last executing test programs: 13.412592491s ago: executing program 2 (id=327): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/netstat\x00') readv(r0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/254, 0xfe}], 0x1) write$binfmt_script(r0, &(0x7f0000000500)={'#! ', './file0', [{0x20, '\\(%^!#'}, {0x20, '-+])3@'}, {0x20, '[@%'}, {0x20, 'NLBL_UNLBL\x00'}, {0x20, '/dev/input/event#\x00'}], 0xa, "a8bf09d2521d8ac59ab1cfe4f92d7a16998baae4762a42771ab0b4566038c7d4cd6c431b3cd65e83d5cfabe8afc4ea8c219596f5f46e5d766fe170f78d72771162e18e4cc0c536c3eadd85e9b1b3e78d45d4f5f184baf4a36b1f06f50d8161e24df37f4104e7e6589f28bb32e447575c7f058decb7581d5d7fe8f5b368dd74b925a14c29cf54f45ad8acecb1e918642f4cf61197032d207f3a239809e9bc3b0830468031f8494c3b703e9eca80734c51ca109ef3a7d50a66"}, 0xf4) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) readv(r1, &(0x7f0000000980)=[{&(0x7f0000000000)=""/58, 0x3a}], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$cgroup_int(r1, &(0x7f0000000100)=0x4, 0x12) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r3) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r4, 0x82209bf46f287d93, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004055}, 0x200c08c0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, &(0x7f0000002b80), 0x41000004, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f00000002c0)=[0x2a, 0xf0]) 10.369074821s ago: executing program 2 (id=337): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000200)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x15, 0x3, 'nq\x00', 0x1, 0x1, 0x6f}, 0x2c) r1 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff0200000071df5dd80300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r1], 0x1) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'syzkaller1\x00', {0x2, 0x4e23, @local}}) r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r3, 0x1, &(0x7f0000004540)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) socket(0x11, 0x80000, 0xf) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000300)=[r6, r5], 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000280)={&(0x7f0000000240), 0x0, 0x800, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_S_EXT_CTRLS(r7, 0xc0205648, &(0x7f00000001c0)={0x9b0000, 0x800001, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x990af5, 0x0, '\x00', @ptr=0x1}}) 10.039562818s ago: executing program 2 (id=340): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000000080)=[{0x4, 0x50, 0x41, &(0x7f0000000140)="5e90e206939a731c09aff7ff7b689fa501007cf9f74072ca4af21a7b91ae9b8fefd45dfd3c4ae63c8d585043628528864982c26461f47bd9f986295cc2aeac5622"}], 0x1}) 9.077454487s ago: executing program 4 (id=344): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') lseek(r2, 0x4, 0x4) sendmmsg$alg(r2, &(0x7f0000005400)=[{0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000000440)=[@iv={0x18, 0x117, 0x2, 0x3, "c5521c"}, @assoc={0x18, 0x117, 0x4, 0x3b}, @op={0x18, 0x117, 0x3, 0x1}], 0x48, 0x8090}, {0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000004c0)="12119028486a0c758ce22d407cc57bbf6df2bcfb7bdfda0a3248dede32f100c973a48384eddba600fc39c2d204a576388bf9de9986b3b28e628b4f726182f0d6e33a5f226cc00bc176d0d0c4a6b7b124288534224cdc751ded50cc9ac999f940460f33dad811565cb4e42062e92611b2d69db24042a851cdfc39fb27a6083ddfa6778370", 0x84}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000002580)="fdcb8ceab055874efefcd3991d6cb2fd131288b6ab68db1d51ae3d6d1f", 0x1d}, {&(0x7f00000025c0)="d0022763998897", 0x7}, {&(0x7f0000002600)="4fbf12f5acb3beafe3e5dcf15b3732142d573b68531a465b20d70198b685ea4b3d3e241304c0cd76d0b08cc846641b68bcfcd63bfa96bced653a121ca6", 0x3d}, {&(0x7f0000002640)="cbca1899bd7a4c888fd1f6050f4b3a51ce716118d5479761dc2506b63ac60c7199a5552b5334de4ab16cdccd00f3737864990acd8699ec1abadd9a0558053869d06ec72654d7b7dbf50edca555fde9ccd24693c6886e157477ddb4cc255c3d58ec7d77c171c06adba93f983fd374ccbd19520570418aee523d9c95fad955a5ef1cd884c4c11c45c4603cc142a38e3446037b", 0x92}, {&(0x7f0000002700)="192f9e1555df17f070fcfc2321c32e7ea2061ab2bd2dc871c2df297f5cb147848552a65a49807fa11e394947441c71b5226b529a5917c04a3891fe1fa9fe4a5a64be24c69623ac431333767b83b41fc26219a2", 0x53}], 0x8, &(0x7f0000002800)=ANY=[@ANYBLOB="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"], 0x100, 0x40000}, {0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002900)="64badcf367550977", 0x8}, {&(0x7f0000002940)="fcd8b927c8240307d6c918673e8ab0e45efc3dc02ea68d75efa486bcd13cb422f962c9a1805c28d296b0ff485f1a69623952baf50412f592d7f1d0e6", 0x3c}, {&(0x7f0000002980)="9b305496a9306be245e8815b44025b66deea80c2d4cf76e553b726bccb6a6b3a1e7590cffd080b36c041b51d8410ed099e5fe0476b94a566038d4883f6aea00f8d626b723f138524ec7b8de107f21d44837a72349b4e5a2a52cc767c91eb1c110dd83e7b4f5640ea4f22ff4f215e3080242880790eb97bd68e82f24636a89ea4400754cdd39d944c84f70fc5bd1e7727d6fee9f813e275ce766b21c2c5a81929819ce577dd29b8c51a3e9b31836cdf9daf34c8d34c8125a79ec0331999b990cb", 0xc0}, {&(0x7f0000002a40)="36e18268a17b1f97f68a507b52e75c4ff1e8c6dd79e31ec63a146361ac7413dd9e44dae063ba3d616766e65198656a7ee71c47dba5a85238cf3991a65e86d3ef7525489f6b0d5322", 0x48}, {&(0x7f0000002ac0)="5183bee68ab855cef70105f12c948fbb7edf1bfdade2dc779410028c75fb25e56ff9e9ea03ffa3702f390ba23866f98153dae25084e232fd8df4c02b673c0ef638dbb8704dedfa3c7b7d49108e7b0f16949f712b08e68aa8a0789a8aad95a98de47d9d1c08d1b6d589b959088ba6802e265465d5d727b93aaaed78c8dd0f1b7b1d665339fadfc226940bca1ac4af149040dac4c302d675182f8b0a2bf09b453160c615c80df1065b9c0dc376ec81fd6a853a98905667944674a242dfbe72e7cf3271cc5ee40bd61f2aba5a43f3e99b6b93b3b3715abdf0da877c7649a71567c06e3b202b86", 0xe5}, {&(0x7f0000002bc0)="5bde2b77f40f2cb291141fadc8accf2850a1ff6c4502432c76abe6a06fad7e89037b5e75a82ca239818d7f979fb28079d1fed8cf0994d3196b623e173a6d1082040900a61231cd619992f24bb4a480009802d0bba280c613eab513350a7ae744f320ccb2fb4d6ee8b6d30c0c06f61e661fc066cb6cd27d6b7d728af2edddb5018ef42fc047780015c702f32eec06d9c20b49fb0f2510b76d38c4b3451c42bc5fa0ae7ac14bd3bebb8babc9bfac39f3484a808757fccba131d5c35536f89e25cf42825780a781866142", 0xc9}, {&(0x7f0000002cc0)="445c474646ec30c3c60edf2deaaa6318096521101d03243525f51a85737378202bb8a86a6bafb26909b00813936ab29c696ea065a8fde7980b6cbd80eaf0d705a36454668f761cc7a8787b0c504149e881152ef4", 0x54}, {&(0x7f0000002d40)="3385dfbcd4f7df742ed65030e62b7f9af66c337c1d8b69eace8988795ef2b41d9e0a1ef734c5e0761bb57f48f1e6bf47610e79181efafefc7133d1ec5ba54154098bdb116d72718902ab30c286b00174eedc5e32bf6b75b996c45bc4156725b29260", 0x62}, {&(0x7f0000002dc0)="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", 0xfc}, {&(0x7f0000002ec0)="b44ceb0c584845d5951440f5bb273315fa5f88afaba5e54d5853123693d689cef70201fca29caf90100cccd28eb43c337cbf5b5020b10f93336b2013d52f6b4280c9a34f220cca0d96302b5ffde851775ea95c39dc3bd284d5ba789d537c1766d66ed20f77aeffbc3c1afbaf1acc21b475cb35969b7cfd22417b785716d503fcfce3b58659acf33629befd8dc641bb4f170d448e265398", 0x97}], 0xa, &(0x7f0000003040)=ANY=[@ANYBLOB="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"], 0x130, 0x40880}, {0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000003180)="cb33002363fbbd4f1361d223f2215ffca2aaa99a5ef7a65e4c4a21682591c1178d7af7720ef0a6d36080f9542f551e2ae3419ea63e230e71bd8c3388f8dfe90f31e458f0208d11d4c909ea80310a8aa8374e2439fccfbe289a355ad08f39ca0f2be159218c3d2b06f6228397ed8d64bb1c534335ef8ddbfa817ea128b8eac2a5e7c294b93bb16b082ae5eaefa76c61f97c471043c2803048f69270b985d7c1e6d2eac87391a7464dd7e4803898dbe3a3c390326dc508dbfffce12d714dc2ffff420e260b3a9852abfc296eca15779902db835a5366f4b5b09ee5f30f70ac4aa6c439f4f4e96fa99ccef3e28ed18a7684fd66ed983515842595e4626cdbeb57", 0xff}], 0x1, &(0x7f00000032c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x78, 0x117, 0x2, 0x63, "d18e3c7ab3af29ec55ed2da1adc9fa8ab5c55f3ec1e7b99b6588938f3084db947068ded88e19de8b9f9a0bc43a983e4e18cf8be7d3024e16f2f8f4ef0cb11c1f1f0c6c1f4a286be241b90d4b57659836659622c569ae954923ed993f934a1aa9a60ef8"}], 0xd8, 0x44}, {0x0, 0x0, &(0x7f0000003480)=[{&(0x7f00000033c0)="3385924bab95202c8bd0c7b48258e6d19ddd2936f168b43276aad16fb45087e88cef36f07f35588e4cc009ed33ae5499bc44ff1bb12693b078045beb4b81ee0cee26cc28000a1de1dbe28a57c789e8b471eff8ce87775a83ffaa0b12c834b5de539265c02492a6a55eeaea60154772a4a0a9de827675e6dd4771ff0b79b411a7806e98c5d5548d9d73a3e9fcc5f02d0f9662836b0230", 0x96}], 0x1, &(0x7f00000034c0)=[@op={0x18}, @iv={0xc8, 0x117, 0x2, 0xb0, "1c8538890ef5baf83289c4c4db60a369023c8ad62e9f006d2eb65bf73bf1c3792646cba8ac633c195c159d7334ac9903df2e3bce3e43c2b3627bac83c21aa635c8038dbd0707b021213773342ada8b66e8c53aa619cd64bfe9ff10adcb278b636870be0de9dd67acf9949c4dea4a8ef05512d076b28b42b023be55183e753915d3ccb712ebea33d39e62bc325937497c452ae75b87603d793c68764e2d2a9ba900077f4cf91d2621318a32ac3154d8d5"}, @iv={0x88, 0x117, 0x2, 0x74, "6e4ee10261147a663b6a4d79e6deb400aa86733cb170f7ce11c876c4045ecdfe13d08fd014290062fa1823f5fff410d3382613cbd157e2ac5520794a9c7457086e712380800174737249ee94fc2e9899f028c600dc9267b8013cde15432d0b39cf3f397e7aab514dfc53fc39a177bccfb1f47c9a"}], 0x168, 0x20008800}, {0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f0000003640)="a19ba90144c3e914b78e5727232c7163602c763738887ae4f6afbc29238f9a3f51a51308a492b964f502a4c645b4d828fa823e5fc69ab272376abfd500e2d256b9aab1bb6cf6b7ae3a7e7db2b76b998e0788568b7dd598fe7e82620136d9837267e87d65d86830ee29da70ebb65cc90a805e8a658a6b5a10984fc9c27e4b452b84b4655158c8875d67ad64098e7b6dd329c8fdbe213cea561015a6695fb9", 0x9e}, {&(0x7f0000003700)="e0ac1e98b002b33b4e4c346b5fdc911e1733104eb1df3afe0fc1f9ccd78cd02c422d2e432d6871689d58128c52fe620a593cfd5afe5f83f4fd1f114aacc5aae8a530ecb61a31a8a8ee30cb75e59868640b67946ff79de280f9324598d2c40cb2c22a07eb37933ed86d6bb4c889d2cf879d61992f54594b98229188449e52fe310a8652", 0x83}], 0x2, &(0x7f0000003800)=[@iv={0x48, 0x117, 0x2, 0x2e, "39cb1edd87ccc91669ee6847fcbca080d9d365452107df557979508914d8b802126b383cfb2e6c571ee56806fa96"}, @assoc={0x18, 0x117, 0x4, 0x73}, @op={0x18}], 0x78}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000003880)="e6faa4aadb1ca740", 0x8}, {&(0x7f00000038c0)="b4648089b91a1bb309910b558c15cfc280565cb3a0e5f83ebf", 0x19}], 0x2, &(0x7f0000003940), 0x0, 0x1}, {0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000003980)="90917ee13c335a51be23c8279254938d87493f120656e22d48dd23aad394a8d918f99465613bea5be0427e", 0x2b}, {&(0x7f00000039c0)="f2f8bd5b5fee5f821c02ca2add0ca7f48eb412dd7094", 0x16}], 0x2, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f0000004f80)=[{&(0x7f0000003a40)="35a2b7b6f9637b1f8f75a702015b46fac268c6067fb765f691f25332595963a31bee5e184b8036d40896e0dcddd74909d444fb10aa87c35088e43213ba4e457be565e90bc33044f066a2a3fe79049c58321e1613bdeba2e973786f32cd50", 0x5e}, {&(0x7f0000003ac0)="b8312f098d1fc8bb6e183effcb64da9dca165863a8521ab125349d70e867dd7f277feb45a120090110be3563f8a3254c4abde3c03af9c9c51b582ac63e9143153548f0d1f03f88062d402c5c95723cb2e970dd6e475495f25bedebdb812e603319e80a5f11cc59d04185c95e6cd705f570c6a4eb6f86d057234d0f61305eb35a7783f9f0cd95fbf32f0c41da075c1d7d71c0b147270a796a788ee69b236162dddbda2fb5e3352af553de5e075f6e6de1154fd64faa662e5adec2db6e6137d718d99cd7553197a0f5a1b44cfe30e534d05e1c8c5b78e9a83d", 0xd8}, {&(0x7f0000003bc0)="6830d6ac142d81f86aa9e746458503435d6613ef648a96d6c2de62ed9955d36f745f9d04bc3e85ab83b58884696dabb5caa0140ca99ae2381a41205ea029dacd07889d33623a2bb087b7019eb2d4b6bde10f3b650f8aaed21af2dab673304a8953418070ef63b3ab4c0836b66945f42c8f0b5f98236bafc1415b0418410940ab649991a1a8090755467441eb7267a8aae155a02a6ae72501b0841d2c5bdc81eed244667cafd08d6de54f3fa085bba4d7c87c4b12bdeb83d986069c587c4a8bc0e1bf009add9e72114d2edfe7e9a29ca57b6d4ef2f35cbd17631034f44dbe7b71b29aedf6b62128552c31d7af0c7d88957017", 0xf2}, {&(0x7f0000003cc0)="ac3efd133f8c77e373fd6f63f129a28f304c7b0e777ab4d21ab296e6f7e4e98985c228423f8e257e3a2daac8e4c549921b41903a3dfdf1624057d4cbba595f6d83440562e8ac1a77bd9f040e2e4330fb08b22eb9501629f48105b7a5509271785d4ad6374a088982e5e7710b268a20cbf89672025ee24058172ec48ef099b38f06777097eef2a92ed977c27c90033751549bb94e6023c08759473f76c8742e6cbe616afd988ff210a704199249332052e9d26aa2d08d1e3d1a12e5e77669b3c66db44ea8df1804bbdde56a155abf6148", 0xd0}, {&(0x7f0000003dc0)="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", 0x1000}, {&(0x7f0000004dc0)="7878aab21c5efc85b03f74de8fcac21258545bdf636c6afed33b24302459cbf18ae3316784bd6dbe668bcba37f96489ca39e99b854cd81c1cae4215aee7cb4a6ef8ce4cbbc45242b88f150bcb0cf94c2c3408af5f36b7ca0f14e9282b7caedfa7aabbfc40886adf7b9f505dbbdd3e06cfc3ec743ef17c96d23552ddebe77145c1c1f83573b9ddef31bee08007289b76c93d0601e8aa2", 0x96}, {&(0x7f0000004e80)="3b655a7652b132681f752ad3efa788e3b5112195fe861adad0dd6574dd71011ad111cde5d982d938c11027310785f2090a431dc7452f2cfae38c2f5e46b998e43b6b16a4ae23f4210016085be88913168cb05c59e066d3522aed6a6faa38ed38eaac43f457f2aaec63cc1681f47fabe43f549e820caa7a6fde48a1553a6169c93cf916c6f97440c2497e6f0974f780957dc467f402754f423fb02a574d242d308e3445313ed710494c806c0339665a67ea78108da3364063a86c687b106c7b6a64220d5e31d03a4c76fafaeb4b1dc1ff68c8882c48324be25c20ef424178b11ecc20", 0xe2}], 0x7, &(0x7f0000005000)=[@assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x78, 0x40}, {0x0, 0x0, &(0x7f0000005140)=[{&(0x7f0000005080)="164adabae8b7b3dd36b0920fc057246f90665c15a3341991cc0cc46d19c1173433b4f2d52659831e10d7ec4b3de00174950f179519ef33b3f111052457a2b60bd261292975fbc3dc959185a8b1c70bf6e173b35c33958dd069568514a91b7c078d54c57853801a4ec5e35dde6d03f4a12bdc03aeceb0197b30fa425502499991653918ff4b23a0c494dae59bc964e2", 0x8f}], 0x1, &(0x7f0000005640)=ANY=[@ANYBLOB="180000000000000017010000040000000000000000000000180000000000000017010000040000000f00000000000000f0000000000000001b140b4a2b139397abf87b1e0af8491701000002000000d6000000e0b12060919e7c48213eb39ca9a6757f3aaeb80e5a88c777951cbbde43b1d72043298ea7565e66564af0fd2398ece2f83abd2f13c3a4acb000de3ce96fa0f08135352343ff28b9a2276137126affab4ec1ff1ba83524875bff257e197823cacdb4e97c2a8ac8863717c7ae2ab4312a7c10c5857aadbf3a8b2d6a87149b14f84ffd629adce623305b3a30199bf8808e4990d011528a2c01a2e7f5387ad6c7aaf3408ab11808bc05c9489e9fceb2841e743bb9d25d0a7cfb4e843a99096a416a7057257601568a668c87887ab1000000000000180000000000000017010000040000000400000000000000180000000000000017010000030000000000000000000000180000000000000017010000030000000000000000000000f8000000000000001701000002000000df0000007ec018ee47b45a5a1915547f894ea7f07105000000000000007e7ac2bc0d8301ddfe167ca38381cd15ec771392fbf3057d083a2bb31ff9aa8d01afafc329e05f58b4f409aa4b6106730d175fd25dd7e06dc28b8dee57477cfce03e1bf2d1dd316d712fa0dec7927e82a3b0026120fd8e4caf22f8a3e28e25a78810b034f3d66989a026d7549a07005f77247614a4f8173077b3e1795dc8f221a569ef01b23c4c36a86ed5ac8ad4a7a96ec80889c7ae2b412aca929b9ed75339799bb569bd89ccae4d4e7745b069a137bc10f2f0ac274226baea412e5397c0b200527c056316000000000000000000000000000000c6d87558d27280fcdc578f23a8783e1b2ae0be6b3662a24d866fe363615297addcf4ad4372aad2a45f3683acd88d4ff312b0bac32f04f5bdc076bf79b2df13412c4a825eb12af5569877de9147330111d827ca0f9248cd52fdf798c396a8b5d68bcc5e95f63bc86395d9b31bf806e44916a002917835a5485e57e2bff7eaa99682aab129e53eab2a76e15d9df3fb6e9d221069e208e526701845f999e6cbc28597290874d66ddbeb14be3f181c3a5fbf8c0732cd9e42d1a7d690ecd373eed8dc838510a81f738299cbf3c4"], 0x260, 0x4080800}], 0xa, 0x8080) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) r4 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000)={'#! ', './file0'}, 0xfffffd9d) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000023000/0x3000)=nil, 0x3000, 0x3000, 0x6, &(0x7f000022c000/0x3000)=nil) memfd_create(0x0, 0x3) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r8, 0x0) 7.580903468s ago: executing program 4 (id=348): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000cc0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x17c, 0x10, 0x1, 0x70bd25, 0xfffffffc, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@empty, 0x2, 0x0, 0x4e20, 0xcf, 0x0, 0x20, 0x0, 0x62}, {@in=@broadcast, 0x0, 0x33}, @in=@remote, {0x0, 0x4, 0x0, 0x8000000000000000, 0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x8000}, {0x10, 0x9}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x89, 0x1, {{'sha256\x00'}, 0x208, "91de601a4a045530f233bb451d7c7e693744f8318648a0328c58fa029928bd848d5aa455da6f223529d2d441a6631ff73ba5f3c97cebbd1e94aca2c2f905f50e82"}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x60020855}, 0x24000058) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000140)={'wg1\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000003000000000000000900000000000000858da4003564d809f110000001000000"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x69, &(0x7f0000000280)=""/105, 0x41100, 0x58, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x2, 0x1ae, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r2, r2, r2, r2], 0x0, 0x10, 0xdb}, 0x94) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000240)={0x800, 0x8001, 0xbb9, 0x7, 0xb7}) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x9, &(0x7f0000000780)=@raw=[@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000800)='syzkaller\x00', 0x6651, 0x5, &(0x7f0000000840)=""/5, 0x41000, 0x30, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x5, 0xc, 0x4, 0xebd}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000900)=[r2, r2], &(0x7f0000000940)=[{0x0, 0x5, 0xa}, {0x4, 0x2, 0xe, 0x6}, {0x3, 0x4, 0xb, 0x7}, {0x5, 0x1, 0xd, 0x5}, {0x5, 0x5, 0xc, 0x4}, {0x3, 0x3}, {0x3, 0x5, 0x3, 0x6}], 0x10, 0xa17}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r2, 0xffffffffffffffff}, &(0x7f0000000a80), &(0x7f0000000ac0)=r5}, 0x20) r8 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r8, 0x400, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f80)={@map=r0, 0x9, 0x1, 0xfff, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001080)={@fallback=r2, r8, 0x1f, 0x9, r2, @void, @value=r6, @void, @void, r9}, 0x20) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000dc0)={@in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x0, 0x46, 0x0, "def5761e4ca28924a93be05aec2cf81331bc1324484868af2b4b0d09f40a65501e3ad53cd532ef45bed5cf12e4ddc45b43c30d77d32fb3521716ed3d4f9a48d0dd4847fb9faf74a2103ade0898bdb099"}, 0xd8) r10 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x81}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @ldst={0x1, 0x0, 0x1, 0x0, 0x1, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000004c0)='GPL\x00', 0xc, 0x8, &(0x7f0000000500)=""/8, 0x41000, 0x1, '\x00', r4, 0x19, r2, 0x8, &(0x7f0000000700)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x2, 0x80000000, 0x9}, 0x10, 0x1cf9f, r6, 0x6, &(0x7f0000000b40)=[r7], &(0x7f0000000b80)=[{0x3, 0x1, 0xc, 0x5}, {0x3, 0x3, 0xf}, {0x4, 0x3, 0xd, 0x8}, {0x3, 0x2, 0x8, 0x8}, {0x1, 0x3, 0x9, 0xb}, {0x4, 0x2, 0x10, 0xb}], 0x10, 0x1}, 0x94) syz_fuse_handle_req(r0, &(0x7f00000021c0)="1a1bf258bdc9f689c2c421aea0b5e6e277ab8227e0ecc7181d99cb039523ac4f21069c7411bdb3c58d6cbceb209c2a92afd63276b3ef9805157e7edcc4cb319c13e53019c1916ddf8c0f66d7e65afb76dfeb01add47faaab82536cdb72f859ac11fd497ee171914a1dfeed87f2e7e36bdc6536ac1841855e6a223dffade00f21b7a3fd86bf47b3e6733984b0718b9796d184d210f894807930cb1c2771ba66216076527e77605a1ccb5873bc955c4a74aaafa13a69dc98440921a569e22d05a4138cc7685f989c9c191e08571c34c0a449ce727260f6f332d8bc4a9defacfc144bd4dc7a83ef9ebc8cce944c31eac92b840a0f60a1014187fbcc9e860fb94e11c178984d6373677fce19249775aaf17fa80a128dfa786cce3f18d4b2a105b332b70e16333d648e3cd463023ce18436821f00d0fc29e26ef2dbb7e949707982a9d243447fcd8271cfc9678b8d097f7b6e0cf89a74b7257e308b2a58a2cf2b62a4ca7c52f0b1a0e04aa8c931b874662b5f3c49df15c214dbfca7fec7cdfbaa9b3a1264a3d467140cb0b19931daf7d7dc5971d4cccc1419415f9145f04a7d0dbf9637582cf2479bfc63f70f677e1b40545d381ef6f10e07eab1ab42514038491f833ab31c30f2c65eaeebdcb23a07553d527e9a89a5cb535c85e31b914e47390548a3aba0e30460483293b7dd537ed3738d31281b6ff5820361750839880548f8f0946a1e6c3e7248ecaa230b5ce03c5539d48cc0c255eec89282e86acd830b086e16abfe550187bd0d24e3ddb93cbd5b74d11b4ee6eb0e5527a15fb08e9d09eb690fe2bf365020a45b59081929bab81d90dae0fc53c1786faaa5480ea76c3f56958aff51583eadae41f5add8f857b60dd9504ca333dc79b9fde373ccc6db20b54d66d8bef1d376d9696964e9e76a263d4a1044da56c4ff1a222e2f76f6a62874f03fa1ed8e5d82f9ce6ff71cd7a579839e8139060072f2477eb664eada7675ed665a829dd7639f5107b098ca44281cb5fce9716035717824c9d129db601b1776f5f67c2049ed7f3ad0be67cc03dadecfd7cc76bb997885d979feafde4f0ee5f5d30383a792d0509ecfb9e8c4cfe54fbca29f36a48748d6b7510d4f8ded8ae6e168c59bf51f5bf18be2b18b3f860243af523c881e5e4bf4b995c96e81cd6638d2a749ae96d1d589cbe1f636ace178673570741e42613891a8a027f78f28e308cade08722e5fc629f73dc3cadf84515dbeff9f9d8c4cd0aa7cee59ca5f7afe0ae9c5e86680e0976bb58d60e5afad4b11a3d44d36d5e8d34169b52152ad5a60eccf0f8d54c4a7d936cfe389babd7f76219780e9d915a4b3dcb384f8c899ec02071e4e1ad329b7a1523cef48e81c5f40a2d429af3a985fec3f9cf9067766c6eec356c7608c45c74a7e28d6620303d237f870e8c9c34835622edfcb16aeb24a109974072ff969033574e8d189662efa9062422ef2f975b59aba0149110b29fd1905d3f755bc66964da685a22dc08a9443c7385f034f41c173b8776efe43da86bf078b53fddd6c22be93274d4ca7c2ffa0dac603cf641d8b54d9eb40ea30beb12a7057cada928b81d4807e52c432546f6438429e6bc835844d8fbc7a252e97628f5acbd4aa9df28dd38eb7a1d136849c375a7fbae0364d6befed9357ed10734db7367bb3b70d6d2508789cc2be3a7c67127e7caaf089a8861f48e0742c98622abecdb622803a325352621da831d1c1f1a210e16e9bbd0706305b4f1f6314aff880f6f03a016d2c6bd5c5a8055df05ed0ec2c0d670c3ae30ac764a05706d8f9a9fbace8b089b751a5b85bfd4ec3328657c39437f54035fadbf67df39e357440a56f7dc89db08fd1d854ecc2b1e2db4f5119cf01bd68b5f2d80e727056cc0920a6abbabd2fdb23992e40ae8935d5ca46b4648fdf58cab977e4a7980d25fd2af7d0e596aec98677f7eedcf2a8a429af00a401e712f7007e19d3588bd18ba2511fde5646a1083960e89176d8716e0565b59aa63fac085dc8fc3d828d2381105203ead50a01c869760823f5bacf898d9af2ebb4eda6efd1fa6ea5b7b019c3ba4d625f70dd5d841c1fe96eb01785a43e0c1cb4877dcc55bf0c8603fecf507772914bbffb8cd5c9d51b9e9e72e6e8b00512c2fa0a23ca3d71d75600ac3e7ac9580a4abfbdbc3c9bbcd1e2bc4096482912c45870ca932dd18a9e5c04826be0f6165c1e885fe1e252c96aed9b2e326c3b8651d3814843a778d748eebd17f1e5c92848a13e1570966249ae7d3c563748d259cfdc589e1ca287f22359fc5c207a9fe48814574dd9960e5234bcad598f6a968b2c24873227c4a0c3fb2c92a8dd3cb9b052ac19a9d5de68b46615677add2eff4b2ce562a68fa5a4577b225b49ed476fb1dfeb75a23193aae6caebbbd1aadb7028d352a4c49b0dd12d86025cfce0fbbaba4c4b1c5c0cb781825c7b42263603ddf50ebcc798b37cc84d52a437fd6c91abd2d66fac0e535177f3b19a5a91b57122adf62d831a7b46b5ff22878d8c053ed6c1785f7a3086d6824adffd5e7848013804d4725d3d3a662d2564580104210b74c174ee163d81b5ad0cbcf2af67a01312c7d74dc19840507e10d1711df67e52d04f354a5377387ea9e604b3c483c0f642b987198e6a23d7a39c2db845a1f68f4fab5379d80487cc2b3e43c911575a6e3dd26bdfd8ec85ced7444c0fb22a4c2e9f0accd29405fbc5752f95d4817e6b8e1f95ffa4c6e9aa92461da63e24d9ea34fa096cd3911c63be80c8f0a96309d2231d39f8944f04818a5e635eae9254decfd99b1fa3373a726594482474de4fa4842469baf04d036e04b7ff9b30d4cef8c1a52e15ed130d3abbb52935e41a106fda9710887015ebbb5baf3ff0ef1de7b4368274b1e1038d1b44af2c08467c475b8fcc70b3641467d775a87cb985b40f910cbc856634e33a9bbe834c0fd308198ac54a80de2876940ad774b992bff07eb81786a31397494d6d09259aae70e304df2e57e2123054764276ef803c046002fd8a4e4d0346d74aa6bf93747ee9f9dbe920a11303c3446b325856ca9b484c7c38508599f0f33fbacfd8984231e73ee59787b5f1dd4d1ad7ac739cbd1e53ec726434b767373db936800cdcf49be3955b22bd8dcae5c471aebfeab0a421ec0583847208a54e50e2299b90dc92200b0722be745b05c0a7d65eff13289075b71dbb8c5e357616d39923e1d6b81e1402abb2fcf80dd2147893a2b3de12314b902d0857de8c77fcfd12477f6542792babc1c7c3255f55c656a59e9bed71362f65425c43154919bccfc0201e59f805f8fbabeb136f02cb422ecc96b6630bd5f046d174aa369821ef8b37c9e681ca2654ec51a6f0dac57cd197b1c494230948213cfce943b5efd0428c60da4dc4c1ce7d9b7da804368e23c0608411b0d3e4f8cc80ee1be75ee216021a01c521df6413bc4aafec8f4a185de7b28c7f0a4de869b34fdebc3867d7eb3b30c553555659a071e2d6ac69a7ee3e81c5a7dc0e23a909ade0848bea7169e044bdc9f87aea29f36e334460f2c1447385263c67f873d428a2d33554515d7f27d754acd1247443bd64f635894aabf3341adcbd44b527f45f5d38dc96e6f7017aa6a595f66033a703daae9a002c7418840b4c0294d1ddc9a028be009f969cc07ef8fd911803303696ab0db4e7e1677f030a09d32f24d5589335ccc9a3adb99d17b8553c06516c8d41b90b56404f424721910576f22595c1bb1571d406dd724f775dd524cd084450128e9e8458780f26a33456f33850f6407a5432aa0fb5c0bcf557a39b1fcf3320f3cbd59979e031dec13e78ae0b9d9599f7d3adc9680315ee2cf53000f9892fe797da9753bdea8f4ae91b90a707c945d695a5d1e5d436b7f4f285580f4e9ba29828f3a6bc6dac8c856ca48829fb51d1b4c43bbaaf7db1775b3567c4e00b4090b50510e0b8ccdb064f5c75f22b5945c0316210516999bd01132a72d4133d51911c8f42f294ff5373c1e73e175454e111d8c9f0e0321e72351967d4ed759e24ae6fe9ab30e0be14f1a28026cf5c902c2cc0ab4dc9c9414517de95d7a42cb406ddf36d96e17ec69bba8cb1904bf8efe5639dd9d1e713ae1fdbb9431fa44cf658670fec67d638972b3cc715cd0373c0bb7a7b7f77d1fbc76ec229e272f577119148fb3976ff1dbe7eb78bff2324395183db09113a9d4a44b07953ce4c7642948d68bceee32453b943c992c0c3a7f5951d937809d3d6819773da5f8c757c6af5cc8a145430227ae90bc4dab4530a69c021809a65a9e1c1a3cb8ea28787a54e4adbb6e5710eeba63fc7c9d542e7f344eb5928fa6954ee9cf034b3f28b8c3a4681b09e61a345e7fdd241ac4095f01ab12260fb9bc970c67e7f71bd5405a5070fcf3f0a0446fc344024dfb6a89f8d11556d12f8d712bce084321c93197ad4d2a180046fe925a2835214ed394bf97294e8e2dcfa3d50a6737764bd9d353257264158238c6677876ce740233760c48f22381ed3210837aa6776cf34ebbbc0125e1c77f0f110278d2bb9dd2eedc533ec46249ce6eadc310540a3ca771bcf4355602b8abd101cc31c91de9986f79be5d3c368682a4f23d15fb82a302b9240f095e775feda6da506a7572ff9a7997d94e368b5baeb0c056886db312fa9c7ba3257ee2a39f34274663a435ba2d5aa4fe00036b1ebe075adb81ed754aa55b6f5ca73e8edce1a40c0d401a8ac87807e9c0d1b34420fc6863406742abb348a359ec5edff684dc4f9248e6f2c342a0bf629f88ece0361a0f3ce4000acb1f19b3beb10646e1d95fec8fee7f275ad60396cf08e6d002ce64136d2fa760b1d10160064bdcd86d13a74f98a7f423b72cbd87f847349ab7a226afb555657b98b5a753d9e35b204c05dcc430ab3678b268bc1d66ce18f6fee48a3b19c5ef0566dfff40c839cd719fb2a7ada58731284063e8504cd5f8e4d4f11ed5beaeeaa303ffd75403bba891fb9c1cf393b8aa89850556df3a70df309a8307855ec1cd8a31e9dbbd07bf08a5a7a4703e6457b67a499afe635c7dd579140ad15fd53ae0384870b1c29799b5643cb3f539c6391dc71919773e877b971687e0a61924993ab82401f62e00a128985290e9adadb6529ef14c6f965eaf1cf57c08acd5e5ecd7031d000b8ad7eb19edc19de178564dd2ca7eb79bb717dd303a85a76bef93252d68f65e1132bf77dc8b381dc84a3d917e174de5ebc569654d77ea832350fc2fa45c0bae3882c85297b597aba2c6e41528b97de6a101edc2c460772d355a355c794ebbe421fda5140b430eff3b88dd63ee1426b5a394006f531c0fbd825b72bffe689e9c4dcba362485d0a6739d54d2715a92706335d504cadcc23d8de2d870e6f11e67844128b3ba6b10809821897d794892804d8b81036836aef66131df174bbb0a6f11cbb5781c3e821bfdbe32c06f40e11e0e02b70e4c5ebfabf58e766ec24907a1bd2ab3d80ca1e66658780699f1eada7ce7b8e074ee7a3f40141a9f4362405a1ebe8eb39742dffa91b3cc41c49910cbd4a6aa088e7fe74fc8fa54c53e82b581514130b13bf1bbf07674b77ece33fb8217e65fb03912b10ac24863b9aa4e419da868935a1c835440cb6c2b599e32277aebc5dab22514f87ebb1badfbaf42fe3d8979a6fb2e409b649d709b538b483c424cf7af0f68be41e01631298a884d4afe52815b9dfdd37c03fb70d1af366d3a5954c244602e80d000f3106ef3ab2a2be5ece5a0d30bb6cf9d1f0ad0ed8bd87217a9285bad09432a5a582449bee76dd0b59175590e1edb8132d9703b8a5329d0c249f5159815076a8d930959a8206ba080de944e3e72976c18817b2fca01175b9a5c0fb1d1c1cc154917dfae64237295097837b734d0fe48f58644fa601aab06da0a05f35591efd31fa7a6b11ff0c81e98d6f1cf23a3e5c2b28e1c97b7561af44618c529a76aad5939fbd807011179b63ba179c66ac2c398da195c233e1ed33d5663a2cd7e4becdb15cb99cb8a270e64f87aa4735863c3f0125dd2a112d8dce9e9b745eb23cf31e8f5db5b69cda662d8a2235f22a68d3171c3bc9bd403a169c1285c0ed8f1f2d5522435307f93aa7c2ef43dddeeca89a9da4bba207fb04537c20950fd047c0052be427075ae26b420c4305ac902aceebd741a4d11b120fdc8b03c10cab560044f9c7c0afe2866893ab3b98725af4cbd9bd71000315d2b1a7bfd10e3136a53084e5aaaa563539fb0f335c21e9e37658c2cdc96e238682bde6c05155603b9bb9c07ad3f56b72312acd6b675ecd5bb6c71cf71ee1d66d8718f30a93ca6d9a9dd7002a46da81d92067aa0219604427901b30b94c09273dfa1f3fc543222595a3b593d02d9ef34fc66a05f2e5c14f15565c02be66cc997db902337da389f25ac01d84b13b90cb197df958d5d3b2be7f626148b225f6a92da3700a2e4ef8883105cb93e3c340b20557e52e3076a91f069f47547161e91618a1ec6d1f61aba188f14de82289566681b2ff243754b83f6f932bc9bb65bb20bc93a6ef162102709d86b6b2f9e8b4b779c396d47c702bd6b68b333805297eddbad5ed4c393087bcc86decc8e9ccb216f2509564661eaf683e7750ad8ec7ab57551de78220bdfea794c41a8b68735ba2bf74f98af22968bb011d7961d3986b09141773c7c99006b026ed073db5d05f7770ef9dc2fb188d0f5171b75dd1a25e8d7e7941dd53a7ea5b5143acdc954aba040d702148805cd6ada8d2a3aa232881dea941611a73a38610747e654944b8e127ab7cb5841cfb02a6f4850e69afea2d5a469eefa89d47501548f60d46ec41d387294ecb1b6de86694eeed21f511955912e5e735290396a0d5e6fb4e0505ce1b85debb12d2aca70be2d70f3d7cf948667077bf40bdc2d2c906f1ac864a59191b71cd86f9c479386704ab0659cddf25b27207a3ea32f702311965c5b8986a487c86d6f58da03b7d1e56a961088a6d957eba11f6a401850b2e7faffe7c7c81a5cf0639c06fe3c5365a8ed263aff1dd0d4466b4cf41848eb326140101526339a4485d8f8cab1ef3620251b4e2c6c4bec5e3755a22975da40949c3b48206ad087bf893b7797875297591cdc1aa167aa6036e3086bb66f199e5bd023952932e7e2883f41fc41edc71d260e1c73b8b5c68269f4ebeb47fc027e768ad34db9528b07a7bf68aae38f1c1fd8b87a56426c682f5790171487e806e900dfc389470f212b09898d95ffd380ec4d5c62c32fe0c7bc257993ed0ee9076369956a2e493fea88a038ffe710826818581487952f538605fc249253d91280361b0a80a669a4d912fe7b7c9ecc22aa9a01147a8ad1a39fa536e9528b352ad11d71e9757e7492b13b3fbf06d012aeb564d4a9e02dbc837d24cd68b99d0bf7614c7a6f8159926a9da81c4be3a5b93cdf4ba99ecaf3439578ca871f3337cc8e45f8b2ecacf91aba09160ecd5c5ff96fd6c4371783b052f9564b3c35db1af0ba923282d3691ec358eedf1a62da58046591b0290be2fa2c476c6e931a81b839be86c788297dede79412cb7ae003e4c877ad8a4f6ba2eec3966db1f07ea6fcc7b9ca9ac58ecdb4240cc113cf97681a280feed353db6deec3ea42a949f31ea4a7a60db94e55a34818c42c55cfa0315f4650b9b88dd8deba15e33d8d5d44a1eee19a57dd19ada3e86a9e18a43d6eb87e0490f006a069f853c5bbbe2ea32dd9f0f15d5c15a760832f6b2200815d93d404b860f441db9f5a6956432637a3473bfbdbeedbe2f543c4a89162150fdce9412939528be7bdc51fe7f66f5df8cf3cc62148e9ad035d3ffa267cca3a0092f48f8b12d04516dd1c83bc81c1936002afedc7a011c089ac31176b771a14b33b9fd1e1192c0df8db70faa31de029c22686aecf704d51c312691bf7215fe1b0f36c124c6a28f5a7eda377aa5a32817003d0832d59a3b742268ab3c358931e2c3b2bf63e841a5024b7a2a86e1bce6cf8f7d8031f8942ad4aa376709721abcccae98af060916fc434c86ac85cfede479549bb8c785b48ce2f426026980da1ebe44cc6ef857efdba2f969304e654d2cd6f3555823f670a79f1e664f34062e6e6c7b831c2d9c37149a9720924b31032df26faf081e2edbfc35ed746cda3a841cbc770a22e4b7d430734f67cd9f3fc186811336e3d1b3bba89a6f13e6b898bcf815c744bdb9243f283ae18d7caccc91c6f71e9e47fc4b5e3edb700539bf74e32fcd320087fff75567594338c5ed4eff53fe11cf53ddcd97a7988675dc98c0ebb88450e092b680b5099fa61dd5d5f8d9a2968cf26a3dfdaaf20a7949a9c926463498f3e60307c9c3067ee5aa93a06bcafdf5a621745e6f9164cd3f720c06bc609ad875ad23008851af3d65585719cde8d1a5fe46a43291e18374c5d4558aff111aac1754d9f54f009d21d9be54fe92e7a53db63f3c2b63e49987fbe634828f216e69d079e6fab4f55decccc5453b72ba48f2fbad6d56a80d12b97ff16523c773c88afc62c4fc833a6775037b500e387e5ce290c119110e6d42120e29964439114bca67fecec42ab2cc02910ea9131444afe25894e3cccef9f082b0f9b0735efc99dcc05bee83824aa24c9565abcf23b756a9f1b5b045bed51386ad7f735f03704041bcb5d1e762f6462364d8744c0fb6cb35781d42b7451b853f63a5c03d92ac89bbb5c5fb1b5af20c6fec417561e53f8c44b3f2b27d08d5cb913207215b220d1631afa34f95f13060f2844f1c4dd4bf0ccd40d09a1a055d6de0540717d92fcc03d0dcbf7b7ad5113bf25f0d5efb2e27282ad92f97af9f7a74cf9a74fa8a87c4ca78f065a3147d08f6d502167d264f75f0ede750abdf9eefd9f81433cec7463f76f78baaa3667d94405f302c872511abed1d26a52a5ab1001d6bab15d4d0e8572c91beffb97100ea004b8b4e67fb9165f84f2fb022c544c251da78e042bf3182b11b6564c27ff3e39497a35334f1768cef098bc86a1d6f7e808fc1024fe6434073dda424aa7829ef4862fe7b0ea3108a015388908785a30b80b5374b910d08f7dc827a35d676e67d5676bce0429cdf6993985a0dc2367989dd7c652600fa55150cce454bf2a9c2603f1eca07f4604a760b37f103810d2d98c8f76850e7dd398d435dadd3972adf0efd140e39dd10a2c25280d346fd6915d72bb53bf8c6754162c02c00dc275172a5f96a6a3e25565585ca709a64c402a5d1d636571e2d2996da5e669b1a5124313e1d3f507b5d9ca017d5754e3fed3557f119063395a776462c480471f09a795b5e31e729f01467c88d84d2d0eb2b2d559a720c31bfc0f72cffcfc8b906bad7ba92bf2e9fbe1bc5698a75bcb8d2cb6a7d069d14990876fc754f17db6c50c4ed47d6f3940b11108854a023049ecd45b8d56c01568c84bf37c46c5469524764a2487f1e21b3e05ea541a8ea25176df29560e6f007607d63a189793663e4389144811bd662e210e524a1abbf0e83f581a18ee5f6ec8e4d56f7e08ac7b7edc2faf40373cc3dcfec9ce793f4c2cb7ae08adc36644e50c9de676fbd3c7e1856ce62585b123717f6b15abbb4dda7841eb35930374e373b718b8947636bb76a23d9fab54316c45a75736bf1e893a79f47353466819f2e713668447d58b3f8b234b9aab25693f368138280d5ad6e472134099039e3d01dcc6c148aac3c92f6854873ff98264c7f7422aee6106d2dedb72954e649c7849ac3526e7551f4d08201576c49390ebd65dd31103d88a8626c3e7086ab85fd5542aea9dff1f8df7141e204584e4692e5b78c94f480509dbcab7429751ca9749a499701f69f902802b45f89d9ddf689058e935aa57eea3e7872c23c5e4600c301ab977522073875157963232e7dab90d748e5578cf07771e1ee50586558adff8429038950e9a5ef60774d01415771499cdb0b411c6b46c940c4c8262904dbd2289eac3e07abafc0b19becc0016d2ba0665d013365fbd3cd6e93a86da4e7185e1c0e3cab5d50958f3be15572ee5003757eb32cab0388f74fbb44dbf92212c08982493f60da07d2387d8a580d6b6b12dfed4a880a816ad021f70380ea0c86a579fc72c6924fd87ceabb8478c17a892787d4c3fb3ea00b2579da45c04134a1a13a27c39962e89673b4f076de2f1af006d42f4c6caece47ca76645412cd3f7593d104f1e94c65fbbd506d85548ad45cc74c23b8e9452dbbf92aadbf7d3245444afd161a17abd1a1e4294653df12f14b8dd7c695a6b885aa6bd8982a183078d75317922dd57a16c4b4d3d65b30a7cd17911d1da5ece3e8063b4ec9858eaaf3e6c86839a44b78a4cdf4b00fb4b900c76d85f7b89b70bd132c4d5b8fb01fe251b2ec019742db4e9a5dec5e8516816b5898ea9c2a49de194844e48a41f76c360dba8677b3df7d0b12733623cdd39b9a6b7a7de2c09a4fe0cb95bcafeff1a90b669b92511718bc1383c8ce4bd961376ad4c1c9bc4e46f849fe41c110925adbadf5e10ab6b6560a63832d63d9628c7a89fbf6f8353d8fd72bf3be33e1fc21aae7cf54e3d6f1fba871296a845d6ce99c86bcd7abe040891488227658db3e14aeb9712e145be6e71b57ca8fb0d9acbf16d97b8e530852e34b37d96a4a568584d465be7738e32a654f86aa7e89dd1a7a3e707ebf7a38df2ec2ca0a6752717f4a74b5b4768c2b66a4b7e373883e3e03191f6878fa6fcdf6dd0ef0f78efc6d32c1e10746c8309793500092c45ba162c4f2e34e600d43c35a8caa684f01dfce4ce57ee6b3f6986eb52dd32f02ee2455019ef8ad9d8f042342cf108966694c86f895f9b4af375c96716cd8478c6b667e4bdcc1ba78823c08ae285c121f57963cef71dedc41fd2fd5ca8af2559a83c0fd01e7cdb9fdf9668979e3011dec7a7d2f1e3e85acacbc808a8e6cf0b123c5f6a17c442f1652d224c1118a0629ec098c8b60fdc3a91d62519863171b5450af61146fa6d6293298a5f92fd225bb62fff98b2f7d004b7b2cc87adbfc5633ce5d1f3acd63a3ef65c55b682f87140dce64e4ee313d477df612908f2ab86b38b5b7b7c006d3d559128bb2afe45ff9e5af7ca2dbfd704b64bcc3e775e81e88d092dbb842c101e4e252d4aff72d3a08864d2024398ced335c15b324e5f12006b12cf3e5a6198d8d3bfe5513b614a201cb354e3cedea8049fc8465e74dc79e47c5476b195c3ba196b122253f1531f219fb73d9c6f63e6bcf136d6493d35b8976f66ffbb62b5360ed37752c894a2f98a44a9a8f1e12e46e2dcb7484612a58e6ee139112ae3af2b9d8e1171aaf4114ce4dbc56e075e6a3155f95a1f5334be9cd9d89f2ba5555ec9858a86ad71e9fef6b51199611c0036f3b54cc1a4d5f6c5f2a35b8e8c6d96c07a9f6fc427361f5fab31849e1f23f1b5c785b7344499c4d63c8084d7852c251d7cdc3f44591f2e1083f409dbf1e92f5d4a58d567736d7a996ffa7b46550565f9b0459c6f30fdc4a693346524add323dc79577a3598bc7ca6c6cc0b304c6fd4eb3cb5da21b9febf404b3ea01188f7554f09e4331a28a807a5adc858543637c4006f9f8c2e6e433ee2ac69f3f5443d84c2e2cb8ed8962bcc2653294de47153c9be911aa2f20b127ee5ff5f1b6084fba0300c247a13e0d9b4e680", 0x2000, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x0, 0x6a4, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.029857881s ago: executing program 0 (id=349): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x23, &(0x7f0000000600)={&(0x7f0000000200)={0x100, r3, 0x100, 0x0, 0x25dfdbfb, {0x27}, [{@pci, {0x1c, 0x51}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x100}, 0x1, 0x0, 0x0, 0x840}, 0x20000001) r4 = creat(&(0x7f0000000580)='./file1\x00', 0x0) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000316c9df1715d88ee729f2cc1607ec294a8bd4fa32a30a360ddf8b388468491b90ba2cba19453c9f3850137f44176c696f7ffffffffffffff66cedad9d056ac1c621fee3142f84cec9e429a578e7790583c211fc0fbef4780012f33d7daef17ce12c775db65a91a575b0c92ee8c2fb16d7e31c16b8d2dcac9f1f0ea6442bfffff4e6b229cd8157d024017b89b6ee36198470f83faa81324da660294990b3ffe66b0d7", @ANYRES16=r3, @ANYBLOB="080027bd7000fddbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x24000084) setresuid(0xee00, 0xee00, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_delete(0x0) tkill(r0, 0x3c) 6.865517265s ago: executing program 0 (id=350): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) r1 = syz_io_uring_setup(0x49e, &(0x7f0000000500)={0x0, 0x69af, 0x3180, 0x8000, 0x27e}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r1, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x680102, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x82, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000001c0)='cubic', 0x6) sendmmsg$inet(r4, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c40)='\\', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet(r4, &(0x7f0000000180)="17", 0x59a, 0x0, 0x0, 0xffffffffffffffa1) socket$nl_generic(0x10, 0x3, 0x10) 5.882816881s ago: executing program 0 (id=353): madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xc, 0xc8, 0xfa}}}, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001780)={&(0x7f0000000140), &(0x7f0000001580)=[{}, {}], &(0x7f0000001680), &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2}) socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002"], 0x1874}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 5.812925405s ago: executing program 3 (id=354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x9, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xba}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xff}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x7f}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_CIDR2={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x41000) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x200000, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x39, 0x4}}, 0x20) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000002c0)={0x18, 0x0, 0x6, 0x0, &(0x7f0000000240)=[{0x2, 0x3}, {0x7, 0x3}, {0x9}, {0x31, 0x8000000000000000}, {0xc, 0x6}, {0x8000000000000000, 0x7}]}) (async) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000300)=@null) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000340)=0x1) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) (async) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) sendfile(r4, r1, 0x0, 0x8000) (async) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000400)='/dev/comedi2\x00', 0x800, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000000440)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) (async) flistxattr(r3, &(0x7f00000004c0)=""/4096, 0x1000) (async) cachestat(r5, &(0x7f00000014c0)={0x6, 0x6}, &(0x7f0000001500), 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r1) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001e80)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001e40)={&(0x7f00000015c0)={0x848, r7, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x59}}}}, [@NL80211_ATTR_TX_RATES={0x50, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x579, 0x51fc, 0x3, 0x5, 0x2, 0x8]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x5, 0x5}, {0x4, 0x5}, {0x0, 0x5}, {0x1, 0x4}, {0x6}, {0x7, 0x1}, {0x7, 0x8}, {0x7, 0x3}, {0x7, 0x4}, {0x7, 0x8}, {0x3, 0x4}, {0x0, 0x6}, {0x1, 0x4}, {0x2}, {0x7, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x1, 0xe0, 0x3, 0x101, 0x8000, 0x1]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x318, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x4, 0x0, 0x7292, 0x6, 0x9b3, 0x400, 0x7]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x7}, {0x6, 0x7}, {0x0, 0x9}, {0x6, 0x7}, {0x4, 0x9}, {0x2, 0x7}, {0x3, 0x4}, {0x0, 0x3}, {0x2, 0x9}, {0x6, 0x7}, {0x5, 0x8}, {0x2}, {0x0, 0xa}, {0x0, 0x9}, {0x0, 0x6}, {0x2, 0x2}, {0x3, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x2, 0x9}, {0x7, 0x5}, {0x0, 0x3}, {0x6, 0x4}, {0x6, 0x2}, {0x5, 0x4}, {0x0, 0x3}, {0x5, 0x9}, {0x7, 0xa}, {0x3, 0x6}, {0x5, 0x8}, {0x0, 0x8}, {0x3, 0xa}, {0x5, 0x9}, {0x6, 0x5}, {0x0, 0x4}, {0x0, 0x4}, {0x7}, {0x7, 0x4}, {0x1, 0x5}, {0x1, 0x6}, {0x7, 0x8}, {0x5, 0x2}, {0x2, 0xa}, {0x2, 0x8}, {0x5, 0x4}, {0x4, 0x7}, {0x5, 0x3}, {0x1, 0x4}, {0x3, 0x3}, {0x6, 0x1}, {0x0, 0xa}, {0x7, 0x1}, {0x5, 0x7}, {0x0, 0x9}, {0x4, 0xa}]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0x4}, {0x6, 0x4}, {0x1, 0x7}, {0x7, 0x6}, {0x2, 0x4}, {0x0, 0x1}, {0x6, 0x5}, {0x4, 0x7}, {0x6, 0x9}, {0x1, 0x5}, {0x1, 0x4}, {0x1, 0x9}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x4, 0x1}, {0x2, 0x2}, {0x0, 0x4}, {0x6}, {0x1, 0x5}, {0x7, 0x1}, {0x6, 0x5}, {0x0, 0x9}, {0x6, 0x4}, {0x1, 0x4}, {0x3, 0x6}, {0x7, 0x3}, {0x7, 0x2}, {0x1, 0x7}, {0x3, 0x3}, {0x5, 0x9}, {0x4, 0x6}, {0x4}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0x1}, {0x3, 0xa}, {0x1, 0x4}, {0x5, 0x8}, {0x5, 0x9}, {0x6, 0x4}, {0x7, 0x7}, {0x0, 0x2}, {0x5, 0x5}, {0x6, 0x1}, {0x7, 0x2}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x5, 0x5}, {0x0, 0x9}, {0x5, 0xa}, {0x1, 0xa}, {0x7, 0x5}, {0x3, 0x1}, {0x2, 0x4}, {0x6, 0x3}, {0x4, 0x9}, {0x1, 0x6}, {0x0, 0x5}, {0x5, 0xa}, {0x7, 0x7}, {0x7, 0x3}, {0x5, 0x8}, {0x0, 0x5}, {0x3, 0x7}, {0x1, 0x3}, {0x7, 0x2}, {0x1, 0x5}, {0x3, 0x8}, {0x2, 0x9}, {0x1, 0xa}, {0x0, 0x4}, {0x2, 0x5}, {0x6, 0x7}, {0x6, 0xa}, {0x3, 0x2}, {0x1, 0x1}, {0x3, 0x3}, {0x1, 0x5}, {0x4, 0x8}, {0x4}, {0x3, 0x6}, {0x2, 0x4}, {0x3, 0x8}, {0x3, 0x5}, {0x2, 0x4}, {0x3, 0x3}, {0x0, 0x4}, {0x5, 0x3}, {0x6}, {0x0, 0x2}, {0x6, 0x2}, {0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0xfc01, 0x7f, 0x4, 0x6, 0x4, 0x6, 0xb2]}}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x4}, {0x3, 0x8}, {0x6, 0x3}, {0x4, 0x7}, {0x1, 0x9}, {0x4, 0xa}, {0x1, 0x6}, {0x7, 0xa}, {0x0, 0x3}, {0x6, 0x1}, {0x1, 0x3}, {0x4, 0x5}, {0x5, 0x7}, {0x3, 0x2}, {0x3, 0x3}, {0x7, 0x8}, {0x5, 0x7}, {0x0, 0x1}, {0x5}, {0x7, 0x2}, {0x4, 0x3}, {0x4, 0x4}, {0x0, 0x6}, {0x4, 0x9}, {0x3}, {0x5}, {0x3}, {0x3, 0x4}, {0x6, 0x5}, {0x3, 0x1}, {0x4, 0x6}, {0x3, 0x6}, {0x0, 0x9}, {0x6, 0x8}, {}, {0x5, 0x4}, {0x7, 0x7}, {0x7, 0x7}, {0x5, 0x9}, {0x0, 0xa}, {0x7, 0x4}, {0x6, 0x4}, {0x7, 0x1}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0x9}, {0x0, 0x5}, {0x2, 0x3}, {0x0, 0x4}, {0x4, 0x3}, {0x0, 0x2}, {0x4}, {0x7, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x5}, {0x0, 0x6}, {0x1, 0x5}, {0x1, 0xa}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x0, 0x46, 0x6, 0xfffd, 0x9, 0xcba6, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7ff, 0x9, 0x1, 0x5, 0x136f, 0xff, 0x2, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x9, 0x6, 0x56, 0x0, 0x4, 0x3, 0xfff7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x5, 0x10, 0x5, 0x1, 0x0, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0xe1, 0x9825, 0xe4d2, 0x7, 0x2, 0x40, 0xfff8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x4, 0x5, 0x4, 0x100, 0x5, 0x4, 0xfffb]}}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x6, 0x4}, {0x1, 0x4}, {0x2, 0x2}, {0x4, 0xa}, {0x4, 0xa}, {0x7}, {0x7, 0x5}, {0x6, 0x3}, {0x5, 0x3}, {0x0, 0x2}, {0x3, 0xa}, {0x6, 0x8}, {0x0, 0x7}, {0x0, 0x1}, {0x0, 0x2}, {0x7, 0x3}, {0x3}, {0x4, 0x4}, {0x0, 0x7}, {0x6}, {0x7, 0x5}, {0x3, 0x1}, {0x5, 0xa}, {}, {0x4, 0x6}, {0x5, 0x5}, {0x5, 0x1}, {0x0, 0x5}, {0x0, 0x2}, {0x1, 0x9}, {0x7, 0x8}, {0x3, 0xa}, {0x0, 0x1}, {0x2, 0x3}, {0x7, 0x3}, {0x6, 0x7}, {0x3, 0x8}, {0x4, 0x4}, {0x2}, {0x5}, {0x4, 0x3}, {0x0, 0xa}, {0x4, 0x6}, {0x0, 0x5}, {0x5, 0x4}, {0x0, 0x5}, {0x1, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x5, 0x4}, {0x0, 0x8}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xfc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x40, 0x8, 0x1, 0x933, 0xd, 0x8, 0xff]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x3, 0x8}, {0x3}, {0x3, 0x9}, {0x3, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xff, 0x7, 0x6, 0x4, 0x3863, 0x3, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x1, 0x3, 0xe4cf, 0x800, 0x2, 0x5, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0xa}, {0x6, 0x9}, {0x3}, {0x1, 0x6}, {0x7, 0x7}, {0x4, 0x3}, {0x0, 0x4}, {0x2, 0x6}, {0x7}, {0x0, 0x8}, {}, {0x5, 0x5}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0x3}, {0x3, 0x6}, {0x2, 0x6}, {0x3}, {0x0, 0x7}, {0x1}, {0x1, 0x9}, {0x2, 0x8}, {0x4, 0x5}, {0x2, 0x9}, {0x4, 0x8}, {0x5, 0x2}, {0x4, 0x6}, {0x5, 0x7}, {0x2, 0x5}, {0x6, 0x1}, {0x4, 0x4}, {0x4, 0x1}, {0x0, 0x7}, {0x2, 0x7}, {0x3, 0x8}, {0x6, 0x1}, {0x4, 0x7}, {0x4, 0x1}, {0x0, 0x7}, {0x0, 0x6}, {0x3, 0x9}, {0x1}, {0x7}, {0x1, 0x7}, {0x0, 0x3}, {0x1, 0x1}, {0x6, 0x9}, {0x3, 0xa}, {0x4, 0x4}, {0x3, 0x6}, {}, {0x5, 0x4}, {0x6, 0x5}, {0x4, 0xa}, {0x0, 0x6}, {0x7, 0xa}, {0x0, 0x2}, {0x7, 0x5}, {0x1, 0x6}, {0x4}, {0x3, 0xa}, {0x0, 0x4}, {0x2, 0x9}, {0x4, 0xa}, {0x1, 0xa}, {0x7, 0x1}, {0x1, 0x3}, {0x6, 0x9}, {0x0, 0x3}, {0x0, 0x4}, {0x7, 0x4}, {0x6, 0x2}, {0x6, 0x9}, {0x1, 0x6}, {0x5, 0x5}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x4, 0xfff, 0xd, 0x3, 0xc7, 0x0, 0x9]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0x3}, {0x3, 0x7}, {0x2, 0x6}, {0x5, 0x6}, {0x0, 0x2}, {0x3, 0x3}, {0x3, 0x5}, {0x5, 0x5}, {0x1, 0x5}, {0x6, 0x7}, {0x4, 0x5}, {0x3, 0x5}, {0x1, 0x4}, {0x7, 0x2}, {0x4, 0x2}, {0x1, 0x5}, {0x4, 0xa}, {0x0, 0x1}, {0x1, 0x8}, {0x2}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x9}, {0x2, 0x4}, {0x4, 0x6}, {0x0, 0x6}, {0x5, 0x4}, {0x7, 0x4}, {0x5, 0x3}, {}, {0x7, 0x1}, {0x1, 0x2}, {0x1, 0x4}, {0x5, 0x9}, {0x4, 0x1}, {0x0, 0x8}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x2}, {0x5, 0x1}, {0x7, 0x7}, {0x7, 0x5}, {0x7, 0xa}, {0x4}, {0x3, 0x7}, {}, {0x3, 0x9}, {0x6, 0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x2e8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x24, 0x1b, 0x60, 0xc, 0x18, 0x16, 0x9, 0x24, 0x1, 0xc, 0xb, 0x6, 0x6, 0xb, 0x1b, 0x6, 0x48, 0x9a94ef181a7bd585, 0x60, 0x60]}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x7, 0xa}, {0x7, 0x2}, {0x6, 0x6}, {0x4, 0x2}, {0x3, 0xa}, {0x2, 0x1}, {0x2}, {0x5, 0x8}, {0x1}, {0x3, 0x9}, {0x0, 0xa}, {0x5, 0x8}, {0x2, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x7, 0x3}, {0x2, 0x1}, {0x5, 0xa}, {0x3}, {0x0, 0x6}, {0x6}, {0x7, 0x9}, {0x3, 0x3}, {0x5, 0x9}, {0x6, 0x7}, {0x2}, {0x5, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x2, 0x9}, {0x0, 0x8}, {0x4, 0x2}, {0x5, 0x1}, {0x6, 0x3}, {0x3, 0x1}, {0x1, 0x4}, {0x5, 0x7}, {0x3, 0x4}, {}, {0x6, 0x2}, {0x3, 0xa}, {}, {}, {0x0, 0x7}, {0x6, 0x8}, {0x6, 0x3}, {0x2, 0x8}, {0x0, 0x4}, {0x5, 0x4}, {0x4, 0x3}, {0x0, 0x1}, {0x7, 0x4}, {0x1, 0x4}, {0x2, 0x2}, {0x6, 0x6}, {0x5, 0x7}, {0x2, 0x5}, {0x5, 0x9}, {0x6, 0xa}, {0x3, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xac5, 0x380, 0x2, 0x1d19, 0xf40, 0x4, 0xb, 0xfff6]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1, 0x30, 0x6c, 0x12, 0x30, 0x1, 0x33, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x58f, 0x7fff, 0x5, 0x9, 0x80, 0x8, 0xdae]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x0, 0x6, 0xbf01, 0x15, 0x9, 0x99b, 0x1]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x24, 0x18, 0x1b, 0x24, 0x2, 0x48, 0x12, 0x48, 0x1b, 0x3, 0x16, 0x16, 0x12, 0x6, 0x1b, 0xb, 0x12]}]}, @NL80211_BAND_6GHZ={0x7c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x16, 0x2, 0x4, 0x4, 0x18, 0x6, 0x1b, 0x30, 0x1, 0x1, 0x1b, 0x1f, 0x3, 0xb, 0x9, 0x9, 0x36, 0x48, 0x6c, 0x6c, 0x1, 0x3, 0x28, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7ff, 0x17, 0x7, 0x800, 0x7fff, 0x4, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x7ff, 0xfffa, 0x1, 0x9, 0x1, 0x4]}}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x2, 0x7}, {0x5, 0x2}, {0x3, 0x3}, {0x0, 0x4}, {0x2, 0xa}, {0x4, 0x3}, {0x7, 0x1}, {0x6, 0x8}, {0x7, 0x2}, {0x6, 0x7}, {0x5, 0xa}, {0x0, 0x2}, {0x4, 0x9}, {0x6}, {0x7}, {0x3, 0x1}, {0x6, 0x7}, {0x7, 0x8}, {0x7, 0x1}, {0x0, 0x3}, {0x3, 0x1}, {0x7, 0x2}, {0x0, 0xa}, {0x7, 0xa}, {0x0, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x3, 0x7}, {0x5, 0x1}, {0x1, 0x1}, {0x5, 0xa}, {0x3, 0xa}, {0x3, 0x4}, {0x1, 0x7}, {0x3, 0x8}, {0x0, 0x4}, {0x6, 0x3}, {0x4}, {0x5, 0x4}, {0x0, 0x5}, {0x1, 0x7}, {0x6, 0x9}, {0x4, 0x4}, {0x2, 0x2}, {0x7, 0x9}, {0x6, 0xa}, {0x1, 0x9}, {0x2, 0x7}, {0x2, 0x9}, {0x3, 0x1}, {0x0, 0x3}, {0x1}, {0x5, 0x7}, {0x3, 0x2}, {0x5, 0x6}, {0x5, 0x9}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x1}, {0x2, 0x6}, {0x0, 0x9}, {0x5, 0xa}, {0x0, 0x6}, {0x0, 0x7}, {0x7, 0x1}, {0x0, 0xa}, {0x3, 0x8}, {0x3}, {0x0, 0x9}, {0x3, 0x1}, {0x3, 0x4}, {0x6, 0x8}, {0x1}, {0x1, 0x9}, {0x3, 0xa}, {0x2, 0x4}, {0x5, 0x3}, {0x2, 0x5}, {0x1, 0x5}, {0x5, 0x7}, {0x0, 0x1}, {0x0, 0x9}, {0x7, 0x2}, {0x3, 0x6}, {0x0, 0xa}, {0x5, 0x7}, {0x0, 0x5}, {0x2, 0x3}, {0x7, 0x1}, {0x0, 0x9}, {0x2, 0x8}, {0x1, 0x9}, {0x0, 0x2}, {0x6}, {0x2, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xdc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x3, 0x30, 0x48, 0xb, 0x36, 0x5, 0x3, 0xc, 0x1, 0x1, 0xb, 0x36, 0x2]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x3, 0x8}, {0x3, 0x3}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x5}, {0x5, 0x5}, {0x4, 0x5}, {0x0, 0x6}, {0x3, 0x8}, {0x6, 0x5}, {0x2, 0x4}, {0x3, 0x4}, {0x3, 0x9}, {0x4, 0x4}, {0x3, 0x4}, {0x2, 0x3}, {0x4, 0x1}, {0x4, 0x2}, {0x2, 0x5}, {0x0, 0x8}, {0x6, 0x2}, {0x3, 0x1}, {0x6, 0x3}, {}, {0x2, 0x8}, {0x0, 0x7}, {0x0, 0x4}, {0x7}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x1}, {0x6, 0x3}, {0x3, 0x4}, {0x1, 0x4}, {0x5, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x3, 0x98c8, 0xad, 0x6, 0x1, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x3}, {0x0, 0x3}, {0x3, 0x4}, {0x4, 0x1}, {0x0, 0x8}, {0x5, 0x8}, {0x1, 0x7}, {0x0, 0x7}, {0x0, 0x6}, {0x2, 0x2}, {0x2, 0x2}, {0x0, 0x2}, {0x1, 0xa}, {0x1}, {0x2, 0x8}, {0x3, 0x2}, {0x1, 0x2}, {0x6, 0x9}, {0x6, 0xa}, {0x3, 0x4}, {0x0, 0x4}, {0x7, 0xa}, {0x7, 0xa}, {0x1, 0x4}, {0x0, 0x3}, {0x1, 0x7}, {0x7, 0xa}, {0x1, 0x5}, {0x1, 0x7}, {0x4, 0x5}, {0x0, 0x9}, {0x5, 0x9}, {0x7, 0x1}, {0x0, 0x9}, {0x3, 0x3}, {0x4, 0x2}, {0x6, 0x2}, {0x4, 0x2}, {0x1, 0x5}, {0x0, 0x4}, {0x1, 0x4}, {0x1, 0x4}, {0x3, 0x2}, {0x7, 0x9}, {0x1, 0xa}, {0x2, 0x4}, {0x5, 0x3}, {0x3, 0x5}, {0x1, 0x1}, {0x3, 0x6}, {0x1, 0x9}, {0x6, 0x2}, {0x2, 0xa}, {0x3, 0xa}, {0x6, 0x8}, {0x5, 0x8}, {0x6, 0x1}, {0x6, 0x5}, {0x6, 0x9}, {0x3}, {0x1, 0x6}, {0x5, 0x8}, {0x2, 0x2}, {0x7, 0x9}, {0x6}, {0x2, 0xa}, {0x3, 0x1}, {0x3, 0x2}, {0x3, 0x2}, {0x0, 0x4}, {0x4, 0x5}, {0x5, 0x5}, {0x7, 0xa}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xf001, 0x9, 0xa2a, 0xfff, 0x8000, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x2b3, 0x6, 0x9, 0x1, 0x3, 0xff]}}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x3, 0x6}, {0x1, 0x1}, {0x4, 0x1}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x1d8, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x0, 0x5}, {0x7, 0x1}, {0x0, 0x5}, {0x2, 0x6}, {0x6, 0x6}, {0x6, 0x1}, {0x0, 0x9}, {0x0, 0x1}, {0x1, 0x3}, {0x3}, {0x7, 0x1}, {0x1, 0x3}, {0x2, 0x2}, {0x0, 0x4}, {0x3, 0x4}, {0x1, 0x3}, {0x7}, {0x3, 0xa}, {0x1, 0x6}, {0x4, 0x6}, {0x3, 0xa}, {0x2, 0x2}, {0x0, 0x2}, {0x6, 0x3}, {0x0, 0x8}, {0x1, 0x9}, {0x6, 0x4}, {0x0, 0x9}, {0x0, 0x6}, {0x3, 0x6}, {0x2, 0x9}, {0x1, 0x8}, {0x1, 0x8}, {0x5, 0x3}, {0x5, 0x3}, {0x2, 0x8}, {0x0, 0x4}, {0x4, 0x5}, {0x6, 0x5}, {0x6, 0x1}, {0x2, 0x5}, {0x1, 0xa}, {0x4}, {0x6, 0x7}, {0x2, 0x4}, {0x2, 0x1}, {0x6, 0xa}, {0x1, 0x3}, {0x6, 0x2}, {0x0, 0x4}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x3}, {0x6, 0x5}, {0x4, 0x3}, {0x4, 0x2}, {0x1}, {0x2, 0x3}, {0x5, 0x8}, {0x0, 0x8}, {0x5, 0x2}, {0x2, 0x9}, {0x1, 0x3}, {0x0, 0x6}, {0x2, 0x6}, {0x1, 0x5}, {0x6, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x46, 0x10bc, 0x8, 0x1, 0xfffa, 0x5, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0xa, 0x7, 0x200, 0xf173, 0xe, 0x6, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x6}, {0x1, 0x2}, {0x3, 0x3}, {0x0, 0x4}, {0x7, 0x3}, {0x1, 0xa}, {0x7, 0x3}, {0x0, 0xa}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x6, 0x9}, {0x2, 0x1}, {0x7, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x8000, 0x1d0b, 0x7, 0xd, 0x7, 0x3]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x3, 0x6}, {0x6}, {0x4, 0x1}, {0x1, 0xa}, {0x0, 0xa}, {0x3, 0x9}, {0x4, 0x4}, {0x7, 0x9}, {0x1, 0x9}, {0x6, 0x6}, {0x2, 0x3}, {0x0, 0x4}, {0x5, 0x9}, {0x5, 0x6}, {0x1, 0x6}, {0x7, 0x8}, {0x2, 0x6}, {0x5, 0x4}, {0x2, 0x5}, {0x2, 0x3}, {0x6, 0x6}, {0x1, 0x4}, {0x4, 0x2}, {0x0, 0x8}, {0x6, 0x7}, {0x4, 0x3}, {0x4, 0x4}, {0x1, 0x8}, {0x4, 0x7}, {0x5, 0xa}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0x7}, {0x0, 0x5}, {0x0, 0x3}, {0x5, 0x3}, {0x4, 0x4}, {0x2, 0x7}, {0x5, 0x4}, {0x0, 0x1}, {0x7, 0x5}, {0x2, 0xa}, {0x2, 0x7}, {0x0, 0x4}, {0x2, 0x8}, {0x2, 0x8}, {0x0, 0x6}, {0x1, 0x5}, {0x7, 0xa}, {0x2, 0xa}, {0x1, 0x8}, {0x1}, {0x2, 0x9}, {0x7, 0x3}, {0x5}, {0x7, 0xa}, {0x3, 0x8}, {0x0, 0x8}, {0x1, 0x9}, {0x3, 0x5}]}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x6, 0x3, 0x48, 0xb, 0x16, 0x12, 0x6d, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0x1ff, 0x8, 0x7, 0x100, 0x4, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x200, 0x26, 0x0, 0x1, 0xed, 0x8, 0x401]}}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x9, 0x7, 0x800, 0x81, 0x6, 0x400]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x6df, 0x23, 0xc, 0x8, 0x80, 0x80, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x81, 0x3f80, 0x6, 0x56c, 0x9, 0x400, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x593, 0x1, 0x7, 0x7, 0x667, 0xe000, 0x6, 0x10]}}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x5, 0x16, 0x2, 0x1, 0x60, 0x18, 0x30, 0x0, 0xb, 0xb, 0x4, 0x18, 0xc, 0x9, 0x18, 0x6c, 0x4, 0x3, 0x1b, 0x6c, 0x4, 0x60, 0x48, 0x6c, 0x3, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7518, 0x6, 0x4, 0x82f9, 0x7fff, 0x81, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0x8000, 0x0, 0x9, 0x6, 0x2, 0xffc0]}}]}]}]}, 0x848}, 0x1, 0x0, 0x0, 0x81}, 0x20040014) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000001ec0)=0x0) move_pages(r8, 0x9, &(0x7f0000001f00)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil], &(0x7f0000001f80)=[0x8, 0x1, 0x6], &(0x7f0000001fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000002000)={0x48, 0x7, r1, 0x0, 0x10001, 0x0, 0xa, 0x36d40f, 0x3cc8f}) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000002080)=0x2) (async) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000020c0)={0x0, 0x6}, &(0x7f0000002100)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000002140)={r9, 0x200}, 0x8) (async) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000021c0), r1) sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000002300)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002200)={0xa4, r10, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x56}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@private=0xa010102}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xb636}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x24044080) (async) memfd_create(&(0x7f0000002340)=',!!&%\'{%\x00', 0x2) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000023c0), r1) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000024c0)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x60, r11, 0x10, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xa}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x2}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8807}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xce6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x80000001}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 5.786934205s ago: executing program 2 (id=355): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r3 = accept(r2, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @multicast1, @broadcast}, &(0x7f00000001c0)=0xc) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x20082, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='C\x00\x00\x00', @ANYRES32, @ANYBLOB="18012cbd7000ffdbdf2506000000080031007f002c52ae623813cd11000008002c00faffffff05003300010000000800060025ea467b6f6e37ea6a4132fc18140aa6facfc794e43f5508186378923e754d6cd179d9fe27b667cbb001adee6838fb84d49b13f8bc364c7e8d4acff8ec1e5f75126a8a8c16b400b6fc72d4e66fd6861fc0a3306ca159dc1ce9f8", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x80c0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x4008199}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x6400) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = syz_io_uring_setup(0x9, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r6, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r7, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.766405845s ago: executing program 4 (id=356): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) userfaultfd(0x801) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x44115}, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000280)={0x24, @short}, 0xfffffffffffffe40) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40dc880, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @local}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000a80)=ANY=[@ANYBLOB="480200003e8e1a7582c68caae6f5deb81c4624de533d0c5b4520a1efc593ee24079091167cba843066a3c17ea92d6bc2c8c2c237fd276b4cc54c18a61ea39d5fea640e4850f610bfdc028aeacde5b5f932ac94446ade00c55a266d7a285fd7c605d120a67d5da3c92f71191624022be045e3d65a8ef7b1d3ff281112bf03eccceed7c9515d949d6486a0948c494d62ff1b6a7c82a99e41ce229ac68ebb53660c038f7e7c8a22677696d79379affc1c316091ef24aa7eef5e8bb4a0ba", @ANYRES16=0x0, @ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x20080010}, 0x4008041) shutdown(0xffffffffffffffff, 0x1) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5}) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r7) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 5.453698834s ago: executing program 3 (id=357): ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000040)=0x2) (async) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0x0, 0x218, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000080), {[{{@arp={@broadcast, @empty, 0xffffff00, 0xffffffff, 0x9, 0xe, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff, 0x0, 0xff, 0x6486443804079561]}}, 0x8, 0x3, 0x2, 0x4, 0x3ff, 0x4, 'veth1_macvtap\x00', 'macvtap0\x00', {}, {0xff}, 0x0, 0x40}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @remote, @multicast1, 0x8, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffff00, 0xff, 0xd, 0x7, {@empty, {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0xe9, 0x6, 0x9, 0x8, 0xfff, 0xe0, 'bridge0\x00', 'vlan1\x00', {}, {}, 0x0, 0x38}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x5, {0x9}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) (rerun: 64) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0xffffffff, 0x2}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) connect$inet(r2, &(0x7f0000000400)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001f8, 0x0) (async, rerun: 32) r3 = semget$private(0x0, 0x5, 0x0) (rerun: 32) semop(r3, &(0x7f0000000000)=[{0x3, 0xfff7, 0x1000}], 0x1) (async) semctl$IPC_RMID(r3, 0x0, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x2a}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010101}, {@private}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) (async) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001ff000009090585cfa9"], 0x0) 4.739022017s ago: executing program 3 (id=358): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) readahead(r0, 0x2a91, 0x7ff) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2121) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = gettid() r5 = getpid() rt_tgsigqueueinfo(r5, r4, 0x1f, &(0x7f0000000080)={0x11, 0x0, 0x2}) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) readv(r6, &(0x7f0000002940)=[{&(0x7f00000000c0)=""/121, 0x80}, {0x0}], 0x20000000000000d6) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, &(0x7f0000000400)=""/201, 0xc9) 3.79521822s ago: executing program 3 (id=359): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0x1010, 0x453, 0xa, 0x70bd29, 0x25dfdbfb, "943e825012bca850598c161ed65efcfca964b54d6415a6a1ba28f9456f6449476cce1b70d5d2e7edd397e678181a7c0a7ce25eaaad8e8e97c05359efbf7bd91ad4ed177712f3c10fb40f120ed59c7dbc2071574fe65a210cc78a5ebff358eafddcd0a5bc91cf330d183add55c94ec2c77b7a8d7f9e0903d097d9e68b8f1e65368ba2c93dcdffbb2afb26b36bdc95e18f0962f2875bcf99c9082769017ecfddb8dcf093d839c7bb7d5c9a4a7b7b05c8acba6b5f9618230e58e6db3c9d5886df850ed20a76eb976f47f7c6fea7e071b9c0401632976d3bea3665798146919b59d7f847bb0147a5fcb0e7ce866e967a714b64aef525a509c23a40b25f4335885431fccaee5cd4c2a556deb9c7673f91193e5a2e244020b3aaa8ee8f81500aca6e6faca7eca92c0f241e7315cac8eebf0dfb0db0fc5d1bc2fa619e9dd24d77faba5762c36281f53b5c2141a7a74e317f5468ec291e862012e2c891464906e986f1d006939f6d8d6ebcfab25328bea67e1949df06322755ad65bb6aa11398f0fc8458e1e2678ebd8c104a87f638c0f3568800c0407e07fbc3c308794bdcc5328004027b277a9e07dae6cc1c97fc336277e9760b692172b8fc6f3f330be40f3ca73f8e5fd1031e84363f0d2185d510c076500615dfd7f5a71dbb0baf24089d8ccc89a11e42b21b38d9ac790bdca2fa766d40a1792326c0ea1b9cdc017fb9e447956f675322449457d3f76eaea2eac2e3e56cb97b306f596e2b6207c854cfdf4d90d8e808917f5307ae261f948d7358b3c6e7ee2b4fb5aeec84e9dd851988fea6c2945f6a97de24b04fb8e9025d1adff95c7e4c882a6bdc9755a6275285c3a32d6010e8a76f793142c8623b54a8652065e6829a34bce10483340f7722ab989723efc58618fa7607f93d9a385350192bb26d07003b408c141c4c24d09ee0e5f83bcc715deed8b790fabcd278188c59b162b03c2474d37660f828e6ae577b57ef8b4d74c547b025b342ec0a887a1061ad5efe6ebb08ec51a1288806d6e70710652e26addba9de1ca4f46248b631628fe4326e5b920410ca0eead1a2b4a175dd21ca53261d920cfc5f88a598f8774bfb35e90f4129d2b2b95cb7662cdd49ea3f4348c36a7a8b86a65bf1dd7359cec7fbaf51065019ff3a29ed8ff2e48c9816d405f30c9edf35e650fd53e835d0ac0b881f79170df90e60bc842d738af99b61a14f674d8d7a1776863f9f3cab84e019ed0235469e6b16cbaf99e4ec7150cad5f970ead3562f4221650d14a752828ded73865630ebd236155791caf49e39d6269d91266dc469c49dc1824f796e6577452f177890345d860d5ed8a2dd8564bf62924337538043b7144104ceb42298017f3afe6da59754cb7ad77a60a8a774298da952aae357509d707a0e2e38d28dcd1fc804bbb7276e1c27e61767b86bc2020e28c2643671d7ba7faed1e8d19ebf4c9da83f98b3ca3186b47fb55cf7e5cc035b5b38dd299ea0fbd6d13e92f7744d631ffa00ba98c97f5a637b4d79ace9227ed664887cdaa86e5bb15561c63b6cf0683b114a7234ae17035ba73a18efc4365065f0cfb5e87f611b52f4145825e1389b86248435d40708ab86d0f56a024474d9aff93a920d2fa6fd961eb7480b0c06de3d2dac36d2c1817ef8cf5192fd84d79c16ec1949eb90556a153908e182dda097f00596eea5b94c942f7a59d7f5a0c0eb3be85c778878dbcd003ea1a00418d90d2482f72abaeeb4ff9819c438de2c444399175dee332cb04e4282d0b8fae1fbc442b95bbfb2e393902a84975a5209716eb31704d02c141546d3b7e1d43a30834e5bbf8a72a15ae5aa31dfa7f9cf7ff63ba48c348d0d7911e1ab67c2a1677f5fdc6509b9374be4a78d4c77fac699ce5b54748429266874725d76086fb0c1631b850dbb96f6d86dac7f25bf403369f00d66455cdb9e9851402400bb2fe0b1e83c814c9bd9dff6125214d5afac7a84032b23dac96c479f4f928f51e1c1d3dd5c123bd55f4b41e3272ee02683aeaa2d97a41cb34321b9d5b2f768cff5233ac7ce30e32435653157e49eb52699667b6b7c780238406de47c20d0c31b6f1a96837a81dad83d1da215f38fa77d9a238d1255e2af06946ccb80ea30d564a52e6b8b61b932b7206e8dd90663c5a6d44cc45634b82162d4dfc8841ca73152add411c8b880b69dca8f94058a9b23a4ab59be599fefe5e09ff7ddf3e412faec35ae5b1b67807675a2fada2461458bb926c86a49dba9ed86b7b39d8e9c8217085ba63299279b7b1c7840e14dd69099448e6f271b846529add020cd67af282b2ef7a811d1293cab0f85f48f68cad7f5a3b51827c67deb97dd8478037e970e28e51342a4efd1664a1edb8305111fa9f60a9f5b6ebc00dae9a05ddc25e95282e036874ae9161dffe02efeb55567ecb5530f0a0e13fefd1e96d3f4eb4eb1b800f1aa3bf28c5da417ff27bd7641eb85cb579410d91cdbf85431d413d02bd1bbf026c635e22e9a183320ddb2cb3f8d016928a5b6382bf063fdcf1ed16a591d2f7078feaeb5cfa1f7cba826f8c28582d1b0d7abac84cab189a3bb9ef941180de1579c62454c5ed633ac1467d8c9b1cca7e3aa14b06e8d8860ab1a8dd2902d07d4af870e89dec34c44a0eca6e1776680212dad9ca0b6f93b0a954f9221496cf6631c64512563aa589fd2c1e93743c1284d5a590bd5f07790c865e038431202097aac835c665780a7265a51a097bbc3e725255ba0dfdadc724a26dacf4701eb7a837d20fe794f1dd2d885e8a43754b49396d1a89f76bab4da2483443c099c4ea6a811b60f3feabffb3a7f6a31add3e16103ccd6a057b6768f88c8f2c8930415907e141c3956e3b778ed3329901f54b352009c17a974df10c63e35e763fe6ca1f18469381ec8f0fffa214721058303c13ebce49712652a214b1afa03e993dc3ea55394cb46c642084432647bf9bc9c570c9c88d43686d35eb3b9e3b2a8d4a3499cfd7d4850421cfaee4192633afc606a336a99565b5a4e35f7046503c086aafb8228527f5a70b27fb1bcc1331922b54ef79187c10fabe3bc494784b361e01536a63a48468fba310cdf113eda83321e36634e0665a925d1a05b5013e008543449606a3d2eb6471274030ec543530f294fc20a1dc1ae6ea06ba1380132b8c504bb63bcc200a048888cde17cf92c9319905187e9db56b2767b13ce7d25defa9b05279702cb2eae3fba548f5d3e6cd4c9915353a741ebc94c4a0b853d7d4876c453e06d5e0d29ef45ef52dc51f63e51954d48ea7d779422cdbeffd18b81b15f0d2b47a3fad8fd205f187c5631921c05fd4c8c470aa29dc20e21e009963388ecae76e12fdc24f0a19b46d77e6dac0657414314b052622fe886e0d5deb11b035a5557e99a4e397041129ef2dc2ad8cfb830b2dcc3300fe2bdf3a63085478602d5b3bc2304f2ee9065c09baf0f65bec8b2a92e1dd89e55cf7fe48b96d8a2bccad1360250a13d514ee88e81de5fc3cb9c27fbab56b8d18d9cf6c404e7f995d58649c7c1fb3de6f6ee61119f80a73faeb6afb862c09bd16ced590bf185443f707d6db33a280c401fa1bc2a70fd7973872f4aa6d98779fcbcd92c4bf6def6fd0a22ecf381399b25a73970cb197783d3b7b0bdc20d9d4d87e804859a93819b1095b6d8268fa7c9f5de6b92debd72a7d83e9c8e9d233b847154ee6887c81108e56e2b5c5756546d88de47fbfd85b0b34c3f458e37e3a6eae146cc3e9297aacacce3ebfd21505b5b53d44ebee88682ea40d16343866943a7e3bf6fd2f32750a27c6971fd8c2b08061fe46c46ee77f966dd0721cc9b2475fb924656fdababc73d3a804c12f742edf5bd2359e13f836fbffee66c80d7d948fa469316f3cbde0224bfffd406c7b3dddbe0c734981ecf10b40cc777b19eb73b13a9f7e1acace62408f265bcc7f312c675104a588079d9e29931d7b3af41296f0872aab1fec63035fea7741c628f4ce03b4ce8214a539c27cb5b223b1571efa1eb77309e1387752d07a70f4410f97849597d81ec8d0e5874fe943d38d068881791a54c90e21de28befcda7293793b4ca4e4f9ff31e22dc476e374232e4edbaaa0bbf64978445f90afe3084b619d21840f4e80b36121df5740cb0fb35713a6a4ac8d2e7f71c6de8581e6c0230707ece1d3e80d0dfbeeb7f8d8244886f6f4a186212b8ada67a78ce718faa65e3c0437c54522082e7f244831a34d940e79d560bf34057ed0be0c2056220cb0230b1e8b1738733b6d42992ceba2cfd7fb804b9a4770debc385284e5f44683a0f9d3b7dc1bc3df23a6db2384bf599c7cb2855f610fb64cadfba4d0c10a29555fca8f9a191da9c69b1833080a48009ca439c181dd5f5b1b8e9def54f3b85bda0e16c02d76d1d98d265a1bfa3182c6ca65dbefc73ca142ab65aeaf87e93aca47f019afc1a908467a146f8bb630b5bff76ece1d0112b3ec6fb28cc4f1501d344785a2f36762755cfb2e8e562adbd7ceea5f13278276f65c8dcec90c0a5af8084a277c35c00e22430a74e8ad5d9d080205d0890cd93aa528e837f496776fc7862e06fd4c6c5ae75eaf0f099a4003981bdceffe41ba3ea6735a8fcb17a99ff4de718c53e08fda1674714a69bf46744ffb2f23e45b72b2c6957469389d750e37126966f7d443fc1aa96e2581a73a037c6216f5bdc285ff3bd5e744938195e0f79201a13de1fa8e416b88814b0f9d07bc0a17bb28d80d2ea9c113f70a55f1e82c94009ae5a63cbebb1e688ed71fdb46fff928518930aca1270c780c4024ea5d7112ed25315b21f4a3f24651eeb54c2513cde8c22a0ec15899907025345cefba90a0373835f611d01568baf1c631fdb4ccd2e66b37fa1262802cd0040fc6ce7cab513fdea023bf060b8d34ac969af291aae24c1db583be41873d97d382098b855c04dc7764024826df8922e769d6c33ce6aafb52354c2816faa255f9874efad0b27b2427509c633e4ef4f40df0edf600dfc0ed25e466863387a3a3f1bb2f9dcbf535bb522aeb485385aea3826427546ee75b5bf05deb75c91e4533498c2833211c76087432c1fa4a445edd15c3b7c9c7844526101a1242b9c246e9593f5730f329c9ba3ac7466324671cfd813aa382dc8bfc6bfb1a3041842e99daa0e15c05cf8c829a2125410dc764072f1fe764a8a9b60e8e9fab90bd31abf0a042f5bf77564f682db351c528df01602b89593d6738ba2c4571f9b6d4712b31f658e01b25b610a6e1fd2c6571e43b0e522a200af8504376b71bce68606049b6f2e35b1e842c5cf1d266cd762cc7880252075f393a41455373ab956615fb124e3caeab5a26e0702e309e459cae9d73f5d0e34fb229d29f9cda374ed212599bdcc2be19fb48ef0929e86a5ba475a97692178b9e18cda6cefa06445f0426ed7c6de69718dc971bf51562583cc9465c28ce553de4cc2bcc3df86507b6ec00a0be9eeda92c6c56bda5f6d17af1a9ed582d3491521986cc80ee59ec9f963af92ab9db85351eb0b2b9eff56263d05e2d5b2d9dbe5c481b5f8132a27857e4aa40499c4c4bc2a07d44a03cb8afcb81a51efe9c3471eb5292c634616624558c5ef3d2a0155836df4a2693ccbac62a1836748f8f93c0ce78bb6124af38f86b2ed80699f0b41b924f0a676a63309be976f05c03538f08e099a74397f945b4fd748fcec657f82786644ff3cae17c8ba8a2a6362b64cc4003e0a90ef3b35799679857fe2fc943fae0aa1d2ed524df7b7a5b0dd91ee7d08859590c8cf2d155479dee19e6fce70e659a952a9e2aaaaa726a47a72a05779e554f", ["", "", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x4000000}, 0x881) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x50, r1, 0x1, 0x20000002, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "f4ae834f73"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) 3.585047762s ago: executing program 2 (id=360): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000001701000003000000669b86e90000000018"], 0x30, 0x20000000}], 0x1, 0xc050) getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f00000000c0)=0x93a00000, &(0x7f0000000100)=0x4) 3.556832993s ago: executing program 1 (id=361): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f0000000280)={&(0x7f00000011c0), 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000001) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, 0x0, 0xfffffffffffffffe) 3.421837935s ago: executing program 2 (id=362): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r3, 0x89a0, &(0x7f0000000200)={@dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010125}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r5, 0x29, 0x37, 0x0, 0x18) setsockopt$inet6_opts(r5, 0x29, 0x36, 0x0, 0x0) fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4, 0x0, 0x9}) ioctl$VIDIOC_REQBUFS(r6, 0xc0585609, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x7}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f9aab106d04f0080d50010203010902390001000016470904000003080662"], 0x0) 3.421316956s ago: executing program 3 (id=363): fsopen(&(0x7f0000000040)='zonefs\x00', 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0xfffffffe, 0x2045404a, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x20, 0x76}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x90, 0xfffffffffffffffe, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x2, 0x5, 0x7, 0x74, 0xffd, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, r3, r4, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, r3, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1, 0x0, 0x0, 0x0, 0x400, 0x7cb}, 0x20) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB='D\x00']) unshare(0x20000400) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r7}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0, r8}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.289313984s ago: executing program 4 (id=364): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='ext4_collapse_range\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120020000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@setneightbl={0x14, 0x43, 0x1, 0xffff7ffe, 0x0, {0xa}}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000080)='./file0\x00') setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000200)=0x3, 0x4) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) r7 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) utime(&(0x7f0000000240)='./bus\x00', &(0x7f0000000340)={0x1, 0x100}) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x23, 0x11, "fee8a2abaca7bd6447a4b4e00dd683dda1af1ea09de2b7fb0a84e7000000eeffffff020000000000000000000000000000020800", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d01000000000000000000000000003b0000000000000000020000000000c571e7a1", "c601f6d65512406c7f00", [0x4, 0x40000000000000]}}) shmctl$SHM_LOCK(0x0, 0xb) 2.539405441s ago: executing program 1 (id=365): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x1, @remote, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000019480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000170000000c000680"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x24000014) r4 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x8001}], 0x1, 0x40010002, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000a80)={0x4000, 0xd, 0x0, "134600cea4dd512d97d4188cbf770637bc747721f37af54dd1dc03030096c337"}) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2.043364784s ago: executing program 0 (id=366): r0 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x1000000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @empty, 0x2}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x1000) ioctl$PIO_UNISCRNMAP(r3, 0x4b6a, &(0x7f0000000900)) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3f}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r5, 0x1, 0x1000000, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8) 1.168161815s ago: executing program 3 (id=367): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000001b80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x541c, &(0x7f0000000040)) r3 = open(&(0x7f0000000440)='./bus\x00', 0x2ac2, 0x1d9) splice(r1, 0x0, r3, 0x0, 0x402000784853bb, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='btrfs_failed_cluster_setup\x00', r1}, 0x18) ftruncate(r4, 0x7) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r5 = gettid() rt_sigqueueinfo(r5, 0x21, &(0x7f00000002c0)) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000000580)='d', 0x1}], 0x1, 0xa) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e1310a10f0031d58b776010203010902240001000000000904310002ff0107ff09058a02100000fa000905", @ANYRES32], 0x0) 1.004920467s ago: executing program 0 (id=368): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x43033, 0xffffffffffffffff, 0x0) mmap$KVM_VCPU(&(0x7f00002db000/0x4000)=nil, 0x930, 0x0, 0x20031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x3}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) unshare(0x6a040000) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read$FUSE(r3, &(0x7f0000003100)={0x2020}, 0x2020) 1.002207587s ago: executing program 1 (id=369): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000006d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='host1x_wait_cdma\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000070000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f00000000c0), 0x10) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="b90100"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000005c0)='sys_exit\x00', r2, 0x0, 0x8}, 0x18) setresuid(0x0, 0xee00, 0x0) 921.594185ms ago: executing program 4 (id=370): write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x28) 707.176235ms ago: executing program 4 (id=371): madvise(&(0x7f0000e95000/0x4000)=nil, 0x4000, 0x66) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xc, 0xc8, 0xfa}}}, 0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001780)={&(0x7f0000000140), &(0x7f0000001580)=[{}, {}], &(0x7f0000001680), &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2}) socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002"], 0x1874}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 705.380933ms ago: executing program 1 (id=372): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000400)='./cgroup\x00', &(0x7f00000003c0)='hfsplus\x00', 0x8000, 0x0) (async) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = fanotify_init(0x20, 0x2) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) fanotify_mark(r2, 0x1, 0x8000008, r3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r5, 0x80506409, &(0x7f00000007c0)={0x0, 0x20, 0x10, 0x6dd, 0x64, 0x0, 0x4, 0xb05, 0x20, 0x1, 0x1, 0x7, &(0x7f0000000000)=[0x4], 0x1, 0x0}) (async) fchown(r3, 0xee00, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000480)={0x0, 0x0, r7, 0x0, 0x7a, 0x5, 0x9, 0x0, {0x2, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c643c, &(0x7f0000000300)) (async) mount$bind(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x21000, 0x0) 198.086268ms ago: executing program 1 (id=373): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x38, 0x701, 0xfffffffc, 0xa6ff, {0x2}}, 0x14}}, 0x4008000) 158.551422ms ago: executing program 0 (id=374): mkdir(0x0, 0x115) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) r0 = gettid() r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000100)={0x0, 0x1, 0xf82f, 0x10000}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000950000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) r4 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r4, &(0x7f0000001280)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000001480)=[{&(0x7f0000000040)="f550b36301e9a32630461b1edea61a15dc8e30c9", 0x14}], 0x1, &(0x7f0000001500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}}], 0x1, 0x20044000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000200)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 0s ago: executing program 1 (id=375): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={r4}) pwrite64(r5, &(0x7f0000000180)="9847353a8ee89417e678ae6efc83eae21e63ca6c582e7f", 0x17, 0x200) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) write$cgroup_devices(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe80"], 0xffdd) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001380)={0x34, r1, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x30048011}, 0x0) kernel console output (not intermixed with test programs): 0: slcan on ttyS3. [ 70.060263][ T910] usb 5-1: USB disconnect, device number 2 [ 70.077150][ T6007] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 70.123397][ T6007] macsec1: entered promiscuous mode [ 70.128919][ T6007] macsec1: entered allmulticast mode [ 70.134584][ T6007] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 70.198652][ T910] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 70.396901][ T24] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 70.443472][ T24] usb 1-1: USB disconnect, device number 2 [ 70.587838][ T6030] syz_tun: entered allmulticast mode [ 70.808377][ T5962] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 70.822074][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 70.829679][ T30] audit: type=1400 audit(1759317515.344:200): avc: denied { create } for pid=6040 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.850444][ T30] audit: type=1400 audit(1759317515.354:201): avc: denied { bind } for pid=6040 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.873630][ T30] audit: type=1400 audit(1759317515.374:202): avc: denied { setopt } for pid=6040 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.899445][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.906559][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.968098][ T30] audit: type=1400 audit(1759317515.494:203): avc: denied { add_name } for pid=6032 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.986621][ T6007] can0 (unregistered): slcan off ttyS3. [ 71.022765][ T30] audit: type=1400 audit(1759317515.494:204): avc: denied { create } for pid=6032 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.047896][ T5962] usb 3-1: Using ep0 maxpacket: 32 [ 71.062857][ T5962] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 71.074633][ T5962] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.079592][ T6053] fuse: Bad value for 'fd' [ 71.099513][ T30] audit: type=1400 audit(1759317515.494:205): avc: denied { write } for pid=6032 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=2055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.100990][ T6027] syz_tun: left allmulticast mode [ 71.125504][ C0] vkms_vblank_simulate: vblank timer overrun [ 71.131516][ T5962] usb 3-1: config 0 descriptor?? [ 71.209982][ T6058] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 71.211978][ T5962] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 71.238598][ T30] audit: type=1400 audit(1759317515.494:206): avc: denied { append } for pid=6032 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=2055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.392345][ T30] audit: type=1400 audit(1759317515.904:207): avc: denied { append } for pid=6065 comm="syz.4.30" name="ubi_ctrl" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 71.521559][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.29'. [ 71.626886][ T6070] bridge_slave_1: left allmulticast mode [ 71.632579][ T6070] bridge_slave_1: left promiscuous mode [ 71.640081][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.649655][ T30] audit: type=1400 audit(1759317515.944:208): avc: denied { remove_name } for pid=6061 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=2055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 71.672964][ C0] vkms_vblank_simulate: vblank timer overrun [ 71.719642][ T6070] bridge_slave_0: left allmulticast mode [ 71.725394][ T6070] bridge_slave_0: left promiscuous mode [ 71.732232][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.802288][ T5962] gspca_vc032x: reg_w err -71 [ 71.803271][ T30] audit: type=1400 audit(1759317515.954:209): avc: denied { unlink } for pid=6061 comm="rm" name="resolv.conf.can0.link" dev="tmpfs" ino=2055 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 71.851810][ T5962] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.912399][ T5962] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.920266][ T5962] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.927666][ T5962] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.934195][ T5962] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.940717][ T5962] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.949988][ T5962] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.957582][ T5962] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.966628][ T5962] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.973156][ T5962] gspca_vc032x: I2c Bus Busy Wait 00 [ 71.979696][ T5962] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.010259][ T5962] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.101536][ T5962] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.132830][ T5567] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 72.140028][ T5962] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.188667][ T5962] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.222235][ T5962] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.343371][ T5962] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.348682][ T5962] gspca_vc032x: I2c Bus Busy Wait 00 [ 72.403221][ T5962] gspca_vc032x: Unknown sensor... [ 72.408316][ T5962] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 72.437103][ T5567] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.450725][ T5962] usb 3-1: USB disconnect, device number 3 [ 72.456634][ T5567] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 72.560111][ T6081] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'. [ 72.660391][ T5567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.793016][ T5567] usb 4-1: config 0 descriptor?? [ 73.422366][ T6104] loop6: detected capacity change from 0 to 2560 [ 73.476388][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.521441][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.615040][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.623236][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.647221][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.708888][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.748574][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.779982][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.815664][ T6104] ldm_validate_partition_table(): Disk read failed. [ 73.839599][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.875870][ T6104] Buffer I/O error on dev loop6, logical block 0, async page read [ 73.979552][ T6104] Dev loop6: unable to read RDB block 0 [ 74.003146][ T6104] loop6: unable to read partition table [ 74.071484][ T6104] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 74.272964][ T910] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 74.402890][ T910] usb 2-1: device descriptor read/64, error -71 [ 74.521479][ T5567] usbhid 4-1:0.0: can't add hid device: -71 [ 74.542202][ T5567] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 74.610379][ T5567] usb 4-1: USB disconnect, device number 3 [ 74.692808][ T910] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 74.843942][ T910] usb 2-1: device descriptor read/64, error -71 [ 74.966684][ T910] usb usb2-port1: attempt power cycle [ 75.332919][ T910] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 75.478684][ T910] usb 2-1: device descriptor read/8, error -71 [ 75.951901][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 75.951915][ T30] audit: type=1400 audit(1759317520.474:261): avc: denied { write } for pid=6144 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.113008][ T10] cfg80211: failed to load regulatory.db [ 76.136280][ T6147] netlink: 80 bytes leftover after parsing attributes in process `syz.0.46'. [ 76.147978][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'. [ 76.163849][ T30] audit: type=1400 audit(1759317520.664:262): avc: denied { nlmsg_write } for pid=6144 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 76.185669][ T6150] misc userio: No port type given on /dev/userio [ 76.203524][ T910] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 76.220345][ T30] audit: type=1400 audit(1759317520.684:263): avc: denied { ioctl } for pid=6144 comm="syz.0.46" path="socket:[9028]" dev="sockfs" ino=9028 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 76.280876][ T910] usb 2-1: device descriptor read/8, error -71 [ 76.332254][ T30] audit: type=1400 audit(1759317520.734:264): avc: denied { write } for pid=6149 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 76.389508][ T30] audit: type=1400 audit(1759317520.894:265): avc: denied { create } for pid=6146 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 76.418313][ T910] usb usb2-port1: unable to enumerate USB device [ 76.465304][ T30] audit: type=1400 audit(1759317520.894:266): avc: denied { create } for pid=6146 comm="syz.4.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 76.743009][ T30] audit: type=1400 audit(1759317520.914:267): avc: denied { mount } for pid=6146 comm="syz.4.47" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 76.889821][ T6173] mmap: syz.4.52 (6173) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.941870][ T30] audit: type=1400 audit(1759317521.434:268): avc: denied { read } for pid=6165 comm="syz.4.52" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.020696][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 77.152811][ T30] audit: type=1400 audit(1759317521.644:269): avc: denied { read write } for pid=6174 comm="syz.0.54" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 77.176001][ C0] vkms_vblank_simulate: vblank timer overrun [ 77.292824][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 77.298006][ T5954] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.489790][ T6179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 77.754375][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 77.762130][ T30] audit: type=1400 audit(1759317521.644:270): avc: denied { open } for pid=6174 comm="syz.0.54" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 77.790334][ T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 77.830996][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.879167][ T10] usb 3-1: Product: syz [ 77.895650][ T10] usb 3-1: Manufacturer: syz [ 77.901030][ T10] usb 3-1: SerialNumber: syz [ 77.927578][ T10] usb 3-1: config 0 descriptor?? [ 77.971839][ T5954] usb 5-1: unable to get BOS descriptor or descriptor too short [ 78.054726][ T5954] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.066362][ T5954] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 78.082785][ T5954] usb 5-1: config 1 has no interface number 1 [ 78.090104][ T5954] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 78.118154][ T5954] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 78.127980][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.144116][ T5954] usb 5-1: Product: syz [ 78.158446][ T5954] usb 5-1: Manufacturer: syz [ 78.185789][ T5954] usb 5-1: SerialNumber: syz [ 78.392792][ T5878] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 78.647741][ T10] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 79.331092][ T6193] netlink: 'syz.3.58': attribute type 1 has an invalid length. [ 79.347371][ T6193] gretap1: entered promiscuous mode [ 79.376253][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.413080][ T5878] usb 2-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 79.422249][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.434679][ T5878] usb 2-1: config 0 descriptor?? [ 79.592415][ T6197] macvlan2: entered promiscuous mode [ 79.600171][ T6197] macvlan2: entered allmulticast mode [ 79.817489][ T10] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 79.886758][ T10] usb 3-1: USB disconnect, device number 4 [ 79.940821][ T5878] playstation 0003:054C:0CE6.0001: unknown main item tag 0x5 [ 79.952953][ T5878] playstation 0003:054C:0CE6.0001: item fetching failed at offset 5/6 [ 79.961521][ T5878] playstation 0003:054C:0CE6.0001: Parse failed [ 79.985363][ T5878] playstation 0003:054C:0CE6.0001: probe with driver playstation failed with error -22 [ 81.472989][ T5954] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 81.633295][ T5954] usb 5-1: 2:1: invalid format type 0x1000 is detected, processed as PCM [ 81.660613][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 81.660627][ T30] audit: type=1400 audit(1759317526.184:280): avc: denied { mount } for pid=6221 comm="syz.4.65" name="/" dev="ramfs" ino=10277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 81.752310][ T5954] usb 5-1: USB disconnect, device number 3 [ 81.765280][ T6230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.65'. [ 81.780400][ T6228] [U]  [ 81.784771][ T30] audit: type=1400 audit(1759317526.304:281): avc: denied { read } for pid=6227 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 81.814746][ T6228] [U] K{‘ [ 81.818235][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.65'. [ 81.854698][ T6228] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖÆ¯¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 81.904326][ T6228] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 81.937808][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 81.967595][ T6228] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 81.990204][ T5878] usb 2-1: USB disconnect, device number 7 [ 82.028335][ T6228] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)޹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 82.076648][ T6228] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-ɿ߿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 82.160595][ T6228] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 82.193413][ T6228] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 82.554979][ T6224] netlink: 256 bytes leftover after parsing attributes in process `syz.4.65'. [ 82.590165][ T6228] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<, priority 0 [ 92.267059][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 92.275372][ T5892] usb 2-1: config 2 has an invalid interface number: 18 but max is 0 [ 92.293278][ T5892] usb 2-1: config 2 has no interface number 0 [ 92.303783][ T5892] usb 2-1: New USB device found, idVendor=0d9f, idProduct=0002, bcdDevice=78.db [ 92.316960][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.325899][ T5892] usb 2-1: Product: syz [ 92.330906][ T5892] usb 2-1: Manufacturer: syz [ 92.341747][ T5892] usb 2-1: SerialNumber: syz [ 92.348034][ T6354] tipc: Disabling bearer [ 92.360671][ T5892] cypress_m8 2-1:2.18: HID->COM RS232 Adapter converter detected [ 92.372014][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 92.372043][ T30] audit: type=1400 audit(1759317536.894:310): avc: denied { ioctl } for pid=6357 comm="syz.4.100" path="/dev/uinput" dev="devtmpfs" ino=919 ioctlcmd=0x556d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 92.373277][ T6358] input: syz1 as /devices/virtual/input/input5 [ 92.379884][ T5892] cyphidcom ttyUSB0: required endpoint is missing [ 92.426797][ T30] audit: type=1400 audit(1759317536.944:311): avc: denied { read } for pid=5182 comm="acpid" name="event4" dev="devtmpfs" ino=2843 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.432260][ T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1 [ 92.455333][ T30] audit: type=1400 audit(1759317536.944:312): avc: denied { open } for pid=5182 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2843 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.518993][ T30] audit: type=1400 audit(1759317536.944:313): avc: denied { ioctl } for pid=5182 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2843 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.519627][ T6358] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 92.547181][ T30] audit: type=1400 audit(1759317536.954:314): avc: denied { mounton } for pid=6357 comm="syz.4.100" path="/17/file0" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 92.585696][ T30] audit: type=1400 audit(1759317537.114:315): avc: denied { read write } for pid=6360 comm="syz.3.101" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.668545][ T6363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.102'. [ 92.677905][ T30] audit: type=1400 audit(1759317537.144:316): avc: denied { open } for pid=6360 comm="syz.3.101" path="/dev/raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.697836][ T5962] usb 2-1: USB disconnect, device number 8 [ 92.715807][ T5962] cypress_m8 2-1:2.18: device disconnected [ 92.753146][ T30] audit: type=1400 audit(1759317537.144:317): avc: denied { ioctl } for pid=6360 comm="syz.3.101" path="/dev/raw-gadget" dev="devtmpfs" ino=819 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.781564][ T30] audit: type=1400 audit(1759317537.224:318): avc: denied { ioctl } for pid=6362 comm="syz.4.102" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 92.883369][ T5892] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 92.989339][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.4.103'. [ 93.049439][ T5892] usb 4-1: unable to get BOS descriptor set [ 93.062427][ T6372] loop2: detected capacity change from 0 to 7 [ 93.066287][ T5892] usb 4-1: config 14 has an invalid interface number: 21 but max is 0 [ 93.072625][ T6372] Dev loop2: unable to read RDB block 7 [ 93.080018][ T5892] usb 4-1: config 14 has no interface number 0 [ 93.082534][ T6372] loop2: AHDI p1 p2 p3 [ 93.088739][ T5892] usb 4-1: config 14 interface 21 has no altsetting 0 [ 93.093235][ T6372] loop2: partition table partially beyond EOD, truncated [ 93.121089][ T6372] loop2: p1 start 1601398130 is beyond EOD, truncated [ 93.129611][ T5892] usb 4-1: string descriptor 0 read error: -22 [ 93.136173][ T5892] usb 4-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 93.145301][ T6372] loop2: p2 start 1702059890 is beyond EOD, truncated [ 93.160395][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.196650][ T5892] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 93.208228][ T5892] usb 4-1: MIDIStreaming interface descriptor not found [ 93.412640][ T6361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.443513][ T6361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.983848][ T24] usb 3-1: USB disconnect, device number 6 [ 94.230891][ T5892] usb 4-1: USB disconnect, device number 4 [ 94.560710][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.107'. [ 94.571337][ T6409] bridge_slave_1: left allmulticast mode [ 94.577510][ T6409] bridge_slave_1: left promiscuous mode [ 94.584966][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.633448][ T6409] bridge_slave_0: left allmulticast mode [ 94.639176][ T6409] bridge_slave_0: left promiscuous mode [ 94.652947][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.905208][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.214534][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.265135][ T24] usb 1-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 95.315748][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.414825][ T30] audit: type=1400 audit(1759317539.934:319): avc: denied { create } for pid=6419 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.438376][ T24] usb 1-1: config 0 descriptor?? [ 95.453139][ T6421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.112'. [ 95.482047][ T6421] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 95.722819][ T5878] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 96.306004][ T5878] usb 4-1: device descriptor read/64, error -71 [ 96.424672][ T6438] ======================================================= [ 96.424672][ T6438] WARNING: The mand mount option has been deprecated and [ 96.424672][ T6438] and is ignored by this kernel. Remove the mand [ 96.424672][ T6438] option from the mount to silence this warning. [ 96.424672][ T6438] ======================================================= [ 96.460524][ T6438] tmpfs: Bad value for 'mpol' [ 96.662832][ T5878] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.192783][ T5878] usb 4-1: device descriptor read/64, error -71 [ 97.317516][ T5878] usb usb4-port1: attempt power cycle [ 97.350959][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 97.365448][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 97.367344][ T5831] Bluetooth: hci1: command tx timeout [ 97.399206][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 97.399219][ T30] audit: type=1400 audit(1759317541.924:321): avc: denied { setopt } for pid=6450 comm="syz.0.117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.425956][ T24] usb 1-1: USB disconnect, device number 3 [ 97.703267][ T5878] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 97.723525][ T5878] usb 4-1: device descriptor read/8, error -71 [ 97.964892][ T30] audit: type=1400 audit(1759317542.494:322): avc: denied { getopt } for pid=6462 comm="syz.4.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.984699][ T5878] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 98.023334][ T5878] usb 4-1: device descriptor read/8, error -71 [ 98.066997][ T6465] netlink: 'syz.4.119': attribute type 1 has an invalid length. [ 98.133045][ T5878] usb usb4-port1: unable to enumerate USB device [ 98.506735][ T6471] tipc: Started in network mode [ 98.524772][ T6471] tipc: Node identity 323d968fb9ad, cluster identity 4711 [ 98.532074][ T6471] tipc: Enabled bearer , priority 0 [ 98.564621][ T6477] syzkaller0: entered promiscuous mode [ 98.582018][ T6477] syzkaller0: entered allmulticast mode [ 98.591501][ T6476] misc userio: No port type given on /dev/userio [ 98.621554][ T30] audit: type=1400 audit(1759317543.144:323): avc: denied { mount } for pid=6470 comm="syz.0.122" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 98.664570][ T6471] netlink: 2 bytes leftover after parsing attributes in process `syz.0.122'. [ 98.680976][ T6471] tipc: Resetting bearer [ 98.759772][ T6470] tipc: Resetting bearer [ 98.791447][ T6470] tipc: Disabling bearer [ 98.803007][ T5878] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 98.889512][ T6485] macvtap0: entered promiscuous mode [ 98.923903][ T6485] macvtap0: left promiscuous mode [ 98.938694][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'. [ 98.974290][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.184719][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.386887][ T30] audit: type=1400 audit(1759317543.744:324): avc: denied { block_suspend } for pid=6488 comm="syz.4.128" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.433225][ T24] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.462959][ T5892] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 99.476239][ T5878] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 99.494596][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.550547][ T5878] usb 2-1: config 0 descriptor?? [ 99.623221][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 99.630611][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.648875][ T5892] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 99.689779][ T24] usb 1-1: config 0 has an invalid interface number: 145 but max is 0 [ 99.721797][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.735221][ T30] audit: type=1400 audit(1759317544.244:325): avc: denied { read write } for pid=6500 comm="syz.2.130" name="sg0" dev="devtmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.768947][ T24] usb 1-1: config 0 has no interface number 0 [ 100.085332][ T30] audit: type=1400 audit(1759317544.244:326): avc: denied { open } for pid=6500 comm="syz.2.130" path="/dev/sg0" dev="devtmpfs" ino=766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 100.112596][ T5892] usb 4-1: config 0 descriptor?? [ 100.121957][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 100.150375][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.272686][ T5878] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 100.285226][ T5878] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 100.299100][ T5878] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 100.306544][ T24] usb 1-1: Product: syz [ 100.310761][ T24] usb 1-1: Manufacturer: syz [ 100.324841][ T5878] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 100.385624][ T6507] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.393083][ T6507] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.449579][ T5878] hid-steam 0003:28DE:1142.0002: unknown main item tag 0x0 [ 100.456862][ T24] usb 1-1: SerialNumber: syz [ 100.478260][ T6509] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 100.487834][ T6509] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 100.496054][ T24] usb 1-1: config 0 descriptor?? [ 100.505045][ T24] hub 1-1:0.145: bad descriptor, ignoring hub [ 100.513294][ T30] audit: type=1400 audit(1759317545.014:327): avc: denied { firmware_load } for pid=6508 comm="syz.4.132" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 100.538746][ T5878] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 100.675610][ T24] hub 1-1:0.145: probe with driver hub failed with error -5 [ 100.701979][ T30] audit: type=1400 audit(1759317545.114:328): avc: denied { read write } for pid=6469 comm="syz.1.121" name="rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 100.774507][ T24] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.145/input/input6 [ 100.860945][ T6507] bridge_slave_1: left allmulticast mode [ 100.867205][ T6507] bridge_slave_1: left promiscuous mode [ 100.874823][ T6507] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.964535][ T24] usb 1-1: USB disconnect, device number 4 [ 100.974620][ T6507] bridge_slave_0: left allmulticast mode [ 100.981047][ T6507] bridge_slave_0: left promiscuous mode [ 100.987844][ T6507] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.089852][ T30] audit: type=1400 audit(1759317545.114:329): avc: denied { open } for pid=6469 comm="syz.1.121" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 101.589086][ T30] audit: type=1400 audit(1759317546.114:330): avc: denied { write } for pid=6523 comm="syz.0.133" name="file0" dev="tmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 102.202270][ T5892] usbhid 4-1:0.0: can't add hid device: -71 [ 102.208547][ T5892] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 102.341114][ T5892] usb 4-1: USB disconnect, device number 9 [ 102.347058][ T5962] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 102.523951][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 102.523962][ T30] audit: type=1400 audit(1759317547.044:333): avc: denied { map } for pid=6541 comm="syz.4.135" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 102.566274][ T5962] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 102.582518][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.603904][ T5962] usb 1-1: config 0 descriptor?? [ 102.627183][ T5954] usb 2-1: USB disconnect, device number 9 [ 102.647837][ T6547] only policy match revision 0 supported [ 102.647851][ T6547] unable to load match [ 102.727072][ T30] audit: type=1400 audit(1759317547.254:334): avc: denied { read } for pid=6546 comm="syz.2.137" name="fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 102.757008][ T30] audit: type=1400 audit(1759317547.254:335): avc: denied { open } for pid=6546 comm="syz.2.137" path="/dev/fb0" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 102.792487][ T30] audit: type=1400 audit(1759317547.304:336): avc: denied { sys_module } for pid=6546 comm="syz.2.137" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 102.840697][ T30] audit: type=1400 audit(1759317547.354:337): avc: denied { create } for pid=6552 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.869210][ T30] audit: type=1400 audit(1759317547.354:338): avc: denied { connect } for pid=6552 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.889992][ T30] audit: type=1400 audit(1759317547.364:339): avc: denied { write } for pid=6552 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 102.913295][ T30] audit: type=1400 audit(1759317547.364:340): avc: denied { create } for pid=6552 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.940655][ T30] audit: type=1400 audit(1759317547.384:341): avc: denied { read } for pid=6552 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.016258][ T30] audit: type=1400 audit(1759317547.444:342): avc: denied { write } for pid=6552 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.435078][ T6570] FAULT_INJECTION: forcing a failure. [ 103.435078][ T6570] name failslab, interval 1, probability 0, space 0, times 0 [ 103.447968][ T6570] CPU: 0 UID: 0 PID: 6570 Comm: syz.4.141 Not tainted syzkaller #0 PREEMPT(full) [ 103.447991][ T6570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 103.448000][ T6570] Call Trace: [ 103.448006][ T6570] [ 103.448012][ T6570] dump_stack_lvl+0x16c/0x1f0 [ 103.448040][ T6570] should_fail_ex+0x512/0x640 [ 103.448065][ T6570] should_failslab+0xc2/0x120 [ 103.448081][ T6570] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 103.448106][ T6570] ? skb_clone+0x190/0x3f0 [ 103.448132][ T6570] skb_clone+0x190/0x3f0 [ 103.448153][ T6570] pfkey_broadcast_one+0xb9/0x380 [ 103.448177][ T6570] pfkey_broadcast+0x1f5/0x460 [ 103.448203][ T6570] pfkey_send_acquire+0xf17/0x2670 [ 103.448238][ T6570] km_query+0xb1/0x260 [ 103.448260][ T6570] xfrm_state_find+0x3ec1/0x86a0 [ 103.448298][ T6570] ? __pfx_xfrm_state_find+0x10/0x10 [ 103.448324][ T6570] ? finish_task_switch.isra.0+0x221/0xc10 [ 103.448352][ T6570] ? rcu_is_watching+0x12/0xc0 [ 103.448377][ T6570] ? __schedule+0x11a3/0x5de0 [ 103.448402][ T6570] xfrm_resolve_and_create_bundle+0x4cd/0x3740 [ 103.448446][ T6570] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 103.448472][ T6570] ? rcu_is_watching+0x12/0xc0 [ 103.448492][ T6570] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.448511][ T6570] ? lockdep_hardirqs_on+0x7c/0x110 [ 103.448532][ T6570] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 103.448551][ T6570] ? rcu_preempt_deferred_qs_irqrestore+0x500/0xbc0 [ 103.448578][ T6570] ? __rcu_read_unlock+0x2bc/0x550 [ 103.448609][ T6570] ? rcu_is_watching+0x12/0xc0 [ 103.448630][ T6570] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 103.448648][ T6570] ? xfrm_expand_policies.constprop.0+0x252/0x6a0 [ 103.448687][ T6570] xfrm_lookup_with_ifid+0x2a0/0x1e40 [ 103.448717][ T6570] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 103.448741][ T6570] ? __rcu_read_unlock+0x2bc/0x550 [ 103.448761][ T6570] ? ip_route_output_key_hash+0x16b/0x2e0 [ 103.448791][ T6570] xfrm_lookup_route+0x3b/0x200 [ 103.448817][ T6570] ip_route_output_flow+0x11e/0x150 [ 103.448837][ T6570] udp_sendmsg+0x1af9/0x2870 [ 103.448862][ T6570] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 103.448887][ T6570] ? avc_has_perm_noaudit+0x22d/0x3b0 [ 103.448910][ T6570] ? __pfx_udp_sendmsg+0x10/0x10 [ 103.448952][ T6570] ? rcu_is_watching+0x12/0xc0 [ 103.448974][ T6570] ? irqentry_exit+0x3b/0x90 [ 103.448993][ T6570] ? lockdep_hardirqs_on+0x7c/0x110 [ 103.449022][ T6570] ? inet_sendmsg+0x18/0x140 [ 103.449038][ T6570] ? __pfx_udp_sendmsg+0x10/0x10 [ 103.449060][ T6570] inet_sendmsg+0x105/0x140 [ 103.449077][ T6570] ____sys_sendmsg+0x973/0xc70 [ 103.449104][ T6570] ? copy_msghdr_from_user+0x10a/0x160 [ 103.449124][ T6570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.449154][ T6570] ? __pfx__kstrtoull+0x10/0x10 [ 103.449184][ T6570] ___sys_sendmsg+0x134/0x1d0 [ 103.449206][ T6570] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.449239][ T6570] ? find_held_lock+0x2b/0x80 [ 103.449281][ T6570] __sys_sendmmsg+0x200/0x420 [ 103.449306][ T6570] ? __pfx___sys_sendmmsg+0x10/0x10 [ 103.449345][ T6570] ? fput+0x9b/0xd0 [ 103.449365][ T6570] ? ksys_write+0x1ac/0x250 [ 103.449395][ T6570] __x64_sys_sendmmsg+0x9c/0x100 [ 103.449415][ T6570] ? lockdep_hardirqs_on+0x7c/0x110 [ 103.449435][ T6570] do_syscall_64+0xcd/0x4e0 [ 103.449458][ T6570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.449475][ T6570] RIP: 0033:0x7ff89798eec9 [ 103.449489][ T6570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.449505][ T6570] RSP: 002b:00007ff895bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 103.449521][ T6570] RAX: ffffffffffffffda RBX: 00007ff897be6180 RCX: 00007ff89798eec9 [ 103.449531][ T6570] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000005 [ 103.449541][ T6570] RBP: 00007ff895bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 103.449550][ T6570] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 103.449559][ T6570] R13: 00007ff897be6218 R14: 00007ff897be6180 R15: 00007fffc51a8aa8 [ 103.449584][ T6570] [ 105.026590][ T6576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.098477][ T6576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.143294][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 105.271059][ T6601] FAULT_INJECTION: forcing a failure. [ 105.271059][ T6601] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.319301][ T6601] CPU: 1 UID: 0 PID: 6601 Comm: syz.4.146 Not tainted syzkaller #0 PREEMPT(full) [ 105.319325][ T6601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 105.319334][ T6601] Call Trace: [ 105.319339][ T6601] [ 105.319346][ T6601] dump_stack_lvl+0x16c/0x1f0 [ 105.319372][ T6601] should_fail_ex+0x512/0x640 [ 105.319397][ T6601] _copy_to_user+0x32/0xd0 [ 105.319424][ T6601] simple_read_from_buffer+0xcb/0x170 [ 105.319451][ T6601] proc_fail_nth_read+0x197/0x240 [ 105.319468][ T6601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.319487][ T6601] ? rw_verify_area+0xcf/0x6c0 [ 105.319506][ T6601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.319523][ T6601] vfs_read+0x1e4/0xcf0 [ 105.319550][ T6601] ? __pfx___mutex_lock+0x10/0x10 [ 105.319572][ T6601] ? __pfx_vfs_read+0x10/0x10 [ 105.319600][ T6601] ? __fget_files+0x20e/0x3c0 [ 105.319632][ T6601] ksys_read+0x12a/0x250 [ 105.319655][ T6601] ? __pfx_ksys_read+0x10/0x10 [ 105.319685][ T6601] do_syscall_64+0xcd/0x4e0 [ 105.319708][ T6601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.319726][ T6601] RIP: 0033:0x7ff89798d8dc [ 105.319740][ T6601] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 105.319754][ T6601] RSP: 002b:00007ff898765030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 105.319770][ T6601] RAX: ffffffffffffffda RBX: 00007ff897be5fa0 RCX: 00007ff89798d8dc [ 105.319780][ T6601] RDX: 000000000000000f RSI: 00007ff8987650a0 RDI: 0000000000000003 [ 105.319789][ T6601] RBP: 00007ff898765090 R08: 0000000000000000 R09: 0000000000000002 [ 105.319798][ T6601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.319807][ T6601] R13: 00007ff897be6038 R14: 00007ff897be5fa0 R15: 00007fffc51a8aa8 [ 105.319836][ T6601] [ 105.813554][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.823844][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 105.850308][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 105.930987][ T6614] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 105.957163][ T6614] CIFS mount error: No usable UNC path provided in device string! [ 105.957163][ T6614] [ 105.967795][ T6614] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 105.986114][ T6614] binder: 6606:6614 ioctl c0046209 9999999999999999 returned -22 [ 106.306469][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 106.315608][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.323917][ T24] usb 2-1: Product: syz [ 106.328084][ T24] usb 2-1: Manufacturer: syz [ 106.332656][ T24] usb 2-1: SerialNumber: syz [ 106.355741][ T24] usb 2-1: config 0 descriptor?? [ 106.365724][ T24] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -22 [ 106.635194][ T6623] netlink: 32 bytes leftover after parsing attributes in process `syz.2.152'. [ 106.811511][ T6629] misc userio: No port type given on /dev/userio [ 107.048387][ T6630] autofs: Bad value for 'fd' [ 107.627221][ T6636] EXT4-fs (nbd2): unable to read superblock [ 108.042456][ T5962] usb 1-1: Cannot read MAC address [ 108.048090][ T5962] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 108.138313][ T10] usb 2-1: USB disconnect, device number 10 [ 108.556407][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 108.556421][ T30] audit: type=1400 audit(1759317553.014:345): avc: denied { read } for pid=6639 comm="syz.1.157" name="usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.585917][ T6645] hub 9-0:1.0: USB hub found [ 108.592829][ T6645] hub 9-0:1.0: 1 port detected [ 108.697052][ T30] audit: type=1400 audit(1759317553.024:346): avc: denied { open } for pid=6639 comm="syz.1.157" path="/dev/usbmon7" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 108.793482][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 108.820091][ T30] audit: type=1400 audit(1759317553.034:347): avc: denied { ioctl } for pid=6639 comm="syz.1.157" path="/dev/usbmon7" dev="devtmpfs" ino=736 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 110.603565][ T30] audit: type=1400 audit(1759317555.124:348): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 110.816970][ T30] audit: type=1400 audit(1759317555.344:349): avc: denied { ioctl } for pid=6678 comm="syz.4.165" path="/dev/sg0" dev="devtmpfs" ino=766 ioctlcmd=0x5380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 111.331895][ T6688] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.339411][ T6688] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.031893][ T30] audit: type=1400 audit(1759317556.554:350): avc: denied { create } for pid=6697 comm="syz.1.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 112.542834][ T30] audit: type=1400 audit(1759317556.804:351): avc: denied { sys_admin } for pid=6697 comm="syz.1.170" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 112.582872][ T24] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 112.712778][ T24] usb 3-1: device descriptor read/64, error -71 [ 112.814849][ T6705] netlink: 'syz.3.172': attribute type 1 has an invalid length. [ 112.855462][ T6705] netlink: 'syz.3.172': attribute type 2 has an invalid length. [ 113.048112][ T30] audit: type=1400 audit(1759317557.574:352): avc: denied { ioctl } for pid=6704 comm="syz.3.172" path="socket:[11987]" dev="sockfs" ino=11987 ioctlcmd=0x7ab scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.073690][ C1] vkms_vblank_simulate: vblank timer overrun [ 113.124114][ T24] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 113.211488][ T6713] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 113.241864][ T6713] audit: out of memory in audit_log_start [ 113.282855][ T24] usb 3-1: device descriptor read/64, error -71 [ 113.315041][ T6718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.176'. [ 113.322684][ T5962] IPVS: starting estimator thread 0... [ 113.382488][ T6722] netlink: 24 bytes leftover after parsing attributes in process `syz.4.176'. [ 113.412812][ T6719] IPVS: using max 44 ests per chain, 105600 per kthread [ 113.417012][ T24] usb usb3-port1: attempt power cycle [ 113.491186][ T6718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.500200][ T6718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.604595][ T6718] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 113.614912][ T1076] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.615468][ T1076] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.615578][ T1076] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.616089][ T1076] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.809521][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 113.809535][ T30] audit: type=1400 audit(1759317558.334:354): avc: denied { remount } for pid=6710 comm="syz.3.175" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 113.832972][ T24] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 113.860249][ T24] usb 3-1: device descriptor read/8, error -71 [ 114.094021][ T24] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 114.112571][ T30] audit: type=1400 audit(1759317558.634:355): avc: denied { append } for pid=6730 comm="syz.3.179" name="cec0" dev="devtmpfs" ino=947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 114.123322][ T24] usb 3-1: device descriptor read/8, error -71 [ 114.145334][ T30] audit: type=1400 audit(1759317558.664:356): avc: denied { create } for pid=6730 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.184266][ T6731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 114.200395][ T30] audit: type=1400 audit(1759317558.674:357): avc: denied { getopt } for pid=6730 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.222235][ T30] audit: type=1400 audit(1759317558.674:358): avc: denied { connect } for pid=6730 comm="syz.3.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.253796][ T24] usb usb3-port1: unable to enumerate USB device [ 115.648747][ T5892] Process accounting resumed [ 115.766575][ T30] audit: type=1400 audit(1759317560.084:359): avc: denied { unmount } for pid=6746 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 116.312780][ T30] audit: type=1400 audit(1759317560.354:360): avc: denied { mount } for pid=6749 comm="syz.3.182" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 116.418982][ T30] audit: type=1400 audit(1759317560.944:361): avc: denied { kexec_image_load } for pid=6763 comm="syz.3.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 116.750510][ T6767] netlink: 'syz.3.186': attribute type 1 has an invalid length. [ 117.047514][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 117.706464][ T6760] netlink: 20 bytes leftover after parsing attributes in process `syz.2.184'. [ 118.192503][ T6779] netlink: 'syz.2.189': attribute type 5 has an invalid length. [ 118.379921][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.392741][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.595043][ T5892] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 118.934358][ T5892] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 118.942434][ T5892] usb 5-1: config 1 has no interface number 0 [ 118.950712][ T5892] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 118.972153][ T30] audit: type=1400 audit(1759317563.494:362): avc: denied { ioctl } for pid=6789 comm="syz.2.192" path="socket:[12460]" dev="sockfs" ino=12460 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 118.997059][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.316025][ T5892] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 119.381002][ T5892] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 119.542866][ T5892] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.546794][ T6798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.193'. [ 119.556170][ T5892] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 119.571779][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.590532][ T5892] usb 5-1: Product: syz [ 119.600730][ T5892] usb 5-1: Manufacturer: syz [ 119.615947][ T5892] usb 5-1: SerialNumber: syz [ 119.747548][ T6775] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 119.762995][ T6775] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 119.998821][ T6775] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 120.026102][ T6775] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 120.111435][ T6807] Invalid source name [ 120.135442][ T6807] UBIFS error (pid: 6807): cannot open "usrquota", error -22 [ 120.246679][ T6814] virtio-fs: tag not found [ 120.403010][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 120.506273][ T5892] sierra_net 5-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 120.565934][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.589808][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 120.641226][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.667066][ T10] usb 2-1: config 0 descriptor?? [ 120.681587][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 120.897138][ T6823] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 120.950237][ T5892] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 121.130494][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 121.203330][ T5892] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 121.204638][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 121.218381][ T5892] sierra_net 5-1:1.7 wwan0: Submit SYNC failed -71 [ 121.242136][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 121.264303][ T5892] sierra_net 5-1:1.7 wwan0: Send SYNC failed, status -71 [ 121.294320][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 121.301283][ T5892] usb 5-1: USB disconnect, device number 5 [ 121.337248][ T5892] sierra_net 5-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.4-1, Sierra Wireless USB-to-WWAN Modem [ 121.524807][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 121.637575][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 121.690002][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 121.713493][ T5892] sierra_net 5-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 121.725030][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 121.779943][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 121.808612][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 121.825270][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 121.858054][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 121.895778][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 121.927389][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 121.935613][ T30] audit: type=1400 audit(1759317566.464:363): avc: denied { ioctl } for pid=6835 comm="syz.2.200" path="socket:[12527]" dev="sockfs" ino=12527 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 121.981875][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 122.007794][ T10] pwc: Registered as video103. [ 122.045467][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 122.150228][ T10] usb 2-1: USB disconnect, device number 11 [ 123.093699][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 123.152783][ T5878] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 123.295649][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 123.304114][ T10] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 123.356287][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 123.371578][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.393909][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.412988][ T10] usb 2-1: config 220 has no interface number 2 [ 123.422762][ T5878] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 123.432966][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 123.466425][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.482854][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 123.503242][ T5878] usb 3-1: config 0 descriptor?? [ 123.522746][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 123.550629][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 123.590594][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 123.607333][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.633180][ T10] usb 2-1: Product: syz [ 123.637372][ T10] usb 2-1: Manufacturer: syz [ 123.646841][ T10] usb 2-1: SerialNumber: syz [ 124.044991][ T5878] hkems 0003:2006:0118.0003: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.2-1/input0 [ 124.058469][ T30] audit: type=1400 audit(1759317568.584:364): avc: denied { create } for pid=6842 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 124.078661][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.102800][ T5878] hkems 0003:2006:0118.0003: no inputs found [ 124.218609][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'. [ 124.268370][ T5878] hkems 0003:2006:0118.0003: force feedback init failed [ 124.401599][ T30] audit: type=1400 audit(1759317568.684:365): avc: denied { bind } for pid=6842 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.554023][ T10] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 124.571671][ T10] usb 2-1: No valid video chain found. [ 124.638385][ T10] usb 2-1: selecting invalid altsetting 0 [ 124.676152][ T30] audit: type=1400 audit(1759317568.764:366): avc: denied { setopt } for pid=6842 comm="syz.1.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.681312][ T10] usb 2-1: selecting invalid altsetting 0 [ 124.820258][ T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 125.102047][ T10] usb 2-1: USB disconnect, device number 12 [ 125.452884][ T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 125.612873][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 125.631743][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.642611][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.679283][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 125.688671][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.704500][ T10] usb 2-1: Product: syz [ 125.721107][ T10] usb 2-1: Manufacturer: syz [ 125.738996][ T10] usb 2-1: SerialNumber: syz [ 125.758583][ T10] usb 2-1: config 0 descriptor?? [ 125.763710][ T5878] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 125.785280][ T10] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 125.791470][ T10] gspca_stv06xx: st6422 sensor detected [ 125.917787][ T5878] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 125.930524][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.954066][ T5878] usb 4-1: Product: syz [ 125.958220][ T5878] usb 4-1: Manufacturer: syz [ 126.038105][ T5878] usb 4-1: SerialNumber: syz [ 126.055745][ T5878] usb 4-1: config 0 descriptor?? [ 126.092800][ T5954] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 126.296320][ T5892] usb 3-1: USB disconnect, device number 11 [ 126.354881][ T30] audit: type=1400 audit(1759317570.884:367): avc: denied { mount } for pid=6879 comm="syz.0.209" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 126.376574][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.407215][ T6881] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 126.422935][ T6881] overlay: filesystem on ./bus not supported as upperdir [ 126.433916][ T5878] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 126.465192][ T5954] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 126.475772][ T5954] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.483630][ T6881] overlay: filesystem on ./bus not supported as upperdir [ 126.509371][ T6881] overlay: filesystem on ./bus not supported as upperdir [ 126.521417][ T30] audit: type=1400 audit(1759317571.034:368): avc: denied { mounton } for pid=6879 comm="syz.0.209" path="/38/bus/bus" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 126.543744][ C0] vkms_vblank_simulate: vblank timer overrun [ 126.592875][ T5954] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.603231][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 126.611822][ T5954] usb 5-1: Product: syz [ 126.616082][ T5954] usb 5-1: Manufacturer: syz [ 126.620828][ T5954] usb 5-1: SerialNumber: syz [ 126.628585][ T5954] usb 5-1: config 0 descriptor?? [ 126.647584][ T5954] usb 5-1: selecting invalid altsetting 0 [ 126.895771][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.210'. [ 126.969642][ T5892] usb 5-1: USB disconnect, device number 6 [ 127.186549][ T1214] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 127.291890][ T30] audit: type=1400 audit(1759317571.814:369): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 127.311702][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.407152][ T1214] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.418479][ T1214] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 127.427738][ T1214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.438683][ T1214] usb 3-1: config 0 descriptor?? [ 127.453967][ T5878] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 127.601557][ T30] audit: type=1400 audit(1759317572.084:370): avc: denied { create } for pid=6891 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 127.692477][ T10] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 127.720080][ T10] usb 2-1: USB disconnect, device number 13 [ 127.844645][ T30] audit: type=1326 audit(1759317572.334:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2a18eec9 code=0x7ffc0000 [ 128.636043][ T910] Process accounting resumed [ 128.715458][ T5878] usb 4-1: USB disconnect, device number 10 [ 128.894698][ T30] audit: type=1326 audit(1759317572.334:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7f5a2a18eec9 code=0x7ffc0000 [ 129.130279][ T30] audit: type=1326 audit(1759317572.334:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2a18eec9 code=0x7ffc0000 [ 129.210135][ T6913] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 129.230728][ T6913] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 129.268339][ T30] audit: type=1326 audit(1759317572.334:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5a2a18eec9 code=0x7ffc0000 [ 129.317789][ T6913] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 129.403176][ T6913] UDF-fs: Scanning with blocksize 512 failed [ 129.410464][ T6913] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 129.423498][ T6913] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 129.501747][ T1214] usbhid 3-1:0.0: can't add hid device: -71 [ 129.508283][ T1214] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 129.511737][ T30] audit: type=1326 audit(1759317572.334:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2a18eec9 code=0x7ffc0000 [ 129.607929][ T1214] usb 3-1: USB disconnect, device number 12 [ 129.620164][ T6913] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 129.628296][ T30] audit: type=1326 audit(1759317572.334:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f5a2a18eec9 code=0x7ffc0000 [ 129.639463][ T6913] UDF-fs: Scanning with blocksize 1024 failed [ 129.669244][ T6913] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 129.846575][ T30] audit: type=1326 audit(1759317572.334:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2a18eec9 code=0x7ffc0000 [ 129.865133][ T6913] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 129.872640][ T30] audit: type=1326 audit(1759317572.334:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5a2a18eec9 code=0x7ffc0000 [ 129.920322][ T6925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.935324][ T6925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.955985][ T6925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.965842][ T6925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.999662][ T30] audit: type=1326 audit(1759317572.334:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a2a18eec9 code=0x7ffc0000 [ 130.022861][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.074309][ T6913] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 130.094570][ T30] audit: type=1326 audit(1759317572.334:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5a2a18eec9 code=0x7ffc0000 [ 130.095710][ T6913] UDF-fs: Scanning with blocksize 2048 failed [ 130.168341][ T6913] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 130.197900][ T6913] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 130.203221][ T30] audit: type=1326 audit(1759317572.334:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5a2a18ef03 code=0x7ffc0000 [ 130.270571][ T6913] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 130.295708][ T6913] UDF-fs: Scanning with blocksize 4096 failed [ 130.295720][ T30] audit: type=1326 audit(1759317572.334:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6891 comm="syz.0.212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5a2a18ef03 code=0x7ffc0000 [ 130.324776][ C1] vkms_vblank_simulate: vblank timer overrun [ 130.342279][ T6913] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 131.191330][ T5892] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 131.253796][ T910] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 131.390047][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 131.429784][ T910] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 131.440536][ T5892] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 131.463043][ T910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.473546][ T5892] usb 4-1: config 0 has no interface number 0 [ 131.479601][ T5892] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 131.507779][ T910] usb 2-1: config 0 has no interface number 0 [ 131.524787][ T910] usb 2-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 131.542850][ T5892] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 131.562910][ T910] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 131.594852][ T5892] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 131.640001][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.648163][ T910] usb 2-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 131.672330][ T5892] usb 4-1: Product: syz [ 131.676684][ T5892] usb 4-1: Manufacturer: syz [ 131.696089][ T910] usb 2-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 131.705372][ T910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.715542][ T5892] usb 4-1: SerialNumber: syz [ 131.746613][ T910] usb 2-1: Product: syz [ 131.834714][ T6949] FAULT_INJECTION: forcing a failure. [ 131.834714][ T6949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.843732][ T5892] usb 4-1: config 0 descriptor?? [ 131.852962][ T6949] CPU: 0 UID: 0 PID: 6949 Comm: syz.2.225 Not tainted syzkaller #0 PREEMPT(full) [ 131.852984][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 131.852993][ T6949] Call Trace: [ 131.852998][ T6949] [ 131.853004][ T6949] dump_stack_lvl+0x16c/0x1f0 [ 131.853031][ T6949] should_fail_ex+0x512/0x640 [ 131.853057][ T6949] _copy_from_iter+0x29f/0x1720 [ 131.853086][ T6949] ? __pfx__copy_from_iter+0x10/0x10 [ 131.853112][ T6949] ? rcu_is_watching+0x12/0xc0 [ 131.853135][ T6949] ? trace_kmalloc+0x2b/0xd0 [ 131.853152][ T6949] ? __kmalloc_noprof+0x242/0x510 [ 131.853176][ T6949] ? lock_acquire+0x11/0x350 [ 131.853198][ T6949] kernfs_fop_write_iter+0x19a/0x570 [ 131.853228][ T6949] vfs_write+0x7d0/0x11d0 [ 131.853254][ T6949] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 131.853281][ T6949] ? __pfx___mutex_lock+0x10/0x10 [ 131.853304][ T6949] ? __pfx_vfs_write+0x10/0x10 [ 131.853349][ T6949] ksys_write+0x12a/0x250 [ 131.853380][ T6949] ? __pfx_ksys_write+0x10/0x10 [ 131.853412][ T6949] do_syscall_64+0xcd/0x4e0 [ 131.853435][ T6949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.853451][ T6949] RIP: 0033:0x7f901d98eec9 [ 131.853466][ T6949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.853482][ T6949] RSP: 002b:00007f901e8f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.853499][ T6949] RAX: ffffffffffffffda RBX: 00007f901dbe6090 RCX: 00007f901d98eec9 [ 131.853509][ T6949] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000008 [ 131.853519][ T6949] RBP: 00007f901e8f0090 R08: 0000000000000000 R09: 0000000000000000 [ 131.853529][ T6949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.853538][ T6949] R13: 00007f901dbe6128 R14: 00007f901dbe6090 R15: 00007fffc2e60df8 [ 131.853561][ T6949] [ 132.037374][ T910] usb 2-1: Manufacturer: syz [ 132.042053][ T910] usb 2-1: SerialNumber: syz [ 132.085735][ T910] usb 2-1: config 0 descriptor?? [ 132.101263][ T910] HFC-S_USB 2-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 132.326360][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.333130][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.376130][ T6951] binder_alloc: 6931: binder_alloc_buf, no vma [ 132.430247][ T1214] usb 2-1: USB disconnect, device number 14 [ 132.944949][ T5892] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 132.945150][ T6927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.998191][ T5892] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 133.065223][ T5892] usb 4-1: USB disconnect, device number 11 [ 133.372892][ T1214] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 133.875412][ T1214] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.886379][ T1214] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 133.896256][ T1214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.032988][ T1214] usb 2-1: config 0 descriptor?? [ 134.189360][ T1214] pwc: Askey VC010 type 2 USB webcam detected. [ 134.540140][ T6974] syz.2.230 (6974): drop_caches: 2 [ 134.755984][ T1214] pwc: recv_control_msg error -32 req 02 val 2b00 [ 134.763162][ T1214] pwc: recv_control_msg error -32 req 02 val 2700 [ 134.770056][ T1214] pwc: recv_control_msg error -32 req 02 val 2c00 [ 134.782502][ T1214] pwc: recv_control_msg error -32 req 04 val 1000 [ 134.800054][ T1214] pwc: recv_control_msg error -32 req 04 val 1300 [ 134.808987][ T1214] pwc: recv_control_msg error -32 req 04 val 1400 [ 134.863468][ T5892] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 134.898889][ T1214] pwc: recv_control_msg error -32 req 02 val 2000 [ 134.906164][ T1214] pwc: recv_control_msg error -71 req 02 val 2100 [ 134.912850][ T1214] pwc: recv_control_msg error -71 req 04 val 1500 [ 134.921987][ T1214] pwc: recv_control_msg error -71 req 02 val 2500 [ 134.930892][ T1214] pwc: recv_control_msg error -71 req 02 val 2400 [ 134.938533][ T1214] pwc: recv_control_msg error -71 req 02 val 2600 [ 134.946167][ T1214] pwc: recv_control_msg error -71 req 02 val 2900 [ 134.955729][ T1214] pwc: recv_control_msg error -71 req 02 val 2800 [ 134.962642][ T1214] pwc: recv_control_msg error -71 req 04 val 1100 [ 134.972903][ T1214] pwc: recv_control_msg error -71 req 04 val 1200 [ 135.002757][ T910] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 135.010455][ T1214] pwc: Registered as video103. [ 135.021162][ T1214] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 135.049678][ T1214] usb 2-1: USB disconnect, device number 15 [ 135.093158][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 135.194987][ T910] usb 4-1: unable to get BOS descriptor set [ 135.213449][ T6978] IPVS: set_ctl: invalid protocol: 43 172.30.1.5:20003 [ 135.235337][ T910] usb 4-1: config 14 has an invalid interface number: 21 but max is 0 [ 135.247007][ T910] usb 4-1: config 14 has no interface number 0 [ 135.458877][ T910] usb 4-1: config 14 interface 21 has no altsetting 0 [ 135.491256][ T910] usb 4-1: string descriptor 0 read error: -22 [ 135.513821][ T910] usb 4-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 135.631210][ T910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.682534][ T6992] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'. [ 135.759819][ T910] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.781937][ T910] usb 4-1: MIDIStreaming interface descriptor not found [ 135.796424][ T6991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.807610][ T6991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.996553][ T6981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.005330][ T6981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.050174][ T6994] netlink: 36 bytes leftover after parsing attributes in process `syz.1.236'. [ 136.090489][ T5940] usb 4-1: USB disconnect, device number 12 [ 136.726503][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 136.726514][ T30] audit: type=1400 audit(1759317581.254:394): avc: denied { write } for pid=6996 comm="syz.0.238" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 136.806847][ T7005] pim6reg9: entered allmulticast mode [ 137.104505][ T7016] bridge0: port 3(netdevsim0) entered blocking state [ 137.112151][ T7016] bridge0: port 3(netdevsim0) entered disabled state [ 137.119479][ T7016] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 137.130371][ T7016] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 137.138426][ T7016] bridge0: port 3(netdevsim0) entered blocking state [ 137.145230][ T7016] bridge0: port 3(netdevsim0) entered forwarding state [ 137.170811][ T7016] geneve2: entered promiscuous mode [ 137.280186][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.243'. [ 137.326696][ T5892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 137.368154][ T5892] usb 5-1: no configurations [ 137.387182][ T5892] usb 5-1: can't read configurations, error -22 [ 137.611949][ T7022] overlay: Unknown parameter 'dont_appraise' [ 138.016699][ T5878] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 138.282866][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.313046][ T5878] usb 4-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 138.332776][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.383538][ T5878] usb 4-1: config 0 descriptor?? [ 138.433490][ T30] audit: type=1400 audit(1759317582.934:395): avc: denied { read write } for pid=7026 comm="syz.2.245" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 138.456772][ C1] vkms_vblank_simulate: vblank timer overrun [ 138.562043][ T30] audit: type=1400 audit(1759317582.934:396): avc: denied { open } for pid=7026 comm="syz.2.245" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 139.109349][ T30] audit: type=1400 audit(1759317583.634:397): avc: denied { create } for pid=7028 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 139.176033][ T30] audit: type=1400 audit(1759317583.634:398): avc: denied { listen } for pid=7028 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 139.881234][ T7045] support for the xor transformation has been removed. [ 140.150033][ T5878] usbhid 4-1:0.0: can't add hid device: -71 [ 140.171114][ T5878] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 140.211845][ T5878] usb 4-1: USB disconnect, device number 13 [ 140.225986][ T5831] Bluetooth: hci0: unexpected event 0x09 length: 4 > 3 [ 140.398633][ T7059] binder: BINDER_SET_CONTEXT_MGR already set [ 140.417329][ T7059] binder: 7054:7059 ioctl 4018620d 2000000000c0 returned -16 [ 141.174269][ T30] audit: type=1400 audit(1759317585.704:399): avc: denied { listen } for pid=7066 comm="syz.2.255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 141.232096][ T7067] FAULT_INJECTION: forcing a failure. [ 141.232096][ T7067] name failslab, interval 1, probability 0, space 0, times 0 [ 141.275291][ T7067] CPU: 1 UID: 0 PID: 7067 Comm: syz.2.255 Not tainted syzkaller #0 PREEMPT(full) [ 141.275316][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 141.275331][ T7067] Call Trace: [ 141.275336][ T7067] [ 141.275343][ T7067] dump_stack_lvl+0x16c/0x1f0 [ 141.275369][ T7067] should_fail_ex+0x512/0x640 [ 141.275390][ T7067] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 141.275417][ T7067] should_failslab+0xc2/0x120 [ 141.275433][ T7067] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 141.275457][ T7067] ? __d_alloc+0x32/0xae0 [ 141.275477][ T7067] __d_alloc+0x32/0xae0 [ 141.275492][ T7067] ? lockdep_init_map_type+0x5c/0x280 [ 141.275513][ T7067] d_alloc_pseudo+0x1c/0xc0 [ 141.275534][ T7067] alloc_file_pseudo+0xcf/0x230 [ 141.275555][ T7067] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 141.275581][ T7067] sock_alloc_file+0x50/0x210 [ 141.275605][ T7067] do_accept+0x240/0x530 [ 141.275622][ T7067] ? do_raw_spin_lock+0x12c/0x2b0 [ 141.275642][ T7067] ? __pfx_do_accept+0x10/0x10 [ 141.275674][ T7067] __sys_accept4+0x100/0x1c0 [ 141.275691][ T7067] ? __pfx___sys_accept4+0x10/0x10 [ 141.275709][ T7067] ? __pfx_ksys_write+0x10/0x10 [ 141.275737][ T7067] __x64_sys_accept4+0x96/0x100 [ 141.275753][ T7067] ? lockdep_hardirqs_on+0x7c/0x110 [ 141.275774][ T7067] do_syscall_64+0xcd/0x4e0 [ 141.275798][ T7067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.275815][ T7067] RIP: 0033:0x7f901d98eec9 [ 141.275829][ T7067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.275846][ T7067] RSP: 002b:00007f901e911038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 141.275862][ T7067] RAX: ffffffffffffffda RBX: 00007f901dbe5fa0 RCX: 00007f901d98eec9 [ 141.275874][ T7067] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 141.275883][ T7067] RBP: 00007f901e911090 R08: 0000000000000000 R09: 0000000000000000 [ 141.275893][ T7067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.275902][ T7067] R13: 00007f901dbe6038 R14: 00007f901dbe5fa0 R15: 00007fffc2e60df8 [ 141.275925][ T7067] [ 141.483677][ C1] vkms_vblank_simulate: vblank timer overrun [ 141.514194][ T30] audit: type=1400 audit(1759317586.034:400): avc: denied { watch } for pid=7069 comm="syz.3.256" path="/50/file0" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 141.736536][ T7071] IPVS: length: 90 != 112 [ 142.413676][ T7080] netlink: 44 bytes leftover after parsing attributes in process `syz.0.259'. [ 142.692851][ T5878] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 142.764157][ T7088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.793978][ T7088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.917292][ T5878] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.953584][ T5878] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 142.995033][ T5878] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=c3.cf [ 143.049227][ T5878] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.084759][ T5878] usb 3-1: Product: syz [ 143.114785][ T5878] usb 3-1: Manufacturer: syz [ 143.119407][ T5878] usb 3-1: SerialNumber: syz [ 143.182178][ T5878] usb 3-1: config 0 descriptor?? [ 143.402961][ T5954] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 143.692090][ T5878] usb 3-1: USB disconnect, device number 13 [ 143.757432][ T5954] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.770689][ T5954] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 143.780963][ T5954] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 143.790396][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 143.798987][ T5954] usb 4-1: SerialNumber: syz [ 143.827041][ T30] audit: type=1400 audit(1759317588.354:401): avc: denied { create } for pid=7097 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 143.938013][ T30] audit: type=1400 audit(1759317588.464:402): avc: denied { getopt } for pid=7097 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 144.051914][ T5954] usb 4-1: 0:2 : does not exist [ 144.261350][ T7101] capability: warning: `syz.1.265' uses deprecated v2 capabilities in a way that may be insecure [ 144.287578][ T5954] usb 4-1: unit 5 not found! [ 144.296404][ T7101] binder: 7100:7101 ioctl c0306201 2000000003c0 returned -14 [ 144.362419][ T5954] usb 4-1: USB disconnect, device number 14 [ 144.831961][ T5998] udevd[5998]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.242144][ T5892] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 145.292753][ T5940] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 145.307737][ T7116] netlink: 24 bytes leftover after parsing attributes in process `syz.1.268'. [ 145.412785][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 145.419157][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.430220][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.440074][ T5892] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 145.449134][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.457217][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 145.474055][ T5892] usb 5-1: config 0 descriptor?? [ 145.522838][ T5954] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 145.600802][ T30] audit: type=1400 audit(1759317590.124:403): avc: denied { read } for pid=7117 comm="syz.1.270" name="loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 145.625741][ T30] audit: type=1400 audit(1759317590.124:404): avc: denied { open } for pid=7117 comm="syz.1.270" path="/dev/loop-control" dev="devtmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 145.674846][ T5954] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 145.682523][ T5954] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 145.742336][ T5954] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.754362][ T5954] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 145.765830][ T5954] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 145.779342][ T5954] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 145.786776][ T5954] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 146.105867][ T7121] netlink: 'syz.1.270': attribute type 10 has an invalid length. [ 146.125561][ T7121] team0: Device hsr_slave_0 failed to register rx_handler [ 146.164687][ T5954] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.180149][ T5954] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 146.191296][ T30] audit: type=1400 audit(1759317590.384:405): avc: denied { ioctl } for pid=7117 comm="syz.1.270" path="/dev/loop-control" dev="devtmpfs" ino=645 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 146.247663][ T5954] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 146.362652][ T5954] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 146.372051][ T5954] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 146.384212][ T5954] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 146.396365][ T5954] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 146.411547][ T5954] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 146.937658][ T30] audit: type=1400 audit(1759317591.054:406): avc: denied { create } for pid=7108 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 147.041056][ T30] audit: type=1400 audit(1759317591.054:407): avc: denied { getopt } for pid=7108 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 147.074191][ T30] audit: type=1400 audit(1759317591.054:408): avc: denied { write } for pid=7108 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 147.074293][ T5954] usb 4-1: string descriptor 0 read error: -22 [ 147.103385][ T5954] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 147.115805][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.146929][ T5954] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 147.352828][ T910] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 147.414640][ T5954] usb 4-1: USB disconnect, device number 15 [ 147.465758][ T5940] usb 3-1: unable to get BOS descriptor or descriptor too short [ 147.479361][ T5940] usb 3-1: no configurations [ 147.488365][ T5940] usb 3-1: can't read configurations, error -22 [ 147.534457][ T910] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 147.578635][ T910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.597307][ T910] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 147.622285][ T910] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 147.651451][ T910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.662141][ T910] usb 2-1: config 0 descriptor?? [ 147.669676][ T30] audit: type=1400 audit(1759317592.194:409): avc: denied { create } for pid=7133 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 147.692367][ T30] audit: type=1400 audit(1759317592.194:410): avc: denied { ioctl } for pid=7133 comm="syz.2.273" path="socket:[13717]" dev="sockfs" ino=13717 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 148.032311][ T5892] usbhid 5-1:0.0: can't add hid device: -71 [ 148.130340][ T910] holtek_kbd 0003:04D9:A055.0004: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.1-1/input0 [ 148.144170][ T5892] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 148.165180][ T5892] usb 5-1: USB disconnect, device number 9 [ 148.224932][ T7129] netlink: 'syz.1.271': attribute type 1 has an invalid length. [ 148.346571][ T7129] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 148.440760][ T1214] usb 2-1: USB disconnect, device number 16 [ 148.626921][ T7153] netlink: 20 bytes leftover after parsing attributes in process `syz.3.275'. [ 148.637469][ T7153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 148.801616][ T7154] FAULT_INJECTION: forcing a failure. [ 148.801616][ T7154] name fail_futex, interval 1, probability 0, space 0, times 1 [ 148.814460][ T7154] CPU: 1 UID: 0 PID: 7154 Comm: syz.1.276 Not tainted syzkaller #0 PREEMPT(full) [ 148.814483][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 148.814497][ T7154] Call Trace: [ 148.814504][ T7154] [ 148.814510][ T7154] dump_stack_lvl+0x16c/0x1f0 [ 148.814538][ T7154] should_fail_ex+0x512/0x640 [ 148.814561][ T7154] get_futex_key+0x293/0x1560 [ 148.814592][ T7154] ? __pfx_get_futex_key+0x10/0x10 [ 148.814617][ T7154] ? __mutex_trylock_common+0xe9/0x250 [ 148.814642][ T7154] futex_wake+0xea/0x530 [ 148.814665][ T7154] ? __pfx_futex_wake+0x10/0x10 [ 148.814696][ T7154] do_futex+0x1e3/0x350 [ 148.814714][ T7154] ? __pfx_do_futex+0x10/0x10 [ 148.814729][ T7154] ? __might_fault+0xe3/0x190 [ 148.814760][ T7154] mm_release+0x24e/0x300 [ 148.814784][ T7154] do_exit+0x68e/0x2bf0 [ 148.814799][ T7154] ? __fsnotify_parent+0x24b/0xc40 [ 148.814829][ T7154] ? __pfx_do_exit+0x10/0x10 [ 148.814844][ T7154] ? do_raw_spin_lock+0x12c/0x2b0 [ 148.814864][ T7154] ? find_held_lock+0x2b/0x80 [ 148.814890][ T7154] do_group_exit+0xd3/0x2a0 [ 148.814908][ T7154] get_signal+0x2671/0x26d0 [ 148.814933][ T7154] ? vfs_read+0x487/0xcf0 [ 148.814961][ T7154] ? __pfx_get_signal+0x10/0x10 [ 148.814983][ T7154] ? find_held_lock+0x2b/0x80 [ 148.815006][ T7154] ? __fget_files+0x204/0x3c0 [ 148.815034][ T7154] arch_do_signal_or_restart+0x8f/0x7c0 [ 148.815058][ T7154] ? __fget_files+0x20e/0x3c0 [ 148.815082][ T7154] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 148.815123][ T7154] ? ksys_read+0x1ac/0x250 [ 148.815145][ T7154] ? __pfx_ksys_read+0x10/0x10 [ 148.815173][ T7154] exit_to_user_mode_loop+0x7a/0x100 [ 148.815194][ T7154] do_syscall_64+0x419/0x4e0 [ 148.815218][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.815234][ T7154] RIP: 0033:0x7f30fdf8eec9 [ 148.815248][ T7154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.815264][ T7154] RSP: 002b:00007f30fed92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 148.815281][ T7154] RAX: 0000000000000030 RBX: 00007f30fe1e6180 RCX: 00007f30fdf8eec9 [ 148.815291][ T7154] RDX: 00000000000000a8 RSI: 0000200000000200 RDI: 0000000000000008 [ 148.815301][ T7154] RBP: 00007f30fed92090 R08: 0000000000000000 R09: 0000000000000000 [ 148.815311][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.815321][ T7154] R13: 00007f30fe1e6218 R14: 00007f30fe1e6180 R15: 00007ffe5ab42918 [ 148.815344][ T7154] [ 149.348342][ T30] audit: type=1400 audit(1759317593.704:411): avc: denied { read } for pid=7157 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.374384][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 149.450648][ T30] audit: type=1400 audit(1759317593.704:412): avc: denied { read } for pid=7157 comm="syz.0.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 149.454504][ T7165] netlink: 'syz.2.277': attribute type 11 has an invalid length. [ 149.497945][ T7165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.277'. [ 149.542064][ T7166] overlayfs: failed to clone upperpath [ 150.978441][ T7181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.987471][ T7181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.334246][ T7190] bridge0: port 3(netdevsim0) entered disabled state [ 151.341001][ T7190] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.348404][ T7190] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.851973][ T30] audit: type=1400 audit(1759317596.364:413): avc: denied { bind } for pid=7194 comm="syz.4.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 153.004665][ T30] audit: type=1400 audit(1759317597.534:414): avc: denied { accept } for pid=7192 comm="syz.3.287" lport=50910 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 153.027437][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.066562][ T30] audit: type=1400 audit(1759317597.564:415): avc: denied { setopt } for pid=7192 comm="syz.3.287" lport=50910 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 153.342766][ T5892] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 153.577307][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 153.592615][ T5892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.724552][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.165849][ T5892] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 154.202798][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.218935][ T5892] usb 3-1: Product: syz [ 154.223189][ T5892] usb 3-1: Manufacturer: syz [ 154.227780][ T5892] usb 3-1: SerialNumber: syz [ 154.240378][ T5892] usb 3-1: config 0 descriptor?? [ 154.269317][ T5892] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 154.285797][ T5892] gspca_stv06xx: st6422 sensor detected [ 154.675153][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'. [ 154.693845][ T7242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.704959][ T7242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.002797][ T1214] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 155.251316][ T1214] usb 4-1: unable to get BOS descriptor set [ 155.265938][ T1214] usb 4-1: config 14 has an invalid interface number: 21 but max is 0 [ 155.503454][ T5940] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 155.541738][ T1214] usb 4-1: config 14 has no interface number 0 [ 155.610702][ T1214] usb 4-1: config 14 interface 21 has no altsetting 0 [ 155.618125][ T5892] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 155.672904][ T5940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.692586][ T1214] usb 4-1: string descriptor 0 read error: -22 [ 155.791193][ T5892] usb 3-1: USB disconnect, device number 16 [ 155.800021][ T1214] usb 4-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 155.810524][ T5940] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 155.848200][ T7256] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 155.866277][ T5940] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 155.907822][ T1214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.925551][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.942305][ T5940] usb 5-1: config 0 descriptor?? [ 156.041263][ T1214] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 156.053922][ T1214] usb 4-1: MIDIStreaming interface descriptor not found [ 156.259486][ T7244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.287779][ T7244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.330674][ T30] audit: type=1400 audit(1759317600.854:416): avc: denied { bind } for pid=7259 comm="syz.2.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 156.370355][ T5878] usb 4-1: USB disconnect, device number 16 [ 156.597693][ T30] audit: type=1400 audit(1759317600.854:417): avc: denied { connect } for pid=7259 comm="syz.2.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 156.623595][ T30] audit: type=1400 audit(1759317600.854:418): avc: denied { setopt } for pid=7259 comm="syz.2.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 156.770342][ T7268] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 157.494159][ T7281] netlink: 'syz.3.308': attribute type 1 has an invalid length. [ 157.573115][ T910] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 157.801353][ T7281] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.814318][ T7288] vlan2: entered allmulticast mode [ 157.819656][ T7288] veth1: entered allmulticast mode [ 157.954473][ T910] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 157.968148][ T7288] bond1: (slave vlan2): making interface the new active one [ 157.975580][ T910] usb 3-1: config 0 interface 0 has no altsetting 0 [ 158.545119][ T5940] usb 5-1: USB disconnect, device number 10 [ 158.553614][ T910] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 158.562798][ T910] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 158.578750][ T910] usb 3-1: Product: syz [ 158.612476][ T910] usb 3-1: Manufacturer: syz [ 158.618568][ T910] usb 3-1: SerialNumber: syz [ 158.632287][ T910] usb 3-1: config 0 descriptor?? [ 158.642618][ T910] usb 3-1: selecting invalid altsetting 0 [ 158.780472][ T7288] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 158.831043][ T7291] Process accounting resumed [ 159.494399][ T910] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 159.668355][ T910] usb 5-1: Using ep0 maxpacket: 32 [ 159.696668][ T910] usb 5-1: unable to get BOS descriptor or descriptor too short [ 159.706719][ T910] usb 5-1: config 56 has an invalid interface number: 177 but max is 0 [ 159.716067][ T910] usb 5-1: config 56 has no interface number 0 [ 159.724458][ T910] usb 5-1: config 56 interface 177 altsetting 224 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 159.736683][ T910] usb 5-1: config 56 interface 177 has no altsetting 0 [ 159.747687][ T910] usb 5-1: New USB device found, idVendor=1782, idProduct=4d10, bcdDevice=6d.76 [ 159.760344][ T910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.770437][ T910] usb 5-1: Product: syz [ 159.774925][ T910] usb 5-1: Manufacturer: syz [ 159.779617][ T910] usb 5-1: SerialNumber: syz [ 160.210948][ T30] audit: type=1400 audit(1759317604.734:419): avc: denied { append } for pid=7303 comm="syz.4.313" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 160.234081][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.362964][ T7314] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 160.371011][ T7314] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 160.541922][ T7315] input: syz0 as /devices/virtual/input/input11 [ 160.820373][ T7314] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 160.824179][ T5940] usb 3-1: USB disconnect, device number 17 [ 160.853262][ T7314] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 161.305698][ T30] audit: type=1400 audit(1759317605.664:420): avc: denied { open } for pid=7318 comm="syz.2.316" path="/dev/ttyq9" dev="devtmpfs" ino=383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 162.333020][ T910] option 5-1:56.177: GSM modem (1-port) converter detected [ 162.368644][ T910] usb 5-1: USB disconnect, device number 11 [ 163.085568][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.317'. [ 163.115628][ T910] option 5-1:56.177: device disconnected [ 163.185935][ T7346] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 163.207937][ T7346] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 163.223032][ T7346] bridge0: port 3(netdevsim0) entered disabled state [ 163.348209][ T7346] bridge_slave_1: left allmulticast mode [ 163.356193][ T30] audit: type=1400 audit(1759317607.844:421): avc: denied { sqpoll } for pid=7352 comm="syz.0.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 163.389105][ T7346] bridge_slave_1: left promiscuous mode [ 163.395277][ T7346] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.498380][ T1214] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 163.559208][ T7346] bridge_slave_0: left allmulticast mode [ 163.566694][ T7346] bridge_slave_0: left promiscuous mode [ 163.574488][ T7346] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.614239][ T910] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 163.886041][ T910] usb 5-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config [ 163.901303][ T910] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 163.922822][ T910] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.961548][ T1214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.980285][ T1214] usb 2-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 163.999136][ T1214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.039273][ T1214] usb 2-1: config 0 descriptor?? [ 164.040289][ T910] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.057048][ T910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.199853][ T910] usb 5-1: Product: syz [ 164.209207][ T910] usb 5-1: Manufacturer: syz [ 164.223737][ T910] usb 5-1: SerialNumber: syz [ 164.496872][ T910] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 164.503797][ T910] cdc_ncm 5-1:1.0: bind() failure [ 164.696838][ T910] usb 5-1: USB disconnect, device number 12 [ 165.213394][ T910] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 165.352906][ T910] usb 3-1: device descriptor read/64, error -71 [ 165.622488][ T30] audit: type=1400 audit(1759317610.144:422): avc: denied { name_bind } for pid=7372 comm="syz.0.329" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 165.708832][ T7376] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 165.805191][ T1214] usbhid 2-1:0.0: can't add hid device: -71 [ 165.824341][ T1214] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 165.843440][ T910] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 165.844517][ T1214] usb 2-1: USB disconnect, device number 17 [ 166.042127][ T30] audit: type=1400 audit(1759317610.494:423): avc: denied { connect } for pid=7378 comm="syz.4.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 166.186225][ T910] usb 3-1: device descriptor read/64, error -71 [ 166.293051][ T910] usb usb3-port1: attempt power cycle [ 167.067808][ T30] audit: type=1400 audit(1759317611.154:424): avc: denied { write } for pid=7388 comm="syz.3.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 167.103237][ T910] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 167.133715][ T910] usb 3-1: device descriptor read/8, error -71 [ 167.462825][ T910] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 167.503187][ T910] usb 3-1: device descriptor read/8, error -71 [ 167.625462][ T5567] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 167.646777][ T30] audit: type=1400 audit(1759317612.174:425): avc: denied { lock } for pid=7401 comm="syz.3.336" path="socket:[15361]" dev="sockfs" ino=15361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 167.674767][ T910] usb usb3-port1: unable to enumerate USB device [ 167.749923][ T5954] IPVS: starting estimator thread 0... [ 167.756998][ T30] audit: type=1400 audit(1759317612.284:426): avc: denied { ioctl } for pid=7403 comm="syz.2.337" path="socket:[15369]" dev="sockfs" ino=15369 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.787711][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 167.802748][ T5567] usb 2-1: Using ep0 maxpacket: 16 [ 167.824457][ T5567] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.852771][ T7405] IPVS: using max 42 ests per chain, 100800 per kthread [ 167.859778][ T5567] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.960267][ T5567] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 167.969400][ T5567] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.979774][ T5567] usb 2-1: Product: syz [ 167.984042][ T5567] usb 2-1: Manufacturer: syz [ 167.988610][ T5567] usb 2-1: SerialNumber: syz [ 168.008314][ T5567] usb 2-1: config 0 descriptor?? [ 168.044762][ T5567] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 168.050934][ T5567] gspca_stv06xx: st6422 sensor detected [ 168.086901][ T5835] Bluetooth: hci4: command 0x0405 tx timeout [ 168.232340][ T7421] netlink: 'syz.4.341': attribute type 11 has an invalid length. [ 168.382894][ T5878] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 168.413963][ T5954] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 168.579519][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 168.607426][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 168.617337][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 168.630692][ T5954] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 168.641781][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.650939][ T5954] usb 3-1: Product: syz [ 168.655608][ T5878] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 168.663916][ T5878] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.696605][ T5878] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.707571][ T5954] usb 3-1: Manufacturer: syz [ 168.719178][ T5954] usb 3-1: SerialNumber: syz [ 168.727807][ T5878] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.744432][ T5954] usb 3-1: config 0 descriptor?? [ 168.766790][ T5878] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.782343][ T5954] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 168.791883][ T5954] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 168.798066][ T5878] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 168.813180][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.055443][ T5878] usb 4-1: usb_control_msg returned -32 [ 169.077053][ T5878] usbtmc 4-1:16.0: can't read capabilities [ 169.555630][ T5954] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 170.178474][ T5567] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 170.194231][ T5567] usb 2-1: USB disconnect, device number 18 [ 170.241906][ T5954] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 170.269083][ T5954] em28xx 3-1:0.0: board has no eeprom [ 170.488119][ T30] audit: type=1400 audit(1759317615.014:427): avc: denied { open } for pid=7436 comm="syz.0.346" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15396 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 170.912975][ T30] audit: type=1400 audit(1759317615.204:428): avc: denied { firmware_load } for pid=7440 comm="syz.1.347" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 170.937614][ C1] vkms_vblank_simulate: vblank timer overrun [ 171.091026][ T30] audit: type=1400 audit(1759317615.614:429): avc: denied { ioctl } for pid=7446 comm="syz.4.348" path="socket:[15420]" dev="sockfs" ino=15420 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.177832][ T5567] usb 4-1: USB disconnect, device number 17 [ 171.257555][ T7444] syz.1.347 (7444) used greatest stack depth: 18968 bytes left [ 171.320272][ T30] audit: type=1400 audit(1759317615.844:430): avc: denied { write } for pid=7456 comm="syz.0.350" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 172.212766][ T5954] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 172.229993][ T5954] em28xx 3-1:0.0: dvb set to bulk mode. [ 172.235935][ T5567] em28xx 3-1:0.0: Binding DVB extension [ 172.352885][ T5954] usb 3-1: USB disconnect, device number 22 [ 172.413992][ T5954] em28xx 3-1:0.0: Disconnecting em28xx [ 173.138821][ T5567] em28xx 3-1:0.0: Registering input extension [ 173.160054][ T5954] em28xx 3-1:0.0: Closing input extension [ 173.263831][ T5954] em28xx 3-1:0.0: Freeing device [ 173.411071][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.454450][ T30] audit: type=1400 audit(1759317617.974:431): avc: denied { append } for pid=7492 comm="syz.3.358" name="nullb0" dev="devtmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 173.458697][ T7489] delete_channel: no stack [ 173.504967][ T7478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.794075][ T7495] trusted_key: encrypted_key: insufficient parameters specified [ 173.818581][ T7495] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 173.829978][ T7495] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 174.366426][ T30] audit: type=1400 audit(1759317618.894:432): avc: denied { unmount } for pid=5824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 174.440855][ T1104] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.484156][ T1104] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.563479][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.612754][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.724392][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 175.371906][ T30] audit: type=1400 audit(1759317619.884:433): avc: denied { getopt } for pid=7500 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.601758][ T30] audit: type=1400 audit(1759317620.124:434): avc: denied { write } for pid=7501 comm="syz.3.363" name="usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 175.885594][ T7513] netlink: 'syz.4.364': attribute type 1 has an invalid length. [ 175.927313][ T7513] bond1: entered promiscuous mode [ 175.935557][ T7513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.948801][ T7517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.956381][ T7517] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 175.966573][ T5567] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 176.074696][ T7517] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 176.406105][ T5567] usb 3-1: Using ep0 maxpacket: 16 [ 176.416454][ T5567] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.428404][ T5567] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 176.435144][ T7517] bond1: (slave vcan1): making interface the new active one [ 176.490128][ T7517] vcan1: entered promiscuous mode [ 176.514586][ T5567] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 176.533527][ T5567] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.551268][ T5567] usb 3-1: Product: syz [ 176.559344][ T5567] usb 3-1: Manufacturer: syz [ 176.571398][ T5567] usb 3-1: SerialNumber: syz [ 176.590161][ T5567] usb 3-1: config 0 descriptor?? [ 176.600843][ T5567] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 176.612346][ T5567] gspca_stv06xx: st6422 sensor detected [ 176.729274][ T7524] overlayfs: failed lookup in lower (newroot/67, name='bus', err=-40): overlapping layers [ 176.975356][ T7517] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 177.005044][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'. [ 177.217686][ T30] audit: type=1400 audit(1759317621.734:435): avc: denied { bind } for pid=7530 comm="syz.1.369" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 177.272794][ T5892] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 177.448956][ T30] audit: type=1400 audit(1759317621.974:436): avc: denied { watch } for pid=7536 comm="syz.1.372" path="pipe:[15601]" dev="pipefs" ino=15601 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 177.526241][ T5892] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 177.536543][ T5892] usb 4-1: config 0 has no interface number 0 [ 177.547567][ T5892] usb 4-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.799583][ T5892] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 177.835623][ T5892] usb 4-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 177.954860][ T5892] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 178.010940][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.029729][ T5892] usb 4-1: Product: syz [ 178.035272][ T5892] usb 4-1: Manufacturer: syz [ 178.039952][ T5892] usb 4-1: SerialNumber: syz [ 178.051901][ T5892] usb 4-1: config 0 descriptor?? [ 178.067897][ T7527] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 178.187518][ T7550] syzkaller0: entered promiscuous mode [ 178.194689][ T7550] syzkaller0: entered allmulticast mode [ 178.222541][ T30] audit: type=1400 audit(1759317622.744:437): avc: denied { relabelfrom } for pid=7549 comm="syz.1.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 178.287526][ T30] audit: type=1400 audit(1759317622.774:438): avc: denied { relabelto } for pid=7549 comm="syz.1.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 178.346037][ T5892] usb 4-1: USB disconnect, device number 18 [ 178.406597][ T5839] ------------[ cut here ]------------ [ 178.412187][ T5839] WARNING: CPU: 1 PID: 5839 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0x11a/0x210 [ 178.422085][ T5839] Modules linked in: [ 178.426069][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: kworker/u9:9 Not tainted syzkaller #0 PREEMPT(full) [ 178.435559][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.445659][ T5839] Workqueue: hci0 hci_conn_timeout [ 178.450792][ T5839] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 178.456825][ T5839] Code: 00 e8 ca be 71 f7 4c 89 f1 4c 89 e2 48 c7 c6 00 34 b7 8c 48 c7 c7 68 19 5b 90 e8 91 0d 88 fa e9 4d ff ff ff e8 a7 be 71 f7 90 <0f> 0b 90 e8 9e be 71 f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 178.476846][ T5839] RSP: 0018:ffffc90004347c30 EFLAGS: 00010293 [ 178.483158][ T5839] RAX: 0000000000000000 RBX: ffff88807ab90948 RCX: ffffffff8a4959bf [ 178.491140][ T5839] RDX: ffff88802464c900 RSI: ffffffff8a495a69 RDI: 0000000000000005 [ 178.499209][ T5839] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 178.507182][ T5839] R10: 00000000ffffffff R11: 0000000000002b71 R12: ffff88807ab90000 [ 178.515164][ T5839] R13: 0000000000000000 R14: ffffffff905fab54 R15: ffffc90004347d10 [ 178.523141][ T5839] FS: 0000000000000000(0000) GS:ffff888124f71000(0000) knlGS:0000000000000000 [ 178.532052][ T5839] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 178.538797][ T5839] CR2: 0000200000404030 CR3: 000000005c79e000 CR4: 00000000003526f0 [ 178.546844][ T5839] Call Trace: [ 178.550113][ T5839] [ 178.553064][ T5839] process_one_work+0x9cf/0x1b70 [ 178.558007][ T5839] ? __pfx_hci_conn_timeout+0x10/0x10 [ 178.564932][ T5839] ? __pfx_process_one_work+0x10/0x10 [ 178.570305][ T5839] ? assign_work+0x1a0/0x250 [ 178.575343][ T5839] worker_thread+0x6c8/0xf10 [ 178.579920][ T5839] ? __kthread_parkme+0x19e/0x250 [ 178.584977][ T5839] ? __pfx_worker_thread+0x10/0x10 [ 178.590085][ T5839] kthread+0x3c5/0x780 [ 178.594182][ T5839] ? __pfx_kthread+0x10/0x10 [ 178.598757][ T5839] ? rcu_is_watching+0x12/0xc0 [ 178.603527][ T5839] ? __pfx_kthread+0x10/0x10 [ 178.608113][ T5839] ret_from_fork+0x56a/0x730 [ 178.612741][ T5839] ? __pfx_kthread+0x10/0x10 [ 178.617324][ T5839] ret_from_fork_asm+0x1a/0x30 [ 178.622096][ T5839] [ 178.625147][ T5839] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 178.632417][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: kworker/u9:9 Not tainted syzkaller #0 PREEMPT(full) [ 178.641849][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 178.651886][ T5839] Workqueue: hci0 hci_conn_timeout [ 178.656986][ T5839] Call Trace: [ 178.660244][ T5839] [ 178.663155][ T5839] dump_stack_lvl+0x3d/0x1f0 [ 178.667729][ T5839] vpanic+0x6e8/0x7a0 [ 178.671685][ T5839] ? __pfx_vpanic+0x10/0x10 [ 178.676165][ T5839] ? hci_conn_timeout+0x11a/0x210 [ 178.681173][ T5839] panic+0xca/0xd0 [ 178.684872][ T5839] ? __pfx_panic+0x10/0x10 [ 178.689274][ T5839] ? check_panic_on_warn+0x1f/0xb0 [ 178.694356][ T5839] check_panic_on_warn+0xab/0xb0 [ 178.699267][ T5839] __warn+0xf6/0x3c0 [ 178.703137][ T5839] ? hci_conn_timeout+0x11a/0x210 [ 178.708149][ T5839] report_bug+0x3c3/0x580 [ 178.712453][ T5839] ? hci_conn_timeout+0x11a/0x210 [ 178.717463][ T5839] handle_bug+0x184/0x210 [ 178.721774][ T5839] exc_invalid_op+0x17/0x50 [ 178.726257][ T5839] asm_exc_invalid_op+0x1a/0x20 [ 178.731093][ T5839] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 178.736720][ T5839] Code: 00 e8 ca be 71 f7 4c 89 f1 4c 89 e2 48 c7 c6 00 34 b7 8c 48 c7 c7 68 19 5b 90 e8 91 0d 88 fa e9 4d ff ff ff e8 a7 be 71 f7 90 <0f> 0b 90 e8 9e be 71 f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 178.756321][ T5839] RSP: 0018:ffffc90004347c30 EFLAGS: 00010293 [ 178.762369][ T5839] RAX: 0000000000000000 RBX: ffff88807ab90948 RCX: ffffffff8a4959bf [ 178.770324][ T5839] RDX: ffff88802464c900 RSI: ffffffff8a495a69 RDI: 0000000000000005 [ 178.778273][ T5839] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 178.786224][ T5839] R10: 00000000ffffffff R11: 0000000000002b71 R12: ffff88807ab90000 [ 178.794186][ T5839] R13: 0000000000000000 R14: ffffffff905fab54 R15: ffffc90004347d10 [ 178.802151][ T5839] ? hci_conn_timeout+0x6f/0x210 [ 178.807086][ T5839] ? hci_conn_timeout+0x119/0x210 [ 178.812111][ T5839] process_one_work+0x9cf/0x1b70 [ 178.817043][ T5839] ? __pfx_hci_conn_timeout+0x10/0x10 [ 178.822401][ T5839] ? __pfx_process_one_work+0x10/0x10 [ 178.827764][ T5839] ? assign_work+0x1a0/0x250 [ 178.832328][ T5839] worker_thread+0x6c8/0xf10 [ 178.836910][ T5839] ? __kthread_parkme+0x19e/0x250 [ 178.841930][ T5839] ? __pfx_worker_thread+0x10/0x10 [ 178.847026][ T5839] kthread+0x3c5/0x780 [ 178.851084][ T5839] ? __pfx_kthread+0x10/0x10 [ 178.855649][ T5839] ? rcu_is_watching+0x12/0xc0 [ 178.860394][ T5839] ? __pfx_kthread+0x10/0x10 [ 178.864966][ T5839] ret_from_fork+0x56a/0x730 [ 178.869539][ T5839] ? __pfx_kthread+0x10/0x10 [ 178.874112][ T5839] ret_from_fork_asm+0x1a/0x30 [ 178.878874][ T5839] [ 178.882077][ T5839] Kernel Offset: disabled [ 178.886378][ T5839] Rebooting in 86400 seconds..