263232973s ago: executing program 0 (id=1019): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x15020, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0xb) landlock_restrict_self(r0, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_usb_connect(0xb, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r2 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r3]) close(0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xf, 0x204031, 0xffffffffffffffff, 0x2d5c000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00001a9000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000160000/0x2000)=nil, &(0x7f00000f2000/0x4000)=nil, &(0x7f0000afd000/0x1000)=nil, &(0x7f00006b6000/0x1000)=nil, &(0x7f00001dd000/0x4000)=nil, &(0x7f000004e000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00000c4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x2) io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000000)={0xfffffffd, 0x1, 'hub\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}) ioctl$USBDEVFS_ALLOW_SUSPEND(r5, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r5, 0x5521) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) close(r5) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x89ca}, 0x94) socket$unix(0x1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x8) 9m33.213055618s ago: executing program 0 (id=1028): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x4, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x1, 0x0, "dd370e4d804da29f"}}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x7000000, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', 0x0, 0x0, 0x0, 0x0) 9m33.003301805s ago: executing program 33 (id=1028): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x4, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x0, 0xc8, 0x1, 0x0, "dd370e4d804da29f"}}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x9, 0x3, 0x1e8, 0x7000000, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0xb8, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@ip={@empty, @empty}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x248) mount(&(0x7f0000000300)=@filename='127.0.0.1:/test\x00', 0x0, 0x0, 0x0, 0x0) 5m35.728815664s ago: executing program 1 (id=1741): r0 = syz_open_procfs(0x0, &(0x7f0000000c80)='fdinfo\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="042f014b"], 0x4) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000e50000460c7507d4ff2615fffb13e945bb491c7859e77414b35908660c391944b7fde7379c3e65b8e863edbca2ab0b928d59e7b7c44039f9dc49e4540ec7694fad487b919fc80e1ac3da91800c015d3184abcdcfee23b6509910645cf036d1174ae60940f33ed0956df8a06d5b72f0cab5f34226a07d95a0019e8211b5995c7bf2e735e859a97d29b3555265b640b5c68edae8e2ff5f60cd507b29e33808fc00e7d842d86ceae3f4bc74a9cb6c02839887949b62fbf2c4c36811609375d8befea4427d94702da003c6"], 0x50) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x4, "d30f388c52e47600000000000000000000000300", 0x0, 0x5, 0xfff, 0xffffffde}, 0x3c) getdents64(r0, &(0x7f0000002440)=""/181, 0xb5) r5 = socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x890b, &(0x7f0000000100)="000000000000000000000000000000000f0000006c61706230") bpf$MAP_CREATE(0x0, 0x0, 0x50) setns(0xc9, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000080)='X\x00', 0xfdef}], 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001080)=[{0x0, 0x30}, {&(0x7f00000010c0)=ANY=[], 0x1fc}], 0x2}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000000)="11c9064268e957a720", 0x9}], 0x2}, 0x40) syz_usb_connect(0x1, 0x155, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x9f, 0x70, 0x62, 0x20, 0xc45, 0x6282, 0xe7d6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x143, 0x2, 0x1, 0x1, 0x80, 0x4, "", [{{0x9, 0x4, 0x6c, 0xaa, 0x2, 0x65, 0x5a, 0x2c, 0x9, [], [{{0x9, 0x5, 0x4, 0x4, 0x10, 0x1, 0x79, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x60, 0xc, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8dbe}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0x4}]}}]}}, {{0x9, 0x4, 0xc9, 0x7f, 0xb, 0x1b, 0xd7, 0x10, 0xe9, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x26}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x100, 0x1, 0x4, 0xff}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x3, "488a"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x204, 0x2, 0x1, 0x7f, 0x2}]}, @uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0x1, 0xa, "ee40"}]}], [{{0x9, 0x5, 0x3, 0x8, 0x0, 0x9, 0x5, 0x83, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x30, 0x101}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x57, 0x9, 0x4, [@generic={0x34, 0x4, "eddc48d6ea9ec62ae40d14118f4606a4cc247a4ea96817c8fba21effcff0d691f30adf27bb614dd9192dd2268d5345df0079"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x5}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0xff, 0xd3, 0xf}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x26, 0xa, 0xcf}}, {{0x9, 0x5, 0x3, 0x2, 0x48, 0x5, 0x18, 0x4}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x6, 0x9, 0xe}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x7f, 0xef, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x4}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0xff, 0x0, 0x8, [@generic={0x17, 0x9, "19fec2aea4c9133086a190f02aeffb19c44f506fd4"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0xfb, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xffc0}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x4, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x78}]}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x21, 0x10, 0x1}}]}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="900002", @ANYRES16=r3]) 5m33.112787847s ago: executing program 1 (id=1746): r0 = syz_open_procfs(0x0, &(0x7f0000000c80)='fdinfo\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="042f014b"], 0x4) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000e50000460c7507d4ff2615fffb13e945bb491c7859e77414b35908660c391944b7fde7379c3e65b8e863edbca2ab0b928d59e7b7c44039f9dc49e4540ec7694fad487b919fc80e1ac3da91800c015d3184abcdcfee23b6509910645cf036d1174ae60940f33ed0956df8a06d5b72f0cab5f34226a07d95a0019e8211b5995c7bf2e735e859a97d29b3555265b640b5c68edae8e2ff5f60cd507b29e33808fc00e7d842d86ceae3f4bc74a9cb6c02839887949b62fbf2c4c36811609375d8befea4427d94702da003c6"], 0x50) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x4, "d30f388c52e47600000000000000000000000300", 0x0, 0x5, 0xfff, 0xffffffde}, 0x3c) getdents64(r0, &(0x7f0000002440)=""/181, 0xb5) r5 = socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x890b, &(0x7f0000000100)="000000000000000000000000000000000f0000006c61706230") bpf$MAP_CREATE(0x0, 0x0, 0x50) setns(0xc9, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000080)='X\x00', 0xfdef}], 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001080)=[{0x0, 0x30}, {&(0x7f00000010c0)=ANY=[], 0x1fc}], 0x2}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000000)="11c9064268e957a720", 0x9}], 0x2}, 0x40) syz_usb_connect(0x1, 0x14c, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x9f, 0x70, 0x62, 0x20, 0xc45, 0x6282, 0xe7d6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13a, 0x2, 0x1, 0x1, 0x80, 0x4, "", [{{0x9, 0x4, 0x6c, 0xaa, 0x1, 0x65, 0x5a, 0x2c, 0x9, [], [{{0x9, 0x5, 0xe, 0x0, 0x60, 0xc, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8dbe}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0x4}]}}]}}, {{0x9, 0x4, 0xc9, 0x7f, 0xb, 0x1b, 0xd7, 0x10, 0xe9, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x26}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x100, 0x1, 0x4, 0xff}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x3, "488a"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x204, 0x2, 0x1, 0x7f, 0x2}]}, @uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0x1, 0xa, "ee40"}]}], [{{0x9, 0x5, 0x3, 0x8, 0x0, 0x9, 0x5, 0x83, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x30, 0x101}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x57, 0x9, 0x4, [@generic={0x34, 0x4, "eddc48d6ea9ec62ae40d14118f4606a4cc247a4ea96817c8fba21effcff0d691f30adf27bb614dd9192dd2268d5345df0079"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x5}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0xff, 0xd3, 0xf}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x26, 0xa, 0xcf}}, {{0x9, 0x5, 0x3, 0x2, 0x48, 0x5, 0x18, 0x4}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x6, 0x9, 0xe}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x7f, 0xef, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x4}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0xff, 0x0, 0x8, [@generic={0x17, 0x9, "19fec2aea4c9133086a190f02aeffb19c44f506fd4"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0xfb, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xffc0}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x4, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x78}]}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x21, 0x10, 0x1}}]}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x250, 0x5, 0x3, 0x5, 0x8, 0x6}, 0x78, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050f7880060b1001046600d33d03e20200f514100a074200000000000004c0092775935601d80e6005eaa472e2b86c3a2f1003ece1dbb0298b4361e480b6a879e413ad0f1defda5d35f86839ad6e0f499f8762c8bc144d67148aea804617c7071002085400800a100300010007071000"/122], 0x8, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x861}}, {0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="d403ae2d0056d71762e230b20fc83c4b7d0929a3587cbdabb27e5e053deb6e136e2e407cd160ecbb6f4927297f375ba2cfca72e763c3352cf8ff4136807931dc6289846022f424141bf1ccd0e83e973f17e8335cc8d074a2d828ff975c75e11a33d119cbe7c66f514160e900b50a09e55edfb8598be76ee00f896ca78c69fd8d4902451e409ee3c37e954139e2a771ad8e282ec00bd95f635268bd0761f4394c7e51dd46fa4cf0e1b396c75607149315b18a6a6b0c56c5226011c266f8110a81fe44a840d91b4f6003e80e2d5649f4ab"]}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x80b}}, {0xba, &(0x7f0000000880)=ANY=[@ANYBLOB="ba030fbe063409534beb0ee5e41f91d5a5e281f713a5fc348d84737c75468e2c40ce35d2e327c5f1b0e6ede8cb3c8127e45a1eb76f1e365bcb0f6dcc2670944b11ec9d8d2306dfeb345068d6242f453f09e73d2ab4475ba23253788a1a1e348f868cdbde7d155c28abb5a30bf0a568ab24dd6a2e2107b832b4d368a5657b580accbdd4da866dd65e07845069ed3deae683175e14cd21bbfb0f385be5f06481e1d601908003126a0da6b5f61f52e89eb43ed9ca795a9abcfad6d4"]}, {0xa5, &(0x7f0000000940)=ANY=[@ANYBLOB="a503e2ce9b2a4b9789e5a8fc12bf9b271400caab6242a89c6ac1f2f488b8596b7e33bdd9792a42f9928236a2ea9ff684030685f31f6dbdd1f4e6d16c77e6151b5f5fa55cfb24f2d1f4b05fef529b00879ba60d45fe8e6cf4fe9d4200b9fa57846b825992b930e90b9d907c7aa54bba724ee8019da1fc748c34d3402496c192da1e8935843d39bfd0a64c00e2d5f05b0a1c6fb35024ef2e5469db63dfd3281b81"]}, {0xa4, &(0x7f0000000a00)=ANY=[@ANYBLOB="a4036800c65c0f8bd230c5ee577651ab5573c3aeab01a5e3795395ab7bb5819004386b427d10b3236ea5fb63487b7f8d05cbdc9bf3f264d81b7d67b7e40419831749e47a4794feb5bad768459936bd790353a18d20e6d281db6cfed733fede954b678ce3156c8bb6fef84faa9f10cd23c0887c91fdc7c9a40c73df8305ed29167d794b5f9b172256f8c83502f8b8c926bc101777dbcc466831922fb4b32b471c54464f23"]}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x436}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="900002", @ANYRES16=r3]) 5m31.513795295s ago: executing program 1 (id=1750): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) gettid() r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x5, 0x9, 0x0, 0xffffffffffffffff, 0x100}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r6) sendmsg$NLBL_CALIPSO_C_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r7, 0x125, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r7, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000010) 5m29.697678928s ago: executing program 1 (id=1754): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x8000, 0x700, 0xffffeed1, 0x400, {{0x22, 0x4, 0x0, 0x1, 0x88, 0x67, 0x0, 0x4, 0x29, 0x0, @multicast1, @empty, {[@timestamp={0x44, 0x8, 0x2a, 0x0, 0xb, [0x2]}, @rr={0x7, 0x17, 0x96, [@remote, @empty, @multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x36}]}, @timestamp={0x44, 0x8, 0x89, 0x0, 0x5, [0x2d]}, @end, @timestamp={0x44, 0x14, 0x30, 0x0, 0x5, [0x0, 0x1000, 0x7, 0x6]}, @rr={0x7, 0xf, 0x51, [@dev={0xac, 0x14, 0x14, 0x24}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}, @ssrr={0x89, 0x1f, 0xfe, [@multicast1, @multicast1, @remote, @rand_addr=0x64010101, @broadcast, @multicast2, @private=0xa010101]}, @generic={0x83, 0x7, "d1f070f098"}]}}}}}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, r0}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/query\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') close(0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = syz_io_uring_setup(0x100f00, &(0x7f0000000080)={0x0, 0x5078, 0xc00, 0x2, 0x80, 0x0, 0x0}, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file1\x00', 0x8000, 0x310) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4070009", 0xe) ioctl(r5, 0xc138fd02, &(0x7f0000000000)="0400000000000000") mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='./file0\x00') io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000400)={&(0x7f0000001000)={[{0x0, 0x0, 0x1}]}, 0x1}, 0x1) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000001000)={0x0, "3efe72f3bf818ea09f4cf95d73c3ce3e8de711a7f3de0fc1cb8a24626d1d44910f2236bf9bae103e22391ea3cd172c2ac38179be234f63df3e6f5019535184ef5c39d04cc54c7bdd661cc2ff0d793bbc8433dbbb5ced195489d9389a1b55ef1389ec4f5bdceca542cc3fa739f22d94897c6b9abd311357d25e8ef7df7c43556d8f1107b003a9f87ddfc2dd335207b494877e48ec793e0995c184a0b644a16b065b3f6a987cc6bd06b7a618126a30b9e8aaa05814ca622407b092f3636481d7ab77487609081fb930df46404c837ff3e85d0cb475baf73af4f0702d828e5da37668e8d1396493ae1f100aa9c1fad6965352f36c8c09ad29fc695a266e7b0fd95de6688a99f6dea33f7432f2079339a45bb16c89d66fa2d81feebd0c42e53d9d5abfbacc40912bece541ebb43fc5e30e5724a394a841c9bfa09f08d9cd01d614546e650605921d4c55ad74479948dd4be6086d8f5a0f800461eb7633014de028d6492792cb27ad847037ad678f79e83232f138ab2f0ed350b9ab476d9c9ee41b5c4a96b28cc572f454c4c232aab45f1bc6b0c8caa19fc8c98e598c7891c9fb095ec923afd10c6306f0834d9da98892e9fd24186f446c1f87fced883ab43bcfbe54fc37d70459c049d87030494ebad22dc68cfaf694438ebc70e84a28f63c3b8905effdc87d477c1ddbab9ff5beed93a4d17819344148be913f949635156caf1e4b"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r6, 0x0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r1, 0x1, 0x1, 0x5, 0x0, 0x0) connect$802154_dgram(r5, &(0x7f0000000240)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x841, &(0x7f00000009c0)=0x272) 5m25.767393561s ago: executing program 1 (id=1769): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = memfd_secret(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b1, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futimesat(r0, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0xed, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 5m25.125940935s ago: executing program 1 (id=1770): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = memfd_secret(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b1, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futimesat(r0, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0xed, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 5m24.570476884s ago: executing program 34 (id=1770): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = memfd_secret(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b1, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) futimesat(r0, 0x0, 0x0) r1 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0xed, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x9}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 1m3.63956695s ago: executing program 7 (id=2644): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x9f) socket(0x10, 0x3, 0xfffffffd) r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x1, 0x0) ppoll(&(0x7f0000000040)=[{r3, 0xc000}], 0x1, &(0x7f0000000000)={0x0, 0x989680}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x6, 0x8, 0x3, 0x0, 0x8000000000009, 0x1, 0xfffffe0000000001, 0xfa11, 0xe}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0x5, &(0x7f0000000340)=ANY=[@ANYRES8=r0], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) setsockopt$MRT6_TABLE(r0, 0x29, 0xcf, &(0x7f0000000000)=0xfe, 0x4) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r6, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r6, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) recvmmsg(r5, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) listen(r5, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r7 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0xfffffffd}, 0x0, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x34b9, &(0x7f00000001c0)={0x0, 0x8329, 0x10, 0xffffffff, 0x159, 0x0, r7}, &(0x7f00000000c0), &(0x7f0000000080), &(0x7f00000002c0)) 1m0.318332996s ago: executing program 7 (id=2650): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000380)="0099", &(0x7f0000000480)=@udp6=r1, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="0000fffffffffffff0000001e370", 0x0, 0x200000ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 59.181186209s ago: executing program 7 (id=2655): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000380)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000240)="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", 0x1c1) setpgid(r4, r4) setpgid(0x0, r4) fchdir(r3) readlink(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)=""/184, 0xb8) readlink(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)=""/104, 0x68) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 58.72869771s ago: executing program 7 (id=2658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002a80)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = fsopen(&(0x7f0000000040)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff\xff2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\x10\xf7\xb2\xed\x8a\xdc\xa6\x8fO\xc8\xbay,\xae\xd3\xc5*\x15\xdf_\xb2_`\x92', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\r\xcc:', 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000002c0)={&(0x7f0000000000), 0x0, 0x0, 0x0, 0x2, r4}, 0x38) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000003000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) 57.291824735s ago: executing program 7 (id=2661): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x4, &(0x7f00002d6000/0x3000)=nil, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/kernel/tracing/dynamic_events\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='e1my_eprob', 0xa) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f000023a000/0x3000)=nil, 0x3000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000349000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000080)=0x60000000000000, 0x8, 0x2) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902240003"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b29, &(0x7f0000000040)={'wlan0\x00'}) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0185648, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x719f, 0x0, 0x0, 0xfffffffffffffc92, 0x0, 0x0}, 0x18) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, 0x0, 0x0) r6 = dup3(r5, r0, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0xffed, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r5}, @flat=@weak_handle={0x77682a85, 0x0, 0x2}, @fda={0x66646185, 0x5, 0x2, 0x3c}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 51.257610886s ago: executing program 7 (id=2690): r0 = openat(0xffffffffffffffff, 0x0, 0x410200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49db, 0x4, 0xfff9, 0x3fff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x7a, 0xb8c, 0x366fd030, 0xfd4}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x1ac, &(0x7f0000000500)={@random="1a1404576a49", @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x19e, 0x64, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [], "9ed70a8b69124a17f0eba648bcec3c37e134201e4f3bb307186bfdc4d672cdf6ce6e71fb14e76458a0259d17ec4a39168d158208d32fe340edcf8098ad8168b0d1082eb98e2c1baca10dde522cf09afeb55fb4b43256436ff3a2b02e18ad9f5574d4f04b1335d40eb8597359a6015bb6bda4e5008d8593b21d713e2b8d98aa35cdbc6e9857686d1a3d473f268ea8128b6b74cdacd89a2e331b07dbc89c2c2ccd317c3368b09401000000000000007639808012ede34df4a0b0930a65d3b47fc68276e5cc155a2459d91b33bcb96d61bc80c13f16be930f914491c61ca7e71f2f70dbe165d3b632cb772913bc76a0652cd02b5322a9fefe4bd5d1264847f893ca5d418265b08c49c19f4129bdf6b9c4e8b9061082c9962c36ea6b31783df85a9a925bb29880f4b18217144ea82e560ea5a2faa4b4d039dc00"/326}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {0x8, 0x22eb, 0xfffffffe, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}}}}}}}, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"}) r4 = syz_open_pts(r1, 0x20800) userfaultfd(0x80801) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x44) 36.162426089s ago: executing program 35 (id=2690): r0 = openat(0xffffffffffffffff, 0x0, 0x410200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49db, 0x4, 0xfff9, 0x3fff, 0x18, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x7a, 0xb8c, 0x366fd030, 0xfd4}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x1ac, &(0x7f0000000500)={@random="1a1404576a49", @multicast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x19e, 0x64, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [], "9ed70a8b69124a17f0eba648bcec3c37e134201e4f3bb307186bfdc4d672cdf6ce6e71fb14e76458a0259d17ec4a39168d158208d32fe340edcf8098ad8168b0d1082eb98e2c1baca10dde522cf09afeb55fb4b43256436ff3a2b02e18ad9f5574d4f04b1335d40eb8597359a6015bb6bda4e5008d8593b21d713e2b8d98aa35cdbc6e9857686d1a3d473f268ea8128b6b74cdacd89a2e331b07dbc89c2c2ccd317c3368b09401000000000000007639808012ede34df4a0b0930a65d3b47fc68276e5cc155a2459d91b33bcb96d61bc80c13f16be930f914491c61ca7e71f2f70dbe165d3b632cb772913bc76a0652cd02b5322a9fefe4bd5d1264847f893ca5d418265b08c49c19f4129bdf6b9c4e8b9061082c9962c36ea6b31783df85a9a925bb29880f4b18217144ea82e560ea5a2faa4b4d039dc00"/326}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {0x8, 0x22eb, 0xfffffffe, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}}}}}}}, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"}) r4 = syz_open_pts(r1, 0x20800) userfaultfd(0x80801) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x44) 12.908182439s ago: executing program 2 (id=2814): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b00010067656e657665000008000280040010001400030067656e65766531"], 0x4c}}, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x11, 0x2, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 11.330197349s ago: executing program 2 (id=2819): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x21fd, 0xdd36, 0xfffffff7, 0x8000, 0x6}) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003) socket$inet6(0xa, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x3800) socket$inet6_udp(0xa, 0x2, 0x0) 9.799500667s ago: executing program 2 (id=2822): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x89, 0x2, 0xfd, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 7.654160857s ago: executing program 3 (id=2830): pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f000000fec0)=ANY=[@ANYBLOB="04004100000010"]) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000100)=ANY=[]) 6.851640028s ago: executing program 6 (id=2831): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x208841) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000080)={0x9, 0x2, 'client1\x00', 0x2, "167bd2eecdaf18de", "9bf603e404ec98afd9a6406f87566a6ebd4053a93cfb837317fcd82c7fdc08d1", 0x7, 0xd2fd}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04d64020"], 0x7) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, 0x0) ioctl$UBLK_U_CMD_SET_PARAMS(0xffffffffffffffff, 0xc0207508, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x3, "fa00050001000000000000000000000000000100000000000000ffff00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000240)={0x10000, "ccc4a7b8c9011f4c5c7bb0464d4d3b8cd0aab3850a1afbc9e37ab2c30676744f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000280)={"6739629f274d13b691ebe45b0006f500", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000300)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', r5}) r8 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x400000000000041, 0x0) 6.719388768s ago: executing program 3 (id=2832): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x0, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14}}, 0x84}}, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000400000)={0x0, 0x0}) ioctl(r4, 0x4048aecb, &(0x7f0000800080)="02") ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) write(0xffffffffffffffff, &(0x7f0000000080)="285b97c59b539a478153fb876c67b18a63db66afaa45a03456f01472036ca0dc8b5b37f91bfb5cec4718a031cf2c7be6b773e0f5c1f49c27c89664ca8a005c9b2dc52d5f5db48417663ae372fb95e2a98ef4", 0x52) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@newtclass={0x2c, 0x28, 0x400, 0x70bd26, 0x3, {0x0, 0x0, 0x0, 0x0, {0x1, 0xe}, {0xfff1, 0x6}, {0xfff2, 0x4}}, [@tclass_kind_options=@c_red={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040044}, 0x10) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x40000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x20000004) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0xc0044d19, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x2, 0x5002) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000540)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x4}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '('}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'syz0\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x8, 0x14, 'red\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'syz0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4) r9 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000940)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000100)={0x40, 0x17, 0xa0, "488b8c77c09ec50b072031e27a8acd94247b51533cf4672fccc6178c41f18ab86a20e6eb39617fb38808776cd240636f2ef47a3fb2cb110a77627abb43973fe86384e1ca31602679e3b90d3535500b69734dfadd3669c1ec68b4c3c43f87d236fd79e4d857e860dbd9aed1d856b5ff4598942e0ade58a908dce27b2bee0c3e389d4f0258f4408d4a5929079885f453a7688706804130d99cbc35bee58727f4f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x19, 0x2, '(K'}, 0x0, &(0x7f0000000f80)={0x40, 0x1c, 0x1, 0x6}, 0x0, &(0x7f0000001000)={0x40, 0x21, 0x1, 0xf}}) unshare(0x10000000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x4004000) syz_usb_control_io$lan78xx(r9, &(0x7f0000002180)={0x14, 0x0, 0x0}, &(0x7f00000023c0)={0x34, &(0x7f00000021c0)=ANY=[@ANYBLOB="00310b00000025717018084bc99d654061"], 0x0, 0x0, &(0x7f0000002300)={0xc0, 0xa1, 0x4, 0xa}, 0x0, 0x0}) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 6.672333205s ago: executing program 6 (id=2833): r0 = syz_open_procfs(0x0, &(0x7f0000000c80)='fdinfo\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="042f014b"], 0x4) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000e50000460c7507d4ff2615fffb13e945bb491c7859e77414b35908660c391944b7fde7379c3e65b8e863edbca2ab0b928d59e7b7c44039f9dc49e4540ec7694fad487b919fc80e1ac3da91800c015d3184abcdcfee23b6509910645cf036d1174ae60940f33ed0956df8a06d5b72f0cab5f34226a07d95a0019e8211b5995c7bf2e735e859a97d29b3555265b640b5c68edae8e2ff5f60cd507b29e33808fc00e7d842d86ceae3f4bc74a9cb6c02839887949b62fbf2c4c36811609375d8befea4427d94702da003c6"], 0x50) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x4, "d30f388c52e47600000000000000000000000300", 0x0, 0x5, 0xfff, 0xffffffde}, 0x3c) getdents64(r0, &(0x7f0000002440)=""/181, 0xb5) r5 = socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x890b, &(0x7f0000000100)="000000000000000000000000000000000f0000006c61706230") bpf$MAP_CREATE(0x0, 0x0, 0x50) setns(0xc9, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000080)='X\x00', 0xfdef}], 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001080)=[{0x0, 0x30}, {&(0x7f00000010c0)=ANY=[], 0x1fc}], 0x2}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000000)="11c9064268e957a720", 0x9}], 0x2}, 0x40) syz_usb_connect(0x1, 0x155, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x9f, 0x70, 0x62, 0x20, 0xc45, 0x6282, 0xe7d6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x143, 0x2, 0x1, 0x1, 0x80, 0x4, "", [{{0x9, 0x4, 0x6c, 0xaa, 0x2, 0x65, 0x5a, 0x2c, 0x9, [], [{{0x9, 0x5, 0x4, 0x4, 0x10, 0x1, 0x79, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x60, 0xc, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8dbe}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0x4}]}}]}}, {{0x9, 0x4, 0xc9, 0x7f, 0xb, 0x1b, 0xd7, 0x10, 0xe9, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x26}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x100, 0x1, 0x4, 0xff}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x3, "488a"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x204, 0x2, 0x1, 0x7f, 0x2}]}, @uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0x1, 0xa, "ee40"}]}], [{{0x9, 0x5, 0x3, 0x8, 0x0, 0x9, 0x5, 0x83, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x30, 0x101}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x57, 0x9, 0x4, [@generic={0x34, 0x4, "eddc48d6ea9ec62ae40d14118f4606a4cc247a4ea96817c8fba21effcff0d691f30adf27bb614dd9192dd2268d5345df0079"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x5}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0xff, 0xd3, 0xf}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x26, 0xa, 0xcf}}, {{0x9, 0x5, 0x3, 0x2, 0x48, 0x5, 0x18, 0x4}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x6, 0x9, 0xe}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x7f, 0xef, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x4}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0xff, 0x0, 0x8, [@generic={0x17, 0x9, "19fec2aea4c9133086a190f02aeffb19c44f506fd4"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0xfb, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xffc0}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x4, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x78}]}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x21, 0x10, 0x1}}]}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x250, 0x5, 0x3, 0x5, 0x8, 0x6}, 0x78, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050f7880060b1001046600d33d03e20200f514100a074200000000000004c0092775935601d80e6005eaa472e2b86c3a2f1003ece1dbb0298b4361e480b6a879e413ad0f1defda5d35f86839ad6e0f499f8762c8bc144d67148aea804617c7071002085400800a100300010007071000"/122], 0x8, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x861}}, {0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="d403ae2d0056d71762e230b20fc83c4b7d0929a3587cbdabb27e5e053deb6e136e2e407cd160ecbb6f4927297f375ba2cfca72e763c3352cf8ff4136807931dc6289846022f424141bf1ccd0e83e973f17e8335cc8d074a2d828ff975c75e11a33d119cbe7c66f514160e900b50a09e55edfb8598be76ee00f896ca78c69fd8d4902451e409ee3c37e954139e2a771ad8e282ec00bd95f635268bd0761f4394c7e51dd46fa4cf0e1b396c75607149315b18a6a6b0c56c5226011c266f8110a81fe44a840d91b4f6003e80e2d5649f4ab"]}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x80b}}, {0xba, &(0x7f0000000880)=ANY=[@ANYBLOB="ba030fbe063409534beb0ee5e41f91d5a5e281f713a5fc348d84737c75468e2c40ce35d2e327c5f1b0e6ede8cb3c8127e45a1eb76f1e365bcb0f6dcc2670944b11ec9d8d2306dfeb345068d6242f453f09e73d2ab4475ba23253788a1a1e348f868cdbde7d155c28abb5a30bf0a568ab24dd6a2e2107b832b4d368a5657b580accbdd4da866dd65e07845069ed3deae683175e14cd21bbfb0f385be5f06481e1d601908003126a0da6b5f61f52e89eb43ed9ca795a9abcfad6d4"]}, {0xa5, &(0x7f0000000940)=ANY=[@ANYBLOB="a503e2ce9b2a4b9789e5a8fc12bf9b271400caab6242a89c6ac1f2f488b8596b7e33bdd9792a42f9928236a2ea9ff684030685f31f6dbdd1f4e6d16c77e6151b5f5fa55cfb24f2d1f4b05fef529b00879ba60d45fe8e6cf4fe9d4200b9fa57846b825992b930e90b9d907c7aa54bba724ee8019da1fc748c34d3402496c192da1e8935843d39bfd0a64c00e2d5f05b0a1c6fb35024ef2e5469db63dfd3281b81"]}, {0xa4, &(0x7f0000000a00)=ANY=[@ANYBLOB="a4036800c65c0f8bd230c5ee577651ab5573c3aeab01a5e3795395ab7bb5819004386b427d10b3236ea5fb63487b7f8d05cbdc9bf3f264d81b7d67b7e40419831749e47a4794feb5bad768459936bd790353a18d20e6d281db6cfed733fede954b678ce3156c8bb6fef84faa9f10cd23c0887c91fdc7c9a40c73df"]}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x436}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="900002", @ANYRES16=r3]) 5.839621568s ago: executing program 8 (id=2751): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x27, 0x3, 0xd) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x24, 0x14, 0x70b, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, {0xb}, {0xb, 0xc}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_proto_private(r2, 0x891f, &(0x7f0000000080)) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8917, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @empty}}) mprotect(&(0x7f00001dc000/0x3000)=nil, 0x3000, 0x100000a) r3 = socket$packet(0x11, 0x3, 0x300) unshare(0x20400) recvmmsg(r3, 0x0, 0x0, 0x2060, &(0x7f0000000040)={0x77359400}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) move_pages(0x0, 0x2000000000000027, &(0x7f00000003c0)=[&(0x7f00001f1000/0x2000)=nil], 0x0, &(0x7f0000000000)=[0x0], 0xc) r4 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109720770000000000010902350001010080320904000005ffffff000705810340000107058202400000070503024000000705840240000007050502"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x201, 0x0) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="741ac0b7"]) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) bind$alg(r5, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) ioctl$OTPLOCK(r5, 0x800c4d10, &(0x7f00000000c0)={0x5, 0x6, 0x1ff}) accept4$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000200)=0x6e, 0x100800) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1) 5.617906814s ago: executing program 2 (id=2836): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x7, @loopback, 0x6}, 0x1c) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x7, 0xae, 0x33, 0x40, 0x2c42, 0x1635, 0x86e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x1e, 0x10, 0x83, "", [{{0x9, 0x4, 0xdc, 0xb, 0x0, 0x4f, 0x99, 0xd3, 0x6}}]}}]}}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x1, 0xffffffea, 0x8, 0x22, r1, 0x8, '\x00', r3, r1, 0x5, 0xfffffffc, 0x0, 0xa}, 0x50) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r7, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x80010, r7, 0x0) preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000280), 0xffffffffffffffff, r4}}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setns(0xc9, 0x0) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') sendfile(r9, r10, &(0x7f0000000100)=0x5, 0xff) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 5.477661876s ago: executing program 5 (id=2838): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r1, 0x25, 0x0, @val=@perf_event={0x17}}, 0x18) syz_emit_ethernet(0x82, &(0x7f00000000c0)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x16, 0x4, 0x0, 0x29, 0x0, 0x64, 0x0, 0x1, 0x11, 0x6, @local, @multicast1, {[@cipso={0x86, 0x6, 0x1}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@rand_addr=0x64010102, 0x10000}, {@empty, 0x400000}, {@multicast2, 0x40000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x800}, {@multicast2}, {@dev}, {@private=0xa010102, 0x1}]}]}}}}}}}, 0x0) 5.445632667s ago: executing program 5 (id=2839): signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0x7fffffffffffffff]}, 0x8, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000440), 0x80800, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="8ee47d4da54df8b95fd1696df35d8da4ce0d08497e4ff04bee8e0419d24487fa947921ac92e7bc57098ea27d8a2f345666a01c37bae7542287829f0d7f2dc116a1e1fffd07a05139acd9", 0x4a}, {&(0x7f00000005c0)="7a88681b81d0d8bbe77dcf6decc84de51e28fa179b95edced4d99c008d77fa97cdf34d5ee9786f17088ef8466397658d591c29bbce063cee654296026d7687e0789c58d2ba458aff0ca7608cbfedd8fda95416a0e41c9e8a519fc3eb7a389d807e4ba8727742b89c5eb2e1eb22c03898bb29c0413ef484443be140640b866aa9d7e716a173a8b05e476b4261116046683f637ac6d463f8309a2b81fbd0dd3f8c743f942ac4a8e7fc3c79a1786e1130cfbe2aea8776fff0838b76854690d44a9018810e2a714598e54a9b5d359b67980641303b2b594a528a5f874b450a7adb59134845f2a34f51110cdf8a4c63", 0xed}, {&(0x7f00000006c0)="99771a2985f41fefbf8ff6171178258cd16c6607edf82aa6c483a5eb5b2998484360c4e677e075a595ea4d97f4d7e524efac9c96f285e7a743f27da3d32a55edd012c3b6f0595a10002f4f7ab0b985706464de73005d0692ed9a9358", 0x5c}], 0x3) socket$phonet_pipe(0x23, 0x5, 0x2) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r1 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) 5.36102525s ago: executing program 5 (id=2840): r0 = syz_open_procfs(0x0, &(0x7f0000000c80)='fdinfo\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="042f014b"], 0x4) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000e50000460c7507d4ff2615fffb13e945bb491c7859e77414b35908660c391944b7fde7379c3e65b8e863edbca2ab0b928d59e7b7c44039f9dc49e4540ec7694fad487b919fc80e1ac3da91800c015d3184abcdcfee23b6509910645cf036d1174ae60940f33ed0956df8a06d5b72f0cab5f34226a07d95a0019e8211b5995c7bf2e735e859a97d29b3555265b640b5c68edae8e2ff5f60cd507b29e33808fc00e7d842d86ceae3f4bc74a9cb6c02839887949b62fbf2c4c36811609375d8befea4427d94702da003c6"], 0x50) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x4, "d30f388c52e47600000000000000000000000300", 0x0, 0x5, 0xfff, 0xffffffde}, 0x3c) getdents64(r0, &(0x7f0000002440)=""/181, 0xb5) r5 = socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x890b, &(0x7f0000000100)="000000000000000000000000000000000f0000006c61706230") bpf$MAP_CREATE(0x0, 0x0, 0x50) setns(0xc9, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000080)='X\x00', 0xfdef}], 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001080)=[{0x0, 0x30}, {&(0x7f00000010c0)=ANY=[], 0x1fc}], 0x2}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000000)="11c9064268e957a720", 0x9}], 0x2}, 0x40) syz_usb_connect(0x1, 0x155, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x9f, 0x70, 0x62, 0x20, 0xc45, 0x6282, 0xe7d6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x143, 0x2, 0x1, 0x1, 0x80, 0x4, "", [{{0x9, 0x4, 0x6c, 0xaa, 0x2, 0x65, 0x5a, 0x2c, 0x9, [], [{{0x9, 0x5, 0x4, 0x4, 0x10, 0x1, 0x79, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x60, 0xc, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8dbe}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0x4}]}}]}}, {{0x9, 0x4, 0xc9, 0x7f, 0xb, 0x1b, 0xd7, 0x10, 0xe9, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x26}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x100, 0x1, 0x4, 0xff}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x3, "488a"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x204, 0x2, 0x1, 0x7f, 0x2}]}, @uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0x1, 0xa, "ee40"}]}], [{{0x9, 0x5, 0x3, 0x8, 0x0, 0x9, 0x5, 0x83, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x30, 0x101}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x57, 0x9, 0x4, [@generic={0x34, 0x4, "eddc48d6ea9ec62ae40d14118f4606a4cc247a4ea96817c8fba21effcff0d691f30adf27bb614dd9192dd2268d5345df0079"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x5}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0xff, 0xd3, 0xf}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x26, 0xa, 0xcf}}, {{0x9, 0x5, 0x3, 0x2, 0x48, 0x5, 0x18, 0x4}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x6, 0x9, 0xe}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x7f, 0xef, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x4}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0xff, 0x0, 0x8, [@generic={0x17, 0x9, "19fec2aea4c9133086a190f02aeffb19c44f506fd4"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0xfb, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xffc0}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x4, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x78}]}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x21, 0x10, 0x1}}]}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x250, 0x5, 0x3, 0x5, 0x8, 0x6}, 0x78, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050f7880060b1001046600d33d03e20200f514100a074200000000000004c0092775935601d80e6005eaa472e2b86c3a2f1003ece1dbb0298b4361e480b6a879e413ad0f1defda5d35f86839ad6e0f499f8762c8bc144d67148aea804617c7071002085400800a100300010007071000"/122], 0x8, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x861}}, {0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="d403ae2d0056d71762e230b20fc83c4b7d0929a3587cbdabb27e5e053deb6e136e2e407cd160ecbb6f4927297f375ba2cfca72e763c3352cf8ff4136807931dc6289846022f424141bf1ccd0e83e973f17e8335cc8d074a2d828ff975c75e11a33d119cbe7c66f514160e900b50a09e55edfb8598be76ee00f896ca78c69fd8d4902451e409ee3c37e954139e2a771ad8e282ec00bd95f635268bd0761f4394c7e51dd46fa4cf0e1b396c75607149315b18a6a6b0c56c5226011c266f8110a81fe44a840d91b4f6003e80e2d5649f4ab"]}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x80b}}, {0xba, &(0x7f0000000880)=ANY=[@ANYBLOB="ba030fbe063409534beb0ee5e41f91d5a5e281f713a5fc348d84737c75468e2c40ce35d2e327c5f1b0e6ede8cb3c8127e45a1eb76f1e365bcb0f6dcc2670944b11ec9d8d2306dfeb345068d6242f453f09e73d2ab4475ba23253788a1a1e348f868cdbde7d155c28abb5a30bf0a568ab24dd6a2e2107b832b4d368a5657b580accbdd4da866dd65e07845069ed3deae683175e14cd21bbfb0f385be5f06481e1d601908003126a0da6b5f61f52e89eb43ed9ca795a9abcfad6d4"]}, {0xa5, &(0x7f0000000940)=ANY=[@ANYBLOB="a503e2ce9b2a4b9789e5a8fc12bf9b271400caab6242a89c6ac1f2f488b8596b7e33bdd9792a42f9928236a2ea9ff684030685f31f6dbdd1f4e6d16c77e6151b5f5fa55cfb24f2d1f4b05fef529b00879ba60d45fe8e6cf4fe9d4200b9fa57846b825992b930e90b9d907c7aa54bba724ee8019da1fc748c34d3402496c192da1e8935843d39bfd0a64c00e2d5f05b0a1c6fb35024ef2e5469db63dfd3281b81"]}, {0xa4, &(0x7f0000000a00)=ANY=[@ANYBLOB="a4036800c65c0f8bd230c5ee577651ab5573c3aeab01a5e3795395ab7bb5819004386b427d10b3236ea5fb63487b7f8d05cbdc9bf3f264d81b7d67b7e40419831749e47a4794feb5bad768459936bd790353"]}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x436}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="900002", @ANYRES16=r3]) 4.232531807s ago: executing program 3 (id=2841): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(0x3) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0x2f) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) close_range(r6, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x10001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}]}, &(0x7f00000001c0)=0x10) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x4}, &(0x7f0000001200)=0x8) mount$bind(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x290003, 0x0) 3.511106503s ago: executing program 6 (id=2842): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x401, &(0x7f00000002c0)) getresuid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000001c0)={0x9e0000, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in=@initdev, @in6=@mcast1}}, {{@in6=@private1}, 0x0, @in=@multicast2}}, &(0x7f0000000400)=0xe8) getuid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r1, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000002300)="eef6cb593cc534171a396a239fc3f996184e4cae09cf45ef28778a84b5e241d22591b9f8e41eb2e54c960e8a9bc33dc070e337dd7496d1014df3ec631287866af8cc38d6ac90e43bddeb393797f14e06f039dcec924ff49d177c08cc326d471f866149074f6dfba7ec99997b4608094cfc959e55a3197528185079625e3ad43286519bc290e08d244e0e55480b985c693c6bb55fa746854401f4c3cc9919140cdb243a2eaf76c6aeeaf2a1c7df1d519263d39758dbd4bddaa3b9c05e34993ec858cea565ca8aab2a1056c7c52a2f85a4a4a5c0439e55878ef0cec1f85817197ec29281c82352aa5423a569009d21998158619f7acccfdcf6ba913a1cc5ae0b0d81bb8783a5f8f9bd94c5be85e065220d6f50c39ab4adaa01003d765d2c75adcc91249f29abb047af41b07b1ee487ad9cf015775cb60d3ebf4cbb4a8e80d6442c7472f21a0cd7c9d8441b47856ee2021403011e341994e5af0a712d44304061d3c763926ae66807a0afa3d476841625b3e3486d05d8e6e7e9eb56e1eca14168254a9472e897a7a55228ef1a1f0133095f302aee58d9d45c1bbc18284e61e8794ecb112472bd09e34903b9ce0b9b0529ae509690bca49eb024a10ec0586c593d141de7bd5e7a648817471956986661131e3c7a2ec2f092230f234176302708d18d690dc2a2eafabced926cf7de0bbd21d245c087309a4ee297add66fd05bda8c5f21df09e2a5eaad3107b17301ae22181255bf6fa459fdf65b60ead8ac045786b84dff8bfed2903b3b9251084ec0b69c7e093fb56511f3c2c7dc32fa7a9faf1f6212cfa5aa4f55f0f2560a4e2f7eaedeb1f35756f8a2cd422156e3769b436a80f10acf5b5af94dacffe97495cd0829d6792214119b3a2b582f1739288a58c5e84a449d4052238acc337ffae17dafde02d9088172e77e69a9f34514522ca6879d022c69019be8bd0f3a07f64fbf40afee6987a8feb7c1b2a7fac50b850079e324b00f9a9ddf2a9f469cbe3a8a066075a53aa9bb3c6177ef8da067c07cb5d33a949a70d83cbea27eb7711d798982c884710df81e6d6ae8703fbde1553991f81fcafdf77fef37a760fdcd8a4f9e4feeac6cef32b837e5b762c450eac710a79becea70e1fa253a2f042706b128af03db89fc2b5e0d422a545a1f2b0a54496065d9355f108b08d9b8bc47e66d4532979c393078c4b14a71792b4cab84902614de8abb5f6c7adbfbf09b8ad6e7146957006677f041ce690f07a44fac3d5fd1c142b5f6679dc23dbc4c81da9ae093580d120662d95fbcf9f65f624a19efca886253f40a774cfb9c7ebe4841ee0e8d99c00ea99ba1044a9d1a2fcd6d1aab343a80ffa183b6cc1a12e41fc952569d9a8209169e9707f87c9f76c6128832f39f272b48c99befcf1ca3d4091d42b68f82df7de8dc9ac4c45f311593ff99748a45c8ea6a41d23c1f1d912a74cbb94276b061d59621cd1a93873c93d657859edc4aa70ba82cc08ad6f016b24a3f790b6a415f7609ae0b27eb0fbd16cd52134b482858d70bad17663920af2d251047b2980133551e87ac7a2098bca2279b53f5bddd168e7128985257cd94ef5b265c535cf791d536f79c111fdc1e35f8e6f6ebc0c0c16dae871ec5efcdcd3ca042dfe2fd45ae9278df3400a753284fb00f49b7ccda0df8bc316874a80566484c5054a0243ef9071031a5fdcfa2f33f4b006a97d28528dd2b8f9aa6715fa49767dbcd568e410143a9d51aa6cadeb54c0f78f96a90c524dbcfffe9dca539cfc3009345082cd41dd70a4ba3a4714103223db31088cae2ae850586dfc72dc6fa19d3a339a16ad905089a59aa5ae51dd453dc1bc67f4efcb1dbb9bbd1dcb5316766331cf443d9665108814d676a4613528ea1d7e0e1cce6f633b19d487cff27ce609485c431c4d2ab205b7dbb1084a68b989d64ce2908d2932b74e885a3fa0fd063032568dd445b2c043bde18cb0b8eb34b522076471a6d9e2cc120687d0c44164d3a20eda81370c39df7abb27dd232f82196c06ee93647a6146cae3e458baf2ce00cf8f6b7fcff71aa31eda92d25f276e07398fbd9304b52d891cb911178ab9ee4dad5d751ac3bdc2943a380dc74da6fab3bb6870ab6600344f8a03db868089b01ceea12d9fde8d236e131d849999e302f264aac35d2b53771cc15c2efa00ebfc26a7fa11f1564a3bd2fa128e411cbe029e740bde5d5a55905a91e0f7774f701f41c2f71631ad006c87a50c3ca5955a72d79bc4fe7e300929ad11c3d3686eae75cabe38d7064ab64df0f4c610ddb303d615f2df94e778dbc16622ebada2d16d1ff6357a745d96aa8294d4203192b37a3a6bb88c34428eb67d430fc69efbc2240fd8bcc2ce0897ae3a7dbcd47538dc95ae4a04e6b35d16c47cf4b0e11ec9d82601d32dd7207eb699cc59c18295edd4852547c5fedb394138de3d2ca4000fabae2d206d0ec57d0c22089cf2edcb0ed97e097cbd1c197116ea98bb0626870aa42160fee1b99845064f27b232ca0e50b90584b1018a1deb30be08f684aa6804e00e67c7f7bead173ccbd47a271139292944d0ac2d51773a53e42ce4dc9479943b5624705b4974b27d7e803dbc3c4d9562a44116c159901293facd5c7632d68042919a8c1bfc47bbc00d89de574c1af77890c250fbc6c585213316a65ef138fd3d54a100499ce63287d95576f0d899ff80269ae1a29d7f5418b4661e51f1fb84a929ed6c3afcb9dab79f4e8229766af020fb0e2d56badf8c77fad95452349477b5b29ee6a657f30087d8da34d061e9692291afe8101077bda7e9511ad21bc236eaeab5579e43d320fc017c9c2eb964b8fad0534f27d1807c56eefe2aa38ace9f504e51ab7b97ad407d50ba13663df3ba3a263adcf5d04cfccf6785f2961712c953771644406cf9edd25b5127c1277cb73c4e05a157a541b1cc6a54f1234838b3d307828e09926c3af81688672cda6bc74b2619efe8cbf4dac2a1be0a4187b2de2f12b13fb7fef97eafb768e07a0acc60634583ff26ef49731f371a4b2a86461bd364b77a4b0dc81bdf5d0600b8ed3245bb3ff3251c17fa40882823f757f85fe97faf786dd8c8df1c64853c0b1a8e9790ef2c017931296ae9d3e13c5055fcded99ea6b5cc662dc11a42c5ebde1a6302578b8bc891c63b4f7bdc493efd207e14cac64287e552847e0e582a8e253b13ae75b115466dd3d29661e769548c62bda526ed0ab91001f5ea182a816caaff28b39b24fe9866823ef4c414ea557af474f7dbe03bf968a4265f03968bb157852c04f74e78cedc432ba63b16b0988dcbc1372855597e72b01d224dd3c50747defe571221ec744faa1313732590c18e9da3e51fe8bc24fb997110fb29ea53e0d44fe87bd3a3d3c2b9d5da2a2ca8bded8ad21fbc6edb1d7badd3f6863ee3a1415c53af6f50b410e4cbb2481c000c41e2a522717dabefb04e7e90da67bf0865d023a59db29dc0b649c778db631721d1b24df10eea2279a81d6588e53af76dbf93ac60f4577a6107a1832bb2e24d596c4adf43604fbc3c9c122ebc7dd74531c03fc5ba7d94e161243a82d1e886c2ce38d01736a857af9e81815a9dad5e0125eb7e02ddadd611eb280fdae182521303e5beef93a0795dc3e53ebe853f7c9cef2f25dcedde2a6d801419791be3f6ecf7a693634762ffe203c06d20264c924c934cb737308a3208b8a8a6543099793cc1efaad2ad9da7507387ffd7476380d3efa427cc916e1f3623892adbe67dd062afecfa07f7193bf2e9f8143fb3c3bc857dd07f1507994bfa647c6510ef85b2f083d4d49995178266e3421a8737fd302288736ecd00e9bca3b5dfa91a637b9d096d12a767e673bcc55ef07e38b0f77b2a70025bbd1a51722fa668defcbefbf46211a8da19f28cd7cc21db52af5b37924f535a152801992b7faf61b83a28fcf60f7929282815a3ed3469cf0cf351fe4d0bfec9535ebec78773a107c2aac587813f3d86417ae1a74c8cd7b78e3d9c0bc527fee1f021f1eb2bf52655bb6a0e011bc5cbdc4fa3e1b8946cf575769de72a3c116b2cd1b701cd24052871a44fb688240ba12fbf64dc57674cb1c8aa9c3e58b3fa997ceed38648b2a5f8ea1a2edc0b887b295aa8acb46d4e4b3f8c3d512afa146c23f762260cfe57a4b1c63b4fd5feda6d1e0bac405c3ffea568e73c82332d5977f7dbb3d2e0a7496edb32ec3d9aab22c0f4170112a220d278c8b1791a3b6e95876d4df6f740525760a911ba4412eb1423d86d9d3dccc6b04d3d1206a2f3353ad81353053dc951ed8bdd16a714f76747ae8145ff47a97f350b2ffdd0491480bc0e65495cddb5c831adeaa39675dec5057eedb117446d98e9f12bce7d4b9ff07efeeed132a27f3911ad84794ab9e08e591e8449b1439231976881388467e7e5464d860ba20a1176aa0581300848767dfcfa5a4b44185f597cb296b9dc31ed148959e72f228d02b2795274b1939c1e906bc7d0585c72740f96769b2798af6e48a867aa4f27967aeedade6f48f5593511d71c02b76aa998fcd06b751ee6518c683b7db9c532dcda8e38a75e0f3b7d2bac6a2b67a2be51608807ccf6cb0a33a12b7f02652be39270b156f5f1f38d5f981bc145646745ee007c453158cd416e17cf7092045772a4c718c124c9a222f638a625cebcf7fc9a455bb8d0cdf79ddf122799d011f00300316612fadac91843b4a18a19211ca14341729d809e68dc476d59ef7571496e21a5dfc8906a0abb2c4784628097b8fb253f46f54378e72895f182cdbc689961c2dcbdb146ca4962ad64dde4bf76be23c7bdfeab03c48e236a36c389ebc3ad99f2dfe6dd1dca595491b97e43c6d0289a04245f3f411a02ef3f97e3b86aa9d07a4e6daff4bcdc4691a6a08a0e7443e9e3094f1f4bd053d5e6ec8371334238e47e6c76bd0208dd196eace9b063dc9d793a1f3441cafa7008ab69c5dfa6f3a84686449a233df0a710f9d64f29a6a85d1dc8a80fcf0c96722f44b849bc87f54cc68d52ec682106f7840d175ce23c8e9da097ded4b5ce3a0c06346623822e2daa60dadd418eca9403ba35388a34f89df71312a52103deebac43e353b24a38f7671813e1a5a8d346a258bcef32818dc7d31e773af8562d05a270bdbe51726c85e3acf6b4772cd2d25a2ffc100d39215ef267e10b4211b8d1449a82872e20ec5a08d38be99fefac95a76b04022f4c32779cdaf1f79bc9d808ec3794e492387d229812db194d45fcc3ca54bcdfbde0f23ca45b140c8ff50885f550be799bf6d7947ff5f4048fe914dd005c2e6d5a707b8d8d7cfccdc5e37fa8b2a94b5bb1730a5b0bbff64cc1bda43fac1394ca0a31a7874bf4c8fa4430a9c9184fb0582ee78140e774a44386ea9d6bdf778879da20c88abca770265fbcd39625ede5898f985ff653d08d725d1d6d1c49477350128dbd85d058c24b65495bc16f0dedd66409376db9dab5836687f9c0df39a38b6f738fad5ebd06246deada2c03f3c6c4bea313821f55b33e53b98af6a7d566e6548741298de0473c103ffda0c9f7ff1e479719435ef5781261650c93aa6cee3738b84a0d76aa16dd5c3d704afe83b2716c1eb1b3b10b0c97d7645a3213a763ec7904c904eb83381a50428975aae2faae627b9d6ad6162df0ba314bc2cf67fe235770a64e4293bda1f33afce96b33b66520e46c3f3b277fdca4a30139f2174b04ca0539ea8395c42a9c00febe329b432cadb29c4167c643269a38fd760fb9e660d22d5bd53ada8de362d2cae141c6640bfb0d73017f2b13f6e351c5a0bf848adf49f374fd6f8defb1b42807ed14e4b1493fb98155dc56ad6c7e9339f2d268e43cf01aa1847b8272c542632e7bf023e1fd47e778cc73ec1fe29c8ef1d1b0011b13a6fb31b132b73487f421e396fcdc3b9a7872b4fb9a58bd88cadad3f15aff3079433025006661aa99164050b8d79db0908161afb1258a9bbc762f742293bb72e502e9d694c22845f4fe046a0ca2c155c56ee58abcb1e247bf373324e395a6f2f7d793ca9fd2b72160127312906d51ef2c4443dabf11ce7d4d919fd0a4547f45e5a1635bf91a2d2f1b968cbbed71970bed3d3727d1fd6ebf116088c4c912ef6af11dafff40ac8bd2c32ba2cee2c6ce337257b9c1cbcb3eef1ddc77afdb3d6023ce7c669af07e7bf8e9ea530a785a0ad03c42445e70ad55dab16f5867a3f0b9aebb7ad740dd5a9540e19d185c523292c11314815b99091fc609bfefcefdf388adbc2e10722573f4026faf601517bfa59a9abc06e19581b0299195614e2cde602c4e18260885545ca412c2169c430f48d594728aadeeeb1bf5112110013ff28b291014111f0e6e2baef9a7504b78165a703198267be5fa7566a9ae78fb01d219a7aa5ca00f189cf91e57ef24d3feeb84c54a8ef0d729954ac992d51f06ccfd5b8917d48e41416928abd97b11eacf2806e0a1f453171d0416b4f67ff0cecf84e57374e1f64c136525790f63f9fe7fac0d9dcd7cbb1ac556ca7c9cf467759e4ac4e18af30df8046f78d0e248c9611b0ef3c544a2d8a5c617fe48ad9ceb8cfc8fa50faa317c2ed216718066c26e16aa3f43d65c6e0718a8939dbbeb2a9a9e6c1c28f3a33070669673970328dc7ac100b4578498c99111e14087eae5c16510d4ac4a74d49e20f451137171edb9ad5e53118fa95c07a98bd4dbf1c912a60c197eabe375d5af140f19616de137744f8c0153d47871078cdd92ea8e0e4b8899220b89217e272cc9d7ae9d2f0d6acb921fe7ee0da4102d01ab99614a71e932c3163efe1bfe087ab4013d8b4fe3efd325d7ee6aadec1a89843f66dbf4e511f8ef347e7aaaebf38bcaf7e9455a1ba2fad9fd7180daaae26a7ca2fdf5acd4b04288ed8426aef57551474aed8c783a8f000707d2e029e135cecdbd19d2ecc67282196db58a54d966a80ed1bff33709ef2a48d90e938b824ce1695e2c40c592e0ff97272999aa44f3fc5d57c5346660d78de97d652a4fab5b5d024c21d552a4dfa08c460e70e816010f5481905d3971d538cbdd7adf8c86b728eca1a1a6fe22d14621414f0cc03b14335876d67a2cd3663b026e4c016cf69a570aad183927679127434d8f8a0190a68179a25186fcfdbdabadb0e1a123cc2a2e0e5f596ec6b0a2dc09cefe580a5bcc463586fff6156d440fcf061587c3b070832892ec59705104ffe455ca7983ce002b9892ad928afe8c6244674ad8fadc7419f7b0f26ebbf3ca2be5ebcf8b3884f78279853ff71404c3d51677c908ebe984663860d028561b1fae16c3f53e6941c5c4101f16427eb641846ce895cc7af6cdc9cf1be5d6a83d79dfe9086de4170074332d8cb341b9d4f6eaee16d3272767b1af1722ae9fa0f3654ef377c83a1bca9e594506abaaa634fda9119754f2362cc8e9a52aa98ea5d70ec0c5c86d1fdf26c83357ceb8232754e54f5ccb8092e31ca92b5bf10a742607fdf0c96e7a650500370abda120bf3c50341be84401d71eaa5a37a36af2d971d2bf12bc726d3c16085a5b226f72dad0a47a402a6cd08df1666375c21a52e1bf281350193db208fd996f849232044a3ab7c5548be5b9aef204c58d093b7d3ba0c68715944fe07c4711f94de1a65e216c26bf5c4bddc9dd3f58a1f93e02f68a790d3796fb5565e506f464486765ec100c35ee3576052ea31a83cb5a0386eb1b2790bf30b8db6330a86e8298c1a8613ff25b2843cd6a99389ef96ae0e62b8260267a177fc8723d822c9cc8f8e9f4af26da30036c46d657f21b51996c165ee9986128b71716d721a9cbacd4c7cb651de08885014799d46be8a21c083181740f8db618448c7686552ad7d718f673112570d50d95d76e3e98ca00605d3946ef7673541bf0b051f6b4e9fd1fa9beb943c83c4b471b8af02741e9b2dd2146fcd40670fda1ea9b91797990c915a9bbeca8848fc5156315ce654f1f0f97f07a31ba7b3bb1dbdf08920b7fbb3f98964f3f5ab26a295e6224d675f10438713007ad4b0514e21ef2b92b3a25d4390baee7802e090be7cd1d069d10dd29a577778ceb53cf5c711135d28b407eb2611aaf63ecb1196619a3f2f39803a45e1d2c788a49c4071d33bc871e2f9cf5d1cd868bd4761622a674fa5f2de7917b296bb0f2f159ca2d0541e9ee2a303c04c133e115b98b3ca1685eb2ad13ffac939ca0997693e3a14bc61e0254fa5ff7c872f9165f35be44c5c952acf3329349bd7c928986202921b0d6743a5c995f2668a494aeb9a24ff28a2ca851b51257b6e8fb16b6094ed962c26e034a07e1535d4721007b008905b5073dc5e2f13767220c5cbd6240f5bcf71cba87b3162c8438ca542f46a2be1b5269b78be5e7c75ca3e28e5599c039aa2224344ce8611ea733b2070c92dc62672015d5b95c6f2d25fbb8174a9c7160f1d31fc8340b1d26344f19dac3050c19ceefadfa043665b1b834ef60b736a7a89f69ecba2c90c98743887ffb60067a6a2097e56333e318c2fbe97a253a7f8fb9e76ca09ba3ac814a734d86821ddff96a6745ea293b201f642f6eef2f44ff4b29306657c8f90de365ff62ed3c0b3322483c44e13e1146462254f930577c6407356140b4fc336a2ccba4c0cbda196b826024c8588b1687a6936fa71883f62e1ad001299afb456f68cbe97960b4a7eb7dc4b3e7435ae31491a1c5bf45e94d18ac920d1532bd561a6f67cdbc5cd433c668c406d277e1c82d9a745b1cf2dab47c8fe99d91d5bdc38ca649be119ddf9dff48897d725e7f8b68636145e91d64e43dd9c9467d91138793f800969f9c713ce4486e097662d4ed9710db9b836e2962b38f4dc44a1b5fd5e34f07cd37e01f095d75d6f351d406189ec5900d349cb87ca01e17b525bcc78226ac33fd11cdb330d9570fd7f0789858c0a32e5b50772c09956cd4be26a25b4a70f2aaa4ae214049f46327da49dc616cebf17b69a3b0fa6883bd7c0c335214eaa86475bf4acafdedf8488d5b83e729f68298045d2ffa378b0c6cec3a41dd9a64f4a1e6df74785c651bd7a60ca291e9ade28358787d16014e2e7f5175ffbd615d380ef1a98e223f0fac4e6ae6d2ee856a595d02a17b38ff6db9f681e5b7b8ec2c14b6e9aac3c187897e2edfec17be8e1f889efdf0a71ca485a74e21ec4fd061c99359b6be8d1a1defe4b6ef8e4dbb670678db5f2292fc59d38dd9f5551630fa87f3b3a51465d78d7005619aa02df1a745bdaaabbbafb645b8c9872ff9278620fe89bd6cd3bf4ba94b49127547cb0b6613f143c23fa539084fb23a48e2e7b8ac9375f6e76d752b3a3105bf2bc46c20a691a032badf941ee876e19cf291c704090236734503e99f2100e2edde13e1a68607f36b506f397ff57d6da23fe9fc2f9ad677dd1b51e3a218178476c422246b18ca8468d145be93cd5ba035081c546b8ae7815872cb65b911346066bb96672dcea7a35a63ead9e5ae9316d1bfab9bcf11ff8714f1d37d45425ae02a1b5a4e42df73d2b82690c347c7b5a44e20097712f3ed78548877515bb49ff36bf2193faab3765b352f65f47667268c86c404b0fb017175d0991b8f7730204c41e0d7cd07f91822781eb217408c09ffff0f2c75ebc523ebf768bd497f54350143049257a7119951eaf355e1242fd7250258f2d8ee82fa1bf1ea61dc2665ec981043cf45bc9633b451826adbae8dfdc0537365efcbf699e0b7ffe2cfb31835fcb8905465dd1c97d7c6807990920bc11efaa303c0a928bcb42768622cecb0dec47d8a205284885b7996386bd91fbbbd745934fac47fb589bd2f1d8f670eedb1bed81f51e8b5d876d90cc2267c602194f1dc72eef87c18771c1919beb5d7d396db943d4392b5c5a4979b7221cdb4d05ec7cc645d27d8a7d415b997ab191facd39d4a4ad29b50b0e660d0dd058d6299d31f54d1f1c690f7fb854cdebd9823860374f76d96e346555ace788204547ed4ea16ce37a890b9341ddf1c12d273aec9fa38cfdb16daf3fb4dc2e9f80fc9edf4fb83233f5472b960a4e3189980700f04149e149096ae3ff50bd56b248d5e2609f3b69d7569f0304499f75975e842691e835f5af3a1678701a4348c639fa9056be1bd2cb1b7ea86cb964534aa4fc539dd54d394427e1f26cd1a0076671d9b252c63090d5071e90f180e426103ad971350b16c902d911b7b1165bc780ea1ae4f85cf5eb169d665f1c81eea2e10abb59d710482dfe054958e840bd26c88432ebb4541491b8e29732d8c3d81b2ed55c3d5cc54d59bee88c830933c3cf6ff564ed67b5d18a5669f4e1638423ee39c42be9ea70a49cafb391f9548ab55f937b89336c69ce534a309660545ec7fc04bff59a6d9c514322875eb602d06c5f5bce62a3b647e3858c95239dee173a24b51496b8e7df857754c7eff263fcbda128e8e06d73590ab62194181bfb16adc6e86a3f48e46463597754271f9587702160b9d28de630e825e87699d2cbaedabad39ad1efd4a6d34c1bf095efc102d71389a8b63f51102672c871b5c9220d91bfae833340101c4835ccca63e8f32cc6fc4dbef5c15011104e0060d5d1204f21dac6ace54b6758287ef05cfb372899fd57a97a13dc16e900f25d3b10dce4b38334adea53fdf8a19bec33be0bdfb8905d3ba2ec6658f8330be0a86b2f87dca505b4a7666552c882a3538074f55268d115ef10a18a2e03398d6bcb9e3b5280c54c47fa7ed9066dda231127845cf2ba9dd77e1e219b439f59181788f405e933442b05d90c605c71ef1c8833b54a2fac542447f40deac05618d5d3967130ff721b518b8c026b18cdaaa9818f8fc97e70a8fe35e72db12d9785d147d30060ba607278324f87f3bf2c89bde6d75626d887a7dd793bd039b03f8cd90641621c2cf9103361ac90a8a7809bf16f7b3255b519e0644307836594df4b85208b6cce683193a25d5bd1e486aa8606c08817d846ec6497e814c03d3b0a832af39a6e0567f18ced47fca6ceb1b16422441a3f2e7dad85bbe9a5879ca6c4293171f4514efd609db76e767b5d9b630ffd0dbaba22e09d376d859ec14a5eaebe6eb9f1e6d411d35773f6faccfa613e4c668c7114f724933eeb14cc2c6a8e5a816bdbf4beb735b692b906537b5ef709ecb3d7ff15780e1cf7149bfb3df9c712437972f12796aeb4cf435d0b20f7d530fbb58487286a8589277be4071536d8829cfdf3b125ef1ddc38a403f5dcc71ec9e8c8f3ce32b7638acdd1d300b12ba906100f497bfbf314efc2cc928ed1892190c5042ece30557f28b7b15b4a8cfd1c008b521203944e50cbc7a64cad47cc49f843a5fc74b28b63efa1b402162d5ecbb692abef3621e9a3f5c61e6b83e5b012e2ddcf46e4305dc769c9a076f0b2e520c1d7d7ebb6d009518b3f44696cd9c7adc20c5efe3b5739422a269a042d6b3dadac745dfe6e8f8b4230bf123332840db2b6d73c5e16ec1efcabd1af1d710ea9114a3f3fc4c882f0dbd7167298ff1f2a622ff66e9f9aff9e6fc514ce5bf2bad3572b15cd5c422f9c54b421acbc016090c24ab596f9e7e679ff80c9bf53fe964ffa0ebe678023c27beb4ad66e7563e01ca3b2a5ad25770d18aabbb4b6c32490206678e10051e8d41beba7b5d3abdf610e9d99229842ffc62a9f69140ac1a07991", 0x2000, &(0x7f0000007000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006ec0)={0x130, 0x0, 0x0, {0x7, 0x2, 0x0, '\x00', {0x7ff, 0x7ff, 0x4, 0x3, r2, r3, 0x0, '\x00', 0x7, 0x6, 0x0, 0x10000, {0x9, 0x3}, {0x1, 0x2}, {0xb, 0x5}, {0x7acf985f}, 0x8, 0x9, 0x1, 0x943a}}}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f000000c400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r6, r7, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r8, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r8, &(0x7f0000000140)={0x90, 0x0, r9, {0x4000000000007, 0x0, 0x8, 0xe, 0x0, 0x1, {0x2000000002, 0x0, 0x6, 0x5, 0x8, 0x7, 0x7, 0x3, 0x7ff, 0x2000, 0x7, r10, r11, 0x5, 0xfff}}}, 0x90) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002480)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0, 0xee01}}, './file0\x00'}) getresgid(&(0x7f00000024c0), &(0x7f0000002500), &(0x7f0000002540)) read$FUSE(0xffffffffffffffff, &(0x7f0000002580)={0x2020}, 0x2020) r12 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r12, 0xc02064b2, &(0x7f0000000000)={0x96b, 0xb, 0x400}) r13 = syz_open_dev$dri(&(0x7f0000000180), 0xcaf8, 0x40000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r13, 0xc02064b2, &(0x7f00000000c0)={0xfc, 0x3, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r13, 0xc02064b2, &(0x7f0000000040)={0x9, 0x2, 0x2}) close_range(r12, r13, 0x0) 2.929034694s ago: executing program 6 (id=2843): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x21fd, 0xdd36, 0xfffffff7, 0x8000, 0x6}) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003) socket$inet6(0xa, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$SG_BLKTRACESTART(r0, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x3800) socket$inet6_udp(0xa, 0x2, 0x0) 2.89315237s ago: executing program 8 (id=2844): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xbc, 0xbc, 0x6, [@var={0xb, 0x0, 0x0, 0xe, 0x1}, @restrict={0x6, 0x0, 0x0, 0xb, 0x2}, @volatile={0x4, 0x0, 0x0, 0x9, 0x3}, @typedef={0x9, 0x0, 0x0, 0x8, 0x1}, @typedef={0xa, 0x0, 0x0, 0x8, 0x4}, @struct={0x8, 0x6, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x5, 0x791b}, {0x7, 0x1, 0xf3}, {0x1}, {0x3, 0x1, 0x622}, {0x7, 0x3, 0x8}, {0x4, 0x3, 0x3}]}, @func={0x10, 0x0, 0x0, 0xc, 0x5}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x1a, 0x0, 0x0, 0x6}, @func={0x8, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x61, 0x0, 0x30, 0x61]}}, &(0x7f0000000140)=""/198, 0xda, 0xc6, 0x0, 0x308b, 0x10000, @value=r1}, 0x28) r2 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.884194092s ago: executing program 3 (id=2845): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x401, 0x0) write(r0, &(0x7f00000001c0)='p:s/p ./file0:0\f', 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x83, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000f00b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.242350506s ago: executing program 3 (id=2846): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) listen(0xffffffffffffffff, 0x0) socket$unix(0x1, 0x1, 0x0) setreuid(0x0, 0x0) socket$inet(0x2, 0x2, 0x11) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) io_setup(0x5, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x80000100008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2.236843354s ago: executing program 5 (id=2847): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x89, 0x2, 0xfd, 0x0, 0x7, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 1.914301338s ago: executing program 3 (id=2848): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d0400000000000000000000040000000004000000000000080300a9d3163a335a4153"], 0x0, 0x52}, 0x28) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r3 = syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r4, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0xfedd) r5 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000240)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000000)={0x100000, 0x0, 0xfffffffc}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r6, &(0x7f0000000580), 0x0) read$char_usb(r6, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) r7 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvfrom(r2, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x500, 0x0, 0x0) 1.768765055s ago: executing program 2 (id=2849): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0xfffff9e3, 0x5}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x101180, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(0xffffffffffffffff, 0x4068aea3, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff"], 0x0) ioctl$KVM_CAP_HYPERV_SEND_IPI(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, 0x0) 1.152881603s ago: executing program 5 (id=2850): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYRES8], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) syz_init_net_socket$llc(0x1a, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffeb) 1.030470314s ago: executing program 6 (id=2851): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x5, &(0x7f0000000100)=0x101, 0x4) r1 = socket(0x2d, 0x2, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) 913.017826ms ago: executing program 5 (id=2852): r0 = syz_open_procfs(0x0, &(0x7f0000000c80)='fdinfo\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="042f014b"], 0x4) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000e50000460c7507d4ff2615fffb13e945bb491c7859e77414b35908660c391944b7fde7379c3e65b8e863edbca2ab0b928d59e7b7c44039f9dc49e4540ec7694fad487b919fc80e1ac3da91800c015d3184abcdcfee23b6509910645cf036d1174ae60940f33ed0956df8a06d5b72f0cab5f34226a07d95a0019e8211b5995c7bf2e735e859a97d29b3555265b640b5c68edae8e2ff5f60cd507b29e33808fc00e7d842d86ceae3f4bc74a9cb6c02839887949b62fbf2c4c36811609375d8befea4427d94702da003c6"], 0x50) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x4, "d30f388c52e47600000000000000000000000300", 0x0, 0x5, 0xfff, 0xffffffde}, 0x3c) getdents64(r0, &(0x7f0000002440)=""/181, 0xb5) r5 = socket$kcm(0x10, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x890b, &(0x7f0000000100)="000000000000000000000000000000000f0000006c61706230") bpf$MAP_CREATE(0x0, 0x0, 0x50) setns(0xc9, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8) writev(r7, &(0x7f0000000300)=[{&(0x7f0000000080)='X\x00', 0xfdef}], 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001080)=[{0x0, 0x30}, {&(0x7f00000010c0)=ANY=[], 0x1fc}], 0x2}, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002", 0x29}, {&(0x7f0000000000)="11c9064268e957a720", 0x9}], 0x2}, 0x40) syz_usb_connect(0x1, 0x155, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x9f, 0x70, 0x62, 0x20, 0xc45, 0x6282, 0xe7d6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x143, 0x2, 0x1, 0x1, 0x80, 0x4, "", [{{0x9, 0x4, 0x6c, 0xaa, 0x2, 0x65, 0x5a, 0x2c, 0x9, [], [{{0x9, 0x5, 0x4, 0x4, 0x10, 0x1, 0x79, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x60, 0xc, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x8dbe}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0x4}]}}]}}, {{0x9, 0x4, 0xc9, 0x7f, 0xb, 0x1b, 0xd7, 0x10, 0xe9, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x26}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x100, 0x1, 0x4, 0xff}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0x3, "488a"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x204, 0x2, 0x1, 0x7f, 0x2}]}, @uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0x1, 0xa, "ee40"}]}], [{{0x9, 0x5, 0x3, 0x8, 0x0, 0x9, 0x5, 0x83, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x30, 0x101}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x57, 0x9, 0x4, [@generic={0x34, 0x4, "eddc48d6ea9ec62ae40d14118f4606a4cc247a4ea96817c8fba21effcff0d691f30adf27bb614dd9192dd2268d5345df0079"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x5}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0xff, 0xd3, 0xf}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x26, 0xa, 0xcf}}, {{0x9, 0x5, 0x3, 0x2, 0x48, 0x5, 0x18, 0x4}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x6, 0x9, 0xe}}, {{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x7f, 0xef, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x4}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0xff, 0x0, 0x8, [@generic={0x17, 0x9, "19fec2aea4c9133086a190f02aeffb19c44f506fd4"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0xfb, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0xffc0}]}}, {{0x9, 0x5, 0x1, 0x10, 0x10, 0x4, 0x1, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x78}]}}, {{0x9, 0x5, 0xb, 0xc, 0x400, 0x21, 0x10, 0x1}}]}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x250, 0x5, 0x3, 0x5, 0x8, 0x6}, 0x78, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050f7880060b1001046600d33d03e20200f514100a074200000000000004c0092775935601d80e6005eaa472e2b86c3a2f1003ece1dbb0298b4361e480b6a879e413ad0f1defda5d35f86839ad6e0f499f8762c8bc144d67148aea804617c7071002085400800a100300010007071000"/122], 0x8, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x861}}, {0xd4, &(0x7f0000000740)=ANY=[@ANYBLOB="d403ae2d0056d71762e230b20fc83c4b7d0929a3587cbdabb27e5e053deb6e136e2e407cd160ecbb6f4927297f375ba2cfca72e763c3352cf8ff4136807931dc6289846022f424141bf1ccd0e83e973f17e8335cc8d074a2d828ff975c75e11a33d119cbe7c66f514160e900b50a09e55edfb8598be76ee00f896ca78c69fd8d4902451e409ee3c37e954139e2a771ad8e282ec00bd95f635268bd0761f4394c7e51dd46fa4cf0e1b396c75607149315b18a6a6b0c56c5226011c266f8110a81fe44a840d91b4f6003e80e2d5649f4ab"]}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x80b}}, {0xba, &(0x7f0000000880)=ANY=[@ANYBLOB="ba030fbe063409534beb0ee5e41f91d5a5e281f713a5fc348d84737c75468e2c40ce35d2e327c5f1b0e6ede8cb3c8127e45a1eb76f1e365bcb0f6dcc2670944b11ec9d8d2306dfeb345068d6242f453f09e73d2ab4475ba23253788a1a1e348f868cdbde7d155c28abb5a30bf0a568ab24dd6a2e2107b832b4d368a5657b580accbdd4da866dd65e07845069ed3deae683175e14cd21bbfb0f385be5f06481e1d601908003126a0da6b5f61f52e89eb43ed9ca795a9abcfad6d4"]}, {0xa5, &(0x7f0000000940)=ANY=[@ANYBLOB="a503e2ce9b2a4b9789e5a8fc12bf9b271400caab6242a89c6ac1f2f488b8596b7e33bdd9792a42f9928236a2ea9ff684030685f31f6dbdd1f4e6d16c77e6151b5f5fa55cfb24f2d1f4b05fef529b00879ba60d45fe8e6cf4fe9d4200b9fa57846b825992b930e90b9d907c7aa54bba724ee8019da1fc748c34d3402496c192da1e8935843d39bfd0a64c00e2d5f05b0a1c6fb35024ef2e5469db63dfd3281b81"]}, {0xa4, &(0x7f0000000a00)=ANY=[@ANYBLOB="a4036800c65c0f8bd230c5ee577651ab5573c3aeab01a5e3795395ab7bb5819004386b427d10b3236ea5fb63487b7f8d05cbdc9bf3f264d81b7d67b7e40419831749e47a4794feb5bad768459936bd790353a18d20e6d281db6cfed733fede954b678ce3156c8bb6fef84faa9f10cd23c0887c91fdc7c9a40c73df"]}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x436}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)=ANY=[@ANYBLOB="900002", @ANYRES16=r3]) 880.857498ms ago: executing program 6 (id=2853): r0 = syz_open_procfs$userns(0x0, &(0x7f0000000140)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1c0, 0x0, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x1a8, 0xffffffff, 0xffffffff, 0x1a8, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @empty, 0xffffffff, 0x0, 'syz_tun\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x70, 0x90, 0x0, {0x0, 0x1c8}}, @unspec=@NOTRACK={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0xffffff, 'wlan0\x00', 'vcan0\x00', {}, {0xff}, 0x29}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x220) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000006}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$peeksig(0x1a, r1, 0x0, &(0x7f0000000040)) fcntl$setflags(r0, 0x2, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000000)={0x1, 0x0, 0x1a, 0x3, 0x155, 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x6, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x400, 0xfffffb9a, 0xfffffffe, 0x0, 0xffffffeb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x200, 0x2, 0x5, 0x2000000e, 0x6, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x2, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x7, 0x6, 0x6, 0x1, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x1e88, 0x1000, 0x80000001, 0xffff0000, 0x3f92, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x10000, 0x4, 0x4, 0x400004, 0x3, 0x7, 0x3, 0x8, 0xb3c, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x88, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x7fff, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x4, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000041000100fcff0700040000000100000004004880140001801000108004000b8008000100ac1414bb080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) openat$cgroup_type(r9, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f0000545000/0x2000)=nil, 0x2000, 0xb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r11, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 190.89156ms ago: executing program 8 (id=2854): syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x48840, 0x0) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000000c0)={0x1, 0x6, 0x200000, 0x8, 0x2, 0xffbffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0xa0010000000000, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) 0s ago: executing program 2 (id=2855): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x100, 0x16f) openat$fuse(0xffffffffffffff9c, &(0x7f0000019300), 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0x80044d76, &(0x7f0000000040)=0x5f) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004804) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000019380)=ANY=[@ANYBLOB="0b000000000000d2cf9738ca2d69000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510860f8cccd1aa400"/151], 0x90) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000300)=""/102400, 0x19000) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000007200010b2bbd7000fedfdf250700000088"], 0x18}}, 0x4040) socket$inet6(0xa, 0x5, 0x80) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="a01547476d0c490862835c95330021ca62ceaa899993", @ANYRES32=r6, @ANYBLOB="83040500000000001c0012800e0001006970366772657461700000000800028004001200"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000019340), 0x400, 0x0) kernel console output (not intermixed with test programs): ver xr_serial failed with error -71 [ 773.882282][ T10] usb 4-1: USB disconnect, device number 72 [ 773.922006][ T10] xr_serial 4-1:150.204: device disconnected [ 774.173497][T14638] netlink: 'syz.7.2347': attribute type 2 has an invalid length. [ 774.204872][T14638] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2347'. [ 775.692069][T14667] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2358'. [ 775.737788][ T10] usb 6-1: new full-speed USB device number 76 using dummy_hcd [ 775.925599][ T10] usb 6-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 775.969183][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 776.041095][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 776.075537][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.113356][ T10] usb 6-1: config 0 descriptor?? [ 776.915711][ T30] audit: type=1400 audit(1786902518.742:1678): avc: denied { lock } for pid=14661 comm="syz.5.2356" path="socket:[48644]" dev="sockfs" ino=48644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 776.941116][T14675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2356'. [ 781.406204][T14709] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2369'. [ 781.701971][ T10] usbhid 6-1:0.0: can't add hid device: -32 [ 781.729212][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 781.851734][T12810] usb 6-1: USB disconnect, device number 76 [ 781.892931][T14711] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2370'. [ 781.945328][ T30] audit: type=1400 audit(1786902523.782:1679): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 782.223293][T14718] FAULT_INJECTION: forcing a failure. [ 782.223293][T14718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 782.238181][T14718] CPU: 0 UID: 0 PID: 14718 Comm: syz.7.2373 Tainted: G L syzkaller #0 PREEMPT(full) [ 782.238204][T14718] Tainted: [L]=SOFTLOCKUP [ 782.238209][T14718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 782.238217][T14718] Call Trace: [ 782.238222][T14718] [ 782.238229][T14718] dump_stack_lvl+0x100/0x190 [ 782.238260][T14718] should_fail_ex.cold+0x5/0xa [ 782.238279][T14718] _copy_to_user+0x32/0xd0 [ 782.238302][T14718] simple_read_from_buffer+0xcb/0x170 [ 782.238319][T14718] proc_fail_nth_read+0x1af/0x230 [ 782.238344][T14718] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 782.238369][T14718] ? rw_verify_area+0xce/0x6d0 [ 782.238389][T14718] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 782.238413][T14718] vfs_read+0x1e4/0xb40 [ 782.238439][T14718] ? __pfx_vfs_read+0x10/0x10 [ 782.238461][T14718] ? __fget_files+0x215/0x3d0 [ 782.238482][T14718] ? __fget_files+0x21f/0x3d0 [ 782.238506][T14718] ksys_read+0x12a/0x250 [ 782.238521][T14718] ? __pfx_ksys_read+0x10/0x10 [ 782.238544][T14718] do_syscall_64+0x115/0x870 [ 782.238562][T14718] ? clear_bhb_loop+0x70/0xc0 [ 782.238582][T14718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.238598][T14718] RIP: 0033:0x7fc75655e90e [ 782.238612][T14718] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 782.238627][T14718] RSP: 002b:00007fc757525fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 782.238643][T14718] RAX: ffffffffffffffda RBX: 00007fc7575266c0 RCX: 00007fc75655e90e [ 782.238654][T14718] RDX: 000000000000000f RSI: 00007fc7575260a0 RDI: 0000000000000004 [ 782.238664][T14718] RBP: 00007fc757526090 R08: 0000000000000000 R09: 0000000000000000 [ 782.238673][T14718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 782.238683][T14718] R13: 00007fc756826038 R14: 00007fc756825fa0 R15: 00007fff178d8d28 [ 782.238706][T14718] [ 782.920652][T14721] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2374'. [ 782.929643][T14721] tipc: Started in network mode [ 782.934505][T14721] tipc: Node identity 16bb726f1a29, cluster identity 4711 [ 782.942233][T14721] tipc: Enabled bearer , priority 10 [ 783.399742][T14729] FAULT_INJECTION: forcing a failure. [ 783.399742][T14729] name failslab, interval 1, probability 1, space 0, times 0 [ 783.439239][T14729] CPU: 1 UID: 0 PID: 14729 Comm: syz.7.2377 Tainted: G L syzkaller #0 PREEMPT(full) [ 783.439268][T14729] Tainted: [L]=SOFTLOCKUP [ 783.439275][T14729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 783.439284][T14729] Call Trace: [ 783.439291][T14729] [ 783.439298][T14729] dump_stack_lvl+0x100/0x190 [ 783.439324][T14729] should_fail_ex.cold+0x5/0xa [ 783.439348][T14729] should_failslab+0xc2/0x120 [ 783.439372][T14729] __kmalloc_cache_noprof+0x91/0x6c0 [ 783.439391][T14729] ? tcf_chain_create+0x98/0x370 [ 783.439421][T14729] tcf_chain_create+0x98/0x370 [ 783.439449][T14729] __tcf_chain_get+0x153/0x1b0 [ 783.439469][T14729] tc_new_tfilter+0x640/0x24a0 [ 783.439498][T14729] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 783.439519][T14729] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 783.439541][T14729] ? __pfx_tc_new_tfilter+0x10/0x10 [ 783.439582][T14729] ? find_held_lock+0x2b/0x80 [ 783.439600][T14729] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 783.439628][T14729] ? __pfx_tc_new_tfilter+0x10/0x10 [ 783.439647][T14729] rtnetlink_rcv_msg+0x95e/0xe90 [ 783.439674][T14729] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 783.439703][T14729] ? __lock_acquire+0x49f/0x1a40 [ 783.439730][T14729] netlink_rcv_skb+0x159/0x420 [ 783.439750][T14729] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 783.439776][T14729] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 783.439813][T14729] ? netlink_deliver_tap+0x1ae/0xcc0 [ 783.439836][T14729] netlink_unicast+0x585/0x850 [ 783.439860][T14729] ? __pfx_netlink_unicast+0x10/0x10 [ 783.439880][T14729] ? __pfx_sock_has_perm+0x10/0x10 [ 783.439908][T14729] netlink_sendmsg+0x8b0/0xda0 [ 783.439933][T14729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 783.439955][T14729] ? selinux_socket_sendmsg+0x198/0x2f0 [ 783.439984][T14729] ____sys_sendmsg+0xa4d/0xbe0 [ 783.439999][T14729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 783.440021][T14729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 783.440049][T14729] ___sys_sendmsg+0x190/0x1e0 [ 783.440069][T14729] ? __pfx____sys_sendmsg+0x10/0x10 [ 783.440087][T14729] ? __lock_acquire+0x49f/0x1a40 [ 783.440109][T14729] ? get_pid_task+0x106/0x250 [ 783.440154][T14729] __sys_sendmsg+0x160/0x210 [ 783.440178][T14729] ? __pfx___sys_sendmsg+0x10/0x10 [ 783.440214][T14729] do_syscall_64+0x115/0x870 [ 783.440234][T14729] ? clear_bhb_loop+0x70/0xc0 [ 783.440257][T14729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.440275][T14729] RIP: 0033:0x7fc75659e0d9 [ 783.440290][T14729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.440306][T14729] RSP: 002b:00007fc757526028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 783.440323][T14729] RAX: ffffffffffffffda RBX: 00007fc756825fa0 RCX: 00007fc75659e0d9 [ 783.440335][T14729] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004 [ 783.440346][T14729] RBP: 00007fc757526090 R08: 0000000000000000 R09: 0000000000000000 [ 783.440356][T14729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 783.440366][T14729] R13: 00007fc756826038 R14: 00007fc756825fa0 R15: 00007fff178d8d28 [ 783.440389][T14729] [ 784.128406][T12494] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 784.140017][T12494] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 784.153868][T12494] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 784.161753][T12494] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 784.169342][T12494] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 784.836374][ T5789] tipc: Node number set to 210924143 [ 784.894405][T14749] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2380'. [ 784.940638][T14753] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2382'. [ 785.233349][T10911] syz_tun (unregistering): left allmulticast mode [ 785.440556][ T30] audit: type=1400 audit(1786902527.272:1680): avc: denied { write } for pid=14765 comm="syz.6.2384" name="configs" dev="configfs" ino=15080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 785.702901][ T30] audit: type=1400 audit(1786902527.272:1681): avc: denied { write } for pid=14765 comm="syz.6.2384" name="functions" dev="configfs" ino=15079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 785.784936][ T5695] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 785.868073][ T30] audit: type=1400 audit(1786902527.302:1682): avc: denied { write } for pid=14765 comm="syz.6.2384" name="c.1" dev="configfs" ino=48843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 785.902327][ T30] audit: type=1400 audit(1786902527.302:1683): avc: denied { write } for pid=14765 comm="syz.6.2384" name="c.1" dev="configfs" ino=48843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 786.005075][ T5695] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 786.071314][ T5695] usb 1-1: Dual-Role OTG device on HNP port [ 786.246067][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.265789][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2385'. [ 786.274759][T14782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2385'. [ 786.284517][ T50] Bluetooth: hci5: command tx timeout [ 786.332412][ T5695] gspca_main: spca501-2.14.0 probing 0000:0000 [ 786.338998][ T5695] gspca_spca501: reg write: error -32 [ 786.344406][ T5695] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 786.351293][ T5695] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 786.360104][ T5695] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 786.438828][T14789] ip_tables: iptables: counters copy to user failed while replacing table [ 786.485264][ T50] Bluetooth: hci2: Malformed Event: 0x2f [ 786.861294][T14736] lo speed is unknown, defaulting to 1000 [ 786.887217][ T30] audit: type=1400 audit(1786902528.712:1684): avc: denied { write } for pid=14745 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.175224][T14789] netlink: 'syz.6.2388': attribute type 10 has an invalid length. [ 787.212444][ T30] audit: type=1400 audit(1786902529.042:1685): avc: denied { write } for pid=14798 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.426536][ T5695] usb 7-1: new low-speed USB device number 53 using dummy_hcd [ 787.603055][ T30] audit: type=1400 audit(1786902529.412:1686): avc: denied { setattr } for pid=14808 comm="syz.5.2391" name="midiC2D0" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 787.634968][ T5695] usb 7-1: Invalid ep0 maxpacket: 32 [ 787.774442][ T5695] usb 7-1: new low-speed USB device number 54 using dummy_hcd [ 787.925925][ T30] audit: type=1400 audit(1786902529.762:1687): avc: denied { write } for pid=14804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.979400][ T5695] usb 7-1: Invalid ep0 maxpacket: 32 [ 788.011878][ T5695] usb usb7-port1: attempt power cycle [ 788.187770][ T30] audit: type=1400 audit(1786902529.982:1688): avc: denied { write } for pid=14827 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 788.364777][ T50] Bluetooth: hci5: command tx timeout [ 788.370045][T14736] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.384420][ T5695] usb 7-1: new low-speed USB device number 55 using dummy_hcd [ 788.408533][ T5695] usb 7-1: Invalid ep0 maxpacket: 32 [ 788.581849][T14736] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.594401][ T5695] usb 7-1: new low-speed USB device number 56 using dummy_hcd [ 788.621049][T14736] bridge_slave_0: entered allmulticast mode [ 788.635157][ T5695] usb 7-1: Invalid ep0 maxpacket: 32 [ 788.641823][T14736] bridge_slave_0: entered promiscuous mode [ 788.651639][ T5695] usb usb7-port1: unable to enumerate USB device [ 788.677930][T14736] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.704215][T14736] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.746390][T14736] bridge_slave_1: entered allmulticast mode [ 788.776008][T14736] bridge_slave_1: entered promiscuous mode [ 788.848949][T14736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.881584][T14736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.929780][T14736] team0: Port device team_slave_0 added [ 788.962179][T14736] team0: Port device team_slave_1 added [ 789.027733][ T10] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 789.083208][T14736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.112432][T14736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 789.143272][T14736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.161760][T14833] netlink: 168 bytes leftover after parsing attributes in process `syz.7.2394'. [ 789.171556][T14736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.178606][T14736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 789.206059][T14736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.293763][T14736] hsr_slave_0: entered promiscuous mode [ 789.300829][T14736] hsr_slave_1: entered promiscuous mode [ 789.307585][T14736] debugfs: 'hsr0' already exists in 'hsr' [ 789.316099][T14736] Cannot create hsr debugfs directory [ 789.380575][T14839] netlink: zone id is out of range [ 789.387356][T14839] netlink: zone id is out of range [ 789.392933][T14839] netlink: zone id is out of range [ 789.411017][ T10] usb 6-1: New USB device found, idVendor=044f, idProduct=b324, bcdDevice= 0.00 [ 789.527908][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.717244][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.922763][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 790.170014][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.264673][ T10] usb 6-1: config 0 descriptor?? [ 790.454427][ T50] Bluetooth: hci5: command tx timeout [ 790.946300][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2395'. [ 790.979576][T14847] FAULT_INJECTION: forcing a failure. [ 790.979576][T14847] name failslab, interval 1, probability 1, space 0, times 0 [ 790.992343][T14847] CPU: 1 UID: 0 PID: 14847 Comm: syz.7.2398 Tainted: G L syzkaller #0 PREEMPT(full) [ 790.992371][T14847] Tainted: [L]=SOFTLOCKUP [ 790.992377][T14847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 790.992388][T14847] Call Trace: [ 790.992394][T14847] [ 790.992401][T14847] dump_stack_lvl+0x100/0x190 [ 790.992428][T14847] should_fail_ex.cold+0x5/0xa [ 790.992452][T14847] should_failslab+0xc2/0x120 [ 790.992478][T14847] __kmalloc_noprof+0xfc/0x820 [ 790.992500][T14847] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 790.992530][T14847] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 790.992560][T14847] genl_family_rcv_msg_doit+0xc7/0x300 [ 790.992586][T14847] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 790.992617][T14847] ? bpf_lsm_capable+0x9/0x10 [ 790.992636][T14847] ? security_capable+0x80/0x260 [ 790.992660][T14847] ? ns_capable+0xd2/0xf0 [ 790.992685][T14847] genl_rcv_msg+0x560/0x800 [ 790.992710][T14847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 790.992733][T14847] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 790.992761][T14847] netlink_rcv_skb+0x159/0x420 [ 790.992781][T14847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 790.992804][T14847] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 790.992835][T14847] ? netlink_deliver_tap+0x1ae/0xcc0 [ 790.992858][T14847] genl_rcv+0x28/0x40 [ 790.992877][T14847] netlink_unicast+0x585/0x850 [ 790.992901][T14847] ? __pfx_netlink_unicast+0x10/0x10 [ 790.992929][T14847] netlink_sendmsg+0x8b0/0xda0 [ 790.992953][T14847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 790.992975][T14847] ? selinux_socket_sendmsg+0x198/0x2f0 [ 790.993006][T14847] ____sys_sendmsg+0xa4d/0xbe0 [ 790.993023][T14847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 790.993045][T14847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 790.993075][T14847] ___sys_sendmsg+0x190/0x1e0 [ 790.993099][T14847] ? __pfx____sys_sendmsg+0x10/0x10 [ 790.993116][T14847] ? __lock_acquire+0x49f/0x1a40 [ 790.993139][T14847] ? get_pid_task+0x106/0x250 [ 790.993185][T14847] __sys_sendmsg+0x160/0x210 [ 790.993210][T14847] ? __pfx___sys_sendmsg+0x10/0x10 [ 790.993248][T14847] do_syscall_64+0x115/0x870 [ 790.993268][T14847] ? clear_bhb_loop+0x70/0xc0 [ 790.993290][T14847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.993313][T14847] RIP: 0033:0x7fc75659e0d9 [ 790.993328][T14847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.993345][T14847] RSP: 002b:00007fc757526028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 790.993363][T14847] RAX: ffffffffffffffda RBX: 00007fc756825fa0 RCX: 00007fc75659e0d9 [ 790.993375][T14847] RDX: 0000000000004040 RSI: 0000200000000000 RDI: 0000000000000004 [ 790.993385][T14847] RBP: 00007fc757526090 R08: 0000000000000000 R09: 0000000000000000 [ 790.993395][T14847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.993405][T14847] R13: 00007fc756826038 R14: 00007fc756825fa0 R15: 00007fff178d8d28 [ 790.993429][T14847] [ 791.285560][ T9] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 791.329875][ T10] thrustmaster 0003:044F:B324.0009: item 0 0 0 9 parsing failed [ 791.352848][ T10] thrustmaster 0003:044F:B324.0009: parse failed [ 791.369816][ T10] thrustmaster 0003:044F:B324.0009: probe with driver thrustmaster failed with error -22 [ 791.465961][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 791.472010][ T9] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 791.500266][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.518253][ T9] usb 7-1: Product: syz [ 791.522818][ T9] usb 7-1: Manufacturer: syz [ 791.529097][ T9] usb 7-1: SerialNumber: syz [ 791.562310][ T9] usb 7-1: config 0 descriptor?? [ 791.609849][ T9] visor 7-1:0.0: Sony Clie 3.5 converter detected [ 791.990006][T14856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.023115][T14856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.068702][ T10] usb 6-1: USB disconnect, device number 77 [ 792.097484][ T9] usb 7-1: clie_3_5_startup: get config number failed: -71 [ 792.136340][ T9] visor 7-1:0.0: probe with driver visor failed with error -71 [ 792.149002][T14858] team0: Port device dummy0 removed [ 792.181043][T14859] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2401'. [ 792.181233][ T9] usb 7-1: USB disconnect, device number 57 [ 792.216631][T14858] bridge_slave_0: left allmulticast mode [ 792.227334][T14858] bridge_slave_0: left promiscuous mode [ 792.238520][T14858] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.259672][T14858] bridge_slave_1: left allmulticast mode [ 792.271394][T14858] bridge_slave_1: left promiscuous mode [ 792.282230][T14858] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.314677][T14858] bond0: (slave bond_slave_0): Releasing backup interface [ 792.333503][T14858] bond0: (slave bond_slave_1): Releasing backup interface [ 792.347044][T14858] team0: Port device team_slave_0 removed [ 792.373518][T14858] team0: Port device team_slave_1 removed [ 792.379743][T14858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.387190][T14858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.411407][T14858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.421182][T14858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.431997][T14858] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 792.496985][T14861] tipc: Enabled bearer , priority 0 [ 792.525547][ T50] Bluetooth: hci5: command tx timeout [ 792.722063][T14863] jffs2: notice: (14863) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 793.014310][T14736] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 793.036989][T14736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 793.063687][T14736] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 793.100691][T14736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 793.141401][T14736] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 793.176197][T14736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 793.197610][T14736] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 793.247953][T14736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 793.281786][ T50] Bluetooth: hci3: Malformed Event: 0x2f [ 793.282726][T14878] ip_tables: iptables: counters copy to user failed while replacing table [ 793.434694][ T5695] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 793.782593][T14736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 793.815595][T14736] 8021q: adding VLAN 0 to HW filter on device team0 [ 793.843125][T10219] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.850272][T10219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 793.859047][ T5695] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 793.879276][ T5695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.898485][ T5695] usb 6-1: Product: syz [ 793.909214][T10219] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.916308][T10219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 793.925227][ T5695] usb 6-1: Manufacturer: syz [ 793.930037][ T5695] usb 6-1: SerialNumber: syz [ 793.942320][ T5695] usb 6-1: config 0 descriptor?? [ 793.982497][T14736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 794.019852][T14878] netlink: 'syz.7.2407': attribute type 10 has an invalid length. [ 794.032119][T14878] team0: Port device dummy0 added [ 794.170919][ T5695] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 794.235242][T14895] qnx6: unable to read the first superblock [ 794.775536][T14736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.833860][T14875] batman_adv: batadv0: Adding interface: veth0 [ 794.840967][T14875] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.896272][T14875] batman_adv: batadv0: Interface activated: veth0 [ 794.983762][T14903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 795.027962][T14903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.062300][T14903] batman_adv: batadv0: Interface deactivated: veth0 [ 795.071687][T14903] batman_adv: batadv0: Removing interface: veth0 [ 795.129828][T14736] veth0_vlan: entered promiscuous mode [ 795.214338][T14736] veth1_vlan: entered promiscuous mode [ 795.351184][T14736] veth0_macvtap: entered promiscuous mode [ 795.390755][T14736] veth1_macvtap: entered promiscuous mode [ 795.420200][T14736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.441014][T14736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 795.510774][T10213] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.622252][T10213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.635459][T10213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.665318][ T5695] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 795.675828][T10222] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.684571][T10213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.692823][T10213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.702227][T10222] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.737687][T14912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14912 comm=syz.6.2413 [ 795.777214][ T24] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 796.740654][T10213] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.883285][ T10] usb 6-1: USB disconnect, device number 78 [ 796.930044][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 796.954737][ T24] usb 4-1: New USB device found, idVendor=1235, idProduct=821d, bcdDevice= 0.40 [ 796.988546][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 797.034404][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 797.088850][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.141011][ T24] usb 4-1: Product: syz [ 797.165104][ T24] usb 4-1: Manufacturer: syz [ 797.182500][ T24] usb 4-1: SerialNumber: syz [ 797.455358][ T24] usb 4-1: Focusrite vendor-specific interface not found [ 797.671004][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 797.687560][ T24] usb 4-1: USB disconnect, device number 73 [ 797.745735][T14389] udevd[14389]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 798.164448][ T5695] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 798.494297][ T5695] usb 7-1: Using ep0 maxpacket: 16 [ 798.607096][ T5695] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 798.707181][T14947] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2424'. [ 798.743897][ T5695] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 798.752362][ T5695] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 799.553524][ T5695] usb 7-1: config 0 has no interface number 0 [ 799.588214][ T5695] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 799.610677][ T5695] usb 7-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 799.845274][T14956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.945722][ T5695] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.949758][T14956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.957138][ T5695] usb 7-1: Product: syz [ 800.101350][ T5695] usb 7-1: Manufacturer: syz [ 800.110535][ T5695] usb 7-1: SerialNumber: syz [ 800.151010][ T5695] usb 7-1: config 0 descriptor?? [ 800.156076][ T5825] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 800.170811][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 800.211889][T14941] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 800.326884][ T5825] usb 6-1: device descriptor read/64, error -32 [ 800.668231][ T5695] asix 7-1:0.34: probe with driver asix failed with error -22 [ 800.841499][T14961] nvme_fabrics: unknown parameter or missing value 'traddΤ127.0.0.1' in ctrl creation request [ 800.864442][ T5825] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 800.931749][ T30] audit: type=1400 audit(1786902542.752:1689): avc: denied { write } for pid=14936 comm="syz.6.2421" name="functions" dev="configfs" ino=15079 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 801.019029][ T30] audit: type=1400 audit(1786902542.792:1690): avc: denied { write } for pid=14936 comm="syz.6.2421" name="c.1" dev="configfs" ino=48843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 801.056221][T14968] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14968 comm=syz.3.2429 [ 801.099169][ T5825] usb 6-1: New USB device found, idVendor=046d, idProduct=0920, bcdDevice=78.55 [ 801.129687][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.139616][ T30] audit: type=1400 audit(1786902542.922:1691): avc: denied { write } for pid=14967 comm="syz.3.2429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 801.159467][ T5825] usb 6-1: Product: syz [ 801.163702][ T5825] usb 6-1: Manufacturer: syz [ 801.175412][ T5825] usb 6-1: SerialNumber: syz [ 801.217023][ T5825] usb 6-1: config 0 descriptor?? [ 801.452413][ T5825] gspca_main: tv8532-2.14.0 probing 046d:0920 [ 801.810915][ T5825] usb 6-1: USB disconnect, device number 80 [ 801.949998][ T30] audit: type=1400 audit(1786902543.732:1692): avc: denied { write } for pid=14971 comm="syz.3.2431" name="file0" dev="tmpfs" ino=2748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 802.160810][ T30] audit: type=1400 audit(1786902543.742:1693): avc: denied { open } for pid=14971 comm="syz.3.2431" path="/498/file0" dev="tmpfs" ino=2748 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 802.662390][ T30] audit: type=1400 audit(1786902544.492:1694): avc: denied { listen } for pid=14982 comm="syz.5.2433" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 802.663514][T14990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2435'. [ 803.095332][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 803.101896][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 803.363627][ T5825] usb 7-1: USB disconnect, device number 58 [ 803.433650][ T50] Bluetooth: hci5: Malformed Event: 0x2f [ 803.440914][T15001] ip_tables: iptables: counters copy to user failed while replacing table [ 803.675932][T15002] netlink: 'syz.2.2439': attribute type 10 has an invalid length. [ 805.389623][T15002] team0: Port device dummy0 added [ 806.370504][ T9] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 808.218555][ T30] audit: type=1400 audit(1786902549.622:1695): avc: denied { map } for pid=14998 comm="syz.3.2438" path="socket:[49865]" dev="sockfs" ino=49865 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 809.012578][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2443'. [ 809.574658][ T5825] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 809.741926][ T30] audit: type=1400 audit(1786902551.572:1696): avc: denied { ioctl } for pid=15039 comm="syz.2.2448" path="socket:[51180]" dev="sockfs" ino=51180 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 809.775781][ T5825] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 809.801318][ T5825] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 809.821076][T15044] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2448'. [ 809.830429][ T5825] usb 6-1: config 0 has no interface number 0 [ 809.851231][ T5825] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 809.896618][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.932075][ T5825] usb 6-1: Product: syz [ 809.951833][ T5825] usb 6-1: Manufacturer: syz [ 809.970838][ T5825] usb 6-1: SerialNumber: syz [ 810.008044][ T5825] usb 6-1: config 0 descriptor?? [ 810.077578][ T5825] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 810.368651][ T30] audit: type=1400 audit(1786902552.202:1697): avc: denied { write } for pid=15035 comm="syz.5.2446" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 810.434136][ T30] audit: type=1400 audit(1786902552.202:1698): avc: denied { open } for pid=15035 comm="syz.5.2446" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 810.576541][T15036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15036 comm=syz.5.2446 [ 810.597372][ T5825] usb 6-1: USB disconnect, device number 81 [ 810.614731][ T5825] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 811.855520][ T9] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 812.025187][ T9] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 812.054712][T15064] Bluetooth: hci0: unsupported parameter 255 [ 812.060690][T15064] Bluetooth: hci0: unsupported parameter 255 [ 813.447069][ T9] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 813.458274][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 813.495699][ T30] audit: type=1400 audit(1786902555.322:1699): avc: denied { setattr } for pid=15032 comm="syz.7.2445" name="NETLINK" dev="sockfs" ino=51237 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 813.568081][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.588308][ T10] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 813.596752][ T9] usb 7-1: Product: syz [ 813.608527][ T9] usb 7-1: Manufacturer: syz [ 813.625203][ T9] usb 7-1: SerialNumber: syz [ 813.652865][ T9] pl2303 7-1:1.0: required interrupt-in endpoint missing [ 813.940040][ T10] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 813.976808][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 813.997202][ T10] usb 3-1: can't read configurations, error -71 [ 814.081343][T15076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.117801][T15076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.598298][T15081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2459'. [ 814.657033][T15083] macsec1: entered promiscuous mode [ 814.676123][T15083] virt_wifi0: entered promiscuous mode [ 814.676167][T15081] netlink: 'syz.3.2459': attribute type 3 has an invalid length. [ 815.173212][ T9] kernel read not supported for file /vcs (pid: 9 comm: kworker/0:0) [ 816.039166][ T9] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 816.560780][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 816.875626][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 816.891803][ T10] usb 7-1: USB disconnect, device number 59 [ 816.927455][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 817.037771][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.048517][ T9] usb 3-1: Product: syz [ 817.052900][ T9] usb 3-1: Manufacturer: syz [ 817.061171][ T9] usb 3-1: SerialNumber: syz [ 817.237583][T15100] syzkaller0: entered promiscuous mode [ 817.255793][T15100] syzkaller0: entered allmulticast mode [ 817.300537][ T9] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 817.719423][ T9] usb 3-1: USB disconnect, device number 16 [ 818.010488][T15110] Debayer B: ================= START STATUS ================= [ 818.036679][T15110] Debayer B: Debayer Mean Window Size: 3 [ 818.057477][T15110] Debayer B: ================== END STATUS ================== [ 818.155495][T15115] Invalid ELF header len 16 [ 818.166411][T15112] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2469'. [ 818.211214][ T30] audit: type=1400 audit(1786902559.982:1700): avc: denied { module_load } for pid=15113 comm="syz.7.2468" path=2F6D656D66643A2D42D54E49C56A9A08202864656C6574656429 dev="tmpfs" ino=1529 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 820.784241][ T5695] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 820.990935][ T5695] usb 6-1: device descriptor read/64, error -71 [ 821.234215][ T5695] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 821.406612][ T5695] usb 6-1: device descriptor read/64, error -71 [ 821.527231][ T5695] usb usb6-port1: attempt power cycle [ 821.724441][T12810] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 821.885371][T12810] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 821.894578][ T5695] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 821.905204][T12810] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 821.919396][ T5695] usb 6-1: device descriptor read/8, error -71 [ 821.930404][T12810] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 821.954179][T12810] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 821.981128][T12810] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 822.020336][T12810] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 822.060045][T12810] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 822.084118][T12810] usb 4-1: Product: syz [ 822.101844][T12810] usb 4-1: Manufacturer: syz [ 822.144491][T12810] cdc_wdm 4-1:1.0: skipping garbage [ 822.168921][T12810] cdc_wdm 4-1:1.0: skipping garbage [ 822.179461][ T5695] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 822.204338][T12810] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 822.217675][ T5695] usb 6-1: device descriptor read/8, error -71 [ 822.226443][T12810] cdc_wdm 4-1:1.0: Unknown control protocol [ 822.268557][ T30] audit: type=1400 audit(1786902564.102:1701): avc: denied { watch_mount } for pid=15152 comm="syz.2.2480" path="/19" dev="tmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 822.341649][T12810] usb 4-1: USB disconnect, device number 74 [ 822.349079][ T5695] usb usb6-port1: unable to enumerate USB device [ 822.665206][ T9] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 822.868491][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 822.888852][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 822.925343][ T9] usb 3-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 822.938369][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 822.977270][ T9] usb 3-1: language id specifier not provided by device, defaulting to English [ 823.009616][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.019674][ T9] usb 3-1: Product: ΰ ‰ [ 823.027084][ T9] usb 3-1: Manufacturer: ζ›―ι’ŽνŽŠαͺμ²ˆθΊ‚ζ•“α΅”νŽ ξ€κ­§ο •θ₯Šνš›θŸ‡εŒœη”θŠŒδ„δ΄±οœŽθͺλ”ΌήŠβ°΅ξΏŽβ΅α”ͺγ‘₯ν†žδ€žκ£žλ‰αͺηƒ²νŒ­β³»ιΎ­γ’₯βΏΕΊμ—œ [ 823.045236][ T9] usb 3-1: SerialNumber: ν••ΝŽαˆβ˜”ζΆΊγ¬ƒη¨Ύδ²†νš’μ˜“β†—α™‰θ΅ κŒ–ι©ζŠ€ο©…γœ½κ³Ώι’’ξ»³ιŠ›θœ‘ΰΊ­γ™»ημž‹κ’λ½§ηΈ‰θœΏκ‘α₯–κ§™μŽ€ξ¦‘ιΈΎνŒŒο°‘Χ­δŸβ΅…η”¦κΌ ξ€αΏθΎΉν†΄ε©΄ΰ»ΌθΊΊι¦΅δƒΖ΄ο‡«ΤŽμ΅¦α¬ ε‹–γ¬žζΊ΅ο‰¦ξ‹‹ξ•ΊμŽλ¦ŠΡ¦ζ•γ₯©μ §λ­ο‡«δ˜£ο›΄αΎΰ©₯κ•”γ³”ζΏΌδ¦΅δ”½Φ”θ‹€ιΉ²δ‰’δ‡Œι•’α˜œζΏ’ι†™ε«±μˆ¬ξ₯­κŠΏβŠ½ηΆ°η―‰ι‡«γΉŒα¦”ζš”ξΉ¨μ±ŒΤ‰γ½ξ€§εΊΉλ·²λΌ©λ¦°κΊα€‘ο­ˆμ―ο¨Ίγͺ˜μΆœγ‡ƒγ΄ξ†”豑釛β¬ζ¬Ώεžͺ [ 823.355448][ T9] usb 3-1: 1:1 : no UAC_FORMAT_TYPE desc [ 823.385185][ T9] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 823.628366][ T9] usb 3-1: USB disconnect, device number 17 [ 823.725404][ T30] audit: type=1400 audit(1786902565.562:1702): avc: denied { ioctl } for pid=15163 comm="syz.5.2482" path="socket:[51624]" dev="sockfs" ino=51624 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 823.851743][T14389] udevd[14389]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 823.954397][T15166] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2483'. [ 825.272719][T15185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2489'. [ 825.912838][T15190] netlink: 16215 bytes leftover after parsing attributes in process `syz.5.2490'. [ 825.977623][T15190] 9p: Bad value for 'wfdno' [ 826.039474][T15190] random: crng reseeded on system resumption [ 826.198182][T15196] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2493'. [ 826.642455][T15206] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2494'. [ 828.696917][ T30] audit: type=1400 audit(1786902570.532:1703): avc: denied { unmount } for pid=14736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 829.853195][T15240] FAULT_INJECTION: forcing a failure. [ 829.853195][T15240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.925821][T15240] CPU: 0 UID: 0 PID: 15240 Comm: syz.3.2505 Tainted: G L syzkaller #0 PREEMPT(full) [ 829.925851][T15240] Tainted: [L]=SOFTLOCKUP [ 829.925857][T15240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 829.925868][T15240] Call Trace: [ 829.925874][T15240] [ 829.925881][T15240] dump_stack_lvl+0x100/0x190 [ 829.925911][T15240] should_fail_ex.cold+0x5/0xa [ 829.925935][T15240] _copy_from_user+0x2e/0xd0 [ 829.925960][T15240] copy_msghdr_from_user+0x9f/0x4c0 [ 829.925980][T15240] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 829.925997][T15240] ? lockdep_hardirqs_on+0x78/0x100 [ 829.926027][T15240] ___sys_sendmsg+0x106/0x1e0 [ 829.926047][T15240] ? __pfx____sys_sendmsg+0x10/0x10 [ 829.926064][T15240] ? __lock_acquire+0x49f/0x1a40 [ 829.926088][T15240] ? get_pid_task+0x106/0x250 [ 829.926131][T15240] __sys_sendmsg+0x160/0x210 [ 829.926156][T15240] ? __pfx___sys_sendmsg+0x10/0x10 [ 829.926191][T15240] do_syscall_64+0x115/0x870 [ 829.926211][T15240] ? clear_bhb_loop+0x70/0xc0 [ 829.926233][T15240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.926251][T15240] RIP: 0033:0x7feaba59e0d9 [ 829.926266][T15240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.926282][T15240] RSP: 002b:00007feabb404028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.926301][T15240] RAX: ffffffffffffffda RBX: 00007feaba825fa0 RCX: 00007feaba59e0d9 [ 829.926312][T15240] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 829.926322][T15240] RBP: 00007feabb404090 R08: 0000000000000000 R09: 0000000000000000 [ 829.926332][T15240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.926342][T15240] R13: 00007feaba826038 R14: 00007feaba825fa0 R15: 00007ffd77881898 [ 829.926366][T15240] [ 830.413723][T15243] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2506'. [ 831.284407][ T5825] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 831.324242][T12810] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 831.454422][ T5825] usb 3-1: Using ep0 maxpacket: 32 [ 831.516443][ T5825] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 831.558488][T12810] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 831.605158][ T5825] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 831.633203][T12810] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 831.667797][ T5825] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 831.695819][T12810] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 831.741234][ T5825] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 831.761618][ T30] audit: type=1400 audit(1786902573.562:1704): avc: denied { write } for pid=15257 comm="syz.7.2512" name="c.1" dev="configfs" ino=48843 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 831.795279][T12810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.823437][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 831.881468][ T5825] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 831.963663][ T5825] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 832.049361][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.140594][ T5825] usb 3-1: config 0 descriptor?? [ 832.235104][ T24] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 832.357383][T12810] hid-picolcd 0003:04D8:C002.000A: reserved main item tag 0xe [ 832.427001][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 832.613747][T12810] hid-picolcd 0003:04D8:C002.000A: unknown main item tag 0x0 [ 832.824995][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.856839][T12810] input: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.000A/input/input34 [ 832.893351][ T24] usb 6-1: Product: syz [ 832.922548][ T24] usb 6-1: Manufacturer: syz [ 832.967496][ T5825] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 832.993025][ T24] usb 6-1: SerialNumber: syz [ 833.164441][T12810] rc_core: IR keymap rc-rc6-mce not found [ 833.200110][ T5825] usb 3-1: USB disconnect, device number 18 [ 833.207320][T12810] Registered IR keymap rc-empty [ 833.229977][T12810] rc rc0: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.000A/rc/rc0 [ 833.261939][ T5825] usblp0: removed [ 833.302727][ T5694] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 833.329744][T12810] input: HID 04d8:c002 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:04D8:C002.000A/rc/rc0/input35 [ 833.597248][T12810] hid-picolcd 0003:04D8:C002.000A: No report with id 0x92 found [ 833.710095][T15272] FAULT_INJECTION: forcing a failure. [ 833.710095][T15272] name failslab, interval 1, probability 1, space 0, times 0 [ 835.480509][ T5694] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 835.501137][ T5694] ath9k_htc: Failed to initialize the device [ 835.513233][T15272] CPU: 0 UID: 0 PID: 15272 Comm: syz.2.2516 Tainted: G L syzkaller #0 PREEMPT(full) [ 835.513265][T15272] Tainted: [L]=SOFTLOCKUP [ 835.513271][T15272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 835.513281][T15272] Call Trace: [ 835.513288][T15272] [ 835.513295][T15272] dump_stack_lvl+0x100/0x190 [ 835.513323][T15272] should_fail_ex.cold+0x5/0xa [ 835.513345][T15272] should_failslab+0xc2/0x120 [ 835.513370][T15272] __kmalloc_cache_noprof+0x91/0x6c0 [ 835.513390][T15272] ? nfnl_acct_start+0x172/0x330 [ 835.513421][T15272] nfnl_acct_start+0x172/0x330 [ 835.513446][T15272] ? __pfx_nfnl_acct_start+0x10/0x10 [ 835.513471][T15272] ? netlink_lookup+0x120/0x270 [ 835.513497][T15272] __netlink_dump_start+0x60e/0x990 [ 835.513520][T15272] nfnl_acct_get+0x453/0x550 [ 835.513548][T15272] ? __pfx_nfnl_acct_get+0x10/0x10 [ 835.513572][T15272] ? __pfx_nfnl_acct_start+0x10/0x10 [ 835.513596][T15272] ? __pfx_nfnl_acct_dump+0x10/0x10 [ 835.513620][T15272] ? __pfx_nfnl_acct_done+0x10/0x10 [ 835.513647][T15272] ? find_held_lock+0x2b/0x80 [ 835.513672][T15272] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 835.513705][T15272] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 835.513727][T15272] ? skb_release_data+0x6ca/0x8e0 [ 835.513753][T15272] ? __lock_acquire+0x49f/0x1a40 [ 835.513796][T15272] ? avc_has_perm_noaudit+0x145/0x3b0 [ 835.513824][T15272] netlink_rcv_skb+0x159/0x420 [ 835.513843][T15272] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 835.513869][T15272] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 835.513899][T15272] ? ns_capable+0xd2/0xf0 [ 835.513924][T15272] nfnetlink_rcv+0x1b3/0x440 [ 835.513949][T15272] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 835.513972][T15272] ? netlink_deliver_tap+0x1ae/0xcc0 [ 835.513996][T15272] netlink_unicast+0x585/0x850 [ 835.514019][T15272] ? __pfx_netlink_unicast+0x10/0x10 [ 835.514045][T15272] netlink_sendmsg+0x8b0/0xda0 [ 835.514069][T15272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 835.514091][T15272] ? selinux_socket_sendmsg+0x198/0x2f0 [ 835.514121][T15272] ____sys_sendmsg+0xa4d/0xbe0 [ 835.514137][T15272] ? __pfx_netlink_sendmsg+0x10/0x10 [ 835.514158][T15272] ? __pfx_____sys_sendmsg+0x10/0x10 [ 835.514188][T15272] ___sys_sendmsg+0x190/0x1e0 [ 835.514207][T15272] ? __pfx____sys_sendmsg+0x10/0x10 [ 835.514223][T15272] ? __lock_acquire+0x49f/0x1a40 [ 835.514249][T15272] ? get_pid_task+0x106/0x250 [ 835.514296][T15272] __sys_sendmsg+0x160/0x210 [ 835.514320][T15272] ? __pfx___sys_sendmsg+0x10/0x10 [ 835.514357][T15272] do_syscall_64+0x115/0x870 [ 835.514377][T15272] ? clear_bhb_loop+0x70/0xc0 [ 835.514398][T15272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.514416][T15272] RIP: 0033:0x7f7adfb9e0d9 [ 835.514431][T15272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 835.514447][T15272] RSP: 002b:00007f7ae0b3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.514464][T15272] RAX: ffffffffffffffda RBX: 00007f7adfe25fa0 RCX: 00007f7adfb9e0d9 [ 835.514475][T15272] RDX: 0000000000000000 RSI: 0000200000002700 RDI: 0000000000000003 [ 835.514485][T15272] RBP: 00007f7ae0b3e090 R08: 0000000000000000 R09: 0000000000000000 [ 835.514495][T15272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.514504][T15272] R13: 00007f7adfe26038 R14: 00007f7adfe25fa0 R15: 00007fff35823428 [ 835.514528][T15272] [ 835.545188][ T5694] usb 6-1: ath9k_htc: USB layer deinitialized [ 836.219840][T12810] usb 4-1: USB disconnect, device number 75 [ 836.300329][T15279] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2519'. [ 836.562817][ T5709] usb 6-1: USB disconnect, device number 86 [ 836.710548][T15289] jffs2: notice: (15289) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 837.444429][ T5709] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 837.618297][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 837.637670][ T5709] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 837.671188][ T5709] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 837.693057][ T5709] usb 4-1: config 0 has no interface number 0 [ 837.714671][ T5709] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 837.761460][ T5709] usb 4-1: config 0 interface 85 has no altsetting 0 [ 837.791101][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.813184][ T5709] usb 4-1: Product: syz [ 837.826076][ T5709] usb 4-1: Manufacturer: syz [ 837.838065][T12810] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 837.852945][ T5709] usb 4-1: SerialNumber: syz [ 837.871837][ T5709] usb 4-1: config 0 descriptor?? [ 838.006819][T12810] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 838.036162][T12810] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 838.064715][T12810] usb 3-1: can't read configurations, error -61 [ 838.216010][T12810] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 838.251228][ T30] audit: type=1400 audit(1786902580.082:1705): avc: denied { setattr } for pid=15288 comm="syz.6.2523" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 838.415430][T12810] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 838.438864][T12810] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 838.457524][T12810] usb 3-1: can't read configurations, error -61 [ 838.471371][T12810] usb usb3-port1: attempt power cycle [ 838.498625][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2528'. [ 838.504529][ T5709] appletouch 4-1:0.85: Geyser mode initialized. [ 838.531399][ T5709] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input36 [ 838.799445][ T9] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 838.854527][T12810] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 838.889356][T15295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.994452][T15295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 839.143770][ T10] usb 4-1: USB disconnect, device number 76 [ 839.339905][ T5789] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 839.556512][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 839.770619][ T9] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 840.145183][T12810] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 840.165745][T12810] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 840.173804][T12810] usb 3-1: can't read configurations, error -61 [ 840.181949][ T10] appletouch 4-1:0.85: input: appletouch disconnected [ 840.199727][ T5789] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 840.212266][ T9] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 840.220588][ T9] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 840.262307][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 840.271293][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 840.280912][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 840.290520][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 840.340111][T12810] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 840.388729][T12810] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 840.398735][ T5789] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 840.400072][T12810] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 840.422588][T12810] usb 3-1: can't read configurations, error -61 [ 840.430073][T12810] usb usb3-port1: unable to enumerate USB device [ 840.443311][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.470506][ T5789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 840.487679][ T5789] usb 7-1: Product: syz [ 840.497338][ T9] usb 6-1: config 0 descriptor?? [ 840.508934][ T5789] usb 7-1: Manufacturer: syz [ 840.521590][ T5789] usb 7-1: SerialNumber: syz [ 840.531149][ T9] usb 6-1: can't set config #0, error -71 [ 840.597756][ T9] usb 6-1: USB disconnect, device number 87 [ 841.051044][ T5789] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 841.350508][T12810] usb 7-1: USB disconnect, device number 60 [ 841.379115][T15335] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2535'. [ 841.401939][T12810] usblp0: removed [ 841.628758][T15346] netlink: 'syz.3.2538': attribute type 1 has an invalid length. [ 841.675722][T15346] netlink: 'syz.3.2538': attribute type 4 has an invalid length. [ 841.721946][T15346] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.2538'. [ 841.822658][ T30] audit: type=1400 audit(1786902583.652:1706): avc: denied { write } for pid=15322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 841.957008][ T5789] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 842.145856][ T5789] usb 4-1: Using ep0 maxpacket: 16 [ 842.223719][ T5789] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 842.241400][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.281322][T15359] can0: slcan on ttyS3. [ 842.418845][ T30] audit: type=1400 audit(1786902584.252:1707): avc: denied { write } for pid=15356 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 842.486447][ T5789] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.509946][ T5789] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 842.546758][ T5789] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.559163][T15357] can0 (unregistered): slcan off ttyS3. [ 842.662366][ T5789] usb 4-1: config 0 descriptor?? [ 842.775032][T15370] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2545'. [ 842.800809][T15375] random: crng reseeded on system resumption [ 843.122184][ T5789] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000B/input/input37 [ 843.134166][ T5694] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 843.304892][ T5694] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 843.329019][ T5694] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 843.375576][ T5694] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 843.427744][ T5694] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 843.446542][ T30] audit: type=1400 audit(1786902585.282:1708): avc: denied { write } for pid=15368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 843.525859][ T5694] usb 7-1: config 0 descriptor?? [ 843.566493][ T5789] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 843.786248][ T30] audit: type=1400 audit(1786902585.612:1709): avc: denied { write } for pid=15403 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 843.964949][ T5694] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 843.982316][ T5694] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 844.010624][ T5694] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 844.025127][ T5694] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 844.044001][ T5694] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 844.059849][ T5694] playstation 0003:054C:0DF2.000C: hidraw1: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 844.408396][ T5725] usb 4-1: reset high-speed USB device number 77 using dummy_hcd [ 844.586230][ T5694] playstation 0003:054C:0DF2.000C: Failed to retrieve feature with reportID 5: -32 [ 844.625776][ T5694] playstation 0003:054C:0DF2.000C: Failed to retrieve DualSense calibration info: -32 [ 844.670686][ T5694] playstation 0003:054C:0DF2.000C: Failed to get calibration data from DualSense [ 844.688766][ T5694] playstation 0003:054C:0DF2.000C: Failed to create dualsense. [ 844.729405][ T5694] playstation 0003:054C:0DF2.000C: probe with driver playstation failed with error -32 [ 845.032432][ T30] audit: type=1400 audit(1786902586.862:1710): avc: denied { write } for pid=15408 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 845.193084][ T30] audit: type=1400 audit(1786902587.022:1711): avc: denied { write } for pid=15429 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 845.368374][T10206] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.393127][T10206] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.420831][T10206] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.458941][T10206] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.497261][T10206] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.517889][ T1166] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.530494][ T1166] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.539803][ T1166] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.552314][ T1166] netdevsim netdevsim1 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.562536][ T1166] netdevsim netdevsim1 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.572925][ T1166] netdevsim netdevsim1 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.605474][ T1166] netdevsim netdevsim1 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.665048][ T5725] usb 4-1: device descriptor read/64, error -71 [ 845.905277][ T5725] usb 4-1: reset high-speed USB device number 77 using dummy_hcd [ 845.921499][ T5725] usb 4-1: device reset changed ep0 maxpacket size! [ 845.935782][ T5789] usb 4-1: USB disconnect, device number 77 [ 846.127573][ T5694] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 846.277459][ T5725] usb 7-1: USB disconnect, device number 61 [ 846.304559][ T5694] usb 6-1: device descriptor read/64, error -71 [ 846.654958][ T5694] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 847.674107][ T5694] usb 6-1: device descriptor read/64, error -71 [ 847.831416][ T5694] usb usb6-port1: attempt power cycle [ 847.867126][ T30] audit: type=1400 audit(1786902589.692:1712): avc: denied { write } for pid=15438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.105058][ T5789] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 848.234728][ T5694] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 848.268223][ T30] audit: type=1400 audit(1786902590.102:1713): avc: denied { write } for pid=15467 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.292922][ T5789] usb 4-1: device descriptor read/all, error -71 [ 848.307058][ T5694] usb 6-1: device descriptor read/8, error -71 [ 848.368680][T15473] vivid-000: disconnect [ 848.396985][T15473] vivid-000: reconnect [ 848.495737][T15473] dummy0: entered allmulticast mode [ 848.519828][T15477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2565'. [ 848.536878][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2562'. [ 848.551384][ T5694] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 848.586589][T15477] tipc: Resetting bearer [ 848.663985][T15477] tipc: Disabling bearer [ 848.762872][T15473] dummy0: left allmulticast mode [ 848.911597][ T5694] usb 6-1: device descriptor read/8, error -71 [ 849.086028][ T5694] usb usb6-port1: unable to enumerate USB device [ 849.304446][T12810] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 849.484138][T12810] usb 3-1: Using ep0 maxpacket: 8 [ 849.506037][T12810] usb 3-1: New USB device found, idVendor=0582, idProduct=0009, bcdDevice= 0.40 [ 849.548342][T12810] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 849.574042][T12810] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 849.617831][T12810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.633935][T12810] usb 3-1: Product: syz [ 849.659958][T12810] usb 3-1: Manufacturer: syz [ 849.674483][T12810] usb 3-1: SerialNumber: syz [ 849.711874][T15510] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2573'. [ 851.150398][T12810] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 851.182105][T12810] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 851.298651][T12810] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 851.332039][T12810] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 851.374276][T12810] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 851.526149][T12810] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 851.535139][ T5694] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 851.582555][T12810] usb 3-1: USB disconnect, device number 23 [ 851.640327][T14389] udevd[14389]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 851.696119][ T5694] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 851.736792][ T5694] usb 7-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 851.749218][ T5694] usb 7-1: Product: syz [ 851.766600][ T5694] usb 7-1: Manufacturer: syz [ 851.790421][ T5694] usb 7-1: SerialNumber: syz [ 851.827266][ T5694] usb 7-1: config 0 descriptor?? [ 851.871604][ T5694] ch341 7-1:0.0: ch341-uart converter detected [ 852.329686][ T30] audit: type=1400 audit(1786902594.162:1714): avc: denied { map } for pid=15528 comm="syz.2.2577" path="/dev/usbmon8" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 853.193143][T15549] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2578'. [ 853.550709][T15564] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2584'. [ 853.561592][T15564] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2584'. [ 853.641845][ T30] audit: type=1400 audit(1786902595.472:1715): avc: denied { mounton } for pid=15561 comm="syz.5.2582" path="/444/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 855.470907][ T5694] ch341-uart ttyUSB0: failed to read break control: -110 [ 855.828697][ T5694] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 856.090532][ T5694] usb 7-1: USB disconnect, device number 62 [ 856.151876][ T5694] ch341 7-1:0.0: device disconnected [ 856.275376][T15589] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2591'. [ 856.649053][T15594] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2593'. [ 857.201338][T15590] input: syz0 as /devices/virtual/input/input38 [ 858.119234][T15604] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=15604 comm=syz.2.2596 [ 858.151541][T15606] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2597'. [ 858.176067][T15606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2597'. [ 858.249819][T15609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2596'. [ 860.562604][ T30] audit: type=1400 audit(1786902602.382:1716): avc: denied { unmount } for pid=12493 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 862.860574][ T30] audit: type=1400 audit(1786902604.652:1717): avc: denied { listen } for pid=15650 comm="syz.7.2607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 863.140113][ T30] audit: type=1400 audit(1786902604.972:1718): avc: denied { write } for pid=15630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.461929][ T30] audit: type=1400 audit(1786902605.292:1719): avc: denied { write } for pid=15665 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.553835][T15667] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2610'. [ 863.608284][ T30] audit: type=1400 audit(1786902605.402:1720): avc: denied { append } for pid=15666 comm="syz.6.2610" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 864.150036][T15693] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2615'. [ 864.328734][ T30] audit: type=1400 audit(1786902606.162:1721): avc: denied { write } for pid=15677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 865.677753][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 865.688036][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 865.972016][ T30] audit: type=1400 audit(1786902607.802:1722): avc: denied { write } for pid=15704 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 866.173747][T15708] netlink: 7 bytes leftover after parsing attributes in process `syz.6.2619'. [ 866.912141][ T30] audit: type=1400 audit(1786902608.742:1723): avc: denied { getopt } for pid=15717 comm="syz.6.2622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 867.635760][T15738] netlink: 'syz.6.2628': attribute type 9 has an invalid length. [ 869.540109][ T30] audit: type=1400 audit(1786902611.342:1724): avc: denied { ioctl } for pid=15747 comm="syz.2.2631" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 869.569288][T15750] fuse: Bad value for 'fd' [ 869.762841][T15756] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2633'. [ 870.904456][ T5709] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 870.931132][T15784] ALSA: mixer_oss: invalid OSS volume 'LI' [ 871.127116][ T5709] usb 6-1: Using ep0 maxpacket: 32 [ 871.198029][ T5709] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 871.324402][ T24] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 871.345959][ T5709] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 871.525177][ T5709] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 871.604206][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 871.724590][ T24] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 871.751985][ T5709] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 871.849078][ T24] usb 4-1: config 4 has an invalid interface number: 9 but max is 0 [ 871.891109][ T5709] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 871.943602][ T24] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 872.111472][ T5709] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.135469][ T24] usb 4-1: config 4 has no interface number 0 [ 872.223709][ T24] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 872.237609][ T5709] usb 6-1: Product: syz [ 872.315441][ T5709] usb 6-1: Manufacturer: syz [ 872.406176][ T5709] usb 6-1: SerialNumber: syz [ 872.410919][ T24] usb 4-1: config 4 interface 9 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 873.530412][ T24] usb 4-1: config 4 interface 9 has no altsetting 0 [ 873.578485][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.605360][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 873.642329][ T24] usb 4-1: Product: syz [ 873.651327][T15805] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2646'. [ 873.681763][ T24] usb 4-1: Manufacturer: syz [ 873.711575][ T5709] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input39 [ 873.735781][ T24] usb 4-1: SerialNumber: syz [ 873.774413][T15791] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 873.889413][ T24] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 873.993287][ T5709] imon:send_packet: packet tx failed (-71) [ 874.054622][ T5709] imon 6-1:155.0: panel buttons/knobs setup failed [ 874.103988][T12689] usb 4-1: USB disconnect, device number 80 [ 874.120795][T10218] usb 4-1: Failed to submit usb control message: -71 [ 874.155374][ T5709] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 874.197594][T10218] usb 4-1: unable to send the bmi data to the device: -71 [ 874.235562][ T5709] (id 0x00) [ 874.293878][T10218] usb 4-1: unable to get target info from device [ 874.305356][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 874.347799][T10218] usb 4-1: could not get target info (-71) [ 874.402827][T10218] usb 4-1: could not probe fw (-71) [ 874.464236][ T5709] rc_core: IR keymap rc-imon-pad not found [ 874.501242][ T5709] Registered IR keymap rc-empty [ 874.518149][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 874.527961][ T5709] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 874.565856][ T24] usb 3-1: New USB device found, idVendor=0421, idProduct=033e, bcdDevice=5f.0e [ 874.594459][ T5709] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 874.629187][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 874.650188][ T5709] imon:send_packet: packet tx failed (-71) [ 874.670410][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.691237][ T5709] imon 6-1:155.0: remote input dev register failed [ 874.718029][ T5709] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 874.726313][ T24] usb 3-1: config 0 descriptor?? [ 874.753330][ T24] rndis_host 3-1:0.0: rndis: master #0/ffff888037115000 slave #1/0000000000000000 [ 875.428364][T15831] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.429815][ T30] audit: type=1400 audit(1786902617.262:1725): avc: denied { write } for pid=15829 comm="syz.5.2654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 875.495223][ T5709] imon 6-1:155.0: unable to initialize intf0, err 0 [ 875.516907][ T5709] imon:imon_probe: failed to initialize context! [ 875.533415][ T5709] imon 6-1:155.0: unable to register, err -19 [ 875.553755][ T5709] usb 6-1: USB disconnect, device number 92 [ 875.673708][ T30] audit: type=1400 audit(1786902617.472:1726): avc: denied { getopt } for pid=15838 comm="syz.6.2657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 876.532950][T12689] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 876.643031][T15845] comedi comedi0: comedi_config --init_data is deprecated [ 876.850223][ T5612] Bluetooth: hci3: command 0x0406 tx timeout [ 876.887456][T12689] usb 4-1: Using ep0 maxpacket: 8 [ 876.893754][T12689] usb 4-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86 [ 876.932168][T12689] usb 4-1: config 6 has an invalid interface number: 213 but max is 1 [ 876.946307][T12689] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 876.958772][ T5789] usb 3-1: USB disconnect, device number 24 [ 876.981043][T12689] usb 4-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 877.014713][T12689] usb 4-1: config 6 has no interface number 0 [ 877.085029][T12689] usb 4-1: config 6 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 877.114321][T15853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2659'. [ 877.144558][T12689] usb 4-1: config 6 interface 213 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 877.199446][T12689] usb 4-1: config 6 interface 213 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 877.251262][T12689] usb 4-1: config 6 interface 213 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 877.315826][T12689] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 877.341638][T12689] usb 4-1: Manufacturer: syz [ 877.375382][T12689] usb 4-1: SerialNumber: syz [ 877.537956][T15863] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2665'. [ 877.577878][T15863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51515 sclass=netlink_route_socket pid=15863 comm=syz.2.2665 [ 878.411204][T15866] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2666'. [ 879.245869][T12689] em28xx 4-1:6.213: New device syz @ 480 Mbps (eb1a:e357, interface 213, class 213) [ 879.279491][T12689] em28xx 4-1:6.213: Audio interface 213 found (Vendor Class) [ 879.365739][T12689] em28xx 4-1:6.213: unknown em28xx chip ID (0) [ 879.392347][T12689] em28xx 4-1:6.213: Config register raw data: 0xfffffffb [ 879.411904][T12689] em28xx 4-1:6.213: AC97 chip type couldn't be determined [ 879.460732][T12689] em28xx 4-1:6.213: No AC97 audio processor [ 879.501527][T12689] usb 4-1: USB disconnect, device number 81 [ 879.540102][T12689] em28xx 4-1:6.213: Disconnecting em28xx [ 879.594641][T15892] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2674'. [ 879.672161][T12689] em28xx 4-1:6.213: Freeing device [ 879.764734][T15894] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2675'. [ 879.833596][T12494] Bluetooth: hci2: Malformed Event: 0x2f [ 879.878188][T15900] ip_tables: iptables: counters copy to user failed while replacing table [ 880.142926][T15904] netlink: 'syz.6.2677': attribute type 10 has an invalid length. [ 880.404509][ T5724] usb 7-1: new low-speed USB device number 63 using dummy_hcd [ 880.595572][ T5724] usb 7-1: Invalid ep0 maxpacket: 32 [ 880.755428][ T5724] usb 7-1: new low-speed USB device number 64 using dummy_hcd [ 880.935513][ T5724] usb 7-1: Invalid ep0 maxpacket: 32 [ 880.946657][T12689] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 880.978551][ T5724] usb usb7-port1: attempt power cycle [ 881.267322][T12689] usb 4-1: unable to get BOS descriptor or descriptor too short [ 881.300175][T12689] usb 4-1: not running at top speed; connect to a high speed hub [ 881.349288][T12689] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 881.719726][T12689] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 881.735026][ T5724] usb 7-1: new low-speed USB device number 65 using dummy_hcd [ 881.738605][T12689] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 881.751753][T12689] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 881.762214][T12689] usb 4-1: config 14 has no interface number 0 [ 881.769103][ T5724] usb 7-1: Invalid ep0 maxpacket: 32 [ 881.795034][T12689] usb 4-1: config 14 has no interface number 1 [ 881.828181][T12689] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 881.865496][T12689] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 881.903620][T12689] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 881.951264][T12689] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 881.955236][ T5724] usb 7-1: new low-speed USB device number 66 using dummy_hcd [ 882.003712][T12689] usb 4-1: config 14 interface 57 has no altsetting 0 [ 882.032816][T12689] usb 4-1: config 14 interface 228 has no altsetting 0 [ 882.070973][ T5724] usb 7-1: Invalid ep0 maxpacket: 32 [ 882.072537][T12689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.105710][ T5724] usb usb7-port1: unable to enumerate USB device [ 882.126399][T12689] usb 4-1: Product: syz [ 882.144588][T12689] usb 4-1: Manufacturer: syz [ 882.171101][T12689] usb 4-1: SerialNumber: syz [ 882.601591][T12689] legousbtower 4-1:14.57: interrupt endpoints not found [ 882.900130][T12689] legousbtower 4-1:14.228: get version request failed: -32 [ 882.938599][T12689] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -32 [ 883.021643][T15944] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2689'. [ 883.772257][ T9] usb 4-1: USB disconnect, device number 82 [ 886.060863][T16007] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2701'. [ 886.524399][T12689] usb 6-1: new full-speed USB device number 93 using dummy_hcd [ 886.680630][T12689] usb 6-1: unable to get BOS descriptor or descriptor too short [ 886.714270][T12689] usb 6-1: not running at top speed; connect to a high speed hub [ 886.751186][T12689] usb 6-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=fb.ac [ 886.778965][T12689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.809823][T12689] usb 6-1: Product: syz [ 886.823104][T12689] usb 6-1: Manufacturer: syz [ 886.839646][T12689] usb 6-1: SerialNumber: syz [ 886.907844][T12689] upd78f0730 6-1:254.0: upd78f0730 converter detected [ 886.991685][T12689] usb 6-1: upd78f0730 converter now attached to ttyUSB0 [ 888.011701][T12689] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 888.084302][T16042] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2712'. [ 888.194738][T12689] usb 3-1: Using ep0 maxpacket: 32 [ 888.202818][T12689] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 888.223409][T12689] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 888.240546][T12689] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 888.259491][T12689] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 888.284429][T12689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 888.303071][T12689] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 888.323455][T12689] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 888.352890][T12689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.377676][T12689] usb 3-1: config 0 descriptor?? [ 888.619432][T12689] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 888.952232][ T5789] usb 3-1: USB disconnect, device number 25 [ 888.965705][ T5789] usblp0: removed [ 889.142054][ T5825] usb 6-1: USB disconnect, device number 93 [ 889.159783][ T5825] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 889.191150][ T5825] upd78f0730 6-1:254.0: device disconnected [ 889.695360][T16063] syzkaller0: entered promiscuous mode [ 889.711215][T16063] syzkaller0: entered allmulticast mode [ 889.911438][T16065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2719'. [ 889.951160][T16065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2719'. [ 890.708115][T16076] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2723'. [ 891.232322][T16085] ip6erspan0: entered allmulticast mode [ 892.006963][ T30] audit: type=1400 audit(1786902633.842:1727): avc: denied { mounton } for pid=16102 comm="syz.6.2729" path="/284/file0" dev="tmpfs" ino=1593 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 892.176302][ T5789] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 892.334674][ T5789] usb 6-1: Using ep0 maxpacket: 32 [ 892.355899][ T5789] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 892.378002][ T5789] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 892.390980][ T5789] usb 6-1: config 0 has no interface number 0 [ 892.410610][ T5789] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 892.449985][ T5789] usb 6-1: config 0 interface 85 has no altsetting 0 [ 892.485335][ T5789] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.503071][ T5789] usb 6-1: Product: syz [ 892.523084][ T5789] usb 6-1: Manufacturer: syz [ 892.532598][ T5789] usb 6-1: SerialNumber: syz [ 892.562029][ T5789] usb 6-1: config 0 descriptor?? [ 893.058090][T16112] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2732'. [ 893.185725][ T5789] appletouch 6-1:0.85: Geyser mode initialized. [ 893.195248][ T5724] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 893.211608][ T5789] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input41 [ 893.388554][ T5724] usb 3-1: Using ep0 maxpacket: 8 [ 893.403917][T16101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.420596][ T5724] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 893.459680][T16101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.481393][ T5724] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 893.507996][ T5724] usb 3-1: config 179 has no interface number 0 [ 893.525893][ T5724] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 893.580185][ T5724] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 893.599949][ T5724] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 893.612934][ T5724] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 893.625844][ T5724] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 893.647659][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.676535][T16110] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 893.707894][ T5789] usb 6-1: USB disconnect, device number 94 [ 893.776387][ T5789] appletouch 6-1:0.85: input: appletouch disconnected [ 893.954428][T12689] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 894.086333][ T5724] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input42 [ 894.194007][T12689] usb 7-1: unable to get BOS descriptor or descriptor too short [ 894.208447][T12689] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 894.231408][T12689] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 894.241790][T12689] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 894.252170][T12689] usb 7-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 894.265142][T12689] usb 7-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 894.283960][T12689] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 894.301278][ T5825] usb 3-1: USB disconnect, device number 26 [ 894.301285][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 894.329809][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 894.410992][T12689] usb 7-1: config 1 interface 1 has no altsetting 0 [ 894.451594][T12689] usb 7-1: string descriptor 0 read error: -22 [ 894.468314][T12689] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.614974][ T5724] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 895.156145][ T5724] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 895.163387][T12689] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 895.185014][ T5724] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 895.208148][T12689] usb 7-1: Warning! Unlikely big volume step count (=19246), linear volume or wrong cval->res? [ 895.229031][ T5724] usb 6-1: can't read configurations, error -71 [ 895.246700][T12689] usb 7-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/19246/1 [ 895.364801][T12689] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 895.453131][T12689] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2) [ 895.523795][T12689] usb 7-1: USB disconnect, device number 67 [ 895.688536][T16139] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2739'. [ 896.020304][ T30] audit: type=1400 audit(1786902637.842:1728): avc: denied { name_connect } for pid=16144 comm="syz.6.2742" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 896.365707][ T5694] libceph: connect (1)[c::]:6789 error -101 [ 896.372391][ T5694] libceph: mon0 (1)[c::]:6789 connect error [ 896.385393][T16155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2743'. [ 896.741786][T12689] libceph: connect (1)[c::]:6789 error -101 [ 896.974052][T12689] libceph: mon0 (1)[c::]:6789 connect error [ 897.157864][T16152] ceph: No mds server is up or the cluster is laggy [ 897.984429][T12689] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 898.167136][T12689] usb 7-1: unable to get BOS descriptor or descriptor too short [ 898.190559][T12689] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 898.222765][T12689] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 898.246955][T12689] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 898.272879][T12689] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.290723][ T30] audit: type=1400 audit(1786902640.122:1729): avc: denied { write } for pid=16178 comm="syz.5.2752" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 898.316401][T12689] usb 7-1: Product: syz [ 898.323728][T12689] usb 7-1: Manufacturer: syz [ 898.331512][T12689] usb 7-1: SerialNumber: syz [ 898.656748][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 898.685116][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 898.693270][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 898.702042][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 898.716260][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 899.586818][T16183] lo speed is unknown, defaulting to 1000 [ 899.734952][ T5789] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 899.905141][ T5789] usb 3-1: Using ep0 maxpacket: 16 [ 899.921469][ T5789] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 899.967526][ T5789] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 899.999661][ T5789] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 900.043866][ T5789] usb 3-1: config 0 has no interface number 0 [ 900.072453][ T5789] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 900.129334][ T5789] usb 3-1: config 0 interface 34 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 900.361602][ T5789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.403868][ T5789] usb 3-1: Product: syz [ 900.443153][ T5789] usb 3-1: Manufacturer: syz [ 900.487760][ T5789] usb 3-1: SerialNumber: syz [ 900.552637][ T5789] usb 3-1: config 0 descriptor?? [ 900.593620][T12689] usb 7-1: selecting invalid altsetting 1 [ 900.601132][T12689] usb 7-1: unit 3 not found! [ 900.610808][T12689] usb 7-1: cannot request logical cluster ID: 0 (err: -71) [ 900.618263][T12689] usb 7-1: invalid MIXER UNIT descriptor 6 [ 900.632060][T16197] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 900.657953][ T5789] asix 3-1:0.34: probe with driver asix failed with error -22 [ 901.763457][ T5612] Bluetooth: hci4: command tx timeout [ 901.885106][T12689] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 902.015637][T12689] usb 7-1: USB disconnect, device number 68 [ 902.112743][T16211] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2757'. [ 902.148955][T16213] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2759'. [ 902.181846][T14389] udevd[14389]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 903.179151][T16220] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2761'. [ 903.192224][T16220] netlink: 'syz.6.2761': attribute type 2 has an invalid length. [ 903.403015][ T30] audit: type=1400 audit(1786902644.232:1730): avc: denied { map } for pid=16217 comm="syz.6.2761" path="socket:[55784]" dev="sockfs" ino=55784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 903.473678][ T30] audit: type=1400 audit(1786902644.232:1731): avc: denied { accept } for pid=16217 comm="syz.6.2761" path="socket:[55784]" dev="sockfs" ino=55784 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 903.551988][ T30] audit: type=1400 audit(1786902645.052:1732): avc: denied { map } for pid=16217 comm="syz.6.2761" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 903.721063][T10219] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.796086][T12689] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 903.805124][ T5612] Bluetooth: hci4: command tx timeout [ 903.996937][T12689] usb 6-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 904.031173][T12689] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 904.072207][T12689] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 904.125386][T12689] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 904.219150][T12689] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 904.316015][T12689] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 904.343627][T10219] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.368478][T12689] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 904.404180][T12689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 904.485528][T12689] usb 6-1: Product: syz [ 904.507136][T12689] usb 6-1: Manufacturer: syz [ 904.533156][T16221] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 904.548072][T16221] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 904.558439][T16221] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 904.565754][T16221] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 904.573140][T16221] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 904.580427][T16221] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 904.607601][T12689] usb 6-1: USB2VGA dongle found at address 97 [ 904.625003][ T5725] usb 3-1: USB disconnect, device number 27 [ 904.654402][T16183] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.667000][T12689] usb 6-1: Allocated 8 output buffers [ 904.678977][T16183] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.719879][T12689] usb 6-1: Failed to early initialize device [ 904.731227][T16183] bridge_slave_0: entered allmulticast mode [ 904.788750][T16183] bridge_slave_0: entered promiscuous mode [ 904.813894][T12689] usb 6-1: USB disconnect, device number 97 [ 904.837079][T16183] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.858544][T16183] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.869691][T16183] bridge_slave_1: entered allmulticast mode [ 904.902973][T16183] bridge_slave_1: entered promiscuous mode [ 905.017293][T10219] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.169822][T16183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 905.343767][T10219] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.439129][T16183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 905.599260][T16256] binder: 16253:16256 ioctl c00c620f 2000000002c0 returned -22 [ 905.640528][T16183] team0: Port device team_slave_0 added [ 905.687199][T16183] team0: Port device team_slave_1 added [ 905.888049][ T5612] Bluetooth: hci4: command tx timeout [ 906.128739][T16183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 906.161468][T16183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.212974][T16183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 906.228616][T16260] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=16260 comm=syz.2.2768 [ 906.243932][T16183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 906.252450][T16183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 906.345079][T16183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 906.696964][T16264] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2770'. [ 906.944726][T10204] netdevsim netdevsim7 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.070068][ T30] audit: type=1400 audit(1786902648.902:1733): avc: denied { ioctl } for pid=16275 comm="syz.5.2773" path="socket:[55890]" dev="sockfs" ino=55890 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 907.664446][ T5612] Bluetooth: hci5: command 0x0406 tx timeout [ 907.975370][ T5612] Bluetooth: hci4: command tx timeout [ 908.389028][T16284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2776'. [ 908.419237][T16284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2776'. [ 908.572938][T10219] bond0 (unregistering): Released all slaves [ 908.727289][T10219] bond1 (unregistering): Released all slaves [ 908.754510][T10213] netdevsim netdevsim7 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 908.839422][T16183] hsr_slave_0: entered promiscuous mode [ 908.989309][T16183] hsr_slave_1: entered promiscuous mode [ 908.999401][T16183] debugfs: 'hsr0' already exists in 'hsr' [ 909.006988][T16183] Cannot create hsr debugfs directory [ 909.082291][T16292] netlink: 'syz.6.2779': attribute type 1 has an invalid length. [ 909.122061][T10213] netdevsim netdevsim7 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.132611][T10213] netdevsim netdevsim7 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.246154][T10219] tipc: Disabling bearer [ 909.312328][T10219] tipc: Disabling bearer [ 909.356320][T16301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=544 sclass=netlink_route_socket pid=16301 comm=syz.6.2779 [ 909.375277][T10219] tipc: Left network mode [ 909.459977][T16292] 8021q: adding VLAN 0 to HW filter on device bond2 [ 909.612838][T16295] bond2: (slave veth3): Enslaving as an active interface with a down link [ 909.657645][T16297] team0: Port device dummy0 removed [ 909.689396][T16297] bond2: (slave dummy0): making interface the new active one [ 909.748031][T16297] dummy0: entered promiscuous mode [ 909.764090][T12689] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 909.784138][ T30] audit: type=1400 audit(1786902651.592:1734): avc: denied { write } for pid=16303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 909.877942][ T30] audit: type=1400 audit(1786902651.712:1735): avc: denied { write } for pid=16317 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 909.954428][T12689] usb 4-1: Using ep0 maxpacket: 32 [ 909.964113][T16297] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 909.977362][T12689] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 910.019950][T12689] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 910.051957][T12689] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 910.072560][T12689] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 910.102151][T12689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 910.122168][T16322] binder: 16321:16322 ioctl c0306201 200000000080 returned -14 [ 910.150811][T12689] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 910.179569][T16322] binder: 16321:16322 ioctl c0306201 2000000003c0 returned -14 [ 910.183093][ T5725] IPVS: starting estimator thread 0... [ 910.214187][T12689] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 910.257110][T12689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.257137][ T5259] 8021q: adding VLAN 0 to HW filter on device eth13 [ 910.285127][T16325] IPVS: using max 44 ests per chain, 105600 per kthread [ 910.318008][T12689] usb 4-1: config 0 descriptor?? [ 910.665410][ T5724] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 910.727646][T16335] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2788'. [ 910.741503][T12689] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 83 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 910.791640][T16341] ocfs2: Bad value for 'barrier' [ 910.827598][T10219] hsr_slave_0: left promiscuous mode [ 910.851875][ T5724] usb 6-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 910.878374][ T5724] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 910.891276][T10219] hsr_slave_1: left promiscuous mode [ 910.895778][ T5724] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 910.939701][ T5724] usb 6-1: config 0 interface 0 has no altsetting 0 [ 910.987258][T12689] usb 4-1: USB disconnect, device number 83 [ 911.006611][ T5724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.017401][T12689] usblp0: removed [ 911.039121][T10219] veth1_macvtap: left promiscuous mode [ 911.064825][T10219] veth0_macvtap: left promiscuous mode [ 911.076726][T10219] veth1_vlan: left promiscuous mode [ 911.090755][ T5724] usb 6-1: config 0 descriptor?? [ 911.141589][ T30] audit: type=1400 audit(1786902652.932:1736): avc: denied { setattr } for pid=16347 comm="syz.6.2790" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 911.349761][ T30] audit: type=1400 audit(1786902653.152:1737): avc: denied { write } for pid=16340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 911.373441][T10219] team0 (unregistering): Port device vlan0 removed [ 911.588876][ T30] audit: type=1400 audit(1786902653.422:1738): avc: denied { write } for pid=16356 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 911.808934][ T5724] hid-multitouch 0003:0EEF:72C4.000D: hidraw0: USB HID v0.00 Joystick [HID 0eef:72c4] on usb-dummy_hcd.5-1/input0 [ 912.059398][T12689] usb 6-1: USB disconnect, device number 98 [ 912.071132][T16363] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 912.200577][T10219] team0 (unregistering): Port device dummy0 removed [ 912.211104][T16364] fido_id[16364]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 912.324629][ T5259] 8021q: adding VLAN 0 to HW filter on device eth14 [ 912.797068][T16382] fuse: fd is not a fuse device [ 912.967641][ T30] audit: type=1400 audit(1786902654.742:1739): avc: denied { write } for pid=16372 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 914.063730][ T30] audit: type=1400 audit(1786902655.882:1740): avc: denied { write } for pid=16399 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 914.178036][T16398] netlink: 59 bytes leftover after parsing attributes in process `syz.3.2801'. [ 914.309361][T16183] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 914.472408][T16183] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 914.557713][T16183] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 914.945595][T16183] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 915.028818][T16183] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 915.111716][T16183] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 915.166757][ T5259] 8021q: adding VLAN 0 to HW filter on device eth15 [ 915.228528][T16183] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 915.613237][T16183] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 915.729927][T16428] trusted_key: encrypted_key: insufficient parameters specified [ 915.762119][T16417] ipvlan2: entered promiscuous mode [ 916.014970][T16183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.396637][ T5825] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 917.476626][T16183] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.574444][ T5825] usb 6-1: Using ep0 maxpacket: 8 [ 917.591091][T10213] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.598245][T10213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.627747][ T5825] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 917.663289][ T5825] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.693800][ T5825] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 917.726946][ T5825] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 917.771820][T10210] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.772009][ T5825] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 917.779589][T10210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.106296][T16449] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2812'. [ 918.775813][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.884436][ T5694] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 919.084655][ T5694] usb 4-1: Using ep0 maxpacket: 32 [ 921.416976][ T5825] usb 6-1: can't set config #1, error -71 [ 921.503676][ T5825] usb 6-1: USB disconnect, device number 99 [ 921.553419][ T5694] usb 4-1: device descriptor read/all, error -71 [ 921.773717][T16458] random: crng reseeded on system resumption [ 921.792947][T16458] Restarting kernel threads ... [ 921.800903][T16458] Done restarting kernel threads. [ 921.985892][ T30] audit: type=1400 audit(1786902663.602:1741): avc: denied { search } for pid=16455 comm="syz.5.2815" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 922.091526][ T30] audit: type=1400 audit(1786902663.602:1742): avc: denied { write } for pid=16455 comm="syz.5.2815" name="v4_end_grace" dev="nfsd" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 922.091565][ T30] audit: type=1400 audit(1786902663.602:1743): avc: denied { open } for pid=16455 comm="syz.5.2815" path="/492/nfsd/v4_end_grace" dev="nfsd" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 922.091600][ T30] audit: type=1400 audit(1786902663.602:1744): avc: denied { accept } for pid=16455 comm="syz.5.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 922.091630][ T30] audit: type=1400 audit(1786902663.622:1745): avc: denied { ioctl } for pid=16455 comm="syz.5.2815" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 922.108454][ T30] audit: type=1400 audit(1786902663.942:1746): avc: denied { write } for pid=16434 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 922.170376][T16467] batadv_slave_0: entered promiscuous mode [ 922.187916][T16465] netlink: 'syz.2.2814': attribute type 4 has an invalid length. [ 922.243680][T16469] netlink: 'syz.2.2814': attribute type 4 has an invalid length. [ 922.506095][ T30] audit: type=1400 audit(1786902664.342:1747): avc: denied { unmount } for pid=6224 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 922.548196][ T30] audit: type=1400 audit(1786902664.382:1748): avc: denied { write } for pid=16472 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 922.887035][ T5259] 8021q: adding VLAN 0 to HW filter on device eth16 [ 922.922298][T16462] batadv_slave_0: left promiscuous mode [ 923.215846][T16491] οΚ: entered promiscuous mode [ 924.588764][T16183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 925.973509][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 925.980680][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.561957][T16183] veth0_vlan: entered promiscuous mode [ 926.611665][T16183] veth1_vlan: entered promiscuous mode [ 926.659402][T16183] veth0_macvtap: entered promiscuous mode [ 926.674651][ T30] audit: type=1400 audit(1786902668.512:1749): avc: denied { setopt } for pid=16523 comm="syz.6.2829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 926.678707][T16183] veth1_macvtap: entered promiscuous mode [ 926.713637][T16183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 926.724060][T16183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 926.893437][T10203] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.362163][T10203] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.514922][T10218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.522806][T10218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 927.606954][T10210] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.623222][T10210] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.642591][T12494] Bluetooth: hci2: unexpected event for opcode 0x2040 [ 927.708087][T16538] FAULT_INJECTION: forcing a failure. [ 927.708087][T16538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 927.721351][T16538] CPU: 0 UID: 0 PID: 16538 Comm: syz.5.2825 Tainted: G L syzkaller #0 PREEMPT(full) [ 927.721379][T16538] Tainted: [L]=SOFTLOCKUP [ 927.721385][T16538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 927.721396][T16538] Call Trace: [ 927.721402][T16538] [ 927.721409][T16538] dump_stack_lvl+0x100/0x190 [ 927.721437][T16538] should_fail_ex.cold+0x5/0xa [ 927.721460][T16538] _copy_to_user+0x32/0xd0 [ 927.721487][T16538] video_usercopy+0xece/0x1730 [ 927.721514][T16538] ? __pfx___video_do_ioctl+0x10/0x10 [ 927.721538][T16538] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 927.721567][T16538] ? __pfx_video_usercopy+0x10/0x10 [ 927.721606][T16538] v4l2_ioctl+0x1bd/0x250 [ 927.721630][T16538] ? __pfx_v4l2_ioctl+0x10/0x10 [ 927.721655][T16538] __x64_sys_ioctl+0x18e/0x210 [ 927.721684][T16538] do_syscall_64+0x115/0x870 [ 927.721704][T16538] ? clear_bhb_loop+0x70/0xc0 [ 927.721725][T16538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.721743][T16538] RIP: 0033:0x7f5a25f9e0d9 [ 927.721759][T16538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.721776][T16538] RSP: 002b:00007f5a26e7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 927.721794][T16538] RAX: ffffffffffffffda RBX: 00007f5a26225fa0 RCX: 00007f5a25f9e0d9 [ 927.721805][T16538] RDX: 0000200000000040 RSI: 00000000c008561c RDI: 0000000000000003 [ 927.721814][T16538] RBP: 00007f5a26e7d090 R08: 0000000000000000 R09: 0000000000000000 [ 927.721824][T16538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.721835][T16538] R13: 00007f5a26226038 R14: 00007f5a26225fa0 R15: 00007ffff049cb48 [ 927.721859][T16538] [ 927.730449][T10210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 927.885609][T16541] ip_tables: iptables: counters copy to user failed while replacing table [ 927.958480][T12494] Bluetooth: hci2: Malformed Event: 0x2f [ 927.964354][T10210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 928.108996][T16548] netlink: 'syz.6.2833': attribute type 10 has an invalid length. [ 928.147640][T16548] bond2: (slave dummy0): Releasing active interface [ 928.156674][T16548] dummy0: left promiscuous mode [ 928.159254][ T5694] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 928.251775][T16548] team0: Port device dummy0 added [ 928.424875][ T5694] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 928.541537][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.550119][ T5694] usb 4-1: Product: syz [ 928.556212][ T5694] usb 4-1: Manufacturer: syz [ 928.580766][ T5694] usb 4-1: SerialNumber: syz [ 928.614984][ T5789] usb 7-1: new low-speed USB device number 69 using dummy_hcd [ 928.840762][T16565] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2837'. [ 928.977313][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 928.996009][T16571] ip_tables: iptables: counters copy to user failed while replacing table [ 929.091551][ T5724] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 929.100727][ T5789] usb 7-1: Invalid ep0 maxpacket: 32 [ 929.342023][ T5789] usb 7-1: new low-speed USB device number 70 using dummy_hcd [ 929.365508][ T10] usb 9-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 929.380450][ T5724] usb 3-1: unable to get BOS descriptor or descriptor too short [ 929.389807][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 929.393172][ T5694] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -EPROTO [ 929.401549][ T5724] usb 3-1: New USB device found, idVendor=2c42, idProduct=1635, bcdDevice= 8.6e [ 929.427985][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 929.437728][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 929.448721][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 929.458743][ T10] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 929.460351][ T5694] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 929.468382][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.505288][T16571] netlink: 'syz.5.2840': attribute type 10 has an invalid length. [ 929.516760][ T5694] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 929.529768][ T5694] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 929.540755][T16556] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 929.550226][T16556] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 929.550970][ T5724] usb 3-1: config 4 has an invalid interface number: 220 but max is 0 [ 929.558055][T16556] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 929.560867][ T5694] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 929.571183][ T10] mos7720 9-1:1.0: Moschip 2 port adapter converter detected [ 929.597660][ T5724] usb 3-1: config 4 has no interface number 0 [ 929.599182][ T5694] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 929.605396][ T5724] usb 3-1: config 4 interface 220 has no altsetting 0 [ 929.620621][ T5789] usb 7-1: Invalid ep0 maxpacket: 32 [ 929.626263][ T5789] usb usb7-port1: attempt power cycle [ 929.630556][ T5694] usb 4-1: USB disconnect, device number 86 [ 929.731690][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.740839][ T5724] usb 3-1: Product: syz [ 929.744060][T12689] usb 6-1: new low-speed USB device number 100 using dummy_hcd [ 929.746401][ T5724] usb 3-1: Manufacturer: syz [ 929.759318][ T5724] usb 3-1: SerialNumber: syz [ 929.904326][T12689] usb 6-1: Invalid ep0 maxpacket: 32 [ 929.994731][ T5789] usb 7-1: new low-speed USB device number 71 using dummy_hcd [ 930.015297][ T5789] usb 7-1: Invalid ep0 maxpacket: 32 [ 930.034046][T12689] usb 6-1: new low-speed USB device number 101 using dummy_hcd [ 930.145140][ T5789] usb 7-1: new low-speed USB device number 72 using dummy_hcd [ 930.184336][T12689] usb 6-1: Invalid ep0 maxpacket: 32 [ 930.189966][ T5789] usb 7-1: Invalid ep0 maxpacket: 32 [ 930.196574][T12689] usb usb6-port1: attempt power cycle [ 930.197235][ T5789] usb usb7-port1: unable to enumerate USB device [ 930.249637][ T30] audit: type=1400 audit(1786902672.082:1750): avc: denied { ioctl } for pid=16575 comm="syz.3.2841" path="socket:[59463]" dev="sockfs" ino=59463 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 930.392382][ T30] audit: type=1400 audit(1786902672.222:1751): avc: denied { getopt } for pid=16575 comm="syz.3.2841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 930.764716][T12689] usb 6-1: new low-speed USB device number 102 using dummy_hcd [ 930.764989][ T30] audit: type=1400 audit(1786902672.602:1752): avc: denied { write } for pid=16562 comm="syz.2.2836" path="socket:[58613]" dev="sockfs" ino=58613 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 930.815422][T12689] usb 6-1: Invalid ep0 maxpacket: 32 [ 930.984284][T12689] usb 6-1: new low-speed USB device number 103 using dummy_hcd [ 931.039247][T12689] usb 6-1: Invalid ep0 maxpacket: 32 [ 931.044895][T12689] usb usb6-port1: unable to enumerate USB device [ 931.507968][ T5724] f81232 3-1:4.220: f81534a converter detected [ 931.524886][ T10] usb 9-1: mos7720: usb_control_msg() failed: -71 [ 931.543734][ T10] usb 9-1: Moschip 2 port adapter converter now attached to ttyUSB0 [ 931.554137][ T10] usb 9-1: Moschip 2 port adapter converter now attached to ttyUSB1 [ 931.567114][ T10] usb 9-1: USB disconnect, device number 2 [ 931.625429][ T5724] f81534a ttyUSB2: f81232_set_register failed status: -71 [ 931.632587][ T5724] f81534a ttyUSB2: probe with driver f81534a failed with error -5 [ 931.647661][T16588] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2845'. [ 931.673282][ T10] moschip7720 ttyUSB0: Moschip 2 port adapter converter now disconnected from ttyUSB0 [ 931.692694][ T10] moschip7720 ttyUSB1: Moschip 2 port adapter converter now disconnected from ttyUSB1 [ 931.708032][ T5724] usb 3-1: USB disconnect, device number 28 [ 931.717660][ T5724] f81232 3-1:4.220: device disconnected [ 931.737880][ T10] mos7720 9-1:1.0: device disconnected [ 931.777713][T16588] kvm: kvm [16586]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 932.430749][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 932.716681][ T10] usb 9-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 932.743161][ T10] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 932.770391][T16573] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 932.798717][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.914352][ T5825] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 932.965634][T16573] usb 4-1: Using ep0 maxpacket: 8 [ 932.978762][T16573] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 933.012297][T16573] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 933.037919][T16573] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 933.079810][T16573] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 933.084054][ T5825] usb 3-1: Using ep0 maxpacket: 8 [ 933.092881][ T10] qmi_wwan 9-1:1.0: cdc-wdm0: USB WDM device [ 933.128835][ T5825] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 933.133107][T16573] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 933.158708][ T10] wwan wwan0: port wwan0qmi0 attached [ 933.189967][ T5825] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.226434][T16573] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.246580][ T5825] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 933.263289][ T30] audit: type=1400 audit(1786902675.092:1753): avc: denied { read write } for pid=16587 comm="syz.8.2844" name="cdc-wdm0" dev="devtmpfs" ino=3751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 933.334718][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.351782][ T30] audit: type=1400 audit(1786902675.092:1754): avc: denied { open } for pid=16587 comm="syz.8.2844" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3751 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 933.384062][ T5825] usb 3-1: Product: syz [ 933.389194][ T5825] usb 3-1: Manufacturer: syz [ 933.400778][ T5825] usb 3-1: SerialNumber: syz [ 933.427192][ T10] qmi_wwan 9-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.8-1, WWAN/QMI device, d2:2d:2c:93:f6:fd [ 933.441011][ T5825] usb 3-1: config 0 descriptor?? [ 933.478284][ T10] usb 9-1: USB disconnect, device number 3 [ 933.535127][T16573] hub 4-1:1.0: bad descriptor, ignoring hub [ 933.541056][T16573] hub 4-1:1.0: probe with driver hub failed with error -5 [ 933.541342][T16617] ip_tables: iptables: counters copy to user failed while replacing table [ 933.548526][T16573] cdc_wdm 4-1:1.0: skipping garbage [ 933.587086][T16573] cdc_wdm 4-1:1.0: skipping garbage [ 933.644604][ T10] qmi_wwan 9-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.8-1, WWAN/QMI device [ 933.705363][ T5825] usb 3-1: USB disconnect, device number 29 [ 933.820049][T16621] netlink: 'syz.5.2852': attribute type 10 has an invalid length. [ 933.885195][T16602] qmi_wwan 9-1:1.0: Error submitting int urb - -19 [ 933.931260][T16573] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device [ 933.952643][T16573] cdc_wdm 4-1:1.0: Unknown control protocol [ 934.100909][ T10] wwan wwan0: port wwan0qmi0 disconnected [ 934.264419][T16623] netlink: 'syz.6.2853': attribute type 6 has an invalid length. [ 934.299565][T16623] netlink: 'syz.6.2853': attribute type 21 has an invalid length. [ 934.324119][T12689] [ 934.326474][T12689] ============================================ [ 934.332613][T12689] WARNING: possible recursive locking detected [ 934.338751][T12689] syzkaller #0 Tainted: G L [ 934.344708][T12689] -------------------------------------------- [ 934.350833][T12689] kworker/1:1/12689 is trying to acquire lock: [ 934.356962][T12689] ffff8880332b6128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 934.366697][T12689] [ 934.366697][T12689] but task is already holding lock: [ 934.374040][T12689] ffff88802e437128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 934.383789][T12689] [ 934.383789][T12689] other info that might help us debug this: [ 934.391824][T12689] Possible unsafe locking scenario: [ 934.391824][T12689] [ 934.399256][T12689] CPU0 [ 934.402529][T12689] ---- [ 934.405788][T12689] lock(&grp->list_lock); [ 934.410202][T12689] lock(&grp->list_lock); [ 934.414600][T12689] [ 934.414600][T12689] *** DEADLOCK *** [ 934.414600][T12689] [ 934.422727][T12689] May be due to missing lock nesting notation [ 934.422727][T12689] [ 934.431022][T12689] 3 locks held by kworker/1:1/12689: [ 934.436303][T12689] #0: ffff88801c04b140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 934.446729][T12689] #1: ffffc90004effd08 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 934.458628][T12689] #2: ffff88802e437128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 934.468805][T12689] [ 934.468805][T12689] stack backtrace: [ 934.474698][T12689] CPU: 1 UID: 0 PID: 12689 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 934.474724][T12689] Tainted: [L]=SOFTLOCKUP [ 934.474730][T12689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 934.474743][T12689] Workqueue: events snd_rawmidi_input_event_work [ 934.474772][T12689] Call Trace: [ 934.474780][T12689] [ 934.474787][T12689] dump_stack_lvl+0x100/0x190 [ 934.474809][T12689] print_deadlock_bug.cold+0xbd/0xca [ 934.474836][T12689] __lock_acquire+0x1256/0x1a40 [ 934.474862][T12689] lock_acquire+0x1b9/0x370 [ 934.474882][T12689] ? snd_seq_deliver_event+0x230/0x860 [ 934.474909][T12689] ? do_raw_read_unlock+0x3f/0x70 [ 934.474940][T12689] _raw_read_lock+0x5f/0x70 [ 934.474955][T12689] ? snd_seq_deliver_event+0x230/0x860 [ 934.474980][T12689] snd_seq_deliver_event+0x230/0x860 [ 934.475003][T12689] ? do_raw_spin_lock+0x128/0x260 [ 934.475025][T12689] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 934.475048][T12689] ? mark_held_locks+0x40/0x70 [ 934.475066][T12689] ? lockdep_hardirqs_on+0x78/0x100 [ 934.475083][T12689] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 934.475098][T12689] ? client_use_ptr+0x107/0x4b0 [ 934.475119][T12689] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 934.475143][T12689] queue_broadcast_event.isra.0+0x143/0x1b0 [ 934.475161][T12689] ? __pfx_queue_broadcast_event.isra.0+0x10/0x10 [ 934.475178][T12689] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 934.475194][T12689] ? snd_seq_timer_start+0x1f0/0x2a0 [ 934.475213][T12689] snd_seq_control_queue+0x709/0xb70 [ 934.475231][T12689] ? __pfx_event_input_timer+0x10/0x10 [ 934.475251][T12689] __snd_seq_deliver_single_event+0x127/0x1c0 [ 934.475275][T12689] snd_seq_deliver_single_event+0x31f/0x8c0 [ 934.475299][T12689] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 934.475323][T12689] ? __lock_acquire+0x49f/0x1a40 [ 934.475343][T12689] snd_seq_deliver_event+0x44b/0x860 [ 934.475365][T12689] ? do_raw_spin_lock+0x128/0x260 [ 934.475388][T12689] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 934.475409][T12689] ? mark_held_locks+0x40/0x70 [ 934.475428][T12689] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 934.475442][T12689] ? lockdep_hardirqs_on+0x78/0x100 [ 934.475458][T12689] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 934.475472][T12689] ? client_use_ptr+0x107/0x4b0 [ 934.475493][T12689] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 934.475518][T12689] send_timer_event.isra.0+0x130/0x190 [ 934.475541][T12689] ? __pfx_send_timer_event.isra.0+0x10/0x10 [ 934.475564][T12689] ? lockdep_hardirqs_on+0x78/0x100 [ 934.475581][T12689] ? snd_seq_queue_timer_set_tempo+0x199/0x510 [ 934.475599][T12689] snd_seq_oss_timer_start+0x1db/0x320 [ 934.475623][T12689] ? __pfx_snd_seq_oss_timer_start+0x10/0x10 [ 934.475646][T12689] ? snd_seq_oss_readq_put_timestamp+0xd1/0x260 [ 934.475666][T12689] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 934.475681][T12689] ? find_slot+0x166/0x1b0 [ 934.475696][T12689] snd_seq_oss_midi_input+0x467/0xa30 [ 934.475715][T12689] ? __pfx_snd_seq_oss_midi_input+0x10/0x10 [ 934.475734][T12689] ? find_held_lock+0x2b/0x80 [ 934.475747][T12689] ? snd_seq_port_use_ptr+0x128/0x190 [ 934.475768][T12689] snd_seq_oss_event_input+0x194/0x250 [ 934.475783][T12689] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 934.475798][T12689] __snd_seq_deliver_single_event+0x127/0x1c0 [ 934.475822][T12689] snd_seq_deliver_single_event+0x31f/0x8c0 [ 934.475846][T12689] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 934.475869][T12689] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 934.475885][T12689] ? lockdep_hardirqs_on+0x78/0x100 [ 934.475900][T12689] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 934.475920][T12689] ? snd_seq_timer_get_cur_tick+0x50/0x70 [ 934.475941][T12689] snd_seq_deliver_event+0x2c1/0x860 [ 934.475965][T12689] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 934.475987][T12689] ? mark_held_locks+0x40/0x70 [ 934.476005][T12689] ? lockdep_hardirqs_on+0x78/0x100 [ 934.476021][T12689] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 934.476035][T12689] ? client_use_ptr+0x107/0x4b0 [ 934.476056][T12689] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 934.476081][T12689] snd_midi_input_event+0x32f/0x470 [ 934.476102][T12689] ? __pfx_snd_midi_input_event+0x10/0x10 [ 934.476124][T12689] ? __pfx_snd_midi_input_event+0x10/0x10 [ 934.476144][T12689] snd_rawmidi_input_event_work+0x61/0x80 [ 934.476168][T12689] process_one_work+0xa23/0x1940 [ 934.476188][T12689] ? __pfx_process_one_work+0x10/0x10 [ 934.476207][T12689] ? __pfx_snd_rawmidi_input_event_work+0x10/0x10 [ 934.476231][T12689] worker_thread+0x5ef/0xe50 [ 934.476249][T12689] ? __pfx_worker_thread+0x10/0x10 [ 934.476266][T12689] ? kthread+0x13a/0x450 [ 934.476279][T12689] ? __pfx_worker_thread+0x10/0x10 [ 934.476294][T12689] kthread+0x370/0x450 [ 934.476308][T12689] ? __pfx_kthread+0x10/0x10 [ 934.476322][T12689] ret_from_fork+0x72b/0xd50 [ 934.476343][T12689] ? __pfx_ret_from_fork+0x10/0x10 [ 934.476364][T12689] ? __switch_to+0x800/0x10f0 [ 934.476380][T12689] ? __pfx_kthread+0x10/0x10 [ 934.476395][T12689] ret_from_fork_asm+0x1a/0x30 [ 934.476420][T12689] [ 934.964859][ T5694] usb 6-1: new low-speed USB device number 104 using dummy_hcd [ 934.993234][T16634] input: syz1 as /devices/virtual/input/input44 [ 935.049482][T16623] netlink: 'syz.6.2853': attribute type 21 has an invalid length. [ 935.099646][T16623] openvswitch: netlink: Flow actions attr not present in new flow. [ 935.110635][ T30] audit: type=1400 audit(1786902676.952:1755): avc: denied { write } for pid=16608 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 935.137531][ T30] audit: type=1400 audit(1786902676.972:1756): avc: denied { append } for pid=16633 comm="syz.2.2855" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 935.161155][ T5694] usb 6-1: Invalid ep0 maxpacket: 32 [ 935.244645][ T30] audit: type=1400 audit(1786902677.072:1757): avc: denied { write } for pid=16642 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 935.304520][ T5694] usb 6-1: new low-speed USB device number 105 using dummy_hcd [ 935.454338][ T5694] usb 6-1: Invalid ep0 maxpacket: 32 [ 935.460053][ T5694] usb usb6-port1: attempt power cycle [ 935.626630][T12810] usb 4-1: USB disconnect, device number 87 [ 935.804313][ T5694] usb 6-1: new low-speed USB device number 106 using dummy_hcd [ 935.849764][ T5694] usb 6-1: Invalid ep0 maxpacket: 32 [ 935.984100][ T5694] usb 6-1: new low-speed USB device number 107 using dummy_hcd [ 936.024963][ T5694] usb 6-1: Invalid ep0 maxpacket: 32 [ 936.036776][ T5694] usb usb6-port1: unable to enumerate USB device [ 937.491587][ T30] audit: type=1400 audit(1786902679.322:1758): avc: denied { write } for pid=16651 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 937.528128][ T30] audit: type=1400 audit(1786902679.362:1759): avc: denied { write } for pid=16662 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 939.377990][ T30] audit: type=1400 audit(1786902681.212:1760): avc: denied { write } for pid=16665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 939.411445][ T30] audit: type=1400 audit(1786902681.242:1761): avc: denied { write } for pid=16676 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 939.581490][ T30] audit: type=1400 audit(1786902681.412:1762): avc: denied { write } for pid=16679 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 939.636150][ T30] audit: type=1400 audit(1786902681.472:1763): avc: denied { write } for pid=16690 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1