last executing test programs: 4m29.118435369s ago: executing program 32 (id=314): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x109400, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = syz_usb_connect(0x0, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002e00101408780250001000000000109022700010100c0320904000003e0010100070581034000010705820240000007050202"], 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_usb_ep_write(r3, 0x81, 0x4, &(0x7f0000000080)="ff098755") r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x2}]}, 0x6c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c00028005000100000000000600034000010000080007"], 0x6c}}, 0x0) syz_usb_connect(0x3, 0x8c4, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x8b, 0xb1, 0x37, 0xff, 0x572, 0x960c, 0xe0a0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b2, 0x3, 0x6, 0x3, 0xe0, 0x1, "", [{{0x9, 0x4, 0x86, 0x1d, 0x3, 0xf, 0xe9, 0xf9, 0x5, [@hid_hid={0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0xbcb}}], [{{0x9, 0x5, 0x6, 0x10, 0x200, 0x8c, 0x0, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0xfffd}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xce, 0xeac3}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x80, 0x44, 0x2, [@generic={0x2, 0x19}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0x6, 0x8, 0x1, [@generic={0xc5, 0x2f, "8222b62ab1ebec60bdfe46d53d406c21ce607d4c25924af010cea15bb8572f324803639e6191b461385121978d039ba037734f15387a2f4455d99c3669232e0c8ab3caf48a7991d4663729723f12dd26b07f967cd0129a2c7885d71b768dfff053e3c2e7312f468d0f2e1e0b9e28a13c719105e8abf286b789b5559a2675ea194a2d58620bbca59bda1462446d4b0bdbe72ecaf6ecc6b2f35fc8b43a9761f97d5494f1041cad189f9631d8caaba43ed02820ee69d696daed18ed060bb0c256a9ad4be2"}]}}]}}, {{0x9, 0x4, 0x7b, 0x4, 0x9, 0x40, 0x75, 0x16, 0x2, [@hid_hid={0x9, 0x21, 0x7, 0xe, 0x1, {0x22, 0x35a}}, @uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xff, 0x0, 0xfd, 0x7}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x3, 0x31, 0x1, "9f"}]}], [{{0x9, 0x5, 0x3, 0x3, 0x40, 0x10, 0x3, 0x8}}, {{0x9, 0x5, 0xa, 0x3, 0x48, 0x7c, 0xff, 0x8, [@generic={0xbb, 0x1, "4af31d6405e88f7e4ea54044604574435414f707e6cd3656aefcb54f783ecf55333bb1cfe37ea7376e7d4d683cb447acc37ffb1442fcdbe309be92976c3eb3ca029241a753c3fb056c359811db02f1e37a135c0f8872532321894aae105fd70dd0891dabb941685630603957cbb972b4117ca605fa4d340c7adf29b383235b5349f676ab46066f313e07036ddf0595cec7676d915e024454b5d349a72a6baf56bf2a296e802400607a7f95ee0a1768d1cf39813ba2dac5345b"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x2, 0x0, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x7}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x6, 0xfc}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0x6, 0x1, 0xc}}, {{0x9, 0x5, 0x4, 0x0, 0x8, 0x5, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x9}, @generic={0x101, 0x1, "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"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0xb6, 0x5, 0x8}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0xc8, 0x80, 0xa}}, {{0x9, 0x5, 0xd, 0x8, 0x200, 0x8, 0x80, 0xf2, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x36, 0x1}]}}]}}, {{0x9, 0x4, 0x99, 0x5, 0xf, 0xae, 0xd8, 0x2, 0x0, [@hid_hid={0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0xe63}}, @hid_hid={0x9, 0x21, 0xfffa, 0x4, 0x1, {0x22, 0x62b}}], [{{0x9, 0x5, 0x8, 0xc, 0x20, 0x0, 0x7, 0x40}}, {{0x9, 0x5, 0xb, 0x2, 0x400, 0xa2, 0x4, 0x80}}, {{0x9, 0x5, 0xe, 0x2, 0x40, 0x3, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x10}, @generic={0xe4, 0x22, "c68362d4917c9bc3bb91736cba499579c3cb8cc17c95249f76d09ecb274e54f06d6d1d488f29dc8a6e3700dbdcd94291cf875e98794ee83edabb34d840c962f9429f1a237c810eb526523eb3318c7b265e67b0dc366ecc1f1b9ce973e491e2bfded38f3699f748155a56fa0ad92d57d8a37fa4bd3c81e0993cc9f4238cd68391ffad4ffaa67b9563f5a642db86ab4a3e363ab354728048dcce98871b41b2293c3ba4ddbd75edeb8616854c1ed3ab7e20800823853b05c44d22d5eb7c74d4810f33b021ce3499d2b694a232e569a0fb6abd24e0963df38c3cf79a3d4f348ed7c1ade2"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x35e33f3c0445fccf, 0x8f, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x4}]}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x6, 0x6, 0x6}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x5, 0x8, 0xdf, [@generic={0x80, 0x9, "fea1caafa9dbda41cc83ddb703e63bc9df5e0a2c1427cee62c473e7a5fe51f59a47307436224e8662e258580b4e1fe46fe2302a1ae37a2bc1f594ea2ace5362096c27af5cbb312d079e48b198411db63d51b46274e00aeda4dc413976433554e592fda9c62d6cb9454959e6d9c7f30d25a61fb4de8747e6c69cf307af6e9"}, @generic={0xce, 0x28, "b8e772190c7f6bc73d73435928d9df4169a48cb4f56f7524bc4c947d0f5772a44efbe2b24893a88963050a9524339c9e94312d04cb16093a8c1961c5ebf3cb98ebf49a66db86b519fc4b5ba408472dfa882cd9aba84872cb012fbda316bd9f1f1d303c0fe56478166ba536c2109e41bb69dd8b5099e8d140c3c158874a551ff78760b5d58681049f4125769dfc5df649714c7cb48dabeacba9a94b6e5dfde509a2ad3a0fc7129050d38c0173d46525605d8d238f1586819a1afd1fe197da8e27e27648306335dd9e724cc2c7"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x20, 0xd8, 0xc0, 0x9}}, {{0x9, 0x5, 0x0, 0x2, 0x8, 0xd9, 0x0, 0x10}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x2, 0xfe, 0x7}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x5, 0x4, 0x8}}, {{0x9, 0x5, 0xe, 0x1, 0x10, 0x1, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x0, 0x7}]}}, {{0x9, 0x5, 0xc, 0x6, 0x200, 0x5, 0x6, 0x7f, [@generic={0x62, 0x22, "9f2ae95cecf63716025214fc7dd852641d589aba34453f263af2bbadd3613838d49d294f09760bb63f5da2297d307a152a04a95d0276ac78ad30f710273c3747d22ee486794c8d8e4ad483252686da6c5fcc69e04a2ca3f81533640d6c9a4fba"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x7, 0x7, 0x9, [@generic={0xf6, 0x0, "033c1686da06ac5220f7e60332f238c707cc966e80c0e89709e43b57c62ed86a27f7ca36af08653e8caf32024011a9cdd4652e9e9fa343d53227e9731503fb0596fb916f3dea1e8b30835f64dd9875a5fb848ec7a3c09b4a00717ce5ef21bbcbf90acfaef13ecf5e5098bc184cd659c4bd9c74cd2c2a0ab5044a363a3eddb269ba46ccda52794da80736e6d20fa82bfe8fce5543e6a7489a405e2f4d9c295783faad8f239beaf1e955e3d911d8dd10711d9c4db494f43f381c5480190c06098114fdfc446d1e5afef6cecd287f70dc11bdc9d6ce25acf0e98aeb411ef572a23a67184a98128a959b00f6fa3d06baa6aa17cc1784"}, @generic={0x52, 0x21, "88d2add4255bad1396b2100ebe4fff1fb7e7826d513919b5f826c97449ec1a254f437f3a894598b9cc3d8cb68df392c1d3bc44ec9754b7db6c0828452c373fdb4809e8b243af6be72909f85b7f66ec3d"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0xc, 0x86, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x59ad}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x5, 0x40, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1}, @generic={0xbf, 0x31, "815d7c2b3233c9e1b589ea52193d626572b3b4d356d3b8fe2c9e71f53944b4c45b30503a9e1830f281b9172425b1e7b232bb1be306ebdc003e9bcec40658bfb205cc58c9bbd5f2b1a71068f3df7fb5f6668ebbb9edd0f2555452b94cc3fe29050b150c5e89bbee471047f31ec93f7f1da02e44b457bf1e703f4bd51deb9a55af7903f9e085cbc1579f2e6e0cfe74cbc4d8118bc8754ba16384658d19bedfbc2a20d856306ccc773b5c77b6cf74b2b8ade4ecb611b229cb1e6433fb08d1"}]}}]}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f00000009c0)={0xa, 0x6, 0x250, 0xd, 0x2, 0x1, 0x8, 0x1}, 0x5, &(0x7f0000000a00)={0x5, 0xf, 0x5}, 0x3, [{0xb8, &(0x7f0000000a40)=@string={0xb8, 0x3, "4a3f93b5b056d96236217f51b3c8d3cd377e27feac33d3c02cda7ccaf0e12e8ce3ae0fb5b12f919dbd6ad8a00af33c0a50dab080108f17d57df841d5ff030129e416b3f3062b98d903b623641b2a9c68f251bfb4e7e24defbe421f9faf048a8521d9117bcc698b5acdf3d542510b625a5b3b60c1fa6d7229700b55578917c6812305dc92154e434d1f2e3f43003c65b2ed108403e5eec2039994e17bc5fe5e5ad51923cb8b500987481d5d287676ec5713613f198dcf"}}, {0xde, &(0x7f0000000b00)=@string={0xde, 0x3, "bbcc97f344f92321adcc6da60bb52a5b9e44f06da7b23691168b447e749b9f8779326fed54eb2c0d6a3262360f32f3053ad901308648ed57d32e0dd5fd3e30ea8c7694eb5fc4bf4f4ff51ab07b1f9ae9b01ba2bb7bf97035d66c00573adff19341242b30debcbb3ab955ae7c6e3716cd61063e7275dc40a51d0954c226911fd8d6085a41e49c3f7de7feb4d8903ae3fad63296d89bc115384329a8c67059e3ee0648c7a65095e52f44966940c91af075e881648d74d73a1673e03e1c3f2e23c78e407da9d35095801585569dc3640f2485490bd0dda549b6c4444809"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x2809}}]}) r6 = openat$userio(0xffffffffffffff9c, &(0x7f0000000300), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r6, &(0x7f00000000c0), 0x2) syz_usb_connect$uac1(0x5, 0x96, &(0x7f0000000c80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8212, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84, 0x3, 0x1, 0x2, 0x20, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x6, 0x6, 0x3, {0x7, 0x25, 0x1, 0x4, 0x4, 0xf}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xa, 0x2, 0x7, 0x40}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x6, 0x2, 0xd, 0x5}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xfe, 0x2, 0x8, 0x8, "cbcafc9a9792b8a92f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x650, 0x6, 0xa, 0x0, {0x7, 0x25, 0x1, 0x0, 0x1, 0x7f}}}}}}}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x200, 0x8, 0x40, 0xe1, 0x8}, 0x5, &(0x7f0000000d80)={0x5, 0xf, 0x5}, 0x5, [{0x68, &(0x7f0000000e80)=ANY=[@ANYBLOB="6803cd2cc46124392be86e1e7d2d66feb57c16b961e6f6c92b9c6666b63a7bf0035ad3fdec303cb0b57b3fba67cdf568d2d5767e662bca6ab7d310a35d8c7ccf93a5b8bd04b375b862081cb174552665fc0c03b5c3a6034ba20499c0f86deae1331a93288ea9ad1f"]}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x40f}}, {0xab, &(0x7f0000001100)=@string={0xab, 0x3, "9d55f579260d5d761f07fdd3f3cc844f7fe530585080483ff1c88d5342b0f86aa7d7a27bc728f2b2ac118ea4c77a627f8ce27fec26befca8f34d7f6ecc4c03b0954da372a73e3a6d74977a44945ef412e75c39a9ed67f3d280bfcc2783c6de0df2cfd515abbde911f8d2a3c4349f344f67d4426a8bf7d1b3dcf83272517f6575169f6f4e24d0cbfa9642201f9b3466424442eaaecdb494cef6b8fd2b25a1b12552da50f3e963de75cf"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0xc07}}]}) 3m18.740721934s ago: executing program 33 (id=590): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) prlimit64(r2, 0x1, &(0x7f0000000140)={0x3c, 0x3}, 0x0) mmap(&(0x7f00009e4000/0x3000)=nil, 0x3000, 0xb635773f06ebbeec, 0x8032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000540)={0x14, &(0x7f0000000480)=ANY=[], 0x0}, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x9, &(0x7f0000000180)=0x7, 0x4) 2m31.208385129s ago: executing program 34 (id=770): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x1e57, 0xc237, 0x7, 0xa, 0xea, "04ad7d2ed56d7f7f598da7590de9d3000d00", 0x20000006, 0x7}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000800800034000000007080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000000908000240000000100900010073797a30000000000900020073797a320000000014000000110001"], 0xb0}}, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xa) 2m13.51222312s ago: executing program 35 (id=844): socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40010021, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, 0x0, &(0x7f0000000000)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000040)={0x2, 0x4, 0x5075, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x600}}], 0x7, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000008ec0)=ANY=[@ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x24040000) 2m9.034190222s ago: executing program 36 (id=865): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x28182, 0x0) remap_file_pages(&(0x7f00005f4000/0x3000)=nil, 0xa00, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x66, 0x903, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xc, 0x7}, {0x4, 0xfff1}, {0xfff2, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000000c0)={0x7}, 0x10) write(r8, &(0x7f0000000100)="1400000052004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r8, &(0x7f0000005c80), 0x1b, 0x10122, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000140)={0x5, 0x4, {0xffffffffffffffff}, {}, 0x57, 0x8}) 2m8.298209043s ago: executing program 1 (id=869): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) syz_open_dev$dvb_demux(&(0x7f0000000000), 0x3, 0x80000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@mpls_getroute={0x30, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_VIA={0x14, 0x12, {0x0, "fa9bc12ecfdd04968e8dc9d61ea9"}}]}, 0x30}}, 0x0) 2m8.027606527s ago: executing program 1 (id=870): r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f00000006c0)=ANY=[@ANYRES64], 0x0) syz_usb_connect$uac3(0x4, 0x13c, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd", 0x1}], 0x1, 0x0, 0x0, 0x20000041}}], 0x1, 0xc004) recvmmsg(r2, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x2, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x1, 0x25, &(0x7f00000002c0), 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x55fdb4595c3d8036) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x100, 0x200}}) getpgid(r5) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000f70000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @remote, 0x9}, 0x1c) sendmsg(r9, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m4.707829751s ago: executing program 1 (id=874): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_print_times', 0xc0a02, 0xce) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) fsopen(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x240000c1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000140)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa42, @mcast1, 0xbf9}}, {{0xa, 0x4e24, 0xc7e2, @empty, 0xfffffe01}}}, 0x108) write$yama_ptrace_scope(r1, &(0x7f0000000000)='2\x00', 0x2) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000004c0)={0x0, 0x3}, 0x8) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000040)=[{{0x4, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x0, 0x1, 0x1, 0x1}, {0x4, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x0, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x4, 0x0, 0x1}, {0x3}}, {{0x4, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x0, 0x1}}], 0x38) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) close_range(r6, 0xffffffffffffffff, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) 2m4.404941726s ago: executing program 1 (id=875): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1}, &(0x7f00000000c0)=0x8) prlimit64(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0x10, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x1) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$inet6_int(r3, 0x29, 0x7, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x400, 0x800, 0x6, 0x8000001000000000, 0x1000000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0x381, 0x9, 0x72, 0x9e22, 0x0, 0x100}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) 2m3.441419133s ago: executing program 1 (id=879): r0 = socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x30}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x100000, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r3 = socket$inet_sctp(0x2, 0x1, 0x84) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r4 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@nested_create_vm={0x12d, 0x18}], 0x18}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r6, 0x4068aea3, &(0x7f0000000040)={0xce, 0x0, r9}) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r6, 0x4068aea3, &(0x7f00000002c0)) r10 = bpf$TOKEN_CREATE(0x24, &(0x7f0000003380)={0x0, r3}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x4, [@decl_tag={0xb, 0x0, 0x0, 0x11, 0x1}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x3}, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x2, 0x3}, {0x1, 0x1}, {0x2, 0x1}, {0xa, 0x4}, {0x9, 0x1}, {0xa, 0x4}]}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000002340)=""/4096, 0x74, 0x1000, 0x1, 0x0, 0x10000, @value=r10}, 0x28) syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$inet6(r11, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev}, &(0x7f00000001c0)=0x1c) r12 = syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x101a40) readv(r12, &(0x7f0000001300)=[{&(0x7f0000001340)=""/4085, 0xff5}], 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000003b0001031dbdf00affdbdf25060000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r13) 2m1.889165076s ago: executing program 1 (id=884): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040014) (async) syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040109740780000010203010902510001010080320904000009ff000000070581034000010705820200020007050202000200070583020002000705030200020007058402000200070504020002000705850200020007050502", @ANYRES64=r0], 0x0) 2m1.667032981s ago: executing program 37 (id=884): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x34, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20040014) (async) syz_usb_connect(0x0, 0x63, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040109740780000010203010902510001010080320904000009ff000000070581034000010705820200020007050202000200070583020002000705030200020007058402000200070504020002000705850200020007050502", @ANYRES64=r0], 0x0) 1m44.236817153s ago: executing program 7 (id=943): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x734}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000001400)={0x1, 0x1, 0x16, 0x13, 0x1f2, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9d) syz_emit_ethernet(0x76, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@multicast1}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) sendmsg$inet(r6, 0x0, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(blowfish-asm)\x00'}, 0x58) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 1m43.254971124s ago: executing program 7 (id=945): socket$packet(0x11, 0x2, 0x300) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x101, 0x7) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x28, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x8, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x5, &(0x7f0000000000)=[{0x94, 0xdf, 0x0, 0x200}, {0x3ff, 0x0, 0x0, 0x7ff}, {0x6, 0x3, 0x5, 0x1}, {0x0, 0x80, 0x4, 0x8}, {0x7f, 0x44, 0x7, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000180)={0x0, 0x7, 0xa5, {0xa5, 0x5, "826313612b8526792c3cbdeace910c0fb74237cc6e446c4e88e78881ce2a52973661d67a0c9d00b5ccb870fe006561cace4defe397a9615c7b9c4fceb412cff2cefed0f72a9422ab68496a6c7984a318438bab79d73d64f9c4b213147b00333375977538fd89d8a07d0a79681406a6b4ff06db82a18df557009c7a16c1eba4d38cddd071d793fd1cf05998cfe89791f3cc603500848546b7008fc914d5030fd9e53d2f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m39.812089068s ago: executing program 7 (id=954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m39.357263298s ago: executing program 0 (id=958): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x8640, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018, 0xffffffffffffffff}, './file0\x00'}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=interleave=relative,uid>', @ANYRESDEC=0x0, @ANYBLOB="57e5322d6dc72c00"]) socket$inet6(0xa, 0xa, 0xf80) r3 = syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x249c, 0x9006, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x14, 0x10, 0x45, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x9, [], [{{0x9, 0x5, 0x2, 0x2, 0x10, 0x4d, 0x3, 0x8, {0x4}}}]}}}}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r3) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200"], 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) 1m37.73183163s ago: executing program 7 (id=963): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1}, &(0x7f00000000c0)=0x8) prlimit64(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0x10, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x1) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x400, 0x800, 0x6, 0x8000001000000000, 0x1000000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0x381, 0x9, 0x72, 0x9e22, 0x0, 0x100}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) 1m36.683848275s ago: executing program 7 (id=964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x24}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x18, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x2400c895}, 0x24000000) 1m36.317447803s ago: executing program 9 (id=966): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x6, &(0x7f0000000080)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd4}, [@initr0, @jmp={0x5, 0x0, 0x3, 0x2, 0x8, 0x30, 0x10}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 1m36.198838558s ago: executing program 9 (id=967): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e21, 0x0, @private2}}, 0x0, 0x0, 0x41, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) listen(r0, 0x7c2) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3a080045a00028400000001d06907800000000000000004e214e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="501900c3907800004c11a88bc53b57ce76c3c9f9296bfdb841e0d131"], 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f00000001c0)={0x80, 0xfff, 0x5}) 1m35.997119415s ago: executing program 9 (id=968): syz_usb_connect(0x2, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYBLOB='X'], 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) 1m35.234631964s ago: executing program 7 (id=970): r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r0, &(0x7f0000000200)={0x0, 0x26, 0x1, @thr={0x0, 0x0}}) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x496802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x4) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r4, 0x402, 0xd) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000300)={0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000001c0)={r6, 0x3, r7, 0x3, 0x80000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r9, &(0x7f0000000040)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r10 = socket$kcm(0x2, 0x2, 0x106) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r9, {0xee01, 0xee01}}, './file0\x00'}) fstat(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000001c0)={r11, r12, r13}, 0xc) 1m34.959444526s ago: executing program 38 (id=970): r0 = mq_open(&(0x7f000084dff0)='rmdF\x17\x16\xbc\xec', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_notify(r0, &(0x7f0000000200)={0x0, 0x26, 0x1, @thr={0x0, 0x0}}) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x496802, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x4) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r4, 0x402, 0xd) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000300)={0x0}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f00000001c0)={r6, 0x3, r7, 0x3, 0x80000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r9, &(0x7f0000000040)='\x00', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r10 = socket$kcm(0x2, 0x2, 0x106) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000080)={0x0, 0xffff, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r9, {0xee01, 0xee01}}, './file0\x00'}) fstat(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f00000001c0)={r11, r12, r13}, 0xc) 1m34.917189038s ago: executing program 0 (id=972): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000040)=@in={0x2, 0xb, @rand_addr=0x64010100}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x14001}], 0x1, 0x4044040) socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_VENDOR(r2, 0x0, 0x8090) lseek(r0, 0xffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) statfs(0x0, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a000905000000000000000705", @ANYRES16], 0x0) 1m34.076673555s ago: executing program 9 (id=974): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1}, &(0x7f00000000c0)=0x8) prlimit64(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0x10, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x1) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x400, 0x800, 0x6, 0x8000001000000000, 0x1000000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0x381, 0x9, 0x72, 0x9e22, 0x0, 0x100}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) 1m32.99807569s ago: executing program 9 (id=978): openat(0xffffffffffffff9c, 0x0, 0x2e002, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448cb, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x2e) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpid() syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) r0 = socket(0x200000000000011, 0xa, 0xfffffffe) connect$netlink(r0, &(0x7f0000000180)=@unspec, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='slave-24c02 0x1022\x00', 0x13) close(r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) syz_80211_inject_frame(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4, 0x0, 0x0, 0x4}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000002}, 0x94) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16], 0x7) 1m31.780633076s ago: executing program 0 (id=981): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "4d0916cb7a186d2a2e55ba48ad3f796547502777ff87f76b395c692150689bb4a628a9f3aa873e97ebd2a2089456afed727eaa0e6eaaad8669a20c12065b35a5", 0x31}, 0x48, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = socket(0x2b, 0x1, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffff17, &(0x7f0000000d00)}, 0x80) r3 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x4000}) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r1) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000680)={@void, @val={0x2, 0x1, 0x8, 0x40, 0x3, 0x19a5}, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x2, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x18, 0x4, 0x2, 0x5, 0xfc, 0x65, 0x0, 0x82, 0x11, 0x0, @empty, @multicast1, {[@timestamp={0x44, 0x18, 0xce, 0x0, 0xc, [0x10, 0x3, 0x7, 0x9, 0x10000]}, @rr={0x7, 0x2b, 0x2b, [@multicast1, @remote, @dev={0xac, 0x14, 0x14, 0x41}, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @loopback, @multicast1]}, @cipso={0x86, 0x8, 0x1, [{0x0, 0x2}]}]}}, {0x4e24, 0x4e23, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "efeee34e28daa98da3aaf96fbfc2a4338d326452c10d3e4fcecc65041a0c0b4e", "dc62985afc5834271757b9a5b238629a608d6bd32cd79541f70a36f24c25c99b06447610bcb9953c7aa0c56fccb69bec", "b897a36d3daeb98399409947a5cb845962f481a0ed2972ab5d1dad74", {"3cfd37671ff36c1cec762a9ab0905125", "d7e1d4cb276550e401d05121112b47df"}}}}}}}}, 0x118) r7 = syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000400)=ANY=[@ANYRESOCT=r2, @ANYRES32=r3], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, 0x0, 0xffffffffffffffbc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x9, 0x82, 0xfffffffc}, 0x0) r8 = syz_usb_connect$uac1(0x0, 0xbd, &(0x7f00000004c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x4b4, 0x9321, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xab, 0x3, 0x1, 0xfd, 0x0, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xa0, 0x6, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x73, 0x77, 0x7f}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x6, 0x2, 0x10}, @as_header={0x7, 0x24, 0x1, 0x32, 0xd5, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x81, 0xdb34, 0x1, 0x6}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xd, 0x9, 0xf, {0x7, 0x25, 0x1, 0x4, 0x0, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x40, 0x9, 0x6, "55ee61"}, @as_header={0x7, 0x24, 0x1, 0x1, 0x4, 0x1}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xbc, 0x3, 0x8, 0x3, "c9f06f4280"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2e, 0xc0, 0x1, {0x7, 0x25, 0x1, 0xc, 0x1, 0x81}}}}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x5, 0x0, 0xfd, 0x20, 0x80}, 0x5, &(0x7f00000003c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x425}}, {0x9d, &(0x7f0000000300)=@string={0x9d, 0x3, "bda24ef20ea653d43d425f61ab8899b7e5c59f5fc44b1b5c61a2bfc15815a9f862fd0bdaaff886df850ff13fc97fdda33243c6350df9e65a9453bd33ed3802a906fb71158c2eb341c854b6885682058227a023628c39ddbf4b6476bc8a790fc54448c7e89199086cf031b29a63a2cb6b165ba8001a51cb2780c72547b3bec226a85f2772b0da912ce67ba6bc2ff42a151900f6889c118c9a1efa3f"}}]}) syz_usb_control_io$uac1(r8, &(0x7f00000009c0)={0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="40046f0000006f00059a38ebfb11b00dc223d303e4f36653609fe92bfeb37efff7d8f00e3514f55c69dc78352449d4e7ad2cbab6098f28c9de5f594ed47e9cfde1582b48382e4bcefb80e98012a8a179ec4e6e604f5f8d7f64b134211ecb397fb6f74b7b9017be703c45ad49fc7c0250a4ce3d4545"], &(0x7f0000000900)=ANY=[@ANYBLOB="0003b3000000b3030476a974ced16c85a98e257be14e8e45b44c9e9344d3467f9752d1b09e9c185d56039bdeb2cd14b314ca9760c4b552187a51e0f3711acac072b39b9e1b4421277f1d841369b74a21d6c27fb313fe97df35103bfa9c85e3542085ea76ce2165109fb0396800394c35f9f46782fbc63bb414ba52c0c21309c423a121d0c1cdbdb4eef10fdf99d55772217c81ba63db2d6572662d9a9adef8ad728d7f6075cd5ebb00329c01d8e09622552416527a66939be4"]}, &(0x7f0000000c80)={0x44, &(0x7f0000000a00)={0x40, 0xd, 0x2f, "08b8306c4e67bfc663bc9fbbb08d49cdef90a92eaed2bc60c118d2f9b54aecaa49779d95d7ed9f60aefe0c598ab397"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000440)=ANY=[@ANYBLOB="208102000000001c110000d1f80b28af17e28c866b43c1550ed59c00fc149938688aa7d1abc7dc3a93bdaf083d85ff65a8055f20a49faa7068fa7ae1f4b2ebf53eb4c3a0f6d5e22b"], &(0x7f0000000b80)={0x20, 0x82, 0x1, "80"}, &(0x7f0000000bc0)={0x20, 0x83, 0x2, "a328"}, &(0x7f0000000c00)=ANY=[@ANYBLOB="2084020000fd8715"], &(0x7f0000000c40)={0x20, 0x85, 0x3, "07aed3"}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m31.206824874s ago: executing program 9 (id=982): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r2, 0x701, 0x0, 0x2ddfdbfe, {0x41}}, 0x14}}, 0x24000040) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r5, 0xf5f) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3, "d92984bd1ca44c226af5160e961711a077b88375b78411e88509de05000000020010000080000000000000000aabeb00", 0x3c}, 0x60) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x6}, 0x2) r7 = syz_usb_connect$midi(0x3, 0x63, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x60, 0x582, 0x2f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0xd, 0x50, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x1, [@ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x8, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xc3b, 0x7}], [{{0x9, 0x5, 0xf, 0xa, 0x20, 0x3, 0x0, 0x1, {0x12, 0x25, 0x1, 0xe, "e1bcc0a0633d78d7fcae13a2d767"}}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x0, 0x9, 0x4, {0x6, 0x25, 0x1, 0x2, "1b5b"}}}]}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x5b, 0xfc, 0x7, 0x8, 0x9}, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="050f2dfff10f0fffff00303fff0014100402ee7ffeffc1a785c8194d6996ac000000003e"], 0x6, [{0x5d, &(0x7f0000000580)=@string={0x5d, 0x3, "d08a0d02f21fdbc4ccac18ae26efd659df084f19a7eeb399a8419f72dfe89d7f62aa00bebb466a5f1bcc4813fb1660318816c0dd785967129f037cced223ed71abddbd2274786437fe61b4b13af971d8690bff038cce396a5729d705802fc434e905597ea4d3c5"}}, {0xb, &(0x7f00000003c0)=@string={0xb, 0x3, "7c1900c12d8836a8b0"}}, {0x98, &(0x7f0000000440)=@string={0x98, 0x3, "cd238d3cfef3151942dee51272046aa61d0f72552620b9ba3f23028ce2cbae7c544d57bac623ace0d6cd475de72e000000004d3b28127d930758640e9633a137b91837718e5f480a1200000000a4100c455c17fe3c2af89d8659abbfdbc6581f5c523b8d0f77a573f48e11c1624dcab4d54ae15d6c9b039d3757460f1ee090c89f9a7d6816b4a32524"}}, {0xae, &(0x7f0000000880)=@string={0xae, 0x3, "31ab9432577420137a81ef3994b71f966cac296205caed3b19516b2a7d903adfcad439f8dedeabfdcff3729642a55d618441a503ec8585f6792c096eb9c91de3db4c6c7d23c5b8cbb1d3065c85c1e829a97c89dcbda74dea104be2076a1f746b3ce9bbc1718a6a97c41025f543beef595ad72929603716ec4abd5cc97c82b9546c198ed32661597218dc8063b46d69d43565939fef9dc9b2be3c4356e096d934510100000000000000e31900bcac29e32660a647968c62b813d8316dab4f90013e48c94f9f237d5d443bd04a52b81909b0ee21398b5db903c4ac505bd926c1bb755cb3204ecb1cd8f9cb889e4ab2c5ac810d9203385f99a9b3ba9f24c6f651de"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x426}}, {0x7d, &(0x7f00000006c0)=ANY=[@ANYBLOB="7503bfaa62c61c8ac5d0979f04f1ffeb469b1ba4552970478308a54d1240b1aec7e782f398f2f65dd01754f12e758a80aba5bd0e0b6759623414f24f39394978c7782249debc22252b2b499633013fc5a73a6e550080cfc5477a0000d4c08c6e05dabca08f00c4581aeda64639e3db0d5d1ca443f9"]}]}) syz_usb_disconnect(r7) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000540)={0x2, 0xfc}, 0x2) lsetxattr$security_ima(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), &(0x7f0000000740)=ANY=[@ANYBLOB="060342"], 0xb, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000009c0)=""/4096) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003e40), r8) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000003e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r8, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003ec0)={0x1c, r10, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040054}, 0x8000) write(r0, &(0x7f0000000000)='7', 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(r0, 0xc0106440, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000040)}) 1m30.910455858s ago: executing program 39 (id=982): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r2, 0x701, 0x0, 0x2ddfdbfe, {0x41}}, 0x14}}, 0x24000040) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r5, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) listen(r5, 0xf5f) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3, "d92984bd1ca44c226af5160e961711a077b88375b78411e88509de05000000020010000080000000000000000aabeb00", 0x3c}, 0x60) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x6}, 0x2) r7 = syz_usb_connect$midi(0x3, 0x63, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x60, 0x582, 0x2f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x1, 0xd, 0x50, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x1, [@ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x8, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xc3b, 0x7}], [{{0x9, 0x5, 0xf, 0xa, 0x20, 0x3, 0x0, 0x1, {0x12, 0x25, 0x1, 0xe, "e1bcc0a0633d78d7fcae13a2d767"}}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x0, 0x9, 0x4, {0x6, 0x25, 0x1, 0x2, "1b5b"}}}]}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x5b, 0xfc, 0x7, 0x8, 0x9}, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="050f2dfff10f0fffff00303fff0014100402ee7ffeffc1a785c8194d6996ac000000003e"], 0x6, [{0x5d, &(0x7f0000000580)=@string={0x5d, 0x3, "d08a0d02f21fdbc4ccac18ae26efd659df084f19a7eeb399a8419f72dfe89d7f62aa00bebb466a5f1bcc4813fb1660318816c0dd785967129f037cced223ed71abddbd2274786437fe61b4b13af971d8690bff038cce396a5729d705802fc434e905597ea4d3c5"}}, {0xb, &(0x7f00000003c0)=@string={0xb, 0x3, "7c1900c12d8836a8b0"}}, {0x98, &(0x7f0000000440)=@string={0x98, 0x3, "cd238d3cfef3151942dee51272046aa61d0f72552620b9ba3f23028ce2cbae7c544d57bac623ace0d6cd475de72e000000004d3b28127d930758640e9633a137b91837718e5f480a1200000000a4100c455c17fe3c2af89d8659abbfdbc6581f5c523b8d0f77a573f48e11c1624dcab4d54ae15d6c9b039d3757460f1ee090c89f9a7d6816b4a32524"}}, {0xae, &(0x7f0000000880)=@string={0xae, 0x3, "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"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x426}}, {0x7d, &(0x7f00000006c0)=ANY=[@ANYBLOB="7503bfaa62c61c8ac5d0979f04f1ffeb469b1ba4552970478308a54d1240b1aec7e782f398f2f65dd01754f12e758a80aba5bd0e0b6759623414f24f39394978c7782249debc22252b2b499633013fc5a73a6e550080cfc5477a0000d4c08c6e05dabca08f00c4581aeda64639e3db0d5d1ca443f9"]}]}) syz_usb_disconnect(r7) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000540)={0x2, 0xfc}, 0x2) lsetxattr$security_ima(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), &(0x7f0000000740)=ANY=[@ANYBLOB="060342"], 0xb, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f00000009c0)=""/4096) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003e40), r8) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000003e80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r8, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000003ec0)={0x1c, r10, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040054}, 0x8000) write(r0, &(0x7f0000000000)='7', 0x1) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_GROUP_PRIORITIES_INFO(r0, 0xc0106440, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000040)}) 1m28.547712088s ago: executing program 0 (id=987): syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x1}, &(0x7f00000000c0)=0x8) prlimit64(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0x10, 0x1000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000380)=0x1) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000002c0)={0x0, 0xfffffffffffffff9, 0x800000000000, 0x400, 0x800, 0x6, 0x8000001000000000, 0x1000000}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0x381, 0x9, 0x72, 0x9e22, 0x0, 0x100}, &(0x7f0000000280)={0x0, 0x989680}, 0x0) 1m27.594504091s ago: executing program 0 (id=990): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$set_reqkey_keyring(0xe, 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000200), 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x11c, 0x14, 0x8, 0x70bd2a, 0x25dfdbfc, {0x3, 0x3}, [@INET_DIAG_REQ_BYTECODE={0x58, 0x1, "374ef1b3aa52e30565e70b8046b988854137e18c554a1a6276c89e9c50d05236d5ac2e289b7392babfe710b1b36f735c93a96389b867d1163c6765fbc4995890baf166a8ec8f69a350ad764e9769f574179fac36"}, @INET_DIAG_REQ_BYTECODE={0x43, 0x1, "9e1f4000f3fd728334b401c629bf2511f31f6e7f1d30d0a0ae488353585eee76fc820ebed7e4630a3ae1d8c3e7f49555793877fce93f92936e911fd58bacea"}, @INET_DIAG_REQ_BYTECODE={0x6b, 0x1, "6dc1b6ba3972abc4625ca61178eb67bc5eda5bf3524c2b222dd0d84ad087a804660299527905ad02f63e98135ecef40a1555eca73fc7713c0f93b1bbac6a8334bd5609e6bf9e85efdfc27959d9d5dee05e205916417ceead8097615e8047790b453a1cdb49099f"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000080}, 0x48001) 1m26.253504451s ago: executing program 0 (id=993): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x280c02, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x9) r1 = dup(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) 1m26.036384992s ago: executing program 40 (id=993): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x280c02, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x9) r1 = dup(r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r1) 1m8.141268883s ago: executing program 5 (id=1031): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0xa096a000) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000440), 0x2) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000280)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x10}, 0x4000810) 1m7.902423911s ago: executing program 5 (id=1033): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x0, 0xfffffffffffffffe}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) read$msr(r2, &(0x7f0000000200)=""/169, 0xa9) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=5,size=6']) 1m7.77635674s ago: executing program 5 (id=1034): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() setns(0xc9, 0x0) r2 = socket(0x2a, 0x2, 0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bind$inet(r2, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$igmp6(0xa, 0x3, 0x2) r5 = io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r5, 0x20, 0x0, 0x1) pipe(&(0x7f0000000000)) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) 1m6.46032682s ago: executing program 5 (id=1039): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x5a10}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r0, &(0x7f00000000c0), 0x0}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000000)={0x8f, 0x0, 0x7cb9dcfa6eb04f30}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000010180c2000b000800450000140000000000119078000000000000000000004f20000c907800080000"], 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)={0xc0, 0x0, 0x10000}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000001c0)={0x1d, r6}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020}, 0x2020) getsockopt(r4, 0x8001, 0x3, &(0x7f00000005c0)=""/144, &(0x7f00000001c0)=0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e23, @local}, {0x2, 0x4e20, @broadcast}, 0x280, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)='bridge_slave_1\x00', 0x8, 0x7, 0x9}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x700, 0x40, 0x1, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f00000003c0)={'ip_vti0\x00', r9, 0x10, 0x80, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x10, 0x0, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2e}}}}}) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000340)={0x2, 0x0, 0x4, 0x5, 0x7}) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x8000000000000005}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xbc}}, 0x0) 59.71670176s ago: executing program 5 (id=1052): socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@rdma_args={0x48, 0x114, 0x1, {{0xd, 0x7}, {0x0}, &(0x7f0000000340)=[{&(0x7f00000021c0)=""/4092, 0xffc}], 0x1, 0x21}}], 0x48, 0x29ff1109601b30a4}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716fb2ee3589f099942e6f1c393ddb8160381baadf27900"}, 0xd8) 57.40602332s ago: executing program 5 (id=1056): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x100) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000180)={{0x1, 0x0, 0xfffffffb, 0x2, 0x1000007}, 0x400ca, 0x9, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x7fe, 0x1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='7', 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, &(0x7f00000006c0)=""/94, 0x0, 0x5e}, 0x28) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r5, &(0x7f0000002240)=""/237, 0xed, 0x4eb) socket$inet(0x2, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840100001800ff0300000000fbdbe0251d010900500012804c00f88046004680acc71d958e7a34640dcf53c7ef4014e029622ecea4265925177a480e4e3d23180fbf878b1957d36c5250d315341fdcb2b86bfb163bbaaf7381a195d01c3051bc9d300000200106801c80"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000080)={@multicast2, @remote, @private=0xa010100}, 0xc) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000002380)=""/4115, 0x1013}], 0x1, 0x145, 0xfffffffc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000005b80)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x6, 0x4, 0xfa, 0x1, 0x36, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x0, 0x63ed, 0xfffffffe}}) socket$nl_xfrm(0x10, 0x3, 0x6) 42.096912144s ago: executing program 41 (id=1056): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000600), 0x100) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000180)={{0x1, 0x0, 0xfffffffb, 0x2, 0x1000007}, 0x400ca, 0x9, 0x1}) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x7fe, 0x1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='7', 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, &(0x7f00000006c0)=""/94, 0x0, 0x5e}, 0x28) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='binder\x00', 0x320081a, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r5, &(0x7f0000002240)=""/237, 0xed, 0x4eb) socket$inet(0x2, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="840100001800ff0300000000fbdbe0251d010900500012804c00f88046004680acc71d958e7a34640dcf53c7ef4014e029622ecea4265925177a480e4e3d23180fbf878b1957d36c5250d315341fdcb2b86bfb163bbaaf7381a195d01c3051bc9d300000200106801c80"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000080)={@multicast2, @remote, @private=0xa010100}, 0xc) preadv(r2, &(0x7f0000001300)=[{&(0x7f0000002380)=""/4115, 0x1013}], 0x1, 0x145, 0xfffffffc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000005b80)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x6, 0x4, 0xfa, 0x1, 0x36, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7800, 0x0, 0x63ed, 0xfffffffe}}) socket$nl_xfrm(0x10, 0x3, 0x6) 16.517668501s ago: executing program 2 (id=1179): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@deltclass={0x24, 0x29, 0x8, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffff}, {0x1, 0x8}, {0x6, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xfd27c4eff795f0e1}, 0x480c5) syz_usb_connect(0x0, 0x0, 0x0, 0x0) close(r0) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffe27}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) rename(&(0x7f0000000780)='./dev/sda\x00', &(0x7f00000007c0)='./dev/sda\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xd, 0x2}}, @qdisc_kind_options=@q_mq={0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={'\x00', 0x5, 0xfff, 0x1, 0xff, 0xdb9, 0xffffffffffffffff}) process_vm_readv(r7, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/147, 0x93}], 0x1, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/96, 0x60}, {&(0x7f0000000340)=""/203, 0xcb}, {&(0x7f0000000440)=""/252, 0xfc}, {&(0x7f0000000540)=""/179, 0xb3}, {&(0x7f0000000600)=""/253, 0xfd}], 0x5, 0x0) ioctl$BLKZEROOUT(r3, 0xc01070ce, &(0x7f0000000000)={0x100000000000000, 0x40001000}) 15.132882491s ago: executing program 6 (id=1183): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') getdents64(r0, &(0x7f0000000080)=""/43, 0x2b) getdents64(r0, &(0x7f00000000c0)=""/4127, 0x1063) (fail_nth: 6) 13.145324621s ago: executing program 6 (id=1185): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x38, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000ffffff100000000001ac14140000004e20001290780000ff00000000000000fa676bb772ef59d6147d7b8e60b1438c8ac085c573293bc619827df58cf1381b7c7006ffe84bec5b265b4b6c551e2d7b238f6728a016f4b064cf8441fd42dfabd29d573fec05761feed81af8b3a66a971b3731d341b23d7c52e34ee634aa0eb2808fd3b23ebe286566daab8d93c255ea4489212e1547ef06dbdd64bdf7e33a8b561a77b4bef61991b341168029173fc42276e1215bb46b1581ae"], 0x0) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f0000000240)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x20000000006, 0x20000) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000000)={0x12, &(0x7f00000008c0)=[{0x3a, '\x00', @buffer={"cb067c186f2c14951da1a999f562550000000800000000005878ac1202f02026", 0x20}, 0x7}, {0x34, '\x00', @data=0x89, 0x6448}, {0x18, '\x00', @data, 0x9b14}, {0x0, '\x00', @st={0x4, [{0x41cd3da310f70a36, @svalue=0x1000}, {0x2, @uvalue=0x5}, {0x3, @svalue=0x2}, {0x1}]}, 0x2}]}) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[], 0x64}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, {0x2, 0x4e22, @remote}, {0x2, 0x4e23, @private=0xa010101}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x26}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, {0x2, 0x4e23, @empty}, {0x2, 0x0, @broadcast}, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40000000000, 0x200}) fsmount(r2, 0x0, 0x2) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0)="f2ec452918a9c2d082c9360d525a277a73521db903a81eecc5b505ac715ebfe80000000000000000000000010000", 0x2e) recvfrom(r0, &(0x7f00000000c0)=""/2, 0x2, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x62, &(0x7f0000000280)=ANY=[@ANYBLOB="180800e5cfff00000000000000000002950000000000000018000019f5f8ae925bf8f70e4bd37f478e0291b9d96227172cd10f3a05d73484350be0c0f306f9fd53c7e9e552f9c7972db23b453dcf2803c63c8b844e6eb8143340e706175280f1ae7afdfffa70e1b81e0e3976d0763c619330437b12a37f865c850228", @ANYRESHEX=r3, @ANYBLOB="00000000000000208510000003000000180000000000000000000000000000019500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdffffffeffe85000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) 12.92080831s ago: executing program 2 (id=1186): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, r0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x40}, 0x1, 0x0, 0x0, 0xc040}, 0x4000000) 12.049064316s ago: executing program 2 (id=1188): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x22020600) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000180001000000000000000000022000000000000600000000060015000400000014001680100008"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = fsmount(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000100)=0x2d, 0x4) r3 = openat$cgroup(r2, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r4 = syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) r5 = getuid() r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={0x14, 0x56, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000080)=0x0) sendmsg$nl_generic(r2, &(0x7f0000002880)={0xffffffffffffffff, 0x0, &(0x7f0000002840)={&(0x7f00000003c0)={0x2460, 0x40, 0x100, 0x70bd2b, 0x25dfdbfc, {0xf}, [@nested={0x68, 0x108, 0x0, 0x1, [@typed={0x8, 0x138, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x112, 0x0, 0x0, @uid=r7}, @typed={0x53, 0x166, 0x0, 0x0, @binary="37a657bcc84c0c146ec0b65315e70f9be43663cc6e66016282a1a8884ed29a600cd5bfd7f682f156d01847bd5322eb4ca47913d6676d9e9ff304dc9cd12a597ff32e339e58f87d303cb078eda7d560"}]}, @nested={0x109, 0x130, 0x0, 0x1, [@typed={0x8, 0x14e, 0x0, 0x0, @u32=0x3}, @typed={0x8, 0x20, 0x0, 0x0, @fd=r2}, @typed={0x8, 0xa3, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x22, 0x0, 0x0, @pid=r4}, @generic="fe215d730f7cfc6d11e1ca1c40d23a8d4c08929d898dd2cbac8315fc1c90e14243f670eaa3c70ba8c6dcf5e70e6d1fdd53e0040071e6fb3a0b8a4b038a741afbee86cb1735f170e3ae5179f6c9e7c31cb084292d6f7a7753c18be860f147635d075d84196133a23ddf5fac21a834dd3f19a4e2e90a8df36f840416451efe91909a6495667e85e5469a24247f54cbd2cbc94fe971623f69923f167a2b3d9f723e8dff76d2d72afc1b625f0d33987cf942efd053195a397cd20679662a825cb37deede5d972cbd39309a924995793973de42270affefcaa25b8f39af2c0541438318e7cdb66a"]}, @generic="fc3ba9b55aed6fb5ea3e34b01ad146f3b2add15dd54fb72c4200a9bb616539cfa3a5711d2606073548a6", @nested={0x21b2, 0x167, 0x0, 0x1, [@generic="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", @generic="f4a48e958cc16e6d22669e8617da67818f137c738ef01a752832f45ec847063885e936dfe04370366b91ed8d95afa3dbb3e6ab2f", @typed={0x8, 0xe6, 0x0, 0x0, @u32=0x5}, @nested={0x4, 0xd9}, @nested={0x4, 0x38}, @generic="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", @generic="87dc32b22674c197480fbb6d9191b93190c649f1667795d1c35e1ea59846e7f763674a1aeaf4f905becec8022654ef33e944d54de6b90259298458e66fcd44297f4c81bc45a68d5a8ee9e1b6fef822ccc48cbdf072e58b1a2ecbd9da3126d6f0a08b45958146f11e964e9a73e16683205b3266363a06ef205b9df0454ceea8b6909b1aca02041c18ce56216944ce2829e7a35fd6b829", @generic="52cd7d32850301f9eb3d063537667276912454f5cf684d3f07768a4937614f7bc88046a19649539a7bc5da9df88e5deb7b6de67a31bc41edf7e95f0c1187857cd5f9f157440dc47746fada504e2413be1c20301e07b47afaf09d988f71bcf66799769c56be8c29c292f52425e64050964848e36a98954a306b2f0e1d3fc61915f20dc206ebd381ff2a5597d3f448cbc3d4ea8ec6292474164970d2bb6e72e65c05504e585f29ea1c6741a4dcff7342716c286354a41b4a5d61f68c03d235dc521945f2b8ebfe7286f93bb91bbb4b468f082134c1"]}, @typed={0x4, 0xe0}, @typed={0x9, 0x162, 0x0, 0x0, @str='syz0\x00'}, @generic="26e05ee711c402e27094f649993cc11287cbf5fab7afa4908a2829a82285f8540a30be29420078d35cf16e0835a25fe8e9582ec29a05fc53656c07d2049ce93a3c952aa4f0d45a6204ccb5cb0fd28083e0dbe1493e11890fb5dfe401819d4688645b6c2c3d72b2ea1e7b87f25e934845f599714767b90a0f1c7b47ca39ed729859557ff8eced903efa9a6735b46ba53ac8f6e660eecf0b448b1a1aa3da4ed0d925c5574e5be2327d042e29be70476bb12f3dd15d114576263bacf9164a05e91ceecebc8e8e36b1de6eb4f081ab3ba3278f141c01c56a7deb0e87d784711c8f38cfeaa230b18d0ea4"]}, 0x2460}, 0x1, 0x0, 0x0, 0x810}, 0x14804) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) 11.89984849s ago: executing program 6 (id=1192): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x60, 0x887}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0x98, &(0x7f0000000240)=""/184) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0x98, &(0x7f0000000240)=""/184) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) unshare(0x64000600) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000050004000000090005000100060000000d000300686173683a6d61630000000005000500000000001400078008001240000500000500150028000000090002"], 0x5c}}, 0x4000894) (async) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000050004000000090005000100060000000d000300686173683a6d61630000000005000500000000001400078008001240000500000500150028000000090002"], 0x5c}}, 0x4000894) 11.721221815s ago: executing program 8 (id=1193): lsetxattr$system_posix_acl(&(0x7f00000001c0)='.\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000100000000ec010002000000000008000400", @ANYRES32=0x0, @ANYBLOB="020000000000000002"], 0x2c, 0x3) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x6e, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x6, &(0x7f0000006680)) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r5, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r5, &(0x7f00000022c0)=""/4089, 0xff9, 0x10002, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000a3f000000001"], 0x48) connect$unix(r0, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 11.654278542s ago: executing program 2 (id=1194): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x82042, 0x19d) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={[{@noprefix}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x3}, 0x94) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r6 = open(&(0x7f00000003c0)='./file2\x00', 0x20381, 0x10dd722b6e14c3dd) ioctl$BTRFS_IOC_DEFRAG(r6, 0x4c00, 0x3) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) symlink(&(0x7f00000012c0)='.\x00', &(0x7f0000001300)='./bus\x00') fanotify_mark(r1, 0x1, 0x10001040, r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r7, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000000)={0x8e24, 0x1, 0x3, 0x9}) 10.124955228s ago: executing program 8 (id=1196): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) bind$l2tp6(r2, &(0x7f0000000000)={0xa, 0x0, 0xaa, @loopback, 0xd}, 0x20) ptrace(0x10, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "7af9c2add30c3b0d788d9a94b0731ab8d4a8502c36822594c41a3a588f9ea10f4ea91dff6ece7b715bd30d75c5da8c5c4dada466bf73ee60295d1d133135d5c7", 0x14}, 0x48, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r4, 0x10001) read$FUSE(r3, &(0x7f0000001580)={0x2020}, 0x2020) r5 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) shmat(r5, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$IPC_INFO(r5, 0x3, &(0x7f00000001c0)=""/243) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008340)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x3, 0x0, 0x7, 0x0, 0x8000, 0x1, 0x2, 0x1, 0x8000, 0xfffffffc, r8, r9, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x812804, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@subj_user={'subj_user', 0x3d, '+$g(:@*'}}, {@euid_eq={'euid', 0x3d, r8}}, {@euid_eq={'euid', 0x3d, r8}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/fuse\x00'}}, {@hash}]}}) stat(0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r10, r10) syz_fuse_handle_req(r1, &(0x7f000000bb40)="de98ee653502c564abeb97fc678bde22efebcf99c2d89952950acc703a3c6268a54c8b1bd1ee165c82980cd315b55a070dc41deeb2d4c1842d936a0bcde5fd7ed6031fdd9cb58ebfe8261528f097f309813b5722c24a1af8e6bc6ddaef7e85d2659690154bc5e6ee73c3fe7176509ad7b30e1098fc9873db91d3c1816825e710374de8d40693578b598922d9c523cfff93a630f121251d17ad40bce021d7fd57945fe2a186618a40b5f3995a9f0ceaa3e22b57e4f68e53fffeb5474fb83afaf5cde6b0aaf5cf0313ede442ddf1df6c280921e43d80dddfd005969272e1719b37fd8f749fcde83f8201826b4cf5b1c1da394568aa7d8833dd11309f46422b0152ede5ab29b17bc1ae80147346155b20a98d6fc2650bec3fe73327c45cad1b38f7c983cd070556a8f8ed5d58e1052f6436fad905099d18fb3e62c2c36a1c2209a94c820e30e5234e77be3beb4cd183015d281e7bf39cdcf0f1e541211c75d64a49b55ba4c2c444bef36d98df66bea814bab91ed65386d6a491a6295c24dbaf752a5e7a856e0dfe46a6f9e718ca3919c6f8978b0fd65c9e389114e5afd8e9e2a575b854463b63f46d08795f0f1d0d48d6d610fd74e9238de32ee3fa2ffef550336341803c083ac1d749be6c5440bbe4bd3bc3015bcde2b4e2160ba266d281a9641f74d9348fb6fa8550d1e8a8362999452e40b75c412cfa77ab8e1aaf1a9e83c855ec9b7ada38690f0d2e59f67a1f3babbcda8011595ea720816c24726b833beaca0a9d11e7b99373601d27d18c9e29940503d3a12149fdc4fe0065c3d023d6e7712eb853df19f2b4b886e08d61629288ff16c2597d7fae5bfc8b41f92fc325ffe0f61683b1f661409bdd7c3d88a854f8393484f4669b5d9654fd3a0819a32110b9064539a7419c332629b3fc71da35b783ef7c693842ce83733a63f2e6af37989cfcb768ab8cea5d21b82a0e9f6fdcec26b0107708867dec54c4e739fe9b931b3c6da013bfae097c57f1e16ba54f9028e672511938a0ad9d681d7feebc65a2f5f588abd66261393f3ba02d7b2cf650a9f7c6a4ca55b4d41132908dc9c90e26f0da8e2259e3a2b63b2d9e27754e278827ab80438070698c690ec375a9aeb4193079a28a2a062961ba0e65af01644af063f3ebefda92c4986379f7b099b2fd3960929578736f09887fc5816cb1b982e5b121b79662d1674dd0c6e82627cf8c63e576e5c1eb0af9415ddc10ff880e8ae3ce8c4fb87b8f9d364974c2a1d8eba4e04bc2bc018bfabc435683b2551c0e4908570b930c4fd7c03ddb95e9ec1d1994e3df0305fdac4e5b914641ae25b0c469b194c0bb78ab04887cdc4262da468475b926a18254d23b4c44705aeca34ef8a7b04dd55a43f39996529a23804e054655c5ba8661f7c02737e7539650364928d62b9b8d80988232009acb54214f06640e9bc6614c0ce02e4a22dc8b91a0aad711e4fd01d7020b7c7185e41e27ce266b9f5aec682cbd4bba3240d6277b17b564937254f37afe580cba0b78c6b0cc81830eaf10d7cc1f7e918d49e935629fe6c24b4368a04af1b99f6981340ee031874f3d4b3a9ebc31719b3b775bfe1fdfa0460a3820bff6f61b49b11ac2ca00836a0c4a74aed92a619f34231196669b942e761538e64f965d23d4f7814256e876263fe5307985c4e6eb69c974f66276764e80ab1de3f5c55e7b2cfdb78dd183a85473e968918ad73f29a266c818b9bf9f62eed86df25b2577bb6d98e3996e94f5bdf119b869541a94eb3536c979c3d77cc0df7c0c48a902ca2f03f5ba5a8ef9431cf95f6fc89744e8440e1d5ebb837e30ef7541fbc27672c31566ac3676a173cb9e466a2d206ba1ebc2b985eddcd6ff937375fbc8415eba46f5ec68cfa9f3a669d41b078867dd9f5160ba45fa4719f32cf877d4b7a6d77c977533659f7c7ac22c68f5e93c1df6c2a3d45b55a4afd3355680aed864f6bbe13da2da28a4851f73c88e555f3bb1c34a21fc45ab6c28287902e8b5fcae6899c804f364cd878a8d1734462bb075cb7bc709cc2c5d7747c4c29a2fa9259752301c26b852b7993adf889d45dbe39094c9b7b168756e5b939ed10bb6df57b8f5e14352cfc7d8b03cda5b978b06cf2430af5db17177b1ef664bc4b00307f970c4fc606a6bab72125f62b0f59655c35b104da7af188a953cfc09b3aa0785abf330830fefedcc8bf9a11d5dc4b5642f679d45cb44fe61ab1d906345c1c345f6b8027bae9585580c20115d2504d9c83ab54ea2557b6d2dd3bc65fa29f091aa46a215e77621836154104e6969fa9107139a19f2e45cc6bf55422a0e1a6d037ad9e63df5f9cd2045e13ac2d6a15bc12008c4cd23782df7d41bfecc0037292d22c7b42f2cc1a22db7502332d9f4fa85f7640c8635b9469681adb6bcec2dfdf6926f1815156d80a835ae918527f549ea6df45f350f618dc1f3ca139759be28e35013034f8bbfd3fa1a8f302594213c18015305911f42e287f2d86f17d76f8a0ea03fb574c60c808669f9f4454fc2eaf0e93873f688e34bd3341f6874d5d8fe754172a751d6ab23dc1642220e7fb1071df0ee3c7e07c338915494a3b360bdc0b38ed221c2c2bc86b29744448b255802b3ddfe600c1d0f9acabb2185e4e9dae5e456d5825f516c857f63e72e4a5f3d45eaf11a0e3a5ad0ba30a0bf0f94cc99586fd202d6118bb6f9c272f6cbe39dd9b8b36ea7fa51dfe0bb87a633be11c16a14d1bce8492387696e195fa3c5f172690b4434aa2e91ce7d225d73b1983d2605ec725aae0ae402cd2f79fc202a307f1896f3dfcf8c0fd8b841dcfeda5d65bb7d76f7c2d2eb1b164c0368e9984f320a224d7d438bc5c69dacbc18a587b7589e960af114afbc9f59243646557962fc2e0cb5b5bf160a313bcfd9ade3e140b808e9f19415808aa312ae9c9e8bcd5a47fc721eda59d10670088714984a71d5c0df8b68e675a8e31ec15a92ff6a04d17e0ef849c782b302d11f742efe6486ab904fd65c0aac4ec25c6d877b453dce80e894de703aa8b1e5d00701850f149fe437fd0944cb95e54a924a49bd86bb9a602cf2904fbd9e399f1cdcd0b45b6d8f872e285f9dfeaa26aa760074651393c6451b36c643dd0b7236ec7803d69cec1b09bf1b63fbb68ad7c01507f00083b184ff01a62096f386f4c8fdc85e93eecf3f4b384aec1c10ccc60d8109a6d887bd389c3406163f9600879f0e944443d783e8644f69344f6f44f7bbf1883cda7369c9b9904d991c01552135f158a0bbb7f40c354f292c034824d82c209ebc770f5b756768ae51d45f8875b59904a07090689e65b40625566eed5d209130db812f287b966ae21ba46a3a7a3a0360a4e284d8d91ba9ed9806ea063827c8dda0fa98f758cbfa523ac645421f444a40b95bb065a64256c19354b1ad5002bb7b2add9b5236ad64e9052734b9d263515683db121b5e4dc1eab244dd8fc0fc62d962834ba0b21aad872b127afc0a33c7869a3f213519aa2ef51bab9ab28ed18859fd8239841a6668fc614dedd099121ae6c220a143c119cb9bff9068f65d0554b4c12105e59a22e91203a08ab8c718ec62c42d7ebb7b495e9e1be8fb7e4aab2777025da37b48d9d7b97578841a73898a6eab994e250106e096390c77b0600537be881ab7d81e3cb468bf1fe318b1e804d8df9875e9b8da22e6244997317391cce608085a28b8d070d654a29afab324ba3eecf427b6dfd43501ec0db919f71a932897eb37fe3bd64ab5a34ec60011696298b74ddd7a3710d3e444cedcc5cdc357f9dd58e67dc0ed3fc8df6dad82b3c00b4290c3280c28f78df052ec9cdd9df025abe8834616eddd5bb93379c69092911cd60761e7d14b426a83e335bfc8bf67a14e01df7cefb6023f0c6556534b975ed889de0d96d968526372402ce3d21a2c5c64a449dc3ba4ee0b5ceabc2fa29679e225681c8e946dc94b48af024bb1633e1860c7d8c14500967f24e2f8f46db537232a4e9f4abf8408f53bb52b035bdb89917a6f2f4bd22403ad002c2d936b785ecd965177e9f6235787a185d0eca92532f1aab16756ae86ece13925ba4a1fd08125102ae08c428d073aa426c4e792b5a4acf618605df1707021ce1eed62da4ee87334e34edf43338a0076b8ec739e2c31071e10c6a853e19fbf25b8a356527a67c8f7696dc184e374f4641f4e5b0aa345f1e6c4bfeba3a392d9a994bc271717a051c98d6c5b1f3296caf4c01d80ffb75b6fbdd0a0583f9d4695a44a2878df0c09a85aaab14522320cc3d2611603a34e52da03677a60cc87cc3c689975e5b5366c82e040b6643b8865d8bea0c84cef9ff85245a8b4bc41af1a50775b29fe55e42ac4b29fe80ddaf02e8c9bd07cab823f3d9021ac88236525ec045688a2fc9c6df66f549b10720cebf09ead919524f071cd128fb7575c84190c698b420f89b3c11195b5d83022d1f7e48afc21203995caf8f9286dcd5bd51b65c1af1caadf5a1b3f12579066855ff851075adb959dc3e086a7fb4e9a27fe80e8f3c0959b042486310ae7b785b0612e0385e36f50d4cae3474dd000c3957955534b4907b9480e2e5d83dedbeb76cb78d893c5b64dd51e31abc8e8b4c56b96f67c4b6e43861d91681af3270aae1a8f50712bd97326ee46a2640285b2902f051071d5a3400e99b76459956ac6908688c314bd8e54365383a65b186a6386cc5218e41e0b386759de81bccf5aa68f8608831a9d33ad1af2bdbd8579c5921cd8c3dd2f3bf1f123c742e118c76e2f43618bb7885e44826b7417c9ca5a139d774c16fbf74c8969c038ba6a54f27bab46ecc94d6455188d8dc1edf1da715c8d9976226877096df4158eeecced2248c7b88de0dd11a076db1f06bae4adba8286dc39aa62a55233886e011622ae1cf97238914a55078a78908145295777dbbc4e0d34364e0f3daa9eba6fa54c085777b18c0523818ff8710dee4bfeb3db549c3f38dde73b99a7b1b219282407a4e0ab3794089e21f6f2045ab6254ac3703903edb302fb2f0f97e47cca7969ad6b5b6cf27314137a04d5f4f29c193cfc5540592ab1342a1a9cbd514a7b4d6b23f724a5d7bfa6ffe8e3d9de29b8661139f179a0fafecf234f19bee75c25faffc765e02377d83e0ad0a0029c08f5c71595bc1b2fe88f0fe958f3f1f8ba6821ab834cab9bc902b2d47bd4b5ed52b5b0d7b3bc999b2f68879be39ddcb0428ce3a617b68c11459b746651f413d9e9a098cd2b5c0fcfd0ea1db2cde1672818d7bc73b053015692f9e9259a0153e3c9ac5e73e3343dd350cfbcaa57be93cc881a35063aec2db4ed71df2b1bd90b5ecbd84f399d4530c5450d622188423e151cec49673dc633e503c497d53843f4824750dc09abae9f2f465e92888715b6879f5edbab7bcd58f0899e1430ffb5f3063450945cb0fb3b5c3088ed6966c54dddae3aab489a80341b45a17cac02ae62749f209a7e16ecdfd86b43569c7b34511c65474acf2b2c18834e158e20957bf2320e4a6b9d63caea93b3a7dd4f7ba54443aba1ac2b6f2b27e1bf6f17d3fd1582462e0debc7069bb70e219654cbb99adfed54ab94329382163f2ab6710bb581d189cb3449a02c917c1f2d1d5f51958ce605fdb0e37ae5f3cb3f123276d43b2c26ea948dee863e0b679ecddf0fe41ce78bbca30167c9c7d6b0e9193c98090facd7205a490727e1ac49bb4d639348a32546007459c61c27bf8df87dd2ed3f3228b8193422a72d15f848bac13c6ffa7b8a767cf04866feb7c7a81267d7a8e890128d4709e4873223578aa7febdd562403c6092c0a3f6e0650772ede935ab6ef95e375bcbfa395e23ef1d73532388b845a95f158dc845a123f798176c73e177926d39abd38a910d40653006375110be2f2c5f6efc87b31908be36dd07c8ba5853519a37dfc4dea981af855293f49a3270bb67cdc17b780fbf2a418fcec8953dae927909a6bbbdce230d23113efad9c02474682dafc63311050cb4f3f86c282ff29728eefac5c678360122b4ce221bcec82d24e053b63972d2e9a631a180b48bb8d2d4de7254d91a856071df51a1d87ca7eb5d19ac3def1fdd6ebd8f57c2c9e43cb6ff2fa00d27f279368f5ee29a84ba219a51d1f0f1965781164edbb3aa6209fbce6d40284fbb4a33f59bf9e1248100a623de16613eebc11f510b7718dde9f13b4c9b2b6a10dd932696cdb7fa4b5733b0377453471462762457d42038ebf8c0fb392ca7656ad1f050c326de75fffc698c48f5d809ae360ddb9856b9a54b811073233294bf91e46414441b6665f432201da12e49718b0d7929b6cbcbf310a09ce0d22f07ee5cfa8ffb9f03acd224641171ffafdf50f18be8fa3c907226cc1a6f3b16a776781a6396dbf09f689ad6bba4d537dad490a6f036a45ee3e224e6f519e44b7352ee3e7d3f0d89f8c7c8f54b6d2698c0298a07866c9d9ca09c96c2ac8efd7974294df6dd1bb0598debadb6135e7123bbfddf84870de54476a291586fc0e64784e65fdf78d462e8b51cbac38e7ff1878b11418f188220e3deb5367a2d90ad7d44395f6965cc6d680c59daac268c16814d1085302d0453b48e4a8ae78b8a5b6951a875ef42776f6d11955da7e5734a72b61cefcc6889b8f8d58db51ee78d7b1a8ffebd90e15a64654054767aaec24dd3b5f338b572496c8731049c10622b7f54fdfa43aaea316946291fee7bc9e64640e8bccf33fd1e8693b67020b49cf77faaaa8269e2fecc4e2b43c8c3378a4a9b9b85a4fe2c346c5512cda631542e0ff5706eba996f4f72e629b076d6be1966d44b1835ce664e3c6a4f18c68f5e32f900a0a167e547d5aa79c0aede966f83d00366a623ef8107e328654c8558d5e606f69a12b6c2a6fcbe0e08f945c4ad2738ed0b28d79c98514abe0819569c6e4f4751c665fd651aaa9ee392c330560ef6d57c0a97f0764f88433b2bf7641ba391634316b0ee1dac23a63be21270e50ea1ac24ac3b429a0b46c38dbd48c540bfb1e141b8b3df6caa179c7e54f2b7b1371e8eb05a30f13da95200ab70dc58325f6bea0ee9fe1f04154998df393f2b4ff4431363f3a7450fa5210e883d67620ae63cc41f72e74e26a0244de1ac722b6f1c1d293f7483b331a0efda65a4e4e9144547fe6dce2f4535e29048b07079329b63754bb124b9e046a6e97929b1f4a387765bf93804530791c9f649db6efbebebf46fa4f9af7ff2587130d0e70a32d4aab1dfbee6aadd1f3e5317e3d4c8cde75b1479bc3dd16ea35db3dca11cf1eb1d2bbac60b83605e171619d85fd4b6d0e24be8db76df12efef05eb87473b832e59f3039df44ef034e5e7546b399cc817a41b2f020286ff139072a5b909ebb185a3c955cf88f4a9929b2112e0a9ab43da0288ce3ea268ccc9f46f852d387f5d0a2831dfc8cb0bf593905ba376c069b8c9b70558ec826c5bf9835031199c4c6d84c913da7e9e7db49c1d34511d917b9ad3c40af0598737d58fd61b8f2adc46b73a284957a99943cf73414412fa5440a5f85b63c20794d122c267fba72bfcd0e2741642fd8ff5a0ae1ffd8b30d852c053d0e31f505ca13a21c0223a8ee77cdd92de1b9f87ebee4ea332e9d4573d7efb2ad3f50c35fb7a596c4edb4b72bf6df5a16ffe3c8a236f2cab8c0712ac26c2cbcc68c1dc45209b579c952c7d645642aeed7d60407ee2dc168179d536da950108e962c5c976d3a05bf5142466ee38939ee94e707a0135f99c99b5d6376f63c711e4f64950f08dbc931c812f34735d9eb1c5997770d8159068cdca2e0f192311ca438d613728b544d6a3e50ae0e4e6b1eb611ce55a96bb2f991d49173073d8547f5ede69d8b587a34bb8f637297a15ab4fc45f1384bbd19b3feab5fb81322ba831386eeb6067e55af374c1b1eb9613a6c41dfe2bbbcfad157dd042c67c44400b350f0dc40a8611f2e947f32ea3ac3f609027b5dbc95b157c13216fe7c35edcc82950bd4e38bcb02b63d2576489c331a222e013e73b5333694889b184bedbbb6fdd6fd40a62b1d5d494e68cd2aefc264f74bf70ef38373e599faaa326f574ae32b1aad86854af22db8c9673d14666aa7c0c3bbe0d76a835ba4b391552777ed20c5c6cd0aa84f3be73ca0a3c128914107fb8fc02220317fb111cf13398480cd3325582a7e55f4c4ef5a258bcd01a97615e95f89c8064d41d04340b88cd5f4b1d827a030637145d98422facadbbbce97dc3060402a7bfa73d7b4dde53184a0923c0ee29c6e8e2c35e396808df2481af6aab053b619fcb2833f14f87051c5461567c5f8dd40383a7521971775493f896e18c78bad8219f88258ea686652780c03ebafb63ecbfcb23e24d52a2f88a77ed3b2280637807a5e155f4fad7149b76841772471a3b77aa42e8058c0af1ac2be9d88b5152851708f1a77582b3e31702864ee6a244a38f3f95d9797a60cddeb5ddf08cc48fc677f03f9e717ebe7f472883e5a6a7df31ca4272228f26991460c537ebc8aecb6a0c34a763eb1f57124fbfafd6db4c21bedf6723b252aeb21eb1fd9f4f811fd3e2e764422964761b2ef3aaaf986a48f7be66f6387578f9492feebc97dfbc6bc97380394a5635dbe582e52a1fb18ea8fc4e53974c63d198cf0d878ba8a8d58688a037c0f753c7073337ef3da4c134ef939c98c8806d09943591e6013a1342de7c722f993fd7eb36ba8e8407d1ea60eb5724b0d6262c70469dbd8ea1956b8d7f5a77707a9cbe2137079e7abda3966c5bee4fd86e8a3c4969bc88ff328a2adc8f4546f647575866d5ced16df06bf40d9a5f178f9d19e490bd76e187c441e7de0e571f6cea5512ec9bea48903d91a519dc82defe34a06b0244d623090b5a250786bbc66c1e76db6b18d81ed33c81a7c93782d5cdbe0a7cf7d1ab29c04be6ff4a9bbc10f716a67d52fd52d91425abd2002cf83c3797861db5fbeaec745a552ca4a50604340f2cf2c1b10e9ba76c8ea43b283c73f774f8be213f17f70cf93b9f6a8bab1f516a935e80c3cc6756945edafd572e6e00840eedf61fc40351869f03562d8c13006de585a1141c02f1311fbc8e45e4b3878c32810698e4764a6e8495f165eefee35714a1794f9ab50897c5565ab745425933d9d6272a172c1f2a274f9ca7bc8e1b01a27b8bd06fd9dc61880789696348c99e9a70c9dd2a62ca04d1f86dc87380b618c2a78b16229d614702fce242fa17ea90cda2648f9375bf7e78b4267d558983e08a9566d95871998d23cc6d22c23370ae067b677609844abc140df81cbd9addbf657fffaab5c22c479acca18f3e4b508cf01ff7b2ca308ff116389790f26f2c7635f89c747a5bc66f61de575653069349a89fd7e3dd785266b7bccf16eb8b4a8a86751de60d33e17d64f6e4e0f9d13a16d243ad7364114db7ad011f094c4debf20a39e35e7eeb440bbe8811db2857b965edd1e2675ceb1bc9a1691f123dedb341962fbbe539485d2241b0409adce2587d035187a0dd5a62076ac4eb5c3e2f4455569b6eac0fc16155da1774cbe505dc92e2087585a7846bae699bef32e3c5ec2356dd4433ed29d4b03ff7b38f7b3cb96b92874eefda6c2e0e326214e40f14cc2ef80e1cd3fe226257a423b8ff5bb368b87ac7066c5136487775b5b122a858334c37f6a3f53d758c3c866e2e79daf9aeab36a59eddbae2fa5b6d20973014196ef0a4cde1373c7297833e6f1e46828f4a42eebd829dd4f17999abe285218ed5dc6007b21bceb588a213b29dbb1ab1a79b41a12df26fe35f0cf6a310c9e50cf10d71ad5960626e4efec211032ec4ae52512001362ba4108d86eb774d2d4d0364cbb1dae68f03a774e328c2dc09899ee80c05ac2a8e3ba905b0b3b7a08a3df20b505901123e7dc0a15db48d09c84189ca4345c23c2010c12cc35287fad30211cab9631e148a7c1e8bfab61ced30e098d1c3cf7b6a7fbd8288dfdc48044d0d47c17f129f6b5d751af1984d395ab1b08ccca3e7309a89a8a36dfc3fb82d2a4269bffc32571438d04a7b98137b46ae1fea1bd9ea64f99e2f0c5f12ed84886b10bbd511993b0447036c4e57b9dae6d5bdad6aa3f2d12e62471194e43111613b8b6944c2baf1f539ea14dd76c356bfef7e3d4b6fb91f6d321a796a4bce5a4c6a5caaf0f3eccd914dea21ae909be7ba486075ff6139e7e351fdd7e98013ba51ff0248852398c734f245ffd7fde8cacfa4805496ad7350b1c96d7bf9da9be492f2f414e973937ac9109b6e8b8315aa9b81840f2c21239caf85a28f0e590bb6ad12148e75bd4d7ea69a9ffb053781db98d5fb5aca30a734017be7683a559c203c006ecd4b135afe3650b906e0aa208c889f2af09f3f8263260c3bd07cf8021124b6f0e0d021f9839e47996905c3d7562df810484552de3bcc9ae054b62a01af6a7991e4d63f30c7a92d8b58e01052e53818e64d7540a3208af321709a5d891ceecae5d27a999b00ed01616a73ec8854ca61973ed1fd3d82f8628b215c55eb7908e297d77098a7b0c362709005a7d13c89c54556589b2a926c6e08cc1c0afebc7eeb5d7ae4ef0507c91b8e706e6dbf83d898819192c812554ad1c6377871a8ca50f1325630f7b5266b807ef61d0c8d399fada49cb02a14c16d39f4fa7b81272573808e761c9dce7cfd12f4f18dd06b0ee471c166e095bf84aa4aaa2d82f1afcf09e5d960257c0a8dc404225b4b62187829c59e57da50bf848d72fabfb69362c117c6913541f84095a2a4ccdd2d30860cd96640bb2315e435a4af08c62c584ad129300adb02a871f3c548b96c4f6c47efdf4a1163a8a5ba9b4766b01437bc5957324660a8cd87df0f7e000d1309e896e3ce9f57b17562c9368a95a4cf66b3a5b57f0cca563b045452bbc8ad07b96fd0322728ccb3b05bfda14ef36ecfa2f32c5aa899811a67f2d62ed970db5723d6e4e4913c98c81ed6c03469112c23549f7e20be6401c6544db9078f34e6a4ad3cc868bace2e7ec6ea17225986f9e941ec67d9a3fc57958f9df8a60f585aa38b1769e26ed3f68dd85685b2cefae9dd72a18abc0de6b94689785df377ef4a812a6abc7f738a396f0e99ccbc5731801c36e746ab6b1dda88ca6ecb899528e18543cb3dfd439cd5be566594f01a4533da3638e6331fedf5b67870938ad044aa0dfdae33e3a6258ad40baadd726eacb1f3c1eb8d83ef4e185d7603a4f1eb006d90bf5849e2f65d37ffe750eb061bbad08a0c0cfabb9abf7f27d36ee5687d23feaa923e09d2ae905410a9193f21ed9b1d6331bb1f3babb90da2f2e023a6ceda4b4fe0f5d864738ee7f65a0b136021fbe076b4adf2d3af760e1361bad7ae35cb7ca010ddf4488255a2d3c492d0b26a1a5643f998b5d04a52a59f176d9bda85c916ff901329f09fe953b030b92f6415172476ad89d3e8cdcb4eda7dde5d4fcd5d6a584a312563558e784b0f9bcea7c53d26c3f2d3350c70a5e06a67c4c0373dd6279e29c320e6580fba8ab2df3039c289235c066af1b07dd112f25b25e292020f36c1aba246cba4e054d64b38f53ed57a712dffad7d3dc97f86af511638a2779107fc55da63b6498ea5f3ae36883163e5bf2324211a61a9889278f828e58daae797fdba9218d322da7aa23db7a48a00", 0x2000, &(0x7f0000007a80)={&(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x80000000, 0xdb0078e61eb24fff, 0xdd2, 0x3, 0xb, 0x0, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) 9.42564973s ago: executing program 2 (id=1200): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) read$dsp(r0, &(0x7f0000000040)=""/156, 0x9c) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000007c0)=@nat={'nat\x00', 0x19, 0x5, 0x66e, [0x200000000140, 0x0, 0x0, 0x20000000037c, 0x2000000003ac], 0x0, &(0x7f0000000100), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0xf, 0x10, 0x8809, 'veth1_to_bond\x00', 'geneve0\x00', 'team_slave_0\x00', 'sit0\x00', @random="f453f82cb412", [0xff, 0xff, 0x0, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}], @snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xfffffffffffffffc}}}}, {0x3, 0x1, 0x6001, 'macvlan1\x00', 'bridge_slave_1\x00', 'sit0\x00', 'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0xa590a3952f6f1d55, 0xff, 0xff, 0xff], @multicast, [0xff, 0xff, 0xff], 0xde, 0xde, 0x12e, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x8, 0x5, 0x6, 0x1}}}, @realm={{'realm\x00', 0x0, 0x10}, {{0xffffffff, 0xffff}}}], [], @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x1, {0x7}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x9, 0x60, 0x8035, 'bridge_slave_0\x00', 'batadv_slave_0\x00', 'wlan1\x00', 'veth1_virt_wifi\x00', @local, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @multicast, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x9e, 0xd6, 0x106, [@cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0xc1, 0x1}}}], [@arpreply={'arpreply\x00', 0x10, {{@random="550a90b60ce6", 0xffffffffffffffff}}}], @common=@redirect={'redirect\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x3, 0xffffffffffffffff, 0x2, [{0x5, 0x12, 0x73f9, 'virt_wifi0\x00', 'dummy0\x00', 'veth0_to_bond\x00', 'lo\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0xfe, 0x136, 0x17e, [@ipvs={{'ipvs\x00', 0x0, 0x28}, {{@ipv6=@private0, [0xff, 0xff000000, 0xffffffff, 0xffffffff], 0x4e20, 0x21, 0x4, 0x4e24, 0x4, 0x4}}}, @time={{'time\x00', 0x0, 0x18}, {{0x1ff, 0x5, 0x1979, 0xb7c5, 0xe7, 0x8, 0x2}}}], [@snat={'snat\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x81, 0x2, {0x2}}}}}, {0x9, 0x20, 0x3, 'batadv_slave_0\x00', 'netpci0\x00', 'lo\x00', 'vcan0\x00', @empty, [0x0, 0x0, 0xff, 0xff, 0x0, 0xeda3571dd5615b63], @broadcast, [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], 0x6e, 0xa6, 0x11e, [], [@snat={'snat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xfffffffffffffffd}}}], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x1ff, 0xf5b5, 0x0, 0x0, 0x0, "cbdf1b40aec1684b2673f3ca544a58ec32563a09ddbfd561a63d3d09dea22c355cf675e364437b45384c09a4dce8808252507f8d1a8afdcb656eabb2409723a9"}}}}]}]}, 0x6e6) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000840), 0x802, 0x0) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000880)={0xd, 0x5c3d, 0x7}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000008c0)={0x0, 0x2, 0xb, 0xb, 0x3, 0x5}, &(0x7f0000000900)=0x14) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000940)={r3, 0x3e, "8ad64511b44f9d11afe6ca478bb9d054601553dc308745c8550c45ec1869e1d6c400b4829794be6643112530265f3531510e82796d6219148cec0151b8d8"}, &(0x7f00000009c0)=0x46) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000a00)=0x8, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x74, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:pam_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) shutdown(r1, 0x1) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000d40)={0x0, &(0x7f0000000bc0)=[@nested_amd_set_intercept={0x181, 0x30, {0x2, 0x80000001, 0x5}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x9, 0x1, 0x1}}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x3, 0x8}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @control_area=0x21, 0x4, 0x8, 0x7}}, @enable_nested={0x12c, 0x18}, @nested_vmresume={0x130, 0x18, 0x2}, @set_irq_handler={0xc8, 0x20, {0x44, 0x1}}, @rdmsr={0x66, 0x18}, @nested_create_vm={0x12d, 0x18, 0x2}], 0x150}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000d80), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r7, 0x4008af60, &(0x7f0000000dc0)={@hyper}) r8 = syz_open_dev$dvb_dvr(&(0x7f0000000e00), 0x1, 0xe041) ioctl$DVB_DVR_DMX_EXPBUF(r8, 0xc00c6f3e, &(0x7f0000000e40)={0x9, 0x80000, r0}) clock_gettime(0x0, &(0x7f0000005280)={0x0, 0x0}) recvmmsg(r9, &(0x7f00000050c0)=[{{&(0x7f0000000e80)=@isdn, 0x80, &(0x7f0000002080)=[{&(0x7f0000000f00)=""/4096, 0x1000}, {&(0x7f0000001f00)=""/215, 0xd7}, {&(0x7f0000002000)=""/88, 0x58}], 0x3, &(0x7f00000020c0)=""/221, 0xdd}, 0x1000}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f00000021c0)=""/220, 0xdc}, {&(0x7f00000022c0)=""/127, 0x7f}], 0x2, &(0x7f0000002380)=""/225, 0xe1}, 0x5}, {{&(0x7f0000002480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002780)=[{&(0x7f0000002500)=""/76, 0x4c}, {&(0x7f0000002580)=""/212, 0xd4}, {&(0x7f0000002680)=""/114, 0x72}, {&(0x7f0000002700)=""/67, 0x43}], 0x4, &(0x7f00000027c0)=""/150, 0x96}, 0x7}, {{&(0x7f0000002880)=@tipc, 0x80, &(0x7f0000002a40)=[{&(0x7f0000002900)=""/135, 0x87}, {&(0x7f00000029c0)=""/67, 0x43}], 0x2, &(0x7f0000002a80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000003a80)=@sco={0x1f, @none}, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003b00)=""/175, 0xaf}], 0x1, &(0x7f0000003c00)=""/84, 0x54}, 0x7}, {{0x0, 0x0, &(0x7f0000004c80)=[{&(0x7f0000003c80)=""/4096, 0x1000}], 0x1, &(0x7f0000004cc0)=""/250, 0xfa}, 0x80}, {{&(0x7f0000004dc0)=@phonet, 0x80, &(0x7f0000005040)=[{&(0x7f0000004e40)=""/11, 0xb}, {&(0x7f0000004e80)=""/8, 0x8}, {&(0x7f0000004ec0)=""/2, 0x2}, {&(0x7f0000004f00)=""/75, 0x4b}, {&(0x7f0000004f80)=""/176, 0xb0}], 0x5}, 0xfffffffb}], 0x7, 0x10000, &(0x7f00000052c0)={r10, r11+10000000}) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000005300)={0xffffffffffffffff}) recvmmsg(r12, &(0x7f00000058c0)=[{{0x0, 0x0, &(0x7f0000005540)=[{&(0x7f0000005380)=""/160, 0xa0}, {&(0x7f0000005440)=""/139, 0x8b}, {&(0x7f0000005500)=""/21, 0x15}], 0x3, &(0x7f0000005580)=""/3, 0x3}, 0xfffffffd}, {{0xfffffffffffffffd, 0x0, &(0x7f0000005800)=[{&(0x7f00000055c0)=""/86, 0x56}, {&(0x7f0000005640)=""/218, 0xda}, {&(0x7f0000005740)=""/166, 0xa6}], 0x3, &(0x7f0000005840)=""/121, 0x79}, 0x8}], 0x2, 0x40, &(0x7f0000005940)) r13 = openat$procfs(0xffffffffffffff9c, &(0x7f0000005980)='/proc/tty/ldiscs\x00', 0x0, 0x0) accept$inet6(r13, &(0x7f00000059c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000005a00)=0x1c) r14 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000005a40), 0x680, 0x0) write$uinput_user_dev(r14, &(0x7f0000005a80)={'syz0\x00', {0x0, 0x0, 0x7, 0x9}, 0xb, [0x1000, 0x2, 0x81, 0x2, 0xdf51eb8a, 0x3, 0x0, 0x9, 0x7, 0x80000001, 0x2, 0x4d, 0x56c, 0x0, 0x4c, 0x7f, 0x0, 0x4, 0xb, 0x8f6d, 0xb, 0x2, 0x81, 0xa, 0x200, 0xe6b, 0x8, 0x18000000, 0x5, 0x47, 0x3, 0x8, 0x200, 0xffffffff, 0xecea, 0x5, 0x0, 0x5, 0x0, 0x0, 0x6, 0x6, 0x0, 0x800, 0x3, 0x8, 0xffff0000, 0x2, 0xdd4, 0x1, 0xc9b, 0x1983a202, 0x7, 0x88, 0x8, 0x6, 0x100, 0x3, 0x8, 0x359, 0x59, 0x7fff, 0x5, 0xff], [0x3ff, 0x195724c6, 0x2b, 0x2c7, 0x2, 0x31, 0x6, 0x2, 0x7, 0x7, 0x2f1, 0x2, 0x8, 0x0, 0x3, 0x4, 0x0, 0x8, 0x3, 0x1000, 0x1000, 0x3ff, 0xae0, 0x20, 0xe38e, 0x6, 0x1, 0x2, 0x5, 0x5, 0x400, 0x8f, 0x0, 0x0, 0x7, 0xf0d8, 0x6, 0x8a1e, 0x5, 0x1, 0x7, 0x1672, 0x6, 0x100000, 0x2, 0x65, 0x1, 0xfffffad2, 0x2, 0xcc7, 0xe, 0x3, 0x3a4, 0x0, 0x6, 0x4, 0xffffffff, 0x1, 0x5, 0xffffffff, 0x40, 0x3, 0xffff7145, 0x9], [0x8, 0x39, 0x6, 0xfffffff9, 0x6, 0x6, 0x6, 0x5, 0x69a, 0x6, 0x9, 0x9, 0x3, 0x7, 0x5, 0x8, 0x39832e9d, 0xbb, 0xf363, 0x8, 0x417519d3, 0x101, 0x3, 0x0, 0x4, 0x1a, 0x1, 0x5, 0xffffffff, 0x2, 0xfffffc00, 0x4, 0x80, 0x9, 0x2, 0x7fff, 0xfffffffd, 0xffff, 0x1000, 0x6, 0x401, 0xaf, 0x40, 0x402, 0x4, 0x8, 0x1c0000, 0x3, 0x4, 0x4, 0x9, 0xfffffffd, 0x5fb, 0x8, 0x5, 0xb9a, 0xfffffffa, 0xfffffffb, 0x5, 0xff, 0x0, 0x8cb, 0x9, 0x81], [0x1, 0xc, 0x8, 0xd4, 0xff, 0x5, 0x5, 0x2, 0x2, 0x51affd4, 0x1, 0x51, 0x4, 0x8001, 0x74, 0x8, 0xff8, 0x5, 0x4, 0x1, 0xff, 0x1, 0x81, 0x5, 0xe19a, 0x8, 0x7fff, 0xc, 0x6, 0x9, 0xc, 0xfff, 0x8, 0x8, 0x1, 0x1b, 0x8, 0x7488, 0x5e, 0x4c553c0b, 0x7f, 0x7fffffff, 0x401, 0x4, 0x2, 0x9, 0x9, 0xec, 0x2, 0x9, 0xc, 0x5, 0x2, 0x4, 0x3, 0x7, 0xa5, 0xa, 0x2, 0xa, 0x9, 0xaf, 0x7, 0x3]}, 0x45c) sendmmsg$nfc_llcp(r13, &(0x7f0000007200)=[{&(0x7f0000005f40)={0x27, 0x0, 0x0, 0x6, 0x22, 0x0, "87b2b2de72c6c9e4c9675dc7d06fe88e7ba51c3607325c0d987e3a790dddb1184b57ae2a84ea8af2c754798382072a1b0131efef478ae1eae4e374806e7c7c", 0x20}, 0x60, &(0x7f0000006100)=[{&(0x7f0000005fc0)="c8201b2dbe542008c46fe43e6fb4e8a266117b44217f55134d6587976f1f5b12e86a01f6c95c70c97bd8b9bff2a3dda68d6ff0c57875847b3ff83c3c1b87895a66c913e32990285dc16a29e8b9d07d85dfecfb6b4f9b95dded689e90a0d7d0284ddbfa7b0d238ce711ebca9e646c61dcbfb19bfe2b82ab2a8b0e6f30c73eeb0a199d25d84552bf0e7d4e09338b313a388e4f123189910eba2e72f35669b3048a4846e16653ff89e2320b6d3ef745e59eb92522005edb9cf897eb66af4b302f443c0ad40cca1cc5502fa61ef61644176a", 0xd0}, {&(0x7f00000060c0)="0f634ae542d8f5e5c6", 0x9}], 0x2, &(0x7f0000006140)={0xd8, 0x29, 0x302d, "262e1be3e4d67e8e53df28ba3f1ec935c3b4dfd276fa4f444452a10bb90788b6098443e1b21ead9e2eab98fb16cf388920188054b9186ca7b8c4bb168c56fdaf74c3df4cce9f8b13084717efc1312438ca2d4ee176bfbf022a2d591786fd5c953a6c1dbfff4c57a9c6420628b57de68de77b697e7053c6f7849a581b3ee2afede9e4576362f17002b198372566330075a24eea77c2344fa37736b89719aac7b17a96354434284b51089934cdfc62b34f493917ae3455b0a161427a63d907fe1469"}, 0xd8}, {&(0x7f0000006240)={0x27, 0x0, 0x0, 0x4, 0x2a, 0xd, "910ebf83a77f7ea19293709891ee69351154f0370482f0c7d809fdd17f3bdca0c0d3b7d9c1f1d381474ced5d7cb24418678428d9c20b0e366a7216cf5826f1", 0xa}, 0x60, &(0x7f0000006380)=[{&(0x7f00000062c0)="50484667d131cbac6843f09243b7836a06d980b79fdee07dbe8fd39ee931fbd336b193b547aca7a55d8cc038c8a08fe74f1e77c3f8c03ec8c3bb3ce835f6eecb1c8f61d108fbbf92bdb94d8ef3bab32e274cb1e4b240c82dddc92ac1a43b14cbf4a2f13b1ac46ff2022d8ce093bd42f27f73db94a4275da2f6", 0x79}, {&(0x7f0000006340)="c269b153dc4eafbb98d5ac8b21be4f3202194a8b27e2f98f764bdb2fa84280bb91b3a70ba1010b1ef3be7b5c42d41571f95f69ebfbaec7b00f", 0x39}], 0x2, &(0x7f00000063c0)={0xf8, 0x0, 0x0, "4a9297030cc64b3d3276fde831a61ddcb779f84268bff387fba4427936ac77c223f37f99b73db96aa340703c03b08c88f732897d61ddb7b4cff7b921534dd54469d868893cf80160c43a7bd2406b2e0405af4c2486c6e7f42aafb4c6367e9e58c700aed282c3b6fb4ce2b2c7a471199c6c7548941a23a2f4a1d112dad359976f0528fb06d9725c7661eae880310cbd03a5b07a515db4d7ff6471124a09470a2cd7c174c3fe0f68b9f1d271d894fd46ef2d6d1e8afc3a2eb10457b939aa44404e15ae47b26426aafaa058b73feb1f2f3969362a25174500511942ea8a1d582c3b14cbdde7daadcc"}, 0xf8, 0x4010}, {&(0x7f0000006500)={0x27, 0x0, 0x1, 0x7, 0x7, 0x9, "4889fe16aaa329ea88a817fce7e3ec2f50cb6f035eabd561ee1de5c22e60c092ebd2938641d67e04b551ac4854aae353201a4ab8850743b81d65d3dbc695f4", 0xf}, 0x60, &(0x7f00000067c0)=[{&(0x7f0000006580)="6fd802dd4f93557b90bd3eb6340ef05e77191eb960fb9e4b7bb7addf4945467067c82c1a0ec56141b12b3275a1b1aa5d064a0c81ab1d091d1af0f6b5cace744de3ac8e6153a37ccdf78c8fbba2d46734f882e2b5cb31a197ba723d1f5ac992935fc6d8a607f02ce96637888eae2eb63bbf9a3a3f26e4aa03b99fa836", 0x7c}, {&(0x7f0000006600)="8079ecf87e1eb0088b96c96c985407820e7dfd52bf1e785d83dd38c6df086c83f8878d42ce8443f6dddc243ac2963b5b17e7caf22ca15b3d62da4b1095d3c1d83290158097ed23b8a7592a5e", 0x4c}, {&(0x7f0000006680)="b3b9fef302e0eecc27b1d8731dcec05808e171f611cf440d36427dd52bb942ebb99492e642e75fe66587eafb042ce9c3", 0x30}, {&(0x7f00000066c0)="408e3680422962b2c33b26d62816029f63579c958c4dc01ed02d7ab9e49b7956a9a29c1a3eb3531a7370ce32971a8bd93f30b55607c7c106eba604b50cdfaf62b59630077104fe48c9a4bdeb486ccc15e45b61e31659781ada3f566014ed03a06dca77cfeed396398b8517f3b461029987c1de80794da24a501f09bfbaecbae06f148c9cdbbba9682bb2f240eb4878573b61bc", 0x93}, {&(0x7f0000006780)="c17c683a452d514d713beb1cdcbb58a60f8734f2ff894dac", 0x18}], 0x5, &(0x7f0000006840)={0x10, 0x10e, 0xffffffff}, 0x10, 0x8980}, {&(0x7f00000068c0)={0x27, 0x0, 0x1, 0x1, 0x1, 0x2, "05dcaec4ceed25fee68c93a867048fab6bf4321c989fa7cada173c8e6faec4f52a9978261fdfdf6f36bd9250cfa0bf4cc849a3c36989e8a64456cd1966e228", 0x11}, 0x60, &(0x7f0000006b40)=[{&(0x7f0000006940)="c1aaf53992ea35589073655172651cbf272b736e3a4f4de6", 0x18}, {&(0x7f0000006980)="3a24c8cac5a1d0a4e1bbfece7dc6c1ba6a18f304edf1c0a9a6f8d6995ee07cc1b4392b25e69cb45ff9fb104d0c24dd1a948645f41da1e70e5cf06181c4544cc91ce00b98e5dcdce55e94532806c389a864f12b2fbb5c1bfceeeb142e23", 0x5d}, {&(0x7f0000006a00)="ffab680040da101979268721bee69858f4c589bc22626c84a9f25a0b5e03c8b4e331f349d068d93a1a09340a7d4099f11c936ba0be52544cd502dcac7613883e512702b3214bd0fa7826b2fe64984cf582a624f2e86c81748fb6681f89c2f374a18018c0ebe7819ba5f142cb5552ba11d974725678a4f2373528a948cc768d87ec397be7d38d4e5c9044dae6331b3f49732e6540fcb4563742f9b1bb63d3495700cac90fbf5c426926c255c2beb59d6577c6fe08fb7bf7d76ba3c1e974817bce9a197aa99b1df931aea440a03e1cccc52e814e0f814880cb", 0xd8}, {&(0x7f0000006b00)="ea8d6384f2079826b3bf9571d6e2f22aec06db4800", 0x15}], 0x4, 0x0, 0x0, 0x4094}, {&(0x7f0000006bc0)={0x27, 0x0, 0x1, 0x4, 0x5, 0x2, "4f5db1148896d6973ca7647ef9e111c6b32c646e5ea689bd6bebd078ff42b50b04004176c740f4b7f1f0624e8dded1222ce05c0fb315e30badf38c34c0cd0b", 0x37}, 0x60, &(0x7f0000007180)=[{&(0x7f0000006c40)="27fd48ef82f98ad92fcaaa4ccdb5644ab794f7e92d6e7215f1d3a41c5bc6ee65a5ed7f6be9fecba4e04b4dcbf02e1cecee3ae5d57d45e7fcbc9b4c4b9896b76b0b8d38eb05b6415ed177b584db5ad19c35095f79f88a0b2667d12b3db95da3a66e7a00c9d5646db5e6daea08df1131401157d5388225f2e940342a693f1131cf5c6a09caed5c8822bf8c04f19fef", 0x8e}, {&(0x7f0000006d00)="205dd848fd4c9eea40165b503a4189af133a1ea870eb5a1e16c00d7ab58c3a3ee34a27a9f66d4d2405faabfa187b338d2c6fa0514188e0d0e5b2d38527bc93a24dbbeac65f9565ae38b6a2379272f137e6da0d00ca89fe992aac7960e44a6ead90a686055dd4a6e01cef1d25b62796b20066fd30ca004ffeeb5db613941643043a858740a9fb3dfb7b9aa5c5f36862ae4fe1ed6cd49364fd5d5519ab122f0def68e0f40c6a178b90c7cce971e171e74240f5", 0xb2}, {&(0x7f0000006dc0)="b83d75608d8380c1400038811bc0d83e3228325fc511142034b8cf5049a8ed27f04b221c286280b30e5e0a41c458c99f2d7c75421c542ea266f4ffc6f53bb04924fbe4bb2c01d4e2d31b44dee5d76407d731bddd85369f44302f70ceed2206ca4c5c1f32c0e214c2502c1612982c2641969e1ab38797ef6de079411a2b4b52c77000a7e96351defbf81f7b9dafb4357013242518dea88b1e7afc74b8e17f0a3e6339c7ab90f5d47235614d3bfac4b366cbfed7984871a4185ed96c0b1ebbe7ba9cfdc4a6b77345313e907caaeeb65ae1df88e5d5839a5d78121025160039b4a5185ae385380690956b68a5635ae5edae4b", 0xf1}, {&(0x7f0000006ec0)="1547090e61bcebc08a0cd56979caa173d27adcfd1631b54d542c8b5e315147df9d1ebd184f67fd81719db9621862f2dcab92c7786beb4cc73a77165f3ce11fc73883296e18b44b8aadad5795440ec7c20d0c824b8e552fe49b72809845e0963006c4988c4ddea97dcaeb8ea565a9a87361619071e06539cf48e5ad12f0b32d4b707940b868bea616db6d9193f67d7904bb67a821adf1d11653ae7145b0b034d152a36210cb548984679d10be93d3b029097e981a502c1dd1912a7d57dd4d79de06e02f16fbe475885aa2349ec1ea1498a5c22731539cbdb733c7b15407c003be51b18cc165ccbdec4b40f7e3c2af6e97a808", 0xf2}, {&(0x7f0000006fc0)="b45ee000c699490ac7939a", 0xb}, {&(0x7f0000007000)="0386a24e7f715ab077ace485516b752b547c0e4d9146906aaa0f5ae69091f8310393c8311b4b84f78cae303da495b1b3d45b54a18308b147b59f13de8d8271862fdb1a3b2eb4a74ba9c43a3f75e0e496597b081c2c7fb9186e20d5d594ac7eeef332d09624da4b6439d6bb4123b48785d88c8660c43da229c0ce97086d847682c529b0b68277350c9d5d13cf56aef12d4f1673006b6ea50d", 0x98}, {&(0x7f00000070c0)}, {&(0x7f0000007100)="ea090f15acb8c75104f79540956c60d32785362c10336f5bcba4e8ef51b03660a9c2c849c0fb0af498f4cab3fc7f39c01ba27f4212f60db480e3cb3ddb9e9b30953007ab94b7e802858f2255afaa671030ad84e1e0696da080", 0x59}], 0x8, 0x0, 0x0, 0x1}], 0x5, 0x860) 9.221294767s ago: executing program 4 (id=1202): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000000, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x4, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, 0x9, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x1fffffc, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x22}, 0x0, 0x0, 0x1, 0x3}}, 0xe8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) setsockopt$sock_int(r2, 0x1, 0x4, &(0x7f0000000040)=0x5, 0x4) connect$inet6(r1, &(0x7f00000000c0), 0x1c) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x10000014}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000100)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x94489e87720a44e, [{0xa00, 0xff03000000000000}, {0x0, 0x100000000000000}]}, 0xa50) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x1, 0x0, 0xf, 0x0, 0x0, [{0x2, 0x2, 0x0, '\x00', 0xd}, {0x4e, 0x7d, 0x7, '\x00', 0x9}, {0x0, 0x9, 0xa, '\x00', 0x7}, {0x2, 0x81, 0x1, '\x00', 0x3}, {0x91, 0xb, 0x0, '\x00', 0x6}, {0x7, 0xd, 0x7, '\x00', 0x85}, {0x4, 0x8, 0xf6, '\x00', 0x4}, {0x1, 0xff, 0x8c, '\x00', 0x2}, {0x4, 0x4, 0x8, '\x00', 0x5}, {0x3, 0x7, 0x9, '\x00', 0x4}, {0x6e, 0xd, 0x3f, '\x00', 0x53}, {0x8, 0xf9, 0x5, '\x00', 0x7}, {0x7, 0x5, 0x0, '\x00', 0x80}, {0x5, 0x5, 0x0, '\x00', 0x1}, {0xff, 0x1, 0x2, '\x00', 0x80}, {0x1, 0xc, 0x67, '\x00', 0x3}, {0xfb, 0x4, 0x9, '\x00', 0x7}, {0x7, 0x5, 0xf, '\x00', 0x6}, {0x7, 0xfe, 0xd3, '\x00', 0x7f}, {0x7f, 0x0, 0x8, '\x00', 0x2}, {0xf9, 0x7, 0xc, '\x00', 0x5}, {0x5, 0xdd, 0x4, '\x00', 0x5e}, {0x2, 0x0, 0xee, '\x00', 0x1}, {0xf, 0x4d, 0xf7, '\x00', 0x8}]}}) 9.035098926s ago: executing program 4 (id=1203): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) ioctl(r2, 0x8b1a, &(0x7f0000000040)) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000000), &(0x7f0000000040)=0x4) write$binfmt_misc(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c547d03daa0f4bd00", [0x7f, 0x9]}}) 8.739480092s ago: executing program 4 (id=1204): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write$P9_RREADDIR(r1, &(0x7f00000004c0)={0xb, 0x29, 0x1}, 0xb) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000008c0)=@updpolicy={0x10c, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0xff, 0x0}, @in=@local, 0x0, 0xfffe, 0x4e21, 0x3, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0xffffffffffffaf28, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xfffffffb, 0xfffffffc, 0x1, 0x1, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x0, 0x0, 0x1}]}, @extra_flags={0x8, 0x18, 0x1}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x9}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008081) socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r3, 0x8995, &(0x7f0000000100)={'bond0\x00', @ifru_names='batadv0\x00'}) syz_open_procfs(0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x80580, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e66ccdb9e581a38ebb0ddd5f307e56", r7, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r8, 0xc0383e04, &(0x7f0000000880)={""/32, 0x0, 0x0, 0xffffffffffffff13, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000bd02c440560831ac1e93010203010902120081000000000904"], 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 8.621013443s ago: executing program 8 (id=1205): r0 = socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x30}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x100000, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bae000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@nested_create_vm={0x12d, 0x18}], 0x18}) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000003b0001031dbdf00affdbdf25060000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) 8.214561734s ago: executing program 6 (id=1206): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$pppoe(0x18, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000080)) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x6, 0x10000, 0xffffffffffffffff, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x3fa, 0xffffffffffffdffd, 0x8, 0x9, 0xfffffffffffffffc, 0x0, 0x10000000192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000100)=[{&(0x7f0000000700)=""/4101, 0x1005}, {&(0x7f0000000400)=""/204, 0xcc}, {&(0x7f0000000080)=""/58, 0x3a}], 0x3) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4400000041000701fafffffffedbdf25017c0000040042812800018010000400cab1893a20b8d2a93521800014001a00bc020000000000000000000000000001040002"], 0x44}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 7.638923451s ago: executing program 3 (id=1207): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_procfs$pagemap(r1, &(0x7f00000000c0)) gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x37, 0x107, 0xfffffff3, 0x25d7dbfe, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0x8050) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x36, 0x200, 0x870bd22, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 6.505292642s ago: executing program 8 (id=1208): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) close_range(r1, r1, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x24, r2, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0xff, 0x52, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r7, @ANYBLOB="000000002c12070008000400"], 0x28}}, 0x4004090) 5.070952802s ago: executing program 3 (id=1209): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a00f271a76d1708fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2}, 0x50) 4.867712666s ago: executing program 4 (id=1210): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x82042, 0x19d) mount$cgroup(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={[{@noprefix}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x3}, 0x94) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r4, 0x2, &(0x7f0000000000)=0x80000000000003) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r6 = open(&(0x7f00000003c0)='./file2\x00', 0x20381, 0x10dd722b6e14c3dd) ioctl$BTRFS_IOC_DEFRAG(r6, 0x4c00, 0x3) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) symlink(&(0x7f00000012c0)='.\x00', &(0x7f0000001300)='./bus\x00') fanotify_mark(r1, 0x1, 0x10001040, r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r0, &(0x7f00000004c0)='./file0\x00', 0x2) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r7, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x1, 0x0) 4.65270863s ago: executing program 6 (id=1211): io_uring_setup(0x4898, &(0x7f0000000180)={0x0, 0x5e, 0x20, 0x20001, 0x88}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='#\x00\x00'], 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8243, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x3, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x240, 0x10, 0x4}}}}}]}}]}}, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) write$binfmt_misc(r3, &(0x7f00000001c0)="a38b9e1dfad9ed91038ccc99e7683de3ad32de6be60eeeb0369598c0f00be02cea0ea14abb9da8b2af16688689327dab21c9ff0c13350d703a8a79318fac33ac326bcc737f6579905b9c427f1b81d840e17591f5d289da80fbd3f97c80200cf742de3804a6ba33846c9cbd6ce729200968032c1b8c65437d08a7f0dd", 0x7c) syz_usb_control_io$hid(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)='1\n', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/nullb/nullb1/zone_nr_conv\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e08091b0c"], 0xb) write(r5, &(0x7f0000001400)='2\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r6, &(0x7f0000000700)='1', 0x1) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000c40)={0x84, &(0x7f00000006c0)={0x0, 0xa, 0x3, "3846e2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r7, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000040)={0x0, 0xf, 0x2, "8cff"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002300)='./config/nullb/nullb2\x00', 0x1ff) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0xfffffffffffffe0e, &(0x7f00000001c0)="e0b9547ed387dbe9abc89b0e5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r9, 0x0, 0x13, &(0x7f0000000340)=0x200, 0x4) 3.759442045s ago: executing program 4 (id=1212): socket(0x2b, 0x1, 0x10) (async) r0 = socket(0x2b, 0x1, 0x10) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000b80)=ANY=[@ANYRES16=r0, @ANYBLOB="83a1530265e6956330b7e09bffec700456ac145f4db5ae52876da2edc696ec6aa5a0e03a7705ac7c85ce00000000b691050c2a24ed", @ANYBLOB="c3246455cef4459b634e9b772d8b936cdaf66737b2bc9a721445bcbe695e80790faf9be1733b22c4523eafac1115f058e99eb33cb2b5918df2db6c043457b1537a39c5d8ad1a78c4b1b1af024b9b850be9346cbd5a6d6fbd6ca119752b7665450f123133fc0d1abdc49e85691893a37cd4dca19cfce2b6cc48705c14556536cc51d09e5fd83e59459469f48c", @ANYRESDEC=r0, @ANYBLOB="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"], 0x0) (async) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000b80)=ANY=[@ANYRES16=r0, @ANYBLOB="83a1530265e6956330b7e09bffec700456ac145f4db5ae52876da2edc696ec6aa5a0e03a7705ac7c85ce00000000b691050c2a24ed", @ANYBLOB="c3246455cef4459b634e9b772d8b936cdaf66737b2bc9a721445bcbe695e80790faf9be1733b22c4523eafac1115f058e99eb33cb2b5918df2db6c043457b1537a39c5d8ad1a78c4b1b1af024b9b850be9346cbd5a6d6fbd6ca119752b7665450f123133fc0d1abdc49e85691893a37cd4dca19cfce2b6cc48705c14556536cc51d09e5fd83e59459469f48c", @ANYRESDEC=r0, @ANYBLOB="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"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x68, 0x4000, @fd_index=0x6, 0x4, &(0x7f0000000f40), 0x7, 0x14, 0x0, {0x1, 0x0, 0x0, '\x00', &(0x7f00000010c0)={0xbb0, 0x8, 0xc4, &(0x7f0000000fc0)="a6df74f579ebdaa71b7488d10681b51be66cb180d1c03d3e6d704dc7ef1eb52eacdaabc8d1fb3fe134aee4fbcc36e24b87f79f966dfdea12e862eb3fcf183531d180c27e0b151cd1495e4362765c094dcffede00f2dc69cdfa2ea97e7f3e5eec1a428393df6e93e7fde9c99bc3a7c742624adc6fb8aeb5dbcbabe669b4b913a9eae8190a6070f91a5939c9e426d8e77f3efcd9905166cde52f2b0fe23ce60956830df4982620dfcad3268e697f8190130608a4e80177071ec9e8571984fca9670fbdc70f", 0x1445}, 0x7f}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) (async) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000000c0)={r9, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={r9, 0x9}, &(0x7f0000000200)=0x8) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={r9, 0x9}, &(0x7f0000000200)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x0, 0xe, 0x2f, &(0x7f0000000280)="1d5ff8317ca952a2ba4bfee0f003", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}, 0x50) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.353056788s ago: executing program 2 (id=1213): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0xe6, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)={0x20, 0x11}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x76}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x89, 0x2}}) 3.344877467s ago: executing program 8 (id=1214): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c00)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@multicast1, 0x4e24, 0x9, 0x4e23, 0x9, 0x2, 0x80, 0x80, 0x89}, {0x1, 0x98, 0x5, 0x9, 0x1, 0x8, 0x4, 0x5}, {0xffffffffffffff22, 0xe0, 0x823}, 0x68a4, 0x6e6bb9, 0x2, 0x1, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1f}, 0x4d3, 0x3c}, 0x2, @in=@loopback, 0x3501, 0x1, 0x2, 0x1, 0xffff7fff, 0x3}}, 0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x4000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='e:mygroup/myevent sched.sched_sw', 0x20) open(&(0x7f00000000c0)='./tracefs/dynamic_events\x00', 0x202, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtfilter={0x2cc, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0xa, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x2a0, 0x2, [@TCA_U32_MARK={0x10, 0xa, {0x3, 0x7fff}}, @TCA_U32_SEL={0x284, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb70b, 0x58f, [{0x1, 0x69d, 0x8, 0x5}, {0xf, 0xd5d7, 0x3, 0x5}, {0xe, 0x1ff, 0x7, 0x8}, {0x40, 0x2, 0x8212, 0x7}, {0x9, 0x17a0, 0xc, 0x1}, {0x5, 0x56defc42, 0x65, 0x3}, {0x48, 0x9, 0xc1, 0x1ff}, {0x867, 0x800, 0x4, 0x9}, {0x1ff, 0x7ff, 0xfffffff9, 0x7}, {0x0, 0x5, 0x755, 0x7}, {0xd0000000, 0x5, 0x6, 0x120}, {0x9, 0x2, 0x4, 0xffffff00}, {0xaf, 0x6, 0x9, 0x2}, {0x1, 0x1, 0x5, 0x7}, {0x8, 0x4, 0xa, 0xd}, {0x80000001, 0x5, 0xeb, 0x1}, {0x7fff, 0x1, 0x5, 0x3477fbe9}, {0x3}, {0x8, 0x7, 0x0, 0x9}, {0x10, 0x3, 0x1, 0x1ff}, {0xfffffffd, 0xff, 0x4, 0xffffff7d}, {0x3ff, 0x1, 0xffffffff, 0x508c}, {0x8, 0x4, 0xfffffffa, 0x742}, {0x10000, 0x80000000, 0x1, 0x6}, {0x59c, 0x3, 0x48, 0x9}, {0x6, 0xa, 0x1, 0x2}, {0x5, 0x4, 0xb}, {0x40, 0x0, 0xfffffffc, 0x92df}, {0x2, 0xa, 0x7e, 0x4}, {0x8, 0xe79, 0x3, 0x3}, {0x4, 0x8001, 0x5ab, 0x6}, {0x4, 0x7, 0x2, 0x1}, {0x5, 0xece, 0x9, 0x3}, {0xfffffff8, 0xc3a, 0x80, 0xad9}, {0x0, 0x3, 0x6, 0x9}, {0x7, 0x2, 0x7, 0x5}, {0x10001, 0x7c, 0x5, 0xce}, {0x2a2534c, 0x8001, 0x0, 0x2ea}, {0x7, 0x400, 0x4, 0x9}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) io_uring_setup(0x5e0a, &(0x7f0000005840)={0x0, 0x9596, 0x20, 0x0, 0x1f9}) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000440)="66b9800000c00f326635000800000f3066b8007000000f23d80f21f86635400000c00f23f864f2c025d666b8d55c23630f23d00f21f86635000000010f23f8f20f10f6440f20c066350c000000440f22c0f30fc7b780daba210066edbaf80c66b83ea6898b66efbafc0ced670f38ca6915", 0x71}], 0x1, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) 2.161706926s ago: executing program 3 (id=1215): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000008400)={0x0, 0x0, &(0x7f00000083c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000000b06010100000000000000000500000005000100070000000900020073797a310000000004000780"], 0x2c}, 0x1, 0x0, 0x0, 0x24004000}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x18) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES8=r4, @ANYRESHEX=r2], 0x30}, 0x1, 0x0, 0x0, 0x20}, 0xc00c000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x20042000) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f0000000100)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000140)={@my=0x1}) 2.020412773s ago: executing program 8 (id=1216): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000c00000/0x400000)=nil) (async) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000e3b000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0, 0xfffffe8b}], 0xaaaaaaaaaaaad80, 0xb1, 0x0, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000feb000/0x2000)=nil) (async) read$FUSE(r1, &(0x7f0000000a00)={0x2020}, 0x2020) (async) syz_usb_connect$uac3(0x0, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="120100030000004035121000400001020301090200000000000000050b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004000924050602"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 1.749148085s ago: executing program 3 (id=1217): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'8255\x00', [0x100, 0xf, 0xd0, 0x2, 0x5, 0x100, 0x3, 0x20000003, 0x8, 0xb, 0x0, 0xfffffff9, 0x1, 0x42f, 0x10001, 0x1, 0x0, 0x8, 0xfe9, 0x401, 0x7, 0x2, 0x7, 0xb, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x7, 0x8]}) 1.705878664s ago: executing program 3 (id=1218): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@multicast1, @rand_addr, 0x0}, &(0x7f0000000280)=0xc) r7 = geteuid() sendmsg$nl_xfrm(r1, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000880)=@migrate={0x370, 0x21, 0x8, 0x70bd2c, 0x25dfdbfd, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0xf, 0x4e24, 0x9, 0xa, 0x20, 0x20, 0x16, r4, r5}}, [@srcaddr={0x14, 0xd, @in=@private=0xa010100}, @sa_dir={0x5, 0x21, 0x1}, @sec_ctx={0xf7, 0x8, {0xf3, 0x8, 0x1, 0xf, 0xeb, "e102fb6da289799f412a4b51885c51bd95aefe2c6b8c2b2cca75e7e6d4684c373fdde394ffc6ce6ff1b999093dd48a0f6d550fe64b91c109bf9e39396fd8a859ecdc30f400f71728046134525788ee80aec0c92a15cebaed78e19a10bcb7c338e977d6bc2a8a9ef1a32b87957a2900782b54ac7931a422a874def274b1ca64ada44ec23649b1557f833fd1b7fedb36cdc8dc56761affff4a813cb75edb9bf51bd010fa30a3852595a9735159335b3956ff96e70be1162eec8966064bc2fe1f924dcb58eb9fa4cf5e3f2cf5100971a41ae86b8620cff7c379ef56a0ac547ea9fc22c77edc670051797e3c47"}}, @policy={0xac, 0x7, {{@in=@local, @in6=@remote, 0x4e21, 0xa484, 0x4e22, 0xff, 0x2, 0x80, 0x20, 0x0, r6, r7}, {0x81, 0x3ff, 0x613, 0x68, 0xffffffffffffffff, 0x2, 0x1, 0x100}, {0x3, 0x7fffffff, 0x3ff, 0x8}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x0, 0x1}}, @encap={0x1c, 0x4, {0x1, 0x4e23, 0x4e21, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}}}, @algo_auth={0x85, 0x1, {{'sha512-ssse3\x00'}, 0x1e8, "3cef2168e7e90fb24bef1221c65bbde1d56e7a8954af3f1c01551b039dcd30f2a77e70bd8d32060f532e1b4a07b087ce75dde2b8e44700602470edb29b"}}, @lifetime_val={0x24, 0x9, {0x9e, 0xfffffffffffffe01, 0xffffffffffffff2c, 0x9}}, @tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x4d4, 0x32}, 0x8, @in6=@local, 0x34ff, 0x3, 0x0, 0x2, 0xfff, 0x16, 0x5}, {{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x4d2, 0x6c}, 0x2, @in6=@loopback, 0x3506, 0x4, 0x3, 0x80, 0x10000, 0x1a54, 0x7}]}, @policy_type={0xa, 0x10, {0x1}}, @iptfs_pkt_size={0x8, 0x29, 0x1}]}, 0x370}, 0x1, 0x0, 0x0, 0x801}, 0xc000) 699.404012ms ago: executing program 3 (id=1219): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x67c, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = accept4$inet6(r4, 0x0, 0x0, 0x80000) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000380)=ANY=[@ANYBLOB="4000000e00000004"], 0x8) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x7c, {}, {}, @raw32={[0x0, 0x0, 0x3]}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}], 0x38) 548.768µs ago: executing program 4 (id=1220): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000010000090900010073797a30000000002c000000030a01010000000000000000010040000900010073797a30000000000900030073797a300000000080000000060a010400000000000000000100000008000b4000000000580004801c0001800a00010072656469720000000c0002800800034000000035380001800c0001006269747769736500280002800800034000000004080001400000001408000240000000120800064000000001040004800900010073797a30"], 0xf4}, 0x1, 0x0, 0x0, 0x810}, 0x0) 0s ago: executing program 6 (id=1221): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=ANY=[@ANYBLOB="1400000042000b06"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000c40)=""/277, 0x115}, {&(0x7f00000029c0)=""/4099, 0x1003}, {&(0x7f00000002c0)=""/200, 0xc8}], 0x3}, 0xf7d}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/4096, 0x1000}], 0x2}, 0x6c74a33a}], 0x2, 0x10002, 0x0) r1 = openat$mixer(0xffffff9c, &(0x7f00000001c0), 0x80002, 0x0) r2 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x4000, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r1, 0x80044d03, &(0x7f0000000040)=0x43) kernel console output (not intermixed with test programs): =4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.988" name="file0" dev="overlay" ino=1185 res=0 errno=0 [ 334.229446][ T5608] Bluetooth: hci0: command tx timeout [ 334.517722][ T31] audit: type=1400 audit(1788106909.371:3340): avc: denied { write } for pid=9676 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 334.531033][ T31] audit: type=1400 audit(1788106909.371:3341): avc: denied { write } for pid=9676 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 334.531079][ T31] audit: type=1400 audit(1788106909.381:3342): avc: denied { write } for pid=9676 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 334.531110][ T31] audit: type=1400 audit(1788106909.381:3343): avc: denied { write } for pid=9676 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 334.531141][ T31] audit: type=1400 audit(1788106909.381:3344): avc: denied { write } for pid=9676 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 334.531171][ T31] audit: type=1400 audit(1788106909.381:3345): avc: denied { write } for pid=9676 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 334.543560][ T31] audit: type=1400 audit(1788106909.381:3346): avc: denied { write } for pid=9676 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 334.543604][ T31] audit: type=1400 audit(1788106909.401:3347): avc: denied { write } for pid=9676 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 334.543637][ T31] audit: type=1400 audit(1788106909.401:3348): avc: denied { write } for pid=9676 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 334.874828][T10420] syzkaller0: entered promiscuous mode [ 334.881692][T10420] syzkaller0: entered allmulticast mode [ 334.889804][T10422] tipc: Enabled bearer , priority 0 [ 334.902066][T10433] overlayfs: failed to resolve './file0': -2 [ 334.998017][ T55] bridge_slave_1: left allmulticast mode [ 334.998058][ T55] bridge_slave_1: left promiscuous mode [ 334.998212][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.010401][ T55] bridge_slave_0: left allmulticast mode [ 335.010422][ T55] bridge_slave_0: left promiscuous mode [ 335.010572][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.524598][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.535010][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.544607][ T55] bond0 (unregistering): Released all slaves [ 335.561487][T10422] tipc: Resetting bearer [ 335.598949][ T5608] Bluetooth: hci4: command tx timeout [ 335.652021][ T5264] 8021q: adding VLAN 0 to HW filter on device eth2 [ 335.658880][T10419] tipc: Resetting bearer [ 335.677954][T10419] tipc: Disabling bearer [ 335.884921][T10336] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.885071][T10336] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.885176][T10336] bridge_slave_0: entered allmulticast mode [ 335.886412][T10336] bridge_slave_0: entered promiscuous mode [ 335.888855][T10336] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.888940][T10336] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.889029][T10336] bridge_slave_1: entered allmulticast mode [ 335.890494][T10336] bridge_slave_1: entered promiscuous mode [ 335.951920][T10336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.988002][T10336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.114271][ T55] hsr_slave_0: left promiscuous mode [ 336.120218][ T55] hsr_slave_1: left promiscuous mode [ 336.121142][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.121158][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.126907][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.126921][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.143204][ T5601] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 336.151564][ T55] veth1_macvtap: left promiscuous mode [ 336.151594][ T55] veth0_macvtap: left promiscuous mode [ 336.151664][ T55] veth1_vlan: left promiscuous mode [ 336.151710][ T55] veth0_vlan: left promiscuous mode [ 336.252849][ T5600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.264393][ T5600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.265321][ T5600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.266601][ T5600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.266973][ T5600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.320800][ T5600] Bluetooth: hci0: command tx timeout [ 336.327107][ T5601] usb 9-1: Using ep0 maxpacket: 16 [ 336.332969][ T5601] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 336.346188][ T5601] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.346226][ T5601] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.346258][ T5601] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 336.346297][ T5601] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.389926][ T5601] usb 9-1: config 0 descriptor?? [ 336.490429][ T55] team0 (unregistering): Port device team_slave_1 removed [ 336.498675][ T55] team0 (unregistering): Port device team_slave_0 removed [ 336.584308][T10336] team0: Port device team_slave_0 added [ 336.586623][T10336] team0: Port device team_slave_1 added [ 336.617873][T10445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.618222][T10445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.626381][T10336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.626395][T10336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.626414][T10336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.629235][T10336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.629246][T10336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 336.629265][T10336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.836270][ T5601] hid_parser_main: 12 callbacks suppressed [ 336.846004][ T5601] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 336.864968][ T5601] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 336.874599][ T5601] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 336.881992][ T5601] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 336.889319][T10336] hsr_slave_0: entered promiscuous mode [ 336.889324][ T5601] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 336.892553][T10336] hsr_slave_1: entered promiscuous mode [ 336.893028][T10336] debugfs: 'hsr0' already exists in 'hsr' [ 336.893043][T10336] Cannot create hsr debugfs directory [ 336.920449][ T5601] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 336.927814][ T5601] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 336.935824][ T5601] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 336.943201][ T5601] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 336.950628][ T5601] microsoft 0003:045E:07DA.001B: unknown main item tag 0x0 [ 336.971918][ T5601] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.001B/input/input32 [ 337.058633][ T5601] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 337.094565][ T5601] usb 9-1: USB disconnect, device number 12 [ 337.374170][T10473] fido_id[10473]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 337.469768][ T5264] 8021q: adding VLAN 0 to HW filter on device eth3 [ 337.673029][T10240] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 337.680080][ T5600] Bluetooth: hci4: command tx timeout [ 337.701399][T10240] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.705017][T10240] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 337.716146][T10240] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 337.716767][T10240] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 337.724334][T10240] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 337.725024][T10240] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 337.727398][T10240] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 337.862926][ T55] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.119949][ T5601] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 338.129323][ T55] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.256280][ T55] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.290808][ T5601] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 338.301316][ T5601] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 338.301357][ T5601] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 338.301383][ T5601] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 338.301407][ T5601] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 338.309952][ T5600] Bluetooth: hci2: command tx timeout [ 338.351375][ T5601] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.351411][ T5601] usb 9-1: Product: syz [ 338.351435][ T5601] usb 9-1: Manufacturer: syz [ 338.351449][ T5601] usb 9-1: SerialNumber: syz [ 338.383960][ T5601] usb 9-1: config 0 descriptor?? [ 338.443492][ T55] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.468519][ T5264] 8021q: adding VLAN 0 to HW filter on device eth4 [ 338.581755][T10450] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.589068][T10450] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.597333][T10450] bridge_slave_0: entered allmulticast mode [ 338.614314][T10450] bridge_slave_0: entered promiscuous mode [ 338.631079][T10450] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.647457][ T5601] adutux 9-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 338.656274][T10450] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.656429][T10450] bridge_slave_1: entered allmulticast mode [ 338.674314][T10450] bridge_slave_1: entered promiscuous mode [ 338.739046][T10450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.756244][T10450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.801380][T10450] team0: Port device team_slave_0 added [ 338.828991][T10450] team0: Port device team_slave_1 added [ 338.919424][ T10] usb 9-1: USB disconnect, device number 13 [ 339.314330][T10517] syzkaller0: entered promiscuous mode [ 339.314365][T10517] syzkaller0: entered allmulticast mode [ 339.326867][T10518] tipc: Enabled bearer , priority 0 [ 339.352347][T10450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.359409][T10450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.386525][T10450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.407788][T10515] tipc: Resetting bearer [ 339.413949][T10514] tipc: Resetting bearer [ 339.432722][T10514] tipc: Disabling bearer [ 339.449262][T10450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.449289][T10450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.449321][T10450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.487110][T10240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.533980][ T55] bridge_slave_1: left allmulticast mode [ 339.540004][ T55] bridge_slave_1: left promiscuous mode [ 339.540176][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.572457][ T55] bridge_slave_0: left allmulticast mode [ 339.581924][ T55] bridge_slave_0: left promiscuous mode [ 339.587807][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.692616][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.706282][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.716483][ T55] bond0 (unregistering): Released all slaves [ 339.724534][T10523] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1001'. [ 339.742812][T10450] hsr_slave_0: entered promiscuous mode [ 339.743463][T10450] hsr_slave_1: entered promiscuous mode [ 339.743894][T10450] debugfs: 'hsr0' already exists in 'hsr' [ 339.743908][T10450] Cannot create hsr debugfs directory [ 339.755602][ T5600] Bluetooth: hci4: command tx timeout [ 339.786582][T10521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10521 comm=syz.3.1001 [ 339.794523][T10240] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.841025][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.841119][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.842382][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.842481][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.979148][T10336] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 340.000657][T10336] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 340.001259][T10336] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 340.008106][ T31] kauditd_printk_skb: 101 callbacks suppressed [ 340.008120][ T31] audit: type=1326 audit(1788106914.861:3450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.8.1003" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb190f9e159 code=0x7ffc0000 [ 340.014127][ T31] audit: type=1326 audit(1788106914.861:3451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.8.1003" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fb190f9e159 code=0x7ffc0000 [ 340.014739][ T31] audit: type=1326 audit(1788106914.881:3452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.8.1003" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb190f9e159 code=0x7ffc0000 [ 340.016493][ T31] audit: type=1326 audit(1788106914.881:3453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.8.1003" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb190f9e159 code=0x7ffc0000 [ 340.016912][ T31] audit: type=1326 audit(1788106914.881:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.8.1003" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb190f9e159 code=0x7ffc0000 [ 340.017194][ T31] audit: type=1326 audit(1788106914.881:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.8.1003" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb190f9e159 code=0x7ffc0000 [ 340.018438][ T31] audit: type=1326 audit(1788106914.881:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.8.1003" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb190f9e159 code=0x7ffc0000 [ 340.018671][ T31] audit: type=1326 audit(1788106914.881:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.8.1003" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb190f9e159 code=0x7ffc0000 [ 340.018830][ T31] audit: type=1326 audit(1788106914.881:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.8.1003" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb190f9e159 code=0x7ffc0000 [ 340.019027][ T31] audit: type=1326 audit(1788106914.881:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10527 comm="syz.8.1003" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fb190f9e159 code=0x7ffc0000 [ 340.054414][T10336] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 340.302591][T10336] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 340.329144][T10336] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 340.380733][T10336] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 340.390407][ T5600] Bluetooth: hci2: command tx timeout [ 340.411536][T10336] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 340.423805][T10534] kAFS: No cell specified [ 340.476621][ T55] hsr_slave_0: left promiscuous mode [ 340.484631][ T55] hsr_slave_1: left promiscuous mode [ 340.494014][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.503392][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.513162][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.521922][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.530303][ T55] batman_adv: batadv0: Interface deactivated: veth0 [ 340.538934][ T55] batman_adv: batadv0: Removing interface: veth0 [ 340.568772][ T55] veth1_macvtap: left promiscuous mode [ 340.576414][ T55] veth0_macvtap: left promiscuous mode [ 340.582023][ T55] veth1_vlan: left promiscuous mode [ 340.582060][ T55] veth0_vlan: left promiscuous mode [ 340.833111][ T55] team0 (unregistering): Port device team_slave_1 removed [ 340.850360][ T55] team0 (unregistering): Port device team_slave_0 removed [ 340.923084][ T10] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 341.069582][ T10] usb 4-1: device descriptor read/64, error -71 [ 341.071444][T10240] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.071462][T10240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.241343][T10336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.340557][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 341.398056][T10336] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.410735][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.410815][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.432797][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.432886][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.480171][ T10] usb 4-1: device descriptor read/64, error -71 [ 341.590871][ T10] usb usb4-port1: attempt power cycle [ 341.891588][T10240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.941373][ T10] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 341.981092][ T10] usb 4-1: device descriptor read/8, error -71 [ 342.242675][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 342.269976][ T10] usb 4-1: device descriptor read/8, error -71 [ 342.284593][T10450] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 342.311743][T10450] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 342.334401][T10336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.341337][T10450] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 342.351955][T10450] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 342.363746][T10450] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 342.373931][T10450] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 342.381454][ T10] usb usb4-port1: unable to enumerate USB device [ 342.393523][T10450] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 342.419326][T10450] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 342.470477][ T5600] Bluetooth: hci2: command tx timeout [ 342.566947][T10240] veth0_vlan: entered promiscuous mode [ 342.587305][T10240] veth1_vlan: entered promiscuous mode [ 342.610508][ T5694] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 342.641866][T10450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.678817][T10450] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.685947][T10240] veth0_macvtap: entered promiscuous mode [ 342.706135][T10240] veth1_macvtap: entered promiscuous mode [ 342.717560][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.717654][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.745630][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.745726][ T5968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.782712][ T5694] usb 9-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 342.794382][ T5694] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.794435][ T5694] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.819840][ T5694] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.819875][ T5694] usb 9-1: Product: syz [ 342.819900][ T5694] usb 9-1: Manufacturer: syz [ 342.819917][ T5694] usb 9-1: SerialNumber: syz [ 342.852439][T10240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.855393][T10240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.879907][ T5968] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.879968][ T5968] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.880010][ T5968] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.880040][ T5968] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.985362][T10450] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 342.995939][T10450] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 343.132889][T10336] veth0_vlan: entered promiscuous mode [ 343.162929][T10336] veth1_vlan: entered promiscuous mode [ 343.173414][ T5944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.173444][ T5944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.237672][T10336] veth0_macvtap: entered promiscuous mode [ 343.243293][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.243309][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.264168][T10336] veth1_macvtap: entered promiscuous mode [ 343.324709][T10336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.333157][T10336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.346277][ T1169] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.346995][ T1169] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.347154][ T1169] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.347200][ T1169] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.543093][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.543134][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.663224][ T5944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.663265][ T5944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.101222][T10641] input: syz0 as /devices/virtual/input/input33 [ 344.225546][T10636] ushc 9-1:1.0: probe with driver ushc failed with error -32 [ 344.413872][ T5722] usb 9-1: USB disconnect, device number 14 [ 344.549539][ T5600] Bluetooth: hci2: command tx timeout [ 346.309838][T10663] overlayfs: missing 'lowerdir' [ 346.789216][ T31] kauditd_printk_skb: 35 callbacks suppressed [ 346.789258][ T31] audit: type=1400 audit(1788106921.631:3495): avc: denied { read write } for pid=10669 comm="syz.3.1015" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 346.789297][ T31] audit: type=1400 audit(1788106921.631:3496): avc: denied { open } for pid=10669 comm="syz.3.1015" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 346.849950][ T5694] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 346.958064][T10672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 347.059153][ T5694] usb 9-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 347.127015][ T5694] usb 9-1: config 6 has an invalid interface number: 198 but max is 0 [ 347.127034][ T5694] usb 9-1: config 6 has no interface number 0 [ 347.127049][ T5694] usb 9-1: config 6 interface 198 has no altsetting 0 [ 347.129317][ T5694] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.129331][ T5694] usb 9-1: Product: syz [ 347.129339][ T5694] usb 9-1: Manufacturer: syz [ 347.129347][ T5694] usb 9-1: SerialNumber: syz [ 348.305002][ T5694] go7007 9-1:6.198: probe with driver go7007 failed with error -12 [ 348.316815][ T5694] usb 9-1: USB disconnect, device number 15 [ 348.611913][T10683] syzkaller0: entered promiscuous mode [ 348.611949][T10683] syzkaller0: entered allmulticast mode [ 348.628871][T10450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.146806][ T31] audit: type=1400 audit(1788106924.001:3497): avc: denied { write } for pid=10693 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.363654][ T31] audit: type=1400 audit(1788106924.221:3498): avc: denied { write } for pid=10721 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.984284][T10727] ceph: No mds server is up or the cluster is laggy [ 350.322169][ T9] libceph: connect (1)[c::]:6789 error -101 [ 350.363212][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 350.469600][ T983] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 350.469638][ T983] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 350.469698][ T5600] Bluetooth: hci3: command 0x0406 tx timeout [ 350.595840][ T31] audit: type=1400 audit(1788106925.441:3499): avc: denied { search } for pid=10725 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.596156][ T31] audit: type=1400 audit(1788106925.441:3500): avc: denied { search } for pid=10725 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1770 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.597752][ T31] audit: type=1400 audit(1788106925.441:3501): avc: denied { search } for pid=10725 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.598485][ T31] audit: type=1400 audit(1788106925.451:3502): avc: denied { search } for pid=10725 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.653426][ T5601] libceph: connect (1)[c::]:6789 error -101 [ 350.655397][ T5601] libceph: mon0 (1)[c::]:6789 connect error [ 350.840864][ T31] audit: type=1400 audit(1788106925.691:3503): avc: denied { read } for pid=10731 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.840922][ T31] audit: type=1400 audit(1788106925.691:3504): avc: denied { read open } for pid=10731 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.989722][ T31] kauditd_printk_skb: 33 callbacks suppressed [ 351.989766][ T31] audit: type=1400 audit(1788106926.851:3538): avc: denied { create } for pid=10766 comm="syz.8.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 351.991932][ T31] audit: type=1400 audit(1788106926.851:3539): avc: denied { write } for pid=10766 comm="syz.8.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 351.992426][ T31] audit: type=1400 audit(1788106926.851:3540): avc: denied { create } for pid=10766 comm="syz.8.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.993069][ T31] audit: type=1400 audit(1788106926.851:3541): avc: denied { write } for pid=10766 comm="syz.8.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 351.993578][ T31] audit: type=1400 audit(1788106926.851:3542): avc: denied { read } for pid=10766 comm="syz.8.1027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 352.068859][ T31] audit: type=1400 audit(1788106926.931:3543): avc: denied { mounton } for pid=10766 comm="syz.8.1027" path="/38/tracefs_dir" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 352.069833][ T31] audit: type=1400 audit(1788106926.931:3544): avc: denied { mount } for pid=10766 comm="syz.8.1027" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 352.071956][ T31] audit: type=1400 audit(1788106926.931:3545): avc: denied { search } for pid=10766 comm="syz.8.1027" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 352.072182][ T31] audit: type=1400 audit(1788106926.931:3546): avc: denied { write } for pid=10766 comm="syz.8.1027" name="buffer_subbuf_size_kb" dev="tracefs" ino=522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 352.072444][ T31] audit: type=1400 audit(1788106926.931:3547): avc: denied { open } for pid=10766 comm="syz.8.1027" path="/38/tracefs_dir/buffer_subbuf_size_kb" dev="tracefs" ino=522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 352.401336][ T5701] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 352.561915][ T5701] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 352.564910][ T5701] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.564932][ T5701] usb 9-1: Product: syz [ 352.564945][ T5701] usb 9-1: Manufacturer: syz [ 352.564957][ T5701] usb 9-1: SerialNumber: syz [ 352.984588][ T5701] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 352.984651][ T5701] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 353.907802][T10450] veth0_vlan: entered promiscuous mode [ 353.928940][T10450] veth1_vlan: entered promiscuous mode [ 353.965788][T10450] veth0_macvtap: entered promiscuous mode [ 353.988790][T10450] veth1_macvtap: entered promiscuous mode [ 354.016381][T10450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.083557][T10450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.189623][ T55] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.209114][ T55] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.227395][ T55] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.227482][ T55] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.521943][ T5701] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 354.522328][ T5701] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 354.524809][ T5701] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 354.524853][ T5701] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 354.566570][ T5701] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 354.597320][ T5701] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 354.615533][ T5701] usb 9-1: USB disconnect, device number 16 [ 355.534051][T10815] binder: BINDER_SET_CONTEXT_MGR already set [ 355.534079][T10815] binder: 10814:10815 ioctl 4018620d 200000000100 returned -16 [ 355.670456][ T5600] Bluetooth: hci1: command 0x0c1a tx timeout [ 355.672507][ T983] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 355.672523][ T983] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 356.159958][T10837] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1040'. [ 356.844072][T10845] SELinux: invalid class [ 356.844322][T10845] SELinux: failed to load policy [ 356.899176][T10845] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1041'. [ 357.016024][ T31] kauditd_printk_skb: 50 callbacks suppressed [ 357.016059][ T31] audit: type=1400 audit(1788106931.871:3598): avc: denied { mount } for pid=10848 comm="syz.8.1042" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 357.044692][ T31] audit: type=1400 audit(1788106931.881:3599): avc: denied { read write } for pid=10848 comm="syz.8.1042" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 357.044739][ T31] audit: type=1400 audit(1788106931.881:3600): avc: denied { open } for pid=10848 comm="syz.8.1042" path="/41/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 357.064028][T10849] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 357.094412][ T31] audit: type=1400 audit(1788106931.931:3601): avc: denied { write } for pid=10840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.118764][T10861] ip_tables: iptables: counters copy to user failed while replacing table [ 357.127255][ T31] audit: type=1400 audit(1788106931.971:3602): avc: denied { ioctl } for pid=10848 comm="syz.8.1042" path="/41/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 357.219792][ T31] audit: type=1400 audit(1788106932.081:3603): avc: denied { unmount } for pid=9328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 357.263351][ T31] audit: type=1400 audit(1788106932.121:3604): avc: denied { write } for pid=10865 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.300772][ T31] audit: type=1400 audit(1788106932.161:3605): avc: denied { create } for pid=10853 comm="syz.5.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 357.322315][ T31] audit: type=1400 audit(1788106932.161:3606): avc: denied { ioctl } for pid=10853 comm="syz.5.1039" path="socket:[37568]" dev="sockfs" ino=37568 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 357.322366][ T31] audit: type=1400 audit(1788106932.161:3607): avc: denied { connect } for pid=10853 comm="syz.5.1039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 357.989663][ T5600] Bluetooth: hci0: command 0x0c1a tx timeout [ 357.996170][ T983] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 358.010613][ T983] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 360.069712][ T5600] Bluetooth: hci4: command 0x0c1a tx timeout [ 360.079065][ T983] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 360.079102][ T983] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 361.228115][ T5264] 8021q: adding VLAN 0 to HW filter on device eth25 [ 362.150279][ T5600] Bluetooth: hci2: command 0x0c1a tx timeout [ 362.156782][ T983] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 362.162978][ T983] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 362.205362][ T31] kauditd_printk_skb: 54 callbacks suppressed [ 362.205406][ T31] audit: type=1400 audit(1788106937.061:3662): avc: denied { write } for pid=11114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.333751][ T31] audit: type=1400 audit(1788106937.171:3663): avc: denied { write } for pid=11125 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.477061][T11130] cgroup: noprefix used incorrectly [ 363.365318][ T31] audit: type=1400 audit(1788106937.791:3664): avc: denied { create } for pid=11127 comm="syz.8.1050" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 363.365376][ T31] audit: type=1400 audit(1788106937.801:3665): avc: denied { write } for pid=11127 comm="syz.8.1050" name="file2" dev="tmpfs" ino=289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 363.365423][ T31] audit: type=1400 audit(1788106937.811:3666): avc: denied { open } for pid=11127 comm="syz.8.1050" path="/48/file2" dev="tmpfs" ino=289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 363.365456][ T31] audit: type=1400 audit(1788106937.811:3667): avc: denied { ioctl } for pid=11127 comm="syz.8.1050" path="/48/file2" dev="tmpfs" ino=289 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 363.365491][ T31] audit: type=1400 audit(1788106937.841:3668): avc: denied { watch } for pid=11127 comm="syz.8.1050" path="/48" dev="tmpfs" ino=282 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 363.370960][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.370977][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.377478][ T31] audit: type=1400 audit(1788106938.221:3669): avc: denied { unlink } for pid=9328 comm="syz-executor" name="file2" dev="tmpfs" ino=289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 363.739872][ T983] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 363.839928][ T31] audit: type=1400 audit(1788106938.691:3670): avc: denied { read } for pid=11134 comm="syz.5.1052" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 363.839984][ T31] audit: type=1400 audit(1788106938.701:3671): avc: denied { open } for pid=11134 comm="syz.5.1052" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 363.899981][ T983] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 363.911008][ T983] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 363.911050][ T983] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 363.911076][ T983] usb 4-1: config 0 interface 0 has no altsetting 0 [ 363.935783][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.935800][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.957250][ T983] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 363.957299][ T983] usb 4-1: Product: syz [ 363.957322][ T983] usb 4-1: Manufacturer: syz [ 363.957337][ T983] usb 4-1: SerialNumber: syz [ 363.982057][ T983] usb 4-1: config 0 descriptor?? [ 364.000615][ T983] usb 4-1: selecting invalid altsetting 0 [ 364.257366][ T983] usb 4-1: USB disconnect, device number 56 [ 364.364358][ T6029] udevd[6029]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.659468][ T5797] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 364.777324][ T5264] 8021q: adding VLAN 0 to HW filter on device eth26 [ 364.809958][ T5797] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 364.810809][ T5797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.813727][ T5797] usb 5-1: config 0 descriptor?? [ 364.826433][ T5797] pwc: Samsung MPC-C10 USB webcam detected. [ 364.839780][ T5811] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 365.000161][ T5811] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 365.001070][ T5811] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 365.001096][ T5811] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 365.001125][ T5811] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.006856][T11139] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 365.018899][ T5811] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 365.023131][ T5797] pwc: send_video_command error -71 [ 365.023143][ T5797] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 365.023227][ T5797] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 365.033378][ T5797] usb 5-1: USB disconnect, device number 46 [ 365.169472][ T5789] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 365.318672][ T5811] usb 9-1: USB disconnect, device number 17 [ 365.343094][ T5789] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 365.346146][ T5789] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 365.352836][ T5789] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 365.352859][ T5789] usb 4-1: Product: syz [ 365.352873][ T5789] usb 4-1: Manufacturer: syz [ 365.352885][ T5789] usb 4-1: SerialNumber: syz [ 365.559581][ T5797] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 365.593047][T11171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.593426][T11171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.617960][ T5789] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 57 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 365.731648][ T5797] usb 5-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 365.732543][ T5797] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.740267][ T5797] usb 5-1: config 0 descriptor?? [ 365.747024][ T5797] pwc: Samsung MPC-C10 USB webcam detected. [ 365.924536][ T5264] 8021q: adding VLAN 0 to HW filter on device eth27 [ 366.071859][ T5811] usb 4-1: USB disconnect, device number 57 [ 366.080255][ T5811] usblp0: removed [ 366.238110][ T5797] pwc: recv_control_msg error -71 req 02 val 2b00 [ 366.240953][ T5797] pwc: recv_control_msg error -71 req 02 val 2700 [ 366.245109][ T5797] pwc: recv_control_msg error -71 req 04 val 1700 [ 366.248795][ T5797] pwc: recv_control_msg error -71 req 02 val 2c00 [ 366.249109][ T5797] pwc: recv_control_msg error -71 req 04 val 1000 [ 366.251817][ T5797] pwc: recv_control_msg error -71 req 04 val 1300 [ 366.252589][ T5797] pwc: recv_control_msg error -71 req 04 val 1400 [ 366.252895][ T5797] pwc: recv_control_msg error -71 req 02 val 2000 [ 366.255827][ T5797] pwc: recv_control_msg error -71 req 02 val 2100 [ 366.257843][ T5797] pwc: recv_control_msg error -71 req 02 val 2200 [ 366.258763][ T5797] pwc: recv_control_msg error -71 req 06 val 0600 [ 366.259207][ T5797] pwc: recv_control_msg error -71 req 04 val 1500 [ 366.260802][ T5797] pwc: recv_control_msg error -71 req 02 val 2500 [ 366.261473][ T5797] pwc: recv_control_msg error -71 req 02 val 2400 [ 366.261790][ T5797] pwc: recv_control_msg error -71 req 02 val 2600 [ 366.264727][ T5797] pwc: recv_control_msg error -71 req 02 val 2900 [ 366.265923][ T5797] pwc: recv_control_msg error -71 req 02 val 2800 [ 366.266915][ T5797] pwc: recv_control_msg error -71 req 04 val 1100 [ 366.267545][ T5797] pwc: recv_control_msg error -71 req 04 val 1200 [ 366.327540][ T5797] pwc: Registered as video103. [ 366.338145][ T5797] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input34 [ 366.403624][T11207] MTD: Attempt to mount non-MTD device "/dev/nbd8" [ 366.404739][ T5797] usb 5-1: USB disconnect, device number 47 [ 366.817387][T11224] input: syz0 as /devices/virtual/input/input35 [ 367.057527][T11224] syz_tun: left allmulticast mode [ 367.127556][T11224] tipc: Resetting bearer [ 367.259103][ T31] kauditd_printk_skb: 43 callbacks suppressed [ 367.259144][ T31] audit: type=1400 audit(1788106942.111:3715): avc: denied { create } for pid=11235 comm="syz.6.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 367.458174][T11230] netlink: 8528 bytes leftover after parsing attributes in process `syz.3.1063'. [ 367.489702][ T5968] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.489804][ T5968] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.489846][ T5968] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.489878][ T5968] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.687482][T11245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1068'. [ 367.967135][ T31] audit: type=1400 audit(1788106942.821:3716): avc: denied { create } for pid=11248 comm="syz.3.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 367.969746][ T31] audit: type=1400 audit(1788106942.831:3717): avc: denied { write } for pid=11248 comm="syz.3.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 368.249140][T11266] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1071'. [ 368.349780][ T31] audit: type=1400 audit(1788106943.091:3718): avc: denied { create } for pid=11252 comm="syz.8.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 368.350006][ T31] audit: type=1400 audit(1788106943.101:3719): avc: denied { write } for pid=11252 comm="syz.8.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 368.350168][ T31] audit: type=1400 audit(1788106943.101:3720): avc: denied { nlmsg_write } for pid=11252 comm="syz.8.1071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 368.359553][ T31] audit: type=1400 audit(1788106943.121:3721): avc: denied { ioctl } for pid=11252 comm="syz.8.1071" path="socket:[38859]" dev="sockfs" ino=38859 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 368.639122][ T31] audit: type=1400 audit(1788106943.491:3722): avc: denied { write } for pid=11247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.934790][ T31] audit: type=1400 audit(1788106943.791:3723): avc: denied { write } for pid=11271 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 368.974755][ T31] audit: type=1400 audit(1788106943.831:3724): avc: denied { create } for pid=11276 comm="syz.3.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 369.116912][ T5264] 8021q: adding VLAN 0 to HW filter on device eth8 [ 369.839807][ T983] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 369.978141][T11304] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1078'. [ 369.991650][ T983] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 370.002540][ T5264] 8021q: adding VLAN 0 to HW filter on device eth5 [ 370.013504][ T983] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 370.013549][ T983] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 370.013600][ T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.015027][T11304] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 370.052282][T11285] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 370.067069][ T983] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 370.321248][T11309] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1080'. [ 370.336523][T11312] binder: BINDER_SET_CONTEXT_MGR already set [ 370.350525][T11312] binder: 11311:11312 ioctl 4018620d 200000000100 returned -16 [ 370.363229][ T10] usb 5-1: USB disconnect, device number 48 [ 370.523346][T11317] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1082'. [ 370.599250][T11324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1082'. [ 370.715090][T11324] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 370.763253][T11324] bond2 (unregistering): Released all slaves [ 370.918894][ T5811] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 371.031063][ T5264] 8021q: adding VLAN 0 to HW filter on device eth6 [ 371.102449][ T5811] usb 4-1: New USB device found, idVendor=55aa, idProduct=a103, bcdDevice= 0.00 [ 371.105540][ T5811] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 32768, setting to 1024 [ 371.105567][ T5811] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 371.105596][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.156375][ T5811] ums-sddr55 4-1:1.0: USB Mass Storage device detected [ 371.166765][ T5811] ums-sddr55 4-1:1.0: This device (55aa,a103,0000 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 371.166765][ T5811] Please send a copy of this message to and [ 371.192705][ T5811] scsi host1: usb-storage 4-1:1.0 [ 371.532220][ T5811] usb 4-1: USB disconnect, device number 58 [ 372.329668][ T983] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 372.483274][ T983] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 372.484538][ T983] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.484558][ T983] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 372.484585][ T983] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.514142][ T983] usb 9-1: config 0 descriptor?? [ 372.758309][ T31] kauditd_printk_skb: 18 callbacks suppressed [ 372.758337][ T31] audit: type=1400 audit(1788106947.611:3743): avc: denied { write } for pid=11362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.866587][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1090'. [ 372.925198][T11385] trusted_key: encrypted_key: insufficient parameters specified [ 374.286348][ T5811] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 374.312040][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.319579][ T31] audit: type=1400 audit(1788106947.721:3744): avc: denied { ioctl } for pid=11379 comm="syz.4.1090" path="socket:[39484]" dev="sockfs" ino=39484 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 374.323380][ T31] audit: type=1400 audit(1788106949.181:3745): avc: denied { mounton } for pid=11360 comm="syz.8.1087" path="/syzcgroup/unified/syz8" dev="cgroup2" ino=328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 374.479661][ T5811] usb 4-1: Using ep0 maxpacket: 8 [ 374.499557][ T5811] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 374.504566][T11387] scsi_strcpy_devinfo: vendor string '‰˜b~žs–bÉñ%`Q¤ÿìÊ® õ~…G|©\»D½5©X¡Â™ú2õËa¹ÐE' is too long [ 374.522177][ T5811] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 374.522202][ T5811] usb 4-1: config 0 has no interface number 0 [ 374.522230][ T5811] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 374.522249][ T5811] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 374.522268][ T5811] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 374.522290][ T5811] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 374.522322][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.579135][ T5811] usb 4-1: config 0 descriptor?? [ 374.639040][ T5811] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 374.910034][ T5811] usb 4-1: USB disconnect, device number 59 [ 374.950099][ T5789] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 375.101295][ T5789] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 375.121586][ T5789] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.132781][ T5789] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 375.143985][ T5789] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 375.156684][ T5789] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.366150][T11389] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 375.380086][ T5811] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 375.548149][ T5789] hub 5-1:1.0: bad descriptor, ignoring hub [ 375.548189][ T5789] hub 5-1:1.0: probe with driver hub failed with error -5 [ 375.548643][ T5789] cdc_wdm 5-1:1.0: skipping garbage [ 375.548659][ T5789] cdc_wdm 5-1:1.0: skipping garbage [ 375.589195][ T5789] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 375.589236][ T5789] cdc_wdm 5-1:1.0: Unknown control protocol [ 375.600483][ T31] audit: type=1400 audit(1788106950.461:3746): avc: denied { mount } for pid=11388 comm="syz.4.1091" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 375.663354][ T5789] usb 5-1: USB disconnect, device number 49 [ 375.741375][ T9] usb 9-1: USB disconnect, device number 18 [ 375.856917][ T31] audit: type=1400 audit(1788106950.711:3747): avc: denied { write } for pid=11393 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.912663][T11390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.912982][T11390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.063621][ T5264] 8021q: adding VLAN 0 to HW filter on device eth7 [ 376.182573][ T5811] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 376.267732][ T31] audit: type=1400 audit(1788106951.121:3748): avc: denied { mount } for pid=11406 comm="syz.8.1095" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 376.272094][ T5789] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 376.429455][ T5811] usb 4-1: Using ep0 maxpacket: 16 [ 376.429948][ T5811] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 376.431079][ T5811] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.431103][ T5811] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.431125][ T5811] usb 4-1: config 0 interface 0 has no altsetting 0 [ 376.431165][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.435251][ T5811] usb 4-1: config 0 descriptor?? [ 376.479926][ T5789] usb 5-1: device descriptor read/64, error -71 [ 376.679470][ T9] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 376.719568][ T5789] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 376.824835][ T9] usb 9-1: device descriptor read/64, error -71 [ 376.849474][ T5789] usb 5-1: device descriptor read/64, error -71 [ 376.867121][T11395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.869248][T11395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.920180][ T5811] input: HID 05ac:0269 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:0269.001C/input/input36 [ 376.960000][ T5789] usb usb5-port1: attempt power cycle [ 377.018970][ T31] audit: type=1400 audit(1788106951.871:3749): avc: denied { write } for pid=11409 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.080927][ T9] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 377.090881][ T5811] magicmouse 0003:05AC:0269.001C: input,hidraw0: USB HID vff.fd Joystick [HID 05ac:0269] on usb-dummy_hcd.3-1/input0 [ 377.142969][ T5811] usb 4-1: USB disconnect, device number 60 [ 377.222107][ T9] usb 9-1: device descriptor read/64, error -71 [ 377.236608][ T31] audit: type=1400 audit(1788106952.091:3750): avc: denied { write } for pid=11420 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.330893][ T9] usb usb9-port1: attempt power cycle [ 377.331607][ T5789] usb 5-1: new low-speed USB device number 52 using dummy_hcd [ 377.348086][T11421] fido_id[11421]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 377.370873][ T5789] usb 5-1: device descriptor read/8, error -71 [ 377.389419][ T5264] 8021q: adding VLAN 0 to HW filter on device eth9 [ 377.619585][ T5789] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 377.634737][ T31] audit: type=1400 audit(1788106952.491:3751): avc: denied { write } for pid=11423 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.661526][ T5789] usb 5-1: device descriptor read/8, error -71 [ 377.681892][ T9] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 377.699964][ T9] usb 9-1: device descriptor read/8, error -71 [ 377.771461][ T5789] usb usb5-port1: unable to enumerate USB device [ 377.782716][ T31] audit: type=1400 audit(1788106952.641:3752): avc: denied { write } for pid=11435 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.920719][ T31] audit: type=1400 audit(1788106952.781:3753): avc: denied { ioctl } for pid=11441 comm="syz.3.1097" path="/dev/dri/card0" dev="devtmpfs" ino=627 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 377.950805][ T9] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 377.975115][ T9] usb 9-1: device descriptor read/8, error -71 [ 378.087433][ T31] audit: type=1400 audit(1788106952.941:3754): avc: denied { listen } for pid=11441 comm="syz.3.1097" laddr=172.20.0.1 lport=12816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 378.089890][ T9] usb usb9-port1: unable to enumerate USB device [ 378.258515][ T31] audit: type=1400 audit(1788106953.091:3755): avc: denied { write } for pid=11451 comm="syz.4.1098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 378.360846][T11457] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1098'. [ 378.471789][T11456] smbdirect: ib_dev[syz5]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 378.471824][T11456] smbdirect: ib_dev[syz5]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 378.471907][T11456] smbdirect: ib_dev[syz5]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 378.592151][T11456] infiniband syz5: RDMA CMA: cma_listen_on_dev, error -98 [ 379.375082][ T31] audit: type=1400 audit(1788106954.211:3756): avc: denied { write } for pid=11438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.417868][ T31] audit: type=1400 audit(1788106954.271:3757): avc: denied { write } for pid=11459 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.763717][ T31] audit: type=1400 audit(1788106955.621:3758): avc: denied { mount } for pid=11481 comm="syz.8.1103" name="/" dev="autofs" ino=39742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 381.078605][ T31] audit: type=1400 audit(1788106955.931:3759): avc: denied { create } for pid=11481 comm="syz.8.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 381.110457][ T31] audit: type=1400 audit(1788106955.971:3760): avc: denied { write } for pid=11481 comm="syz.8.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 381.165650][ T31] audit: type=1400 audit(1788106956.021:3761): avc: denied { read } for pid=11481 comm="syz.8.1103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 381.734430][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 381.749252][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 381.758457][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 381.768602][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 381.777103][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 382.098763][T11505] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1107'. [ 382.742451][T11526] cgroup: noprefix used incorrectly [ 383.740113][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 383.740148][ T31] audit: type=1400 audit(1788106958.601:3774): avc: denied { mounton } for pid=11517 comm="syz.8.1109" path="/63/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 383.740216][ T31] audit: type=1400 audit(1788106958.601:3775): avc: denied { create } for pid=11527 comm="syz.3.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 383.777779][ T31] audit: type=1400 audit(1788106958.631:3776): avc: denied { bind } for pid=11527 comm="syz.3.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 383.781022][ T31] audit: type=1400 audit(1788106958.631:3777): avc: denied { getopt } for pid=11527 comm="syz.3.1110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 383.830173][ T5600] Bluetooth: hci5: command tx timeout [ 383.952554][ T31] audit: type=1400 audit(1788106958.811:3778): avc: denied { listen } for pid=11517 comm="syz.8.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 383.982922][ T31] audit: type=1400 audit(1788106958.841:3779): avc: denied { accept } for pid=11517 comm="syz.8.1109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 384.287912][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.307187][ T31] audit: type=1400 audit(1788106959.161:3780): avc: denied { write } for pid=11529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.352013][T11549] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1114'. [ 384.440515][ T1110] IPVS: starting estimator thread 0... [ 384.530725][ T31] audit: type=1400 audit(1788106959.391:3781): avc: denied { write } for pid=11553 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.561347][T11554] IPVS: using max 76 ests per chain, 182400 per kthread [ 384.633612][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.728583][T11560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1116'. [ 384.743472][T11560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1116'. [ 384.874871][ T31] audit: type=1400 audit(1788106959.731:3782): avc: denied { create } for pid=11558 comm="syz.4.1116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 384.895997][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.073462][T11575] netlink: 'syz.8.1117': attribute type 1 has an invalid length. [ 385.081432][T11575] netlink: 'syz.8.1117': attribute type 268 has an invalid length. [ 385.089599][T11575] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1117'. [ 385.190191][ T5789] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 385.199574][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.295108][ T31] audit: type=1400 audit(1788106960.151:3783): avc: denied { write } for pid=11566 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 385.350478][ T5789] usb 5-1: device descriptor read/64, error -71 [ 385.461319][ T5797] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 385.600557][ T5789] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 385.622535][ T5797] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 385.622591][ T5797] usb 4-1: too many configurations: 32, using maximum allowed: 8 [ 385.623744][ T5797] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 385.623769][ T5797] usb 4-1: can't read configurations, error -61 [ 385.658448][T11597] fuse: Unknown parameter 'roote#GÍ^^Xp{.U¥û>pÄ&' [ 385.729662][ T5789] usb 5-1: device descriptor read/64, error -71 [ 385.807380][ T5797] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 385.844112][ T5789] usb usb5-port1: attempt power cycle [ 385.909518][ T5600] Bluetooth: hci5: command tx timeout [ 386.040128][ T5797] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 386.040187][ T5797] usb 4-1: too many configurations: 32, using maximum allowed: 8 [ 386.271982][ T5797] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 386.272030][ T5797] usb 4-1: can't read configurations, error -61 [ 386.330695][ T5797] usb usb4-port1: attempt power cycle [ 386.369622][ T5789] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 386.427198][ T5789] usb 5-1: device descriptor read/8, error -71 [ 386.805344][ T5789] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 386.899479][ T5797] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 386.966927][T11606] openvswitch: netlink: Unexpected mask (mask=8000, allowed=10048) [ 387.099525][ T5789] usb 5-1: device descriptor read/8, error -71 [ 387.274397][T11609] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 387.309700][ T5789] usb usb5-port1: unable to enumerate USB device [ 387.554720][ T5797] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 387.554775][ T5797] usb 4-1: too many configurations: 32, using maximum allowed: 8 [ 387.608617][ T5797] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 387.634169][ T5797] usb 4-1: can't read configurations, error -61 [ 387.999555][ T5600] Bluetooth: hci5: command tx timeout [ 388.199547][ T5797] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 388.364197][ T5797] usb 4-1: device descriptor read/8, error -71 [ 388.469683][ T5797] usb usb4-port1: unable to enumerate USB device [ 388.578548][T11496] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.578640][T11496] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.578769][T11496] bridge_slave_0: entered allmulticast mode [ 388.594488][T11496] bridge_slave_0: entered promiscuous mode [ 388.758642][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1124'. [ 388.969009][T11496] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.969091][T11496] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.969218][T11496] bridge_slave_1: entered allmulticast mode [ 388.972772][T11496] bridge_slave_1: entered promiscuous mode [ 388.996096][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 388.996128][ T31] audit: type=1400 audit(1788106963.851:3798): avc: denied { write } for pid=11641 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.036094][ T31] audit: type=1400 audit(1788106963.891:3799): avc: denied { map } for pid=11626 comm="syz.3.1123" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 389.045980][ T31] audit: type=1400 audit(1788106963.901:3800): avc: denied { cmd } for pid=11626 comm="syz.3.1123" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=io_uring permissive=1 [ 389.061980][T11628] No fuse device found [ 389.062025][T11628] No fuse device found [ 389.062048][T11628] No fuse device found [ 389.062070][T11628] No fuse device found [ 389.062093][T11628] No fuse device found [ 389.062122][T11628] No fuse device found [ 389.062145][T11628] No fuse device found [ 389.062166][T11628] No fuse device found [ 389.062189][T11628] No fuse device found [ 389.062210][T11628] No fuse device found [ 389.084662][ T59] bridge_slave_1: left allmulticast mode [ 389.084686][ T59] bridge_slave_1: left promiscuous mode [ 389.084859][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.222016][ T59] bridge_slave_0: left allmulticast mode [ 389.225862][ T59] bridge_slave_0: left promiscuous mode [ 389.226010][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.266569][ T31] audit: type=1400 audit(1788106964.121:3801): avc: denied { create } for pid=11626 comm="syz.3.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 389.280709][ T31] audit: type=1400 audit(1788106964.141:3802): avc: denied { setopt } for pid=11626 comm="syz.3.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 389.288433][ T31] audit: type=1400 audit(1788106964.141:3803): avc: denied { map } for pid=11626 comm="syz.3.1123" path="socket:[40550]" dev="sockfs" ino=40550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 389.288671][ T31] audit: type=1400 audit(1788106964.141:3804): avc: denied { read } for pid=11626 comm="syz.3.1123" path="socket:[40550]" dev="sockfs" ino=40550 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 389.333503][ T31] audit: type=1400 audit(1788106964.191:3805): avc: denied { bind } for pid=11648 comm="syz.4.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 389.662743][ T5968] Bluetooth: hci0: Frame reassembly failed (-84) [ 390.070286][ T5608] Bluetooth: hci5: command tx timeout [ 390.468818][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.482062][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.493327][ T59] bond0 (unregistering): Released all slaves [ 390.607500][T11496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.621807][ T31] audit: type=1400 audit(1788106965.481:3806): avc: denied { connect } for pid=11654 comm="syz.6.1128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 390.626501][T11496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.006490][T11496] team0: Port device team_slave_0 added [ 391.177895][T11496] team0: Port device team_slave_1 added [ 391.323745][ T31] audit: type=1400 audit(1788106966.181:3807): avc: denied { sqpoll } for pid=11664 comm="syz.3.1130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 391.402646][T11496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.402682][T11496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.402703][T11496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.403916][T11496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.403926][T11496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.403943][T11496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.526995][ T59] hsr_slave_0: left promiscuous mode [ 391.533019][ T59] hsr_slave_1: left promiscuous mode [ 391.533656][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.533672][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.562582][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.562620][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.612862][ T59] veth1_macvtap: left promiscuous mode [ 391.612896][ T59] veth0_macvtap: left promiscuous mode [ 391.612968][ T59] veth1_vlan: left promiscuous mode [ 391.613014][ T59] veth0_vlan: left promiscuous mode [ 391.654389][T11672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.669435][ T5600] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 391.672435][T11672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.692539][T11672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.692911][T11672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.710731][T11672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.711090][T11672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.909564][ T5811] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 392.260664][ T9] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 392.360907][ T59] team0 (unregistering): Port device team_slave_1 removed [ 392.397882][ T59] team0 (unregistering): Port device team_slave_0 removed [ 392.429257][ T9] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 392.461443][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.580893][ T9] usb 9-1: config 0 descriptor?? [ 392.628001][ T9] cp210x 9-1:0.0: cp210x converter detected [ 392.998375][ T9] cp210x 9-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 393.019266][ T9] usb 9-1: cp210x converter now attached to ttyUSB0 [ 393.026993][T11496] hsr_slave_0: entered promiscuous mode [ 393.027817][T11496] hsr_slave_1: entered promiscuous mode [ 393.368003][T11701] syzkaller0: entered promiscuous mode [ 393.368028][T11701] syzkaller0: entered allmulticast mode [ 393.709653][ T5811] usb 4-1: device descriptor read/64, error -71 [ 393.895500][ T5335] usb 9-1: USB disconnect, device number 23 [ 393.979412][ T5811] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 394.111298][ T5335] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 394.129446][ T5811] usb 4-1: Using ep0 maxpacket: 16 [ 394.130115][ T5811] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 394.153263][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.153301][ T5811] usb 4-1: Product: syz [ 394.153328][ T5811] usb 4-1: Manufacturer: syz [ 394.153342][ T5811] usb 4-1: SerialNumber: syz [ 394.231932][ T5811] usb 4-1: config 0 descriptor?? [ 394.309605][ T31] kauditd_printk_skb: 9 callbacks suppressed [ 394.309648][ T31] audit: type=1400 audit(1788106969.151:3817): avc: denied { write } for pid=11726 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.572583][ T5811] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 394.756862][ T5811] usb 4-1: clie_3_5_startup: get config number bad return length: 0 [ 394.756992][ T5811] visor 4-1:0.0: probe with driver visor failed with error -5 [ 394.834593][ T5335] cp210x 9-1:0.0: device disconnected [ 394.848158][ T31] audit: type=1400 audit(1788106969.701:3818): avc: denied { map } for pid=11707 comm="syz.3.1135" path="/dev/comedi0" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 394.874746][ T5701] usb 4-1: USB disconnect, device number 66 [ 395.018587][T11731] cgroup: noprefix used incorrectly [ 396.030497][ T31] audit: type=1400 audit(1788106970.891:3819): avc: denied { getopt } for pid=11732 comm="syz.4.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 396.322792][T11746] can0: slcan on ptm0. [ 396.335202][ T31] audit: type=1400 audit(1788106971.191:3820): avc: denied { ioctl } for pid=11745 comm="syz.4.1143" path="socket:[40808]" dev="sockfs" ino=40808 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 396.457279][ T31] audit: type=1400 audit(1788106971.311:3821): avc: denied { write } for pid=11751 comm="syz.3.1145" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 396.717989][ T31] audit: type=1400 audit(1788106971.571:3822): avc: denied { write } for pid=11737 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.766788][T11745] can0 (unregistered): slcan off ptm0. [ 397.066441][T11773] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1141'. [ 397.067103][ T31] audit: type=1400 audit(1788106971.911:3823): avc: denied { read } for pid=11765 comm="syz.8.1141" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 397.067273][ T31] audit: type=1400 audit(1788106971.911:3824): avc: denied { read open } for pid=11765 comm="syz.8.1141" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 397.394307][ T31] audit: type=1400 audit(1788106972.251:3825): avc: denied { write } for pid=11771 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.556462][T11496] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 397.577483][T11496] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.583897][T11496] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 397.599553][T11496] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 397.607453][T11496] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 397.620756][T11496] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.621064][ T9762] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 397.644535][T11496] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 397.696954][T11496] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.750109][ T9762] usb 4-1: device descriptor read/64, error -71 [ 397.779857][ T1094] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.780101][ T1094] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.780130][ T1094] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.780156][ T1094] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.826597][T11798] FAULT_INJECTION: forcing a failure. [ 397.826597][T11798] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 397.826646][T11798] CPU: 1 UID: 0 PID: 11798 Comm: syz.8.1153 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.826668][T11798] Tainted: [L]=SOFTLOCKUP [ 397.826674][T11798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 397.826683][T11798] Call Trace: [ 397.826688][T11798] [ 397.826695][T11798] dump_stack_lvl+0x100/0x190 [ 397.826723][T11798] should_fail_ex.cold+0x5/0xa [ 397.826742][T11798] ? prepare_alloc_pages+0x16d/0x5b0 [ 397.826764][T11798] should_fail_alloc_page+0xeb/0x140 [ 397.826785][T11798] prepare_alloc_pages+0x1f0/0x5b0 [ 397.826808][T11798] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 397.826834][T11798] ? __pfx_get_page_from_freelist+0x10/0x10 [ 397.826858][T11798] ? prepare_alloc_pages+0x1f0/0x5b0 [ 397.826877][T11798] ? is_bpf_text_address+0x94/0x1a0 [ 397.826899][T11798] ? rcu_is_watching+0x13/0xc0 [ 397.826921][T11798] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 397.826948][T11798] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 397.826978][T11798] ? stack_trace_save+0x8e/0xc0 [ 397.827001][T11798] ? __pfx_stack_trace_save+0x10/0x10 [ 397.827023][T11798] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 397.827048][T11798] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 397.827076][T11798] ? is_bpf_text_address+0x94/0x1a0 [ 397.827100][T11798] ? kasan_save_track+0x14/0x30 [ 397.827116][T11798] ? __kasan_slab_alloc+0x89/0x90 [ 397.827133][T11798] ? kmem_cache_alloc_node_noprof+0x282/0x6e0 [ 397.827149][T11798] ? alloc_vmap_area+0x1814/0x2bb0 [ 397.827165][T11798] ? __get_vm_area_node+0x1ed/0x350 [ 397.827181][T11798] ? __vmalloc_node_range_noprof+0x268/0x1420 [ 397.827200][T11798] ? __vmalloc_node_noprof+0xad/0xf0 [ 397.827218][T11798] ? __vmalloc_noprof+0xa3/0x120 [ 397.827236][T11798] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 397.827254][T11798] ? bpf_prog_alloc+0x3b/0x200 [ 397.827270][T11798] ? bpf_prog_load+0x49e/0x2a80 [ 397.827288][T11798] ? __sys_bpf+0x1f46/0x4a30 [ 397.827309][T11798] ? __x64_sys_bpf+0xce/0x140 [ 397.827323][T11798] ? do_syscall_64+0x123/0x790 [ 397.827341][T11798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.827362][T11798] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 397.827391][T11798] ? policy_nodemask+0xed/0x4f0 [ 397.827412][T11798] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 397.827448][T11798] __kasan_populate_vmalloc+0xf0/0x210 [ 397.827478][T11798] alloc_vmap_area+0x95d/0x2bb0 [ 397.827501][T11798] ? kasan_save_track+0x14/0x30 [ 397.827517][T11798] ? __kasan_kmalloc+0xaa/0xb0 [ 397.827534][T11798] ? __pfx_alloc_vmap_area+0x10/0x10 [ 397.827552][T11798] ? __get_vm_area_node+0x124/0x350 [ 397.827572][T11798] __get_vm_area_node+0x1ed/0x350 [ 397.827595][T11798] __vmalloc_node_range_noprof+0x268/0x1420 [ 397.827616][T11798] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 397.827637][T11798] ? up_write+0x2dc/0x5b0 [ 397.827659][T11798] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 397.827678][T11798] ? lock_acquire+0x1d1/0x380 [ 397.827696][T11798] ? find_held_lock+0x2b/0x80 [ 397.827717][T11798] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 397.827736][T11798] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 397.827761][T11798] ? avc_has_perm_noaudit+0x145/0x3b0 [ 397.827782][T11798] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 397.827800][T11798] __vmalloc_node_noprof+0xad/0xf0 [ 397.827819][T11798] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 397.827841][T11798] __vmalloc_noprof+0xa3/0x120 [ 397.827860][T11798] ? __pfx___vmalloc_noprof+0x10/0x10 [ 397.827881][T11798] ? rcu_is_watching+0x13/0xc0 [ 397.827901][T11798] ? cap_capable+0x107/0x430 [ 397.827924][T11798] bpf_prog_alloc_no_stats+0x59/0x690 [ 397.827942][T11798] ? security_capable+0x80/0x260 [ 397.827964][T11798] bpf_prog_alloc+0x3b/0x200 [ 397.827981][T11798] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 397.828000][T11798] bpf_prog_load+0x49e/0x2a80 [ 397.828024][T11798] ? __pfx_bpf_prog_load+0x10/0x10 [ 397.828062][T11798] __sys_bpf+0x1f46/0x4a30 [ 397.828095][T11798] ? __pfx___sys_bpf+0x10/0x10 [ 397.828119][T11798] ? find_held_lock+0x2b/0x80 [ 397.828139][T11798] ? get_pid_task+0xfc/0x250 [ 397.828159][T11798] ? get_pid_task+0xfc/0x250 [ 397.828186][T11798] ? find_held_lock+0x2b/0x80 [ 397.828211][T11798] ? rcu_read_lock_any_held+0x6a/0x90 [ 397.828232][T11798] ? find_held_lock+0x2b/0x80 [ 397.828252][T11798] ? ksys_write+0x190/0x250 [ 397.828266][T11798] ? ksys_write+0x190/0x250 [ 397.828280][T11798] ? lock_acquire+0x1d1/0x380 [ 397.828310][T11798] ? fput+0x7c/0x100 [ 397.828328][T11798] ? ksys_write+0x1ac/0x250 [ 397.828345][T11798] ? __x64_sys_bpf+0xce/0x140 [ 397.828359][T11798] __x64_sys_bpf+0xce/0x140 [ 397.828374][T11798] ? do_syscall_64+0xae/0x790 [ 397.828392][T11798] do_syscall_64+0x123/0x790 [ 397.828411][T11798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.828427][T11798] RIP: 0033:0x7fb190f9e159 [ 397.828441][T11798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.828456][T11798] RSP: 002b:00007fb191e47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.828471][T11798] RAX: ffffffffffffffda RBX: 00007fb191225fa0 RCX: 00007fb190f9e159 [ 397.828481][T11798] RDX: 0000000000000094 RSI: 0000200000001080 RDI: 0000000000000005 [ 397.828491][T11798] RBP: 00007fb191e47090 R08: 0000000000000000 R09: 0000000000000000 [ 397.828501][T11798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.828510][T11798] R13: 00007fb191226038 R14: 00007fb191225fa0 R15: 00007ffd05e127e8 [ 397.828532][T11798] [ 397.839285][T11798] syz.8.1153: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 397.844641][T11798] CPU: 1 UID: 0 PID: 11798 Comm: syz.8.1153 Tainted: G L syzkaller #0 PREEMPT(full) [ 397.844664][T11798] Tainted: [L]=SOFTLOCKUP [ 397.844670][T11798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 397.844679][T11798] Call Trace: [ 397.844685][T11798] [ 397.844691][T11798] dump_stack_lvl+0x100/0x190 [ 397.844718][T11798] warn_alloc.cold+0x9e/0xb2 [ 397.844736][T11798] ? __pfx_warn_alloc+0x10/0x10 [ 397.844759][T11798] ? lockdep_hardirqs_on+0x7d/0x110 [ 397.844778][T11798] ? __get_vm_area_node+0x2f0/0x350 [ 397.844801][T11798] ? __get_vm_area_node+0x22b/0x350 [ 397.844824][T11798] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 397.844849][T11798] ? up_write+0x2dc/0x5b0 [ 397.844871][T11798] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 397.844891][T11798] ? lock_acquire+0x1d1/0x380 [ 397.844908][T11798] ? find_held_lock+0x2b/0x80 [ 397.844929][T11798] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 397.844948][T11798] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 397.844972][T11798] ? avc_has_perm_noaudit+0x145/0x3b0 [ 397.844991][T11798] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 397.845009][T11798] __vmalloc_node_noprof+0xad/0xf0 [ 397.845029][T11798] ? bpf_prog_alloc_no_stats+0x59/0x690 [ 397.845049][T11798] __vmalloc_noprof+0xa3/0x120 [ 397.845068][T11798] ? __pfx___vmalloc_noprof+0x10/0x10 [ 397.845094][T11798] ? rcu_is_watching+0x13/0xc0 [ 397.845115][T11798] ? cap_capable+0x107/0x430 [ 397.845138][T11798] bpf_prog_alloc_no_stats+0x59/0x690 [ 397.845156][T11798] ? security_capable+0x80/0x260 [ 397.845179][T11798] bpf_prog_alloc+0x3b/0x200 [ 397.845196][T11798] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 397.845215][T11798] bpf_prog_load+0x49e/0x2a80 [ 397.845240][T11798] ? __pfx_bpf_prog_load+0x10/0x10 [ 397.845278][T11798] __sys_bpf+0x1f46/0x4a30 [ 397.845307][T11798] ? __pfx___sys_bpf+0x10/0x10 [ 397.845330][T11798] ? find_held_lock+0x2b/0x80 [ 397.845350][T11798] ? get_pid_task+0xfc/0x250 [ 397.845369][T11798] ? get_pid_task+0xfc/0x250 [ 397.845396][T11798] ? find_held_lock+0x2b/0x80 [ 397.845421][T11798] ? rcu_read_lock_any_held+0x6a/0x90 [ 397.845443][T11798] ? find_held_lock+0x2b/0x80 [ 397.845463][T11798] ? ksys_write+0x190/0x250 [ 397.845478][T11798] ? ksys_write+0x190/0x250 [ 397.845491][T11798] ? lock_acquire+0x1d1/0x380 [ 397.845521][T11798] ? fput+0x7c/0x100 [ 397.845540][T11798] ? ksys_write+0x1ac/0x250 [ 397.845557][T11798] ? __x64_sys_bpf+0xce/0x140 [ 397.845571][T11798] __x64_sys_bpf+0xce/0x140 [ 397.845587][T11798] ? do_syscall_64+0xae/0x790 [ 397.845605][T11798] do_syscall_64+0x123/0x790 [ 397.845624][T11798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.845641][T11798] RIP: 0033:0x7fb190f9e159 [ 397.845655][T11798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.845670][T11798] RSP: 002b:00007fb191e47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.845684][T11798] RAX: ffffffffffffffda RBX: 00007fb191225fa0 RCX: 00007fb190f9e159 [ 397.845694][T11798] RDX: 0000000000000094 RSI: 0000200000001080 RDI: 0000000000000005 [ 397.845704][T11798] RBP: 00007fb191e47090 R08: 0000000000000000 R09: 0000000000000000 [ 397.845713][T11798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.845722][T11798] R13: 00007fb191226038 R14: 00007fb191225fa0 R15: 00007ffd05e127e8 [ 397.845743][T11798] [ 397.846551][T11794] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1152'. [ 397.852459][T11798] Mem-Info: [ 397.852470][T11798] active_anon:13051 inactive_anon:14 isolated_anon:0 [ 397.852470][T11798] active_file:3401 inactive_file:28038 isolated_file:0 [ 397.852470][T11798] unevictable:0 dirty:320 writeback:0 [ 397.852470][T11798] slab_reclaimable:7733 slab_unreclaimable:99869 [ 397.852470][T11798] mapped:31092 shmem:554 pagetables:4100 [ 397.852470][T11798] sec_pagetables:0 bounce:0 [ 397.852470][T11798] kernel_misc_reclaimable:0 [ 397.852470][T11798] free:1299566 free_pcp:25124 free_cma:0 [ 397.852508][T11798] Node 0 active_anon:52204kB inactive_anon:56kB active_file:13604kB inactive_file:111952kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124368kB dirty:1272kB writeback:0kB shmem:2216kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13768kB pagetables:16272kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 397.852547][T11798] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 397.852584][T11798] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 397.852626][T11798] lowmem_reserve[]: 0 2470 2471 2471 2471 [ 397.852654][T11798] Node 0 DMA32 free:1247644kB boost:0kB min:33992kB low:42488kB high:50984kB reserved_highatomic:0kB free_highatomic:0kB active_anon:52204kB inactive_anon:56kB active_file:13604kB inactive_file:111952kB unevictable:0kB writepending:1272kB zspages:340kB present:3129332kB managed:2530284kB mlocked:0kB bounce:0kB free_pcp:100496kB local_pcp:55560kB free_cma:0kB [ 397.852699][T11798] lowmem_reserve[]: 0 0 0 0 0 [ 397.852725][T11798] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:76kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 397.852766][T11798] lowmem_reserve[]: 0 0 0 0 0 [ 397.852791][T11798] Node 1 Normal free:3935264kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:8kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 397.852833][T11798] lowmem_reserve[]: 0 0 0 0 0 [ 397.852858][T11798] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 397.852974][T11798] Node 0 DMA32: 6012*4kB (UME) 2388*8kB (UME) 1979*16kB (UME) 1922*32kB (UME) 912*64kB (UME) 812*128kB (UME) 545*256kB (UME) 279*512kB (UME) 151*1024kB (UME) 10*2048kB (UM) 120*4096kB (UM) = 1247616kB [ 397.853104][T11798] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 397.853181][T11798] Node 1 Normal: 2*4kB (UM) 5*8kB (UM) 5*16kB (UM) 3*32kB (UM) 5*64kB (UM) 4*128kB (UM) 2*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3935264kB [ 397.855714][T11798] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.855727][T11798] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 397.855739][T11798] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 397.855751][T11798] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 397.855763][T11798] 31990 total pagecache pages [ 397.855769][T11798] 1 pages in swap cache [ 397.855774][T11798] Free swap = 124876kB [ 397.855779][T11798] Total swap = 124996kB [ 397.855785][T11798] 2097051 pages RAM [ 397.855790][T11798] 0 pages HighMem/MovableOnly [ 397.855795][T11798] 432845 pages reserved [ 397.855801][T11798] 0 pages cma reserved [ 398.000480][ T31] audit: type=1400 audit(1788106972.801:3826): avc: denied { ioctl } for pid=11795 comm="syz.6.1154" path="socket:[42045]" dev="sockfs" ino=42045 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 398.127267][ T9762] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 398.419581][ T9762] usb 4-1: device descriptor read/64, error -71 [ 398.529742][ T9762] usb usb4-port1: attempt power cycle [ 398.929547][ T9762] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 398.978187][ T9762] usb 4-1: device descriptor read/8, error -71 [ 399.299617][ T9762] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 399.353283][ T9762] usb 4-1: device descriptor read/8, error -71 [ 399.479671][ T9762] usb usb4-port1: unable to enumerate USB device [ 400.013671][T11496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.100694][T11496] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.133678][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.133780][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.187751][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.187859][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.270380][ T31] audit: type=1400 audit(1788106975.131:3827): avc: denied { write } for pid=11785 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.311034][ T31] audit: type=1400 audit(1788106975.161:3828): avc: denied { ioctl } for pid=11821 comm="syz.6.1158" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 400.339045][T11827] FAULT_INJECTION: forcing a failure. [ 400.339045][T11827] name failslab, interval 1, probability 0, space 0, times 0 [ 400.339095][T11827] CPU: 1 UID: 0 PID: 11827 Comm: syz.4.1159 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.339122][T11827] Tainted: [L]=SOFTLOCKUP [ 400.339129][T11827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 400.339139][T11827] Call Trace: [ 400.339146][T11827] [ 400.339154][T11827] dump_stack_lvl+0x100/0x190 [ 400.339183][T11827] should_fail_ex.cold+0x5/0xa [ 400.339214][T11827] should_failslab+0xc2/0x120 [ 400.339236][T11827] __kmalloc_cache_noprof+0x91/0x6d0 [ 400.339262][T11827] ? refill_pi_state_cache+0x91/0x260 [ 400.339293][T11827] refill_pi_state_cache+0x91/0x260 [ 400.339318][T11827] futex_requeue+0x8a4/0x22e0 [ 400.339346][T11827] ? __pfx_futex_wake_mark+0x10/0x10 [ 400.339374][T11827] ? find_held_lock+0x2b/0x80 [ 400.339397][T11827] ? __pfx_futex_requeue+0x10/0x10 [ 400.339435][T11827] ? rcu_read_lock_any_held+0x6a/0x90 [ 400.339458][T11827] ? find_held_lock+0x2b/0x80 [ 400.339483][T11827] do_futex+0x3ae/0x440 [ 400.339505][T11827] ? __pfx_do_futex+0x10/0x10 [ 400.339528][T11827] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 400.339551][T11827] __x64_sys_futex+0x34f/0x4d0 [ 400.339575][T11827] ? __pfx___x64_sys_futex+0x10/0x10 [ 400.339605][T11827] do_syscall_64+0x123/0x790 [ 400.339625][T11827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.339642][T11827] RIP: 0033:0x7f3f26f9e159 [ 400.339657][T11827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.339673][T11827] RSP: 002b:00007f3f27e3d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 400.339691][T11827] RAX: ffffffffffffffda RBX: 00007f3f27225fa0 RCX: 00007f3f26f9e159 [ 400.339703][T11827] RDX: 0000000000000001 RSI: 000000000000000c RDI: 0000000000000000 [ 400.339713][T11827] RBP: 00007f3f27035024 R08: 0000200000048000 R09: 0000000000000000 [ 400.339724][T11827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.339735][T11827] R13: 00007f3f27226038 R14: 00007f3f27225fa0 R15: 00007fff55ed88c8 [ 400.339756][T11827] [ 400.459573][ T5811] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 400.466923][T11824] syzkaller1: entered promiscuous mode [ 400.466942][T11824] syzkaller1: entered allmulticast mode [ 400.614340][ T31] audit: type=1400 audit(1788106975.471:3829): avc: denied { create } for pid=11834 comm="syz.8.1161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 400.614880][ T31] audit: type=1400 audit(1788106975.471:3830): avc: denied { ioctl } for pid=11834 comm="syz.8.1161" path="socket:[42106]" dev="sockfs" ino=42106 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 400.634890][ T5811] usb 4-1: Using ep0 maxpacket: 16 [ 400.635100][ T31] audit: type=1400 audit(1788106975.491:3831): avc: denied { write } for pid=11835 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 400.662187][ T5811] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 400.668386][ T5811] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 400.668412][ T5811] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 400.668430][ T5811] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 400.668446][ T5811] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 400.668463][ T5811] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 400.668480][ T5811] usb 4-1: config 0 has no interface number 0 [ 400.668509][ T5811] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 400.668533][ T5811] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 400.668553][ T5811] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 400.668587][ T5811] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 400.668614][ T5811] usb 4-1: config 0 interface 125 has no altsetting 2 [ 400.752341][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.752367][ T5811] usb 4-1: Product: syz [ 400.752382][ T5811] usb 4-1: Manufacturer: syz [ 400.752395][ T5811] usb 4-1: SerialNumber: syz [ 400.800835][ T5811] usb 4-1: config 0 descriptor?? [ 400.839294][ T5811] usb 4-1: selecting invalid altsetting 2 [ 400.845227][ T5811] uss720 4-1:0.125: probe with driver uss720 failed with error -22 [ 401.242488][ T9762] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 401.385818][ T5715] usb 4-1: USB disconnect, device number 71 [ 401.400683][ T9762] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 401.403233][ T9762] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.403259][ T9762] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.403277][ T9762] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 401.403308][ T9762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.423858][ T9762] usb 5-1: config 0 descriptor?? [ 401.490638][ T31] audit: type=1400 audit(1788106976.351:3832): avc: denied { write } for pid=11850 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.657161][T11496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.686647][ T31] audit: type=1400 audit(1788106976.541:3833): avc: denied { write } for pid=11869 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.737469][T11496] veth0_vlan: entered promiscuous mode [ 401.752577][T11496] veth1_vlan: entered promiscuous mode [ 401.789066][T11496] veth0_macvtap: entered promiscuous mode [ 401.801643][T11496] veth1_macvtap: entered promiscuous mode [ 401.827130][T11496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.851129][T11496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.974876][ T9762] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 401.980059][ T55] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.981228][ T55] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.981268][ T55] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.981296][ T55] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.133506][ T5968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.133544][ T5968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.278503][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.278537][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.326809][T11876] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1163'. [ 402.328532][T11876] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1163'. [ 402.337018][T11876] netlink: 'syz.3.1163': attribute type 32 has an invalid length. [ 402.337045][T11876] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1163'. [ 402.541043][T11891] netlink: 'syz.3.1165': attribute type 7 has an invalid length. [ 402.591650][ T31] audit: type=1400 audit(1788106977.441:3834): avc: denied { write } for pid=11873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.708636][ T31] audit: type=1400 audit(1788106977.561:3835): avc: denied { write } for pid=11894 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.958249][T11904] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 402.982496][ T31] audit: type=1400 audit(1788106977.841:3836): avc: denied { setopt } for pid=11900 comm="syz.2.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 403.072548][T11910] cgroup: noprefix used incorrectly [ 404.508355][T11918] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 404.508407][T11918] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 404.508462][T11918] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 404.583423][T11918] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 404.677795][T11922] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1174'. [ 404.970639][ T9] usb 5-1: USB disconnect, device number 58 [ 404.977992][ T1169] smbdirect: ib_dev[syz2] removed [ 405.768068][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 405.768111][ T31] audit: type=1400 audit(1788106980.621:3842): avc: denied { bind } for pid=11938 comm="syz.2.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 405.776057][ T31] audit: type=1400 audit(1788106980.631:3843): avc: denied { write } for pid=11938 comm="syz.2.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 405.866766][T11942] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1179'. [ 405.866807][T11942] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1179'. [ 406.084818][T11947] lo speed is unknown, defaulting to 1000 [ 406.084888][T11947] lo speed is unknown, defaulting to 1000 [ 406.085457][T11947] lo speed is unknown, defaulting to 1000 [ 406.107321][T11947] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 406.107368][T11947] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 406.107406][T11947] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 406.181194][T11947] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 406.207817][ T31] audit: type=1400 audit(1788106981.061:3844): avc: denied { write } for pid=11930 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.249640][ T10] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 406.302695][T11947] lo speed is unknown, defaulting to 1000 [ 406.309236][T11947] lo speed is unknown, defaulting to 1000 [ 406.321001][ T31] audit: type=1400 audit(1788106981.171:3845): avc: denied { append } for pid=11952 comm="syz.8.1171" name="sg0" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 406.321060][ T31] audit: type=1400 audit(1788106981.171:3846): avc: denied { open } for pid=11952 comm="syz.8.1171" path="/dev/sg0" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 406.327128][T11947] lo speed is unknown, defaulting to 1000 [ 406.328294][T11947] lo speed is unknown, defaulting to 1000 [ 406.334563][T11947] lo speed is unknown, defaulting to 1000 [ 406.336382][ T31] audit: type=1400 audit(1788106981.191:3847): avc: denied { ioctl } for pid=11952 comm="syz.8.1171" path="/dev/sg0" dev="devtmpfs" ino=1078 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 406.441581][ T10] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 406.464195][ T10] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 406.464233][ T10] usb 4-1: Product: syz [ 406.464258][ T10] usb 4-1: Manufacturer: syz [ 406.464276][ T10] usb 4-1: SerialNumber: syz [ 406.496184][ T10] usb 4-1: config 0 descriptor?? [ 406.506721][ T10] ch341 4-1:0.0: ch341-uart converter detected [ 406.521959][ T31] audit: type=1400 audit(1788106981.381:3848): avc: denied { write } for pid=11958 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 406.992634][ T31] audit: type=1400 audit(1788106981.851:3849): avc: denied { write } for pid=11960 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.006824][T11972] cgroup: noprefix used incorrectly [ 408.372895][T11981] FAULT_INJECTION: forcing a failure. [ 408.372895][T11981] name failslab, interval 1, probability 0, space 0, times 0 [ 408.372943][T11981] CPU: 1 UID: 0 PID: 11981 Comm: syz.6.1183 Tainted: G L syzkaller #0 PREEMPT(full) [ 408.372967][T11981] Tainted: [L]=SOFTLOCKUP [ 408.372972][T11981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 408.372982][T11981] Call Trace: [ 408.372988][T11981] [ 408.372994][T11981] dump_stack_lvl+0x100/0x190 [ 408.373023][T11981] should_fail_ex.cold+0x5/0xa [ 408.373047][T11981] should_failslab+0xc2/0x120 [ 408.373068][T11981] kmem_cache_alloc_noprof+0x92/0x6a0 [ 408.373084][T11981] ? __pfx_map_id_range_down+0x10/0x10 [ 408.373102][T11981] ? security_inode_alloc+0x3b/0x2c0 [ 408.373129][T11981] security_inode_alloc+0x3b/0x2c0 [ 408.373153][T11981] inode_init_always_gfp+0xc6f/0xfb0 [ 408.373176][T11981] alloc_inode+0x8e/0x250 [ 408.373200][T11981] new_inode+0x22/0x1c0 [ 408.373225][T11981] proc_pid_make_inode+0x22/0x160 [ 408.373248][T11981] ? d_lookup+0xe7/0x190 [ 408.373264][T11981] proc_ns_instantiate+0x57/0x100 [ 408.373286][T11981] proc_fill_cache+0x2a3/0x3a0 [ 408.373307][T11981] ? __pfx_proc_ns_instantiate+0x10/0x10 [ 408.373329][T11981] ? __pfx_proc_fill_cache+0x10/0x10 [ 408.373357][T11981] proc_ns_dir_readdir+0x1ba/0x530 [ 408.373382][T11981] iterate_dir+0x296/0xae0 [ 408.373401][T11981] __x64_sys_getdents64+0x13b/0x2c0 [ 408.373420][T11981] ? __pfx___x64_sys_getdents64+0x10/0x10 [ 408.373435][T11981] ? fput+0x7c/0x100 [ 408.373454][T11981] ? __pfx_filldir64+0x10/0x10 [ 408.373487][T11981] do_syscall_64+0x123/0x790 [ 408.373509][T11981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.373526][T11981] RIP: 0033:0x7f8a6d59e159 [ 408.373545][T11981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.373561][T11981] RSP: 002b:00007f8a6e443028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 408.373579][T11981] RAX: ffffffffffffffda RBX: 00007f8a6d825fa0 RCX: 00007f8a6d59e159 [ 408.373590][T11981] RDX: 0000000000001063 RSI: 00002000000000c0 RDI: 0000000000000003 [ 408.373600][T11981] RBP: 00007f8a6e443090 R08: 0000000000000000 R09: 0000000000000000 [ 408.373610][T11981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.373620][T11981] R13: 00007f8a6d826038 R14: 00007f8a6d825fa0 R15: 00007ffebf9bb9a8 [ 408.373646][T11981] [ 408.800464][T11982] Invalid ELF header magic: != ELF [ 408.803529][ T31] audit: type=1400 audit(1788106983.661:3850): avc: denied { module_load } for pid=11978 comm="syz.4.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 409.081649][ T10] usb 4-1: failed to send control message: -110 [ 409.081705][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 409.293043][ T31] audit: type=1400 audit(1788106984.151:3851): avc: denied { write } for pid=11987 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.392991][ T983] usb 4-1: USB disconnect, device number 72 [ 409.401154][ T983] ch341 4-1:0.0: device disconnected [ 410.305173][T12016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=12016 comm=syz.3.1189 [ 410.463378][T12016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1189'. [ 410.509745][ T983] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 410.557773][T12021] lo speed is unknown, defaulting to 1000 [ 410.644733][T12027] cgroup: noprefix used incorrectly [ 410.670728][ T983] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 410.672557][ T983] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 410.672581][ T983] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 410.672603][ T983] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 410.672621][ T983] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 410.676996][ T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.677015][ T983] usb 5-1: Product: syz [ 410.677028][ T983] usb 5-1: Manufacturer: syz [ 410.677041][ T983] usb 5-1: SerialNumber: syz [ 410.744635][ T983] usb 5-1: config 0 descriptor?? [ 410.748077][T12011] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 410.755443][ T983] usb 5-1: ucan: probing device on interface #0 [ 410.755464][ T983] usb 5-1: ucan: invalid in_ep MaxPacketSize [ 410.755476][ T983] usb 5-1: ucan: probe failed; try to update the device firmware [ 410.920180][ T31] audit: type=1400 audit(1788106985.781:3852): avc: denied { write } for pid=11995 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.031024][T12011] syzkaller0: entered promiscuous mode [ 411.031063][T12011] syzkaller0: entered allmulticast mode [ 411.070341][ T31] audit: type=1400 audit(1788106985.931:3853): avc: denied { write } for pid=12044 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.853778][ T9762] usb 5-1: USB disconnect, device number 59 [ 412.060850][ T31] audit: type=1400 audit(1788106986.911:3854): avc: denied { bind } for pid=12058 comm="syz.8.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 412.060908][ T31] audit: type=1400 audit(1788106986.911:3855): avc: denied { node_bind } for pid=12058 comm="syz.8.1196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 412.108761][ T31] audit: type=1400 audit(1788106986.961:3856): avc: denied { view } for pid=12058 comm="syz.8.1196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 412.162029][T12063] binder: BINDER_SET_CONTEXT_MGR already set [ 412.162059][T12063] binder: 12062:12063 ioctl 4018620d 200000000100 returned -16 [ 412.177706][T12063] binder: 12062:12063 ioctl c0306201 0 returned -14 [ 412.259084][ T31] audit: type=1400 audit(1788106987.111:3857): avc: denied { write } for pid=12050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.466975][ T31] audit: type=1400 audit(1788106987.321:3858): avc: denied { write } for pid=12071 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 412.523734][ T31] audit: type=1400 audit(1788106987.381:3859): avc: denied { mount } for pid=12068 comm="syz.3.1198" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 412.687034][ T31] audit: type=1400 audit(1788106987.541:3860): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 412.786080][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1201'. [ 412.909918][ T31] audit: type=1400 audit(1788106987.771:3861): avc: denied { bind } for pid=12082 comm="syz.4.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 413.682844][T12109] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 413.979535][ T9762] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 414.158764][ T9762] usb 5-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 414.180794][ T9762] usb 5-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 414.190390][ T9762] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 414.229710][ T9762] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.229757][ T9762] usb 5-1: Product: syz [ 414.237850][ T9762] usb 5-1: Manufacturer: syz [ 414.237902][ T9762] usb 5-1: SerialNumber: syz [ 414.362821][ T9762] usb 5-1: config 0 descriptor?? [ 415.433338][ T139] wlan1: Trigger new scan to find an IBSS to join [ 417.138001][T12114] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 417.162355][ T9762] mos7840 5-1:0.0: required endpoints missing [ 417.172420][ T9762] usb 5-1: USB disconnect, device number 60 [ 417.185533][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 417.185564][ T31] audit: type=1400 audit(1788106992.041:3867): avc: denied { write } for pid=12098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.268363][ T31] audit: type=1400 audit(1788106992.121:3868): avc: denied { read } for pid=12124 comm="syz.8.1208" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 417.291792][ T31] audit: type=1400 audit(1788106992.121:3869): avc: denied { open } for pid=12124 comm="syz.8.1208" path="/dev/ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 417.361122][ T31] audit: type=1400 audit(1788106992.221:3870): avc: denied { write } for pid=12132 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.384652][ T31] audit: type=1400 audit(1788106992.221:3871): avc: denied { setopt } for pid=12128 comm="syz.2.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 417.423301][ T31] audit: type=1400 audit(1788106992.281:3872): avc: denied { shutdown } for pid=12128 comm="syz.2.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 417.441551][T12138] cgroup: noprefix used incorrectly [ 418.675257][T12146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.675580][T12146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.913661][ T9762] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 419.045648][ T9762] usb 5-1: device descriptor read/64, error -71 [ 419.061829][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 419.284329][ T31] audit: type=1400 audit(1788106994.141:3873): avc: denied { write } for pid=12141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.320103][ T9762] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 419.350051][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 419.360130][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.370478][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 419.370511][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 419.370537][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 419.370576][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.449566][ T9762] usb 5-1: device descriptor read/64, error -71 [ 419.517837][ T31] audit: type=1400 audit(1788106994.371:3874): avc: denied { write } for pid=12164 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.560172][ T9762] usb usb5-port1: attempt power cycle [ 419.899659][ T9762] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 419.920007][ T9762] usb 5-1: device descriptor read/8, error -71 [ 420.017984][ T31] audit: type=1400 audit(1788106994.871:3875): avc: denied { write } for pid=12166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.169415][ T9762] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 420.175062][ T31] audit: type=1400 audit(1788106995.031:3876): avc: denied { write } for pid=12182 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.190497][ T9762] usb 5-1: device descriptor read/8, error -71 [ 420.210844][T12181] tipc: Enabling of bearer rejected, already enabled [ 420.299763][ T9762] usb usb5-port1: unable to enumerate USB device [ 420.368177][T12197] comedi comedi1: 8255: I/O port conflict (0x100,4) [ 420.481533][ T5779] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 420.691179][ T5779] usb 9-1: unable to get BOS descriptor or descriptor too short [ 420.691419][ T5779] usb 9-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 420.697425][ T5779] usb 9-1: config 0 has no interfaces? [ 420.715202][ T5779] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.715233][ T5779] usb 9-1: Product: syz [ 420.715271][ T5779] usb 9-1: Manufacturer: syz [ 420.715308][ T5779] usb 9-1: SerialNumber: syz [ 420.752298][ T5779] usb 9-1: config 0 descriptor?? [ 421.006591][ T5779] usb 9-1: USB disconnect, device number 24 [ 421.352876][ T9] [drm] Initialized gud 1.0.0 for 3-1:1.0 on minor 1 [ 421.430828][ T1110] wlan1: Trigger new scan to find an IBSS to join [ 421.732783][T12222] sg_write: data in/out 88/14 bytes for SCSI command 0x0-- guessing data in; [ 421.732783][T12222] program syz.3.1219 not setting count and/or reply_len properly [ 422.164940][ T9] ================================================================== [ 422.164957][ T9] BUG: KASAN: use-after-free in fbcon_prepare_logo+0x94e/0xc60 [ 422.164989][ T9] Read of size 256 at addr ffff8880747b7ffc by task kworker/0:0/9 [ 422.165006][ T9] [ 422.165019][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 422.165046][ T9] Tainted: [L]=SOFTLOCKUP [ 422.165054][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 422.165067][ T9] Workqueue: usb_hub_wq hub_event [ 422.165090][ T9] Call Trace: [ 422.165098][ T9] [ 422.165106][ T9] dump_stack_lvl+0x100/0x190 [ 422.165135][ T9] print_report+0x13d/0x4b0 [ 422.165163][ T9] ? __virt_addr_valid+0x239/0x430 [ 422.165184][ T9] ? fbcon_prepare_logo+0x94e/0xc60 [ 422.165206][ T9] kasan_report+0xdf/0x1c0 [ 422.165230][ T9] ? fbcon_prepare_logo+0x94e/0xc60 [ 422.165255][ T9] kasan_check_range+0x10f/0x1e0 [ 422.165281][ T9] __asan_memcpy+0x23/0x60 [ 422.165309][ T9] fbcon_prepare_logo+0x94e/0xc60 [ 422.165335][ T9] fbcon_init+0x1065/0x1830 [ 422.165361][ T9] visual_init+0x320/0x620 [ 422.165387][ T9] do_bind_con_driver.isra.0+0x636/0x9c0 [ 422.165420][ T9] do_take_over_console+0x501/0x5d0 [ 422.165460][ T9] do_fbcon_takeover+0xe9/0x210 [ 422.165482][ T9] fbcon_fb_registered+0x364/0x4b0 [ 422.165512][ T9] do_register_framebuffer+0x503/0x870 [ 422.165537][ T9] ? __pfx_do_register_framebuffer+0x10/0x10 [ 422.165564][ T9] ? find_held_lock+0x2b/0x80 [ 422.165596][ T9] register_framebuffer+0x23/0x40 [ 422.165618][ T9] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 422.165647][ T9] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 422.165674][ T9] drm_fb_helper_initial_config+0x44/0x60 [ 422.165695][ T9] drm_fbdev_client_hotplug+0x19e/0x220 [ 422.165727][ T9] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 422.165758][ T9] drm_client_register+0x197/0x280 [ 422.165782][ T9] drm_fbdev_client_setup+0x155/0x480 [ 422.165802][ T9] drm_client_setup+0x160/0x1a0 [ 422.165832][ T9] gud_probe+0x1835/0x1c20 [ 422.165855][ T9] ? __pfx_gud_probe+0x10/0x10 [ 422.165874][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 422.165907][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 422.165936][ T9] ? __pm_runtime_set_status+0x13c/0x970 [ 422.165959][ T9] usb_probe_interface+0x386/0x9b0 [ 422.165987][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 422.166012][ T9] ? kernfs_put+0x3f/0x60 [ 422.166038][ T9] ? sysfs_create_link+0x68/0xc0 [ 422.166062][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 422.166088][ T9] really_probe+0x241/0xa60 [ 422.166119][ T9] __driver_probe_device+0x210/0x460 [ 422.166149][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 422.166180][ T9] driver_probe_device+0x4a/0x140 [ 422.166211][ T9] __device_attach_driver+0x1df/0x320 [ 422.166242][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 422.166272][ T9] bus_for_each_drv+0x159/0x1e0 [ 422.166296][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 422.166323][ T9] ? lockdep_hardirqs_on+0x7d/0x110 [ 422.166344][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 422.166376][ T9] __device_attach+0x1e4/0x4d0 [ 422.166394][ T9] ? __pfx___device_attach+0x10/0x10 [ 422.166413][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 422.166449][ T9] device_initial_probe+0xaf/0xd0 [ 422.166470][ T9] bus_probe_device+0x64/0x160 [ 422.166500][ T9] device_add+0x121d/0x1970 [ 422.166523][ T9] ? __pfx_device_add+0x10/0x10 [ 422.166545][ T9] ? mark_held_locks+0x40/0x70 [ 422.166564][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 422.166597][ T9] usb_set_configuration+0xd97/0x1c60 [ 422.166623][ T9] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 422.166652][ T9] usb_generic_driver_probe+0xa1/0xe0 [ 422.166681][ T9] usb_probe_device+0xef/0x400 [ 422.166702][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 422.166723][ T9] really_probe+0x241/0xa60 [ 422.166754][ T9] __driver_probe_device+0x210/0x460 [ 422.166783][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 422.166815][ T9] driver_probe_device+0x4a/0x140 [ 422.166846][ T9] __device_attach_driver+0x1df/0x320 [ 422.166879][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 422.166910][ T9] bus_for_each_drv+0x159/0x1e0 [ 422.166934][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 422.166960][ T9] ? lockdep_hardirqs_on+0x7d/0x110 [ 422.166979][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 422.167011][ T9] __device_attach+0x1e4/0x4d0 [ 422.167028][ T9] ? __pfx___device_attach+0x10/0x10 [ 422.167047][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 422.167072][ T9] device_initial_probe+0xaf/0xd0 [ 422.167091][ T9] bus_probe_device+0x64/0x160 [ 422.167118][ T9] device_add+0x121d/0x1970 [ 422.167140][ T9] ? __pfx_device_add+0x10/0x10 [ 422.167160][ T9] ? usb_detect_static_quirks+0x335/0x3e0 [ 422.167194][ T9] usb_new_device.part.0+0xcc2/0x1686 [ 422.167224][ T9] ? do_raw_spin_lock+0x128/0x260 [ 422.167247][ T9] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 422.167275][ T9] ? mark_held_locks+0x40/0x70 [ 422.167296][ T9] hub_event.cold+0x1e3/0xe90 [ 422.167332][ T9] ? __pfx_hub_event+0x10/0x10 [ 422.167353][ T9] ? __lock_acquire+0x20/0x1ec0 [ 422.167373][ T9] ? lock_acquire+0x1d1/0x380 [ 422.167392][ T9] ? process_one_work+0xa2c/0x1b10 [ 422.167420][ T9] ? process_one_work+0x906/0x1b10 [ 422.167453][ T9] ? process_one_work+0x906/0x1b10 [ 422.167482][ T9] process_one_work+0xac7/0x1b10 [ 422.167515][ T9] ? __pfx_process_one_work+0x10/0x10 [ 422.167543][ T9] ? lock_acquire+0x1d1/0x380 [ 422.167565][ T9] ? __pfx_hub_event+0x10/0x10 [ 422.167585][ T9] worker_thread+0x5ef/0xe50 [ 422.167617][ T9] ? kthread+0x13a/0x450 [ 422.167641][ T9] ? __pfx_worker_thread+0x10/0x10 [ 422.167668][ T9] kthread+0x373/0x450 [ 422.167692][ T9] ? __pfx_kthread+0x10/0x10 [ 422.167717][ T9] ret_from_fork+0x730/0xd60 [ 422.167739][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 422.167760][ T9] ? __switch_to+0x800/0x10f0 [ 422.167786][ T9] ? __pfx_kthread+0x10/0x10 [ 422.167811][ T9] ret_from_fork_asm+0x1a/0x30 [ 422.167837][ T9] [ 422.167845][ T9] [ 422.167850][ T9] The buggy address belongs to the physical page: [ 422.167858][ T9] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880747b7f50 pfn:0x747b7 [ 422.167876][ T9] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 422.167900][ T9] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000 [ 422.167918][ T9] raw: ffff8880747b7f50 0000000000000000 00000000ffffffff 0000000000000000 [ 422.167928][ T9] page dumped because: kasan: bad access detected [ 422.167937][ T9] page_owner tracks the page as freed [ 422.167944][ T9] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xcc0(GFP_KERNEL), pid 11384, tgid 11379 (syz.4.1090), ts 372992569825 [ 422.167970][ T9] post_alloc_hook+0xfd/0x120 [ 422.167995][ T9] get_page_from_freelist+0x110d/0x35b0 [ 422.168021][ T9] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 422.168048][ T9] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 422.168075][ T9] __kasan_populate_vmalloc+0xf0/0x210 [ 422.168104][ T9] alloc_vmap_area+0x95d/0x2bb0 [ 422.168122][ T9] __get_vm_area_node+0x1ed/0x350 [ 422.168141][ T9] get_vm_area+0x73/0xa0 [ 422.168159][ T9] arena_map_alloc+0x2a0/0x8e0 [ 422.168178][ T9] map_create+0x874/0x30d0 [ 422.168203][ T9] __sys_bpf+0x12a0/0x4a30 [ 422.168229][ T9] __x64_sys_bpf+0xce/0x140 [ 422.168244][ T9] do_syscall_64+0x123/0x790 [ 422.168263][ T9] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.168280][ T9] page last free pid 5811 tgid 5811 ts 381938457152 stack trace: [ 422.168294][ T9] __free_frozen_pages+0x79f/0x10f0 [ 422.168315][ T9] kasan_depopulate_vmalloc_pte+0x5d/0x80 [ 422.168343][ T9] __apply_to_page_range+0xb1d/0x1520 [ 422.168367][ T9] __kasan_release_vmalloc+0xd7/0xe0 [ 422.168394][ T9] purge_vmap_node+0x210/0xb40 [ 422.168411][ T9] process_one_work+0xac7/0x1b10 [ 422.168441][ T9] worker_thread+0x5ef/0xe50 [ 422.168466][ T9] kthread+0x373/0x450 [ 422.168489][ T9] ret_from_fork+0x730/0xd60 [ 422.168507][ T9] ret_from_fork_asm+0x1a/0x30 [ 422.168525][ T9] [ 422.168530][ T9] Memory state around the buggy address: [ 422.168539][ T9] ffff8880747b7e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 422.168554][ T9] ffff8880747b7f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 422.168567][ T9] >ffff8880747b7f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 422.168578][ T9] ^ [ 422.168590][ T9] ffff8880747b8000: 00 00 00 00 fc fc fc fc fa fb fb fb fc fc fc fc [ 422.168603][ T9] ffff8880747b8080: fa fb fb fb fc fc fc fc 00 00 00 00 fc fc fc fc [ 422.168613][ T9] ================================================================== [ 422.179890][ T9] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 423.032868][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 423.043530][ T9] Tainted: [L]=SOFTLOCKUP [ 423.048008][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 423.058047][ T9] Workqueue: usb_hub_wq hub_event [ 423.063063][ T9] Call Trace: [ 423.066327][ T9] [ 423.069243][ T9] dump_stack_lvl+0x100/0x190 [ 423.073913][ T9] vpanic+0x553/0x970 [ 423.077883][ T9] ? __pfx_vpanic+0x10/0x10 [ 423.082369][ T9] ? mark_held_locks+0x40/0x70 [ 423.087134][ T9] ? fbcon_prepare_logo+0x94e/0xc60 [ 423.092329][ T9] panic+0xd1/0xe0 [ 423.096032][ T9] ? __pfx_panic+0x10/0x10 [ 423.100435][ T9] ? fbcon_prepare_logo+0x94e/0xc60 [ 423.105620][ T9] ? preempt_schedule_common+0x3c/0xb0 [ 423.111065][ T9] check_panic_on_warn.cold+0x19/0x34 [ 423.116425][ T9] end_report.part.0+0x3a/0x90 [ 423.121181][ T9] kasan_report.cold+0xe/0x18 [ 423.125847][ T9] ? fbcon_prepare_logo+0x94e/0xc60 [ 423.131043][ T9] kasan_check_range+0x10f/0x1e0 [ 423.135974][ T9] __asan_memcpy+0x23/0x60 [ 423.140382][ T9] fbcon_prepare_logo+0x94e/0xc60 [ 423.145402][ T9] fbcon_init+0x1065/0x1830 [ 423.149895][ T9] visual_init+0x320/0x620 [ 423.154303][ T9] do_bind_con_driver.isra.0+0x636/0x9c0 [ 423.159931][ T9] do_take_over_console+0x501/0x5d0 [ 423.165136][ T9] do_fbcon_takeover+0xe9/0x210 [ 423.169971][ T9] fbcon_fb_registered+0x364/0x4b0 [ 423.175072][ T9] do_register_framebuffer+0x503/0x870 [ 423.180516][ T9] ? __pfx_do_register_framebuffer+0x10/0x10 [ 423.186483][ T9] ? find_held_lock+0x2b/0x80 [ 423.191150][ T9] register_framebuffer+0x23/0x40 [ 423.196173][ T9] __drm_fb_helper_initial_config_and_unlock+0xf3b/0x17f0 [ 423.203288][ T9] ? __pfx___drm_fb_helper_initial_config_and_unlock+0x10/0x10 [ 423.210821][ T9] drm_fb_helper_initial_config+0x44/0x60 [ 423.216532][ T9] drm_fbdev_client_hotplug+0x19e/0x220 [ 423.222070][ T9] ? __pfx_drm_fbdev_client_hotplug+0x10/0x10 [ 423.228144][ T9] drm_client_register+0x197/0x280 [ 423.233244][ T9] drm_fbdev_client_setup+0x155/0x480 [ 423.238601][ T9] drm_client_setup+0x160/0x1a0 [ 423.243443][ T9] gud_probe+0x1835/0x1c20 [ 423.247848][ T9] ? __pfx_gud_probe+0x10/0x10 [ 423.252593][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 423.258392][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 423.264193][ T9] ? __pm_runtime_set_status+0x13c/0x970 [ 423.269816][ T9] usb_probe_interface+0x386/0x9b0 [ 423.274920][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 423.280539][ T9] ? kernfs_put+0x3f/0x60 [ 423.284858][ T9] ? sysfs_create_link+0x68/0xc0 [ 423.289783][ T9] ? __pfx_usb_probe_interface+0x10/0x10 [ 423.295413][ T9] really_probe+0x241/0xa60 [ 423.299911][ T9] __driver_probe_device+0x210/0x460 [ 423.305188][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 423.310999][ T9] driver_probe_device+0x4a/0x140 [ 423.316021][ T9] __device_attach_driver+0x1df/0x320 [ 423.321383][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 423.327272][ T9] bus_for_each_drv+0x159/0x1e0 [ 423.332116][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 423.337487][ T9] ? lockdep_hardirqs_on+0x7d/0x110 [ 423.342686][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 423.348484][ T9] __device_attach+0x1e4/0x4d0 [ 423.353319][ T9] ? __pfx___device_attach+0x10/0x10 [ 423.358588][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 423.363790][ T9] device_initial_probe+0xaf/0xd0 [ 423.368798][ T9] bus_probe_device+0x64/0x160 [ 423.373552][ T9] device_add+0x121d/0x1970 [ 423.378039][ T9] ? __pfx_device_add+0x10/0x10 [ 423.382874][ T9] ? mark_held_locks+0x40/0x70 [ 423.387620][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 423.393426][ T9] usb_set_configuration+0xd97/0x1c60 [ 423.398803][ T9] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 423.404867][ T9] usb_generic_driver_probe+0xa1/0xe0 [ 423.410231][ T9] usb_probe_device+0xef/0x400 [ 423.414982][ T9] ? __pfx_usb_probe_device+0x10/0x10 [ 423.420340][ T9] really_probe+0x241/0xa60 [ 423.424849][ T9] __driver_probe_device+0x210/0x460 [ 423.430139][ T9] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 423.435940][ T9] driver_probe_device+0x4a/0x140 [ 423.440957][ T9] __device_attach_driver+0x1df/0x320 [ 423.446322][ T9] ? __pfx___device_attach_driver+0x10/0x10 [ 423.452206][ T9] bus_for_each_drv+0x159/0x1e0 [ 423.457044][ T9] ? __pfx_bus_for_each_drv+0x10/0x10 [ 423.462415][ T9] ? lockdep_hardirqs_on+0x7d/0x110 [ 423.467604][ T9] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 423.473402][ T9] __device_attach+0x1e4/0x4d0 [ 423.478152][ T9] ? __pfx___device_attach+0x10/0x10 [ 423.483421][ T9] ? do_raw_spin_unlock+0x145/0x1e0 [ 423.488621][ T9] device_initial_probe+0xaf/0xd0 [ 423.493629][ T9] bus_probe_device+0x64/0x160 [ 423.498385][ T9] device_add+0x121d/0x1970 [ 423.502879][ T9] ? __pfx_device_add+0x10/0x10 [ 423.507805][ T9] ? usb_detect_static_quirks+0x335/0x3e0 [ 423.513524][ T9] usb_new_device.part.0+0xcc2/0x1686 [ 423.518890][ T9] ? do_raw_spin_lock+0x128/0x260 [ 423.523901][ T9] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 423.529698][ T9] ? mark_held_locks+0x40/0x70 [ 423.534447][ T9] hub_event.cold+0x1e3/0xe90 [ 423.539121][ T9] ? __pfx_hub_event+0x10/0x10 [ 423.543870][ T9] ? __lock_acquire+0x20/0x1ec0 [ 423.548705][ T9] ? lock_acquire+0x1d1/0x380 [ 423.553366][ T9] ? process_one_work+0xa2c/0x1b10 [ 423.558469][ T9] ? process_one_work+0x906/0x1b10 [ 423.563582][ T9] ? process_one_work+0x906/0x1b10 [ 423.568688][ T9] process_one_work+0xac7/0x1b10 [ 423.573620][ T9] ? __pfx_process_one_work+0x10/0x10 [ 423.578984][ T9] ? lock_acquire+0x1d1/0x380 [ 423.583646][ T9] ? __pfx_hub_event+0x10/0x10 [ 423.588397][ T9] worker_thread+0x5ef/0xe50 [ 423.592986][ T9] ? kthread+0x13a/0x450 [ 423.597221][ T9] ? __pfx_worker_thread+0x10/0x10 [ 423.602339][ T9] kthread+0x373/0x450 [ 423.606396][ T9] ? __pfx_kthread+0x10/0x10 [ 423.610990][ T9] ret_from_fork+0x730/0xd60 [ 423.615564][ T9] ? __pfx_ret_from_fork+0x10/0x10 [ 423.620661][ T9] ? __switch_to+0x800/0x10f0 [ 423.625326][ T9] ? __pfx_kthread+0x10/0x10 [ 423.629905][ T9] ret_from_fork_asm+0x1a/0x30 [ 423.634658][ T9] [ 423.637849][ T9] Kernel Offset: disabled [ 423.642151][ T9] Rebooting in 86400 seconds..