last executing test programs: 15m3.314288288s ago: executing program 32 (id=6): process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0xf4) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x42, 0x2000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000480)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000340)={0xe939, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) getpgrp(0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r5, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x4010, 0xffffffffffffffff, 0x1b5c7000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102379, 0x18feb) getpeername$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="04000000120800042abd7000fcdbdf2507000000", @ANYRES32=0x0, @ANYRESDEC=r8], 0x28}, 0x1, 0x0, 0x0, 0x4000084}, 0x4e57c783fa5e42a) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x22981) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x7, 0x0, 'queue0\x00', 0xfffffffc}) write$sndseq(r10, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x1, 0x3ad}, {0xff}, {0x1}, @raw32={[0x2600, 0xffffffff, 0xfffefff8]}}], 0x1c) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r9, 0x408c5333, &(0x7f0000000500)={0xfffffffe, 0x0, 0x1, 'queue0\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYRES32, @ANYRES32=r8, @ANYRES32, @ANYRES16=r9, @ANYBLOB="08000100", @ANYBLOB="d7e0a4a78209446681ab8ff4d2525f123aaa5e27d9876b27ae98eed41fadef2ccbccab1a3295c62049ea2fcca27a06bcddcd85d38d3b2c0ca53b492ad5a22ec3c9d3ed09b84bec8b49ea0b5ec6678e5bc780688724dcdcf632eb8fd1b6fdef9243d22b2764dc843adb99127c12dc2338a5c797ef62255d7f7db5cd28ef28fd258ac6feb2dff7e2506ca90287796456298461409ab1e60bedb26b4d6e9c2c8fc2826d2a4e1f5fc5929efddc303317a58a2ad154bfb04a521048544961e1525711f5938f132bd5db91dd48199ea0637a3e805e", @ANYBLOB="1400020069705f7674693000000000000000000014000180080003000300000008000100", @ANYRES32=r8, @ANYBLOB], 0xa0}}, 0x80) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r0, 0x100000000) 14m46.004646335s ago: executing program 33 (id=60): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00001e5000/0x2000)=nil) mremap(&(0x7f00009c0000/0x400000)=nil, 0x400000, 0x1000, 0x3, &(0x7f000046a000/0x1000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000511000/0x800000)=nil) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @multicast2}}, 0xffff, 0x4}, 0x90) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000180)={0xa, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @broadcast}, {}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @random}, {}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @local}]}) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000380)={0xdbc1, 0xa, 0x2, 0x80000001, 0xb6}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) quotactl$Q_SYNC(0xffffffff80000300, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000300)=0x10) syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000340)=ANY=[@ANYBLOB="120110010000001004160180400001020301090269000301050007080b00010107200909010900810904010000010220000904010101010220000905010920000801010825018030070800090402000001022000090402010101022000090582091000020505082501800c0f0100"/123], 0x0) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000180)="a0a94f85", 0x4}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r3, 0x0) r4 = socket(0x40000000015, 0x800, 0x286) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000004c0), r3) sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002b1cdeee78dbdf2503000000a8e82df9"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="090000003d6d03f493705eab320abdf72d542d8c4dd8aa2d0a926c44b63e41c3fa15a9b86acc4d5d0316acd49629c01c6f314c881cd3ae601fd72854fa38484688befc70890f42764064253f6c0921b0656fa1707330036c988e3d07e13481cac9c6c050d0594ec7ddb63cf9acd3dddebd1e14f30fcd8d662ae08ac943740fecf5b0c6dc86b1939534616373ac17f52fd1a07cc80c19353e1736f524a26a9ffe27cefc1189630f4df93c677ab76612476efb9c6d0a43b3bd20c24491583344510ab37a302c558e9868b9279724ae48385827c2e3383779147a485bf82115", @ANYRES16=r6, @ANYBLOB="040027bd7000fedbdf250400000005000500010000000500050003000000050006000500000014000100ff02000000000000000000000000000108000300ffff00001400010000000000000000000000ffff640101000500050000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x8100) ioctl$EVIOCGREP(r2, 0x80084503, 0x0) 14m20.719352303s ago: executing program 6 (id=173): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf7f, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f002, 0x1}) 14m20.257948843s ago: executing program 6 (id=177): recvmmsg(0xffffffffffffffff, &(0x7f0000003440)=[{{&(0x7f0000000180)=@ieee802154, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f00000003c0)=""/210, 0xd2}, {&(0x7f00000004c0)=""/193, 0xc1}], 0x3}, 0x9}, {{&(0x7f0000000600)=@xdp, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000680)=""/142, 0x8e}, {&(0x7f0000000740)=""/83, 0x53}, {&(0x7f00000007c0)=""/4096, 0x1000}], 0x3}, 0x9}, {{&(0x7f0000001800)=@qipcrtr, 0x80, &(0x7f0000001940)=[{&(0x7f0000001880)=""/50, 0x32}, {&(0x7f00000018c0)=""/111, 0x6f}], 0x2, &(0x7f0000001980)=""/142, 0x8e}, 0x611}], 0x3, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 14m20.024384381s ago: executing program 6 (id=178): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000bc0)={0x29c, r1, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0x277, 0x1, 'C\xec\xf8\xa0w\x15|:\xac\r\xab\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x95K]\xce,\xd1\xeb\x17]\xd5\xd0\xa7D!_\xa9$\x94\x02\v\x10od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*s6\xec\x06\xc7\x1dO\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xdak\x1a\x13\xe9\tc\x85\xb4\xcb\x815\x87\xd5\x97C\x1cM\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd2\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\xb4\v[\xdc@5\xbe\x9f\xccz\x81\x1f\xb4A|\x1a2p\xd1\x95\xb0i\"g\xd1\xf7t\xa4\xb3\x94\xe9\x01\xce\x82`\x17n\f\x05\xaa:\x03\x8cJs\x92\x81\xb0\\\xa5\xc7eB\xa5\a\xb6\x814\x05\xd1$3\x15/\xfcwNV\xeaif\xeb\x0f6\x94{5Se\xe9o\x86\a!\xf0\x9b\x80\x95\x84\xa6E\x90\xc9 \t \x04\xb1\xe7\xec\xf4\xe6 \x91\xfa\xd01<\xbcc\xd1\xac?V\xe2b3\xdelP[I\xae\x18Z\xa6K\xf2~\x19\x0f\xe7\x90\xb0\x84M)\x8e\x1av\xc2\a\xb4{\xb1(\b\xb5uh\x12k\xe2R?\x8boI\t\x87\xab\x80{\x8a\x1e\x85\xd6\x8c8vx\xeeTF\x1f&\x1fmaCc;Q\x9e\xd2\x9e\xcb\xa4\xb5M\xb1I\xfe%ukl\x18\xf7\xa5`\xaa\xed\xd7\xb1\xbf\xa0S?8\xb3Z\xb3\x1c\xb7FI7\xac\xdb\xa8\x1aF\xe5\x99\xc1\xa8\x9d\x84\x80]\x96\x0f\x0e\xd3\x00\xc91\xf1\x99\x02\xce\x01\x00\x00\x00\x00\x00\x00\x00;\xc5\b\x95\x1e\xff\xfc\xc8\x8e\x82\xb1\x8b_E\xc1\xb9AVN\v\xdf\xc1\x7f\x8f\xe9\xac\xab/\x85\xb3\xe8\xde\r\x04\xe7`\xb2\x1a\xcb;\xd8)\xac\x96\x1b\xd6K\x94z\xf7\xb8l0e\xed\x7f\xbb]\xdb\x1e\xff\xe8\xe8\x03V\x0e/\xc5K\x1e\x99\x9d\x11\xfe\x85c\x8a\x98|}\v\xb6\xaak\xc9p\xa0j\xe5!\r3\xd3I|\x1e]\xc8\xc4x\x92\xf3UE\xbcr\xbe\x0fI\xcfj\xdeB\x90\xa1\xe2Q\fD\xda_p\x87\x1b\xcd\x04\x94\xd67\xbe\xa2\xcaW\x12c{RzZ\x06\xf9\x95Pj\x06\x04\xbdz\x89o\x83N\x1ez\x10\xda\xdeK\xbaf\xcbDq\x97'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20084880}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f00000000c0)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x80000000}]) io_getevents(r4, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) r7 = timerfd_create(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) timerfd_settime(r7, 0x3, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) timerfd_settime(r7, 0x3, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900000000000000000000000008000000ffffff9e000000000000000000000000ffff"], 0x4c}}, 0x0) io_submit(r4, 0x1, &(0x7f0000000580)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) 14m17.870832716s ago: executing program 6 (id=181): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) kexec_load(0x1, 0x0, 0x0, 0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_init(0x40, 0x101000) 14m15.387352234s ago: executing program 6 (id=182): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102376, 0x18fe8) sched_setaffinity(r2, 0x8, &(0x7f0000000200)=0x3) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sched_getattr(r0, &(0x7f0000000080)={0x38}, 0x38, 0x0) sendto$inet6(r4, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) 14m11.985242914s ago: executing program 6 (id=190): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000480)={'veth1_virt_wifi\x00', &(0x7f0000000400)=@ethtool_dump={0x32, 0x9, 0x6, 0x2a, "ad53a3712b67940eda0a0159c9030ecbb9013538fc898ae4948b99d24a3703d5de077c92c17fca16650d"}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, 0x0) unshare(0x42000000) unshare(0x64000600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) unshare(0x10010400) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8c0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x101982, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000180)='./file1\x00', 0x34) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000940)='./file1\x00') recvmsg$can_bcm(r4, &(0x7f0000000c40)={&(0x7f00000002c0)=@nl=@proc, 0x80, &(0x7f0000003580)=[{&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f00000006c0)=""/244, 0xf4}, {&(0x7f00000007c0)=""/53, 0x35}, {&(0x7f0000000800)=""/136, 0x88}, {&(0x7f0000000980)=""/201, 0xc9}, {&(0x7f0000000a80)=""/63, 0x3f}, {&(0x7f0000000ac0)}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/166, 0xa6}, {&(0x7f0000002580)=""/4096, 0x1000}, {0xfffffffffffffffe}], 0xc, &(0x7f0000000b80)=""/146, 0x92}, 0x2000) ioctl$BLKALIGNOFF(r4, 0x127a, &(0x7f00000000c0)) 13m56.414364768s ago: executing program 34 (id=190): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioprio_get$uid(0x3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000480)={'veth1_virt_wifi\x00', &(0x7f0000000400)=@ethtool_dump={0x32, 0x9, 0x6, 0x2a, "ad53a3712b67940eda0a0159c9030ecbb9013538fc898ae4948b99d24a3703d5de077c92c17fca16650d"}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, 0x0) unshare(0x42000000) unshare(0x64000600) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) unshare(0x10010400) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8c0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x101982, 0x0) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000180)='./file1\x00', 0x34) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000940)='./file1\x00') recvmsg$can_bcm(r4, &(0x7f0000000c40)={&(0x7f00000002c0)=@nl=@proc, 0x80, &(0x7f0000003580)=[{&(0x7f0000000440)=""/187, 0xbb}, {&(0x7f00000005c0)=""/231, 0xe7}, {&(0x7f00000006c0)=""/244, 0xf4}, {&(0x7f00000007c0)=""/53, 0x35}, {&(0x7f0000000800)=""/136, 0x88}, {&(0x7f0000000980)=""/201, 0xc9}, {&(0x7f0000000a80)=""/63, 0x3f}, {&(0x7f0000000ac0)}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/166, 0xa6}, {&(0x7f0000002580)=""/4096, 0x1000}, {0xfffffffffffffffe}], 0xc, &(0x7f0000000b80)=""/146, 0x92}, 0x2000) ioctl$BLKALIGNOFF(r4, 0x127a, &(0x7f00000000c0)) 13m24.45203653s ago: executing program 2 (id=301): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf7f, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r1, &(0x7f00000023c0)={0x2020}, 0x2020) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x2004894, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noxattr}]}}) read$FUSE(r1, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0xf0f002, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x4a40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = socket$inet6(0xa, 0x3, 0xc) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="200004000f14010029bd70dbdf25074500636d00000400000000f7f0552614a10ca231ef8cce98020c4aae0ab1abb7eaf0401a"], 0x20}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0/console\x00', 0x1, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 13m23.341589959s ago: executing program 2 (id=305): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x8d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) syz_open_procfs$userns(0x0, &(0x7f00000001c0)) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x30, 0x1402, 0x1, 0x70bd2c, 0x25dfdbf9, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004049}, 0x4000011) 13m23.064178352s ago: executing program 2 (id=306): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) write$nci(0xffffffffffffffff, 0x0, 0xe) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x123, 0x235, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x42}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x46}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 13m22.792609618s ago: executing program 2 (id=308): syz_io_uring_setup(0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x170}, &(0x7f0000000100), &(0x7f0000000108), &(0x7f0000000110)) r0 = socket(0x10, 0x3, 0x0) capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffff523d, 0x2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf250a400000", @ANYRES32, @ANYBLOB="1400020000000000e10000000000ffff0000000008000800090300"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x2a, 0x0, &(0x7f0000000200)) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0xe8381, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000101e0440304000010203010902600003010300050904000000010100000a240100000a0002010209040100000102000009040101010102000009050109080006fc0a072501000e0600090402000001020000090402010101020000090eed1bfd058209400001bf08072501"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x40) syz_usb_connect(0x4, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1201500238f39808991181c0c92901020301090212006fee826ef16246da2500346a7a054a13d53c474850bbff67440b9b71250621b748ae043e0b0e8d89f03d6c92fc30eceace5c4aaf0fc9d6601a5ee7bd4538519baa37849f6fd905bd2ef8c566991ca7a412f26261d008", @ANYRES64=r0, @ANYRES16=r5, @ANYRESOCT=r4, @ANYRESDEC=r4], &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000580)=0xc) capset(&(0x7f00000005c0)={0x19980330, r8}, &(0x7f0000000600)={0x2, 0x1601, 0x8000, 0xae8e, 0x41, 0x9}) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000640)=@gcm_128={{0x304}, "cc59fda12d83c4be", "089db591dceca60f6a467d4cbef940aa", "6c7d88c7", "3f45b30acc2ae324"}, 0x28) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES64=r7, @ANYRES16=r1, @ANYRESOCT=r6, @ANYRES16=0x0, @ANYRES8=r0, @ANYRESHEX=r4, @ANYBLOB="b0cdedce80decf636e158b90b118e610a6553db1e3ff7a06823e47dcd7c744b02df21bdf900d176c7fde2d3617df852f9cd97ed2a2c9563dd38693a14ccbefa2a0a81a2422dfae3b753a07a8166cd8f940a9175aadcbddf59b366ef43bac7280f0ac605cab6e4255dab9363af03a5aa32272f73b8523fea9cf596dfdfd626febba7e116ebf33dc1fca450f286e586edb9e5a21d53decc64a1af8f1d33f21b1df1f3e4f8933e9ba9163f1849190fbb1f55ca51a76901fa1e3f4f37734b61c48a0337c35062e93e7f14d57f1de37046472712e4cdd4c23284aaa5f95067777e00e89b76f0e6d97053e"], 0x38}, 0x1, 0x0, 0x0, 0x24000101}, 0x24048004) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x9, 0x0, 0x0, 0x1}, 0x30, 0x0) 13m20.199457944s ago: executing program 2 (id=321): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) socket(0xa, 0x3, 0x87) pwritev2(0xffffffffffffffff, &(0x7f00000015c0)=[{0x0}], 0x1, 0xfffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000280)=0x5) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) socket(0x1, 0x80802, 0x0) 13m17.739543016s ago: executing program 2 (id=330): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) utime(&(0x7f0000000140)='./file0\x00', 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) 13m2.16871837s ago: executing program 35 (id=330): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) utime(&(0x7f0000000140)='./file0\x00', 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) 6m41.503111019s ago: executing program 8 (id=1451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="23000000d584000002000000ffff000005"], 0x48) r4 = dup3(r2, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='prev_state.function ~', 0x15) connect$unix(r4, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r5, 0x50009418, &(0x7f0000000880)={{r3}, 0x0, 0x1a, @inherit={0x78, &(0x7f00000002c0)={0x1, 0x6, 0x4, 0x4, {0x20, 0x4, 0x6, 0x5, 0x9}, [0xeb0, 0x9, 0x8, 0x5, 0x101, 0xffffffffffffffff]}}, @subvolid=0x3}) write$P9_RWSTAT(r4, &(0x7f0000000000)={0x7, 0x7f, 0x1}, 0x7) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x48000) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r6, 0xc0a85322, &(0x7f00000000c0)) 6m40.971014826s ago: executing program 8 (id=1453): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) fchmod(0xffffffffffffffff, 0x24) r0 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3e, &(0x7f0000000280)=0x6, 0x4) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000d4c000/0x4000)=nil, 0x4000, 0x3000, 0x6, &(0x7f000084c000/0x3000)=nil) syz_clone(0x23982700, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000280)={{0x25, 0x1, 0x1ff, 0xffffffff, 'syz1\x00'}, 0x0, [0x1, 0x1ffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x7, 0xfffffffffffffffc, 0x0, 0x0, 0x10000000000000b, 0x0, 0x8000, 0x5, 0x0, 0x1d4c06aa, 0x3, 0x3ff, 0x0, 0x2, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x9, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x800000000000000, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x71, 0x100, 0x10000000000003, 0x6, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400000207, 0x0, 0x1000, 0xfffffffffffffff7, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x40000000000, 0x0, 0x1, 0x0, 0x3, 0x80000000000, 0x10, 0x100000000, 0x5, 0x100000001, 0x2, 0xfffffffffffffffe, 0x0, 0x400003, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffffe, 0x800000000000000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x3, 0x4000000, 0xfffffffffffffffc, 0x0, 0x142]}) r5 = gettid() ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x0, 0xc0c0c0c0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0], 0x4, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x53b, 0x10000, 0x28, 0xe, 0x3, 0x1, 0x400, 0x1, 0x3], &(0x7f0000000300)=[r6, r7], &(0x7f0000000340)=[0xd4, 0x8000000000000001, 0xac45, 0x4, 0x3], 0x0, 0xfff}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000840)={0x0, 0xba, &(0x7f0000000780)=""/186}) tkill(r5, 0xb) 6m39.465851993s ago: executing program 8 (id=1455): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c580624e8ffff51072405000053f10b24050000133b9bda531c092405000596efc359090401000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000b240281000200018b7e8e072401"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r2, &(0x7f0000005140)=[{{&(0x7f0000000300)={0xa, 0x4e20, 0x2, @empty, 0x3}, 0x1c, 0x0}}], 0x1, 0x0) getdents64(r1, &(0x7f0000000440)=""/231, 0xe7) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'vlan1\x00', 0x800}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) io_uring_setup(0xb88, &(0x7f0000000000)={0x0, 0x9ddc, 0x10, 0x3, 0x159}) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)}], 0x1) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) socket$inet6(0xa, 0x4, 0x0) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) setsockopt$inet_mreqsrc(r6, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r9, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r12, &(0x7f00000000c0), 0x0, 0x0, 0x0) 6m38.177348202s ago: executing program 5 (id=1456): semget(0x3, 0x2, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f00000000c0)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x9c, '\x00', @p_u8=&(0x7f0000000100)=0x6}}) r4 = semget(0x2, 0x3, 0x33a) semtimedop(r4, 0x0, 0xf401, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f0000000240)={0x9, {0x101, 0x6, 0x203, 0x10008}}) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000500)=r5, 0x4) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x48, r12, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c000}, 0x11) 6m36.876257265s ago: executing program 5 (id=1459): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000002200)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES64, @ANYBLOB="01"], 0x38}, 0x1, 0x0, 0x0, 0x804}, 0x200004d0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYRES64=r8], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) getpid() syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f0a9c8085000000710000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r10}, 0xc) read$FUSE(r9, &(0x7f0000008140)={0x2020}, 0x207f) read$FUSE(r9, &(0x7f00000001c0)={0x2020}, 0x2020) cachestat(r6, &(0x7f0000000040), &(0x7f000009de80), 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000340)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m35.286011383s ago: executing program 8 (id=1461): r0 = socket(0x2, 0xa, 0x4000) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)={0x38, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7deb4564}]}]}]}, 0x38}}, 0x0) recvmmsg(r3, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000080)=""/255, 0xff}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/223, 0xdf}, {&(0x7f0000001280)=""/182, 0xb6}, {&(0x7f0000001340)=""/53, 0x35}, {0x0}, {&(0x7f00000013c0)=""/85, 0x55}], 0x7, &(0x7f00000014c0)=""/104, 0x68}, 0x8}, {{&(0x7f0000001540)=@nfc_llcp, 0x80, &(0x7f0000002640)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1, &(0x7f0000002680)=""/41, 0x29}, 0x7fffffff}, {{&(0x7f00000026c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f00000027c0)=[{&(0x7f0000002740)=""/63, 0x3f}, {&(0x7f0000002780)}], 0x2, &(0x7f0000002800)=""/223, 0xdf}, 0xf6}, {{&(0x7f0000002900)=@can, 0x80, &(0x7f0000002c00)=[{&(0x7f0000002980)=""/121, 0x79}, {&(0x7f0000002a00)=""/131, 0x83}, {&(0x7f0000002ac0)=""/232, 0xe8}, {0x0}], 0x4, &(0x7f0000002c40)=""/199, 0xc7}, 0xf00}], 0x5, 0x40010002, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) 6m34.640515776s ago: executing program 8 (id=1463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20004450) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x5) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040), 0x0, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sg(0x0, 0x9, 0x8002) socket$inet(0x2, 0x1, 0x100) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x7e) io_uring_setup(0x6957, &(0x7f0000000700)={0x0, 0xc54b, 0x1, 0x20001, 0x2de}) syz_ublk_setup_io_uring(0xb41, &(0x7f0000000540)={0x0, 0x4ddf, 0x2, 0x2, 0xd6}, &(0x7f0000000240), &(0x7f00000001c0), &(0x7f0000000500)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r7, &(0x7f0000000400)={0x2e, 0x8, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@any_dev={0x1, 0x951, 0x0, 0x0, 0x1000, 0x7ff, 0xffffffffffffffff, 0x0, 0x41}}}, &(0x7f0000000480)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) r9 = timerfd_create(0x7, 0x80800) timerfd_settime(r9, 0x2, &(0x7f0000000100), &(0x7f0000000140)) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x140, 0xb, 0x79b, 0x2, 0x10000007, 0x7fffffff, 0x7fff, 0x6, 0x3, 0xc72d, 0x0, 0x7, 0xfffff9f5, 0xd0eb, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x3fe, 0x40008, 0x488, 0xc, 0x9, 0x1004, 0x80000001, 0xe, 0x3, 0x7, 0x3, 0x1]}) 6m32.17240082s ago: executing program 8 (id=1467): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300), 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0xfd, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}, {0x1, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x2, 0x10, 0x0, 0x1}, {0x0, 0xb000, 0x18, 0x8, 0xc9, 0x4, 0x3, 0x5, 0x80, 0xc, 0x4, 0x6}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0xd, 0xfa, 0x70, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0xa8}, {0x100026fff, 0xcccd4000, 0xd, 0x4, 0x0, 0x8f, 0x0, 0xb, 0x6, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0xe000, 0xb, 0x0, 0x5, 0x0, 0x0, 0x80, 0x3, 0x4, 0x7}, {0x100000, 0x41000, 0x3, 0x82, 0x0, 0x10, 0xe8, 0xe, 0x0, 0x0, 0x7}, {0x100000, 0x1}, {0x1, 0xfffe}, 0x10000, 0x0, 0x0, 0x10, 0x1, 0x800, 0x900, [0x17a, 0x0, 0x10000, 0x5]}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2fe5, 0x4000000000, &(0x7f0000006680)) kexec_load(0x3, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 6m32.024434163s ago: executing program 5 (id=1468): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x80840, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'erspan0\x00', 0x1000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4G\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1e, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x60}}, 0x8000) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x0, @sco={0x1f, @none}, @in={0x2, 0x4e23, @remote}, @can={0x1d, r6}, 0x8, 0x0, 0x0, 0x0, 0xaca, &(0x7f0000000180)='vcan0\x00', 0x80, 0x9, 0x8}) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(&(0x7f0000000040)='cramfs\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000200)="dd", 0x1) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000006400)={0x2020}, 0x2020) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001400)=ANY=[@ANYBLOB="02000000010005000000000002000000", @ANYRES32=r0, @ANYBLOB="04000600000000001000040000000000200007"], 0x2c, 0x1) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0xee00, 0x1000) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)) setxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="020000000100020062b2d8ab0400000000000000100006000000000020"], 0x24, 0x3) 6m30.223373847s ago: executing program 5 (id=1472): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000200)=@req3={0x8001, 0x7, 0xeac, 0xe74, 0x2, 0xe82a, 0x6}, 0x1c) syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff0007058102400000070582024000000705830240000007058402400000070585024000000705860240000007058702400000070501024000000705020240000007050302400000070504024000000705050240"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010027bd700402d4df250d000000", @ANYRES32=r4, @ANYBLOB="904e0600c16a010024001280110001006272696467655f736c617665000000000c0005800500040001000000"], 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) r5 = getpid() syz_pidfd_open(r5, 0x0) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x1020, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r8) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r8, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="30010001", @ANYRES16=r9, @ANYBLOB="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"], 0x130}}, 0x4) syz_emit_ethernet(0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaafc0c1100fe8000000000000000000000000000bb0000000000000000000000000000000080000e22000c907801020000"], 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r10 = fanotify_init(0x0, 0x80000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0x2d33, 0x7}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r10, 0x101, 0x8000031, r11, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 6m28.319041375s ago: executing program 5 (id=1478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20004450) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x5) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000040), 0x0, 0x0, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sg(0x0, 0x9, 0x8002) socket$inet(0x2, 0x1, 0x100) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x7e) io_uring_setup(0x6957, &(0x7f0000000700)={0x0, 0xc54b, 0x1, 0x20001, 0x2de}) syz_ublk_setup_io_uring(0xb41, &(0x7f0000000540)={0x0, 0x4ddf, 0x2, 0x2, 0xd6}, &(0x7f0000000240), &(0x7f00000001c0), &(0x7f0000000500)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r7, &(0x7f0000000400)={0x2e, 0x8, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@any_dev={0x1, 0x951, 0x0, 0x0, 0x1000, 0x7ff, 0xffffffffffffffff, 0x0, 0x41}}}, &(0x7f0000000480)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) r9 = timerfd_create(0x7, 0x80800) timerfd_settime(r9, 0x2, &(0x7f0000000100), &(0x7f0000000140)) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x140, 0xb, 0x79b, 0x2, 0x10000007, 0x7fffffff, 0x7fff, 0x6, 0x3, 0xc72d, 0x0, 0x7, 0xfffff9f5, 0xd0eb, 0x29, 0x72f0, 0x9, 0x7c, 0x4, 0x3fe, 0x40008, 0x488, 0xc, 0x9, 0x1004, 0x80000001, 0xe, 0x3, 0x7, 0x3, 0x1]}) 6m27.087319613s ago: executing program 5 (id=1480): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r0, 0x4f8e, 0x7721, 0x7e, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x1000, '\x00', @p_u16=&(0x7f0000000080)=0xa65}}) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000210001002dbd700000000000ffffffff000000000000000000000000e00000010000000000000004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000e800110000000000000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe800000000000000000000000000020000000000000000000000a0000000000000000000000000000000000fe8000000000000000000000000000bb7f000001000000000000000000000000ac14141a000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000ffff00"/210], 0x138}}, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0e00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ba5d119a01b213d1e8b90c18ecdf1edc47fe459b365663be3fa642c819fb34f5b00f21315bdd6f8ae0188431010032b6d57a0e9364d863968033b4fa18c00270314a076c25d71d9bd4394b68fa27589152534c517ff1e840dfb0d1239252e35d7518781435e7dbc65277e5b84709fed527d16050ff66"], 0x50) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000000200000008002500000000000c0099"], 0x28}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f0000000100)={0x9, 0x4, 0x9}) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) 6m15.798206973s ago: executing program 36 (id=1467): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) socket(0x10, 0x803, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000300), 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0x0, 0xf000, 0xfd, 0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}, {0x1, 0xddccb000, 0xa, 0x0, 0x0, 0x7, 0x2, 0x10, 0x0, 0x1}, {0x0, 0xb000, 0x18, 0x8, 0xc9, 0x4, 0x3, 0x5, 0x80, 0xc, 0x4, 0x6}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x0, 0xd, 0xfa, 0x70, 0x80, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0xa8}, {0x100026fff, 0xcccd4000, 0xd, 0x4, 0x0, 0x8f, 0x0, 0xb, 0x6, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0xe000, 0xb, 0x0, 0x5, 0x0, 0x0, 0x80, 0x3, 0x4, 0x7}, {0x100000, 0x41000, 0x3, 0x82, 0x0, 0x10, 0xe8, 0xe, 0x0, 0x0, 0x7}, {0x100000, 0x1}, {0x1, 0xfffe}, 0x10000, 0x0, 0x0, 0x10, 0x1, 0x800, 0x900, [0x17a, 0x0, 0x10000, 0x5]}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r5, 0x2000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2fe5, 0x4000000000, &(0x7f0000006680)) kexec_load(0x3, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 6m11.658735971s ago: executing program 37 (id=1480): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r0, 0x4f8e, 0x7721, 0x7e, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x1000, '\x00', @p_u16=&(0x7f0000000080)=0xa65}}) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="38010000210001002dbd700000000000ffffffff000000000000000000000000e00000010000000000000004000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000e800110000000000000000000000000000000000ffffffff000000000000000000000000e0000002000000000000000000000000fe800000000000000000000000000020000000000000000000000a0000000000000000000000000000000000fe8000000000000000000000000000bb7f000001000000000000000000000000ac14141a000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000000ffff00"/210], 0x138}}, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0e00000004000000040000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ba5d119a01b213d1e8b90c18ecdf1edc47fe459b365663be3fa642c819fb34f5b00f21315bdd6f8ae0188431010032b6d57a0e9364d863968033b4fa18c00270314a076c25d71d9bd4394b68fa27589152534c517ff1e840dfb0d1239252e35d7518781435e7dbc65277e5b84709fed527d16050ff66"], 0x50) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000000200000008002500000000000c0099"], 0x28}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@ipv4_getnexthop={0x20, 0x6a, 0x605, 0x70bd2c, 0x25dfdbfc, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000640)=0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r9, 0x4008ae9c, &(0x7f0000000100)={0x9, 0x4, 0x9}) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x8004, 0x0, 0x81, 0xffffffff}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) 1m29.866368314s ago: executing program 7 (id=2599): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000003180)=0x23b, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x107800, 0x0) unlinkat(r1, &(0x7f0000000040)='./sys/class/rnbd-client/ctl/map_device\x00', 0x200) socket$nl_generic(0x10, 0x3, 0x10) msgget(0x2, 0x47a5f2ebe3f1275b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./sys/class/rnbd-client/ctl/map_device\x00', &(0x7f0000000280), 0x80000, &(0x7f0000000540)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e745f686173682c7375626a5f747972653d292f2c6f626a5f747970653d2121287d2c6f626a5f747970653d24212c66736e616d653d28ed243a2c7b2b7b5bf7b52c646f6e745f686173682c736d61636b6673666c6f6f723d657468746f6f6c002c6673636f6e746578743d757365725f752c6c617a7974696d652c00"]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x1, 0x40, r5, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) 1m28.837558956s ago: executing program 7 (id=2607): mq_open(&(0x7f0000000040)='{&-#-\x88&%^\x00', 0x40, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) r2 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x80, 0x0, 0x10000051}, &(0x7f0000000200)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x5}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r6, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x15, "0062ba7d82000000000000000000f7fffeff00"}) r7 = syz_open_pts(r6, 0x8182) r8 = dup3(r7, r6, 0x0) ioctl$TCFLSH(r8, 0x540b, 0x2) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 1m28.402973334s ago: executing program 7 (id=2609): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f000095c000/0x3000)=nil, 0x3000, 0x1000002, 0x11012, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') pread64(r4, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000040)=0x1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x9a4c6000) 1m27.42687468s ago: executing program 7 (id=2615): sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x54}, 0x24000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x2f, 0xe, 0x0, &(0x7f00000002c0)="41dfb080ca21db08098e002f86dd", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000000000000000060000008500000061000000850000007d00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x34}}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m27.125552493s ago: executing program 7 (id=2618): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000240)={0xb, 0xb, 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1fb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/mapper/control\x00', 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000000c0)) r5 = getpid() r6 = fsopen(&(0x7f0000000400)='fuse\x00', 0x1) r7 = open(&(0x7f0000000080)='./bus\x00', 0x21c2, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r6, &(0x7f0000000000)={r7, 0xffffffffffffffff, 0x2}) ioctl(r3, 0xc138fd03, &(0x7f0000000100)="040000003200000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573745f7261696400") ioctl(r3, 0xc138fd09, &(0x7f0000000300)="040000003200000000000000880100003801000001000000000000000000000000000000000000000000000000000000746573745f7261696400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000072616964000000000000000000000000007261696431203120382032202d202f6465762f6c6f6f7030202d202f6465762f6c6f6f703100") ioctl(r3, 0xc138fd0c, &(0x7f0000000500)="040000003200000000000000380100003801000000000000000000000000000000746573745f7261696400"/58) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x3b) setns(0xc9, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r7) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0x40814) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r9 = socket$can_bcm(0x1d, 0x2, 0x2) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r10, 0x0, 0x18, &(0x7f0000000000)=0x6, 0x4) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000200)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f0000000100)={0x1d, r11}, 0x10) sendmmsg$sock(r10, &(0x7f00000043c0), 0x3fffffffffffebe, 0x20000000) 1m27.030029519s ago: executing program 7 (id=2619): add_key(&(0x7f00000000c0)='rxrpc\x00', 0x0, &(0x7f0000000080)="01000000ff", 0x5, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_mnt/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='+3', 0x2) read(r0, &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x5, 0x400000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r0, 0x314, 0x0, r1}) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e688da7ab5e6e423ceb0ab4907f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x2}, 0x48, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r3, &(0x7f0000000100), &(0x7f0000000080)=""/15, 0x2}, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x224002, 0x0, 0x3f}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000580)={&(0x7f00000003c0)="8ba0a9b0cd39c1bb42a5e93eb51a19d49ff45a4a642024615b058ba12605a6e93d8fddf4ffb6fc31ab1cf9340c943fa0120d53a3c0c2ae646522c76377e3dce6f21a1c40bf984a78c0f6eafd49890aa230147d6af1d5e56324d9619c399be08e2462552dbd085506a6389a31203086", &(0x7f0000000440)=""/5, &(0x7f0000000480)="132cce1f36c16e72b945b86e3f1cb6631eff4ccc5cb9a48e5ecbbff62e95c15c350bbeaa119edfa8c5d48d8772276b922539d6bbc61e8bfeab04c4f98fe8a310116e13e41b3859116e3c6aa95c226da362bec181", &(0x7f0000000500)="f7a786c666abe7eb7c3d2684f3882b0e5a561c0438cc4c60396c2b34df3bd29e829cc9a60dbb5648aeb074663b18df11ff37477f26c92bedad47529acd88a01f005dd0b371679d3fbc56a7eef0acf70c3e0954d25fe401db4103ba365cc78178d3f06e3f3fbeb3a75d6f72ec0d6b9c3e136a8b3894", 0x8, 0x1}, 0x38) timer_create(0x0, &(0x7f00000043c0)={0x0, 0x24, 0x1, @thr={&(0x7f0000003340)="f25c041443a9dad9ecd1fb06c2abb5002b4a1c8de5f0765836446c3f208c328b85c3f465e579b1dfc2538e5418911599e89e9877d1ff31130dadc08da374ccaf31ab8b20bb219df260fb1199290afe1e0feeaedcbbc8ae744dc37c753c04f951d0a69c78faff88b952c47766d631a911eae9d35de4f9abe30b66421d513f752ffdd80ecd6163a095a5669ccb2fed6e9a7f08d2f503f1188975e76c37156e6f5431aaa443e8bb2242e56ecedb0d5ca3757867ad75cf43acb0d6835efa6f821dd1c6f926f9e194cc856abf6d68e7709b236a01f6901178edb602eb17ad8ec7dcb850cbf2a1d500aec32efa0e67fe20ab17f585676a24cc8d1d515322d83c752b0bb9f240bbb26b1fc890cae2fc9dcf9fbedf8fc1b6674499b8f105c5ad555990624f02ef740d23e6e724221764b1303f7655c527b644b547b00cbda2decf5516efa4a3f603a59e3e3777f41f8423d3301383f3786d3965d1079bd2e2e94f401b211ba5ca7407994dd7942dcda9b32ef20d7fd9d1949a35ec51de8a9528f82ed1fa0ffc15ac3e814e6e61e3ccdf605ec50d2c39ad0b09fc2f31dcfa495b5f93f37b385c1e75fdf6aa4401e6eaaa9e963492db9f50c911b276c36e6c48cd678f591c07980e479ce9e522521565b0cbdc55491ece06a149d66cc6721c6923ab1d901a10c6a98c6c657524e3fce16e85f853423661145dedcf263ad37b889ce588827dea3b82d7d2b2bc38d2b979e9bd1c53cf638e851046dd308536668be35c61d47f7e52b1f07741bedd4bbce072228d271cddbfff4df29772cfad4028cbc7ce0ed976a5ffe15ce2fb30c246cb44a316bc292f25569632590532ed4a1a98fd91f422708808bc16133ebed896d9a4950541466c3733af647ef2841c016dee36e6b978d1743fb60d4b14aea46ddfaeba0ec7b999a773e7ab6f955b1b227170532c0ef6b8b85a682ca7ee8f2dee9372655eb20369e738da3eab6af7087e5c27ae97e7053878184bc9996cc888e6d21ffe10a14305dbf5f24147cdf0889532b7f0410c53222d9b6704e96c112d0fe7981019b71022e2bbac7d85eeeb0b5034f6ddf54c84ecdaa5fc190f110ca8a25796f888fefae498b0511a7e6393bb31b4e96bdbee19c88a8867a513629b45a3cf7254f7843e8174e3c26865f8c0c962696f39fe4578e8cf60d44ea05aa1c9bca726eb72e6045fde1023adea004c84e51f08bacf21751b6fe10801512195fccf47b8689d50d3b2323e6f00b0cc30c39d432efd256890495bac40d24b6516a633661e1e765c0e3ef82b836b55fb216c464bae03d0fd6c5d8fab1985eaa70c503aa79443844091ea312593cdfeae89620fd7e3b3817fcda9335b40738b83ff25d6281055a1a467df090cb280b5ea4a531e0fcb4dd00bb03f1b8834738fb52ed455759215b64e388dcf38a564341a480b766a472c0495f06c4158b9a328c9f0d1f6fad28c128728243da4b6af8fd38078f16fbe2651a50692f2df4d3bffa0b6a821e27fc5c1250de8cf2cd13d12d9d5b7aec77a90e41195042a015028de89dbbdaad1ef678c407bdafd2d4da374da2e1d52588daf6eefd13fe1b5e2d66a22d205fdcedd250d9e8504a18028e632d758fc88b3a3193c1dce266323b6b1be8e18eca41066bb2542454f48a99ed8451b1357cfff2ded2c4fd2b43dd987666786be67388aeec4c0fa2c92b425de728a1d94566bd3a52638a7b01af2ed3ca70cbc86203bb46ce8f4c8eb05dce3c0be65109f0092c45ef60f1976dc1ec01afe95648fb832ccc9d9158aa458b30233a309ebd15146c5c9bf24ad07f0e737644c52c447369fe8d0a5de07ffd7a41b96640d1fd26f2e1da96a7417bfa03c886d4f1b585c664b106ecec795aae188e5219408f0294bdbd8d2c0d114483a843731bba92306e49f47d79448f43478c0d77fd517ca952bf1a1afe4b4102d567ff9475cb58083d074e85016ad69d469f033cf6039fede03b9e63ab81427670f8c08253b48cd1cfccbfb079a9e7b9e4309268c1ba97f577a56134964009e2a15af1cf73e32e6e4cffff5eaa0d430aeb1c461877167b30aa4864145bee635159c73bd262f94201a639d233c42760b59e35861eeec743c80246469b19250851147b11db60c247cb7d367b1e3d4521e586e07a22b6ff9b6d0d603e1d09ad781e83404cc871e4a153c0cf8db094dffb59739167b0562fadc26560e839c5124acb13233e58f22e80d44a9973e734a0fdcf7c9acee08223a66ac7a75165d3eda78d4c669bd59b14937c57ec16eee890f0aa11873299b65d5f22f7d4fe674db29386076d0797aa79f079b8b26c42ec16cdc346afa35a9d72f35f9743f320ea2bbb3fbc7493d6ece01f0a6ffe539acfcde210f363b5e4637151d84cac3468bebac347fc944594f6aa5853c024c467ad5a57c782743fdc06c19600337278ca45990a5709066a638f1943ab908726366525c6b39b71c9ba35906ec1da217413d785f4431bc060e13ac7b8c292434ca24d7d496d55af14ff5fb2737d386d2949f102325d296478f0993f5b81d0861f2a6909403149c5ae23f123bdf6ca7df9d0141f4afcf89265323121f80fd620a7b6c901a10b18d16f4a3f432880ed76ef535826485b81589c6ec9d86ca1edf463fef73c97fd088c89d60629c1b880b448a2d123717fb894fd875ee291d29cf661f8b52e32810059167de88c67177caa9cf2fa3d92c7c71f36785c4308c9c4484ad01d537669584ac6ad277bf2a3b82d8b8f97e11275c936e6c19f05b1c0223129adad4e0e1ac40a1c32e66353bb02ea3fb2b2fe6d2d2f8218a5975ec9c31771f78a252c2640f61c3360772ef733d72efad1c7a7ac37bc6bf42d7ec2623e9e89e1edbdcf3fe883be3922abc2cd20780377e2f2576feac8576e98e28e20c06d27bbd347341d2d796f8cf017046005ca449a6b08cc6aaa087598112d33256420acb1cdf774d4d9228eb1440974e9fa561cbbc0dbc162b5862abcc00c771e95b758951ca88a0bcf4bfb8b536e65457a022c116dac6f5b1b3d5554fbbab78d92781e64dd72cc8cf501104553b6fca507338530271b0ff945b43ea2189c7950b1b0e081c193e7fd0f5295ffb8ac02add06115ae2ecdb4e0c2cff41051b1caf84a9fdf0c7420988b33fcfbd0ad2eee38b99510a8676040c41577dba1b6bcd6ed1c7d7f2d1bd970b1b3dcc2eca6189abe61070a92e1a5e06be2c589f32050862967323ab9ca9fb9c89fab6240679ec09aaeeac2e2a0a881073c8cc9432fdd04169d454c7b254d4a1ef26ef823755a788e5432e5f2016c518b1623e3d30c195aa0008cf08b0f80df80061bd23fdda18c04ff9594b08943fbc7f0a9937fec1bb2478c4da2cf094e153ec8649b2a0c828ff446f2d092861eead72533b4fc1492b9f715f011567a76eca094e0db89462f78ae480061ee88fcbdc9858766528675af0c8b27eb3bf938bc1b02272378e16bb4fa3e289043e9e7ec437e57fef4c99108a48bc4c504956b55a1f94f49da267b837388fee871eda7920833c8fa732f8fc0b0c5b007095d95a2d1d46e9e598a3313fe59b70a6217496c4888c3034b48f9215472a951eab0452c49b42d8c371aac4339e194bdca51abb22f81d69233df7d5090bce004709feea69bdb46990c398320bf2977850f3e23aa774e74879dcac4143ba5d63a60172d82a2713267444a2b109e873f87c242b73d173c621fffbe9003ca938977827e5883e44baed2b61bbee8d2cf9fc595b150ae0ff71fc3240c8aa340517ebeb3e9ba2c085094b0b50328f2bfb16a9a7c6f46d196a91a78fca68954dcdef4c22fe5fdc186fc1448ba5c0b6fa96297e3bc07baab71913cd3e385687a5ab196bdacec63f3bb8f79d352533ed672b6b7d632b104b670ef4ea44594edf915eb9763c5e4ba348709541e4e3a1c34c7f44ae03e246d8ee8961310a6e5f393d5af3a48dc060f466bab1eb2cbe74b96f1b5984770b87525ef09a84dedf8d5a48dd9b09131eaea26e62c8db73f62cda60a35dd887be0e0b2bc03a6e84fb900703d2c98a4a0d8bed55e4411613db665827532a0792c15f78975680b258794d04477c0c1f94261fc7fccb2aeb2779e8f2ab2a5667c182aff5fc06114f1f2831fd576280c1afad2fb7f906eef43387e751907834760c0103b45422c3467bcce5dc9034ca1e59a0d3ed6e7b28b4a569e329e547273a54b73d1c5c2308f8434d60e42fbf70566ed0a1cf963d63c56e066055cc15d923943bbc74b18ef4465f7e51d25fc72c80e50b9adb54b51cac7fa650d9c41265d85ecb29273ba1e7fa694c3d928bfffef86d976e078811fb99c0202aafdd20e3f7e22c3e252c4c39a138c5cfff022b68aacecdc0e271f3e538274697c592d8cb2228ed98ce25aaf1700d6cf238e7bba3ce6e60183b2872aa1f07282dd0ec9e436facbfa34f76e11576caa26e7ba052e849b296132414da2f4324033e81a260c8e8c4aee142c01a344e291e4ef1fe7a2a9e71c06c18b2b06fa212b85a3defeedbd0b491e7d62be14f68d0e0c92b0beddbdb777eda2ddc6848378b1e7defc5032d47428413a460359c27af8e6a1fd31dde9f6139407b6116103459fe3bee1029bbc9b283da81ce083a960537b1955be300c46130de7cf9bad9ff97910e7dcd7570d446da79b345e55cab77e73b9ea7b45e88d6bea84297fce672a02a023828b57d3ab8e94126219bde39d116a7cf5af68cbec5a86b79dd24ea6fc76bb3362a6da9ccd5df1927f066dd2991752629234c4e07807390e13ebbecd653af2f3fb72c69a6b0b53807c489a4b48e66626b2be042d12f0cb30a0927cd41343f5bdd97fad6605439e97214af5e0d22b25d865f3d6adb07735150a488f5a84455f9ae945c53b15c7fcb97d9ed1ff49ea3bf5e10b97825dd3f7f3cbb6df762443639f17e36f56e9dd7f771845d1ba1b1d922c56bd122c16e624c10708b20c4a1978116492985a021112f3c827265305c8bfc935191ea6b77e23ad488bdfc6e1eed89410d8f590cc565e4339fbc0155cc7c6e9eb19894ca751ac7e72e6e9a02145b1021e5ceefb34013da04659ff529c0010e31f7990ceb0a59b8d76385614d40316b73e4331a20fa821c1d07d26b4aee183e12fe57ee8fd86fba6ddc0d135cd0e14fea3b8924add3aa9bcc8326b656229141bb3fb624d63e1ebdc118bf2264d5b815408b0fd725fd6e31df5743c90607033f5e0900a4a52e151b5b65fae78553ba77ef5f2a6093c9a04277fb96f80314378de06a372ac21275bbf40a830c261dcc73acfd532925e4818ff51ed0e3c104b2b2da446780a704b0fb0b4bb3a03fa4ef5bc52633b9e6704fa50c2ba5d949e3ef89809074c8f6608e29e1edf21578e9b7c8ec812c629ffc5eb966b5d825cd4fe818952fe96bd18ba093c19be8f48d74496c33a1dee0d74f89be281dca964a907f7ae43ec46e51ed808f3b1b76d34f28fcf01f5ab363be6fe4db87e09e1b6785f1c7c656e5f77b50d8fe15d7e1d102dbfc960c886e2c35695123005339b88a440c80f69f9a11fa6b7bed32c96999568024c96970bcf0dcc07f44de5df7f9f47a7c88703717cd9dcd68e70f0341b29072ba3a6accb2cd7a84473d0cc1432478fb79e49b3cae32e0065a818032e76c4cb24476450dd4dedb774b7c7f7dae389b8d80379e8c3f245931988c981dec121801608f4ad41ac7d5e1ee2310bbaac0c3f20176ba03910fc15ac1a04a95214d1e9fdc9e1ddce42625762c2603ce0de7b41ba816d9a5fa5240df7c9b74d4ac3a6a0489da97cc245708a88212171eb689", &(0x7f0000004340)="960fd704c3a04e399b992fb33d8f37e21195c40ec46590621cbd12ae81a630da248f41b1451edaa0aab86444dc0d39550e33d456b0f2bde1350c9ed2d9379d7f499b47a41c38a24f3139516eee3ccde5552d66c58e4e510e468052d2be9359588f56c1027ca8"}}, &(0x7f0000004400)=0x0) timer_settime(r4, 0x1, &(0x7f0000004440)={{0x0, 0x3938700}}, &(0x7f0000004480)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000005c0), 0x1010003, &(0x7f0000000680)=ANY=[@ANYBLOB='usrqnotaqblock_\t\x00\x00\x00\x00\x00\x00\x00t=40\x00,\x00']) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) read$alg(r8, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r8, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="08e0211db1d69fa4593039c5ad01740c4d", 0x11}], 0x1, 0x0, 0x0, 0x804}], 0x2b, 0x48091) sendmmsg$alg(r8, &(0x7f0000000ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}], 0x1, 0x20040894) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x2801, 0x0) 1m11.921550944s ago: executing program 38 (id=2619): add_key(&(0x7f00000000c0)='rxrpc\x00', 0x0, &(0x7f0000000080)="01000000ff", 0x5, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_mnt/class/rtc/rtc0/wakealarm\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='+3', 0x2) read(r0, &(0x7f0000000180)=""/169, 0xa9) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x5, 0x400000) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={r0, 0x314, 0x0, r1}) add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e688da7ab5e6e423ceb0ab4907f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x2}, 0x48, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000040)={r3, &(0x7f0000000100), &(0x7f0000000080)=""/15, 0x2}, 0x20) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x224002, 0x0, 0x3f}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000580)={&(0x7f00000003c0)="8ba0a9b0cd39c1bb42a5e93eb51a19d49ff45a4a642024615b058ba12605a6e93d8fddf4ffb6fc31ab1cf9340c943fa0120d53a3c0c2ae646522c76377e3dce6f21a1c40bf984a78c0f6eafd49890aa230147d6af1d5e56324d9619c399be08e2462552dbd085506a6389a31203086", &(0x7f0000000440)=""/5, &(0x7f0000000480)="132cce1f36c16e72b945b86e3f1cb6631eff4ccc5cb9a48e5ecbbff62e95c15c350bbeaa119edfa8c5d48d8772276b922539d6bbc61e8bfeab04c4f98fe8a310116e13e41b3859116e3c6aa95c226da362bec181", &(0x7f0000000500)="f7a786c666abe7eb7c3d2684f3882b0e5a561c0438cc4c60396c2b34df3bd29e829cc9a60dbb5648aeb074663b18df11ff37477f26c92bedad47529acd88a01f005dd0b371679d3fbc56a7eef0acf70c3e0954d25fe401db4103ba365cc78178d3f06e3f3fbeb3a75d6f72ec0d6b9c3e136a8b3894", 0x8, 0x1}, 0x38) timer_create(0x0, &(0x7f00000043c0)={0x0, 0x24, 0x1, @thr={&(0x7f0000003340)="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", &(0x7f0000004340)="960fd704c3a04e399b992fb33d8f37e21195c40ec46590621cbd12ae81a630da248f41b1451edaa0aab86444dc0d39550e33d456b0f2bde1350c9ed2d9379d7f499b47a41c38a24f3139516eee3ccde5552d66c58e4e510e468052d2be9359588f56c1027ca8"}}, &(0x7f0000004400)=0x0) timer_settime(r4, 0x1, &(0x7f0000004440)={{0x0, 0x3938700}}, &(0x7f0000004480)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) mount$tmpfs(0x0, &(0x7f0000001880)='.\x00', &(0x7f00000005c0), 0x1010003, &(0x7f0000000680)=ANY=[@ANYBLOB='usrqnotaqblock_\t\x00\x00\x00\x00\x00\x00\x00t=40\x00,\x00']) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) read$alg(r8, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r8, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="08e0211db1d69fa4593039c5ad01740c4d", 0x11}], 0x1, 0x0, 0x0, 0x804}], 0x2b, 0x48091) sendmmsg$alg(r8, &(0x7f0000000ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}], 0x1, 0x20040894) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x2801, 0x0) 13.954763384s ago: executing program 4 (id=2897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000004001333a40000000000000000000000079ff10507edf31503bcbae8a8084fe7068f82f2845e16c74602b42b95df0ce2297e836006b9a21828a70da1ae2bf478416fa1c01b6a859381f3d769ce9426a8caa5a02dda59ed878be02794", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x10e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r0, @ANYRESHEX=r1, @ANYBLOB, @ANYRESDEC=r0, @ANYBLOB=',_id=\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRES64=r0]) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x3, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cea}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f0000008340)="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", 0x2000, &(0x7f0000004340)={&(0x7f00000003c0)={0xad, 0xffffffffffffffda, 0x5, {0x7, 0x2d, 0x6, 0x495a802, 0x8, 0x7fc, 0x7aa9, 0x6, 0x0, 0x0, 0x10, 0xa4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02"], 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0c00000004000000ab0600000000010000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000000000000000000d367840af51e97b2ba56f9dee9618001b6a366ce62e3c23a669d23016d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000000300"/28], 0x50) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002080)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7aaf804d}, {{0x0, 0x0, 0x0}, 0xd}], 0x3, 0x12002, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008820}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000340)=0x9) pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x5, 0xd, 0xffffffc, 0x1, 0xfffffffffffffffd, 0xfffffffffffffff9}, &(0x7f0000000000)={0x6, 0x22f, 0x1ff, 0x4000000000000005, 0x7ff, 0x400000, 0x0, 0x92}, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12.278914099s ago: executing program 4 (id=2901): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/name\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0x100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x84}}, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x4e2502, 0x9fce7b982e92e1de) 10.913966801s ago: executing program 4 (id=2907): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x17f) syz_usb_connect(0x3, 0x32, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x2010020, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='offline', 0x7) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='online_movable', 0xe) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x8}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x1, 0x7}}, 0xe8) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r8, &(0x7f0000000100)='1', 0x1) 9.502905143s ago: executing program 9 (id=2910): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x21) openat(r2, &(0x7f00000001c0)='./file0\x00', 0x24040, 0xa) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x80c42, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) read(r3, &(0x7f0000000040)=""/148, 0xffffff96) 8.874681256s ago: executing program 4 (id=2911): syz_open_dev$swradio(&(0x7f0000002040), 0x1, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000f80)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0xffffffffffffffff, 0x3, 0x4, 0x100fff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r2, &(0x7f0000000600)='dir .', 0x5) write(r2, &(0x7f0000000700)='bind', 0x4) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x80000) socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) close_range(r0, 0xffffffffffffffff, 0x0) 8.722141159s ago: executing program 9 (id=2914): r0 = io_uring_setup(0x136a, &(0x7f00000001c0)={0x0, 0xd7e7, 0x40, 0x1, 0xef}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r6, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000004c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000480)=0x2, r6, 0x0, 0x2, 0x4}}, 0x20) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r2, 0x4068aea3, &(0x7f0000000140)={0xce, 0x0, r7}) socket(0x2, 0x80805, 0x0) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000003e00)={0x1, [{0x3, 0x380, 0x4, &(0x7f00000004c0)="2e8a565577f63e9ec1dec378454541b6e4085a5d5dfcaec0544a58e2a8382916965e5fb14dbc40983f0d889400f8cdcdf30f72cd36569411fc4fdcf7ea399a9d94a9ebd6e6b9cc80cfbdb870b822c811effed199dba01daae1833653930c097ed6c56d020c448544708a48f0cfbc383f"}, {0x3, 0x748, 0x4, &(0x7f0000000580)="ef6df63709cadd4775c22e8da86599961cb453e4bd793bf3264f6fdf6f5a09cc2fff6c3475e9351d058e2960584b08b063c5f670ef4445b5ba94a18c0e4e8266faa34afe575d53ea5ef4c1dcc038f4e503d21fdb201e5716d7853dc9ea9a64f3a269eaf0322ae48a1247ee4fc51fece02d7dd635e182be7a05710a83317134325e58ca3d30d2aabec5d827271415dd5952142a20f3e32a565f8d1018b03e5fad5fd2e3d45f547257faab20fdff17b0b4e920f0bb76cd58ffe9f2ec6d5c2f6500a9b2ce6ea16a12747810663464c734e384bd6bb8029b451f488b3d7bdb99002b5054c0b5ebd282d865"}, {0x3, 0x0, 0x8001, 0x0}, {0x2, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0xdd, 0x0}, {0x1, 0x0, 0x10001, 0x0}, {0x1, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x9, &(0x7f0000002ac0)}, {0x3, 0x0, 0x400, 0x0}, {0x3, 0x8, 0x0, &(0x7f0000002c40)="0f"}, {0x3, 0x0, 0x80000001, 0x0}, {0x1, 0x0, 0x2a358830, 0x0}, {0x1, 0x70, 0x200, &(0x7f0000003d00)="6168661eb85776e1c6529ca0ba4f"}, {0x1, 0x0, 0x70, 0x0}]}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000200)={0x28, 0x6, r9, 0x0, &(0x7f0000343000/0xf000)=nil, 0xf000, 0x8000004004000004}) ioctl$IOMMU_IOAS_COPY(r8, 0x3b83, &(0x7f0000000240)={0x28, 0x5, r9, r9, 0x8, 0xfffffffffffffffa, 0x3fff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r2, 0x4008ae48, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.310497478s ago: executing program 4 (id=2921): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x17f) syz_usb_connect(0x3, 0x32, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x2010020, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='offline', 0x7) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/memory/memory9/state\x00', 0x1, 0x0) write(r7, &(0x7f0000000240)='online_movable', 0xe) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000440)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x8}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x1, 0x7}}, 0xe8) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/mpls/platform_labels\x00', 0x1, 0x0) write(r8, &(0x7f0000000100)='1', 0x1) 6.005425513s ago: executing program 9 (id=2923): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff0100000001", 0x15}], 0x1) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001800110101000000000000000a0000000002000800000000100016800c000100000000000000000808001700ffffffff13c03849d692aca3cf9dafda047fc8a41711f057a10725f855278ec56cf4187b33f2d0359f38c7cb015b370f074c6ae0016218e108b5438c944323c4e4370235e3798b820fc0eb9c1d24b0ab938d59e95568c1c28f9fe11cb8c3d82c1f9196af406d221e489a753e41b777a66bc036503659c7302e5877b28543deaf5fe47dd8d2e0"], 0x34}, 0x1, 0x0, 0x0, 0x4805}, 0x4) r3 = socket(0x40000000015, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0xf, 0x1, 0x0, 0x4, 0x1, 0x1, [{0x0, 0x2, 0x20000000}]}, @restrict={0x0, 0x0, 0x0, 0x6, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x3}, 0x28) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e0000"], 0x70}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e21, 0xf, @rand_addr=' \x01\x00', 0x6}, 0x1c) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000400)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000000) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x12, r5, 0x0, r1}) 4.972264381s ago: executing program 1 (id=2924): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000800)={&(0x7f0000001000)={[{&(0x7f0000000400)="b2cf08b7671d67582d7e3031494407ac1ded132c4ecbb3f5c457950debceb41d8ca689354324d01bf29bc715538ff035560aad7d42a0a18c1ee5c218faa1fb08a92b910e57a3eebc7254c65c29b22715d228b84b619b774019cd728b7c325ddfdc9693721d5e090f85581c5d91542e2250", 0x71}, {&(0x7f0000000480)="04bbd5804a683eb4a416c44aacf6685bff2f57a7a759df0ca7c8df0cb578692e96d676d0bcdebcb7bc05f1df5bb7f7c011a6392e81ec2df78efa46fbe326f100db99bc700d84a7b1087d42cc70f925ade4a55206804e231629a4ef4d83823d1df2536250e9beb672", 0x68}, {&(0x7f0000000500)="0ad079a39931e61a6249e0c951dda4d8a6113893173a3118681060ee495dc4901f1d2b5e2d024ef9d56468b32dbca63bb9fcdd0d3d817416d6e0552bd5f5bead12b2e83613f04a0447008ae912b237e6877647e90aa9329d5b2d16cc3b2d93d5e0a10f8a60cc9f798f95465b5deaeb190a1ac65f13c4fcebb0ca8d327e409766bb46632d4aa8404dd1acae67110124af008271b75b685d882fe2", 0x9a}, {&(0x7f0000000700)="f619608b1f045de64844b97b72222ffe11a1a01ea378a8026d43d0eaa9a1b09286b9e49c96ab750ddb2e6316d52989afe0a7918ac5dfd53c85550d9b8e81ac9f2e550c6e4e1c8b7809c9e9c9217751a56b2f54e4a6f665c9d5f70912e4f8fa660a0b85548acea420f0609db07ec46a3d39a1c186d93419d77fb6df75dffb1beb1e174c47eb0c048113cbeac78071668be4584addcdf484e3c9ff6fe9cc9b3e14f72cfc997d8195987c943a6a1d91cb44731e60346081893c2cacec415ee7d2f1d8055a41df495e73a8e9a3ed5fc15254df921834bc", 0xd5, 0x1}]}, 0x4, 0x3}, 0x1) syz_emit_ethernet(0x33, &(0x7f0000000040)={@local, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0xffff, 0x4e23, 0x11, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}, "72c0ed933f"}}}}}}, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x8}) syz_usb_connect(0x0, 0x2e, &(0x7f0000000600)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a00020102aef7a81aec3d75f363aa255613e974b92dc6452c2de84831cc32d9b8ff0cbc66aa8e1bd74f58cb3f92dc2b98c9e3883b2ac2c33819b0b7c6653341f9"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) r3 = socket(0x400000000010, 0x3, 0x0) write$P9_RLCREATE(r2, &(0x7f0000000680)={0x18, 0xf, 0x1, {{0x0, 0x1, 0x4}, 0x7}}, 0x18) sendmsg$nl_route_sched(r3, 0x0, 0x24040011) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000003c0)={r4, &(0x7f00000001c0)='\x00', 0xc000, &(0x7f0000000300)={@align=0x2, {0x6, 0xf001, 0xfffff801, 0x7f}}, 0x101, &(0x7f0000000340), &(0x7f0000000380)=0x2}) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io+mem\x00'], 0xc) 4.661742085s ago: executing program 9 (id=2927): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = dup(0xffffffffffffffff) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @none={0x300, 0x2}}, 0x14) write$FUSE_DIRENTPLUS(r0, 0x0, 0x138) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000000140), &(0x7f0000000240)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/e1000e/new_id\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='8086 1237 FFFFFFFF FFFFFFFF 000', 0x1f) 4.609018571s ago: executing program 9 (id=2928): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000004000)=ANY=[@ANYBLOB="120100000b529708410e42416ed40102030109022400010000000009040002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000340)=0x7, 0x4) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000fc0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5e, 0xd0, 0x4, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xf, 0x7c, 0xf4}}}}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000001000)={0xa, 0x6, 0x7d242219ab3a5239, 0xe, 0x0, 0x1, 0xff, 0x4}, 0x2d, &(0x7f0000001040)={0x5, 0xf, 0x2d, 0x4, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0xb, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "78ff55e413c1e2335d3418756ae070b0"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x6, 0x3c, 0x1}]}, 0x4, [{0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x438}}]}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect(0x3, 0xd8f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x70, 0xeb, 0xa8, 0x10, 0x2639, 0x1, 0x7d69, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7d, 0x4, 0x1, 0x3, 0x0, 0x4e, "", [{{0x9, 0x4, 0xdc, 0x8, 0x3, 0xe7, 0xf0, 0x64, 0x4, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "88"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x2, 0x4e9e, 0xa}, [@mdlm={0x15, 0x24, 0x12, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x4}, @country_functional={0xe, 0x24, 0x7, 0x3, 0x1, [0x6, 0x8, 0x2, 0x2]}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x7, 0xf7, 0x4}]}], [{{0x9, 0x5, 0x8, 0xc, 0x428, 0x3, 0x6, 0x5b, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x6}]}}, {{0x9, 0x5, 0x5, 0x1, 0x10, 0x9, 0xa, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x45, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x40, 0x40}]}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x2, 0xb0, 0x3, [@generic={0x86, 0x9, "ed9d69b6dcaa53565fd123b699de6cad0b138934625feeb1e9391c76b41d68af2512a4ce2e12df9702e88b0e74aaba8daf36fe064d2648be41d42a93b61ee8104487f8c2644323c96bc2211584620aa080455a8ca946f82a3e9ef38568880dbbe82f2330cfadf91b73f9fef5ceaa8005fd01c71c475e37a0e2ed17d36ad34f07cb2e1819"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x5}]}}]}}, {{0x9, 0x4, 0x81, 0x9, 0x7, 0xcc, 0x5d, 0xd7, 0x4, [], [{{0x9, 0x5, 0xc, 0x2, 0x20, 0xf4, 0x8, 0x10, [@generic={0xdc, 0x21, "f5785aa26bab9da99a9d038ff51186855c744f8e05f5039f4ab0bec2d189791aef5556e7127d5cdcf749475feb56b470d707593f13384f4184106cc9c6c24e79616781c542ea59d4814bca78ef8558a6f5229ae80bb79ebc1de79ed4014c6d74830b371f968325b8e1dd694afdeb3996814a0498a733153df4f5b06710eee47c1867959b38e237f4c4e548f024d8988802d1b39eda08a59e9c730af5c0b7672dc8e00a1958b87b17ab11314fc772a5adc4ca5b0dec35f1d4533e9b0e27f11298e7999b3926598e2fd95efeadacdbdc44cfbbb5c7884e23774943"}]}}, {{0x9, 0x5, 0x84, 0x3, 0x3ff, 0x9, 0x3}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0x6, 0x4, 0x2, [@generic={0xda, 0x7, "1e5d11e59a7f8e7a530266ba09288fd2339574f58d1c6144c7292027ca47542e425d44e39fe6f4e82f8f31d268e68a5765770bfdc05dd772528ea03dc23e125414763568c3b7ec95dc2fa2368d81c4e8b3b749152d5dcb3f90b87d0b1f764dd9d57f16f592d66752e3f197929869cfd45d7bc1f2437b386aabb86b920a8813b928d1d66ae372a1a04a3f94278108de8ebc793f432f5e758e38d33e06c77ae427d3598cc256e633e7c27a50ba22369d16279bc342d075479f66e53f18d228ce68d1d5ed03f5c582fe33ff976524f216605dc42ee00f663ede"}]}}, {{0x9, 0x5, 0x8c, 0x0, 0x40, 0x20, 0x8, 0x7}}, {{0x9, 0x5, 0x80, 0x0, 0x7ff, 0x9c, 0x2, 0xda, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7}]}}, {{0x9, 0x5, 0x3, 0x0, 0x5ff, 0x7, 0x6, 0x1, [@generic={0xe9, 0x10, "e94148ddb8e050c8b964b6d97cf13e502028f3b1789c212e8c46a17649a84430a0c7a6d7b751e625ab825f2aaba7c1bf6b26c43c2e69f5f7d83d6be639dcb7d91d83c19cb03b634b4e5816889c592b62fb6f8ce71b69fd4a711a831a2078c76bdcdccbadba5cf34ade3d19f01d9f0ac1718e14f552b51303a9375132c64e3b1fee12a0f207681e8b84f136fb45def2d02018d11f071d13d34be2a2324449bbdcb40a61e700e89a61273540a3b91b284fed1e3b4a5ef14382cd1a7504825b4dfef6e1e7a4ae50a0eca3d270b9967c86861bf1a5ec9d9f007d5450e46abb729d2e20ce441212479f"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x3, 0x3, 0x5, [@generic={0x42, 0xd, "12c3d8979dfa302d25e7c3adc98057eb361fc00749a4c82b25b40e500e74bc2c8364b45bfd58a6d62f698ea3e6c3544eb8ecac708f7476b53bf299faa985af56"}]}}]}}, {{0x9, 0x4, 0xc, 0xff, 0x4, 0x39, 0xa9, 0xfb, 0x1, [], [{{0x9, 0x5, 0x5, 0x0, 0x3df, 0xb1, 0x2, 0x3}}, {{0x9, 0x5, 0x5, 0x0, 0x3bf, 0x86, 0x7, 0xa8, [@generic={0xfe, 0x23, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x7}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xfd, 0x0, 0x40, [@generic={0xf9, 0x10, "ce767b0efa318b54692a98f6f6548cb5085b672e50201d719cd41c1a5d040ab87c3ba205338687f60b66aec742b44094a700a9b277836977cedb33f5fc544df02f01eb7aeff44326c37e4d0c51e13f7d9bd794cc805f9c563a8f7218e4b364a15f845e23e28ae1b0949c7d685f323a73fafd6a57826bc023971089ccf388d4dffd433732e1127f6fead48379d7857b297af93f8c73080752343f0ba8e74d18a2e7cad5f578d64a81d12e314e27f287fb55cf6f72d1cd2cfeabf0dcc70b8e8a9dc081c28324cb4eb4dfe722aceac82ecbde3c9b0941cb48501e12bb42b02c6f25b0de57397015a8b23167ce9ee66c651a430f76629431f3"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x6}]}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x80, 0x10, 0x1, [@generic={0x92, 0x1, "22e83819a8b5a7889b01b6b105f2d502cff570bf7fdf93d09dea227137fff7b66e86c212e20ff0205c59eac1faa39109ae12ba981e4f39bd93e81130d5d3218536b12dc4aaed1d774b41e0297d484a677bf78efaa3384d78db04342a7db3153c9c67f17c45b85877274ec1ba9437cf9c29e253a70c806cad6f0f195f29329a0b366beb8608f47822b9c040f9e5ad55ad"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xd, 0x8}]}}]}}, {{0x9, 0x4, 0x51, 0x7, 0x10, 0x47, 0x26, 0x11, 0xb, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "c434b34d"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x80, 0xfffc, 0x7f}, {0x6, 0x24, 0x1a, 0x4, 0x8}, [@obex={0x5, 0x24, 0x15, 0x8}, @acm={0x4, 0x24, 0x2, 0x5}, @dmm={0x7, 0x24, 0x14, 0x1, 0x5}]}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '%'}, {0x5, 0x24, 0x0, 0xeb2}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x10, 0x421, 0x10}, {0x6, 0x24, 0x1a, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0xd, 0xfff, 0xd6, 0x6, 0x7, 0x6}, @country_functional={0x6, 0x24, 0x7, 0x4, 0x2}, @dmm={0x7, 0x24, 0x14, 0x1, 0x6}, @dmm={0x7, 0x24, 0x14, 0x6, 0x6}, @country_functional={0xc, 0x24, 0x7, 0xf, 0x4, [0xe, 0x57c8, 0x200]}, @acm={0x4, 0x24, 0x2, 0x7}]}], [{{0x9, 0x5, 0x2, 0x8, 0x400, 0xc, 0xa, 0x5, [@generic={0xff, 0x1, "3a0dc9c2fc5554f3a7707896eeaeac8dca9f48638a366fc099b1ece45014407c4d1716220229909e187bc113e26e7e4ad16a855d09d2487ef055ae17ce194a821487cc3f900aec4c31fc8c3e560813a6f91f37f5757ac1d9d80f86f9f2b17f349b524b7e33e9bd4e781c7daf85eb89be65864af041bc512a72524cb0f71850572319833f5b6cf6225a3c22b5a7a82796a374c4a7ea560398dca9561034702e514c8aeee83c3392dfda69b6e776eb055ad0027a59867722a68602b922ce087d3845ffb3b78babf07732a44654ba5644b34d6237598fc4aa60a4ce53842146af2c536c664c1e05a2dcab13fb8c08219e3d6106211225fdbee9b9f6a129bf"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x9, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf7, 0x9}]}}, {{0x9, 0x5, 0xa, 0x15, 0x8, 0x6, 0xf, 0xb7, [@generic={0x80, 0x23, "404bc1c1f2a44640e6555739252a6a8b78a4beb37099091e7472d3a3e0a0b4111d0403965e5f4b217796917148e2e69b4afe84a578b6aab35913f6ae4585f108e66ac74d8cb39705025099205607ed62f2677657b211d21087220aa63fbc0dc8f124d45f60bdeef874cd26a1f4c974c9cbaac0de4941980343dd748a25e2"}, @generic={0xdc, 0xc, "f3ae0768ae86654b664f69b3f327ddb66c716685baacbc15a7f3eadde25df6613befb3c8b79566d5130123fd32da0a0ddc2b6df05b36b9202c8d1d185f2da65ef88a1c2cf45dfce082b56b7c35061446de5a4c202649e62813bc2b4a0a633358f4aba38822920669dbb92a4fc28b4bf17f5281e64648abf14234b90275b133f7005d84011a118d12f3def5b8e1af709e3111e02eb8e27094eb043c64890fc7b01656358b94d6cc703fcc8dde18e505dda91c8bfdf39a439061d6f1f91653bfc338bf3b255286b832d2220472a81d56a05a91243a460f9b17e0c6"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x5, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x1aff}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0x8}]}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x0, 0x8, 0x9}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x2, 0xb, 0x1, [@generic={0x47, 0xc, "858422a6402784be01574cc47332c7b26d444f8904bfcf26d71384d29656b1c49b488fc45295b0cc798246e8e2b61ac21e7504a6ab15c8b1c17a461bd777522702adaa0d49"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x98, 0x3bd}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x4, 0x82, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x89, 0x9fd}, @generic={0x53, 0x9, "746b3a06a3586b312bd102114fbae0367681de440e288ae80532b9960bf3e91031054a44e13ee5a0bdd36ea14ef2cf14746155e824ea861cebe5346e60bae8bdec66a1cacbd6ab6f1675386b1c8fdb06fa"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x0, 0x1, 0x1, [@generic={0xdf, 0x30, "dbebd089f5a9da77e6de0db835d9b7815f2a5af67cee9cb283cd74bfc2491e695a011da3c67692e2a6839022144fa775f8d8963134c82d27de67d83ea5f4a34785fe8d2dc2b4b76378c62a29e8a8fa61f390de8c999ae22e59783e7640545bc0c355756243c8ece063b20de00c1cf28e9bf6833e94515f14369e73a03ebe723260ec237aceadcb5074a439f3aec06f9f5ee4ff250adfbcf440f38218688545750c42f21e119c07a3ce0a0f63b397f0ddab7496ab1bd238fbf37c97a7608918219a2c93280b295d2f3941858eff85f42ecd877d82913e4e0cd81fa77ed8"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xf7, 0x3, 0xe, [@generic={0xa9, 0x11, "cdc018b05c8d67faf30fbce4be35b854b4cdee699e9f7eea1471312e257740794e78d990600acdca31cbb47741a6688a9a3dca54b2e3890bd64540704e5bda822d91652c9a416352ea83924829cba7a4ce544672b9bac58b9e5caf5b68a64219e24b69c0b941de4ad5ccf219f608531ac8f7f4956562a99bf09727de1004a09d2e545c02208f7cba4a1791e674df0bf96db6fc207c34c03295cdea6a1956d7c16ebc2dd601dac2"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x7ff}]}}, {{0x9, 0x5, 0x3, 0x4, 0x0, 0x0, 0x8, 0x5}}, {{0x9, 0x5, 0xb, 0x14, 0x240, 0x7, 0xfe, 0xb0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x52}, @generic={0x98, 0x22, "0b91852005bf62a4cd4757adeadce1828f101b2504975f44e01b1c247e463f9470be3a7ddbec03322e23159b309a772ebe5997c77ec0781331bb92003995d1e71b4487b69e0d1feb5b73f826f7e03e8ad73be8f2ccaf403e9cd6e89ad2d1f78284e18868bb603ebbd86b736c38bb216d5f98435fea1b3dc74c5da934635a089f5c30791939c98847c87aebf7f51059a80fd722cc10d1"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x3, 0x9, 0x5}}, {{0x9, 0x5, 0xa, 0x3, 0x200, 0x2, 0x58, 0x4}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x8, 0x9, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x6, 0x2}]}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x0, 0xaf, 0xf}}, {{0x9, 0x5, 0x2, 0x3, 0xc88df0c341164cc4, 0x8, 0x4, 0x80}}]}}]}}]}}, &(0x7f0000000f80)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x300, 0x7, 0xad, 0xff, 0x8}, 0x12d, &(0x7f0000000e00)=ANY=[@ANYBLOB="050f2d010610100a0ce1000000000f05000fc000000b1001041000020428535f0b100108210009036a0f0703100b03100bfc100195f7dcaa2bb55b5a7a0e5d280f28a84269bc032d20bae10bc04ee6c33411cd536211d1b38f7c3cdec89f8437d1a372e345ddc0ad3804b575d618e7f0e1a15a5e96f71772cd40fe74df164715aa87a58b33bffb901de323b9153b5f89da76e760e036c18880042bcf0dd42a9d84d07bf3cc4716104a0d8fde84afc65fa2b73aa359e0c88b2956d0cba91d30b207f8a7e2574320c6557121abfa3e44b2b2bac0eddce1dc8f765afc53c2f3d958e996de0ddf54acd10de8171536f7c4e5ff77db29b6654d6dfde6957de0668dc04626470187565b29f89f19bc4a6311c7c65d750606e171f57d16e5c046b2c65e0e84d782c4ee02109b69108921"], 0x1, [{0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x406}}]}) 4.530828865s ago: executing program 3 (id=2929): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0xdc) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x41) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r2) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) setns(0xc9, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x30000, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000005c0)={'broute\x00', 0x6000000, 0x4, 0x8d, [0x0, 0x400004, 0x9, 0x8, 0x377, 0x8], 0x0, 0x0, &(0x7f00000001c0)=""/141}, &(0x7f0000000580)=0x78) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32, @ANYBLOB="4800308014000400403a050c5baee2004ef2b6d713459a7a2800018008000100000000001c00038008000200020000000600010000030000060003005d550000050003"], 0x64}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), 0xffffffffffffffff) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r1, @ANYRESOCT], 0x48) 4.405661855s ago: executing program 4 (id=2930): socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000600009040080020300000009210604000122050009058103"], 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000080)) getpgrp(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000ff", @ANYBLOB="000000000a000200ec7f879d431000000800090004000000"], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x48044) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2}}, './file0\x00'}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r5, 0x40146f2c, &(0x7f0000000280)={0x78, 0x0, 0x0, 0xe, 0x4}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r6, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x194, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xe}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x8}, @NL80211_ATTR_IE={0x15d, 0x2a, [@ht={0x2d, 0x1a, {0x8, 0x2, 0x7, 0x0, {0x80, 0x7, 0x0, 0x3, 0x0, 0x1, 0x1, 0x2}, 0x206, 0x638, 0x80}}, @perr={0x84, 0x108, {0xf7, 0x10, [{{0x0, 0x1}, @broadcast, 0x7, @value, 0x3b}, {{}, @device_a, 0x6, @void, 0x2b}, {{}, @device_a, 0xfffffff9, @void, 0x30}, {{}, @device_a, 0x7, @void, 0x1}, {{}, @device_b, 0x7fff, @void, 0x3e}, {{0x0, 0x1}, @device_b, 0x10001, @value, 0x34}, {{}, @broadcast, 0xfffffff8, @void, 0x3e}, {{0x0, 0x1}, @device_a, 0x9, @value=@device_b, 0x22}, {{0x0, 0x1}, @device_b, 0x4, @value=@broadcast}, {{0x0, 0x1}, @broadcast, 0x722, @value=@device_b, 0x6}, {{}, @broadcast, 0x3, @void, 0x35}, {{0x0, 0x1}, @device_a, 0x80, @value, 0xe}, {{}, @broadcast, 0x4, @void, 0x13}, {{0x0, 0x1}, @device_b, 0x200000, @value=@device_b, 0x37}, {{0x0, 0x1}, @device_a, 0x4, @value=@broadcast, 0x1b}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0x7}]}}, @chsw_timing={0x68, 0x4, {0x5, 0x6e25}}, @gcr_ga={0xbd, 0x6, @device_b}, @link_id={0x65, 0x12, {@random="c92dc37145a8", @device_a, @device_b}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x1, 0x3}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfff}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x21f}]}, 0x194}, 0x1, 0x0, 0x0, 0x4008081}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xff05, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 3.41979001s ago: executing program 0 (id=2931): syz_open_dev$swradio(&(0x7f0000002040), 0x1, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000f80)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0xffffffffffffffff, 0x3, 0x4, 0x100fff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r2, &(0x7f0000000600)='dir .', 0x5) write(r2, &(0x7f0000000700)='bind', 0x4) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x80000) socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) close_range(r0, 0xffffffffffffffff, 0x0) 3.397015927s ago: executing program 3 (id=2932): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r0, &(0x7f0000000600)='dir .', 0x5) write(r0, &(0x7f0000000700)='bind', 0x4) 3.043163146s ago: executing program 3 (id=2933): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x10fa) 3.020828107s ago: executing program 0 (id=2934): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x24048881}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x42801, 0x0) 2.936525053s ago: executing program 0 (id=2935): socket(0x23, 0x80805, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd26, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4428}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x8}) (async) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[], 0x0) 2.509592127s ago: executing program 1 (id=2936): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x24048881}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x42801, 0x0) (fail_nth: 1) 2.447639235s ago: executing program 1 (id=2937): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x401400, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x401, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'veth0_vlan\x00', 0x2000}) mount_setattr(r0, &(0x7f0000000180)='./file0\x00', 0x100, &(0x7f0000000200)={0xd, 0x1000f7, 0x140000, {r1}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') write$binfmt_misc(r2, &(0x7f0000000540)="f64b", 0x2) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x80400) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="500100001a00330600000000fddbdf25fe8000000000000000000000000000aafe8000000000000000000000000000aa000040002c6c80050000800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000000003200000000000000000000000000000000000001230300000000000001000080000000000000000000000000c0000000000000000040000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000029bd7000033500000a0005000000000000000000480002"], 0x150}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100003afe0620e6040b00000101020301090224000100001000090414000239261a5509050602ff0300000009058202"], 0x0) 2.375908627s ago: executing program 3 (id=2938): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1508}}, 0x24000880) writev(r0, &(0x7f0000000040), 0x2) 2.212398864s ago: executing program 0 (id=2939): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) capset(0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffa]}, 0x8, 0x800) syz_io_uring_setup(0xf08, &(0x7f0000000400)={0x0, 0x595d, 0x1000, 0x20000, 0x1000051, 0x0, r2}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000a00)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd=r2, 0x0, 0x0, 0x1, {0x259a}, 0x1}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r7 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x1) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) capset(0x0, &(0x7f0000000200)={0x200003, 0x200003, 0x801, 0x4, 0x7, 0x6}) ioctl$KDGKBDIACR(r9, 0x4b4a, &(0x7f0000000040)=""/110) fchdir(r8) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) 1.676080075s ago: executing program 9 (id=2940): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000f00), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x801) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000180)={0x0, 0x1, 0xa, 0x7, 0x3, 0x80000002, 0x2, 0x8000000000000000, 0xc}) mount(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='cgroup\x00', 0x400, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000448000/0x4000)=nil, &(0x7f00009c8000/0x4000)=nil, 0x4000, 0x2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) connect$unix(r0, &(0x7f0000000140)=@file={0x1, './file1\x00'}, 0x6e) syz_usb_connect$uac3(0x3, 0x80, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000040f80600b040000102030109026e000301ffc010080b0002010130070904000000010130000a2401100a0007000000090401000001023000090401010101023000090501"], 0x0) setns(0xc9, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.490863286s ago: executing program 0 (id=2941): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000003180)=0x23b, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x107800, 0x0) unlinkat(r1, &(0x7f0000000040)='./sys/class/rnbd-client/ctl/map_device\x00', 0x200) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./sys/class/rnbd-client/ctl/map_device\x00', &(0x7f0000000280), 0x80000, &(0x7f0000000540)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c646f6e745f686173682c7375626a5f747972653d292f2c6f626a5f747970653d2121287d2c6f626a5f747970653d24212c66736e616d653d28ed243a2c7b2b7b5bf7b52c646f6e745f686173682c736d61636b6673666c6f6f723d657468746f6f6c002c6673636f6e746578743d757365725f752c6c617a7974696d652c00"]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x1, 0x20) io_setup(0x4, &(0x7f00000001c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x1000000, 0x0, 0x0, 0x1, 0x40, r5, &(0x7f0000000200)='8', 0x1, 0x10000000005971}]) 1.475960461s ago: executing program 3 (id=2942): openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x1) ioctl$TCSETS(r2, 0x8925, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000640)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40000c1}, 0x4850) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x15, "0062ba7d82000000000000000000f7fffeff00"}) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000001dc0)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x63418842, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x10, 0x0) execve(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0x0) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7, {0x5, 0x4, 0xdc, 0x8, 0x3, 0x1, {0x6, 0x638, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0xfffffffe, 0x7, 0x1, 0xc000, 0x4, r5, r6, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f000039f000/0x1000)=nil, 0x1000, 0x2000008, 0x100010, r7, 0xc9495000) r8 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$dsp(r8, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r8, 0x5001, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f00000000c0)=0xa) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0xc055) 613.682799ms ago: executing program 1 (id=2943): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r0, &(0x7f0000000600)='dir .', 0x5) write(r0, &(0x7f0000000700)='bind', 0x4) 484.082809ms ago: executing program 0 (id=2944): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@mcast1}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000840)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 378.528215ms ago: executing program 1 (id=2945): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000010900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000000) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) syz_fuse_handle_req(r1, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591638d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0006cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296560000d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fd92bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f46dc53a26fd997f3af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde84f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c5770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46ba8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a650b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0c1043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077be00000000d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc654ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r5, r6, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000100)={r10, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r5, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './dev/mapper/control\x00'}) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(0x0, r13, 0x0) r14 = getuid() mount$fuse(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140), 0x1c01, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r11}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}], [{@euid_gt={'euid>', r12}}, {@uid_lt={'uid<', r13}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', r14}}, {@subj_type}, {@hash}, {@obj_role={'obj_role', 0x3d, 'devtmpfs\x00'}}, {@fsname={'fsname', 0x3d, 'devtmpfs\x00'}}, {@obj_type={'obj_type', 0x3d, '\''}}]}}) r15 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r15, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") 921.868µs ago: executing program 3 (id=2946): syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x10b483) socket$alg(0x26, 0x5, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x2, 0x4000003, 0x0, &(0x7f0000000540)=""/63, 0x0, 0xc000}) syz_socket_connect_nvme_tcp() mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00', 0x1e1) listen(0xffffffffffffffff, 0x0) r1 = memfd_secret(0x0) ftruncate(r1, 0x51a9495) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4, 0x1, 0x0, 0x800, 0x0, 0x100001, 0x5}, 0x0, &(0x7f0000000240)={0x1f, 0x2, 0xfffd, 0x3, 0x40004, 0x80000000000000, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000001c0)={0x40007f, 0x0, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r0], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r4, &(0x7f00000004c0)='\n', 0x1) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000300)={0x1, r7, 0xfffffff8, 0x80000007, 0x29, 0xa, 0x1}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000380)='\x00', &(0x7f00000007c0)=@tcp=r2, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000001000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 0s ago: executing program 1 (id=2947): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x0, 0x4, 0x20, 0x2, {0x77359400}, {0x0, 0x1, 0xf1, 0x5, 0x0, 0x1, "bf231e4b"}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000000c0)) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000007c0)={0x34, &(0x7f0000000500)=ANY=[@ANYBLOB="00080108000083"], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000000000000400,0,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0xc00) read$FUSE(r4, &(0x7f0000006200)={0x2020}, 0x2020) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x408000, 0x0) kernel console output (not intermixed with test programs): etting 7 has a duplicate endpoint with address 0xB, skipping [ 925.809274][ T5702] usb 10-1: config 1 interface 81 altsetting 7 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 925.809293][ T5702] usb 10-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 925.809309][ T5702] usb 10-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 925.809326][ T5702] usb 10-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 925.809343][ T5702] usb 10-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 925.809359][ T5702] usb 10-1: config 1 interface 220 has no altsetting 0 [ 925.809373][ T5702] usb 10-1: config 1 interface 129 has no altsetting 0 [ 925.809386][ T5702] usb 10-1: config 1 interface 12 has no altsetting 0 [ 925.809400][ T5702] usb 10-1: config 1 interface 81 has no altsetting 0 [ 925.815176][ T5702] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.815197][ T5702] usb 10-1: Product: syz [ 925.815210][ T5702] usb 10-1: Manufacturer: syz [ 925.815222][ T5702] usb 10-1: SerialNumber: syz [ 925.839158][ T4442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.839176][ T4442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.990801][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.990819][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 926.004733][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 926.004794][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 926.015295][ T31] audit: type=1400 audit(1788682197.560:1007): avc: denied { mounton } for pid=16557 comm="syz-executor" path="/root/syzkaller.dymZEJ/syz-tmp" dev="sda1" ino=2060 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 926.016845][ T31] audit: type=1400 audit(1788682197.560:1008): avc: denied { mount } for pid=16557 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 926.037755][ T31] audit: type=1400 audit(1788682197.570:1009): avc: denied { mount } for pid=16557 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 926.051247][ T31] audit: type=1400 audit(1788682197.590:1010): avc: denied { mounton } for pid=16557 comm="syz-executor" path="/root/syzkaller.dymZEJ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 926.051300][ T31] audit: type=1400 audit(1788682197.590:1011): avc: denied { mounton } for pid=16557 comm="syz-executor" path="/root/syzkaller.dymZEJ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=67625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 926.106231][ T31] audit: type=1400 audit(1788682197.650:1012): avc: denied { unmount } for pid=16557 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 926.124319][ T31] audit: type=1400 audit(1788682197.670:1013): avc: denied { mounton } for pid=16557 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 926.481717][T16770] usb 4-1: USB disconnect, device number 105 [ 926.706655][ T7926] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 926.715400][T13759] Bluetooth: hci5: command tx timeout [ 926.780768][T16791] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2735'. [ 926.860552][ T5702] usb 10-1: USB disconnect, device number 49 [ 926.884647][ T7926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 926.894789][ T7926] usb 5-1: not running at top speed; connect to a high speed hub [ 926.894874][ T7926] usb 5-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 926.920986][ T7926] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 926.934475][ T7926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.942934][ T7926] usb 5-1: Product: syz [ 926.942970][ T7926] usb 5-1: Manufacturer: syz [ 926.942988][ T7926] usb 5-1: SerialNumber: syz [ 927.167294][T16803] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2737'. [ 927.999849][T10828] syz_tun (unregistering): left allmulticast mode [ 928.132182][ T7926] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 928.163497][ T7926] usb 5-1: USB disconnect, device number 3 [ 928.235527][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 928.249539][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 928.259812][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 928.274184][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 928.281664][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 928.299543][T16814] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2740'. [ 928.321538][T16816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2740'. [ 928.360793][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 929.542750][ T52] Bluetooth: hci0: unexpected event for opcode 0x0c6d [ 929.733966][T16843] FAULT_INJECTION: forcing a failure. [ 929.733966][T16843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.734048][T16843] CPU: 0 UID: 0 PID: 16843 Comm: syz.1.2744 Tainted: G L syzkaller #0 PREEMPT(full) [ 929.734074][T16843] Tainted: [L]=SOFTLOCKUP [ 929.734080][T16843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 929.734090][T16843] Call Trace: [ 929.734096][T16843] [ 929.734103][T16843] dump_stack_lvl+0x100/0x190 [ 929.734132][T16843] should_fail_ex.cold+0x5/0xa [ 929.734158][T16843] _copy_from_user+0x2e/0xd0 [ 929.734191][T16843] bpf_prog_load+0x1490/0x2a80 [ 929.734222][T16843] ? __pfx_bpf_prog_load+0x10/0x10 [ 929.734262][T16843] __sys_bpf+0x1f46/0x4a30 [ 929.734282][T16843] ? __pfx___sys_bpf+0x10/0x10 [ 929.734297][T16843] ? find_held_lock+0x2b/0x80 [ 929.734319][T16843] ? get_pid_task+0xfc/0x250 [ 929.734341][T16843] ? get_pid_task+0xfc/0x250 [ 929.734371][T16843] ? find_held_lock+0x2b/0x80 [ 929.734399][T16843] ? rcu_read_lock_any_held+0x6a/0x90 [ 929.734423][T16843] ? find_held_lock+0x2b/0x80 [ 929.734444][T16843] ? ksys_write+0x190/0x250 [ 929.734461][T16843] ? ksys_write+0x190/0x250 [ 929.734477][T16843] ? lock_acquire+0x1d1/0x380 [ 929.734510][T16843] ? fput+0x7c/0x100 [ 929.734530][T16843] ? ksys_write+0x1ac/0x250 [ 929.734549][T16843] ? __x64_sys_bpf+0xce/0x140 [ 929.734565][T16843] __x64_sys_bpf+0xce/0x140 [ 929.734582][T16843] ? do_syscall_64+0xae/0x790 [ 929.734603][T16843] do_syscall_64+0x123/0x790 [ 929.734625][T16843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.734644][T16843] RIP: 0033:0x7fe894b9e159 [ 929.734659][T16843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.734683][T16843] RSP: 002b:00007fe895aad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 929.734700][T16843] RAX: ffffffffffffffda RBX: 00007fe894e25fa0 RCX: 00007fe894b9e159 [ 929.734712][T16843] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 929.734722][T16843] RBP: 00007fe895aad090 R08: 0000000000000000 R09: 0000000000000000 [ 929.734733][T16843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.734744][T16843] R13: 00007fe894e26038 R14: 00007fe894e25fa0 R15: 00007ffe06858ae8 [ 929.734767][T16843] [ 929.805962][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.252577][ T5792] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 930.402596][ T52] Bluetooth: hci3: command tx timeout [ 930.425407][ T5792] usb 5-1: device descriptor read/all, error -61 [ 930.515530][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.563301][ T5792] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 930.692675][ T5792] usb 5-1: device descriptor read/64, error -71 [ 930.780220][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.804419][ T5792] usb usb5-port1: attempt power cycle [ 931.093677][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 931.145051][ T5792] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 931.165434][ T5792] usb 5-1: device descriptor read/8, error -71 [ 931.285332][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 931.285367][ T31] audit: type=1400 audit(1788682202.830:1034): avc: denied { write } for pid=16851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 931.359252][T16877] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=16877 comm=syz.0.2749 [ 931.377648][T16810] lo speed is unknown, defaulting to 1000 [ 931.402403][ T5792] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 931.424168][ T5792] usb 5-1: device descriptor read/8, error -71 [ 931.456391][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2749'. [ 931.456444][T16877] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2749'. [ 931.532691][ T5792] usb usb5-port1: unable to enumerate USB device [ 931.559564][ T31] audit: type=1400 audit(1788682203.100:1035): avc: denied { write } for pid=16881 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 931.698084][ T59] vlan2: left allmulticast mode [ 931.704103][ T59] geneve0: left allmulticast mode [ 931.709890][ T59] vlan2: left promiscuous mode [ 931.714899][ T59] geneve0: left promiscuous mode [ 931.715266][ T59] bridge0: port 3(vlan2) entered disabled state [ 932.719966][ T52] Bluetooth: hci3: command tx timeout [ 932.726066][ T31] audit: type=1400 audit(1788682203.760:1036): avc: denied { bind } for pid=16883 comm="syz.1.2751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 932.726126][ T31] audit: type=1400 audit(1788682203.770:1037): avc: denied { connect } for pid=16883 comm="syz.1.2751" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 932.726178][ T31] audit: type=1400 audit(1788682203.790:1038): avc: denied { setopt } for pid=16883 comm="syz.1.2751" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 932.807462][ T59] bridge_slave_1: left allmulticast mode [ 932.807508][ T59] bridge_slave_1: left promiscuous mode [ 932.807717][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.845024][ T59] bridge_slave_0: left allmulticast mode [ 932.845069][ T59] bridge_slave_0: left promiscuous mode [ 932.845288][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.074748][ T31] audit: type=1400 audit(1788682204.620:1039): avc: denied { write } for pid=16889 comm="syz.0.2753" path="socket:[66920]" dev="sockfs" ino=66920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 933.201081][ T31] audit: type=1400 audit(1788682204.740:1040): avc: denied { create } for pid=16884 comm="syz.9.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 933.489072][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 933.512093][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 933.522250][ T59] bond0 (unregistering): Released all slaves [ 933.541756][ T59] . (unregistering): Released all slaves [ 933.575327][ T59] bond1 (unregistering): Released all slaves [ 933.791563][ T31] audit: type=1400 audit(1788682205.330:1041): avc: denied { write } for pid=16896 comm="syz.9.2755" name="wireless" dev="proc" ino=4026533042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 933.860944][ T31] audit: type=1400 audit(1788682205.400:1042): avc: denied { unmount } for pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 933.881284][ T31] audit: type=1400 audit(1788682205.410:1043): avc: denied { wake_alarm } for pid=16896 comm="syz.9.2755" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 934.792615][ T52] Bluetooth: hci3: command tx timeout [ 934.928603][ T59] hsr_slave_0: left promiscuous mode [ 934.938622][ T59] hsr_slave_1: left promiscuous mode [ 934.939461][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 934.939482][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 934.970057][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 934.970089][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 935.007661][ T59] veth1_macvtap: left promiscuous mode [ 935.007723][ T59] veth0_macvtap: left promiscuous mode [ 935.007834][ T59] veth1_vlan: left promiscuous mode [ 935.007900][ T59] veth0_vlan: left promiscuous mode [ 935.167511][T16930] CacheFiles: Failed to register: -95 [ 935.660164][ T59] team0 (unregistering): Port device team_slave_1 removed [ 935.679948][ T59] team0 (unregistering): Port device team_slave_0 removed [ 936.159565][ T5781] lo speed is unknown, defaulting to 1000 [ 936.159608][ T5781] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 936.244193][T11534] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 936.340081][T16810] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.348108][T16810] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.355629][T16810] bridge_slave_0: entered allmulticast mode [ 936.367461][T16810] bridge_slave_0: entered promiscuous mode [ 936.377834][T16810] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.386907][T16810] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.396817][T16810] bridge_slave_1: entered allmulticast mode [ 936.404438][T11534] usb 10-1: Using ep0 maxpacket: 32 [ 936.410599][T11534] usb 10-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 936.418950][T16810] bridge_slave_1: entered promiscuous mode [ 936.430617][T11534] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.440996][T11534] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.441036][T11534] usb 10-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.441060][T11534] usb 10-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 936.441088][T11534] usb 10-1: config 0 interface 0 has no altsetting 0 [ 936.441125][T11534] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.557906][T16810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.562073][T16810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.589894][ T5702] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 936.618840][T16810] team0: Port device team_slave_0 added [ 936.643725][T11534] usb 10-1: config 0 descriptor?? [ 936.702989][T16810] team0: Port device team_slave_1 added [ 936.745379][ T5702] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 936.758130][ T5702] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 936.758191][ T5702] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 936.758252][ T5702] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 30768, setting to 64 [ 936.758279][ T5702] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 936.788810][ T13] smbdirect: ib_dev[syz_device_name_32_chars_1234567] removed [ 936.818477][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 936.819250][ T5702] usb 5-1: SerialNumber: syz [ 936.836601][T16970] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 936.887509][ T52] Bluetooth: hci3: command tx timeout [ 936.950329][T16957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 937.046023][T16810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 937.046087][T16810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.046125][T16810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 937.057625][T16957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 937.063087][T16810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 937.063106][T16810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 937.063125][T16810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 937.089037][T16957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=16957 comm=syz.9.2762 [ 937.133441][ T31] kauditd_printk_skb: 15 callbacks suppressed [ 937.133464][ T31] audit: type=1400 audit(1788682208.660:1059): avc: denied { write } for pid=16966 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 937.224914][ T5702] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 937.235760][ T5702] usb 5-1: USB disconnect, device number 8 [ 937.266392][T16986] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 937.279449][ T31] audit: type=1400 audit(1788682208.820:1060): avc: denied { write } for pid=16969 comm="syz.4.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 937.305751][ T31] audit: type=1400 audit(1788682208.850:1061): avc: denied { name_connect } for pid=16969 comm="syz.4.2765" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 937.337612][T16985] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2762'. [ 937.423010][ T31] audit: type=1400 audit(1788682208.970:1062): avc: denied { accept } for pid=16969 comm="syz.4.2765" lport=44907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 937.431613][ T31] audit: type=1400 audit(1788682208.970:1063): avc: denied { listen } for pid=16969 comm="syz.4.2765" lport=44907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 937.520549][T16810] hsr_slave_0: entered promiscuous mode [ 937.527870][T16810] hsr_slave_1: entered promiscuous mode [ 937.531876][T16990] binder: 16987:16990 ioctl c0306201 200000000080 returned -14 [ 937.550430][T16990] binder: 16987:16990 ioctl c0306201 0 returned -14 [ 937.552599][T16810] debugfs: 'hsr0' already exists in 'hsr' [ 937.552627][T16810] Cannot create hsr debugfs directory [ 937.613192][ T31] audit: type=1400 audit(1788682209.160:1064): avc: denied { write } for pid=16992 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 937.664866][T16985] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2762'. [ 937.745512][ T59] IPVS: stop unused estimator thread 0... [ 937.906557][T11534] usbhid 10-1:0.0: can't add hid device: -71 [ 937.906679][T11534] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 937.945666][T11534] usb 10-1: USB disconnect, device number 50 [ 938.209644][T17007] netfs: Cache "CacheFiles" added (type cachefiles) [ 938.209671][T17007] CacheFiles: File cache on CacheFiles registered [ 938.209797][ T31] audit: type=1400 audit(1788682209.750:1065): avc: denied { create_files_as } for pid=17006 comm="syz.1.2771" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=kernel_service permissive=1 [ 938.246444][T17006] CacheFiles: File cache on CacheFiles unregistering [ 938.246466][T17006] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 938.401280][ T31] audit: type=1400 audit(1788682209.940:1066): avc: denied { append } for pid=17015 comm="syz.1.2774" name="iommu" dev="devtmpfs" ino=624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 938.685621][T17021] netfs: Cache "CacheFiles" added (type cachefiles) [ 938.685651][T17021] CacheFiles: File cache on CacheFiles registered [ 938.686951][T17020] CacheFiles: File cache on CacheFiles unregistering [ 938.686972][T17020] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 938.751626][ T31] audit: type=1400 audit(1788682210.290:1067): avc: denied { write } for pid=16997 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 938.894659][ T31] audit: type=1400 audit(1788682210.440:1068): avc: denied { write } for pid=17028 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 939.102395][ T5702] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 939.254348][ T5702] usb 10-1: Using ep0 maxpacket: 32 [ 939.266196][ T5702] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 939.280878][ T5702] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 939.282645][ T5702] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 939.282986][ T5702] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 939.283019][ T5702] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 939.347277][ T5702] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.347323][ T5702] usb 10-1: Product: syz [ 939.347351][ T5702] usb 10-1: Manufacturer: syz [ 939.347371][ T5702] usb 10-1: SerialNumber: syz [ 939.384592][ C1] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 939.399905][ T5702] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/input/input199 [ 939.568557][T17044] ip6erspan0: entered promiscuous mode [ 939.643332][ T5702] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 939.643401][ T5702] (id 0x00) [ 940.442555][ T5702] rc_core: IR keymap rc-imon-pad not found [ 940.442591][ T5702] Registered IR keymap rc-empty [ 940.442720][ T5702] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 940.442740][ T5702] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 940.480814][ T5702] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0 [ 940.482009][ T5702] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:155.0/rc/rc0/input200 [ 940.514431][ T5702] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:51> initialized [ 940.550740][T16810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 940.571262][T16810] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 940.585961][T16810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 940.648871][T16810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 940.658287][T16810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 940.709569][T16810] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 940.721753][T16810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 941.380947][T16810] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 941.436790][ T5811] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 941.454463][ T5811] dvb_usb_az6027 8-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 941.477704][ T7926] usb 10-1: USB disconnect, device number 51 [ 941.505648][ T5811] usb 8-1: USB disconnect, device number 74 [ 941.650001][T17078] tracefs: Unknown parameter '(' [ 941.795714][ T5789] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 941.795839][ T5789] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 941.843752][ T5789] usb 2-1: USB disconnect, device number 100 [ 941.892251][T16810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 941.970747][T16810] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.091433][T15788] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.091535][T15788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.130722][T15792] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.130862][T15792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.978850][ T31] kauditd_printk_skb: 4 callbacks suppressed [ 942.978909][ T31] audit: type=1400 audit(1788682214.520:1073): avc: denied { write } for pid=17082 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 943.068479][ T59] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.431631][ T31] audit: type=1400 audit(1788682214.970:1074): avc: denied { write } for pid=17097 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 943.741812][ T31] audit: type=1400 audit(1788682215.280:1075): avc: denied { mount } for pid=17105 comm="syz.9.2787" name="/" dev="autofs" ino=68487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 943.975812][ T31] audit: type=1400 audit(1788682215.520:1076): avc: denied { watch watch_reads } for pid=17105 comm="syz.9.2787" path="/233" dev="tmpfs" ino=1363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 944.084335][ T59] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.155177][ T31] audit: type=1400 audit(1788682215.700:1077): avc: denied { create } for pid=17121 comm="syz.9.2791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 944.193753][T17122] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2791'. [ 944.438328][ T59] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.822133][ T5781] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 944.843127][T16770] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 944.993452][T16770] usb 2-1: Using ep0 maxpacket: 16 [ 945.015036][T16770] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 945.037169][T16770] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 945.037276][T16770] usb 2-1: config 0 has no interface number 0 [ 945.089176][T16770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.098233][T16770] usb 2-1: Product: syz [ 945.098289][T16770] usb 2-1: Manufacturer: syz [ 945.098359][T16770] usb 2-1: SerialNumber: syz [ 945.142370][ T5781] usb 10-1: Using ep0 maxpacket: 32 [ 945.149692][ T5781] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 945.195102][ T31] audit: type=1400 audit(1788682216.730:1078): avc: denied { write } for pid=17129 comm="syz.0.2793" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 945.247998][ T5781] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 945.248050][ T5781] usb 10-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 945.248075][ T5781] usb 10-1: config 0 interface 0 has no altsetting 0 [ 945.321368][T16770] usb 2-1: config 0 descriptor?? [ 945.433789][ T5781] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.433858][ T5781] usb 10-1: Product: syz [ 945.460901][ T5781] usb 10-1: Manufacturer: syz [ 945.476347][ T5781] usb 10-1: SerialNumber: syz [ 945.513296][T17130] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2793'. [ 945.576627][T16770] hub 2-1:0.132: bad descriptor, ignoring hub [ 945.583159][T16770] hub 2-1:0.132: probe with driver hub failed with error -5 [ 945.666588][ T31] audit: type=1400 audit(1788682217.190:1079): avc: denied { read } for pid=17125 comm="syz.1.2792" name="mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 945.666903][ T31] audit: type=1400 audit(1788682217.190:1080): avc: denied { open } for pid=17125 comm="syz.1.2792" path="/dev/input/mice" dev="devtmpfs" ino=910 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 946.020652][T16770] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input201 [ 946.253977][ T5781] usb 10-1: config 0 descriptor?? [ 946.776555][ T59] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.798920][T17135] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2794'. [ 946.862929][T16770] input: failed to attach handler mousedev to device input201, error: -2 [ 946.939494][ T5781] gs_usb 10-1:0.0: Couldn't get device config: (err=-121) [ 946.939546][ T5781] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -121 [ 946.964768][T16770] usb 2-1: USB disconnect, device number 101 [ 946.969860][T16810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.995626][T17139] overlayfs: failed to clone upperpath [ 947.138605][T16810] veth0_vlan: entered promiscuous mode [ 947.150831][T16810] veth1_vlan: entered promiscuous mode [ 947.194724][T16810] veth0_macvtap: entered promiscuous mode [ 947.205238][T16810] veth1_macvtap: entered promiscuous mode [ 947.220111][ T31] audit: type=1400 audit(1788682218.760:1081): avc: denied { connect } for pid=17140 comm="syz.0.2796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 947.253579][T16810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.345264][ T31] audit: type=1400 audit(1788682218.890:1082): avc: denied { ioctl } for pid=17143 comm="syz.0.2797" path="socket:[68595]" dev="sockfs" ino=68595 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 947.411999][T16810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.454121][T15788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.513834][T15788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.514208][T15788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.514429][T15788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.964860][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.964901][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.996637][ T5811] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 948.033050][ T59] bridge_slave_1: left allmulticast mode [ 948.033097][ T59] bridge_slave_1: left promiscuous mode [ 948.033292][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.046191][ T59] bridge_slave_0: left allmulticast mode [ 948.046225][ T59] bridge_slave_0: left promiscuous mode [ 948.046421][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.184016][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 948.191770][ T5811] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 948.230360][ T5811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.242071][ T5811] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.257499][ T5811] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.257569][ T5811] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 948.257629][ T5811] usb 2-1: config 0 interface 0 has no altsetting 0 [ 948.257772][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.372639][ T59] pim6reg: left allmulticast mode [ 948.384731][ T5811] usb 2-1: config 0 descriptor?? [ 948.620708][T17153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.644207][T17153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.654368][ T59] bond1 (unregistering): (slave geneve2): Releasing active interface [ 948.682067][T17153] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=17153 comm=syz.1.2799 [ 948.787842][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.812492][ T31] kauditd_printk_skb: 1 callbacks suppressed [ 948.812535][ T31] audit: type=1400 audit(1788682220.350:1084): avc: denied { write } for pid=17158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 948.851880][T17172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2799'. [ 948.864479][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.878016][ T59] bond0 (unregistering): Released all slaves [ 948.889408][ T5781] usb 10-1: USB disconnect, device number 52 [ 948.991967][ T59] bond1 (unregistering): Released all slaves [ 949.000390][T17175] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2800'. [ 949.095752][ T59] bond2 (unregistering): (slave veth0_to_bond): Releasing active interface [ 949.114157][ T59] bond2 (unregistering): Released all slaves [ 949.161743][T17144] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 949.206240][T17172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2799'. [ 949.245624][ T31] audit: type=1400 audit(1788682220.780:1085): avc: denied { write } for pid=17177 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 949.420608][ T59] tipc: Left network mode [ 949.422444][ T5781] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 949.483443][T15788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.483504][T15788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.572595][ T5781] usb 5-1: Using ep0 maxpacket: 32 [ 949.577242][ T5781] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 949.589646][ T5781] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 949.589690][ T5781] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 949.589716][ T5781] usb 5-1: config 0 interface 0 has no altsetting 0 [ 949.598441][ T5781] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.598466][ T5781] usb 5-1: Product: syz [ 949.598480][ T5781] usb 5-1: Manufacturer: syz [ 949.598492][ T5781] usb 5-1: SerialNumber: syz [ 949.612571][ T5781] usb 5-1: config 0 descriptor?? [ 949.666971][ T31] audit: type=1400 audit(1788682221.210:1086): avc: denied { write } for pid=16810 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 949.668198][ T31] audit: type=1400 audit(1788682221.210:1087): avc: denied { open } for pid=16810 comm="syz-executor" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 949.750663][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 950.058369][T17194] overlayfs: failed to clone upperpath [ 950.067437][ T5781] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 950.067485][ T5781] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 950.082373][ T9] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 950.228574][T17193] netlink: 'syz.9.2804': attribute type 1 has an invalid length. [ 950.228613][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2804'. [ 950.232581][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 950.233963][ T9] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 950.234875][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 950.234924][ T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.234945][ T9] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.234964][ T9] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 950.234983][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 950.235005][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.295925][ T9] usb 4-1: config 0 descriptor?? [ 950.304738][T17198] fuse: fd is not a fuse device [ 950.563222][T17189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.573761][T17189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.606945][T17189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=17189 comm=syz.3.2739 [ 950.885151][T17213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2739'. [ 950.907487][ T59] hsr_slave_0: left promiscuous mode [ 950.913080][ T59] hsr_slave_1: left promiscuous mode [ 950.913730][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 950.913757][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.914656][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 950.914671][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.998553][ T59] veth1_macvtap: left promiscuous mode [ 950.998602][ T59] veth0_macvtap: left promiscuous mode [ 951.000180][ T59] veth1_vlan: left promiscuous mode [ 951.000266][ T59] veth0_vlan: left promiscuous mode [ 951.347365][ T5811] usbhid 2-1:0.0: can't add hid device: -71 [ 951.356080][ T5811] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 951.394639][ T5811] usb 2-1: USB disconnect, device number 102 [ 951.548134][ T31] audit: type=1400 audit(1788682223.090:1088): avc: denied { write } for pid=17195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 952.290507][ T5781] usb 5-1: USB disconnect, device number 9 [ 952.440015][ T31] audit: type=1400 audit(1788682223.980:1089): avc: denied { write } for pid=17226 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 952.532370][ T5811] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 952.707559][ T5811] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 952.719360][ T5811] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 952.719396][ T5811] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 952.719457][ T5811] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 952.764361][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.764399][ T5811] usb 2-1: Product: syz [ 952.764426][ T5811] usb 2-1: Manufacturer: syz [ 952.764442][ T5811] usb 2-1: SerialNumber: syz [ 952.879400][ T59] team0 (unregistering): Port device team_slave_1 removed [ 952.908334][ T59] team0 (unregistering): Port device team_slave_0 removed [ 953.094069][T17233] netlink: 232 bytes leftover after parsing attributes in process `syz.9.2809'. [ 953.097973][T17233] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2809'. [ 953.214397][T17213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2739'. [ 953.241221][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 953.339415][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 953.339519][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 953.350334][ T9] usb 4-1: USB disconnect, device number 106 [ 953.612004][T17239] overlayfs: failed to resolve './file1': -2 [ 953.709632][T17239] CacheFiles: Failed to register: -95 [ 953.829825][ T59] IPVS: stop unused estimator thread 0... [ 954.115705][ T31] audit: type=1400 audit(1788682225.660:1090): avc: denied { create } for pid=17244 comm="syz.9.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 954.145845][ T31] audit: type=1400 audit(1788682225.690:1091): avc: denied { write } for pid=17244 comm="syz.9.2812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 954.304019][ T31] audit: type=1400 audit(1788682225.850:1092): avc: denied { remount } for pid=17253 comm="syz.0.2814" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 954.440562][T17260] fuse: fd is not a fuse device [ 954.657526][T17267] netfs: Cache "CacheFiles" added (type cachefiles) [ 954.657553][T17267] CacheFiles: File cache on CacheFiles registered [ 954.658085][T17266] CacheFiles: File cache on CacheFiles unregistering [ 954.658094][T17266] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 954.711865][ T31] audit: type=1400 audit(1788682226.250:1093): avc: denied { write } for pid=17242 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 954.740028][ T5811] usb 2-1: USB disconnect, device number 103 [ 954.747177][ T31] audit: type=1400 audit(1788682226.290:1094): avc: denied { mounton } for pid=17255 comm="syz.4.2815" path="/13/sys/devices/virtual/rnbd-client/ctl/map_device" dev="sysfs" ino=21051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 954.927194][ T31] audit: type=1400 audit(1788682226.470:1095): avc: denied { unmount } for pid=11745 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 954.938171][T17274] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2818'. [ 955.115719][ T31] audit: type=1400 audit(1788682226.660:1096): avc: denied { write } for pid=17275 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 955.267380][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 955.352388][ T5811] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 955.515458][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 955.522886][ T5811] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 955.540687][ T5811] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 955.540729][ T5811] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 955.540761][ T5811] usb 2-1: config 0 interface 0 has no altsetting 0 [ 955.576328][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.576367][ T5811] usb 2-1: Product: syz [ 955.576392][ T5811] usb 2-1: Manufacturer: syz [ 955.576409][ T5811] usb 2-1: SerialNumber: syz [ 955.605224][ T5811] usb 2-1: config 0 descriptor?? [ 955.948234][ T31] audit: type=1400 audit(1788682227.490:1097): avc: denied { write } for pid=17287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 956.033459][ T5811] gs_usb 2-1:0.0: Couldn't get device config: (err=-121) [ 956.033506][ T5811] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -121 [ 956.264725][ T31] audit: type=1400 audit(1788682227.810:1098): avc: denied { ioctl } for pid=17299 comm="syz.4.2822" path="socket:[68838]" dev="sockfs" ino=68838 ioctlcmd=0x6e87 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 956.345664][ T31] audit: type=1400 audit(1788682227.890:1099): avc: denied { write } for pid=17302 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 956.506431][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 956.772368][ T5811] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 956.932418][ T5811] usb 5-1: Using ep0 maxpacket: 8 [ 956.941080][ T5811] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 956.953604][ T5811] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.953651][ T5811] usb 5-1: config 0 interface 0 has no altsetting 0 [ 956.977027][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.977067][ T5811] usb 5-1: Product: syz [ 956.977095][ T5811] usb 5-1: Manufacturer: syz [ 956.977113][ T5811] usb 5-1: SerialNumber: syz [ 957.000807][ T5811] usb 5-1: config 0 descriptor?? [ 957.012679][ T5811] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 957.249350][ T5811] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 957.258989][ T5811] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 957.271689][ T5811] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 957.468774][T17306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 957.469118][T17306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.484361][ T9] usb 5-1: USB disconnect, device number 10 [ 957.692393][ T5811] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 957.822382][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 957.831032][ T5781] usb 2-1: USB disconnect, device number 104 [ 957.852410][ T5811] usb 4-1: Using ep0 maxpacket: 8 [ 957.858084][ T5811] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 957.872711][ T5811] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 957.872758][ T5811] usb 4-1: config 0 interface 0 has no altsetting 0 [ 957.895016][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.903125][ T5811] usb 4-1: Product: syz [ 957.907363][ T5811] usb 4-1: Manufacturer: syz [ 957.912029][ T5811] usb 4-1: SerialNumber: syz [ 957.921926][ T5811] usb 4-1: config 0 descriptor?? [ 957.931357][ T5811] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 957.949283][T17324] fuse: Unknown parameter 'ÿÿ0x0000000000000003' [ 957.975250][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 957.981754][ T9] usb 5-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=7d.69 [ 957.985845][ T9] usb 5-1: config 1 has an invalid interface number: 220 but max is 3 [ 957.985868][ T9] usb 5-1: config 1 has an invalid interface number: 129 but max is 3 [ 957.985886][ T9] usb 5-1: config 1 has an invalid interface number: 12 but max is 3 [ 957.985902][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 957.985916][ T9] usb 5-1: config 1 has an invalid interface number: 81 but max is 3 [ 957.985933][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 957.985949][ T9] usb 5-1: config 1 has no interface number 0 [ 957.985960][ T9] usb 5-1: config 1 has no interface number 1 [ 957.985973][ T9] usb 5-1: config 1 has no interface number 2 [ 957.985985][ T9] usb 5-1: config 1 has no interface number 3 [ 957.986033][ T9] usb 5-1: config 1 interface 220 altsetting 8 endpoint 0x8 has invalid maxpacket 1064, setting to 64 [ 957.986055][ T9] usb 5-1: config 1 interface 220 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 957.986079][ T9] usb 5-1: config 1 interface 129 altsetting 9 bulk endpoint 0xC has invalid maxpacket 32 [ 957.986101][ T9] usb 5-1: config 1 interface 129 altsetting 9 has a duplicate endpoint with address 0x8C, skipping [ 957.986119][ T9] usb 5-1: config 1 interface 129 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 957.986137][ T9] usb 5-1: config 1 interface 129 altsetting 9 endpoint 0x3 has invalid maxpacket 1535, setting to 64 [ 957.986166][ T9] usb 5-1: config 1 interface 12 altsetting 255 has a duplicate endpoint with address 0x5, skipping [ 957.986184][ T9] usb 5-1: config 1 interface 12 altsetting 255 has a duplicate endpoint with address 0x5, skipping [ 957.986204][ T9] usb 5-1: config 1 interface 12 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 957.986228][ T9] usb 5-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 957.986245][ T9] usb 5-1: config 1 interface 81 altsetting 7 bulk endpoint 0xE has invalid maxpacket 32 [ 957.986263][ T9] usb 5-1: config 1 interface 81 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 957.986279][ T9] usb 5-1: config 1 interface 81 altsetting 7 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 957.986297][ T9] usb 5-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 957.986313][ T9] usb 5-1: config 1 interface 81 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 957.986328][ T9] usb 5-1: config 1 interface 81 altsetting 7 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 957.986347][ T9] usb 5-1: config 1 interface 81 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 957.986362][ T9] usb 5-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 957.986378][ T9] usb 5-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 957.986394][ T9] usb 5-1: config 1 interface 81 altsetting 7 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 957.986413][ T9] usb 5-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 957.986429][ T9] usb 5-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 957.986445][ T9] usb 5-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 957.986462][ T9] usb 5-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 957.986478][ T9] usb 5-1: config 1 interface 220 has no altsetting 0 [ 957.986492][ T9] usb 5-1: config 1 interface 129 has no altsetting 0 [ 957.986505][ T9] usb 5-1: config 1 interface 12 has no altsetting 0 [ 957.986519][ T9] usb 5-1: config 1 interface 81 has no altsetting 0 [ 957.992554][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.992578][ T9] usb 5-1: Product: syz [ 957.992590][ T9] usb 5-1: Manufacturer: syz [ 957.992603][ T9] usb 5-1: SerialNumber: syz [ 958.177788][ T5811] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 958.177981][ T5811] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 958.381210][T17316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 958.381547][T17316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 958.411801][ T5811] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 958.475163][ T5792] usb 4-1: USB disconnect, device number 107 [ 958.812383][ T5792] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 958.871371][ T9] usb 5-1: USB disconnect, device number 11 [ 958.977247][ T5792] usb 4-1: Using ep0 maxpacket: 16 [ 958.983400][ T5792] usb 4-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=7d.69 [ 958.988787][ T5792] usb 4-1: config 1 has an invalid interface number: 220 but max is 3 [ 958.988815][ T5792] usb 4-1: config 1 has an invalid interface number: 129 but max is 3 [ 958.988832][ T5792] usb 4-1: config 1 has an invalid interface number: 12 but max is 3 [ 958.988849][ T5792] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 958.988865][ T5792] usb 4-1: config 1 has an invalid interface number: 81 but max is 3 [ 958.988883][ T5792] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 958.988901][ T5792] usb 4-1: config 1 has no interface number 0 [ 958.988914][ T5792] usb 4-1: config 1 has no interface number 1 [ 958.988927][ T5792] usb 4-1: config 1 has no interface number 2 [ 958.988941][ T5792] usb 4-1: config 1 has no interface number 3 [ 958.988989][ T5792] usb 4-1: config 1 interface 220 altsetting 8 endpoint 0x8 has invalid maxpacket 1064, setting to 64 [ 958.989010][ T5792] usb 4-1: config 1 interface 220 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 958.989033][ T5792] usb 4-1: config 1 interface 129 altsetting 9 bulk endpoint 0xC has invalid maxpacket 32 [ 958.989053][ T5792] usb 4-1: config 1 interface 129 altsetting 9 has a duplicate endpoint with address 0x8C, skipping [ 958.989069][ T5792] usb 4-1: config 1 interface 129 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 958.989084][ T5792] usb 4-1: config 1 interface 129 altsetting 9 endpoint 0x3 has invalid maxpacket 1535, setting to 64 [ 958.989111][ T5792] usb 4-1: config 1 interface 12 altsetting 255 has a duplicate endpoint with address 0x5, skipping [ 958.989131][ T5792] usb 4-1: config 1 interface 12 altsetting 255 has a duplicate endpoint with address 0x5, skipping [ 958.989150][ T5792] usb 4-1: config 1 interface 12 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 958.989181][ T5792] usb 4-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 958.989197][ T5792] usb 4-1: config 1 interface 81 altsetting 7 bulk endpoint 0xE has invalid maxpacket 32 [ 958.989215][ T5792] usb 4-1: config 1 interface 81 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 958.989231][ T5792] usb 4-1: config 1 interface 81 altsetting 7 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 958.989253][ T5792] usb 4-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 958.989269][ T5792] usb 4-1: config 1 interface 81 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 958.989285][ T5792] usb 4-1: config 1 interface 81 altsetting 7 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 958.989303][ T5792] usb 4-1: config 1 interface 81 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 958.989318][ T5792] usb 4-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 958.989334][ T5792] usb 4-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 958.989351][ T5792] usb 4-1: config 1 interface 81 altsetting 7 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 958.989370][ T5792] usb 4-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 958.989387][ T5792] usb 4-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 958.989403][ T5792] usb 4-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 958.989421][ T5792] usb 4-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 958.989439][ T5792] usb 4-1: config 1 interface 220 has no altsetting 0 [ 958.989455][ T5792] usb 4-1: config 1 interface 129 has no altsetting 0 [ 958.989468][ T5792] usb 4-1: config 1 interface 12 has no altsetting 0 [ 958.989482][ T5792] usb 4-1: config 1 interface 81 has no altsetting 0 [ 959.001028][ T5792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.001052][ T5792] usb 4-1: Product: syz [ 959.001065][ T5792] usb 4-1: Manufacturer: syz [ 959.001078][ T5792] usb 4-1: SerialNumber: syz [ 959.064058][T17345] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2830'. [ 959.222495][ T9] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 959.373600][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 959.376572][ T9] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 959.376593][ T9] usb 5-1: Product: syz [ 959.376606][ T9] usb 5-1: Manufacturer: syz [ 959.376636][ T9] usb 5-1: SerialNumber: syz [ 959.379407][ T9] usb 5-1: config 0 descriptor?? [ 959.455086][ T31] kauditd_printk_skb: 10 callbacks suppressed [ 959.461233][ T31] audit: type=1400 audit(1788682231.000:1110): avc: denied { read } for pid=17349 comm="syz.9.2833" name="control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 959.485330][ T31] audit: type=1400 audit(1788682231.010:1111): avc: denied { open } for pid=17349 comm="syz.9.2833" path="/246/dev/mapper/control" dev="devtmpfs" ino=1266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 959.510656][ T31] audit: type=1400 audit(1788682231.040:1112): avc: denied { ioctl } for pid=17349 comm="syz.9.2833" path="/246/dev/mapper/control" dev="devtmpfs" ino=1266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 959.543500][T17350] device-mapper: table: 248:0: zero-length target [ 959.543556][T17350] device-mapper: ioctl: error adding target to table [ 959.705133][T17339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.705531][T17339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 959.722830][ T31] audit: type=1400 audit(1788682231.260:1113): avc: denied { create } for pid=17337 comm="syz.4.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 959.743142][ T31] audit: type=1400 audit(1788682231.270:1114): avc: denied { write } for pid=17337 comm="syz.4.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 959.743187][ T31] audit: type=1400 audit(1788682231.270:1115): avc: denied { read } for pid=17337 comm="syz.4.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 959.799860][T17356] device-mapper: table: 248:0: zero-length target [ 959.799897][T17356] device-mapper: ioctl: error adding target to table [ 959.996015][T17358] netlink: 'syz.4.2831': attribute type 83 has an invalid length. [ 959.999369][ T5792] usb 4-1: USB disconnect, device number 108 [ 960.065592][T17363] netlink: 32 bytes leftover after parsing attributes in process `syz.9.2837'. [ 960.127799][T17364] netlink: 'syz.4.2831': attribute type 83 has an invalid length. [ 960.174332][T17366] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2839'. [ 960.226753][T17370] binder: 17369:17370 ioctl c0306201 200000000040 returned -22 [ 960.228233][ T31] audit: type=1400 audit(1788682231.770:1116): avc: denied { bind } for pid=17369 comm="syz.3.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 960.228592][ T31] audit: type=1400 audit(1788682231.770:1117): avc: denied { getopt } for pid=17369 comm="syz.3.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 960.332730][T17371] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 960.375435][T17374] netfs: Cache "CacheFiles" added (type cachefiles) [ 960.375464][T17374] CacheFiles: File cache on CacheFiles registered [ 960.389518][T17373] CacheFiles: File cache on CacheFiles unregistering [ 960.389532][T17373] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 960.412453][ T5811] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 960.572397][ T5811] usb 10-1: Using ep0 maxpacket: 32 [ 960.573629][ T5811] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 960.574678][ T5811] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 960.574701][ T5811] usb 10-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 960.574721][ T5811] usb 10-1: config 0 interface 0 has no altsetting 0 [ 960.576620][ T5811] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.576640][ T5811] usb 10-1: Product: syz [ 960.576653][ T5811] usb 10-1: Manufacturer: syz [ 960.576666][ T5811] usb 10-1: SerialNumber: syz [ 960.593338][ T5811] usb 10-1: config 0 descriptor?? [ 960.633064][ T7926] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 960.692431][ T5702] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 960.812451][ T7926] usb 2-1: Using ep0 maxpacket: 8 [ 960.818990][ T7926] usb 2-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 960.829603][ T7926] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 960.829642][ T7926] usb 2-1: config 0 has no interface number 0 [ 960.829680][ T7926] usb 2-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 960.829719][ T7926] usb 2-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 960.829746][ T7926] usb 2-1: config 0 interface 48 has no altsetting 0 [ 960.829776][ T7926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.842446][ T5702] usb 4-1: Using ep0 maxpacket: 32 [ 960.843175][ T5702] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 960.844141][ T5702] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.844191][ T5702] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 960.844211][ T5702] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 960.844228][ T5702] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 960.844247][ T5702] usb 4-1: config 0 interface 0 has no altsetting 0 [ 960.844269][ T5702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.848455][ T5702] usb 4-1: config 0 descriptor?? [ 960.964785][ T7926] usb 2-1: config 0 descriptor?? [ 960.996841][ T5811] gs_usb 10-1:0.0: Couldn't get device config: (err=-121) [ 960.996913][ T5811] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -121 [ 961.060440][T17376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.060820][T17376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.069611][T17376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=17376 comm=syz.3.2842 [ 961.131603][T17379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2842'. [ 961.131717][T17379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2842'. [ 961.381406][ T31] audit: type=1400 audit(1788682232.920:1118): avc: denied { create } for pid=17367 comm="syz.1.2838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 961.411000][T17368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 961.420126][T17368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 961.651864][ T31] audit: type=1400 audit(1788682233.190:1119): avc: denied { cmd } for pid=17367 comm="syz.1.2838" path="/dev/ublk-control" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 961.745551][ T7926] usb 2-1: string descriptor 0 read error: -71 [ 961.763709][ T7926] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 961.773685][ T7926] cxusb: set interface failed [ 961.778881][ T7926] dvb-usb: bulk message failed: -22 (1/0) [ 961.827079][ T7926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 961.841107][ T7926] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 961.850513][ T7926] usb 2-1: media controller created [ 961.867404][ T7926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 962.669203][ T7926] DVB: Unable to find symbol lgdt330x_attach() [ 962.675567][ T7926] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 962.685301][ T5702] usbhid 4-1:0.0: can't add hid device: -71 [ 962.685411][ T5702] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 962.689262][ T5702] usb 4-1: USB disconnect, device number 109 [ 962.702535][ T7926] dvb-usb: bulk message failed: -22 (1/0) [ 962.702562][ T7926] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 962.736701][ T7926] usb 2-1: USB disconnect, device number 106 [ 962.783325][ T7926] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 962.865748][ T5702] usb 5-1: USB disconnect, device number 12 [ 963.028608][T10454] usb 10-1: USB disconnect, device number 54 [ 963.332356][ T7926] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 963.373127][T17403] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2850'. [ 963.385960][T17403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2850'. [ 963.493047][ T7926] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 963.503186][ T7926] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 963.503246][ T7926] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 963.503279][ T7926] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 963.503304][ T7926] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 963.503343][ T7926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.710497][T17411] overlayfs: failed to clone upperpath [ 963.793942][T17397] virtio-fs: tag not found [ 963.809461][ T7926] usb 2-1: USB disconnect, device number 107 [ 963.830967][T17413] netfs: Cache "CacheFiles" added (type cachefiles) [ 963.830996][T17413] CacheFiles: File cache on CacheFiles registered [ 963.836281][T17412] CacheFiles: File cache on CacheFiles unregistering [ 963.836295][T17412] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 963.958159][T17419] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.2857'. [ 964.178048][T17422] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 964.783204][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 964.787109][ T5702] usb 10-1: new low-speed USB device number 55 using dummy_hcd [ 964.810283][ T31] kauditd_printk_skb: 12 callbacks suppressed [ 964.810527][ T31] audit: type=1400 audit(1788682236.350:1132): avc: denied { connect } for pid=17433 comm="syz.3.2860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 964.832951][ T31] audit: type=1400 audit(1788682236.380:1133): avc: denied { write } for pid=17433 comm="syz.3.2860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 964.884413][T17435] netlink: 'syz.3.2860': attribute type 10 has an invalid length. [ 964.944768][ T31] audit: type=1400 audit(1788682236.490:1134): avc: denied { ioctl } for pid=17423 comm="syz.9.2856" path="/dev/raw-gadget" dev="devtmpfs" ino=814 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 964.946183][ T31] audit: type=1400 audit(1788682236.490:1135): avc: denied { read } for pid=17433 comm="syz.3.2860" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 964.946633][ T5702] usb 10-1: New USB device found, idVendor=2b73, idProduct=0017, bcdDevice= 0.40 [ 964.947272][ T31] audit: type=1400 audit(1788682236.490:1136): avc: denied { open } for pid=17433 comm="syz.3.2860" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 964.949593][ T5702] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.949613][ T5702] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 964.951944][ T31] audit: type=1400 audit(1788682236.490:1138): avc: denied { write } for pid=17433 comm="syz.3.2860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 964.954394][ T31] audit: type=1400 audit(1788682236.490:1137): avc: denied { ioctl } for pid=17433 comm="syz.3.2860" path="/dev/nullb0" dev="devtmpfs" ino=694 ioctlcmd=0x70cd scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 964.956133][ T5702] usb 10-1: string descriptor 0 read error: -22 [ 964.956219][ T5702] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.971546][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 964.976157][ T5702] usb 10-1: 0:1 : does not exist [ 964.976181][ T5702] usb 10-1: 0:2 : does not exist [ 965.005368][ T9] usb 5-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 965.043843][ T9] usb 5-1: config 0 has an invalid interface number: 48 but max is 0 [ 965.043870][ T9] usb 5-1: config 0 has no interface number 0 [ 965.043894][ T9] usb 5-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 965.043925][ T9] usb 5-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 965.043947][ T9] usb 5-1: config 0 interface 48 has no altsetting 0 [ 965.043972][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.058023][ T31] audit: type=1400 audit(1788682236.600:1139): avc: denied { create } for pid=17433 comm="syz.3.2860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 965.058065][ T31] audit: type=1400 audit(1788682236.600:1140): avc: denied { write } for pid=17433 comm="syz.3.2860" name="nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 965.058094][ T31] audit: type=1400 audit(1788682236.600:1141): avc: denied { read write } for pid=17436 comm="syz.1.2861" name="rtc0" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 965.114334][ T9] usb 5-1: config 0 descriptor?? [ 965.191273][T17426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.191667][T17426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.552845][T17442] netfs: Cache "CacheFiles" added (type cachefiles) [ 965.552881][T17442] CacheFiles: File cache on CacheFiles registered [ 965.560199][T17442] CacheFiles: File cache on CacheFiles unregistering [ 965.560214][T17442] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 965.671108][T17425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 965.683454][T17425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 965.703069][ T5702] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 965.718037][ T5702] usb 10-1: USB disconnect, device number 55 [ 967.436694][T17469] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2868'. [ 967.712182][ T9] usb 5-1: string descriptor 0 read error: -71 [ 967.745010][ T9] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 967.745063][ T9] cxusb: set interface failed [ 967.745086][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 967.780969][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 967.791394][ T9] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 967.791461][ T9] usb 5-1: media controller created [ 967.831179][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 968.049014][ T9] DVB: Unable to find symbol lgdt330x_attach() [ 968.049050][ T9] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 968.068929][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 968.077717][ T9] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 968.103374][ T9] usb 5-1: USB disconnect, device number 13 [ 968.179262][ T9] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 968.209279][T13759] Bluetooth: hci0: unexpected event for opcode 0x202f [ 968.470471][T17492] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2873'. [ 968.662426][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 968.824186][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 2.00 [ 968.834249][ T9] usb 5-1: config 1 has an invalid descriptor of length 219, skipping remainder of the config [ 968.834301][ T9] usb 5-1: config 1 interface 0 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 968.834330][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 968.870464][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 968.870505][ T9] usb 5-1: Product: syz [ 968.870531][ T9] usb 5-1: Manufacturer: syz [ 968.895992][ T9] ldusb 5-1:1.0: Interrupt in endpoint not found [ 969.129655][T17477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2870'. [ 969.199168][T10454] usb 5-1: USB disconnect, device number 14 [ 970.506455][ T31] kauditd_printk_skb: 80 callbacks suppressed [ 970.513849][ T31] audit: type=1400 audit(1788682242.050:1222): avc: denied { write } for pid=17527 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 970.541967][ T31] audit: type=1400 audit(1788682242.080:1223): avc: denied { read write } for pid=17528 comm="syz.3.2878" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 970.568957][ T31] audit: type=1400 audit(1788682242.080:1224): avc: denied { open } for pid=17528 comm="syz.3.2878" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 971.430608][ T31] audit: type=1400 audit(1788682242.420:1225): avc: denied { read } for pid=17532 comm="syz.4.2880" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 971.430657][ T31] audit: type=1400 audit(1788682242.420:1226): avc: denied { open } for pid=17532 comm="syz.4.2880" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 971.430693][ T31] audit: type=1400 audit(1788682242.530:1227): avc: denied { create } for pid=17532 comm="syz.4.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 971.430728][ T31] audit: type=1400 audit(1788682242.540:1228): avc: denied { bind } for pid=17532 comm="syz.4.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 971.430764][ T31] audit: type=1400 audit(1788682242.540:1229): avc: denied { connect } for pid=17532 comm="syz.4.2880" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 971.580833][ T31] audit: type=1400 audit(1788682243.110:1230): avc: denied { read write } for pid=17528 comm="syz.3.2878" name="sg0" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 971.580959][ T31] audit: type=1400 audit(1788682243.110:1231): avc: denied { open } for pid=17528 comm="syz.3.2878" path="/dev/sg0" dev="devtmpfs" ino=932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 972.367483][T17547] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 972.559204][T17560] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 972.559230][T17560] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 972.559317][T17560] vhci_hcd vhci_hcd.0: Device attached [ 972.600214][T17560] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 972.600245][T17560] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 972.600666][T17560] vhci_hcd vhci_hcd.0: Device attached [ 972.600969][T17567] vhci_hcd: connection closed [ 972.601208][ T2934] vhci_hcd vhci_hcd.4: stop threads [ 972.601226][ T2934] vhci_hcd vhci_hcd.4: release socket [ 972.601280][ T2934] vhci_hcd vhci_hcd.4: disconnect device [ 972.601963][T17563] vhci_hcd: connection closed [ 972.606084][ T2934] vhci_hcd vhci_hcd.4: stop threads [ 972.606103][ T2934] vhci_hcd vhci_hcd.4: release socket [ 972.606118][ T2934] vhci_hcd vhci_hcd.4: disconnect device [ 972.731020][T17565] netlink: 'syz.3.2886': attribute type 1 has an invalid length. [ 972.732651][T17565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2886'. [ 972.784980][ T5702] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 972.948119][ T5702] usb 2-1: Using ep0 maxpacket: 32 [ 972.964415][ T5702] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 972.990387][ T5702] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 973.023400][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.023534][ T5702] usb 2-1: Product: syz [ 973.023659][ T5702] usb 2-1: Manufacturer: syz [ 973.023718][ T5702] usb 2-1: SerialNumber: syz [ 973.110579][ T5702] usb 2-1: config 0 descriptor?? [ 973.221611][ T5702] usb 2-1: No union descriptors [ 973.290083][ T5702] usb 2-1: unsupported MDLM descriptors [ 973.918575][ T5702] usb 2-1: USB disconnect, device number 108 [ 975.196482][T17600] 9p: Bad value for 'rfdno' [ 975.202641][ T5702] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 975.398147][ T5702] usb 10-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 975.408470][ T5702] usb 10-1: config 1 has an invalid interface number: 3 but max is 0 [ 975.416667][ T5702] usb 10-1: config 1 has no interface number 0 [ 975.430993][ T5702] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.456507][ T5702] usb 10-1: Product: syz [ 975.462073][ T5702] usb 10-1: Manufacturer: syz [ 975.471744][ T5702] usb 10-1: SerialNumber: syz [ 975.674994][ T5702] usb 10-1: 3:1 : does not exist [ 975.680139][ T5702] usb 10-1: 3:2 : does not exist [ 975.873625][ T5702] usb 10-1: USB disconnect, device number 57 [ 975.962490][ T5703] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 976.177733][ T5703] usb 2-1: unable to get BOS descriptor or descriptor too short [ 976.187187][ T5703] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 976.270928][ T5703] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 976.279491][ T5703] usb 2-1: config 63 has an invalid descriptor of length 46, skipping remainder of the config [ 976.291006][ T5703] usb 2-1: config 63 has no interface number 0 [ 976.291237][ T5703] usb 2-1: config 63 interface 66 has no altsetting 0 [ 976.327083][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.335467][ T5703] usb 2-1: Product: syz [ 976.340910][ T5703] usb 2-1: Manufacturer: syz [ 976.341008][ T5703] usb 2-1: SerialNumber: syz [ 976.367730][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 976.585587][ T31] kauditd_printk_skb: 42 callbacks suppressed [ 976.586839][T17627] netlink: 'syz.1.2895': attribute type 10 has an invalid length. [ 976.600763][T17627] team0 (unregistering): Port device team_slave_0 removed [ 976.609945][ T31] audit: type=1400 audit(1788682248.130:1274): avc: denied { listen } for pid=17625 comm="syz.1.2895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 976.611806][T17627] team0 (unregistering): Port device team_slave_1 removed [ 976.665913][ T5703] uvcvideo 2-1:63.66: probe with driver uvcvideo failed with error -22 [ 976.676394][ T5703] usb 2-1: USB disconnect, device number 109 [ 976.751699][ T31] audit: type=1400 audit(1788682248.290:1275): avc: denied { unmount } for pid=16557 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 976.775073][T10454] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 976.790047][T17639] fuse: Unknown parameter 'ÿÿ0x000000000000000318446744073709551615' [ 976.932556][T10454] usb 4-1: Using ep0 maxpacket: 8 [ 976.938451][T10454] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 976.948926][T10454] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 976.959263][T10454] usb 4-1: config 0 interface 0 has no altsetting 0 [ 976.968126][T10454] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.976250][T10454] usb 4-1: Product: syz [ 976.976271][T10454] usb 4-1: Manufacturer: syz [ 976.976287][T10454] usb 4-1: SerialNumber: syz [ 976.996681][T10454] usb 4-1: config 0 descriptor?? [ 977.006411][T10454] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 977.092409][ T5792] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 977.211397][T10454] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 977.220811][T10454] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 977.239900][T10454] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 977.252438][ T5792] usb 10-1: Using ep0 maxpacket: 8 [ 977.254561][ T5792] usb 10-1: New USB device found, idVendor=07ca, idProduct=a868, bcdDevice=c4.d4 [ 977.256813][ T5792] usb 10-1: config 0 has an invalid interface number: 48 but max is 0 [ 977.256855][ T5792] usb 10-1: config 0 has no interface number 0 [ 977.256877][ T5792] usb 10-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 977.256906][ T5792] usb 10-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 977.256928][ T5792] usb 10-1: config 0 interface 48 has no altsetting 0 [ 977.256954][ T5792] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.273633][ T5792] usb 10-1: config 0 descriptor?? [ 977.425026][ T31] audit: type=1400 audit(1788682248.970:1276): avc: denied { create } for pid=17636 comm="syz.3.2898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 977.427788][T17637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.431204][T17637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.448916][ T7926] usb 4-1: USB disconnect, device number 110 [ 977.467749][ T31] audit: type=1400 audit(1788682248.970:1277): avc: denied { setopt } for pid=17636 comm="syz.3.2898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 977.697496][T17642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.697892][T17642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.788091][ T31] audit: type=1400 audit(1788682249.330:1278): avc: denied { mount } for pid=17647 comm="syz.4.2901" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 977.814877][ T7926] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 977.972504][ T7926] usb 4-1: Using ep0 maxpacket: 16 [ 977.974772][ T7926] usb 4-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=7d.69 [ 977.975736][ T7926] usb 4-1: config 1 has an invalid interface number: 220 but max is 3 [ 977.975775][ T7926] usb 4-1: config 1 has an invalid interface number: 129 but max is 3 [ 977.975792][ T7926] usb 4-1: config 1 has an invalid interface number: 12 but max is 3 [ 977.975808][ T7926] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 977.975823][ T7926] usb 4-1: config 1 has an invalid interface number: 81 but max is 3 [ 977.975839][ T7926] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 977.975854][ T7926] usb 4-1: config 1 has no interface number 0 [ 977.975865][ T7926] usb 4-1: config 1 has no interface number 1 [ 977.975878][ T7926] usb 4-1: config 1 has no interface number 2 [ 977.975906][ T7926] usb 4-1: config 1 has no interface number 3 [ 977.975952][ T7926] usb 4-1: config 1 interface 220 altsetting 8 endpoint 0x8 has invalid maxpacket 1064, setting to 64 [ 977.975974][ T7926] usb 4-1: config 1 interface 220 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 977.975998][ T7926] usb 4-1: config 1 interface 129 altsetting 9 bulk endpoint 0xC has invalid maxpacket 32 [ 977.976017][ T7926] usb 4-1: config 1 interface 129 altsetting 9 has a duplicate endpoint with address 0x8C, skipping [ 977.976050][ T7926] usb 4-1: config 1 interface 129 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 977.976067][ T7926] usb 4-1: config 1 interface 129 altsetting 9 endpoint 0x3 has invalid maxpacket 1535, setting to 64 [ 977.976093][ T7926] usb 4-1: config 1 interface 12 altsetting 255 has a duplicate endpoint with address 0x5, skipping [ 977.976109][ T7926] usb 4-1: config 1 interface 12 altsetting 255 has a duplicate endpoint with address 0x5, skipping [ 977.976126][ T7926] usb 4-1: config 1 interface 12 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 977.976152][ T7926] usb 4-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 977.976186][ T7926] usb 4-1: config 1 interface 81 altsetting 7 bulk endpoint 0xE has invalid maxpacket 32 [ 977.976205][ T7926] usb 4-1: config 1 interface 81 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 977.976221][ T7926] usb 4-1: config 1 interface 81 altsetting 7 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 977.976240][ T7926] usb 4-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 977.976256][ T7926] usb 4-1: config 1 interface 81 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 977.976272][ T7926] usb 4-1: config 1 interface 81 altsetting 7 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 977.976299][ T7926] usb 4-1: config 1 interface 81 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 977.976329][ T7926] usb 4-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 977.976346][ T7926] usb 4-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 977.977539][ T7926] usb 4-1: config 1 interface 81 altsetting 7 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 977.977582][ T7926] usb 4-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 977.977601][ T7926] usb 4-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 977.977619][ T7926] usb 4-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 977.977637][ T7926] usb 4-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 977.977655][ T7926] usb 4-1: config 1 interface 220 has no altsetting 0 [ 977.977671][ T7926] usb 4-1: config 1 interface 129 has no altsetting 0 [ 977.977687][ T7926] usb 4-1: config 1 interface 12 has no altsetting 0 [ 977.977718][ T7926] usb 4-1: config 1 interface 81 has no altsetting 0 [ 977.979741][ T7926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.979762][ T7926] usb 4-1: Product: syz [ 977.979774][ T7926] usb 4-1: Manufacturer: syz [ 977.979787][ T7926] usb 4-1: SerialNumber: syz [ 978.992819][ T31] audit: type=1400 audit(1788682250.210:1279): avc: denied { mount } for pid=17656 comm="syz.0.2903" name="/" dev="ramfs" ino=70889 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 979.050580][ T31] audit: type=1400 audit(1788682250.590:1280): avc: denied { unmount } for pid=16557 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 979.081940][ T7926] usb 4-1: USB disconnect, device number 111 [ 980.245790][T17672] FAULT_INJECTION: forcing a failure. [ 980.245790][T17672] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 980.246142][T17672] CPU: 1 UID: 0 PID: 17672 Comm: syz.3.2906 Tainted: G L syzkaller #0 PREEMPT(full) [ 980.246170][T17672] Tainted: [L]=SOFTLOCKUP [ 980.246177][T17672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 980.246187][T17672] Call Trace: [ 980.246194][T17672] [ 980.246202][T17672] dump_stack_lvl+0x100/0x190 [ 980.246234][T17672] should_fail_ex.cold+0x5/0xa [ 980.246256][T17672] ? prepare_alloc_pages+0x16d/0x5b0 [ 980.246281][T17672] should_fail_alloc_page+0xeb/0x140 [ 980.246306][T17672] prepare_alloc_pages+0x1f0/0x5b0 [ 980.246333][T17672] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 980.246365][T17672] ? prepare_alloc_pages+0x191/0x5b0 [ 980.246391][T17672] ? rcu_is_watching+0x13/0xc0 [ 980.246413][T17672] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 980.246445][T17672] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 980.246475][T17672] ? find_held_lock+0x2b/0x80 [ 980.246499][T17672] ? is_bpf_text_address+0x8a/0x1a0 [ 980.246522][T17672] ? is_bpf_text_address+0x8a/0x1a0 [ 980.246544][T17672] ? bpf_ksym_find+0x128/0x1c0 [ 980.246570][T17672] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 980.246599][T17672] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 980.246624][T17672] ? is_bpf_text_address+0x94/0x1a0 [ 980.246649][T17672] ? __kernel_text_address+0xd/0x30 [ 980.246693][T17672] alloc_pages_bulk_noprof+0x5e1/0x13c0 [ 980.246721][T17672] ? lock_acquire+0x1d1/0x380 [ 980.246741][T17672] ? policy_nodemask+0xed/0x4f0 [ 980.246772][T17672] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 980.246814][T17672] __kasan_populate_vmalloc+0xf0/0x210 [ 980.246839][T17672] alloc_vmap_area+0x95d/0x2bb0 [ 980.246867][T17672] ? kasan_save_track+0x14/0x30 [ 980.246890][T17672] ? __kasan_kmalloc+0xaa/0xb0 [ 980.246909][T17672] ? __pfx_alloc_vmap_area+0x10/0x10 [ 980.246931][T17672] ? __get_vm_area_node+0x124/0x350 [ 980.246955][T17672] __get_vm_area_node+0x1ed/0x350 [ 980.246981][T17672] __vmalloc_node_range_noprof+0x268/0x1420 [ 980.247005][T17672] ? vhost_task_create+0x1db/0x370 [ 980.247032][T17672] ? lock_acquire+0x1d1/0x380 [ 980.247050][T17672] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 980.247079][T17672] ? find_held_lock+0x2b/0x80 [ 980.247101][T17672] ? rcu_read_unlock+0x17/0x60 [ 980.247128][T17672] ? vhost_task_create+0x1db/0x370 [ 980.247158][T17672] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 980.247180][T17672] ? rcu_is_watching+0x13/0xc0 [ 980.247199][T17672] ? trace_kmem_cache_alloc+0xdd/0x100 [ 980.247221][T17672] ? vhost_task_create+0x1db/0x370 [ 980.247244][T17672] __vmalloc_node_noprof+0xad/0xf0 [ 980.247263][T17672] ? vhost_task_create+0x1db/0x370 [ 980.247289][T17672] copy_process+0x803/0x8370 [ 980.247320][T17672] ? __pfx_copy_process+0x10/0x10 [ 980.247337][T17672] ? kasan_save_track+0x14/0x30 [ 980.247353][T17672] ? __kasan_kmalloc+0xaa/0xb0 [ 980.247370][T17672] ? lockdep_init_map_type+0x5c/0x250 [ 980.247388][T17672] ? lockdep_init_map_type+0x5c/0x250 [ 980.247407][T17672] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 980.247431][T17672] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 980.247453][T17672] vhost_task_create+0x1db/0x370 [ 980.247476][T17672] ? __pfx_vhost_task_create+0x10/0x10 [ 980.247506][T17672] ? __pfx_vhost_task_fn+0x10/0x10 [ 980.247532][T17672] ? register_lock_class+0x3f/0x7b0 [ 980.247548][T17672] ? rcu_is_watching+0x13/0xc0 [ 980.247567][T17672] ? trace_contention_end+0x126/0x160 [ 980.247589][T17672] kvm_mmu_post_init_vm+0x1b3/0x360 [ 980.247610][T17672] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 980.247630][T17672] ? __pfx___mutex_lock+0x10/0x10 [ 980.247649][T17672] ? kasan_quarantine_put+0x104/0x240 [ 980.247668][T17672] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 980.247687][T17672] ? lock_acquire+0x1d1/0x380 [ 980.247703][T17672] ? do_raw_write_lock+0x11e/0x260 [ 980.247721][T17672] ? find_held_lock+0x2b/0x80 [ 980.247742][T17672] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 980.247768][T17672] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 980.247794][T17672] kvm_vcpu_ioctl+0x730/0x1700 [ 980.247817][T17672] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 980.247839][T17672] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 980.247859][T17672] ? do_vfs_ioctl+0x226/0x13e0 [ 980.247883][T17672] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 980.247905][T17672] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 980.247924][T17672] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 980.247943][T17672] ? __fget_files+0x34/0x3d0 [ 980.247971][T17672] ? selinux_file_ioctl+0x13b/0x290 [ 980.247985][T17672] ? selinux_file_ioctl+0xb6/0x290 [ 980.248001][T17672] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 980.248023][T17672] __x64_sys_ioctl+0x18e/0x210 [ 980.248048][T17672] do_syscall_64+0x123/0x790 [ 980.248069][T17672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.248086][T17672] RIP: 0033:0x7f038959e159 [ 980.248101][T17672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.248115][T17672] RSP: 002b:00007f038a4af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 980.248132][T17672] RAX: ffffffffffffffda RBX: 00007f0389826090 RCX: 00007f038959e159 [ 980.248143][T17672] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 980.248152][T17672] RBP: 00007f038a4af090 R08: 0000000000000000 R09: 0000000000000000 [ 980.248162][T17672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.248172][T17672] R13: 00007f0389826128 R14: 00007f0389826090 R15: 00007ffda7d38ed8 [ 980.248194][T17672] [ 980.254107][T17672] syz.3.2906: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 980.254179][T17672] CPU: 1 UID: 0 PID: 17672 Comm: syz.3.2906 Tainted: G L syzkaller #0 PREEMPT(full) [ 980.254201][T17672] Tainted: [L]=SOFTLOCKUP [ 980.254206][T17672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 980.254216][T17672] Call Trace: [ 980.254222][T17672] [ 980.254228][T17672] dump_stack_lvl+0x100/0x190 [ 980.254257][T17672] warn_alloc.cold+0x9e/0xb2 [ 980.254276][T17672] ? __pfx_warn_alloc+0x10/0x10 [ 980.254299][T17672] ? lockdep_hardirqs_on+0x7d/0x110 [ 980.254320][T17672] ? __get_vm_area_node+0x2f0/0x350 [ 980.254343][T17672] ? __get_vm_area_node+0x22b/0x350 [ 980.254366][T17672] __vmalloc_node_range_noprof+0xfa2/0x1420 [ 980.254386][T17672] ? lock_acquire+0x1d1/0x380 [ 980.254402][T17672] ? rcu_lock_acquire.constprop.0+0x7/0x30 [ 980.254427][T17672] ? find_held_lock+0x2b/0x80 [ 980.254448][T17672] ? rcu_read_unlock+0x17/0x60 [ 980.254472][T17672] ? vhost_task_create+0x1db/0x370 [ 980.254501][T17672] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 980.254523][T17672] ? rcu_is_watching+0x13/0xc0 [ 980.254546][T17672] ? trace_kmem_cache_alloc+0xdd/0x100 [ 980.254568][T17672] ? vhost_task_create+0x1db/0x370 [ 980.254591][T17672] __vmalloc_node_noprof+0xad/0xf0 [ 980.254610][T17672] ? vhost_task_create+0x1db/0x370 [ 980.254636][T17672] copy_process+0x803/0x8370 [ 980.254666][T17672] ? __pfx_copy_process+0x10/0x10 [ 980.254683][T17672] ? kasan_save_track+0x14/0x30 [ 980.254701][T17672] ? __kasan_kmalloc+0xaa/0xb0 [ 980.254718][T17672] ? lockdep_init_map_type+0x5c/0x250 [ 980.254736][T17672] ? lockdep_init_map_type+0x5c/0x250 [ 980.254754][T17672] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 980.254783][T17672] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 980.254805][T17672] vhost_task_create+0x1db/0x370 [ 980.254828][T17672] ? __pfx_vhost_task_create+0x10/0x10 [ 980.254857][T17672] ? __pfx_vhost_task_fn+0x10/0x10 [ 980.254882][T17672] ? register_lock_class+0x3f/0x7b0 [ 980.254898][T17672] ? rcu_is_watching+0x13/0xc0 [ 980.254918][T17672] ? trace_contention_end+0x126/0x160 [ 980.254940][T17672] kvm_mmu_post_init_vm+0x1b3/0x360 [ 980.254959][T17672] kvm_arch_vcpu_ioctl_run+0xb5/0x1dd0 [ 980.254979][T17672] ? __pfx___mutex_lock+0x10/0x10 [ 980.254997][T17672] ? kasan_quarantine_put+0x104/0x240 [ 980.255017][T17672] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 980.255035][T17672] ? lock_acquire+0x1d1/0x380 [ 980.255051][T17672] ? do_raw_write_lock+0x11e/0x260 [ 980.255070][T17672] ? find_held_lock+0x2b/0x80 [ 980.255090][T17672] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 980.255111][T17672] ? kvm_vcpu_ioctl+0x1531/0x1700 [ 980.255136][T17672] kvm_vcpu_ioctl+0x730/0x1700 [ 980.255159][T17672] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 980.255181][T17672] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 980.255200][T17672] ? do_vfs_ioctl+0x226/0x13e0 [ 980.255225][T17672] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 980.255246][T17672] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 980.255265][T17672] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 980.255284][T17672] ? __fget_files+0x34/0x3d0 [ 980.255312][T17672] ? selinux_file_ioctl+0x13b/0x290 [ 980.255326][T17672] ? selinux_file_ioctl+0xb6/0x290 [ 980.255342][T17672] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 980.255365][T17672] __x64_sys_ioctl+0x18e/0x210 [ 980.255390][T17672] do_syscall_64+0x123/0x790 [ 980.255411][T17672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.255427][T17672] RIP: 0033:0x7f038959e159 [ 980.255442][T17672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.255456][T17672] RSP: 002b:00007f038a4af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 980.255471][T17672] RAX: ffffffffffffffda RBX: 00007f0389826090 RCX: 00007f038959e159 [ 980.255481][T17672] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 980.255491][T17672] RBP: 00007f038a4af090 R08: 0000000000000000 R09: 0000000000000000 [ 980.255501][T17672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.255510][T17672] R13: 00007f0389826128 R14: 00007f0389826090 R15: 00007ffda7d38ed8 [ 980.255532][T17672] [ 980.260730][T17672] Mem-Info: [ 980.260740][T17672] active_anon:37204 inactive_anon:27 isolated_anon:0 [ 980.260740][T17672] active_file:1654 inactive_file:62709 isolated_file:0 [ 980.260740][T17672] unevictable:0 dirty:434 writeback:29 [ 980.260740][T17672] slab_reclaimable:12586 slab_unreclaimable:104928 [ 980.260740][T17672] mapped:34195 shmem:22743 pagetables:1956 [ 980.260740][T17672] sec_pagetables:0 bounce:0 [ 980.260740][T17672] kernel_misc_reclaimable:0 [ 980.260740][T17672] free:899764 free_pcp:13037 free_cma:0 [ 980.260790][T17672] Node 0 active_anon:148816kB inactive_anon:108kB active_file:6616kB inactive_file:250628kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132684kB dirty:1736kB writeback:116kB shmem:90972kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14716kB pagetables:7688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 980.260835][T17672] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4096kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 980.260874][T17672] Node 0 DMA free:11264kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 980.260920][T17672] lowmem_reserve[]: 0 2470 2470 2470 2470 [ 980.260948][T17672] Node 0 DMA32 free:325876kB boost:34816kB min:68808kB low:77304kB high:85800kB reserved_highatomic:0kB free_highatomic:0kB active_anon:148816kB inactive_anon:108kB active_file:6616kB inactive_file:250628kB unevictable:0kB writepending:1852kB zspages:0kB present:3129332kB managed:2530216kB mlocked:0kB bounce:0kB free_pcp:52148kB local_pcp:32864kB free_cma:0kB [ 980.260994][T17672] lowmem_reserve[]: 0 0 0 0 0 [ 980.261021][T17672] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:72kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 980.261076][T17672] lowmem_reserve[]: 0 0 0 0 0 [ 980.261103][T17672] Node 1 Normal free:3261916kB boost:0kB min:55904kB low:69880kB high:83856kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 980.261150][T17672] lowmem_reserve[]: 0 0 0 0 0 [ 980.261177][T17672] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 2*4096kB (M) = 11264kB [ 980.261304][T17672] Node 0 DMA32: 1786*4kB (UM) 535*8kB (UM) 143*16kB (UM) 679*32kB (UME) 1000*64kB (UME) 539*128kB (UME) 209*256kB (UM) 109*512kB (UM) 3*1024kB (M) 2*2048kB (UM) 10*4096kB (UM) = 325872kB [ 980.261438][T17672] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 980.263078][T17672] Node 1 Normal: 3*4kB (UM) 4*8kB (UM) 9*16kB (UM) 11*32kB (UM) 7*64kB (UM) 4*128kB (UM) 6*256kB (UM) 3*512kB (UM) 1*1024kB (M) 2*2048kB (M) 794*4096kB (UM) = 3261916kB [ 980.263199][T17672] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 980.263212][T17672] Node 0 hugepages_total=333 hugepages_free=333 hugepages_surp=0 hugepages_size=2048kB [ 980.263224][T17672] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 980.263236][T17672] Node 1 hugepages_total=330 hugepages_free=330 hugepages_surp=0 hugepages_size=2048kB [ 980.263248][T17672] 87102 total pagecache pages [ 980.263254][T17672] 0 pages in swap cache [ 980.263260][T17672] Free swap = 124996kB [ 980.263266][T17672] Total swap = 124996kB [ 980.263272][T17672] 2097051 pages RAM [ 980.263278][T17672] 0 pages HighMem/MovableOnly [ 980.263283][T17672] 432863 pages reserved [ 980.263288][T17672] 0 pages cma reserved [ 980.542894][ T31] audit: type=1400 audit(1788682252.080:1281): avc: denied { read write } for pid=17674 comm="syz.1.2909" dev="sockfs" ino=69317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 980.553277][ T5792] usb 10-1: string descriptor 0 read error: -71 [ 980.555059][ T5792] dvb-usb: found a 'AVerMedia AVerTVHD Volar (A868R)' in warm state. [ 980.555090][ T5792] cxusb: set interface failed [ 980.555098][ T5792] dvb-usb: bulk message failed: -22 (1/0) [ 980.557039][ T5792] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 980.557525][ T5792] dvbdev: DVB: registering new adapter (AVerMedia AVerTVHD Volar (A868R)) [ 980.557559][ T5792] usb 10-1: media controller created [ 980.565126][ T5792] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 981.079547][T17678] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 981.205951][ T5792] DVB: Unable to find symbol lgdt330x_attach() [ 981.205966][ T5792] dvb-usb: no frontend was attached by 'AVerMedia AVerTVHD Volar (A868R)' [ 981.222965][ T5792] dvb-usb: bulk message failed: -22 (1/0) [ 981.222985][ T5792] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully initialized and connected. [ 981.369356][ T31] audit: type=1400 audit(1788682252.910:1282): avc: denied { create } for pid=17688 comm="syz.0.2913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 981.370162][ T31] audit: type=1400 audit(1788682252.910:1283): avc: denied { ioctl } for pid=17688 comm="syz.0.2913" path="socket:[69349]" dev="sockfs" ino=69349 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 981.408782][ T5792] usb 10-1: USB disconnect, device number 58 [ 981.637190][ T31] audit: type=1400 audit(1788682253.180:1284): avc: denied { read write } for pid=17697 comm="syz.3.2917" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 981.637232][ T31] audit: type=1400 audit(1788682253.180:1285): avc: denied { open } for pid=17697 comm="syz.3.2917" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 981.646164][ T31] audit: type=1400 audit(1788682253.180:1286): avc: denied { ioctl } for pid=17697 comm="syz.3.2917" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 981.646207][ T31] audit: type=1400 audit(1788682253.180:1287): avc: denied { set_context_mgr } for pid=17697 comm="syz.3.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 981.650216][T17698] binder: 17697:17698 ioctl c0306201 200000000080 returned -14 [ 981.654698][ T31] audit: type=1400 audit(1788682253.200:1288): avc: denied { map } for pid=17697 comm="syz.3.2917" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 981.674014][T17698] binder: 17697:17698 ioctl c0306201 2000000003c0 returned -14 [ 981.674529][ T31] audit: type=1400 audit(1788682253.200:1289): avc: denied { call } for pid=17697 comm="syz.3.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 981.702872][ T31] audit: type=1400 audit(1788682253.200:1290): avc: denied { create } for pid=17697 comm="syz.3.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 981.704887][T17154] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 981.708534][ T31] audit: type=1400 audit(1788682253.250:1291): avc: denied { setopt } for pid=17697 comm="syz.3.2917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 982.022782][T17154] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 982.023733][T17154] usb 2-1: config 1 has an invalid interface number: 82 but max is 0 [ 982.023753][T17154] usb 2-1: config 1 has no interface number 0 [ 982.023775][T17154] usb 2-1: config 1 interface 82 has no altsetting 0 [ 982.025635][T17154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.025655][T17154] usb 2-1: Product: syz [ 982.025666][T17154] usb 2-1: Manufacturer: syz [ 982.025678][T17154] usb 2-1: SerialNumber: syz [ 982.034880][ T5792] dvb-usb: AVerMedia AVerTVHD Volar (A868R) successfully deinitialized and disconnected. [ 982.129057][T17704] netfs: Cache "CacheFiles" added (type cachefiles) [ 982.129074][T17704] CacheFiles: File cache on CacheFiles registered [ 982.283318][T17708] CacheFiles: File cache on CacheFiles unregistering [ 982.283335][T17708] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 983.738133][T17713] netfs: Cache "CacheFiles" added (type cachefiles) [ 983.738178][T17713] CacheFiles: File cache on CacheFiles registered [ 983.827588][T17714] CacheFiles: File cache on CacheFiles unregistering [ 983.827673][T17714] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 985.032419][T17154] hub 2-1:1.82: bad descriptor, ignoring hub [ 985.039279][T17154] hub 2-1:1.82: probe with driver hub failed with error -5 [ 985.047524][T17154] sierra 2-1:1.82: Sierra USB modem converter detected [ 985.065585][T17154] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 985.095837][T17154] usb 2-1: USB disconnect, device number 110 [ 985.121151][T17154] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 985.130260][T17154] sierra 2-1:1.82: device disconnected [ 985.165720][T17724] IPv6: NLM_F_REPLACE set, but no existing node found! [ 985.175395][ T31] audit: type=1400 audit(1788682256.720:1292): avc: denied { create } for pid=17720 comm="syz.9.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 985.181046][ T31] audit: type=1400 audit(1788682256.720:1293): avc: denied { create } for pid=17720 comm="syz.9.2923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 985.241222][T17724] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 985.378914][T17731] e1000e 0000:00:00.0: probe with driver e1000e failed with error -5 [ 985.462388][T17154] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 985.634665][T17154] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 985.672368][T10454] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 985.695140][T17154] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.695287][T17154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.982825][T10454] usb 10-1: Using ep0 maxpacket: 8 [ 986.000548][T10454] usb 10-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 986.170432][T10454] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.170485][T10454] usb 10-1: config 0 interface 0 has no altsetting 0 [ 986.302107][T10454] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.302151][T10454] usb 10-1: Product: syz [ 986.302165][T10454] usb 10-1: Manufacturer: syz [ 986.302179][T10454] usb 10-1: SerialNumber: syz [ 986.495402][T17154] wacom 0003:056A:033B.000A: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 986.579527][T10454] usb 10-1: config 0 descriptor?? [ 986.594283][T10454] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 found [ 986.615511][T17154] wacom 0003:056A:033B.000A: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 986.634249][T17154] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.000A/input/input204 [ 986.657804][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 986.657860][ T31] audit: type=1400 audit(1788682258.200:1308): avc: denied { read } for pid=4961 comm="acpid" name="mouse1" dev="devtmpfs" ino=4368 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 986.657894][ T31] audit: type=1400 audit(1788682258.200:1309): avc: denied { open } for pid=4961 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=4368 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 986.768055][T17743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.768409][T17743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.796607][T10454] snd_usb_toneport 10-1:0.0: cannot get proper max packet size [ 986.796793][T10454] snd_usb_toneport 10-1:0.0: Line 6 TonePort UX2 now disconnected [ 986.817346][ T31] audit: type=1400 audit(1788682258.330:1310): avc: denied { read write } for pid=17722 comm="syz.1.2924" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 986.817402][ T31] audit: type=1400 audit(1788682258.360:1311): avc: denied { ioctl } for pid=4961 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=4368 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 986.817450][ T31] audit: type=1400 audit(1788682258.360:1312): avc: denied { open } for pid=17722 comm="syz.1.2924" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 986.820275][T10454] snd_usb_toneport 10-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 986.834145][T17744] CacheFiles: Failed to register: -95 [ 986.883411][T17742] overlayfs: failed to clone upperpath [ 986.925816][T17154] usb 2-1: USB disconnect, device number 111 [ 987.008420][T17733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.008771][T17733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.023609][T10454] usb 10-1: USB disconnect, device number 59 [ 987.155064][ T31] audit: type=1400 audit(1788682258.700:1313): avc: denied { create } for pid=17750 comm="syz.0.2935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 987.362604][T10454] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 987.435810][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 987.435882][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 987.506623][T17757] FAULT_INJECTION: forcing a failure. [ 987.506623][T17757] name failslab, interval 0, probability 0, space 0, times 0 [ 987.506682][T17757] CPU: 1 UID: 0 PID: 17757 Comm: syz.1.2936 Tainted: G L syzkaller #0 PREEMPT(full) [ 987.506707][T17757] Tainted: [L]=SOFTLOCKUP [ 987.506713][T17757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 987.506721][T17757] Call Trace: [ 987.506727][T17757] [ 987.506733][T17757] dump_stack_lvl+0x100/0x190 [ 987.506761][T17757] should_fail_ex.cold+0x5/0xa [ 987.506784][T17757] should_failslab+0xc2/0x120 [ 987.506805][T17757] kmem_cache_alloc_noprof+0x92/0x6a0 [ 987.506823][T17757] ? do_getname+0x35/0x390 [ 987.506849][T17757] do_getname+0x35/0x390 [ 987.506872][T17757] do_sys_openat2+0xc7/0x1e0 [ 987.506893][T17757] ? __pfx_do_sys_openat2+0x10/0x10 [ 987.506914][T17757] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 987.506935][T17757] ? __fget_files+0x21f/0x3d0 [ 987.506957][T17757] __x64_sys_openat+0x12d/0x210 [ 987.506979][T17757] ? __pfx___x64_sys_openat+0x10/0x10 [ 987.506998][T17757] ? ksys_write+0x1ac/0x250 [ 987.507021][T17757] do_syscall_64+0x123/0x790 [ 987.507042][T17757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.507058][T17757] RIP: 0033:0x7fe894b9e159 [ 987.507073][T17757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.507088][T17757] RSP: 002b:00007fe895aad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 987.507105][T17757] RAX: ffffffffffffffda RBX: 00007fe894e25fa0 RCX: 00007fe894b9e159 [ 987.507115][T17757] RDX: 0000000000042801 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 987.507126][T17757] RBP: 00007fe895aad090 R08: 0000000000000000 R09: 0000000000000000 [ 987.507136][T17757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.507145][T17757] R13: 00007fe894e26038 R14: 00007fe894e25fa0 R15: 00007ffe06858ae8 [ 987.507167][T17757] [ 987.514235][T10454] usb 10-1: Using ep0 maxpacket: 16 [ 987.516476][T10454] usb 10-1: New USB device found, idVendor=2639, idProduct=0001, bcdDevice=7d.69 [ 987.517394][T10454] usb 10-1: config 1 has an invalid interface number: 220 but max is 3 [ 987.517415][T10454] usb 10-1: config 1 has an invalid interface number: 129 but max is 3 [ 987.517471][T10454] usb 10-1: config 1 has an invalid interface number: 12 but max is 3 [ 987.517489][T10454] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 987.517502][T10454] usb 10-1: config 1 has an invalid interface number: 81 but max is 3 [ 987.517517][T10454] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 987.517532][T10454] usb 10-1: config 1 has no interface number 0 [ 987.517544][T10454] usb 10-1: config 1 has no interface number 1 [ 987.517555][T10454] usb 10-1: config 1 has no interface number 2 [ 987.517576][T10454] usb 10-1: config 1 has no interface number 3 [ 987.517621][T10454] usb 10-1: config 1 interface 220 altsetting 8 endpoint 0x8 has invalid maxpacket 1064, setting to 64 [ 987.517644][T10454] usb 10-1: config 1 interface 220 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 987.517670][T10454] usb 10-1: config 1 interface 129 altsetting 9 bulk endpoint 0xC has invalid maxpacket 32 [ 987.517691][T10454] usb 10-1: config 1 interface 129 altsetting 9 has a duplicate endpoint with address 0x8C, skipping [ 987.517710][T10454] usb 10-1: config 1 interface 129 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 987.517727][T10454] usb 10-1: config 1 interface 129 altsetting 9 endpoint 0x3 has invalid maxpacket 1535, setting to 64 [ 987.517755][T10454] usb 10-1: config 1 interface 12 altsetting 255 has a duplicate endpoint with address 0x5, skipping [ 987.517774][T10454] usb 10-1: config 1 interface 12 altsetting 255 has a duplicate endpoint with address 0x5, skipping [ 987.517793][T10454] usb 10-1: config 1 interface 12 altsetting 255 has a duplicate endpoint with address 0xF, skipping [ 987.517818][T10454] usb 10-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 987.517834][T10454] usb 10-1: config 1 interface 81 altsetting 7 bulk endpoint 0xE has invalid maxpacket 32 [ 987.517852][T10454] usb 10-1: config 1 interface 81 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 987.517868][T10454] usb 10-1: config 1 interface 81 altsetting 7 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 987.517887][T10454] usb 10-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 987.517903][T10454] usb 10-1: config 1 interface 81 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 987.517919][T10454] usb 10-1: config 1 interface 81 altsetting 7 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 987.517938][T10454] usb 10-1: config 1 interface 81 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 987.517953][T10454] usb 10-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 987.517970][T10454] usb 10-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xB, skipping [ 987.517986][T10454] usb 10-1: config 1 interface 81 altsetting 7 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 987.518006][T10454] usb 10-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 987.518022][T10454] usb 10-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 987.518039][T10454] usb 10-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 987.518055][T10454] usb 10-1: config 1 interface 81 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 987.518072][T10454] usb 10-1: config 1 interface 220 has no altsetting 0 [ 987.518086][T10454] usb 10-1: config 1 interface 129 has no altsetting 0 [ 987.518099][T10454] usb 10-1: config 1 interface 12 has no altsetting 0 [ 987.518113][T10454] usb 10-1: config 1 interface 81 has no altsetting 0 [ 987.521988][T10454] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.522008][T10454] usb 10-1: Product: syz [ 987.522021][T10454] usb 10-1: Manufacturer: syz [ 987.522033][T10454] usb 10-1: SerialNumber: syz [ 987.637845][ T31] audit: type=1400 audit(1788682259.180:1314): avc: denied { mount } for pid=17758 comm="syz.1.2937" name="/" dev="configfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 987.638507][ T31] audit: type=1400 audit(1788682259.180:1315): avc: denied { search } for pid=17758 comm="syz.1.2937" name="/" dev="configfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 987.638684][ T31] audit: type=1400 audit(1788682259.180:1316): avc: denied { search } for pid=17758 comm="syz.1.2937" name="usb_gadget" dev="configfs" ino=1436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 987.638958][ T31] audit: type=1400 audit(1788682259.180:1317): avc: denied { write search } for pid=17758 comm="syz.1.2937" name="usb_gadget" dev="configfs" ino=1436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 987.686249][T17759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2937'. [ 987.712598][ T5702] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 987.863030][ T5702] usb 5-1: Using ep0 maxpacket: 32 [ 987.863672][ T5702] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 987.864517][ T5702] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.864549][ T5702] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.864588][ T5702] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.864607][ T5702] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 987.864634][ T5702] usb 5-1: config 0 interface 0 has no altsetting 0 [ 987.864658][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.868332][ T5702] usb 5-1: config 0 descriptor?? [ 987.932429][ T5703] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 988.082391][ T5703] usb 2-1: Using ep0 maxpacket: 32 [ 988.082886][ T5703] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 988.086800][T17755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.089591][ T5703] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 988.089613][ T5703] usb 2-1: config 0 has no interface number 0 [ 988.089643][ T5703] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 988.089669][ T5703] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 988.089708][ T5703] usb 2-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 988.094036][T17755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.105935][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.105957][ T5703] usb 2-1: Product: syz [ 988.105970][ T5703] usb 2-1: Manufacturer: syz [ 988.105983][ T5703] usb 2-1: SerialNumber: syz [ 988.114904][ T5703] usb 2-1: config 0 descriptor?? [ 988.115901][T17759] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 988.121346][T17755] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=17755 comm=syz.4.2930 [ 988.333345][ T5703] usb-storage 2-1:0.20: USB Mass Storage device detected [ 988.351504][T17755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2930'. [ 988.372009][ T5703] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 988.372975][ T5703] scsi host1: usb-storage 2-1:0.20 [ 988.428827][ T5703] usb 2-1: USB disconnect, device number 112 [ 988.462581][T17755] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2930'. [ 988.521411][T10454] usb 10-1: USB disconnect, device number 60 [ 989.482413][T10454] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 989.554652][T17785] CacheFiles: Failed to register: -95 [ 989.665096][T10454] usb 10-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 989.666112][T10454] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 989.666131][T10454] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 989.666171][T10454] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 989.672940][T10454] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.672962][T10454] usb 10-1: Product: syz [ 989.672975][T10454] usb 10-1: Manufacturer: syz [ 989.672987][T10454] usb 10-1: SerialNumber: syz [ 989.770664][T17795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2945'. [ 990.165134][T17802] ================================================================== [ 990.165152][T17802] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 990.165185][T17802] Read of size 160 at addr ffffffff9bcb1be0 by task syz.3.2946/17802 [ 990.165203][T17802] [ 990.165216][T17802] CPU: 0 UID: 0 PID: 17802 Comm: syz.3.2946 Tainted: G L syzkaller #0 PREEMPT(full) [ 990.165243][T17802] Tainted: [L]=SOFTLOCKUP [ 990.165250][T17802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 990.165262][T17802] Call Trace: [ 990.165269][T17802] [ 990.165277][T17802] dump_stack_lvl+0x100/0x190 [ 990.165307][T17802] print_report+0x13d/0x4b0 [ 990.165336][T17802] ? __virt_addr_valid+0x239/0x430 [ 990.165357][T17802] ? usb_copy_descriptors+0x18d/0x320 [ 990.165379][T17802] kasan_report+0xdf/0x1c0 [ 990.165406][T17802] ? usb_copy_descriptors+0x18d/0x320 [ 990.165431][T17802] kasan_check_range+0x10f/0x1e0 [ 990.165457][T17802] __asan_memcpy+0x23/0x60 [ 990.165485][T17802] usb_copy_descriptors+0x18d/0x320 [ 990.165510][T17802] usb_assign_descriptors+0xd2/0x470 [ 990.165541][T17802] f_audio_bind+0x243a/0x3950 [ 990.165572][T17802] ? __pfx_f_audio_bind+0x10/0x10 [ 990.165598][T17802] usb_add_function+0x219/0x890 [ 990.165625][T17802] ? composite_dev_prepare+0x1e1/0x420 [ 990.165654][T17802] configfs_composite_bind+0xd83/0x1960 [ 990.165679][T17802] ? kernfs_create_link+0x1bd/0x240 [ 990.165701][T17802] gadget_bind_driver+0x28c/0xbf0 [ 990.165727][T17802] ? __pfx_gadget_bind_driver+0x10/0x10 [ 990.165754][T17802] really_probe+0x241/0xa60 [ 990.165774][T17802] __driver_probe_device+0x210/0x460 [ 990.165791][T17802] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 990.165814][T17802] driver_probe_device+0x4a/0x140 [ 990.165833][T17802] __driver_attach+0x21f/0x5b0 [ 990.165852][T17802] ? __pfx___driver_attach+0x10/0x10 [ 990.165869][T17802] bus_for_each_dev+0x13e/0x1d0 [ 990.165894][T17802] ? __pfx_bus_for_each_dev+0x10/0x10 [ 990.165919][T17802] ? bus_add_driver+0x2b5/0x5b0 [ 990.165948][T17802] bus_add_driver+0x305/0x5b0 [ 990.165975][T17802] driver_register+0x1e2/0x360 [ 990.165994][T17802] usb_gadget_register_driver_owner+0x132/0x210 [ 990.166021][T17802] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 990.166042][T17802] configfs_write_iter+0x302/0x4e0 [ 990.166068][T17802] vfs_write+0x6af/0x1050 [ 990.166086][T17802] ? __pfx_configfs_write_iter+0x10/0x10 [ 990.166114][T17802] ? __pfx_vfs_write+0x10/0x10 [ 990.166128][T17802] ? find_held_lock+0x2b/0x80 [ 990.166158][T17802] ksys_write+0x12a/0x250 [ 990.166176][T17802] ? __pfx_ksys_write+0x10/0x10 [ 990.166196][T17802] do_syscall_64+0x123/0x790 [ 990.166219][T17802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.166238][T17802] RIP: 0033:0x7f038959e159 [ 990.166255][T17802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.166272][T17802] RSP: 002b:00007f038a4d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 990.166292][T17802] RAX: ffffffffffffffda RBX: 00007f0389825fa0 RCX: 00007f038959e159 [ 990.166306][T17802] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000009 [ 990.166318][T17802] RBP: 00007f0389635024 R08: 0000000000000000 R09: 0000000000000000 [ 990.166331][T17802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 990.166344][T17802] R13: 00007f0389826038 R14: 00007f0389825fa0 R15: 00007ffda7d38ed8 [ 990.166365][T17802] [ 990.166373][T17802] [ 990.166377][T17802] The buggy address belongs to the variable: [ 990.166384][T17802] ac_header_desc+0x0/0x40 [ 990.166403][T17802] [ 990.166407][T17802] The buggy address belongs to the physical page: [ 990.166415][T17802] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1bcb1 [ 990.166431][T17802] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 990.166457][T17802] raw: 00fff00000002000 ffffea00006f2c48 ffffea00006f2c48 0000000000000000 [ 990.166474][T17802] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 990.166486][T17802] page dumped because: kasan: bad access detected [ 990.166495][T17802] page_owner info is not present (never set?) [ 990.166502][T17802] [ 990.166506][T17802] Memory state around the buggy address: [ 990.166517][T17802] ffffffff9bcb1a80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 990.166537][T17802] ffffffff9bcb1b00: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 f9 f9 f9 [ 990.166549][T17802] >ffffffff9bcb1b80: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 990.166559][T17802] ^ [ 990.166570][T17802] ffffffff9bcb1c00: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 990.166583][T17802] ffffffff9bcb1c80: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 990.166594][T17802] ================================================================== [ 990.175054][T17802] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 990.642460][T17802] CPU: 0 UID: 0 PID: 17802 Comm: syz.3.2946 Tainted: G L syzkaller #0 PREEMPT(full) [ 990.653380][T17802] Tainted: [L]=SOFTLOCKUP [ 990.657683][T17802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 990.667732][T17802] Call Trace: [ 990.671000][T17802] [ 990.673911][T17802] dump_stack_lvl+0x100/0x190 [ 990.678588][T17802] vpanic+0x553/0x970 [ 990.682569][T17802] ? __pfx_vpanic+0x10/0x10 [ 990.687076][T17802] ? usb_copy_descriptors+0x18d/0x320 [ 990.692449][T17802] panic+0xd1/0xe0 [ 990.696174][T17802] ? __pfx_panic+0x10/0x10 [ 990.700590][T17802] ? usb_copy_descriptors+0x18d/0x320 [ 990.705972][T17802] ? preempt_schedule_common+0x3c/0xb0 [ 990.711421][T17802] check_panic_on_warn.cold+0x19/0x34 [ 990.716800][T17802] end_report.part.0+0x3a/0x90 [ 990.721567][T17802] kasan_report.cold+0xe/0x18 [ 990.726252][T17802] ? usb_copy_descriptors+0x18d/0x320 [ 990.731640][T17802] kasan_check_range+0x10f/0x1e0 [ 990.736574][T17802] __asan_memcpy+0x23/0x60 [ 990.740990][T17802] usb_copy_descriptors+0x18d/0x320 [ 990.746182][T17802] usb_assign_descriptors+0xd2/0x470 [ 990.751453][T17802] f_audio_bind+0x243a/0x3950 [ 990.756112][T17802] ? __pfx_f_audio_bind+0x10/0x10 [ 990.761137][T17802] usb_add_function+0x219/0x890 [ 990.765992][T17802] ? composite_dev_prepare+0x1e1/0x420 [ 990.771452][T17802] configfs_composite_bind+0xd83/0x1960 [ 990.777002][T17802] ? kernfs_create_link+0x1bd/0x240 [ 990.782178][T17802] gadget_bind_driver+0x28c/0xbf0 [ 990.787213][T17802] ? __pfx_gadget_bind_driver+0x10/0x10 [ 990.792780][T17802] really_probe+0x241/0xa60 [ 990.797294][T17802] __driver_probe_device+0x210/0x460 [ 990.802564][T17802] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 990.808375][T17802] driver_probe_device+0x4a/0x140 [ 990.813379][T17802] __driver_attach+0x21f/0x5b0 [ 990.818116][T17802] ? __pfx___driver_attach+0x10/0x10 [ 990.823379][T17802] bus_for_each_dev+0x13e/0x1d0 [ 990.828219][T17802] ? __pfx_bus_for_each_dev+0x10/0x10 [ 990.833578][T17802] ? bus_add_driver+0x2b5/0x5b0 [ 990.838423][T17802] bus_add_driver+0x305/0x5b0 [ 990.843098][T17802] driver_register+0x1e2/0x360 [ 990.847852][T17802] usb_gadget_register_driver_owner+0x132/0x210 [ 990.854103][T17802] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 990.859729][T17802] configfs_write_iter+0x302/0x4e0 [ 990.864832][T17802] vfs_write+0x6af/0x1050 [ 990.869149][T17802] ? __pfx_configfs_write_iter+0x10/0x10 [ 990.874781][T17802] ? __pfx_vfs_write+0x10/0x10 [ 990.879530][T17802] ? find_held_lock+0x2b/0x80 [ 990.884194][T17802] ksys_write+0x12a/0x250 [ 990.888513][T17802] ? __pfx_ksys_write+0x10/0x10 [ 990.893346][T17802] do_syscall_64+0x123/0x790 [ 990.897932][T17802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.903813][T17802] RIP: 0033:0x7f038959e159 [ 990.908208][T17802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 990.927794][T17802] RSP: 002b:00007f038a4d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 990.936194][T17802] RAX: ffffffffffffffda RBX: 00007f0389825fa0 RCX: 00007f038959e159 [ 990.944174][T17802] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000009 [ 990.952142][T17802] RBP: 00007f0389635024 R08: 0000000000000000 R09: 0000000000000000 [ 990.960114][T17802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 990.968066][T17802] R13: 00007f0389826038 R14: 00007f0389825fa0 R15: 00007ffda7d38ed8 [ 990.976029][T17802] [ 990.979250][T17802] Kernel Offset: disabled [ 990.983557][T17802] Rebooting in 86400 seconds..