last executing test programs: 6m43.808966659s ago: executing program 3 (id=106): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0xffffffffffffff40) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe15) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r4, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="c97551806c0f5cbdd95a8eaa", 0xfffffffffffffdcc) r5 = signalfd(r3, &(0x7f0000000200)={[0x50]}, 0x8) name_to_handle_at(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0xc004004) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x57, 0x7ffffffe, 0x0, 0x8092, 0x55, 0x8, 0x7, 0x8}, 0x0) 6m40.324824113s ago: executing program 3 (id=116): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r1 = add_key$fscrypt_provisioning(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)={0x1, 0x0, @a}, 0x48, 0xfffffffffffffffc) keyctl$setperm(0x5, r1, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msgrcv(0x0, 0x0, 0x0, 0x3, 0x2000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x0, 0x11, 0x5, {0x5, 0xe, "2ff465"}}, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x3, 0xd, 0x0, 0x4, 0x5}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='@\nB'], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000801, 0x0, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x2, 0x80, 0x0, 0x6, 0x4}) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000676000/0x3000)=nil}) 6m33.645526372s ago: executing program 3 (id=132): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="00000000140003000700ff0000000000000000000000000014000100fe80000000ffffba0000000000000000"], 0x99}}, 0x0) openat$ppp(0xffffff9c, &(0x7f00000022c0), 0x80000, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='clear_refs\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) 6m33.52502547s ago: executing program 3 (id=134): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x61e42, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f0000000500)={0x21c1, 0x3, 0x3}, 0x18, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0x24, 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) ioctl$LOOP_SET_FD(r6, 0x4c00, r6) dup2(r5, r2) r7 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f0000000180)) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000100)=0xfffffff7) 6m32.407676326s ago: executing program 3 (id=137): socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000740), 0xfffffc8f) splice(r1, 0x0, r3, 0x0, 0x10000, 0x0) sched_setaffinity(r0, 0xfffffffffffffc69, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180), 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180)}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r6, 0xc01064ab, &(0x7f0000000e00)={0x4ff1}) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x129) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x45c0d00c}}, 0x50) syz_fuse_handle_req(r7, 0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x800007ff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) llistxattr(&(0x7f0000000240)='./file0\x00', 0x0, 0x8a4b41029b6088c8) 6m32.018540799s ago: executing program 3 (id=141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000002680)=[{{&(0x7f0000001b00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000340)="71be53f7e069f3e77b5a8391db5e00a3a6fa5771858f98cf530674a684fe5b5be2cfa19fbc115a24130f10bb27c934d30696eafef69cebc1", 0x38}, {&(0x7f0000000640)="ce9a4cbdcf89757202a14ae904edae08d8bd3509508a918ca27eceea9432d2b39920662edc29d7f5b8bfc1f9157e855779d5cea957b0bfdcc7a8cf43db657116562b580ef9e1007ec008572bf3c34dc7137d62160da4042a7063c060b34e7c", 0x5f}, {&(0x7f0000000780)="0a1390937e24f41b82b04f0a1c94f8f1d1cdaaec0e1ddee748c1aa54f94c51547226d7983f183230e6597e8b943e0ebb76dc9aeeb425dd575b675a015df4ebed5cace386d577f2974fafcf19c072e540deb0b066e85b2d15", 0x58}, {&(0x7f0000000800)="6dc40d236776db0411e8e6f39678665223d389937f8758b5643c08e4b8d9dd0ba88aa24e2e3d950ef7c02678b65d627d773e8118fe277b0b40fdbe3eac899f59e3f834d319010847", 0x48}, {&(0x7f0000000880)="f1028f2e8e8eef736a6dc805dab61cf85c613528b55de86aa2d8b3fb16cd4f47d930a0d6f6d8648b16ace6217360a31fab55397e50d56d020dd274f421be14f3f049132a55b6b963e434a4d4177e57bed6f4cd60c468551daf9d72531140225e78146718e3beba1d149158caa83a42766a79314ba08691ed4d03b9e807ededbab24122aaedd6704bc020dc3199e9da0c4d6cfa7ac615c9f6809f05fce56242a8aacf6609f1cde79c6ee3ea31bac9ed55f5cb5440103597e3afe8c4", 0xbb}, {&(0x7f0000000940)="79b11e361c2db3c47b797c3420c2cfd0b7edbe253b55f445c88defcd0ea82496a6475bd895a3276962b729ab6b88bc896632ab6b3519a1539d5afd13f979a6a52b375db885992cc1b562d424538873681dd791d807e280157f1cbd8bf90077990a13d8c5551da30fe1794500d957a11124c0cc69c97029fc4c0a1015084104420143dcbdb05d915fe52929d70748fbb8a813e98d34d5800d1688fe30f1745d8df15a5f21ded14d72702edae4a6c3dda2ccc4dd47fefb4ab572533d7abf34f3802ffa362c7347c925de0bc21bac1199c6c9b5638284fe105eedc677182fd51299689a14a497ed3d14dddd74e2b612a1e98db20c6b301a586e8526f479f77bc439eee270787ca34b2cca8fd580b56e5f3b42589867f7c782ad10ccceef5bf85b0ee9e91da47fb9e18883d74865a9a896d8bc839eb63fefa5855d4da485584f0e920058cafa1b043362c6839adcc3aadf8f00594d6316cd06f1ced8ca4b00579a5c4e116e0a3e5a06539e129c44e3af65b3a2eecbb2a360c52db230a88395e74f62379d7729cb47e7687e640837901381010140f0655c09418a94b8422adf4e7b0d73991579bcc264708180f5c636cb2a79854ebc9549932f36dd12068ddfbc902deaa6f57e1df4d4ae418800249c329597a0db506faac31c3727ecde3710cecfadbabafe76acdab4c9c2d1fa1bed46536a583f8ee1045c5593318c7ae736c753c34805c7738313d8128b9ab74d439fb606af595ca1c31d2adc1a17928e68bd5b4df5f599bb12e59ef2f8d0edaa20f4e1351a3655181f46cfaa7f04764e618e0ad881675305c031bd8d22cc318fb61219fce7f6241e3b2b3acb45756b5e50efce59401f8f6991ca91826a4b0dea0dcf2851490d36a95f339fcee18edfaaed07450bfbfdc66155cbc928e5dbdb140b5270b594e308ac436d9b85c27b7802b137b9ad385ff975fe89cbf6ed69dd95b352b798e405711d5b3cd7e38d3e0cefc7ad65348c5e1311b2eda210af2313dfe581ceb5eeb60fbfee47f120b8519d0865a07596db7c9900cd3c23016051c3e5800c8678c1a448324c2de8ca52c001ec8f4ad345c4b7606cb352cfc6c10c7120aa146a1f88264dc56fcdc94a65c91477823720e601e585cfe98c4309e8dd333f9f0284240258771eb922448bb96fe91d7f338e4ad02edbed055d5aac88f3e72c610278978b8ed2831f189f43b31746280a7b4c07de586ea1c28658045a1af621cdaf2a10b1d98687311377a24f393a69e268dd113b67b1b66340bc23a52af3895384e0028f9ab40551fa512776896133631ae5710e5fdd24b077cf62085d573bac91c6ba0785c20f43057a9acfb7b4dded4dae05aa520fb077629076f62983f09e2c6107225810b771781b554058a6a9c734e3065366e0da06d6b07085c1882e1ce7a177d7cbe1f5090ec7b8b9a27ca233fb19fa11d61d04f5b09d694b488737b7bac35993804daa00e288acd9c89a51dd3a4254c67da56bba437c0ad365edb1aa17cfc0c15155309205c46bf5c615440e6faf3edf00cf23f86dec075cb48bd663d39de6895f10e0495bf08c3903da1ef4b4c6c19d52025697f82a2add6a6489c8c082fb603bfa31bfed63721ceda95fde28fd20054b94996ccf056f723ce35a5dc49ef848917fd1fc32eb3b271c7855175d5d6269e2a074370e8873f4a71818467c16cd68337e194feb4214d774bca72b7beb07d996ef54d9d587e5e5dda2c2ac169ff713e1fc6fe316307104d6d471f7e4385c04e8b966833ba100311c6cb1fc38e978e95c122347a25c72ebfdc33a65d595dad6d041e07fd505b42296382ff5eb94fdff83f47940cd942aa858374ee51cee50b7a791ff97a3f338cfeda77fd2acf0310bd53c94b2ac64355b716e53521fadaa3c5a51226cb60624bcb8ab965094e771e227331c50e0383ec75dcece453719629deaccc4331822b298ab2485335ed44ee8eb187224604390f4f2e1e6c1e8a783e1e60ae3be02f64b50502d4961634dff797d694dbbb15abfde5c5a638deb0f6f27247e842e56df742f0f48d95890f5e8f03c66bf8cd6523b8a3acf23939283f525d6d5419fa7ef9c2fce958957568c9ce0601d20675077d61e1f46842a8a28db5fc4975fb09f39d69bf85f27f5d8e6c7f6b9ee0a61d46317899250cfcbe1a9f8d8c780c39a160464cf433970cb2c8f9d5f99e084e5fa6fd56cd674267da3f03e500f336cdbd0448a542c48d57b462411a9c85e0378b2f8349175976fb3b6b24397ebb0436b631de9f7e49f8a3bf39685761e505b31336fc0c7395bdf91698ff948002b29ccee4a84864f9658d5e490ace2eb94cca6bbc5fc7a33fc02bf75b39acb8e56d2b5a06b17f6e1a48cfd90a968d536169de8826eeb1165943bb811a22d0049a061bba7b8b7736932bd372bd198ce3704c8e01fe319770a2e3d8e1e52933af292fdb8b70130a5eec498e4158ee4302008942e031a0c8ad92d74b2547791e875f98aef6dc0ea13027aa449c982716cde9693929cda61f2134e7785523a50a9972d2519e94857bfa1aa964ce2af112b56e0d0aedd2bdcd98ceb64ebb63369334fedba596de054b20e98203d1d9b041f4c7f16830c414861289e40bab3a229f9622ee23f19b22950fd2793a79d2e9b9fa90ff7e5c7d508e7bb1f0560d1ce6d55b7ffd03136e89157006850ca26678e7c3c796cf66119f3dcbe9d7b75c334485374eb2c6f9af494e922b2ceaeb0a6be6f0822097f1ad6c6886535f6abab3be5c327598354efa72ba4bcfce4d0a08285543465f042f4e67f15138453f4508d6f839afc37e103d27cc49b8f619c626d3a7e5264b75efc48f52287d585808b9970ca3b03c797244e6b5db7228ed8ff54f00f51c2b53b4a2c9f466d65088f5838aa95eb63c4e972100a713beda6087b3b2b8d0f57bafb6b24d2918fc43e29d0d8d5e8009780789e795baa6f1543bb775313ca516f550bd044ff74f993c3ab65f8fac8b6ac2fb5bce3dd41c0509318a17a99e2e86d90b6a2313cbca1cdf37550950762206caa0ee92ca54c202bea31f06e2e06363be4caa00c5468cb26e6f4bb65b79dafa9553d3aec6d20249418c199d4dd11b27863df68cf850a8092658560f43daa1f4c8d6c9c04cdab27ef70ea4230b20414838ab6c3b06f64ff9b8e4e5f99ca85805d32df8d786dceab6c5a3785fc705a1867a2f3a6ff4dafc09d4fd74ffd38c8d5251a57c9133ed7c613d21629f46ea7e1d8ec4a05105fd1f1f3db9f7a2c553aafb37e5cf301a009782b9c3361f107e299b443e4cd8b88149f787bc55a0e751e200d0f72fd9ccac15627a854b8b409f5f094c68392aa0434d7e3c79732093b88c4dc5fc2cbbb5701ee9ddc8d2ed665d95f4a3ecc901ed5f08f38d5e653f124300f0d8779fef9f1dd673819d62462c15d43f01b873ac50531378516a16459a17df4f09552aaf5bf6201ec63038fbf85041dc62c627f834d96be654ecc64c2ce404094b77d91911f8332143903b3fc94e7ba17325542a5eb88ca2c5042b8b0866903e5b4c09f54076fcc4f65b4b5ee1507ffed5493f881552b6c27e11d6cce50e54544d63de83be970618f4bff7e0e6c41eadfa5342d909ba30dbcbf7d520fb79601642cdcf130b41ccdd6c47c21ff81899fa0f672437316b48ecc20edc1d074a1ded19546b6494f23a30115de32948dc782d76b0bbaf2be5296dca834ed297f44f9b82bebd1fe07bc5766bcc7ec23188d4b7917aaef6a01c567f62d35c6d86b503c2433b0dd9a8f11de364050217f7f3387ca09f29dd18b80a2a662e9aefa4bc2f5c368b901967074477a408ef57823f3ed49fb6696aa69b8f6c597c9fb8a883cb04c7ce8455cc50ee6527def47fea4b6aed04b59afce4ec15026898a98bb5fb45464261c81e8f10bb3b55e40b0e6b7bca5e8af54cdf4bdd396b243201a6d8cc5b0552a8f7f65a17abf85e97af24adf035ea9233e0c6e466a02c714acf4bcb98c8e784c4239fa3cc3937da702ae0414cc198b1bef8c6194b4b85b242315ec8502e6d17f84ebb042c220e803a5e9322b8d0981c53b4603f810c1f2d865db6b5d63ed9d2f341ff8ca856569f2d2285cd1601ce60231fb31cff9af330536f4415ec741cad60bab8f737af0032a8e27cdba05047f08013c65ae2f8a5afb9b5f979d9f40973c068f6892e1a74bfa1a9eb7f03c56bb46fb6405ca47580f1273973101e8cf4d0cc721eeab5756d352c5a06063e786ef190c071b4d5446bb39d1e16b2fb4c435494953a0abb6f969fcaeed5a19a2a56feb61e187192991ca57c29a5264abac3a3a5a498c57bebffab6d3e09f72a98cdcb7a913ccfb60df0e514d3cc18a20971527b5d02cf1797e3bcac8a888a373a4c0cd8ee7248306f0e3c05fb2346e17b1cd4cba4494d061031e10da122bf385ef3b64770540dcaeea01066f743a1771d1e0bead7730735a9f0cf2577448ad484292d25dc4bb9cd74225e744e1e0f3d2c549c2f461b04e9ccf74af273676cafd68373c197ec243014610f0ec5f9c6f98d79ac6bf4a8c8852309f392e30ed5e2077aca3f6f94dba29bd5080e8441efceaf482a718f96cc222ad14d7ff97b0be4d61e7f7fb3122b3124e8308189d0cb19f0bbaa0f6a7972c2c8a870c5a51609fb77fcd28e71bde204e5c5b53aba9381c0e660e29edf751fb61a3d2584c3abe4552f4a8a1d104b3444d8357c3b15e68db23f608c5fd06d8dbe2b25dfe994ce17738f0e26fd6831fed419f08c56383083df8d7cbdc4f76d93036bc4e24704669f013ff612219af02676614473f2a489ef1a4da19cae4dda7ba9c34d37cf8ba543d751af51fcb1bbd9a7622b4b9e6132dd53bc08ed40b58007e2f55e9289549f6ac0c5de8394f55f66406f7f498c514bc78b1cfe7bc28cac18563ea4ab6da1e8a2978199cd60dc3439c4945090515998d514cbea6e0c3efc3d32093b022a845157f18d0f6b4a24ac8657155b34bcc40f578001738f2a38aa59da316781230e55811b61f14bbdc5b55c6b78686236cf2ee00e04ebbd4b750aec0c89a5676f263997473caad0a8df3c2995470b646f07e3ca615a0006fc2bfb00a9a20d61d6312c24f61130f15cc18532c229eeb2edf047b963b6d3a2cc2772fd5e6ab9cb7b2be9cabe268c32cbed69002c1011311bec2ab159d4e3abc6ca506c02760ca1a1fc9bb487e8092c3ddb1d90799aa8621b8b94474d58b41abeff70d3619b1ed7c626fb7a079fc8e1dbc2fdb076f131549dbc9b70d5edaaa9b7ee32658682408cfaaf1074168ed335fc168a6706f65f0ba2a1536fbfb58d8494d3d379e3c563861795d47d594de9003a57e8c9b15467af4048838e7446293eb1653986535e605da81420bf3e03754517165cea7e3b4076471cc55f0e850e6d30668e3a8f757bfb4535a510f788cf2b2ce040ad87e181a3fba105f8369f671c503f9b5e4476948b5dea13d8907fd97fca1e572c2591e29efbb6fc3625a1bb305bc63457fb7aaab468040a3321509962247a1987e3141ff4760ebdaab11f191b12310d2f1a6935a604c7c08fd0a46f00bc11fe953447e247c7987a5df3e86468fc9b68cbbbaf6a81f6d9a317d64b7fb182f0fe54ed6217751006aacb07845d8de94956011c4be38859044bacb0dc0fdc34a804a8c6daf63321849e2ac1c82b8183c692242a443e1e8747f52ac16f177a3650bd7adc0f1101f74a633829623b29c5ba6fdbcf0ff6e103efa354445259be3400cb89f5d2a7ecaee3dbbbdc2c8f37c1b33ea31912d6ae283fcf6cd098526f39649042dee015cd54ee0ab9d", 0x1000}], 0x6, &(0x7f0000001b80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESDEC=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="62e229040f60d4000000001c000000000000000400000002000000e0f8bac3a92c779842fe4d88a85cf453313a1922a8", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r1, @ANYRESHEX=r2, @ANYRES32=r0, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r0], 0x110, 0x40000}}, {{&(0x7f00000021c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002600)=[{&(0x7f0000002240)="213ba6b541dda305338898aec0fe85aa19075decdc685a56d8f5e6ee296b4472b754b797da604614629078483c5b8874f97c2323f4ab074760f9d304fa1720fd197caf5a8ce928a09e3ab6f31d23005ece46d3382df9339d48bcbab8435269064650c86d355e", 0x66}, {&(0x7f00000022c0)="cfd3c223edebeb6cb42f41775276cf5fa692a8937e38dd64fac0e8a4b913e04df8e5bcc4ac436b505e366618b81175b2850e7294dc83145726a2b9f99bcb1a683256ed88b016d75457b0e6665bb4d983951b6d934552245d2800553d57861caa1956", 0x62}, {&(0x7f0000002340)="f63eed0c95c0966c5db721bd7153636d8c2e68eb0a7a6147ff0b78e652cb57caa4672d79909b7bb991ac5fc87f42bf17", 0x30}, {&(0x7f0000002380)}, {&(0x7f00000023c0)="21fae989f3390c71a0fd50d2720b05dc41b89971f49867e586008619d08a8d9f50225461415bbec30b850536ad908dc3ce2ae49b51fe0f0d268df855a9389851c503761db04eabb6", 0x48}, {&(0x7f0000002440)="62fb303de25e55c22fdacabf67679e4f364f2b6221b8d95efeab491b848b73ae9b244708c52fbcd1acbded9060db8a2f83efb8b3e49f5c5a5b4ba8c42b1066a32dc3904d738f8b05b6cdba8a67f38ddabfc9795d3c6b8576a32b6bb20b22803cbacc62", 0x63}, {&(0x7f00000024c0)="cb0e8522406ebceb39f52efab2d19efe25bfc89238653b8bcbc87dd75a599375b00ffb6e74766dde3df2a6106db3b1fd8d52e759f4be5976cae2a17c9b7d3122428e4414", 0x44}, {&(0x7f0000002540)="7af8ee8c0a3f32e3fea07e364baf827c186ce9899ad7de06d75b2b499a5718729be974fb434a1944b2d752b6887771322be35b9756b8dec7286050e2113d47143bf36c0e9ab9a325c0dc3c2facb83353a6e2f94795b1741e318cf9ec3f22e93ac5ec0a859ea2e67ebf025bf6b773797f66ec48683eac183e89123037f4913844f0d0e565f0dbdee22576d1333c3636cdbc63fe280012dca890a6", 0x9a}], 0x8, 0x0, 0x0, 0x8000}}], 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x200000d, 0x5b, 0xb49, 0xb, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='tcp_cong_state_set\x00', r3, 0x0, 0x5}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x10400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0x2) (async) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000040)) (async) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) (async) r6 = socket$key(0xf, 0x3, 0x2) (async) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="800000000803110000010802110000000802110000000000000000000d0000000400010000060202020216eb000003010e250301642b72068125030303e20203"], 0x3e) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x1, 0x1}, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffcef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x19, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) sendto(r6, &(0x7f00000005c0)="19ac06c453080b0b935feee655e51ec7e3146fb0ec1447da2a3ad54d0c0080000000959dcd097a6aaf690c27abca145afee6f6432e5ee557de1dd95a131a960da46bba2f6aab740ff15e5df06cbdc50cd289523f5e177fba633df4", 0x5b, 0x4000080, &(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x2, @loopback, 0x2c2e, 0xffffffff}, 0x80) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) (async) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r7, &(0x7f0000000000)='2\x00', 0x2) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x9) 6m31.610439589s ago: executing program 32 (id=141): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000002680)=[{{&(0x7f0000001b00)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000000340)="71be53f7e069f3e77b5a8391db5e00a3a6fa5771858f98cf530674a684fe5b5be2cfa19fbc115a24130f10bb27c934d30696eafef69cebc1", 0x38}, {&(0x7f0000000640)="ce9a4cbdcf89757202a14ae904edae08d8bd3509508a918ca27eceea9432d2b39920662edc29d7f5b8bfc1f9157e855779d5cea957b0bfdcc7a8cf43db657116562b580ef9e1007ec008572bf3c34dc7137d62160da4042a7063c060b34e7c", 0x5f}, {&(0x7f0000000780)="0a1390937e24f41b82b04f0a1c94f8f1d1cdaaec0e1ddee748c1aa54f94c51547226d7983f183230e6597e8b943e0ebb76dc9aeeb425dd575b675a015df4ebed5cace386d577f2974fafcf19c072e540deb0b066e85b2d15", 0x58}, {&(0x7f0000000800)="6dc40d236776db0411e8e6f39678665223d389937f8758b5643c08e4b8d9dd0ba88aa24e2e3d950ef7c02678b65d627d773e8118fe277b0b40fdbe3eac899f59e3f834d319010847", 0x48}, {&(0x7f0000000880)="f1028f2e8e8eef736a6dc805dab61cf85c613528b55de86aa2d8b3fb16cd4f47d930a0d6f6d8648b16ace6217360a31fab55397e50d56d020dd274f421be14f3f049132a55b6b963e434a4d4177e57bed6f4cd60c468551daf9d72531140225e78146718e3beba1d149158caa83a42766a79314ba08691ed4d03b9e807ededbab24122aaedd6704bc020dc3199e9da0c4d6cfa7ac615c9f6809f05fce56242a8aacf6609f1cde79c6ee3ea31bac9ed55f5cb5440103597e3afe8c4", 0xbb}, {&(0x7f0000000940)="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", 0x1000}], 0x6, &(0x7f0000001b80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRESDEC=0x0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES8=r2, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="62e229040f60d4000000001c000000000000000400000002000000e0f8bac3a92c779842fe4d88a85cf453313a1922a8", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r1, @ANYRESHEX=r2, @ANYRES32=r0, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16=r0], 0x110, 0x40000}}, {{&(0x7f00000021c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000002600)=[{&(0x7f0000002240)="213ba6b541dda305338898aec0fe85aa19075decdc685a56d8f5e6ee296b4472b754b797da604614629078483c5b8874f97c2323f4ab074760f9d304fa1720fd197caf5a8ce928a09e3ab6f31d23005ece46d3382df9339d48bcbab8435269064650c86d355e", 0x66}, {&(0x7f00000022c0)="cfd3c223edebeb6cb42f41775276cf5fa692a8937e38dd64fac0e8a4b913e04df8e5bcc4ac436b505e366618b81175b2850e7294dc83145726a2b9f99bcb1a683256ed88b016d75457b0e6665bb4d983951b6d934552245d2800553d57861caa1956", 0x62}, {&(0x7f0000002340)="f63eed0c95c0966c5db721bd7153636d8c2e68eb0a7a6147ff0b78e652cb57caa4672d79909b7bb991ac5fc87f42bf17", 0x30}, {&(0x7f0000002380)}, {&(0x7f00000023c0)="21fae989f3390c71a0fd50d2720b05dc41b89971f49867e586008619d08a8d9f50225461415bbec30b850536ad908dc3ce2ae49b51fe0f0d268df855a9389851c503761db04eabb6", 0x48}, {&(0x7f0000002440)="62fb303de25e55c22fdacabf67679e4f364f2b6221b8d95efeab491b848b73ae9b244708c52fbcd1acbded9060db8a2f83efb8b3e49f5c5a5b4ba8c42b1066a32dc3904d738f8b05b6cdba8a67f38ddabfc9795d3c6b8576a32b6bb20b22803cbacc62", 0x63}, {&(0x7f00000024c0)="cb0e8522406ebceb39f52efab2d19efe25bfc89238653b8bcbc87dd75a599375b00ffb6e74766dde3df2a6106db3b1fd8d52e759f4be5976cae2a17c9b7d3122428e4414", 0x44}, {&(0x7f0000002540)="7af8ee8c0a3f32e3fea07e364baf827c186ce9899ad7de06d75b2b499a5718729be974fb434a1944b2d752b6887771322be35b9756b8dec7286050e2113d47143bf36c0e9ab9a325c0dc3c2facb83353a6e2f94795b1741e318cf9ec3f22e93ac5ec0a859ea2e67ebf025bf6b773797f66ec48683eac183e89123037f4913844f0d0e565f0dbdee22576d1333c3636cdbc63fe280012dca890a6", 0x9a}], 0x8, 0x0, 0x0, 0x8000}}], 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x8, 0x200000d, 0x5b, 0xb49, 0xb, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='tcp_cong_state_set\x00', r3, 0x0, 0x5}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) (async) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x10400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f00000000c0)=0x2) (async) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000040)) (async) ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) (async) r6 = socket$key(0xf, 0x3, 0x2) (async) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="800000000803110000010802110000000802110000000000000000000d0000000400010000060202020216eb000003010e250301642b72068125030303e20203"], 0x3e) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x1, 0x1}, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffcef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x19, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) (async) sendto(r6, &(0x7f00000005c0)="19ac06c453080b0b935feee655e51ec7e3146fb0ec1447da2a3ad54d0c0080000000959dcd097a6aaf690c27abca145afee6f6432e5ee557de1dd95a131a960da46bba2f6aab740ff15e5df06cbdc50cd289523f5e177fba633df4", 0x5b, 0x4000080, &(0x7f0000000440)=@l2tp6={0xa, 0x0, 0x2, @loopback, 0x2c2e, 0xffffffff}, 0x80) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) (async) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r7, &(0x7f0000000000)='2\x00', 0x2) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x9) 3m30.613563201s ago: executing program 0 (id=612): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000040)=0xffff, 0x4) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = io_uring_setup(0x773c, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x3bc}) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000200)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e21, 0x9000, @empty, 0x8001}}, 0x24) close_range(r4, r5, 0x0) syz_io_uring_setup(0x83b, &(0x7f00000000c0)={0x0, 0x11e, 0x80, 0x3, 0x319}, &(0x7f0000000140)=0x0, &(0x7f0000000400)=0x0) r8 = socket$inet(0x2, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000008000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r10 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r10, 0x80dc5521, &(0x7f00000003c0)=""/153) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @remote}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x7f, 0x0) writev(r11, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r11, &(0x7f0000000400)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d000000000000060400", 0x32}, {0x0}], 0x2) r12 = socket(0x1d, 0x2, 0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r12, 0x0, 0x0, 0x0, 0x80800}) 3m26.847230955s ago: executing program 0 (id=620): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x85ff}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3m26.799418456s ago: executing program 0 (id=621): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x40) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000040)=0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8800, 0x0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x4, 0x8, 0xe9, 0xb, 0x4}}) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/52, 0x34}, {&(0x7f00000001c0)=""/203, 0xcb}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/156, 0x9c}, {&(0x7f00000013c0)=""/76, 0x4c}, {&(0x7f0000001440)=""/121, 0x79}, {&(0x7f00000014c0)=""/163, 0xa3}, {&(0x7f0000001580)=""/22, 0x16}], 0x9}, 0xd}, {{&(0x7f0000001680)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000002800)=[{&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/199, 0xc7}], 0x2}, 0xca3}], 0x2, 0x0, &(0x7f00000028c0)={0x77359400}) sendmsg$802154_raw(r2, &(0x7f00000029c0)={&(0x7f0000002900)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14, &(0x7f0000002980)={&(0x7f0000002940)="68a972bc916766", 0x7}, 0x1, 0x0, 0x0, 0x4}, 0x48841) (async) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(0xffffffffffffffff, 0x80089419, &(0x7f0000002a00)) (async) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000002b40)={&(0x7f0000002a40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x54, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}], @NL80211_ATTR_MAC={0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002b80)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002c80)={{0x1, 0xffffffffffffffff}, &(0x7f0000002c00), &(0x7f0000002c40)}, 0x20) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002f80)=@generic={&(0x7f0000002f40)='./file0\x00', 0x0, 0x10}, 0x18) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002fc0)={0xffffffffffffffff, 0x6}, 0xc) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, r1, 0x3, 0x5}, 0x50) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003080)={0x0, 0x8, 0x18}, 0xc) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000030c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000003140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003200)={0x11, 0x1e, &(0x7f0000002cc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x50}}, @generic={0x1, 0x8, 0x6, 0x7}, @generic={0x0, 0xb, 0x4, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x3, 0x2, 0x2, 0x5, 0x5, 0x30}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x7, 0x0, 0x4, 0x9, 0x2, 0xfffffffffffffff8, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002dc0)='syzkaller\x00', 0x400, 0xbb, &(0x7f0000002e00)=""/187, 0x41000, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000002ec0)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000002f00)={0x3, 0xc, 0x1097000, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000003180)=[r5, r6, r7, r8, 0xffffffffffffffff, r9, r10], &(0x7f00000031c0)=[{0x1, 0x1, 0xb, 0x1}, {0x0, 0x3, 0xb}]}, 0x94) (async) r11 = accept$unix(r10, &(0x7f00000032c0)=@abs, &(0x7f0000003340)=0x6e) recvmsg$unix(r11, &(0x7f0000003640)={&(0x7f0000003380)=@abs, 0x6e, &(0x7f0000003500)=[{&(0x7f0000003400)=""/228, 0xe4}], 0x1, &(0x7f0000003540)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000036c0)={&(0x7f0000003680)='sys_enter\x00', r15, 0x0, 0x4}, 0x18) (async) ioctl$SNAPSHOT_CREATE_IMAGE(r12, 0x40043311, &(0x7f0000003700)) r20 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003780), r17) (async) ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f00000037c0)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r13, &(0x7f00000050c0)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005080)={&(0x7f0000003800)={0x187c, r20, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_MODES={0x39c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/snd/pcmC#D#c\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x250, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '@\\.:-\\$/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'sys_enter\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/ttyS3\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xcdc8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x759c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/snd/pcmC#D#c\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xae8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfe83}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'PPPPPP'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'sys_enter\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/ttyS3\x00'}]}, {0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/snd/pcmC#D#c\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/snd/pcmC#D#c\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'PPPPPP'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'sys_enter\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff89d7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xb4, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.[.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ',/\x83(%)-#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_MODES={0x10ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa18}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ')\'^-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '#-]-$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/ttyS3\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0x22, 0x5, "5638b91f4e8a3f8489520e6e29d2f9a074e6d693c0191dbad9933f500c25"}]}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}]}, @ETHTOOL_A_WOL_HEADER={0x4}, @ETHTOOL_A_WOL_SOPASS={0x48, 0x3, "357ccfd84e1377e267860568c29ded5c0818e6c25f07564413671b76c9d14a41de424ed2e0aa66f83a643d002a5b1c3553340a6618ce70f9e4ed2638f388272be46b4dab"}, @ETHTOOL_A_WOL_SOPASS={0x36, 0x3, "fb4a14d96a1e57e99f7b8b22ae06dc5639189ba6a1f4c251bbab6b95c37a3567c6dd6b89f0a04b7dadc1bdc69f7657a839f9"}, @ETHTOOL_A_WOL_MODES={0x370, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x7a, 0x4, "b4e94f661e77751828b47d0774825ee5f8077f9dfd7535d0d9f8ad3cc27f0bd9f5d96b77d3ea5a55b9e8b3aebd485f2e0e1626bcd9308b86ce3ec19a32ba2e6a9f352f6e371c46b76e7d47786c1fcf65d602423ce912cb49071dab80b9ab115fdcf0e73a812e4c48d10ed4dd12e5c552309f5e98b660"}, @ETHTOOL_A_BITSET_MASK={0x5e, 0x5, "2c9cf3a0d951bbf863831c4df40bc872923629fd0976d18f8c127716e7521987baf03799bf63274ae576a58ecbd03e0d9193896d12fd5154820c5ffa2edc8d7be3bc1728e663aa2094f7d99aea74ed585dae392aafaaca07cd2f"}, @ETHTOOL_A_BITSET_VALUE={0x2a, 0x4, "7a2230b8036e256cdc227e60a576119a8a493857509fd8823089100d78d6d21f516d55fda88b"}, @ETHTOOL_A_BITSET_MASK={0x49, 0x5, "394e05a1f946126574c5bca4bcb5079ee6461f1e2d43e7f263a45dd77daec706d175821209a9120f897438c1f4f94b9822128d57b2ffad355a360b00dd017e2c00ac9c14cf"}, @ETHTOOL_A_BITSET_MASK={0xc2, 0x5, "cb6035c06b8a40a6c9800305837e5c3d8ebb3ef2777c30c4cab365349791cdf1cb741d89426628468dfd616f05d6baf26c07df3222942a5e2beeedb6115ab3e4fa496fa884b1bf39c4211130d5b134e5d0bcc5d997929595d5b7d11e798de0487cc9ee05e974d1cd103f3c6af32baac6325dac64babea70bcafe0b1d7dd37be55324d82d5669c3c200cf4016c02f176d68f42a381cdc561b217cbf3598d47a38f7b71d01c0ae7856bb0182849c9451ca339f65dd4517deeea08f4b514223"}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xde, 0x4, "0df13e62d142cc34203e2b7c3f0478727119c17ce018d584df7ad566dfc1b29544c946e3cf53f62856556f533823a68a91d60a1f76d706c6558480f315dd43d54ee91f07471b4cdfe9fd8afdfa3a03f00ecc702a6c864abe3e2a70fc45c5b5ce72432a1ad604d55c8f7d1cfd77cc9d9265016155c591e51d5856468a211c168f261601f938a5e4f17706d8f471cfe3880ee0b53e164e81c830fb69741ac9ab1537d7f749aedff5058e9b9289427c9287a01a3213023867f2abf7ce8e7448d64125226132355537f93d203601a6fa7b6c401f6ff5ddd612b458f4"}, @ETHTOOL_A_BITSET_MASK={0x61, 0x5, "accd90ed86e84e8bef9699e6a64c40fe600b21a559d25da77337a6ce00138379a84507803ca444247c57ef2bc6a7c413d0a1ad58884c64fdec24ad50e91c27f6d2168fd2176b620edb301aade9104bc3a2bc9f180321c04b26fee172cc"}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x187c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000000) sendmsg$rds(0xffffffffffffffff, &(0x7f0000005a40)={0x0, 0x0, &(0x7f0000005280)=[{&(0x7f0000005100)=""/190, 0xbe}, {&(0x7f00000051c0)=""/1, 0x1}, {&(0x7f0000005200)=""/85, 0x55}], 0x3, &(0x7f0000005940)=[@fadd={0x58, 0x114, 0x6, {{0xc4, 0xfff}, &(0x7f00000052c0)=0x3, &(0x7f0000005300)=0x8, 0x9, 0xc, 0xb41, 0x8, 0x1a, 0x5}}, @rdma_args={0x48, 0x114, 0x1, {{0x2, 0xffffff80}, {&(0x7f0000005340)=""/169, 0xa9}, &(0x7f0000005840)=[{&(0x7f0000005400)=""/240, 0xf0}, {&(0x7f0000005500)=""/3, 0x3}, {&(0x7f0000005540)}, {&(0x7f0000005580)=""/183, 0xb7}, {&(0x7f0000005640)=""/214, 0xd6}, {&(0x7f0000005740)=""/247, 0xf7}], 0x6, 0x20, 0x20000000000000}}, @cswp={0x58, 0x114, 0x7, {{0x7fff, 0x7f}, &(0x7f00000058c0)=0x3, &(0x7f0000005900)=0x9, 0x5be, 0xc3c, 0x5, 0x1, 0x2, 0x1ff}}], 0xf8, 0x48084}, 0x40050) (async) r22 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000005cc0)=@o_path={&(0x7f0000005c80)='./file0\x00', 0x0, 0x10, r14}, 0x18) r23 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005d80)={0x28, 0x4, &(0x7f0000005a80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1fc410a5, 0x0, 0x0, 0x0, 0x7f}, [@ldst={0x3, 0x2, 0x3, 0x9, 0x0, 0x10, 0x1}]}, &(0x7f0000005ac0)='GPL\x00', 0x2, 0xfe, &(0x7f0000005b00)=""/254, 0x41000, 0xa, '\x00', r21, 0x0, r16, 0x8, &(0x7f0000005c00)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000005c40)={0x1, 0xe, 0x80000000, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000005d00)=[r6, r22], &(0x7f0000005d40), 0x10, 0x6d3}, 0x94) fsetxattr(r23, &(0x7f0000005e40)=@random={'btrfs.', '\x00'}, &(0x7f0000005e80)='GPL\x00', 0x4, 0x2) (async) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r19, 0x8008330e, &(0x7f0000005ec0)) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000005f00)) 3m26.721441417s ago: executing program 0 (id=622): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x6e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0x43, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e25, 0x23, @loopback, 0x20}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)="4137a2", 0x3}], 0x1}}], 0x1, 0x4000001) r2 = dup(r1) read$FUSE(r2, &(0x7f00000075c0)={0x2020}, 0x2020) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x1, 0x1}, 0x10) r3 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) write$tun(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="018000c00001cd00d4cb6dca9faa00a411fffe800000000000000000000000000025fe8000000000000000000000000000410006000000000000c910fc020000000000000000000000000000010100010400000000040109c910fe8000000000000000000000000000342f008038650000004e214e22006490780200000002000000010000000aca5a8b6ce6805e2848bf26b9657d77a266557dce8fcae03b4dd327bc02459e36d0fd0900a988961d18822c7c5452a25229046d915cf9c95e8bb5582ed83a80eb5517bfaa056855e7fbd7ccb597206273ed2b8700963ac78139dd068c24911ef208b2359e52ebf37111ac12a6d7ad9d4750b42795dbe33655a5151271e3919958b7100dde7ebd81245979ba6d80691e6bac5c4738d27acd996a317d6164fa2bc8997a81fdf2065b07b2b970e9e8"], 0xd6) ioctl$MEDIA_REQUEST_IOC_QUEUE(r3, 0x7c80, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x80002, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002bbd700004000000000000000000000000000000000000016401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000002000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000002008000000000000000001000000000000004400050000110000000000000000000000000000000000003c00000002000000e00000010000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e27, 0x6, @mcast2, 0x7}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='vfat\x00', 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) umount2(&(0x7f0000000080)='./file0\x00', 0x4) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r7 = socket(0x22, 0x4, 0x1) getpeername(r7, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB='<%\x00\x00\x00\x00\x00\r\x00'/20, @ANYRES32=0x0, @ANYBLOB="10a00000144005001c0012800b00010062726964676500000c0002800600270001000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc005}, 0x24040000) 3m25.243945895s ago: executing program 0 (id=627): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_clone(0x88200280, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x50000) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e22}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = syz_open_procfs(0x0, &(0x7f0000000ec0)='setgroups\x00') preadv(r3, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/217}], 0x1e, 0x81e, 0x20704513) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000f00)=0x3ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0xbd0cde0e6b7acbb5, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0)=[{{&(0x7f0000000140)=@generic, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000680)=""/234, 0xea}, {&(0x7f0000000780)=""/153, 0x99}, {&(0x7f0000000440)=""/116, 0x74}], 0x3, &(0x7f0000000840)=""/236, 0xec}, 0x4}, {{&(0x7f0000000940)=@alg, 0x80, &(0x7f00000020c0)=[{&(0x7f00000009c0)=""/155, 0x9b}, {&(0x7f0000000a80)=""/134, 0x86}, {&(0x7f0000000b40)=""/251, 0xfb}, {&(0x7f0000000c40)=""/227, 0xe3}, {&(0x7f0000000d40)=""/223, 0xdf}, {&(0x7f0000000e40)=""/80, 0x50}, {&(0x7f0000002240)=""/108, 0x6c}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/112, 0x70}, {&(0x7f0000001fc0)=""/253, 0xfd}], 0xa, &(0x7f0000002180)=""/63, 0x3f}, 0x22a2e8da}], 0x2, 0x2002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x1004) syz_init_net_socket$netrom(0x6, 0x5, 0x0) semop(0x0, 0x0, 0x0) 3m25.195302711s ago: executing program 0 (id=628): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = syz_open_dev$video(0x0, 0x20000000005, 0x8100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sched_getattr(0xffffffffffffffff, &(0x7f0000000200)={0x38}, 0x38, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x7, @remote, 0x9}, r8}}, 0x48) r9 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x4}, 0x94) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x38, 0x701, 0xfffffffc, 0x0, {0x4}}, 0x14}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000004200)=[{{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000240)="898c590d6fb5c5db4568efe073", 0xd}, {&(0x7f0000000400)="6f58f0e8afede242d1904d212757f4b8deb45d1f50f9e4047df5515b824b71248d3de8f0cb03e299523d", 0x2a}, {&(0x7f0000000440)="1d8abce90d599ef93d4758d56304b8897a40226222775e6ee8f111fb86cdd0c59ccc4e487f9f1da8e62f95de6b83a78b09a113683db48f098dd697070bdfd5c761f6e214a2a2a2c9ee5267a746d61fa3064d211743dd74ba89a5be502da6bda1463c9837cfe2370cf0d7cc752fc9f0ea19b45aa5e43f763bc2d0e202456954c327b15c78fd9d22b419505f68e8af4e8284c4354af97fc46ac513641d976b3bc650a964f1f3563bd26fc41e92083c6191400f926346bfe81485ab63b4e99b035c0b85cba0340e1f61a1211a92042b01321f781da93c4efaf62bafae47f9a1b87b7f18884ce23f58a0", 0xe8}, {&(0x7f0000000580)="5c87097410bc8fefd1a91fa8f909142b242d4daa8dda1ef2b1662510a0b8fda6529902157b474582720e9a96d74bea9f0ccc0718ae8dc8bee3deaabcefe372389fe6c1aaddf849006dcee3604adfd0fd85052057e97dcc47fde2dc9b81f25cace30f69cfbaefafdf832f5bab2ba76440f24367245ac2994354dab2b1fb00dd298bcfce257ae4c83ac45835cbc9efee2a8e19a1f92a69f1a28f2714a675f0c3e08c69ee1d0d06b76a8d41174bccf3a580a4509f230e6f519e9ad0bddedf7a87a48c654336c3c6d6d9cc7ac465342779190deaa1b2eb1401", 0xd7}, {&(0x7f0000000680)="0a24898abc90d8cb1e037fbbf449ceccd9e33a2712601e4d2c2e18fab34f99f4157055", 0x23}, {&(0x7f00000006c0)="43922465eda7022cd13cfca5ee0558", 0xf}], 0x6, &(0x7f0000000c80)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r3, r10, r5, r6, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8, 0x8000}}, {{&(0x7f0000000d80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000e00)="f532596060c599c1963cd68a978984671a", 0x11}, {&(0x7f0000000e40)="69258024b5d734f1af3e02887d316a3d721ec74bcda630f78c159edb42e0d712d9657948fb729e416a2fd32abca8d7d5a6bcf0e287463d9ed0cc10dd239828f55bb5975a74714aa0d62c50fb339a5f72f82d35ef86bdfb872484566f54e5b782ff3ee2250e0024f008eb6e", 0x6b}, {&(0x7f0000000ec0)="6e87f34fb53fcbc1c52f97abb49030e0e086e611df5f67bb685cdb5bbbbdce7cefc3a57e72e9d07539aee84fc12f6d8f1de261aace9dcce06d1acbb757db9d9d623bb6e51d07ab0c66754aa57fb1c594aa35012d2096a8bcad59122b9dd971304989b842ec782643bd8288ddf2faf2ebf4389bd27649174157101b28cc57e0cc262967f42f0bb3a655f11b53675755ba84554974408156833324a3325ca0c3134268791e", 0xa4}], 0x3, &(0x7f0000001000)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x95}}, {{&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000800)="0ff01edb1b9c384c1106ec8ae95dd8cad31cd30ee88df6ad620a2a65a97c5377baf581b4b5ea6cf5edfe9375d0437b927ccc2a39ff6dae50976bef23743f01e1e02b5a837f2b8a1c45c88678", 0x4c}, {&(0x7f0000000880)="99ba8b4f8a7d6f1d8e21c6b7d25ec7021180c686ba9bb893f6390910e78d380bd599e57cf043584398e58b08ded30465bcb8156e82260d4cd46d0ef1dab054665971ccc5875d929861766b0ec333388d55919858fd263d3229fc966d433ae7432619fb098c5f981e73f88bad75b9fce54d31a95b8fcd287786d7bb518bbb3b5cee1277cd3cb3856e9a7ee3b09c7fad2839d498f0c17ed5c62db8d2bc9f09f8fb88de709e93733e7050b2654b1d8e83e69a44982afadc51d72e94272263fd7054f0598f21b6fee0cdf158e2", 0xcb}], 0x2, &(0x7f0000003300)=[@rights={{0x28, 0x1, 0x1, [r7, 0xffffffffffffffff, r4, 0xffffffffffffffff, r6, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r1, r2, r2, r6, r6, r5, 0xffffffffffffffff, r4]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r5, r9]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r1, r5, r2]}}, @cred={{0x1c}}], 0x130, 0x40}}], 0x3, 0x0) 3m9.913688796s ago: executing program 33 (id=628): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r4 = syz_open_dev$video(0x0, 0x20000000005, 0x8100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sched_getattr(0xffffffffffffffff, &(0x7f0000000200)={0x38}, 0x38, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x7, @remote, 0x9}, r8}}, 0x48) r9 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x0, 0x4}, 0x94) madvise(&(0x7f0000570000/0x4000)=nil, 0x4000, 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x38, 0x701, 0xfffffffc, 0x0, {0x4}}, 0x14}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000004200)=[{{&(0x7f0000000380)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000700)=[{&(0x7f0000000240)="898c590d6fb5c5db4568efe073", 0xd}, {&(0x7f0000000400)="6f58f0e8afede242d1904d212757f4b8deb45d1f50f9e4047df5515b824b71248d3de8f0cb03e299523d", 0x2a}, {&(0x7f0000000440)="1d8abce90d599ef93d4758d56304b8897a40226222775e6ee8f111fb86cdd0c59ccc4e487f9f1da8e62f95de6b83a78b09a113683db48f098dd697070bdfd5c761f6e214a2a2a2c9ee5267a746d61fa3064d211743dd74ba89a5be502da6bda1463c9837cfe2370cf0d7cc752fc9f0ea19b45aa5e43f763bc2d0e202456954c327b15c78fd9d22b419505f68e8af4e8284c4354af97fc46ac513641d976b3bc650a964f1f3563bd26fc41e92083c6191400f926346bfe81485ab63b4e99b035c0b85cba0340e1f61a1211a92042b01321f781da93c4efaf62bafae47f9a1b87b7f18884ce23f58a0", 0xe8}, {&(0x7f0000000580)="5c87097410bc8fefd1a91fa8f909142b242d4daa8dda1ef2b1662510a0b8fda6529902157b474582720e9a96d74bea9f0ccc0718ae8dc8bee3deaabcefe372389fe6c1aaddf849006dcee3604adfd0fd85052057e97dcc47fde2dc9b81f25cace30f69cfbaefafdf832f5bab2ba76440f24367245ac2994354dab2b1fb00dd298bcfce257ae4c83ac45835cbc9efee2a8e19a1f92a69f1a28f2714a675f0c3e08c69ee1d0d06b76a8d41174bccf3a580a4509f230e6f519e9ad0bddedf7a87a48c654336c3c6d6d9cc7ac465342779190deaa1b2eb1401", 0xd7}, {&(0x7f0000000680)="0a24898abc90d8cb1e037fbbf449ceccd9e33a2712601e4d2c2e18fab34f99f4157055", 0x23}, {&(0x7f00000006c0)="43922465eda7022cd13cfca5ee0558", 0xf}], 0x6, &(0x7f0000000c80)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r3, r3, r10, r5, r6, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8, 0x8000}}, {{&(0x7f0000000d80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000e00)="f532596060c599c1963cd68a978984671a", 0x11}, {&(0x7f0000000e40)="69258024b5d734f1af3e02887d316a3d721ec74bcda630f78c159edb42e0d712d9657948fb729e416a2fd32abca8d7d5a6bcf0e287463d9ed0cc10dd239828f55bb5975a74714aa0d62c50fb339a5f72f82d35ef86bdfb872484566f54e5b782ff3ee2250e0024f008eb6e", 0x6b}, {&(0x7f0000000ec0)="6e87f34fb53fcbc1c52f97abb49030e0e086e611df5f67bb685cdb5bbbbdce7cefc3a57e72e9d07539aee84fc12f6d8f1de261aace9dcce06d1acbb757db9d9d623bb6e51d07ab0c66754aa57fb1c594aa35012d2096a8bcad59122b9dd971304989b842ec782643bd8288ddf2faf2ebf4389bd27649174157101b28cc57e0cc262967f42f0bb3a655f11b53675755ba84554974408156833324a3325ca0c3134268791e", 0xa4}], 0x3, &(0x7f0000001000)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38, 0x95}}, {{&(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000800)="0ff01edb1b9c384c1106ec8ae95dd8cad31cd30ee88df6ad620a2a65a97c5377baf581b4b5ea6cf5edfe9375d0437b927ccc2a39ff6dae50976bef23743f01e1e02b5a837f2b8a1c45c88678", 0x4c}, {&(0x7f0000000880)="99ba8b4f8a7d6f1d8e21c6b7d25ec7021180c686ba9bb893f6390910e78d380bd599e57cf043584398e58b08ded30465bcb8156e82260d4cd46d0ef1dab054665971ccc5875d929861766b0ec333388d55919858fd263d3229fc966d433ae7432619fb098c5f981e73f88bad75b9fce54d31a95b8fcd287786d7bb518bbb3b5cee1277cd3cb3856e9a7ee3b09c7fad2839d498f0c17ed5c62db8d2bc9f09f8fb88de709e93733e7050b2654b1d8e83e69a44982afadc51d72e94272263fd7054f0598f21b6fee0cdf158e2", 0xcb}], 0x2, &(0x7f0000003300)=[@rights={{0x28, 0x1, 0x1, [r7, 0xffffffffffffffff, r4, 0xffffffffffffffff, r6, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r1, r2, r2, r6, r6, r5, 0xffffffffffffffff, r4]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r5, r9]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r1, r5, r2]}}, @cred={{0x1c}}], 0x130, 0x40}}], 0x3, 0x0) 9.978068252s ago: executing program 2 (id=1285): syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101400, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2f", 0x68) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r6, r7, 0x25, 0x0, @val=@iter={0x0}}, 0x20) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="06000000007a5e0a5000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) creat(&(0x7f0000000040)='./bus\x00', 0x24) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = dup(0xffffffffffffffff) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) write$binfmt_aout(r10, &(0x7f0000000580)=ANY=[@ANYRES8=r9, @ANYRESHEX, @ANYRES8=r9, @ANYRESDEC=0x0, @ANYRES8=r11, @ANYRES16=r9, @ANYRES32=r10], 0xfffffeb7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x5) 8.049188961s ago: executing program 1 (id=1293): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000280)={0x1, 0x1, 0x27f}) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0x4, 0x0, &(0x7f0000000380)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x97) ftruncate(r2, 0x8800000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000300)=0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r5) sendfile(r4, r2, 0x0, 0x578410eb) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000580)={&(0x7f0000000040), 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3def", @ANYRES16=0x0, @ANYRES64=r2], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) sendto$inet6(r6, &(0x7f0000000240)='\f', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}, 0x1c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$kcm(0x29, 0x5, 0x0) 7.931278235s ago: executing program 5 (id=1294): keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x9e0eadae347b960d) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(0x0, 0xe8) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0xf3, 0x80ffff, 0x49, 0x0, 0x40) getpid() r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000015000103000000c20000000001000000"], 0x14}}, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000240)={0xc}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f00000000c0), 0x0, 0x4044010) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 7.495128729s ago: executing program 4 (id=1295): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x9e6e, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_QUERYCAP(r6, 0x80685600, &(0x7f00000000c0)) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 7.236929771s ago: executing program 1 (id=1296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 6.491999576s ago: executing program 5 (id=1297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000183c0000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000900)='erofs_lookup\x00', r4, 0x0, 0x400000000000000}, 0x7b) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f00000006c0)=""/8, &(0x7f0000000700)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0xffffffffffffffff, 0xffffffffffffffbc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5, 0x0, 0x4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000680)={{0x1, 0x1, 0x18, r1, {0x7}}, './file1\x00'}) r7 = memfd_create(&(0x7f0000001ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0r1, {r1}}, './file0\x00'}) ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000640)={0x0, @bt={0x4, 0x1, 0x0, 0x4, 0xff, 0x1, 0xfff, 0x3, 0xa2, 0x46d, 0xfffffff8, 0x3514, 0xaff, 0x2, 0x2, 0x38, {0x401, 0x702}, 0x4d, 0x1}}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000740)={0x4, &(0x7f0000000700)=[{0x2, 0x2, 0x1, 0x1ddc}, {0x8, 0xfc, 0xc, 0x3}, {0x6, 0x8, 0xe, 0x9}, {0x6, 0x9, 0x11, 0x1ff}]}) faccessat(r4, &(0x7f0000000780)='./file0\x00', 0x64) ioctl$TUNGETVNETBE(0xffffffffffffffff, 0x800454df, &(0x7f00000007c0)) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000840)={'vxcan1\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r5, &(0x7f0000000bc0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b80)={&(0x7f0000000880)={0x2e4, 0x13, 0x500, 0x70bd25, 0x25dfdbfe, {0x11, 0x0, 0x7, 0x2, {0x4e23, 0x4e20, [0x4, 0x1, 0x2d2f, 0xe], [0x6, 0xacda, 0x4, 0xa5], r6, [0x10, 0x4]}, 0x9}, [@INET_DIAG_REQ_BYTECODE={0xa8, 0x1, "b4cf5c410963d727ca9b3241a8336caf1a095be84963d6c05d7e17dcde4f9b5f70ff2131926edf7bd5a0da2044a7911cdf46baddb0aff3992fb0cf7f4b5db670ee170c10106ef4a208662c957d1ba4a4548d9a43a6fe0e94013e7fc4e5a79125d48e1ac5db71780646e629d26943ca1bccdfc07587a8c0df56c4d337434635388a38e98eab3b70e0ab66181925559b6be9193569c6c9dd241e4956cf75662ee35080dce3"}, @INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "0034038a76b3e9a8df2e2a6a0343a44e3291064c48c461d57bf3dc326b0e94598d6516ca72ec003cb0b855f968d9ee2c5f9e6e0da3f364cc421bfcf6e844c9f8a4fea74eb13085a239019b55b1a1c9be66f00ff3853d5ea88701190727f698d4f09eaed5a1fd9f4ced678d613f68f8d2a9ee33ffa34687e3a03d78a423bd7224a7613ae254b282aab389ced44bb1e76de1dcec2f6bfa09d763af12409a9f00e1f23f019a740b69a69fb8bad5b526cc437de1dc2aa80cc4007228e568"}, @INET_DIAG_REQ_BYTECODE={0xc2, 0x1, "13475782e458d1a825a130d52304cb37136425cd9408d718fb23d61ccceec2af07376b719c7595873fb6b22e190e31b2c8adc94084b32d3aeaaa829169e0020019aa4a5d6c386ab6d1e0c77eadfb18d8c1fddad551583637907e26c235665d54788e86c863439561c7fcf0cb2a96ec7749109c8eb69159e9f8f918aedcd0777a9c57787a13e13e7df6c065885f535c72cc13d28d130e588038a448d9fdb09ad1cc16fc899935c9fb7950eaea146a0ad05d37ee90892a30e58f5d01eb2ed9"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "9c2b0cf13ce321577b354b3b6208059f4716596387e127153445b88f0510c2404098e4799bba106a219d61acae713e29dac6e8a91b91fc7fc1fe84261448d9c2151fe9bb8bbc2962004885fb0eaea6c782058a6416041d0576fe240fdea48004144fe688c7eebc06"}]}, 0x2e4}, 0x1, 0x0, 0x0, 0x8080}, 0x24004014) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000c00), 0x800, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r7, 0x1e, &(0x7f0000000c40)={r4}, 0x1) ioctl$BTRFS_IOC_QGROUP_LIMIT(r3, 0x8030942b, &(0x7f0000000c80)={0x8, {0x1, 0xe09, 0x26aa, 0x0, 0xfff}}) r8 = openat$incfs(r7, &(0x7f0000000cc0)='.log\x00', 0x200000, 0x24) setsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, &(0x7f0000000d00), 0x4) mkdirat(r3, &(0x7f0000000d40)='./file0/file0\x00', 0xa0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r7) sendmsg$NL80211_CMD_NOTIFY_RADAR(r8, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x38, r9, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x22}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x35a}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = socket$phonet(0x23, 0x2, 0x1) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xf, 0x13, r10, 0x2d098000) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r8, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001040)={&(0x7f0000000f00)={0x120, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4}, 0x880) mkdir(&(0x7f00000010c0)='./file0/file0\x00', 0x20) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000001100)=0xfa4c, 0x4) chroot(&(0x7f0000001140)='./file1\x00') 5.935349962s ago: executing program 4 (id=1300): connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x12f, 0x254]}) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x3, 0x4, {0x5, @pix_mp={0x5, 0x99, 0x34324142, 0x9, 0xf, [{0x16, 0x9}, {0x9, 0x9}, {0x4, 0x9}, {0xffffff00, 0x2}, {0x5, 0x7}, {0x8, 0x6}, {0x8, 0x75d}, {0xb8c7, 0x5}], 0x5, 0x7, 0x6, 0x1, 0x4}}, 0x5}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="b00000001a00010000000000000000000a8000ff0000000000000000080010000e000000790008806bbea9748248ee4beb0129741dab2a1c5772dc4494e8b1a19b9ca6fdcef7598d4dd11bd6ea3f677ecfe817609bad8d7549a01d6cf602d48a97ed3ed38f125aa3503b96084b85aacf24fe78ba0e1347daa0245c06ee5afbf13674206d95a899d9610e6bf644b475eb37"], 0xb0}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', &(0x7f0000000340)=@ethtool_rx_ntuple={0x35, {0x12, @udp_ip4_spec={@empty, @multicast1, 0x4e20, 0x4e22, 0x7}, @tcp_ip4_spec={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0x4e24, 0x4e22, 0x48}, 0x15, 0x217, 0x8, 0x8, 0xfffffffffffffffe}}}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) sendmsg$sock(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001000)='z', 0x101d0}], 0x1}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r5, 0x400442c9, &(0x7f0000000080)={0x8, @random="c005b0f96711"}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000480)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdf250900020073797a310000000008004100736977001400330076657468305f746f5f62726964676500f42b99e92a5a3a315f16505ea672c74e7ca3bd1faffab4f7e2200e38fe8304e72dfaa38838d7abdf20519789076e7067e89900"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000ac0141ef1516dfd53bd9482e9c8b000000000000000a20000000000a010100000000000000000100fffe0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000044000000060a010400000000000000000100000008000b40000000001800048014000180090001007866726d00000000040002800900010073797a300000000004000740140000001100"], 0xb8}}, 0x4000040) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0900000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) 5.832013847s ago: executing program 1 (id=1301): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b01", @ANYRESDEC, @ANYRES64=0xffffffffffffffff], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002020000082505a1a4400001020301090258000101700000090400fd03020600050b24060000d18b1893e78c05240003000d240f0109000000030008008606241a040000082407850100080009058103000000070309058202ff03090004090503021000030006", @ANYRES16=0x0, @ANYRES8=r0, @ANYRES64=r0, @ANYRESOCT=0x0, @ANYRES64=r0], &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x5, 0x6, 0x0, 0x10, 0x8}, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="130f0500004042436b5390a529e60127beda7bc6c3b5ea44ac37927c8d904be2c12b29ddb9795d8a21e5b9cd9226dc4e73e354305bb91905ddf1b0f2d3c2d44fa95f6bab4621ac730a01a95a1454b50ac717fa2f1507d18018c733ea81dd12b8766d00f7fb6f53b324f50a7796bcbf6710dfc936173c1c95704fefff2d6301536972c580c854118e50b142a61d764e594437a2610af66953f32b369799caa9"], 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x448}}, {0xa7, &(0x7f0000000280)=ANY=[@ANYBLOB="a70340545d1bbd8cc45bfeef280980c0c2a87edca678298bbca8df31bff6eace966816c0c1e3a57e01e3e7c0bedc0c1cd1b21a2db91637fdd12dbfc4a2de6c29b2bb41e866ee774e88efeb13360f6198b0099bbfa98d97680c25ecf4c03444322f940f0bde6db2b7b62ae5b91a3d4e42321f4f10219d23aa2479286ef701471564ab691c3d322609d9d7905bd6064a7286050e0982e366886ff5e659f8e06fb2309b2452878375"]}, {0xdd, &(0x7f0000000340)=ANY=[@ANYRES16=r1]}]}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80000, 0x0) read(r2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x64) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x100) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r9, 0x0, 0x9}, 0x18) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x40044894}, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r7, 0x4010ae68, &(0x7f0000000000)={0x2000}) 5.235346376s ago: executing program 6 (id=1302): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x446982, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589ccd75d0275367048f46e1d1833f0b225d71e6aeeafac6b1195e3a2a07b7e7608b3a26", 0x2f) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmsg$alg(r3, 0x0, 0x0) recvmsg$can_raw(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000040)={'dummy0\x00', 0x12f}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r5 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) close(0x3) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r8, {0x0, 0xfffb}, {0xfff1, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x15, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bca2000000000000a602f500f8ffffffb703000008000000b704000002000000850000003300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r11, 0x2000012, 0xfffffffffffffdb7, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x50) openat$audio1(0xffffffffffffff9c, 0x0, 0x68000, 0x0) 5.191425162s ago: executing program 4 (id=1303): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x22, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000000c0), 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000002903000000000000000000070000040900010073797a300000000068000000090a01040000000000f85efd31ef651c5ddd208d5ddcb0710000000700000308000a40000000000900020073797a31000000000900010073c300000000004ca2ebbf400000000c24001280203701800e000100636f6e500a1fd369740000000c00028008000140000000080800034000000120140000001063904be98ee6ec6abc9d3f1e4a612db3a156309a4f10f9f7f51d7b591aec153d4eaddef9d6cc3ab100"/214], 0xb0}}, 0x20050800) getsockopt$sock_timeval(r3, 0x1, 0x43, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000010900000000000000000002000806000640000c0000"], 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x1) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000240)={0x2, 'bridge_slave_1\x00', {0x8}, 0x800}) socket$inet6(0xa, 0xa, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x40010, 0xffffffffffffffff, 0xffffd000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x400000000000000, 0x0, 0x8001}, 0x4000) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)=ANY=[@ANYRES16=r4, @ANYRES64=r1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r2], 0x48) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f00000004c0)=@udp}, 0x20) close_range(r6, 0xffffffffffffffff, 0x0) 5.082280802s ago: executing program 2 (id=1304): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1) sendmsg$NFC_CMD_DEP_LINK_DOWN(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r2, 0x103, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000011}, 0x4000) 4.915614528s ago: executing program 2 (id=1305): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r4 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r4, &(0x7f0000000040)='./file1\x00', r4, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000000080)={0x0, 0x2000000, @ioapic={0x0, 0x1, 0x8000, 0x0, 0x0, [{0x6, 0x7, 0xa, '\x00', 0xab}, {0x2, 0x0, 0x4, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0xb}, {0x5, 0xe, 0x7, '\x00', 0xf1}, {0x1c, 0xc, 0xd, '\x00', 0x43}, {0x4, 0x78, 0xc5, '\x00', 0x9}, {0x94, 0x5, 0x9, '\x00', 0xbe}, {0xf, 0x0, 0x6, '\x00', 0xfc}, {0x1, 0x4, 0x48, '\x00', 0x33}, {0x81, 0xf, 0x57, '\x00', 0x9}, {0x5, 0x4, 0x1, '\x00', 0x6}, {0x81, 0x6, 0x6, '\x00', 0x48}, {0x3, 0x1, 0x8, '\x00', 0x8}, {0x6, 0x3, 0x2, '\x00', 0x2}, {0x6, 0x5, 0x3, '\x00', 0x50}, {0xd, 0x2, 0xd}, {0x8, 0x81, 0x81, '\x00', 0xb}, {0x3, 0x89, 0x1, '\x00', 0xf}, {0x78, 0x7, 0x2, '\x00', 0x5}, {0x3, 0x7, 0xc1, '\x00', 0x7}, {0x5, 0x26, 0x5, '\x00', 0x9}, {0x7, 0x9, 0xe4, '\x00', 0x6}, {0xc1, 0xd, 0x3, '\x00', 0x10}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) chown(&(0x7f0000000580)='./file0\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x1000000, 0x2}]}]}}, &(0x7f00000001c0)=""/2, 0x32, 0x2, 0x1}, 0x28) r6 = socket$netlink(0x10, 0x3, 0x5) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) 4.331338656s ago: executing program 5 (id=1306): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000280)={0x1, 0x1, 0x27f}) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0x2, 0x7, 0x0, 0x5, 0x1, 0x4, 0x2}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0x4, 0x0, &(0x7f0000000380)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x19) set_mempolicy(0x2, &(0x7f0000000080)=0x51e1, 0x3ff) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x97) ftruncate(r2, 0x8800000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000300)=0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), r5) sendfile(r4, r2, 0x0, 0x578410eb) sendmsg$IPVS_CMD_FLUSH(r2, &(0x7f0000000580)={&(0x7f0000000040), 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3def", @ANYRES16=0x0, @ANYRES64=r2], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8) sendto$inet6(r6, &(0x7f0000000240)='\f', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}, 0x1c) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$kcm(0x29, 0x5, 0x0) 3.563604053s ago: executing program 6 (id=1307): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$inet(0x2, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$phonet(0x23, 0x2, 0x1) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r5 = gettid() r6 = getpid() rt_tgsigqueueinfo(r6, r5, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4}) r7 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r7, &(0x7f0000000740)=""/384, 0x200008c0) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) 3.263838691s ago: executing program 5 (id=1308): timer_create(0x2, &(0x7f0000000440)={0x0, 0x2f, 0x2, @thr={&(0x7f0000002780)="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", &(0x7f0000000200)="eeec074185e31948ea698426de379f6acefeb9299bdb3e96f8730b8a11f9ab7273de42948847726c02a688638ecc44e7395ef4af1e9fcc943479d232809493fa28f926ba9964f3e901ecf6e4e0f9da6ec3fb70cc44e741cabe987fd370f3633f08ed58366e1d9478648d3b0749f9a316f1e8f4552fe0e0fb00772055b35f4e0a0d5fe8b90cd3ecefca9c560022ccf65f0f3ca7964a7037a9c3e6904da0dd3dea59f34623b5999743b2ff5476d71801f34b5ce8521a17ba234ae901c3"}}, &(0x7f0000000400)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r5}) close_range(r1, 0xffffffffffffffff, 0x0) 2.937449348s ago: executing program 6 (id=1309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a14fc29", 0xb) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 2.767026107s ago: executing program 5 (id=1310): connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x12f, 0x254]}) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x3, 0x4, {0x5, @pix_mp={0x5, 0x99, 0x34324142, 0x9, 0xf, [{0x16, 0x9}, {0x9, 0x9}, {0x4, 0x9}, {0xffffff00, 0x2}, {0x5, 0x7}, {0x8, 0x6}, {0x8, 0x75d}, {0xb8c7, 0x5}], 0x5, 0x7, 0x6, 0x1, 0x4}}, 0x5}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="b00000001a00010000000000000000000a8000ff0000000000000000080010000e000000790008806bbea9748248ee4beb0129741dab2a1c5772dc4494e8b1a19b9ca6fdcef7598d4dd11bd6ea3f677ecfe817609bad8d7549a01d6cf602d48a97ed3ed38f125aa3503b96084b85aacf24fe78ba0e1347daa0245c06ee5afbf13674206d95a899d9610e6bf644b475eb37"], 0xb0}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', &(0x7f0000000340)=@ethtool_rx_ntuple={0x35, {0x12, @udp_ip4_spec={@empty, @multicast1, 0x4e20, 0x4e22, 0x7}, @tcp_ip4_spec={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0x4e24, 0x4e22, 0x48}, 0x15, 0x217, 0x8, 0x8, 0xfffffffffffffffe}}}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) sendmsg$sock(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001000)='z', 0x101d0}], 0x1}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) recvmsg(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000480)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdf250900020073797a310000000008004100736977001400330076657468305f746f5f62726964676500f42b99e92a5a3a315f16505ea672c74e7ca3bd1faffab4f7e2200e38fe8304e72dfaa38838d7abdf20519789076e7067e89900"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000ac0141ef1516dfd53bd9482e9c8b000000000000000a20000000000a010100000000000000000100fffe0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000044000000060a010400000000000000000100000008000b40000000001800048014000180090001007866726d00000000040002800900010073797a300000000004000740140000001100"], 0xb8}}, 0x4000040) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0900000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) 2.762837609s ago: executing program 2 (id=1311): connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x12f, 0x254]}) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x3, 0x4, {0x5, @pix_mp={0x5, 0x99, 0x34324142, 0x9, 0xf, [{0x16, 0x9}, {0x9, 0x9}, {0x4, 0x9}, {0xffffff00, 0x2}, {0x5, 0x7}, {0x8, 0x6}, {0x8, 0x75d}, {0xb8c7, 0x5}], 0x5, 0x7, 0x6, 0x1, 0x4}}, 0x5}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="b00000001a00010000000000000000000a8000ff0000000000000000080010000e000000790008806bbea9748248ee4beb0129741dab2a1c5772dc4494e8b1a19b9ca6fdcef7598d4dd11bd6ea3f677ecfe817609bad8d7549a01d6cf602d48a97ed3ed38f125aa3503b96084b85aacf24fe78ba0e1347daa0245c06ee5afbf13674206d95a899d9610e6bf644b475eb37"], 0xb0}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge_slave_0\x00', &(0x7f0000000340)=@ethtool_rx_ntuple={0x35, {0x12, @udp_ip4_spec={@empty, @multicast1, 0x4e20, 0x4e22, 0x7}, @tcp_ip4_spec={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0x4e24, 0x4e22, 0x48}, 0x15, 0x217, 0x8, 0x8, 0xfffffffffffffffe}}}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) sendmsg$sock(r3, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000001000)='z', 0x101d0}], 0x1}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403}}) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) recvmsg(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000480)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdf250900020073797a310000000008004100736977001400330076657468305f746f5f62726964676500f42b99e92a5a3a315f16505ea672c74e7ca3bd1faffab4f7e2200e38fe8304e72dfaa38838d7abdf20519789076e7067e89900"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000ac0141ef1516dfd53bd9482e9c8b000000000000000a20000000000a010100000000000000000100fffe0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000044000000060a010400000000000000000100000008000b40000000001800048014000180090001007866726d00000000040002800900010073797a300000000004000740140000001100"], 0xb8}}, 0x4000040) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0900000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) 2.252832991s ago: executing program 1 (id=1312): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0205647, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x105042, 0x189) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x105042, 0x189) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./bus\x00', r3, 0x4000, r1}, 0x18) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./bus\x00', r3, 0x4000, r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) (async) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x201, 0x4800003e, r4, 0x0) open(&(0x7f0000000140)='./file2\x00', 0x101100, 0x11) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000), &(0x7f0000000280)) (async) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_setup(0x23b4, &(0x7f0000000480)={0x0, 0xc053, 0x10, 0x2, 0x318, 0x0, r6}, &(0x7f0000000500), &(0x7f0000000540)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) (async) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r9, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000040)={0x50, 0x0, r10, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) (async) write$FUSE_INIT(r9, &(0x7f0000000040)={0x50, 0x0, r10, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r9, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r9, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r9, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x2, 0x0, {0x0, 0x4000000, 0x4, 0x1000000100, 0x0, 0x0, 0x7fffffe, 0x8000, 0x200, 0x8000, 0x0, r11}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000380)=@nullb, r11, &(0x7f00000003c0)) io_uring_enter(r6, 0x47f6, 0x0, 0x4, 0x0, 0x0) (async) io_uring_enter(r6, 0x47f6, 0x0, 0x4, 0x0, 0x0) 1.879834373s ago: executing program 6 (id=1313): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000380)={{&(0x7f0000000300)={'Accelerator1\x00', {&(0x7f0000000100)=@adf_str={@bank={'Bank', '0', 'InterruptCoalescingEnabled\x00'}, {"cc592c6691d19cf6b503580ce4df84508b029bbe26435688e5522da07ce629e16443c1560d1137cfe42678955643c43653838494e8046779d6d5915288de1cb7"}, {&(0x7f0000000040)=@adf_dec={@normal='NumberCyInstances\x00', {0x8000}}}}}, {&(0x7f0000000280)={'KERNEL\x00', {&(0x7f00000001c0)=@adf_hex={@bank={'Bank', '2', 'InterruptCoalescingTimerNs\x00'}, {0x401}}}}}}}, 0x9}) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r0, 0x40096100, &(0x7f0000000380)={{&(0x7f0000000300)={'Accelerator1\x00', {&(0x7f0000000100)=@adf_str={@bank={'Bank', '0', 'InterruptCoalescingEnabled\x00'}, {"cc592c6691d19cf6b503580ce4df84508b029bbe26435688e5522da07ce629e16443c1560d1137cfe42678955643c43653838494e8046779d6d5915288de1cb7"}, {&(0x7f0000000040)=@adf_dec={@normal='NumberCyInstances\x00', {0x8000}}}}}, {&(0x7f0000000280)={'KERNEL\x00', {&(0x7f00000001c0)=@adf_hex={@bank={'Bank', '2', 'InterruptCoalescingTimerNs\x00'}, {0x401}}}}}}}, 0x9}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=@newtaction={0x70, 0x30, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{0x5c, 0x1, [@m_gact={0x58, 0x1f, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x734, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x823, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1ca1, 0x1}}]}, {0x8, 0x6, "4431d826"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) (async) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) getpid() (async) r3 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000540)={{0x3, 0x1, 0x5, 0x6, 'syz1\x00', 0x5aa}, 0x5, 0x0, 0x400, r3, 0x2, 0x4, 'syz0\x00', &(0x7f0000000500)=['NumberCyInstances\x00', 'KERNEL\x00'], 0x19}) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000006c0)={0x0, 0x6}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000740)={r4, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}, [0x4, 0x74, 0xa, 0xce18, 0x1, 0x8, 0x1, 0x5, 0xfd, 0xd, 0x0, 0x3, 0x904, 0x3, 0x6]}, &(0x7f0000000840)=0x100) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000900)={&(0x7f0000000880)=""/80, 0x50, 0x6, 0x8421}) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000940)={0x24, @short={0x2, 0x3}}, 0x14) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) setsockopt(r6, 0x6, 0x10, &(0x7f00000009c0)="d3556392073d5cdf9676d72e5596e526fa1eb53121a1df45232bfdf93be065667225f0bfb7f5445120f6ba37c870f8973ccbc4a44ea1cae4838ff0987f9759657b56b32b4fbd59ca723374fff8ba7d282fc3ba", 0x53) quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000200, 0xee00, &(0x7f0000000a40)='./file0\x00') (async) quotactl_fd$Q_QUOTAON(r6, 0xffffffff80000200, 0xee00, &(0x7f0000000a40)='./file0\x00') set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) (async) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0, 0x0}, &(0x7f0000000ac0)=0xc) setgroups(0x6, &(0x7f0000000b00)=[r1, r7, r1, r1, r1, r1]) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000b40)) r8 = socket$inet6(0xa, 0x80000, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000cc0)={0x3, 'bond_slave_1\x00', {0x4589}, 0xf}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000cc0)={0x3, 'bond_slave_1\x00', {0x4589}, 0xf}) fchdir(r2) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSCAUSE(r9, 0x89e1, &(0x7f0000000d00)=0x1ff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000d40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000d80)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000d80)=0x0) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000dc0)={0x0, @nfc={0x27, r10, 0xffffffffffffffff, 0x7}, @nfc={0x27, r11, 0x1, 0x1}, @ethernet={0x1, @random="fb71d7172b85"}, 0x3ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x44d, 0x6, 0x4}) (async) ioctl$sock_SIOCADDRT(r5, 0x890b, &(0x7f0000000dc0)={0x0, @nfc={0x27, r10, 0xffffffffffffffff, 0x7}, @nfc={0x27, r11, 0x1, 0x1}, @ethernet={0x1, @random="fb71d7172b85"}, 0x3ff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x44d, 0x6, 0x4}) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000e40), &(0x7f0000000e80)=0x4) 1.671861044s ago: executing program 4 (id=1314): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000000, &(0x7f0000000180)=0x1, 0x4) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r5, 0x5421, &(0x7f0000000240)=0x1) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x7bd}}, './file0\x00'}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregs(0xc, r6, 0xffffffffffffdcaf, &(0x7f0000000040)=""/45) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x24040808) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r7, 0x0, 0x201f00) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c0001"], 0x92fc}}, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x1, 0x80000000}) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') 1.669214515s ago: executing program 5 (id=1315): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x64040, 0xd0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x200}, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f00000022c0)={0x10, 0x30, 0xfa00, {&(0x7f0000002280), 0x4, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x805e}}}, 0x38) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) epoll_create(0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f00000001c0)={0x2, @pix={0x0, 0x0, 0x34565559, 0x0, 0x2000000, 0x0, 0x25, 0xfffffffd}}) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001200050100000000fedb0300000000000000000028001a00ffffffff"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x75, 0x40082) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000300)={{@host, 0xd}, 0x1}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') read$FUSE(r7, &(0x7f0000000240)={0x2020}, 0x2020) pread64(r7, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.543850806s ago: executing program 1 (id=1316): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b113e000000000095"], 0x0}, 0x90) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000380)=""/76}, 0x20) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x4800) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x324, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x2, [{{0x9, 0x4, 0x0, 0xfc, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8000, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) exit(0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) unshare(0x2c020400) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x80, &(0x7f00000000c0)=@un=@abs={0x1, 0x0, 0x4e20}}) 890.973139ms ago: executing program 2 (id=1317): socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/snmp\x00') r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) socket(0x2, 0x80805, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000019780)=""/102400, 0x19000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="84010000100013070000000000000000fe880000000000000000000000000101ac1414aa000000000000000000000000000000000000000000000000330000"], 0x184}, 0x1, 0x0, 0x0, 0x44014}, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x2, 0x0, 0x1, 0x100000000, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x3) accept4(r0, 0x0, 0x0, 0x0) 814.71294ms ago: executing program 6 (id=1318): socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x2}, @generic={0x1, 0x2}]}}}}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x40210}}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000c, 0x204031, 0xffffffffffffffff, 0xffffd000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x10000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) 709.968525ms ago: executing program 4 (id=1319): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) socket$inet(0x2, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$phonet(0x23, 0x2, 0x1) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r5 = gettid() r6 = getpid() rt_tgsigqueueinfo(r6, r5, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x4}) r7 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r7, &(0x7f0000000740)=""/384, 0x200008c0) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) 265.237029ms ago: executing program 4 (id=1320): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) sched_setscheduler(0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x5, 0x4}, &(0x7f00000000c0)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x40000000000001, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019780)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRES32=r1], 0x184}, 0x1, 0x0, 0x0, 0x44014}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={0x0, 0xffff, 0x0, 0x6, 0x7}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={r3, 0x1, 0x9}, 0xc) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x20003f) socket$inet6_tcp(0xa, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=1321): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/50, 0x304000, 0x800, 0x0, 0x1}, 0x20) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000400)={0x0, @bt={0x8a5, 0x93, 0x1, 0x1, 0xd59f80, 0x19ef, 0x7, 0x19ef, 0x3, 0x1, 0x27ff, 0x2800, 0x2, 0xbb6, 0x12, 0x8, {0x8, 0xffffffff}, 0xd0, 0x9}}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0xf}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48890}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000000000000000000200000800000000000", @ANYRES32=r3, @ANYBLOB="2008010000040000"], 0x20}}, 0x4084) kernel console output (not intermixed with test programs): b 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.178139][ T5848] usb 3-1: Product: syz [ 303.182327][ T5848] usb 3-1: Manufacturer: syz [ 303.186988][ T5848] usb 3-1: SerialNumber: syz [ 303.227639][ T30] audit: type=1400 audit(1757426281.997:1091): avc: denied { create } for pid=8770 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 303.228216][ T5848] usb 3-1: config 0 descriptor?? [ 303.306192][ T30] audit: type=1400 audit(1757426282.017:1092): avc: denied { bind } for pid=8770 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 303.332962][ T30] audit: type=1400 audit(1757426282.017:1093): avc: denied { create } for pid=8770 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 303.356168][ T30] audit: type=1400 audit(1757426282.037:1094): avc: denied { write } for pid=8770 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 303.376592][ T30] audit: type=1400 audit(1757426282.037:1095): avc: denied { write } for pid=8770 comm="syz.4.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 303.558242][ T5848] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 304.170514][ T8760] overlay: Bad value for 'workdir' [ 304.281010][ T5848] gspca_sunplus: reg_w_riv err -71 [ 304.307181][ T5848] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 304.819597][ T5848] usb 3-1: USB disconnect, device number 26 [ 305.987096][ T8821] netlink: 44 bytes leftover after parsing attributes in process `syz.4.646'. [ 307.164774][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 307.164809][ T30] audit: type=1400 audit(1757426285.927:1106): avc: denied { connect } for pid=8848 comm="syz.4.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 307.823412][ T8866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 308.458390][ T8874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.477393][ T8874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.762938][ T5917] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 308.946366][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.972298][ T5917] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.002799][ T5917] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 309.054293][ T5917] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 309.094847][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.168155][ T5917] usb 2-1: config 0 descriptor?? [ 310.194345][ T5917] hid_parser_main: 92 callbacks suppressed [ 310.194365][ T5917] dragonrise 0003:0079:0011.0010: unknown main item tag 0x0 [ 310.226183][ T5917] dragonrise 0003:0079:0011.0010: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.1-1/input0 [ 310.500452][ T8905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.667'. [ 311.460732][ T5959] usb 2-1: USB disconnect, device number 30 [ 312.485406][ T30] audit: type=1400 audit(1757426291.251:1107): avc: denied { getopt } for pid=8915 comm="syz.5.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 313.882882][ T5910] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 313.943879][ T30] audit: type=1400 audit(1757426292.711:1108): avc: denied { nlmsg_read } for pid=8935 comm="syz.5.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 314.052955][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 314.066910][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.080160][ T5910] usb 3-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 314.098297][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.142860][ T5910] usb 3-1: config 0 descriptor?? [ 314.580037][ T8924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.593225][ T8924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.620673][ T5910] belkin 0003:050D:3201.0011: unknown main item tag 0x3 [ 314.628042][ T5910] belkin 0003:050D:3201.0011: unknown global tag 0xe [ 314.638178][ T5910] belkin 0003:050D:3201.0011: item 0 0 1 14 parsing failed [ 314.646880][ T5910] belkin 0003:050D:3201.0011: parse failed [ 314.655771][ T5910] belkin 0003:050D:3201.0011: probe with driver belkin failed with error -22 [ 316.176837][ T8965] bridge0: port 3(team0) entered disabled state [ 316.183278][ T8965] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.191425][ T8965] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.218193][ T8965] batman_adv: batadv0: Interface deactivated: dummy0 [ 316.248379][ T8965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.258412][ T8965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.384691][ T60] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.407884][ T60] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.445112][ T60] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.476547][ T60] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.576646][ T8975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.595289][ T8975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.619029][ T8975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.635691][ T8975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.639570][ T5848] usb 3-1: USB disconnect, device number 27 [ 316.672410][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.678990][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.141235][ T8989] openvswitch: netlink: VXLAN extension 2 out of range max 1 [ 317.151710][ T8992] netlink: 104 bytes leftover after parsing attributes in process `syz.2.689'. [ 317.173397][ T30] audit: type=1400 audit(1757426295.901:1109): avc: denied { ioctl } for pid=8990 comm="syz.2.689" path="socket:[23810]" dev="sockfs" ino=23810 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 317.206320][ T8991] openvswitch: netlink: VXLAN extension 2 out of range max 1 [ 317.263948][ T30] audit: type=1400 audit(1757426295.981:1110): avc: denied { setopt } for pid=8987 comm="syz.1.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 318.514557][ T30] audit: type=1400 audit(1757426297.271:1111): avc: denied { setopt } for pid=9005 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 318.644063][ T30] audit: type=1400 audit(1757426297.401:1112): avc: denied { listen } for pid=9007 comm="syz.5.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 319.064275][ T30] audit: type=1400 audit(1757426297.411:1113): avc: denied { ioctl } for pid=9007 comm="syz.5.693" path="socket:[23827]" dev="sockfs" ino=23827 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 319.219701][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 319.230155][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.238251][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.258563][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 319.269354][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 319.278104][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 319.290210][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 319.297528][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.304935][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 319.312330][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 319.320513][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 319.336946][ T30] audit: type=1400 audit(1757426298.101:1114): avc: denied { mounton } for pid=9015 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 319.427978][ T30] audit: type=1400 audit(1757426298.191:1115): avc: denied { ioctl } for pid=9005 comm="syz.2.692" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 319.496252][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.549999][ T30] audit: type=1400 audit(1757426298.311:1116): avc: denied { read } for pid=9019 comm="syz.5.694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 319.655570][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.789458][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.833150][ T975] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 319.921204][ T30] audit: type=1326 audit(1757426298.681:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9038 comm="syz.1.699" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff59ab8ebe9 code=0x0 [ 320.082886][ T30] audit: type=1400 audit(1757426298.841:1118): avc: denied { mounton } for pid=9038 comm="syz.1.699" path="/proc/603/task/604/net/dev_snmp6" dev="proc" ino=4026533259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 320.143533][ T9041] block nbd4: Attempted send on invalid socket [ 320.150249][ T975] usb 3-1: device descriptor read/64, error -71 [ 320.152820][ T30] audit: type=1400 audit(1757426298.891:1119): avc: denied { mounton } for pid=9033 comm="syz.4.698" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 320.156610][ T9041] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 3 [ 320.256949][ T9015] chnl_net:caif_netlink_parms(): no params data found [ 320.269626][ T9041] hfsplus: unable to find HFS+ superblock [ 320.433979][ T975] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 320.597182][ T30] audit: type=1400 audit(1757426299.351:1120): avc: denied { ioctl } for pid=9038 comm="syz.1.699" path="socket:[23024]" dev="sockfs" ino=23024 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 320.627323][ T975] usb 3-1: device descriptor read/64, error -71 [ 320.762090][ T975] usb usb3-port1: attempt power cycle [ 320.802111][ T9050] netlink: 16 bytes leftover after parsing attributes in process `syz.1.699'. [ 320.835400][ T12] bridge_slave_1: left allmulticast mode [ 320.841032][ T12] bridge_slave_1: left promiscuous mode [ 320.865117][ T9047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.699'. [ 320.999459][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.038165][ T12] bridge_slave_0: left allmulticast mode [ 321.056198][ T12] bridge_slave_0: left promiscuous mode [ 321.061849][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.574160][ T975] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 321.581405][ T5860] Bluetooth: hci0: command tx timeout [ 321.598298][ T975] usb 3-1: device descriptor read/8, error -71 [ 322.019971][ T9059] netlink: 'syz.4.701': attribute type 4 has an invalid length. [ 322.042815][ T975] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 322.075568][ T975] usb 3-1: device descriptor read/8, error -71 [ 322.166019][ T5959] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 322.183249][ T975] usb usb3-port1: unable to enumerate USB device [ 322.302841][ T5959] usb 6-1: device descriptor read/64, error -71 [ 322.542950][ T5959] usb 6-1: new low-speed USB device number 17 using dummy_hcd [ 322.673681][ T5959] usb 6-1: device descriptor read/64, error -71 [ 322.715163][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.727623][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.740161][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 322.748991][ T12] bond0 (unregistering): Released all slaves [ 322.793154][ T5959] usb usb6-port1: attempt power cycle [ 322.801498][ T9015] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.828883][ T9015] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.886789][ T9015] bridge_slave_0: entered allmulticast mode [ 322.916226][ T9015] bridge_slave_0: entered promiscuous mode [ 322.950921][ T9015] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.958366][ T9015] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.965745][ T9015] bridge_slave_1: entered allmulticast mode [ 322.972522][ T9015] bridge_slave_1: entered promiscuous mode [ 323.015355][ T9015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.032652][ T9015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.273070][ T5959] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 323.284576][ T9015] team0: Port device team_slave_0 added [ 323.295439][ T5959] usb 6-1: device descriptor read/8, error -71 [ 323.316368][ T9015] team0: Port device team_slave_1 added [ 323.350561][ T9015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.417054][ T9015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.453390][ T9015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.504353][ T12] hsr_slave_0: left promiscuous mode [ 323.514285][ T12] hsr_slave_1: left promiscuous mode [ 323.542252][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.550205][ T5959] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 323.566733][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.583702][ T5959] usb 6-1: device descriptor read/8, error -71 [ 323.605652][ T12] pim6reg (unregistering): left allmulticast mode [ 323.624973][ T5860] Bluetooth: hci0: command tx timeout [ 323.635446][ T12] team0 (unregistering): Port device batadv1 removed [ 323.713203][ T5959] usb usb6-port1: unable to enumerate USB device [ 324.651499][ T12] team0 (unregistering): Port device team_slave_1 removed [ 324.689459][ T12] team0 (unregistering): Port device team_slave_0 removed [ 324.903451][ T975] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 324.990691][ T9015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.999232][ T9015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.027229][ T9015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.065201][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 325.096769][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 52, changing to 4 [ 325.137133][ T975] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 14385, setting to 1023 [ 325.199373][ T975] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 325.225287][ T975] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.244132][ T9015] hsr_slave_0: entered promiscuous mode [ 325.250516][ T9015] hsr_slave_1: entered promiscuous mode [ 325.251455][ T975] usb 2-1: Product: syz [ 325.268451][ T9015] debugfs: 'hsr0' already exists in 'hsr' [ 325.270457][ T975] usb 2-1: Manufacturer: syz [ 325.286294][ T975] usb 2-1: SerialNumber: syz [ 325.297454][ T9015] Cannot create hsr debugfs directory [ 325.297823][ T975] usb 2-1: config 0 descriptor?? [ 325.327104][ T975] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 36 [ 325.525717][ T9075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.563396][ T9075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.710967][ T5860] Bluetooth: hci0: command tx timeout [ 325.729360][ T9098] syz.2.712 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 325.917058][ T9015] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 325.946313][ T9015] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 326.084955][ T9015] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 326.111811][ T9015] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 326.748547][ T9108] netlink: 44 bytes leftover after parsing attributes in process `syz.2.713'. [ 326.990668][ T9015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.024175][ T9015] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.040777][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.047868][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.441508][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.448659][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.843652][ T5860] Bluetooth: hci0: command tx timeout [ 327.901089][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 327.965870][ T30] audit: type=1400 audit(1757426306.661:1122): avc: denied { create } for pid=9133 comm="syz.5.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 328.074557][ T30] audit: type=1400 audit(1757426306.841:1123): avc: denied { connect } for pid=9141 comm="syz.5.721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 328.098272][ T9143] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input22 [ 328.101017][ T975] usb 2-1: USB disconnect, device number 31 [ 328.261202][ T7126] udevd[7126]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 328.375507][ T9015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.043619][ T975] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 329.295963][ T975] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 329.317423][ T975] usb 6-1: config 0 has no interface number 0 [ 329.344319][ T975] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.428623][ T975] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.438897][ T975] usb 6-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 329.451637][ T9015] veth0_vlan: entered promiscuous mode [ 329.465092][ T9164] overlayfs: failed to resolve 'index=on': -2 [ 329.477773][ T9015] veth1_vlan: entered promiscuous mode [ 329.478321][ T975] usb 6-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 329.575085][ T9015] veth0_macvtap: entered promiscuous mode [ 329.587812][ T9015] veth1_macvtap: entered promiscuous mode [ 329.596064][ T975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.624205][ T9015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.638437][ T9015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.667741][ T975] usb 6-1: config 0 descriptor?? [ 329.781274][ T990] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.801433][ T3551] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.830940][ T30] audit: type=1400 audit(1757426308.591:1124): avc: denied { create } for pid=9174 comm="syz.1.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 329.855003][ T3551] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.022157][ T30] audit: type=1400 audit(1757426308.781:1125): avc: denied { read write } for pid=9174 comm="syz.1.727" name="usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 330.055942][ T3551] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.056000][ T30] audit: type=1400 audit(1757426308.781:1126): avc: denied { open } for pid=9174 comm="syz.1.727" path="/dev/usbmon5" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 330.097121][ T30] audit: type=1400 audit(1757426308.781:1127): avc: denied { ioctl } for pid=9174 comm="syz.1.727" path="/dev/usbmon5" dev="devtmpfs" ino=731 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 330.098764][ T9181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.158822][ T9181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.209050][ T3551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.217875][ T3551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.231688][ T975] uclogic 0003:28BD:0934.0012: Interface probing failed: -22 [ 330.283595][ T975] uclogic 0003:28BD:0934.0012: interface is invalid, ignoring [ 330.465752][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.476090][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.499603][ T5959] usb 6-1: USB disconnect, device number 20 [ 330.512787][ T30] audit: type=1400 audit(1757426309.261:1128): avc: denied { mounton } for pid=9015 comm="syz-executor" path="/root/syzkaller.aP3kC5/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 330.544227][ T9183] overlay: Unknown parameter 'fsmagic' [ 330.603185][ T30] audit: type=1400 audit(1757426309.341:1129): avc: denied { setopt } for pid=9180 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 330.716028][ T30] audit: type=1400 audit(1757426309.431:1130): avc: denied { mounton } for pid=9015 comm="syz-executor" path="/root/syzkaller.aP3kC5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 330.760365][ T30] audit: type=1400 audit(1757426309.451:1131): avc: denied { mounton } for pid=9015 comm="syz-executor" path="/root/syzkaller.aP3kC5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=24541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 331.073125][ T5848] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 331.304131][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 331.337734][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 52, changing to 4 [ 331.658809][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 14385, setting to 1023 [ 331.676454][ T5848] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 331.687277][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.781811][ T5848] usb 2-1: Product: syz [ 331.810502][ T5848] usb 2-1: Manufacturer: syz [ 331.847242][ T5848] usb 2-1: SerialNumber: syz [ 331.976064][ T9202] netlink: 'syz.6.733': attribute type 10 has an invalid length. [ 331.985165][ T9202] netlink: 40 bytes leftover after parsing attributes in process `syz.6.733'. [ 332.196114][ T5848] usb 2-1: config 0 descriptor?? [ 332.295613][ T5848] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 36 [ 332.365716][ T9202] team0: Port device geneve0 added [ 332.445795][ T9208] netlink: 28 bytes leftover after parsing attributes in process `syz.5.734'. [ 332.796927][ T9189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.816197][ T9189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.327664][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 333.327680][ T30] audit: type=1400 audit(1757426312.091:1135): avc: denied { name_bind } for pid=9213 comm="syz.4.737" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 333.455545][ T9221] netlink: 'syz.5.736': attribute type 10 has an invalid length. [ 333.464567][ T9221] netlink: 40 bytes leftover after parsing attributes in process `syz.5.736'. [ 333.655834][ T9221] team0: Port device geneve0 added [ 333.960338][ T9231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.971653][ T9231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.328154][ T5848] usb 2-1: USB disconnect, device number 32 [ 336.163284][ T30] audit: type=1400 audit(1757426314.921:1136): avc: denied { setattr } for pid=9251 comm="syz.4.745" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 336.270544][ T30] audit: type=1400 audit(1757426315.001:1137): avc: denied { bind } for pid=9255 comm="syz.2.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 336.302004][ T9256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.319671][ T9256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.331899][ T30] audit: type=1400 audit(1757426315.001:1138): avc: denied { write } for pid=9255 comm="syz.2.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 336.493399][ T5910] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 336.538003][ T30] audit: type=1400 audit(1757426315.301:1139): avc: denied { setopt } for pid=9255 comm="syz.2.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 336.576963][ T30] audit: type=1400 audit(1757426315.301:1140): avc: denied { connect } for pid=9255 comm="syz.2.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 336.658559][ T5910] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 336.670175][ T5910] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 336.690036][ T5910] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 336.771199][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.811762][ T9257] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 336.842139][ T5910] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 337.050976][ T5931] usb 3-1: USB disconnect, device number 32 [ 338.653175][ T5931] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 338.864905][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 338.875536][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 52, changing to 4 [ 338.888654][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 14385, setting to 1023 [ 338.923903][ T5931] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 338.933087][ T5931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.941110][ T5931] usb 2-1: Product: syz [ 338.947472][ T5931] usb 2-1: Manufacturer: syz [ 338.952198][ T5931] usb 2-1: SerialNumber: syz [ 338.990966][ T5931] usb 2-1: config 0 descriptor?? [ 339.004765][ T5910] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 339.007427][ T5931] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 36 [ 339.108854][ T9305] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.116135][ T9305] IPv6: NLM_F_CREATE should be set when creating new route [ 339.123465][ T9305] IPv6: NLM_F_CREATE should be set when creating new route [ 339.130689][ T9305] IPv6: NLM_F_CREATE should be set when creating new route [ 339.325981][ T9289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.344148][ T9289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.576361][ T5910] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 339.598687][ T5910] usb 3-1: config 0 has no interface number 0 [ 339.614077][ T5910] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.627011][ T5910] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.799626][ T5910] usb 3-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 339.812590][ T5910] usb 3-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 339.821714][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.887633][ T5910] usb 3-1: config 0 descriptor?? [ 340.610494][ T5910] uclogic 0003:28BD:0934.0013: Interface probing failed: -22 [ 340.618455][ T5910] uclogic 0003:28BD:0934.0013: interface is invalid, ignoring [ 340.689472][ T9322] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 340.708765][ T9322] cramfs: wrong magic [ 340.737889][ T30] audit: type=1400 audit(1757426319.451:1141): avc: denied { append } for pid=9319 comm="syz.5.760" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 341.045221][ T5910] usb 3-1: USB disconnect, device number 33 [ 341.406268][ T9326] netlink: 'syz.4.761': attribute type 1 has an invalid length. [ 341.414031][ T9326] netlink: 216 bytes leftover after parsing attributes in process `syz.4.761'. [ 341.583740][ T30] audit: type=1400 audit(1757426320.161:1142): avc: denied { create } for pid=9324 comm="syz.4.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 341.615023][ T30] audit: type=1400 audit(1757426320.161:1143): avc: denied { ioctl } for pid=9324 comm="syz.4.761" path="socket:[25904]" dev="sockfs" ino=25904 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 342.264175][ T5931] usb 2-1: USB disconnect, device number 33 [ 342.555879][ T5848] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 343.157578][ T9350] can0: slcan on ttyS3. [ 343.194700][ T8495] udevd[8495]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 343.368023][ T9353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.385138][ T9353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.428198][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.439532][ T9337] can0 (unregistered): slcan off ttyS3. [ 343.463211][ T9353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.476375][ T5848] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.491127][ T9353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.504081][ T5848] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 343.646859][ T5848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.695944][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.772'. [ 343.713911][ T5848] usb 6-1: config 0 descriptor?? [ 344.248703][ T5910] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 344.306017][ T9374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.314928][ T9374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.331068][ T9374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.363166][ T9374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.406579][ T5910] usb 2-1: config 4 has an invalid interface number: 170 but max is 0 [ 344.415491][ T5910] usb 2-1: config 4 has no interface number 0 [ 344.421603][ T5910] usb 2-1: too many endpoints for config 4 interface 170 altsetting 20: 203, using maximum allowed: 30 [ 344.435419][ T5910] usb 2-1: config 4 interface 170 altsetting 20 has 0 endpoint descriptors, different from the interface descriptor's value: 203 [ 344.496725][ T5910] usb 2-1: config 4 interface 170 has no altsetting 0 [ 344.507778][ T5910] usb 2-1: New USB device found, idVendor=13d3, idProduct=3230, bcdDevice=cb.0d [ 344.520831][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.658287][ T5910] usb 2-1: Product: syz [ 345.683406][ T5910] usb 2-1: Manufacturer: syz [ 345.688398][ T5910] usb 2-1: SerialNumber: syz [ 346.194998][ T9386] netlink: 'syz.2.775': attribute type 10 has an invalid length. [ 346.204256][ T9386] netlink: 40 bytes leftover after parsing attributes in process `syz.2.775'. [ 346.483515][ T9365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.495663][ T9365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.510498][ T9365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.562495][ T9365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.575121][ T5910] usb 2-1: USB disconnect, device number 34 [ 346.649080][ T5848] usbhid 6-1:0.0: can't add hid device: -71 [ 346.658471][ T5848] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 346.671020][ T5848] usb 6-1: USB disconnect, device number 21 [ 347.464735][ T30] audit: type=1400 audit(1757426325.791:1144): avc: denied { create } for pid=9397 comm="syz.5.780" name="#11" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 347.503174][ T30] audit: type=1400 audit(1757426325.791:1145): avc: denied { link } for pid=9397 comm="syz.5.780" name="#11" dev="tmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 347.557925][ T30] audit: type=1400 audit(1757426325.791:1146): avc: denied { rename } for pid=9397 comm="syz.5.780" name="#12" dev="tmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 347.849028][ T30] audit: type=1400 audit(1757426326.611:1147): avc: denied { bind } for pid=9406 comm="syz.4.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 347.954294][ C0] hrtimer: interrupt took 17690 ns [ 348.318577][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.783'. [ 348.358462][ T30] audit: type=1400 audit(1757426327.121:1148): avc: denied { create } for pid=9401 comm="syz.2.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 348.392573][ T30] audit: type=1400 audit(1757426327.151:1149): avc: denied { connect } for pid=9401 comm="syz.2.782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 352.166753][ T30] audit: type=1400 audit(1757426330.901:1150): avc: denied { mounton } for pid=9474 comm="syz.5.800" path="/130/file0" dev="tmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 353.137974][ T30] audit: type=1400 audit(1757426331.901:1151): avc: denied { mount } for pid=9453 comm="syz.4.796" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 353.183118][ T9471] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 353.268259][ T30] audit: type=1400 audit(1757426331.961:1152): avc: denied { mounton } for pid=9453 comm="syz.4.796" path="/169/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 353.520540][ T9495] block nbd1: Attempted send on invalid socket [ 353.528642][ T9495] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 353.540149][ T9495] SQUASHFS error: Failed to read block 0x0: -5 [ 353.548815][ T9495] unable to read squashfs_super_block [ 353.837183][ T30] audit: type=1400 audit(1757426331.981:1153): avc: denied { append } for pid=9491 comm="syz.1.803" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 353.860490][ T30] audit: type=1400 audit(1757426332.191:1154): avc: denied { mount } for pid=9493 comm="syz.1.804" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 354.518412][ T30] audit: type=1400 audit(1757426332.211:1155): avc: denied { watch } for pid=9493 comm="syz.1.804" path="/180/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 354.988500][ T30] audit: type=1400 audit(1757426333.751:1156): avc: denied { map } for pid=9511 comm="syz.5.809" path="socket:[26267]" dev="sockfs" ino=26267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 355.054926][ T30] audit: type=1400 audit(1757426333.751:1157): avc: denied { accept } for pid=9511 comm="syz.5.809" path="socket:[26267]" dev="sockfs" ino=26267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 355.358465][ T9514] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 355.367599][ T30] audit: type=1400 audit(1757426334.131:1158): avc: denied { relabelto } for pid=9511 comm="syz.5.809" name="file0" dev="tmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:" [ 355.395489][ T30] audit: type=1400 audit(1757426334.131:1159): avc: denied { associate } for pid=9511 comm="syz.5.809" name="file0" dev="tmpfs" ino=727 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 355.445518][ T30] audit: type=1400 audit(1757426334.211:1160): avc: denied { unmount } for pid=5846 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 355.590061][ T9519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.604160][ T9519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.657644][ T9519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.673191][ T9519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.717017][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.6.812'. [ 355.743026][ T5848] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 355.947545][ T5848] usb 2-1: Using ep0 maxpacket: 16 [ 356.006796][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.017490][ T9531] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 356.095211][ T9531] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 356.116409][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.247652][ T5848] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 356.269037][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.287148][ T5848] usb 2-1: config 0 descriptor?? [ 356.473322][ T5910] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 356.623340][ T5910] usb 6-1: Using ep0 maxpacket: 8 [ 356.636218][ T5910] usb 6-1: unable to get BOS descriptor or descriptor too short [ 356.659300][ T5910] usb 6-1: config 4 interface 0 has no altsetting 0 [ 356.672630][ T5910] usb 6-1: string descriptor 0 read error: -22 [ 356.680585][ T5910] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 356.690756][ T5910] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.699225][ T9541] netlink: 112 bytes leftover after parsing attributes in process `syz.2.817'. [ 356.724933][ T5848] bigben 0003:146B:0902.0014: unexpected rdesc, please submit for review [ 356.725839][ T5910] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 356.740802][ T5848] bigben 0003:146B:0902.0014: unknown main item tag 0x1 [ 356.774403][ T5848] bigben 0003:146B:0902.0014: hidraw0: USB HID v0.00 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 356.781142][ T5910] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 356.802022][ T5848] bigben 0003:146B:0902.0014: missing HID_OUTPUT_REPORT 0 [ 356.816644][ T5848] bigben 0003:146B:0902.0014: no output report found [ 356.822690][ T5910] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 356.836395][ T5910] usb 6-1: media controller created [ 356.862105][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.917470][ T5981] usb 2-1: USB disconnect, device number 35 [ 356.924988][ T9535] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20002 [ 357.025080][ T9535] usb 6-1: dvb_usb_au6610: wlen=12, aborting [ 357.161704][ T9551] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.266368][ T9552] hfsplus: unable to find HFS+ superblock [ 357.762938][ T5848] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 357.932907][ T9563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.942229][ T9563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.965834][ T5848] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 357.975545][ T5848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 357.988048][ T5848] usb 2-1: config 0 has no interface number 0 [ 357.995589][ T5848] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 358.113371][ T5848] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 358.130303][ T5848] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.164500][ T5848] usb 2-1: config 0 interface 52 has no altsetting 0 [ 358.296047][ T5848] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 358.308985][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 358.320589][ T5848] usb 2-1: Product: syz [ 358.330055][ T5848] usb 2-1: SerialNumber: syz [ 358.356592][ T5848] usb 2-1: config 0 descriptor?? [ 358.623670][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 358.623689][ T30] audit: type=1400 audit(1757426337.381:1171): avc: denied { setopt } for pid=9553 comm="syz.1.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 359.019616][ T5848] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 359.484128][ T5848] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 359.559281][ T975] usb 2-1: USB disconnect, device number 36 [ 359.636434][ T30] audit: type=1400 audit(1757426338.401:1172): avc: denied { bind } for pid=9574 comm="syz.6.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 359.849199][ T9575] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.045148][ T9588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.060078][ T9588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.163690][ T9590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.187874][ T9590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.213282][ T9575] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.524709][ T9575] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.768209][ T9575] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.852433][ T30] audit: type=1400 audit(1757426339.611:1173): avc: denied { append } for pid=9598 comm="syz.2.834" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 361.354697][ T60] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.383205][ T60] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.413033][ T60] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.428972][ T60] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.513160][ T975] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 362.598491][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 364.023954][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 52, changing to 4 [ 364.083746][ T975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 14385, setting to 1023 [ 364.098700][ T975] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 364.108760][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.117684][ T975] usb 3-1: Product: syz [ 364.121877][ T975] usb 3-1: Manufacturer: syz [ 364.127352][ T975] usb 3-1: SerialNumber: syz [ 364.134862][ T975] usb 3-1: config 0 descriptor?? [ 364.145829][ T975] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 36 [ 364.377895][ T9625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 364.852250][ T5981] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 364.914773][ T30] audit: type=1400 audit(1757426343.661:1174): avc: denied { setopt } for pid=9627 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 364.941341][ T975] usb 3-1: USB disconnect, device number 34 [ 364.997008][ T30] audit: type=1400 audit(1757426343.671:1175): avc: denied { bind } for pid=9627 comm="syz.4.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 365.016448][ T5981] usb 2-1: Using ep0 maxpacket: 8 [ 365.106848][ T7095] udevd[7095]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 365.136570][ T5981] usb 2-1: unable to get BOS descriptor or descriptor too short [ 365.155892][ T5981] usb 2-1: config 2 has an invalid interface number: 202 but max is 0 [ 365.165870][ T30] audit: type=1400 audit(1757426343.671:1176): avc: denied { name_bind } for pid=9627 comm="syz.4.844" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 365.213382][ T5981] usb 2-1: config 2 has no interface number 0 [ 365.219491][ T5981] usb 2-1: config 2 interface 202 has no altsetting 0 [ 365.238692][ T30] audit: type=1400 audit(1757426343.671:1177): avc: denied { node_bind } for pid=9627 comm="syz.4.844" saddr=fe80::bb src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 365.269634][ T5981] usb 2-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice= f.ae [ 365.419570][ T5981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.438945][ T9644] Invalid ELF header magic: != ELF [ 365.527805][ T9646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.536586][ T9646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.929951][ T5981] usb 2-1: Product: syz [ 365.936828][ T30] audit: type=1400 audit(1757426343.951:1178): avc: denied { append } for pid=9627 comm="syz.4.844" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 365.960676][ T5981] usb 2-1: Manufacturer: syz [ 365.981131][ T5981] usb 2-1: SerialNumber: syz [ 366.273954][ T30] audit: type=1400 audit(1757426344.201:1179): avc: denied { module_load } for pid=9637 comm="syz.2.846" path="/166/bus" dev="tmpfs" ino=898 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 366.338299][ T30] audit: type=1400 audit(1757426344.211:1180): avc: denied { shutdown } for pid=9637 comm="syz.2.846" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 366.592170][ T5981] pegasus 2-1:2.202: probe with driver pegasus failed with error -71 [ 366.603968][ T5981] usb 2-1: USB disconnect, device number 37 [ 366.842027][ T9653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.859070][ T9653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.435892][ T9655] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 367.443117][ T9655] IPv6: NLM_F_CREATE should be set when creating new route [ 367.450313][ T9655] IPv6: NLM_F_CREATE should be set when creating new route [ 367.457545][ T9655] IPv6: NLM_F_CREATE should be set when creating new route [ 367.786606][ T9666] netlink: 24 bytes leftover after parsing attributes in process `syz.6.853'. [ 367.908277][ T9666] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9666 comm=syz.6.853 [ 368.286124][ T5981] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 368.504747][ T5981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 368.688856][ T5981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 52, changing to 4 [ 368.700386][ T5981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 14385, setting to 1023 [ 368.714209][ T5981] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 368.724179][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.734496][ T5981] usb 3-1: Product: syz [ 368.740911][ T5981] usb 3-1: Manufacturer: syz [ 368.747136][ T5981] usb 3-1: SerialNumber: syz [ 368.763067][ T5981] usb 3-1: config 0 descriptor?? [ 368.770562][ T5981] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 36 [ 369.085944][ T9671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.233568][ T9671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.206596][ T9701] qnx6: unable to read the first superblock [ 370.352893][ T5848] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 370.886382][ T5848] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 370.952776][ T5848] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 371.142127][ T5848] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 371.156631][ T5848] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 371.170212][ T5848] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 371.301852][ T5848] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 371.311265][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 371.319426][ T5848] usb 2-1: Product: syz [ 371.323731][ T5848] usb 2-1: Manufacturer: syz [ 371.372298][ T5848] cdc_wdm 2-1:1.0: skipping garbage [ 371.705970][ T5848] cdc_wdm 2-1:1.0: skipping garbage [ 371.724676][ T9713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.733564][ T9713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.743434][ T5848] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 371.753189][ T5848] cdc_wdm 2-1:1.0: Unknown control protocol [ 371.834873][ T9718] : entered promiscuous mode [ 372.203610][ T30] audit: type=1400 audit(1757426350.961:1181): avc: denied { read write } for pid=9696 comm="syz.1.860" name="cdc-wdm0" dev="devtmpfs" ino=3350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 372.641665][ T30] audit: type=1400 audit(1757426351.001:1182): avc: denied { open } for pid=9696 comm="syz.1.860" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3350 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 373.156647][ T5981] usb 3-1: USB disconnect, device number 35 [ 373.232138][ T9735] NILFS (loop2): device size too small [ 374.146493][ T30] audit: type=1400 audit(1757426352.911:1183): avc: denied { name_connect } for pid=9743 comm="syz.2.873" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 374.370505][ T5848] usb 2-1: USB disconnect, device number 38 [ 374.409801][ T9749] 9pnet: Unknown protocol version 9p2000.yÐ ØHÇÂl [ 374.544676][ T5981] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 376.171746][ T9780] syz_tun: entered promiscuous mode [ 376.182872][ T9780] batadv_slave_0: entered promiscuous mode [ 376.193416][ T9780] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 376.208796][ T9780] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 376.221106][ T9780] hsr1: entered allmulticast mode [ 376.226255][ T9780] syz_tun: entered allmulticast mode [ 376.231641][ T9780] batadv_slave_0: entered allmulticast mode [ 376.676340][ T9785] futex_wake_op: syz.1.876 tries to shift op by 32; fix this program [ 378.128751][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.157011][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.433723][ T9797] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 379.471978][ T9797] CIFS mount error: No usable UNC path provided in device string! [ 379.471978][ T9797] [ 379.482008][ T30] audit: type=1400 audit(1757426358.051:1184): avc: denied { execute } for pid=9789 comm="syz.6.884" path="/dev/dsp1" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 379.635008][ T9800] netlink: 'syz.5.885': attribute type 10 has an invalid length. [ 379.644366][ T9800] netlink: 40 bytes leftover after parsing attributes in process `syz.5.885'. [ 379.808440][ T9797] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 380.020511][ T9810] /dev/nullb0: Can't open blockdev [ 380.119299][ T9796] bond1: entered promiscuous mode [ 380.250560][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'. [ 381.722756][ T30] audit: type=1400 audit(1757426360.451:1185): avc: denied { read write } for pid=9831 comm="syz.1.892" dev="sockfs" ino=27836 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 383.302994][ T30] audit: type=1400 audit(1757426360.741:1186): avc: denied { getopt } for pid=9831 comm="syz.1.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 383.354231][ T9840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.382410][ T9840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.915108][ T9833] syz.1.892 (9833): drop_caches: 2 [ 384.240874][ T30] audit: type=1400 audit(1757426363.001:1187): avc: denied { open } for pid=9845 comm="syz.2.897" path="/dev/ptyq9" dev="devtmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 384.645085][ T30] audit: type=1400 audit(1757426363.391:1188): avc: denied { read } for pid=9854 comm="syz.5.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 384.694051][ T30] audit: type=1400 audit(1757426363.391:1189): avc: denied { shutdown } for pid=9854 comm="syz.5.899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 384.717432][ T30] audit: type=1400 audit(1757426363.491:1190): avc: denied { ioctl } for pid=9845 comm="syz.2.897" path="/dev/ptyq9" dev="devtmpfs" ino=128 ioctlcmd=0x541a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 384.818428][ T9866] fuse: Bad value for 'fd' [ 384.828464][ T9868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.841054][ T9868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.953749][ T30] audit: type=1400 audit(1757426364.481:1191): avc: denied { read } for pid=9867 comm="syz.5.903" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 386.040531][ T30] audit: type=1400 audit(1757426364.481:1192): avc: denied { open } for pid=9867 comm="syz.5.903" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 388.979136][ T9905] netlink: 'syz.5.912': attribute type 10 has an invalid length. [ 388.989969][ T9905] netlink: 40 bytes leftover after parsing attributes in process `syz.5.912'. [ 389.309257][ T9908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.318443][ T9908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.331096][ T9908] tipc: Started in network mode [ 389.336015][ T9908] tipc: Node identity 7f000001, cluster identity 4711 [ 389.356352][ T9908] tipc: Enabling of bearer rejected, failed to enable media [ 389.763033][ T9914] ptrace attach of "./syz-executor exec"[5852] was attempted by "./syz-executor exec"[9914] [ 391.202951][ T5993] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 391.283436][ T5981] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 391.355603][ T5993] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 391.367276][ T5993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.376429][ T5993] usb 3-1: Product: syz [ 391.386607][ T5993] usb 3-1: Manufacturer: syz [ 391.413782][ T5993] usb 3-1: SerialNumber: syz [ 391.438213][ T5993] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 391.455107][ T5848] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 391.475369][ T5981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 391.496325][ T5981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 52, changing to 4 [ 391.528189][ T5981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 14385, setting to 1023 [ 391.694802][ T5981] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 391.705914][ T5981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.741479][ T5981] usb 2-1: Product: syz [ 392.742763][ T5848] usb 3-1: Service connection timeout for: 256 [ 392.748992][ T5848] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 393.007046][ T5848] ath9k_htc: Failed to initialize the device [ 393.016792][ T5848] usb 3-1: ath9k_htc: USB layer deinitialized [ 393.038699][ T5981] usb 2-1: Manufacturer: syz [ 393.061609][ T9930] netlink: 44 bytes leftover after parsing attributes in process `syz.2.919'. [ 393.181942][ T5981] usb 2-1: SerialNumber: syz [ 393.373854][ T9930] netlink: 43 bytes leftover after parsing attributes in process `syz.2.919'. [ 393.384161][ T5981] usb 2-1: config 0 descriptor?? [ 393.400170][ T9930] netlink: 'syz.2.919': attribute type 5 has an invalid length. [ 393.412124][ T5981] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 36 [ 393.473463][ T9930] netlink: 43 bytes leftover after parsing attributes in process `syz.2.919'. [ 393.639325][ T9931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.118458][ T9931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.300487][ T975] usb 3-1: USB disconnect, device number 37 [ 394.533224][ T9956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.558857][ T9956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.209288][ T9967] netlink: 80 bytes leftover after parsing attributes in process `syz.2.928'. [ 395.379075][ T30] audit: type=1400 audit(1757426374.141:1193): avc: denied { remount } for pid=9968 comm="syz.2.929" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 395.802820][ T5993] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 396.690892][ T5993] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.339403][ T5993] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 397.350549][ T5981] usb 2-1: USB disconnect, device number 39 [ 397.353816][ T5993] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 397.367587][ T5993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.377766][ T5993] usb 3-1: config 0 descriptor?? [ 397.385327][ T5993] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 397.400826][ T5993] dvb-usb: bulk message failed: -22 (3/0) [ 397.410571][ T5993] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 397.416591][ T9987] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.421444][ T5993] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 397.432802][ T5993] usb 3-1: media controller created [ 397.440482][ T5993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 397.441295][ T9991] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 397.452817][ T5993] dvb-usb: bulk message failed: -22 (6/0) [ 397.467615][ T5993] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 397.477250][ T5993] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input24 [ 397.499839][ T7095] udevd[7095]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 397.513870][ T5993] dvb-usb: schedule remote query interval to 150 msecs. [ 397.560692][ T30] audit: type=1400 audit(1757426376.291:1194): avc: denied { setopt } for pid=9990 comm="syz.5.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 397.600327][ T5993] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 397.662389][ T30] audit: type=1400 audit(1757426376.361:1195): avc: denied { remount } for pid=9968 comm="syz.2.929" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 397.698615][T10002] overlayfs: failed to resolve './file1': -2 [ 397.764933][ T5848] dvb-usb: bulk message failed: -22 (1/0) [ 397.815184][ T5848] dvb-usb: error while querying for an remote control event. [ 397.877893][ T30] audit: type=1400 audit(1757426376.611:1196): avc: denied { view } for pid=9992 comm="syz.6.936" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 397.896754][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.914138][ T5848] usb 3-1: USB disconnect, device number 38 [ 397.964034][ T5848] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 398.011645][ T30] audit: type=1400 audit(1757426376.621:1197): avc: denied { mount } for pid=9992 comm="syz.6.936" name="/" dev="hugetlbfs" ino=27611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 398.034508][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.308450][ T30] audit: type=1400 audit(1757426376.891:1198): avc: denied { block_suspend } for pid=10007 comm="syz.1.938" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 398.329816][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.234799][ T30] audit: type=1400 audit(1757426378.001:1199): avc: denied { sqpoll } for pid=10018 comm="syz.2.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 399.313433][T10021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.342468][T10021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.404094][T10022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.478020][T10022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.504849][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.943'. [ 401.048016][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'. [ 402.151774][T10068] overlayfs: failed to resolve './file1/file0': -2 [ 402.846205][ T30] audit: type=1400 audit(1757426381.601:1200): avc: denied { watch watch_reads } for pid=10052 comm="syz.2.953" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 402.891390][T10073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.911264][T10073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.980551][ T30] audit: type=1400 audit(1757426381.741:1201): avc: denied { execmod } for pid=10074 comm="syz.1.958" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28746 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 403.045319][ T30] audit: type=1400 audit(1757426381.761:1202): avc: denied { execute } for pid=10074 comm="syz.1.958" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28746 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 403.911963][ T30] audit: type=1326 audit(1757426382.671:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10080 comm="syz.5.960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6df438ebe9 code=0x7ffc0000 [ 404.082783][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 404.124771][T10088] wireguard0: entered allmulticast mode [ 404.201046][T10096] hugetlbfs: syz.1.963 (10096): Using mlock ulimits for SHM_HUGETLB is obsolete [ 404.290224][T10089] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 405.856150][T10129] qnx6: unable to read the first superblock [ 406.280430][T10131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.299078][T10131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.382190][T10136] Illegal XDP return value 256 on prog (id 168) dev N/A, expect packet loss! [ 406.524947][T10131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.548117][T10131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.194176][ T30] audit: type=1400 audit(1757426385.551:1204): avc: denied { create } for pid=10137 comm="syz.4.975" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 407.223272][ T30] audit: type=1400 audit(1757426385.551:1205): avc: denied { write } for pid=10137 comm="syz.4.975" name="file0" dev="tmpfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 407.263277][ T30] audit: type=1400 audit(1757426385.551:1206): avc: denied { open } for pid=10137 comm="syz.4.975" path="/204/file0" dev="tmpfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 407.301054][ T30] audit: type=1400 audit(1757426385.561:1207): avc: denied { ioctl } for pid=10137 comm="syz.4.975" path="/204/file0" dev="tmpfs" ino=1080 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 407.381646][T10149] netlink: 'syz.2.977': attribute type 13 has an invalid length. [ 407.398141][T10149] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 407.492937][T10149] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 407.500983][ T30] audit: type=1400 audit(1757426386.261:1208): avc: denied { unlink } for pid=5852 comm="syz-executor" name="file0" dev="tmpfs" ino=1080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 407.532108][T10149] gretap1: entered promiscuous mode [ 407.538296][T10149] gretap1: entered allmulticast mode [ 408.459653][T10166] comedi comedi0: rti802: I/O port conflict (0xc,4) [ 409.303113][ T5848] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 409.420383][T10179] netlink: 188 bytes leftover after parsing attributes in process `syz.6.986'. [ 409.600323][ T5848] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 409.693829][T10182] qnx6: unable to read the first superblock [ 410.125048][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.146495][ T5848] usb 3-1: Product: syz [ 410.211286][ T5848] usb 3-1: Manufacturer: syz [ 410.250125][ T5848] usb 3-1: SerialNumber: syz [ 410.273097][ T5848] usb 3-1: config 0 descriptor?? [ 410.355382][ T30] audit: type=1400 audit(1757426389.111:1209): avc: denied { read } for pid=10169 comm="syz.5.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 411.742954][ T5848] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 411.778838][ T5848] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 411.945816][ T5848] usb 3-1: USB disconnect, device number 39 [ 411.992549][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 412.065871][T10204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.103918][T10204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.722765][ T5848] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 412.734272][T10212] SELinux: policydb string length 16711688 does not match expected length 8 [ 412.779450][ T30] audit: type=1400 audit(1757426391.491:1210): avc: denied { load_policy } for pid=10211 comm="syz.4.995" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 412.797955][T10212] SELinux: failed to load policy [ 412.814511][T10212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.827509][T10212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.977634][ T5848] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 412.996505][ T5848] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 413.009806][ T5848] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 413.019955][ T5848] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 413.041506][ T5848] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 413.362269][ T5848] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 413.371646][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 413.383591][ T5848] usb 3-1: Product: syz [ 413.392953][ T5848] usb 3-1: Manufacturer: syz [ 413.425147][ T5848] cdc_wdm 3-1:1.0: skipping garbage [ 413.432820][ T5848] cdc_wdm 3-1:1.0: skipping garbage [ 413.453444][ T5848] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 413.489258][ T5848] cdc_wdm 3-1:1.0: Unknown control protocol [ 413.904279][T10234] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 414.127806][T10238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.136512][T10238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.150924][T10238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.161269][T10238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.658588][ T30] audit: type=1400 audit(1757426393.421:1211): avc: denied { getopt } for pid=10244 comm="syz.1.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 414.862959][ T30] audit: type=1400 audit(1757426393.531:1212): avc: denied { setopt } for pid=10243 comm="syz.5.1001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 415.130596][ T30] audit: type=1400 audit(1757426393.531:1213): avc: denied { write } for pid=10243 comm="syz.5.1001" path="socket:[29093]" dev="sockfs" ino=29093 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 415.287289][ T5931] usb 3-1: USB disconnect, device number 40 [ 417.485448][T10260] FAULT_INJECTION: forcing a failure. [ 417.485448][T10260] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 417.498913][T10260] CPU: 1 UID: 0 PID: 10260 Comm: syz.4.1004 Not tainted syzkaller #0 PREEMPT(full) [ 417.498935][T10260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 417.498945][T10260] Call Trace: [ 417.498950][T10260] [ 417.498957][T10260] dump_stack_lvl+0x16c/0x1f0 [ 417.498983][T10260] should_fail_ex+0x512/0x640 [ 417.499008][T10260] _copy_from_user+0x2e/0xd0 [ 417.499033][T10260] copy_from_sockptr_offset.constprop.0+0x136/0x170 [ 417.499062][T10260] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 417.499098][T10260] sock_copy_user_timeval+0x34f/0x470 [ 417.499117][T10260] ? __pfx_sock_copy_user_timeval+0x10/0x10 [ 417.499138][T10260] ? __local_bh_enable_ip+0xa4/0x120 [ 417.499163][T10260] vsock_connectible_setsockopt+0x319/0x770 [ 417.499192][T10260] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 417.499212][T10260] ? find_held_lock+0x2b/0x80 [ 417.499237][T10260] ? selinux_socket_setsockopt+0x6a/0x80 [ 417.499260][T10260] ? __pfx_vsock_connectible_setsockopt+0x10/0x10 [ 417.499282][T10260] do_sock_setsockopt+0xf3/0x1d0 [ 417.499309][T10260] __sys_setsockopt+0x1a0/0x230 [ 417.499334][T10260] __x64_sys_setsockopt+0xbd/0x160 [ 417.499353][T10260] ? do_syscall_64+0x91/0x4c0 [ 417.499375][T10260] ? lockdep_hardirqs_on+0x7c/0x110 [ 417.499395][T10260] do_syscall_64+0xcd/0x4c0 [ 417.499418][T10260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.499436][T10260] RIP: 0033:0x7f9e1e38ebe9 [ 417.499450][T10260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.499466][T10260] RSP: 002b:00007f9e1f16a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 417.499483][T10260] RAX: ffffffffffffffda RBX: 00007f9e1e5c5fa0 RCX: 00007f9e1e38ebe9 [ 417.499494][T10260] RDX: 0000000000000008 RSI: 0000000000000028 RDI: 0000000000000008 [ 417.499504][T10260] RBP: 00007f9e1f16a090 R08: 0000000000000112 R09: 0000000000000000 [ 417.499514][T10260] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 417.499524][T10260] R13: 00007f9e1e5c6038 R14: 00007f9e1e5c5fa0 R15: 00007fff550dafa8 [ 417.499548][T10260] [ 417.924931][T10269] sctp: [Deprecated]: syz.6.1007 (pid 10269) Use of int in max_burst socket option. [ 417.924931][T10269] Use struct sctp_assoc_value instead [ 417.944183][T10262] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1005'. [ 418.005947][T10269] bond0: entered promiscuous mode [ 418.010989][T10269] bond_slave_0: entered promiscuous mode [ 418.016945][T10269] bond_slave_1: entered promiscuous mode [ 418.625144][T10272] siw: device registration error -23 [ 418.860652][T10285] qnx6: unable to read the first superblock [ 419.373468][T10286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.389932][T10286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.625305][ T30] audit: type=1400 audit(1757426398.381:1214): avc: denied { listen } for pid=10288 comm="syz.2.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 419.721933][T10294] netlink: 'syz.4.1015': attribute type 10 has an invalid length. [ 419.731329][T10294] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1015'. [ 419.953831][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1014'. [ 419.977312][ T30] audit: type=1400 audit(1757426398.471:1215): avc: denied { accept } for pid=10288 comm="syz.2.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 421.341005][T10308] FAULT_INJECTION: forcing a failure. [ 421.341005][T10308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.354651][T10308] CPU: 0 UID: 0 PID: 10308 Comm: syz.2.1020 Not tainted syzkaller #0 PREEMPT(full) [ 421.354666][T10308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 421.354672][T10308] Call Trace: [ 421.354676][T10308] [ 421.354680][T10308] dump_stack_lvl+0x16c/0x1f0 [ 421.354697][T10308] should_fail_ex+0x512/0x640 [ 421.354713][T10308] _copy_to_user+0x32/0xd0 [ 421.354730][T10308] simple_read_from_buffer+0xcb/0x170 [ 421.354742][T10308] proc_fail_nth_read+0x197/0x240 [ 421.354755][T10308] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.354768][T10308] ? rw_verify_area+0xcf/0x6c0 [ 421.354783][T10308] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.354794][T10308] vfs_read+0x1e1/0xcf0 [ 421.354806][T10308] ? __pfx___mutex_lock+0x10/0x10 [ 421.354821][T10308] ? __pfx_vfs_read+0x10/0x10 [ 421.354834][T10308] ? __fget_files+0x20e/0x3c0 [ 421.354850][T10308] ksys_read+0x12a/0x250 [ 421.354859][T10308] ? __pfx_ksys_read+0x10/0x10 [ 421.354874][T10308] do_syscall_64+0xcd/0x4c0 [ 421.354888][T10308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.354899][T10308] RIP: 0033:0x7f909538d5fc [ 421.354907][T10308] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 421.354917][T10308] RSP: 002b:00007f90961c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 421.354927][T10308] RAX: ffffffffffffffda RBX: 00007f90955c5fa0 RCX: 00007f909538d5fc [ 421.354934][T10308] RDX: 000000000000000f RSI: 00007f90961c70a0 RDI: 0000000000000009 [ 421.354939][T10308] RBP: 00007f90961c7090 R08: 0000000000000000 R09: 0000000000000000 [ 421.354946][T10308] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 421.354951][T10308] R13: 00007f90955c6038 R14: 00007f90955c5fa0 R15: 00007fff10913058 [ 421.354964][T10308] [ 421.625600][T10312] 9pnet_fd: Insufficient options for proto=fd [ 421.735614][ T30] audit: type=1400 audit(1757426400.411:1216): avc: denied { execute } for pid=10305 comm="syz.4.1018" path="/sys/kernel/debug/bluetooth/6lowpan_enable" dev="debugfs" ino=3227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 422.695013][ T30] audit: type=1400 audit(1757426401.091:1217): avc: denied { mounton } for pid=10317 comm="syz.6.1021" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 422.718038][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.309617][T10332] qnx6: unable to read the first superblock [ 425.423699][ T5917] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 425.873135][ T5917] usb 2-1: Using ep0 maxpacket: 8 [ 425.940783][ T5917] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 425.952035][ T5917] usb 2-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 425.964887][ T5917] usb 2-1: config 179 has no interface number 0 [ 425.971776][ T5917] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 426.004605][ T5917] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 426.016419][ T5917] usb 2-1: config 179 interface 65 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 23 [ 426.031465][ T5917] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 426.041030][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.059227][T10333] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 427.343500][ T30] audit: type=1400 audit(1757426406.081:1218): avc: denied { getopt } for pid=10351 comm="syz.6.1031" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 427.369621][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1033'. [ 427.390219][ T975] usb 2-1: USB disconnect, device number 40 [ 427.583073][ T30] audit: type=1326 audit(1757426406.081:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10351 comm="syz.6.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfa98ebe9 code=0x7ffc0000 [ 427.665751][ T30] audit: type=1326 audit(1757426406.081:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10351 comm="syz.6.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3bfa98ebe9 code=0x7ffc0000 [ 427.859194][T10369] siw: device registration error -23 [ 428.240682][ T30] audit: type=1326 audit(1757426406.081:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10351 comm="syz.6.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfa98ebe9 code=0x7ffc0000 [ 428.274298][ T30] audit: type=1326 audit(1757426406.081:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10351 comm="syz.6.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3bfa98ebe9 code=0x7ffc0000 [ 428.315876][ T30] audit: type=1326 audit(1757426406.091:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10351 comm="syz.6.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfa98ebe9 code=0x7ffc0000 [ 428.339332][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.351011][ T30] audit: type=1326 audit(1757426406.091:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10351 comm="syz.6.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f3bfa98ebe9 code=0x7ffc0000 [ 428.374467][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.381983][ T30] audit: type=1326 audit(1757426406.091:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10351 comm="syz.6.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfa98ebe9 code=0x7ffc0000 [ 428.405444][ C1] vkms_vblank_simulate: vblank timer overrun [ 428.492006][ T30] audit: type=1326 audit(1757426406.091:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10351 comm="syz.6.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3bfa98ebe9 code=0x7ffc0000 [ 428.516029][ T30] audit: type=1326 audit(1757426406.091:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10351 comm="syz.6.1031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bfa98ebe9 code=0x7ffc0000 [ 428.539475][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.712511][T10395] siw: device registration error -23 [ 430.017189][T10405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.203911][T10405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.252498][T10405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.267960][T10405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.298265][T10405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.307077][T10405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.583445][ T5981] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 431.125047][ T5981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.137486][ T5981] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 431.147624][ T5981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.166812][ T5981] usb 2-1: config 0 descriptor?? [ 431.186398][ T5981] usbhid 2-1:0.0: can't add hid device: -22 [ 431.193311][ T5981] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 431.568274][T10429] siw: device registration error -23 [ 432.360968][T10432] IPVS: Error connecting to the multicast addr [ 434.493630][T10446] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1060'. [ 434.946079][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'. [ 435.107725][ T5917] usb 2-1: USB disconnect, device number 41 [ 435.164232][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1061'. [ 435.516012][T10474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.534503][T10474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.654430][T10489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.669003][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 436.669020][ T30] audit: type=1400 audit(1757426415.431:1268): avc: denied { remount } for pid=10487 comm="syz.1.1069" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 436.700388][T10490] devtmpfs: Bad value for 'nr_inodes' [ 436.706757][T10489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.908012][T10492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.027994][T10493] siw: device registration error -23 [ 437.269587][T10492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.290661][ T30] audit: type=1400 audit(1757426416.051:1269): avc: denied { create } for pid=10484 comm="syz.5.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 437.563932][ T30] audit: type=1400 audit(1757426416.311:1270): avc: denied { write } for pid=10484 comm="syz.5.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 437.862836][ T30] audit: type=1400 audit(1757426416.601:1271): avc: denied { ioctl } for pid=10507 comm="syz.4.1073" path="socket:[29528]" dev="sockfs" ino=29528 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 438.172521][T10497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.775179][T10521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.785142][T10521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.180639][T10526] siw: device registration error -23 [ 439.445257][T10528] siw: device registration error -23 [ 439.596828][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.603273][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.052810][T10539] qnx6: unable to read the first superblock [ 440.470955][T10552] SELinux: failed to load policy [ 440.601469][ T5931] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 440.610085][ T30] audit: type=1400 audit(1757426419.311:1272): avc: denied { write } for pid=10554 comm="syz.4.1087" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 440.643897][T10555] netlink: 'syz.4.1087': attribute type 10 has an invalid length. [ 440.655571][T10555] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 440.666190][T10555] team0: Failed to send options change via netlink (err -105) [ 440.674717][T10555] team0: Port device netdevsim0 added [ 440.832823][ T5931] usb 3-1: Using ep0 maxpacket: 8 [ 440.854390][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.872704][ T5931] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.886594][ T5931] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 440.902096][ T5931] usb 3-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 441.177281][ T5931] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.198655][ T5931] usb 3-1: config 0 descriptor?? [ 441.654627][T10577] qnx6: unable to read the first superblock [ 442.063934][ T5931] sony 0003:1345:3008.0015: hiddev0,hidraw0: USB HID v80.04 Device [HID 1345:3008] on usb-dummy_hcd.2-1/input0 [ 442.076202][ T5931] sony 0003:1345:3008.0015: failed to claim input [ 442.329391][T10584] netlink: 2868 bytes leftover after parsing attributes in process `syz.1.1096'. [ 442.340753][T10584] netlink: 2868 bytes leftover after parsing attributes in process `syz.1.1096'. [ 442.406702][T10589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.422150][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1093'. [ 442.432395][T10589] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1093'. [ 442.443909][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1093'. [ 442.453483][T10589] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1093'. [ 442.501760][ T5931] usb 3-1: USB disconnect, device number 41 [ 442.573900][T10578] fido_id[10578]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 446.216127][T10633] block nbd6: NBD_DISCONNECT [ 446.230283][T10633] block nbd6: Send disconnect failed -107 [ 446.405485][T10636] program syz.5.1102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 446.545533][ T30] audit: type=1400 audit(1757426425.311:1273): avc: denied { ioctl } for pid=10630 comm="syz.6.1107" path="socket:[30578]" dev="sockfs" ino=30578 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 446.555627][T10630] block nbd6: Disconnected due to user request. [ 446.583449][ T975] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 446.587050][T10630] block nbd6: shutting down sockets [ 446.763173][ T975] usb 2-1: device descriptor read/64, error -71 [ 446.886693][T10644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.918395][T10644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.926816][ T5981] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 447.003507][ T975] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 447.024610][ T30] audit: type=1400 audit(1757426425.791:1274): avc: denied { getopt } for pid=10642 comm="syz.4.1111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 447.049621][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1112'. [ 447.095282][ T5981] usb 3-1: unable to get BOS descriptor or descriptor too short [ 447.143404][ T975] usb 2-1: device descriptor read/64, error -71 [ 447.196868][ T5981] usb 3-1: not running at top speed; connect to a high speed hub [ 447.215556][ T5981] usb 3-1: no configurations [ 447.223698][ T5981] usb 3-1: can't read configurations, error -22 [ 447.253139][ T975] usb usb2-port1: attempt power cycle [ 447.432940][ T5981] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 447.693336][ T975] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 448.108482][ T5981] usb 3-1: unable to get BOS descriptor or descriptor too short [ 448.418187][T10659] netlink: 'syz.6.1116': attribute type 29 has an invalid length. [ 448.575124][T10663] netlink: 'syz.4.1117': attribute type 21 has an invalid length. [ 448.583329][T10663] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1117'. [ 448.597200][ T5981] usb 3-1: not running at top speed; connect to a high speed hub [ 448.598053][T10663] netlink: 'syz.4.1117': attribute type 4 has an invalid length. [ 448.605143][ T975] usb 2-1: device descriptor read/8, error -71 [ 448.605201][ T5981] usb 3-1: no configurations [ 448.605214][ T5981] usb 3-1: can't read configurations, error -22 [ 448.605428][ T5981] usb usb3-port1: attempt power cycle [ 448.655396][T10663] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1117'. [ 448.717673][T10668] batadv1: entered promiscuous mode [ 448.743122][T10668] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 448.782516][T10670] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1119'. [ 448.816711][T10670] netlink: zone id is out of range [ 448.821821][T10670] netlink: zone id is out of range [ 448.831094][T10670] netlink: zone id is out of range [ 448.843224][T10670] netlink: zone id is out of range [ 448.851870][T10670] netlink: zone id is out of range [ 448.857556][ T975] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 448.883375][T10670] netlink: del zone limit has 8 unknown bytes [ 448.909439][ T975] usb 2-1: device descriptor read/8, error -71 [ 448.973281][ T5981] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 448.995290][ T5981] usb 3-1: unable to get BOS descriptor or descriptor too short [ 449.024916][ T5981] usb 3-1: not running at top speed; connect to a high speed hub [ 449.035864][ T975] usb usb2-port1: unable to enumerate USB device [ 449.060253][ T5981] usb 3-1: no configurations [ 449.072690][ T5981] usb 3-1: can't read configurations, error -22 [ 449.234213][ T5981] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 449.364703][ T5981] usb 3-1: unable to get BOS descriptor or descriptor too short [ 449.403280][ T5981] usb 3-1: not running at top speed; connect to a high speed hub [ 449.411108][ T5981] usb 3-1: no configurations [ 449.421433][ T5981] usb 3-1: can't read configurations, error -22 [ 449.826475][ T5981] usb usb3-port1: unable to enumerate USB device [ 449.904004][T10673] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1120'. [ 450.051038][T10673] veth1_virt_wifi: entered promiscuous mode [ 450.105730][T10682] netlink: 'syz.2.1122': attribute type 1 has an invalid length. [ 450.335491][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1124'. [ 450.394277][T10690] tc_dump_action: action bad kind [ 450.450356][T10690] : Can't lookup blockdev [ 450.489257][ T30] audit: type=1400 audit(1757426429.201:1275): avc: denied { audit_read } for pid=10687 comm="syz.1.1125" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 452.695547][T10713] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1129'. [ 453.224343][ T975] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 453.800709][ T5848] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 453.824219][ T975] usb 3-1: config 0 has no interfaces? [ 453.829699][ T975] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 453.851699][ T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.348790][T10736] bond0: (slave batadv0): Releasing backup interface [ 454.359483][T10736] bridge_slave_0: left allmulticast mode [ 454.365322][T10736] bridge_slave_0: left promiscuous mode [ 454.370963][T10736] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.381296][T10736] bridge_slave_1: left allmulticast mode [ 454.387028][T10736] bridge_slave_1: left promiscuous mode [ 454.392738][T10736] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.404749][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 454.418709][ T5848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.431850][ T5848] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 454.441217][T10736] bond0: (slave bond_slave_0): Releasing backup interface [ 454.451786][T10736] bond0: (slave bond_slave_1): Releasing backup interface [ 454.463999][T10736] team0: Port device team_slave_0 removed [ 454.471850][T10736] team0: Port device team_slave_1 removed [ 454.479207][T10736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.486626][T10736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.496269][T10736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.503662][T10736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.511033][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.523948][T10736] team0: Port device geneve0 removed [ 454.545084][ T975] usb 3-1: config 0 descriptor?? [ 454.713091][ T5848] usb 2-1: config 0 descriptor?? [ 454.975573][ T5848] savu 0003:1E7D:2D5A.0016: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 455.134954][ T5981] usb 2-1: USB disconnect, device number 46 [ 455.186299][T10747] fido_id[10747]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 455.465550][ T975] usb 3-1: can't set config #0, error -71 [ 455.473965][ T975] usb 3-1: USB disconnect, device number 46 [ 458.755763][ T30] audit: type=1400 audit(1757426437.521:1276): avc: denied { mounton } for pid=10763 comm="syz.5.1144" path="mnt:[4026532795]" dev="nsfs" ino=4026532795 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 458.842281][T10769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1147'. [ 458.858507][T10772] veth0_to_team: entered promiscuous mode [ 458.893023][ T5848] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 459.075079][ T5848] usb 2-1: too many configurations: 177, using maximum allowed: 8 [ 459.205356][ T5848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.350206][ T5848] usb 2-1: config 0 interface 0 has no altsetting 0 [ 459.367787][ T5848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.410092][ T5848] usb 2-1: config 0 interface 0 has no altsetting 0 [ 459.458612][ T5848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.524301][ T5848] usb 2-1: config 0 interface 0 has no altsetting 0 [ 459.531977][ T5848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.552338][ T5848] usb 2-1: config 0 interface 0 has no altsetting 0 [ 459.562754][ T5848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.596678][ T5848] usb 2-1: config 0 interface 0 has no altsetting 0 [ 459.987915][T10780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.012280][ T5848] usb 2-1: unable to read config index 5 descriptor/start: -71 [ 460.017993][T10780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.055480][ T5848] usb 2-1: can't read configurations, error -71 [ 460.096868][T10782] netlink: 'syz.1.1151': attribute type 10 has an invalid length. [ 460.104754][T10782] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1151'. [ 460.115151][T10782] geneve0: entered promiscuous mode [ 460.121012][T10782] geneve0: entered allmulticast mode [ 460.126605][T10782] team0: Port device geneve0 added [ 460.136070][ T8024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.158323][ T8024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.185523][ T8024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.217993][ T8024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.667551][T10790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.691746][T10790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.932845][ T5993] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 461.215706][ T5993] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 461.232735][ T5993] usb 3-1: config 0 has no interface number 0 [ 461.238845][ T5993] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.290444][T10798] bond0: entered promiscuous mode [ 461.300371][T10798] bond_slave_0: entered promiscuous mode [ 461.308736][T10798] bond_slave_1: entered promiscuous mode [ 461.336368][T10798] dummy0: entered promiscuous mode [ 461.363468][T10798] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 461.387789][ T5993] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.395741][T10799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.397600][ T5993] usb 3-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 461.418777][T10798] hsr2: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 461.428818][ T5993] usb 3-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 461.437942][ T5993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.446536][ T5848] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 461.449080][T10799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.454820][T10798] hsr2: entered promiscuous mode [ 461.482129][ T5993] usb 3-1: config 0 descriptor?? [ 461.487449][T10798] hsr2: entered allmulticast mode [ 461.495811][T10798] bond0: entered allmulticast mode [ 461.501048][T10798] bond_slave_0: entered allmulticast mode [ 461.507121][T10798] bond_slave_1: entered allmulticast mode [ 461.522774][T10798] dummy0: entered allmulticast mode [ 462.032313][ T5848] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 462.497292][ T5848] usb 2-1: config 0 has no interface number 0 [ 462.504105][ T5848] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.552629][ T5848] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.601019][ T5848] usb 2-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 462.614345][ T5848] usb 2-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00 [ 462.626986][ T5848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.653950][ T30] audit: type=1400 audit(1757426441.421:1277): avc: denied { bind } for pid=10805 comm="syz.6.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 462.723003][ T5848] usb 2-1: config 0 descriptor?? [ 462.759592][ T5993] uclogic 0003:28BD:0934.0017: Interface probing failed: -22 [ 462.808396][ T30] audit: type=1400 audit(1757426441.451:1278): avc: denied { shutdown } for pid=10805 comm="syz.6.1159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 462.853619][ T5993] uclogic 0003:28BD:0934.0017: interface is invalid, ignoring [ 463.518557][ T5848] uclogic 0003:28BD:0934.0018: Interface probing failed: -22 [ 463.549255][ T5993] usb 3-1: USB disconnect, device number 47 [ 463.572269][ T5848] uclogic 0003:28BD:0934.0018: interface is invalid, ignoring [ 463.667590][ T5848] usb 2-1: USB disconnect, device number 49 [ 463.982379][ T30] audit: type=1400 audit(1757426442.741:1279): avc: denied { read write } for pid=10812 comm="syz.6.1162" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 464.055036][T10818] ptrace attach of "./syz-executor exec"[9015] was attempted by ""[10818] [ 464.081221][ T30] audit: type=1400 audit(1757426442.741:1280): avc: denied { open } for pid=10812 comm="syz.6.1162" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 464.107397][ T30] audit: type=1400 audit(1757426442.741:1281): avc: denied { ioctl } for pid=10812 comm="syz.6.1162" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 464.168565][ T30] audit: type=1400 audit(1757426442.911:1282): avc: denied { bind } for pid=10808 comm="syz.5.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 464.560635][T10831] netlink: 'syz.6.1165': attribute type 10 has an invalid length. [ 464.568571][T10831] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1165'. [ 465.025240][ T30] audit: type=1400 audit(1757426443.781:1283): avc: denied { bind } for pid=10834 comm="syz.2.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 465.524928][T10849] siw: device registration error -23 [ 465.593424][ T5981] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 465.909164][T10855] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 465.931421][ T5981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 466.032384][ T5981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 52, changing to 4 [ 466.231916][ T5981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 14385, setting to 1023 [ 466.256729][T10858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.271836][T10858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.499518][T10860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.511006][ T5981] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 466.519054][T10860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.528111][ T5981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.543283][ T30] audit: type=1400 audit(1757426445.311:1284): avc: denied { bind } for pid=10859 comm="syz.5.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 466.563177][ T5981] usb 3-1: Product: syz [ 466.567347][ T5981] usb 3-1: Manufacturer: syz [ 466.569588][T10860] netlink: 'syz.5.1175': attribute type 21 has an invalid length. [ 466.571927][ T5981] usb 3-1: SerialNumber: syz [ 466.580324][ T30] audit: type=1400 audit(1757426445.311:1285): avc: denied { listen } for pid=10859 comm="syz.5.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 466.606484][ T5981] usb 3-1: config 0 descriptor?? [ 466.616465][ T5972] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.663693][ T5972] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.906056][ T5972] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 466.917934][ T30] audit: type=1400 audit(1757426445.311:1286): avc: denied { accept } for pid=10859 comm="syz.5.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 466.919081][ T5981] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 36 [ 466.947408][ T30] audit: type=1400 audit(1757426445.331:1287): avc: denied { append } for pid=10859 comm="syz.5.1175" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 466.952935][ T5972] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.124016][T10845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.132847][T10845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.143798][ T5848] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 467.293232][ T5848] usb 2-1: Using ep0 maxpacket: 16 [ 467.300942][ T5848] usb 2-1: config 127 has an invalid interface number: 102 but max is 2 [ 467.473618][ T5848] usb 2-1: config 127 has no interface number 2 [ 467.742151][ T5848] usb 2-1: config 127 interface 0 has no altsetting 0 [ 467.867972][ T5848] usb 2-1: config 127 interface 1 has no altsetting 0 [ 467.944499][ T5848] usb 2-1: config 127 interface 102 has no altsetting 0 [ 468.019154][ T5848] usb 2-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d [ 468.090174][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.172025][ T5848] usb 2-1: Product: syz [ 468.202161][ T5848] usb 2-1: Manufacturer: syz [ 468.228608][ T5848] usb 2-1: SerialNumber: syz [ 468.545369][T10862] openvswitch: netlink: Flow actions attr not present in new flow. [ 468.746381][T10876] trusted_key: encrypted_key: insufficient parameters specified [ 468.759319][ T5848] usb 2-1: selecting invalid altsetting 0 [ 468.814532][ T5848] usb 2-1: Could not set interface, error -22 [ 469.031718][ T5848] usb 2-1: selecting invalid altsetting 0 [ 469.132736][ T5848] usb 2-1: Could not set interface, error -22 [ 469.358150][ T5848] usb 2-1: USB disconnect, device number 50 [ 469.393426][T10878] netlink: 'syz.6.1179': attribute type 10 has an invalid length. [ 469.401237][T10878] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1179'. [ 469.797058][ T5981] usb 3-1: USB disconnect, device number 48 [ 469.868994][ T7126] udevd[7126]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 469.916305][T10891] bridge0: port 3(team0) entered disabled state [ 469.922943][T10891] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.930184][T10891] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.005656][T10891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.016192][T10891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.144720][ T1331] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.238441][ T1331] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.249134][ T1331] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.491170][ T1331] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.702960][T10901] qnx6: unable to read the first superblock [ 471.395366][T10910] siw: device registration error -23 [ 471.705022][T10917] pimreg: entered allmulticast mode [ 471.722301][T10920] pimreg: left allmulticast mode [ 471.915315][ T30] audit: type=1400 audit(1757426450.661:1288): avc: denied { read } for pid=10921 comm="syz.6.1193" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 471.943964][ T30] audit: type=1400 audit(1757426450.661:1289): avc: denied { open } for pid=10921 comm="syz.6.1193" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 471.993081][ T5981] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 472.370218][ T5981] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 472.381492][ T5981] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 472.411070][ T5981] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 472.466876][ T30] audit: type=1400 audit(1757426451.161:1290): avc: denied { setattr } for pid=10921 comm="syz.6.1193" name="tty32" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 472.505567][ T5981] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 472.546863][ T5981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.628437][ T5981] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 472.640667][ T5981] usb 2-1: invalid MIDI out EP 0 [ 472.720091][T10924] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 472.812492][ T5981] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 472.822137][T10924] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 472.857869][T10919] delete_channel: no stack [ 472.863217][ T5981] usb 2-1: USB disconnect, device number 51 [ 473.067246][T10924] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 473.395978][ T5917] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 473.417118][T10937] overlay: Unknown parameter 'obj_type' [ 473.590068][ T5917] usb 3-1: device descriptor read/64, error -71 [ 473.642987][T10947] input: syz0 as /devices/virtual/input/input26 [ 473.889661][ T5860] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 473.996086][ T5917] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 474.208907][ T5917] usb 3-1: device descriptor read/64, error -71 [ 474.343531][ T5917] usb usb3-port1: attempt power cycle [ 474.422145][T10961] qnx6: unable to read the first superblock [ 475.111685][ T5917] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 475.185207][ T5917] usb 3-1: device descriptor read/8, error -71 [ 475.432829][ T5917] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 475.493545][ T5917] usb 3-1: device descriptor read/8, error -71 [ 475.622516][ T5917] usb usb3-port1: unable to enumerate USB device [ 477.003225][ T6007] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 477.083742][T11001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.110543][T11001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.122422][T11001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.134182][T11001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.180555][ T6007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 477.200468][ T6007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 52, changing to 4 [ 477.212328][ T6007] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 14385, setting to 1023 [ 477.255345][ T6007] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 477.274602][ T6007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.356594][ T6007] usb 3-1: Product: syz [ 477.396793][ T6007] usb 3-1: Manufacturer: syz [ 477.457957][ T6007] usb 3-1: SerialNumber: syz [ 477.632917][ T6007] usb 3-1: config 0 descriptor?? [ 477.809421][ T6007] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 01, bLength 9, bSynchAddress 36 [ 478.608604][T11009] netlink: 'syz.5.1215': attribute type 10 has an invalid length. [ 478.617958][T11009] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1215'. [ 478.668402][T10999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.760778][T10999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.791963][T11009] team0: Port device geneve0 added [ 478.798255][ T30] audit: type=1400 audit(1757426457.551:1291): avc: denied { getopt } for pid=11011 comm="syz.6.1214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 481.220100][ T6007] usb 3-1: USB disconnect, device number 53 [ 483.409745][ T30] audit: type=1400 audit(1757426462.171:1292): avc: denied { setopt } for pid=11044 comm="syz.5.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 483.492361][T11047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 483.879275][T11056] netlink: 'syz.5.1227': attribute type 10 has an invalid length. [ 483.888499][T11056] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1227'. [ 484.224775][T11058] netlink: 'syz.4.1226': attribute type 1 has an invalid length. [ 484.434263][T11067] netlink: 'syz.6.1228': attribute type 10 has an invalid length. [ 484.442290][T11067] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1228'. [ 484.722180][T11065] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 484.753551][T11065] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 484.782246][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'. [ 484.855670][T11058] gretap1: entered promiscuous mode [ 484.865718][T11058] bond1: (slave gretap1): making interface the new active one [ 484.875789][T11058] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 484.896309][T11080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.907403][T11080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.403309][T11092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.438999][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1237'. [ 485.439386][T11092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.612264][T11099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1236'. [ 487.007317][T11107] SELinux: failed to load policy [ 487.918737][T11118] siw: device registration error -23 [ 488.252611][T11123] netlink: 'syz.5.1245': attribute type 10 has an invalid length. [ 488.261977][T11123] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1245'. [ 490.277518][T11158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.289161][T11158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.307817][T11158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1253'. [ 492.631117][T11183] netlink: 'syz.4.1261': attribute type 10 has an invalid length. [ 492.639345][T11183] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1261'. [ 492.669584][T11185] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1262'. [ 492.708135][ T30] audit: type=1400 audit(1757426471.471:1293): avc: denied { read } for pid=11180 comm="syz.5.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 493.110202][ T6007] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 493.264124][ T6007] usb 3-1: Using ep0 maxpacket: 16 [ 493.270896][ T6007] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 493.280138][ T6007] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.291687][ T6007] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 493.305492][ T6007] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 493.315504][ T6007] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.324102][ T6007] usb 3-1: Product: syz [ 493.328305][ T6007] usb 3-1: Manufacturer: syz [ 493.333533][ T6007] usb 3-1: SerialNumber: syz [ 493.916518][ T6007] usb 3-1: 0:2 : does not exist [ 494.364226][T11210] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1270'. [ 494.421148][T11206] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25331 sclass=netlink_route_socket pid=11206 comm=syz.6.1267 [ 494.525126][T11185] netlink: 'syz.2.1262': attribute type 39 has an invalid length. [ 494.961447][T11226] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 495.160093][ T6007] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 495.201138][ T6007] usb 3-1: USB disconnect, device number 54 [ 495.330877][ T7123] udevd[7123]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 495.624484][T11233] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 495.704456][T11235] netlink: 'syz.5.1276': attribute type 10 has an invalid length. [ 495.712272][T11235] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1276'. [ 496.797385][T11255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.828018][T11255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.846082][T11255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.858903][T11255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.131003][ T30] audit: type=1400 audit(1757426475.891:1294): avc: denied { ioctl } for pid=11264 comm="syz.1.1286" path="socket:[33203]" dev="sockfs" ino=33203 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 497.293772][T11270] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1288'. [ 497.342826][ T44] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 497.505611][ T44] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 497.626856][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.866351][ T44] usb 3-1: Product: syz [ 497.870656][ T44] usb 3-1: Manufacturer: syz [ 497.893988][ T44] usb 3-1: SerialNumber: syz [ 498.221812][ T30] audit: type=1400 audit(1757426476.971:1295): avc: denied { connect } for pid=11277 comm="syz.6.1291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 498.707389][ T30] audit: type=1400 audit(1757426476.971:1296): avc: denied { write } for pid=11277 comm="syz.6.1291" laddr=fe80::11 lport=3 faddr=fe80::11 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 498.958484][T11285] netlink: 'syz.1.1293': attribute type 10 has an invalid length. [ 498.966526][T11285] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1293'. [ 498.987169][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.015564][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.048202][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.080550][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.571223][ T44] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 500.614936][ T44] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 500.636573][ T44] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 500.747986][ T44] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 500.763426][T11308] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=11308 comm=syz.1.1299 [ 500.835598][ T30] audit: type=1400 audit(1757426479.601:1297): avc: denied { map } for pid=11307 comm="syz.1.1299" path="socket:[33988]" dev="sockfs" ino=33988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 500.870977][ T30] audit: type=1400 audit(1757426479.601:1298): avc: denied { read accept } for pid=11307 comm="syz.1.1299" path="socket:[33988]" dev="sockfs" ino=33988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 501.068493][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.076485][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.127549][ T44] usb 3-1: USB disconnect, device number 55 [ 501.539665][T11314] siw: device registration error -23 [ 502.397146][ T30] audit: type=1400 audit(1757426481.161:1299): avc: denied { create } for pid=11329 comm="syz.2.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 502.500501][ T30] audit: type=1400 audit(1757426481.241:1300): avc: denied { getopt } for pid=11321 comm="syz.4.1303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 503.283819][T11340] netlink: 'syz.5.1306': attribute type 10 has an invalid length. [ 503.291649][T11340] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1306'. [ 503.751025][T11344] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 504.903237][T11361] siw: device registration error -23 [ 505.193997][T11360] overlayfs: failed to resolve './bus': -2 [ 505.378192][ T30] audit: type=1400 audit(1757426484.141:1301): avc: denied { bind } for pid=11366 comm="syz.6.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 505.523771][ T30] audit: type=1400 audit(1757426484.141:1302): avc: denied { getopt } for pid=11366 comm="syz.6.1313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 505.577425][T11356] siw: device registration error -23 [ 506.113401][T11374] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1314'. [ 506.264336][T11392] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1315'. [ 507.081114][T11410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11410 comm=syz.6.1321 [ 507.408913][ T31] INFO: task kworker/0:3:5910 blocked for more than 143 seconds. [ 507.416818][ T31] Not tainted syzkaller #0 [ 507.421850][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 507.455274][ T31] task:kworker/0:3 state:D stack:22152 pid:5910 tgid:5910 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 507.534959][ T31] Workqueue: usb_hub_wq hub_event [ 507.541252][ T31] Call Trace: [ 507.546985][ T31] [ 507.550006][ T31] __schedule+0x1190/0x5de0 [ 507.555129][ T31] ? __lock_acquire+0x62e/0x1ce0 [ 507.560191][ T31] ? __pfx___schedule+0x10/0x10 [ 507.565530][ T31] ? find_held_lock+0x2b/0x80 [ 507.571401][ T31] ? schedule+0x2d7/0x3a0 [ 507.588459][ T31] schedule+0xe7/0x3a0 [ 507.599184][ T31] schedule_timeout+0x257/0x290 [ 507.614274][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 507.627394][ T31] ? mark_held_locks+0x49/0x80 [ 507.636095][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 507.642436][ T31] __wait_for_common+0x2fc/0x4e0 [ 507.654786][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 507.678302][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 507.688070][ T31] ? __pfx_device_del+0x10/0x10 [ 507.694239][ T31] ? kobject_put+0xab/0x5a0 [ 507.699852][ T31] i2c_del_adapter+0x546/0x6f0 [ 507.707072][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 507.712423][ T31] ? kfree+0x2b4/0x4d0 [ 507.719500][ T31] ? media_device_cleanup+0x53/0x80 [ 507.726121][ T31] ? dvb_usbv2_exit.isra.0+0x3c6/0x9f0 [ 507.733798][ T31] dvb_usbv2_exit.isra.0+0x45b/0x9f0 [ 507.740260][ T31] dvb_usbv2_probe+0x1f61/0x3e50 [ 507.747674][ T31] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 507.754227][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 507.760583][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 507.767066][ T31] ? __pm_runtime_set_status+0x13c/0xa80 [ 507.773201][ T31] usb_probe_interface+0x303/0xa40 [ 507.778382][ T31] ? __pfx_usb_probe_interface+0x10/0x10 [ 507.784623][ T31] really_probe+0x241/0xa90 [ 507.789148][ T31] __driver_probe_device+0x1de/0x440 [ 507.795032][ T31] driver_probe_device+0x4c/0x1b0 [ 507.800062][ T31] __device_attach_driver+0x1df/0x310 [ 507.805922][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 507.811820][ T31] bus_for_each_drv+0x159/0x1e0 [ 507.818063][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 507.824342][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 507.829581][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 507.835990][ T31] __device_attach+0x1e4/0x4b0 [ 507.840759][ T31] ? __pfx___device_attach+0x10/0x10 [ 507.846559][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 507.851764][ T31] bus_probe_device+0x17f/0x1c0 [ 507.858018][ T31] device_add+0x1148/0x1aa0 [ 507.862507][ T31] ? __pfx_device_add+0x10/0x10 [ 507.868811][ T31] ? usb_cache_string+0xf2/0x150 [ 507.874668][ T31] usb_set_configuration+0x1187/0x1e20 [ 507.880139][ T31] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 507.886767][ T31] usb_generic_driver_probe+0xb1/0x110 [ 507.892245][ T31] usb_probe_device+0xec/0x3e0 [ 507.897614][ T31] ? __pfx_usb_probe_device+0x10/0x10 [ 507.903431][ T31] really_probe+0x241/0xa90 [ 507.907933][ T31] __driver_probe_device+0x1de/0x440 [ 507.913363][ T31] ? usb_driver_applicable+0x1c7/0x220 [ 507.918834][ T31] driver_probe_device+0x4c/0x1b0 [ 507.923918][ T31] __device_attach_driver+0x1df/0x310 [ 507.929297][ T31] ? __pfx___device_attach_driver+0x10/0x10 [ 507.935497][ T31] bus_for_each_drv+0x159/0x1e0 [ 507.940359][ T31] ? __pfx_bus_for_each_drv+0x10/0x10 [ 507.946149][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 507.951352][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 507.957728][ T31] __device_attach+0x1e4/0x4b0 [ 507.962511][ T31] ? __pfx___device_attach+0x10/0x10 [ 507.969055][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 507.974836][ T31] bus_probe_device+0x17f/0x1c0 [ 507.979719][ T31] device_add+0x1148/0x1aa0 [ 507.984692][ T31] ? __pfx_device_add+0x10/0x10 [ 507.989536][ T31] ? usb_detect_static_quirks+0x335/0x3e0 [ 507.995776][ T31] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 508.001678][ T31] usb_new_device+0xd07/0x1a60 [ 508.007193][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 508.012227][ T31] ? __pfx_usb_new_device+0x10/0x10 [ 508.017986][ T31] ? mark_held_locks+0x49/0x80 [ 508.023448][ T31] hub_event+0x2f34/0x4fe0 [ 508.027900][ T31] ? __pfx_hub_event+0x10/0x10 [ 508.033350][ T31] ? pool_move_batch+0x290/0x290 [ 508.038343][ T31] ? rcu_is_watching+0x12/0xc0 [ 508.043577][ T31] process_one_work+0x9cc/0x1b70 [ 508.048559][ T31] ? __pfx_hcd_resume_work+0x10/0x10 [ 508.054370][ T31] ? __pfx_process_one_work+0x10/0x10 [ 508.059750][ T31] ? assign_work+0x1a0/0x250 [ 508.065006][ T31] worker_thread+0x6c8/0xf10 [ 508.069716][ T31] ? __pfx_worker_thread+0x10/0x10 [ 508.075722][ T31] kthread+0x3c2/0x780 [ 508.079817][ T31] ? __pfx_kthread+0x10/0x10 [ 508.085054][ T31] ? rcu_is_watching+0x12/0xc0 [ 508.089829][ T31] ? __pfx_kthread+0x10/0x10 [ 508.094866][ T31] ret_from_fork+0x5d4/0x6f0 [ 508.099537][ T31] ? __pfx_kthread+0x10/0x10 [ 508.104262][ T31] ret_from_fork_asm+0x1a/0x30 [ 508.109120][ T31] [ 508.112156][ T31] [ 508.112156][ T31] Showing all locks held in the system: [ 508.126194][ T31] 2 locks held by ksoftirqd/1/23: [ 508.131242][ T31] #0: ffff8880b843a318 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 508.145056][ T31] #1: ffff8880b8524088 (psi_seq){-.-.}-{0:0}, at: __schedule+0x1861/0x5de0 [ 508.154326][ T31] 1 lock held by khungtaskd/31: [ 508.159171][ T31] #0: ffffffff8e5c1260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 508.169537][ T31] 2 locks held by getty/5606: [ 508.174843][ T31] #0: ffff88814e24f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 508.185027][ T31] #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 508.196068][ T31] 5 locks held by kworker/0:3/5910: [ 508.201268][ T31] #0: ffff888020291948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 508.212756][ T31] #1: ffffc90004dc7d10 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 508.224455][ T31] #2: ffff888145733198 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4fe0 [ 508.233756][ T31] #3: ffff888079aa6198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 508.243630][ T31] #4: ffff888079698160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4b0 [ 508.253254][ T31] [ 508.255674][ T31] ============================================= [ 508.255674][ T31] [ 508.264793][ T31] NMI backtrace for cpu 0 [ 508.264807][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 508.264826][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 508.264835][ T31] Call Trace: [ 508.264840][ T31] [ 508.264847][ T31] dump_stack_lvl+0x116/0x1f0 [ 508.264867][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 508.264878][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 508.264895][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 508.264907][ T31] watchdog+0xf0e/0x1260 [ 508.264921][ T31] ? __pfx_watchdog+0x10/0x10 [ 508.264931][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 508.264945][ T31] ? __kthread_parkme+0x19e/0x250 [ 508.264960][ T31] ? __pfx_watchdog+0x10/0x10 [ 508.264971][ T31] kthread+0x3c2/0x780 [ 508.264981][ T31] ? __pfx_kthread+0x10/0x10 [ 508.264992][ T31] ? rcu_is_watching+0x12/0xc0 [ 508.265005][ T31] ? __pfx_kthread+0x10/0x10 [ 508.265015][ T31] ret_from_fork+0x5d4/0x6f0 [ 508.265026][ T31] ? __pfx_kthread+0x10/0x10 [ 508.265035][ T31] ret_from_fork_asm+0x1a/0x30 [ 508.265054][ T31] [ 508.265057][ T31] Sending NMI from CPU 0 to CPUs 1: [ 508.383760][ C1] NMI backtrace for cpu 1 [ 508.383773][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 508.383788][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 508.383801][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 508.383822][ C1] Code: cc 61 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 b3 15 00 fb f4 8c 09 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 508.383834][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c2 [ 508.383845][ C1] RAX: 000000000264ff2d RBX: 0000000000000001 RCX: ffffffff8b945c29 [ 508.383854][ C1] RDX: 0000000000000000 RSI: ffffffff8de522e8 RDI: ffffffff8c162d80 [ 508.383862][ C1] RBP: ffffed1003c5d488 R08: 0000000000000001 R09: ffffed10170a6655 [ 508.383870][ C1] R10: ffff8880b85332ab R11: 0000000000000000 R12: 0000000000000001 [ 508.383879][ C1] R13: ffff88801e2ea440 R14: ffffffff90ab6b90 R15: 0000000000000000 [ 508.383887][ C1] FS: 0000000000000000(0000) GS:ffff8881247b5000(0000) knlGS:0000000000000000 [ 508.383900][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 508.383908][ C1] CR2: 000055555e0965c8 CR3: 000000005c0d9000 CR4: 00000000003526f0 [ 508.383917][ C1] DR0: 0000000000000004 DR1: 0000000000000000 DR2: 0000000000000000 [ 508.383924][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 508.383932][ C1] Call Trace: [ 508.383937][ C1] [ 508.383942][ C1] default_idle+0x13/0x20 [ 508.383959][ C1] default_idle_call+0x6d/0xb0 [ 508.383975][ C1] do_idle+0x391/0x510 [ 508.383993][ C1] ? __pfx_do_idle+0x10/0x10 [ 508.384008][ C1] ? trace_sched_exit_tp+0x2f/0x120 [ 508.384023][ C1] cpu_startup_entry+0x4f/0x60 [ 508.384038][ C1] start_secondary+0x21d/0x2b0 [ 508.384057][ C1] ? __pfx_start_secondary+0x10/0x10 [ 508.384076][ C1] common_startup_64+0x13e/0x148 [ 508.384096][ C1] [ 508.576413][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 508.583275][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 508.592371][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 508.602397][ T31] Call Trace: [ 508.605658][ T31] [ 508.608566][ T31] dump_stack_lvl+0x3d/0x1f0 [ 508.613134][ T31] vpanic+0x6e8/0x7a0 [ 508.617094][ T31] ? __pfx_vpanic+0x10/0x10 [ 508.621584][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 508.627546][ T31] panic+0xca/0xd0 [ 508.631241][ T31] ? __pfx_panic+0x10/0x10 [ 508.635634][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 508.640992][ T31] ? nmi_trigger_cpumask_backtrace+0x1b1/0x300 [ 508.647113][ T31] ? watchdog+0xd78/0x1260 [ 508.651528][ T31] ? watchdog+0xd6b/0x1260 [ 508.655951][ T31] watchdog+0xd89/0x1260 [ 508.660183][ T31] ? __pfx_watchdog+0x10/0x10 [ 508.664843][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 508.670044][ T31] ? __kthread_parkme+0x19e/0x250 [ 508.675062][ T31] ? __pfx_watchdog+0x10/0x10 [ 508.679723][ T31] kthread+0x3c2/0x780 [ 508.683779][ T31] ? __pfx_kthread+0x10/0x10 [ 508.688361][ T31] ? rcu_is_watching+0x12/0xc0 [ 508.693099][ T31] ? __pfx_kthread+0x10/0x10 [ 508.697663][ T31] ret_from_fork+0x5d4/0x6f0 [ 508.702221][ T31] ? __pfx_kthread+0x10/0x10 [ 508.706812][ T31] ret_from_fork_asm+0x1a/0x30 [ 508.711578][ T31] [ 508.714804][ T31] Kernel Offset: disabled [ 508.719101][ T31] Rebooting in 86400 seconds..