last executing test programs: 13.708904759s ago: executing program 3 (id=51): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfff, 0x100008b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x25a, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlockall(0x7) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000) io_uring_enter(r3, 0x514f, 0xbd44, 0x20, &(0x7f0000000100)={[0x3]}, 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000bc0)=""/244, 0xf4}], 0x1}, 0x0) write(r5, 0x0, 0x11) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) socket$inet6(0xa, 0x4, 0x40004) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, &(0x7f00000005c0)={0x77359400}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x240000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000084}, 0x84) 10.809571441s ago: executing program 2 (id=55): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0x9362, 0x0) recvmsg$can_j1939(r1, &(0x7f00000003c0)={&(0x7f00000000c0)=@can, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/88, 0x58}], 0x1, &(0x7f0000000200)=""/198, 0xc6}, 0x2) socket$inet(0x2, 0x2, 0x0) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x60000000}, 0x800) (async) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0x9362, 0x0) (async) recvmsg$can_j1939(r1, &(0x7f00000003c0)={&(0x7f00000000c0)=@can, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/88, 0x58}], 0x1, &(0x7f0000000200)=""/198, 0xc6}, 0x2) (async) 10.748363105s ago: executing program 4 (id=56): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x79b2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r3, 0x0, 0x1f00) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) waitid$P_PIDFD(0x3, r5, 0x0, 0xa000000c, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000001c40)=0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000000000)={0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x7, &(0x7f0000000380)={0x0, 0x2, 0x200000b, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r9, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3}) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x8000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9400508593c5033c685cfc64be1001ae70028417c9793b11d3ce83f1db5c7f318244337f94980b91498a609509d56530cf3d53a6fc2313589f9d99828e50c4b49b03d7dd057f55ceec89c8c3fd292670a019ee18f10b683cee7b1af19f5c88cd40093fe50541ce69caa0587e2131b5439f612a2bd2c229a693ab8dc48704c9ceb6d58f1e875a444f56b2b1ac0a693a88a28978f39d69", @ANYRES32=0x0, @ANYBLOB="1000020000010000440012800b000100677265746170000034000280080004007400000006000f0086d300000600180000000000060011004e23000006000f0000fc000006000e0001000000040019802c003480140035006c6f0000000000000000000000000000140035006970766c616e31000000000000000000"], 0x94}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r10, 0xc018937a, &(0x7f0000000100)={{0x1, 0x1, 0x18, r10, {0xa0}}, './file0\x00'}) close(r11) 10.747175679s ago: executing program 2 (id=57): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000240)="d6", 0x1}], 0x1) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x10002) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) 9.619573514s ago: executing program 4 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfff, 0x100008b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x25a, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlockall(0x7) rt_sigaction(0x19, 0x0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000) io_uring_enter(r3, 0x514f, 0xbd44, 0x20, &(0x7f0000000100)={[0x3]}, 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000bc0)=""/244, 0xf4}], 0x1}, 0x0) write(r5, 0x0, 0x11) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) socket$inet6(0xa, 0x4, 0x40004) socket$unix(0x1, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x240000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000084}, 0x84) 9.036742815s ago: executing program 2 (id=61): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) recvfrom(r0, &(0x7f0000000380)=""/212, 0xd4, 0x11, &(0x7f0000000080)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_adj\x00') write$cgroup_int(r4, &(0x7f0000000000)=0x1, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140002000201050000000100f8ffffff01000008"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x40) 8.602383127s ago: executing program 3 (id=62): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400000011000100000000000000000001000002"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r2) 7.506170028s ago: executing program 3 (id=63): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f"], 0x34}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000180)={0x19980330}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') 7.463119113s ago: executing program 0 (id=64): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000740)=@multiplanar_overlay={0x7, 0x4, 0x4, 0x1, 0xf, {0x0, 0x2710}, {0x1, 0x0, 0xf8, 0x33, 0x6, 0xd8, "fb128540"}, 0x3, 0x3, {&(0x7f00000006c0)=[{0x4, 0x9, {0xcb7}, 0x9}, {0x101, 0x8, {0x3}, 0x7}]}, 0xbd59, 0x0, r2}) recvmmsg(r0, &(0x7f0000000600)=[{{&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000300)=""/119, 0x77}, {&(0x7f0000000380)=""/194, 0xc2}, {&(0x7f0000000480)=""/186, 0xba}], 0x3, &(0x7f00000005c0)=""/60, 0x3c}, 0x9d0}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) pread64(r1, 0x0, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x400001, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x1, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x2, 0x2, 0x1, 0x3, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0xc39, 0x3, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x3, 0x7, 0xfffffffffffffffa, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x8, 0x6aa, 0x100, 0x1, 0x83, 0x538a, 0x9, 0xda, 0x4, 0x0, 0x4, 0x5, 0x7, 0x8000, 0x8000000000000000, 0x4, 0x0, 0x14, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x7ff, 0xe000000000000, 0xe4, 0xe, 0x0, 0x9, 0x22, 0xffffffffffffffff, 0x7, 0x1, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x9, 0x100000001, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x3, 0x4, 0x7, 0x402, 0x3, 0x8, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xe, 0x1]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) setpriority(0x2, r4, 0x2) bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000400)={r6, r6, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c3, 0x6, 0x801, 0x0, 0x8, 'syz1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 6.512486114s ago: executing program 3 (id=65): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d10300001400000011000100000000000000000001000002"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5.904412368s ago: executing program 3 (id=66): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@empty, @empty, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@generic={0xfbfb, "9c6082d1ea320c096405492db068ea9f2ba4727a677d232804b39a4f13de248862fc30eb6fa68bb411cd9185fa80f642b175f6dbd1de382562da42e3f1363ea49cf4fdae3085a6536e232346f757f3868fad72538f7092ede9434e80fc9214de51b92b73b10ed81d"}}}, &(0x7f0000000140)={0x1, 0x3, [0xaec, 0xcb1, 0xc76, 0x9]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000013c0)=0xc7f) recvmmsg(r4, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000080)=""/88, 0x58}], 0x1}, 0x7}], 0x1, 0x40000021, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000280)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x2400c884}, 0x40000) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r5, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r5, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r5, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0) write$qrtrtun(r6, &(0x7f0000000b40), 0x0) r7 = syz_usb_connect(0x1, 0x8d6, &(0x7f0000001400)={{0x12, 0x1, 0x300, 0x19, 0xaa, 0x4f, 0x0, 0x1435, 0x826, 0x6fb6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c4, 0x4, 0x9, 0x6, 0xf0, 0x3, [{{0x9, 0x4, 0x37, 0x7, 0x3, 0xb3, 0x26, 0xe8, 0x4, [@hid_hid={0x9, 0x21, 0x9, 0x6}, @uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x3, 0x14, 0x5, "6d8e"}, @as_header={0x7, 0x24, 0x1, 0x12, 0xa2, 0x2}]}], [{{0x9, 0x5, 0xa, 0x3, 0x40, 0x1, 0x3, 0x0, [@generic={0xe4, 0x24, "17693c2dfc941fed0d85f58cc31fe615b876d22403553db8adc8b03715c6068813bd425218484391f34a2ee116aad08340b407189e51fa07a236a6b0a9e0ff4d0041a3b44fc3a2ba221d0af9cd63a86b84b9ee13d990d130dda921a59a9f38b7e3dbff2f6e77721ccf3acabd3b30d4b7f7544ee3021a18ce944cb8db086585cd7c05c04be6e2c93185fe38de497920d298cd14482ce23fd6f8bb2e260e7046eeb4f556c423c5f49d86221237b33624f35421bda9fead85275a813a5f6020acde5d82e16e3b1623822e2dbf55ad28d4b0faa7f9b6bb151023c7cebaa9fe5ce952f7e2"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x8, 0x8c, 0x7, [@generic={0x5, 0x11, "aae3a6"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x1, 0x0, 0xd, [@generic={0xc2, 0x31, "54a2a71ee201c6fc1646e1dee2c11dd34bb2e74a5916b74c303a7826c41c8271aded44f9b3dbf8d12024da59d0d4686cb55fa94a5d3534f913add012d493cc36c678b6fe99b39242cc94b001a63efef78cb8ee052df903ac02817236e2f25a3b14a741d1d464cf21ec22687fabd0c000066589d1a125062e18a51fd75479ce1d1d606d3e397d3aa45d25c4c7262e20f5f23101fea51f6e00974844fe2785c2e32ba66579e38adac474c3da2490ea4a3a08f77e9cd6caa93a3194fdf2fa520c0c"}]}}]}}, {{0x9, 0x4, 0x8, 0xf9, 0x1, 0x82, 0x14, 0x84, 0x4e, [@hid_hid={0x9, 0x21, 0xad5, 0x98, 0x1, {0x22, 0x95d}}, @generic={0xb2, 0xd, "f71dfb943902141b25111df0c9c4a46b6a4be5a7ba671f6d779798f43bf2687301801740a1690de7824baf78e5435ef58d2a2d01fdef9d179cd50888172a71f547fbe5dfa61a661defbb7e242c31ce4eb273eda6db5e08279b9a554a84bb0917e1f6243516c39217500e823740bf07a47ff30a4f382723e0c3f1a83c564bf62098068a44092c614d0f792b84bf539cab31f7360cc2c7c472f3b18500f85f9cadb0ef577498ef82035602d8ec477fe400"}], [{{0x9, 0x5, 0x2, 0x2, 0x8, 0xe, 0xd0, 0x6, [@generic={0x50, 0x23, "016b98fbc19b340c6d5abf213a0fbf5129359aa804b4a7898a29d78a6cdda62fb89ea7d6e956273401c5554e8c64e5c91304eab41e88cc4aa8e70741c363f3ac12780f6414d30d1a00d4f874689f"}]}}]}}, {{0x9, 0x4, 0x8, 0x6, 0x2, 0xfa, 0x71, 0xa8, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0xfeff, 0x7}, [@extension_unit={0xa, 0x24, 0x8, 0x2, 0x5, 0xf0, "646d18"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x100, 0x3, 0x4, 0x9}, @mixer_unit={0x8, 0x24, 0x4, 0x1, 0x4, "50fed2"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x100, 0x3, 0x9, 0x80e8, 0xf, 0x6}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0x9, "61c8"}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x9, 0xa, "aeeccf"}]}, @uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x6, 0x0, "2a8d", "4ca8"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xc3, 0x1}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0x0, 0x81, "", "a3"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xe, 0x4, 0x40, 0x4, 'O', "b052"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xe7, 0x3, 0xff, 0x8, "1184eaf096"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x538, 0x10, 0x3, "9fe49c3f787d81a7"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x20, 0x7f, 0x7, 0x2, [@generic={0xd9, 0x22, "fc37f29475fdbac10fda456428d3afb7b2e7ce8485cf50e2f02dd10ebb73e52afba8040a0576839824d51cba2c495b143eb7035a8ed0d6f953dfe306f3e5ec17370b4e5589afbbca861e79ff73b53681da3c812217d459eab30ce035be52d4d1e35bbf0ce204e5002fd112e8d43c0d1ff77fbf7b11c9b862ed5b1ed2542699e35659971a464f76688bfda5a6c3f4e0d34092e42b6974c3517dfdc419c40b2231733a197038a6a833b118477c5e1ee04f208c49547ee182fe140c793b4244a2e9319b5438576101441258e264fe6355f528647a17b08682"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x1, 0x4, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x7}]}}]}}, {{0x9, 0x4, 0xb0, 0x6, 0x5, 0xd2, 0x3a, 0x31, 0x7, [@hid_hid={0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0xdb}}, @uac_control={{0xa, 0x24, 0x1, 0x7beb, 0x85}, [@processing_unit={0xc, 0x24, 0x7, 0x4, 0x3, 0x75, "f22007c8b7"}]}], [{{0x9, 0x5, 0x4, 0x2b45f8e491ba0929, 0x218, 0x7, 0x8, 0x81, [@generic={0x5c, 0x9, "f234fdc2ecc2cbc5528abc71056e2710fa752733ec76e8f1e6eebdecee8876b3f18ea2118ec5a756037ecb3d001a062513662eb311039991e85020087ab47fa52a97e1c785807ab23faac83a327779557315b3a016293c66bd60"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x2, 0x86, 0x67, [@generic={0xa8, 0x30, "26929e4379a866d96619f5810c75c1b6f957e3d800a564a57daacca8693221dc1248d5c61588e9485980c99a5b62790cc8383b891131cf2c443c28d48ea2b932ea1100dcd52db6b6bf620aabc30d02b68f5f2b3a099a4f02b3116110df04d5113499c5348dd9f06860e94f2a55c81d2bf63319e69d729b6d6bac8018a1d368c54632c23626e4bd23bbce7b6cfc323eaf026b3370782244a602d3acd3455f59db1cdaabe685c1"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x5, 0x0, 0x6, [@generic={0xe9, 0xd, "f0eb7f6b6658f01c0aa3cf3da4bb6553ba4524d531aff6c9f653372e78ac395bb0a0d6d0269b044ee84d738b2704f96fa3e126f49039323fbc3926058db89561a393835440791105325008f69da7ce9e8e3de030a5078efb47126bf10a5acbf02a442185ea2e4c6b02d13d656f3be206e9fb587956d6649d49d75b7c75dde61b17d2ce58c0e302de5b3b6a9487e8fe45e9e3214496116366cea348b0fb7ad2ef5beabf3a1bb43a6ed55d2d8e19b85faa5bc63d8df1b11b4b87683677823049cbe5619fde65d67c5a34f85021ad07df6d2d9af195ceada3e6587614a11f09c8ee86838de460c666"}, @generic={0xc8, 0x1, "7a2c1172843f24f9f5a0053e588dfe7c508ec46094f74c781fcdb1c4723129c65a6716cdcde1da81d40e3fa0912967872ba6440196daa0d706c36c7a6a1bee942a419e5dc3bfaf11b84076ef8519ecac507222ac63f5ab4057532367d91690522649f4b48ccff5f9b72fca32d07c1e2181de39061b631d81e46e5dc50c07349731ad8a3216e106658196109a237d8fbd37e3890db129977e914a1421cf6eec4fdf4933bbe6688203fa05eddaae0d304fd7ab02d8a3510bd31a5f258721b1a0df776c05b767a3"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x0, 0xf8, 0x9f, [@generic={0x32, 0x31, "f6dabd962d8fa59d59dcaf5a76b7a24faab959cba297e49dc3649b789bbb58cb82789d5bdb15619cda074124ecd41e24"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x7, 0xc, 0xd, [@generic={0xf2, 0xb, "7af1d5dc39f9b3239d1761f0dc366177e799fdb59338b73d45ed67d3b4d14b26361c8969ad2834d8845ceab3c1774312c95f1ae4bf11045aff07d68ce272dbc6030f38cb59e67737a58b3db8408f47d2845b58b2e5544ecf099bc12876fe6119097e9dea5bd73aca7019ae88044df373cc87fc607a88364b0de47755dccfde158c337eaae0061a2ccb16917b7c9009bb8e8aa296efb9d8e8be83a22f87a98ba35c55e7ae4ef075ff6f3c199c70cf1749de7a4b566fe7ebeaafda8015f420a7794fd33bafbd427dfebe689dca7ca9b4b661d10052fdd371d5c9497183e222f82218a3524df653c98d224ba1553eca7f4b"}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x7, 0xa, 0x6, 0x20, 0x3}, 0x42, &(0x7f0000000240)={0x5, 0xf, 0x42, 0x5, [@wireless={0xb, 0x10, 0x1, 0x0, 0x4, 0x3, 0x2, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x5, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x6, 0xe10f, 0xf, [0xff00, 0x3f0f, 0xffc030]}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x81, 0x1, 0x81, 0xf000, 0xee, [0xc000]}]}, 0x1, [{0xfc, &(0x7f0000000340)=@string={0xfc, 0x3, "ecd9c45de8b065cccba951f2254782d7a2a285e0193ea9f415ba6dc9754d2814538f08bdee14258a26d4b2f18da6781e668932e2d55555b5daa0d5ce86b2df626b2e30e317fcc00eb0a329a5243d97c871294a3bc54c749dddc8945922b538bb3bd69e84142faa3f3178d48646e064d274addba0927aff3ac09b540101df8a2032f55a978fa3fa633215ec1a60550e976b9ab60c9a7de9403b92119d7523d2568247fc13018462aee3b87f2efcad417bdbdbb22662697f20eda7a050d621715f8bafba1cfdf2b61e3d6047423d16035e8cb708546a43085224b0265473f083a3fc1a032f905f565b80c2ef475751fc4a405984430a76304dd895"}}]}) syz_usb_control_io$uac1(r7, &(0x7f00000004c0)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="40316f00bce03725c2164814b4fabd3cb3c47f43e258ddd09d054d9c046cb9175b95ceb3b0a445105f650700fc1212aaec75bdb02d83299a9fdb97ed1ed5c64c7f45246cf0b93b75377971b800499db0f90c1c6787ff776554e17f14c62f91e8ff2b48710642f529533e9a94ab2089a99105201008"], &(0x7f0000000680)={0x0, 0x3, 0x67, @string={0x67, 0x3, "332d6097f97cf5d1447e861bb4ff51b4067257e8177b9a07260fe73be14d01ce4f803f57b648266cb81af1f7f1633ab8c4ee9d3bd9b221e5dac521cc245750aa361a3856792c8bb36edf307571b425b8ee674528a64830760e96781df68837a3aa24a18747"}}}, &(0x7f0000000ac0)={0x44, &(0x7f00000008c0)={0x40, 0x2a, 0xc5, "920f00e939f1df3da1d19e010697238d82c5dcf5d30ea2daeac7ea3e28f3808f0d9032d81ed22a222d5bfd00736dc9c9c214f645d8dd6f430d479e49b0b85bd657e97ff312dcd93449c5de91a819cbbad2763f1471526b953db7037efeee7e5f85a31178f1615ed8e811d9f19cacd6b922b74b10ab26af370be3c10810e2d334dc3999c20e242d807878143ba8cc4c5b99b7937aced24a871f1f5bea3bb1311671a187cb2e775b16d6b311e0068a9896c1a989937b949b0995e386501319727400c53bc0ed"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x6a}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xf5}, &(0x7f0000000740)={0x20, 0x81, 0x2, "7294"}, &(0x7f00000009c0)={0x20, 0x82, 0x2, "9fc0"}, &(0x7f0000000a00)=ANY=[@ANYBLOB="01000000000000"], &(0x7f0000000a40)={0x20, 0x84, 0x4, "dd453a16"}, &(0x7f0000000a80)={0x20, 0x85, 0x3, "b77bbe"}}) 5.871384783s ago: executing program 1 (id=67): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e1e}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x5761, 0x0) recvmmsg(r5, &(0x7f0000006d40)=[{{&(0x7f00000002c0)=@vsock, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000540)=""/70, 0x46}, {&(0x7f0000000680)=""/141, 0x8d}, {&(0x7f00000005c0)=""/113, 0x71}, {&(0x7f0000000740)=""/177, 0xb1}, {&(0x7f0000000800)=""/250, 0xfa}, {&(0x7f0000000900)=""/131, 0x83}, {&(0x7f00000001c0)=""/46, 0x2e}], 0x7, &(0x7f0000000b00)=""/76, 0x4c}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)=""/201, 0xc9}], 0x1, &(0x7f0000000c80)=""/250, 0xfa}, 0x7fff}, {{&(0x7f0000000d80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)=""/99, 0x63}, {&(0x7f0000000e80)=""/115, 0x73}], 0x2, &(0x7f0000000f40)=""/171, 0xab}, 0x4027c3be}, {{&(0x7f0000001000)=@alg, 0x80, &(0x7f0000001480)=[{&(0x7f0000001080)=""/28, 0x1c}, {&(0x7f00000010c0)=""/73, 0x49}, {&(0x7f0000001140)=""/183, 0xb7}, {&(0x7f0000001200)=""/218, 0xda}, {&(0x7f0000001300)=""/76, 0x4c}, {&(0x7f0000001380)=""/249, 0xf9}], 0x6, &(0x7f0000001500)=""/248, 0xf8}, 0x7}, {{&(0x7f0000001600)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000001680)=""/2, 0x2}, {&(0x7f00000016c0)=""/44, 0x2c}, {&(0x7f0000001700)=""/64, 0x40}, {&(0x7f0000001740)=""/201, 0xc9}, {&(0x7f0000001840)=""/79, 0x4f}, {&(0x7f00000018c0)=""/178, 0xb2}, {&(0x7f0000001980)=""/170, 0xaa}, {&(0x7f0000001a40)=""/223, 0xdf}], 0x8, &(0x7f0000001bc0)=""/172, 0xac}, 0x8000}, {{&(0x7f0000001c80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002100)=[{&(0x7f0000001d00)=""/59, 0x3b}, {&(0x7f0000001d40)}, {&(0x7f0000001d80)=""/152, 0x98}, {&(0x7f0000001e40)=""/222, 0xde}, {&(0x7f0000001f40)=""/212, 0xd4}, {&(0x7f0000002040)=""/167, 0xa7}], 0x6}, 0x7}, {{&(0x7f0000002180)=@tipc=@name, 0x80, &(0x7f0000002240)=[{&(0x7f0000002200)=""/19, 0x13}], 0x1, &(0x7f0000002280)=""/100, 0x64}, 0x8}, {{&(0x7f0000002300)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f0000002380)=""/206, 0xce}, {&(0x7f0000002480)=""/4096, 0x1000}, {&(0x7f0000003480)=""/231, 0xe7}, {&(0x7f0000003580)=""/131, 0x83}, {&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/147, 0x93}], 0x6, &(0x7f0000004780)=""/150, 0x96}, 0x9}, {{&(0x7f0000004840)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f0000005a80)=[{&(0x7f00000048c0)=""/218, 0xda}, {&(0x7f00000049c0)=""/98, 0x62}, {&(0x7f0000004a40)=""/4096, 0x1000}, {&(0x7f0000005a40)}], 0x4, &(0x7f0000005ac0)=""/4096, 0x1000}, 0x9}, {{&(0x7f0000006ac0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000006d00)=[{&(0x7f0000006b40)=""/29, 0x1d}, {&(0x7f0000006b80)=""/136, 0x88}, {&(0x7f0000006c40)=""/133, 0x85}], 0x3}, 0x80000001}], 0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000340)={0x385d, 0x1, "41c0537f19690cd7945060f524cdb875af5413d65b5f6f342a71406b0f796cc1191e1ecd916f54350f5cbfd5896a119fd1d5137dcdbb6a497f35099c1dd374e82b44205929de6f5a3d34c6a4de4d7fc1ed8475df44d91b190113bb920c0bf5c89c13e219ab37ae309b0100dc743f0f72109379dedc37a8bfa1b3c9c71bf823d8a5b7cca690b1d8e57080dfc1add8e83dbe05186101ff8ff3be2931f2b34c53942890c18707702679f77ed8a45f24646f47cfd378c215093d708a8c53f656993df90974147953df95bf23c9cb2caa4a5e30f10a0fffc410151f15fbcffb19002c635a7539de507c89478209e870201702c9e56ef23457a96269196f5cdd404b76"}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) r7 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000180)='test_dummy_encryp\xff\x01\x00\x00', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.492376058s ago: executing program 4 (id=68): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) (fail_nth: 19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r4, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) 5.024009473s ago: executing program 2 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(0x0, 0xecf86c37d53049cc) r3 = socket(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89f0, &(0x7f0000001440)={'ip6_vti0\x00', &(0x7f0000000100)=@ethtool_pauseparam={0x13, 0x1000, 0xfff, 0xf}}) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}}, 0x4000804) 4.970264048s ago: executing program 4 (id=70): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r1 = epoll_create1(0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102) r2 = fcntl$dupfd(r1, 0x2, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2, 0x0, 0xa}, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00005200060005000100000008000800", @ANYBLOB="c51d3c7b98"], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x20008000) syz_emit_ethernet(0x95, 0x0, &(0x7f0000000100)={0x80000001, 0x8000001, [0x997, 0x8bf, 0xe4b, 0xc70]}) munlockall() openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1, 0x13, 0x1}, 0x8) dup(r1) socket$inet(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRES8, @ANYBLOB="0000000000000000140012800b0001006d6163736563000004000280"], 0x48}}, 0x8800) 4.274650963s ago: executing program 0 (id=71): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) close(0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f00"], 0x34}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000180)={0x19980330}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') 4.042427358s ago: executing program 2 (id=72): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0xc0145b0e, &(0x7f0000000040)) r1 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="2f071a00000050b271d9cdc1f914138511d0a522daee7942635efa1266f1f36b625e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.311734113s ago: executing program 0 (id=73): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000600010000000000000000000000000a220000001100010000000000000000000000000a"], 0x28}}, 0x0) mount(0x0, 0x0, 0x0, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c0000001e00438b0000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000028001700"], 0x7c}}, 0x20000880) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r5, 0xc018620c, &(0x7f00000000c0)={0x2}) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) preadv(0xffffffffffffffff, 0x0, 0x0, 0x33, 0x2) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, 0x3, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6e}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xe}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x4800) r10 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_INFO(r10, 0x3, &(0x7f0000000180)=""/132) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.183545677s ago: executing program 1 (id=74): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a5"], 0x0}, 0x90) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) write$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x9) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r2, &(0x7f0000000b00)=[{{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000080)="378e", 0x2}], 0x1, 0x0, 0x0, 0x1}}], 0x1, 0x0) 2.816766018s ago: executing program 0 (id=75): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x220000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0xa, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffd}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) 2.45872582s ago: executing program 0 (id=76): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) (async) r2 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r2, 0x5452, &(0x7f0000001840)=0x5d4) write$P9_RLOPEN(r2, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x1, 0x4, 0x7}, 0x3}}, 0x18) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000000)={0x8, 0x722cde4, 0x4, 0x3}, 0x10) (async) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000000)={0x8, 0x722cde4, 0x4, 0x3}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000002b000b000000000000000000067100000800030009200000100001800c0000000700000000000000"], 0x2c}}, 0x40) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000002b000b000000000000000000067100000800030009200000100001800c0000000700000000000000"], 0x2c}}, 0x40) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) (async) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) (async) sched_setattr(0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x105000, 0x181) open_tree(r5, &(0x7f0000000280)='\x00', 0x89801) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') setrlimit(0x40000000000008, &(0x7f0000000000)) preadv(r6, &(0x7f0000000040), 0x0, 0x300, 0x0) (async) preadv(r6, &(0x7f0000000040), 0x0, 0x300, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) sendto$packet(r0, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendto$packet(r0, &(0x7f0000000240)="f2435f0100088000000000850800", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000140)=0x1) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000000140)=0x1) socket$nl_route(0x10, 0x3, 0x0) 2.349755148s ago: executing program 1 (id=77): r0 = syz_io_uring_setup(0x2cea, &(0x7f0000000180)={0x0, 0x7a71, 0x40, 0x0, 0x385}, &(0x7f0000000080), &(0x7f0000000240)) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000280)={0x80, 0x44, '\x00', 0x1000000}, 0x1000000) 2.180521195s ago: executing program 1 (id=78): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b85000000ae000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x90) statx(0xffffffffffffffff, 0x0, 0x48e0cdf8471afff4, 0x54663aafb2d54055, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default user:t0000000000000004096 '], 0x31, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syncfs(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x18) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x141600, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$NBD_SET_FLAGS(r5, 0xab0a, 0xff) sendmsg$nl_route(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000002100020028bd7000fedbdf2502100008080000032200000008000600070000000c000c400000000000001000949952b76a7f7ca7a42cd5233df5002ca6ad19daa1f748b2c4164b51a0061d2ba211d4169410d1a9a2beab9efbbd58b5c7a06b773b7f220a8fc9dbfd4ae8b4"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) setpgid(0x0, 0x0) 2.149829536s ago: executing program 4 (id=79): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000004c0)={0xfff6, 0x80000000, 0x2}) 2.012606931s ago: executing program 0 (id=80): ioprio_set$uid(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe2000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r2 = socket(0x1d, 0x2, 0x6) r3 = socket(0x1, 0x1, 0x0) ioctl$SIOCGETSGCNT(r3, 0x89a0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r2, 0x0, 0x0) r4 = syz_open_procfs(0x0, 0x0) fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'macvtap0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f00000008c0)=[{{0x0, 0xea05, 0x0}}], 0x34000, 0x0) 1.628338034s ago: executing program 4 (id=81): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="00000800000008048263d1cb392ee6262d168b33aca6c4419e26a06d31c66505701b7d6df7375f4272f4ec7f1f4c718875e08cb6005f8d89f22f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x1, &(0x7f0000000040)='P') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYRES8=r2], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x20000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0x8, 0x0, 0xc, 0x8, 0xbd, 0xb, 0x2, 0x13, 0x5, 0x70, 0x0, 0x10, 0xd, 0x0, 0x0, 0x0, 0x7, '\x00', 0x4, 0x2d}) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) vmsplice(r8, &(0x7f00000002c0)=[{&(0x7f0000000040)="7fb892f008781271cf569d328821bcf4fe432b4604c23f4ef8187cadc1730c8eb9e37509af3aa65357edb9310b59b4538b9ed108e749e76b3f9391f344", 0x3d}, {&(0x7f0000000a00)="6d575584e5af23955f256e841c0f63134159d70fc5ee64f0a808216ad405906a5280fb9c4bb472b7bb7ceb643612503c6fa69beb507c1307d13b20821cd77b58163eab65b6187403e773edc2af1a4af62fc0a23946f6504f253a8c3108744f0b328c0c089ed255951f0c0d33abad9037ea88300f618f996e1cbdc3a68d55ffef0773cc3fdbf17c87fa1d2ef18ff5cfdfe8c654cd8b7ae418134d873f4f3bc10ad9bd1d7896f5aefe734e2cadff094243226658a3b5923cd6d95b569a753fbfb8d94eff7243f284bef55157438b333ecccc4a34d9a83c19e7008fa65ab17e4a15775411a682d810c61627b61532aca750d80ae56c6d7d5905b66fe1b0c6b52636b2b879cf110c77b260938e65f2e1238eac45162b6ba7e5c9f42956a10bd75f36bfd96baf57aa4980e4d78320f2bcb51087e11f7e25df06bc3c5061f198aca1b01fd7f3f04bc96a60ac8abe05e9aa840ccba9d7f3743df38cfe591021e1856dc95f9eae9316bedc1cdfb7473aa43079649f7bc742601f0769758114f543d50f5eecf404d01e33a084080fccd8ed90b77afc4c4ccaf8af88f76e2e7e5b5ac170b950466ec6b7febca299d7ca352ffeb8d202a711f05e0ef36d22a5287b09cd913b51cdca2ff0a34ad937b49fa4f6b557bc37e9a6d2b3284ff6df25eed8acdfaebd6acd84b49ba280ebadd7d9790a078d77ed77dbff85c25eda90d6d306e84c5310c360aa7ab5e086786772f404e655e71de2fd0f60dfe9496da1b2295608e91ea3463f361fa37d18b520915cdec3c8cc5d7aeb20707197f8419861854494fe4a6ff4fdeacfb9cb325ea9f6816c4b4cff2d4ff1dfda3a3335aaf43d7d02fcb53af164212dbca398d253b16cdd2c304599af2337ad73827aae842500211c3f349acce49a1812f6d2d7c2e561e54a0893127e0588df544c323b72bf2891e8af69e9cdb9a8b102e26db3706a5cf12e75a5b8a07af37fb4bc074ee2dc2608d2a97e09ea5e0fafb0c3b4a413792fd8d4299a047cc381dc2cbe89126797fb5a2cfaf6a55e30032882c330af49130e167dce7bbf9684be9a102f80ba9439341728b5cb1266350af072f534c1d228bd83d20f2a9075761b035f0cf2b760d4bd0d6a43a50dc06be26f535363a83fbef8f6b58a46b5eaed7b19de5bbc641945c7eb0d5c0ddd43b28b91a249825d0f694e76b7f13b4e2279da69574c13d1e8cd8ba747227182b1e6c8c0f0e7b2e5953d82a26fe31f43e7367b4c98648961c67c080ee9048f7b58888ee6051eccfb935ca82114d8f54522ad04193df1fd8e131247527df6aa443155f8792b1eb792e7fc7d2e7a933376b476909c253fd6fab2ca7b7ed2b3e36e173e2887967298232e992460ac0323e3a96625510fcfcb1d19948d251ca938f8f070c851fa605f0d1a7663d348bdb171a2aa7dce21324c271e78916a713f3f3510dcf284510eec22546b036946276d9d140d47fb4e80e9a1e47750388d9fa166e142404bf40357cbee147461041f9a6244a912b5237ba2598764add1a29438041fb8722fb480dca812f01e40f515ea85cbbb8e8b1765a75ceee53c555f04454b128323541e37d38c385bc28f8d9c098e65aef529a0da301f874766d9ab5902c38a266d9aef157d3f8258d9e6d1b1d0edf643a8ff589c160e93f5e1edb51222643a1f97d3d308235b380a94b39dcaf6d8932335d3b35e536186257a7f2a2fcd25dad6a44c3fbd1229ac1ea7a7ae184c92914eec9c0911211d482fbb40a0e19eefc8437e3848e1a78d037a7ad82eafbcb7fd79501d9e2c9bd1cd43084c83b1a67f2a4a5b7fb08fe6bd927b69bfe016f7dfaf035ca641585dcfff7a74d612c53157fc24bcf7be0324fc1a1450246227a31d2a621e6d097e15be62ea6ea05cfac5f99348d29478542bec6c967b2ba01e54ce89de52825f353b70e1460747f5c12750bad6ac00804b267a84ab690e658994bac22e87836010ee3360f5682cd333aac9fa481e497d038270de803e1b63f10fedb1053f4bf6ac7a96844944e742de8f14a081d54b48dbf92677e26b98dff16145de1488ef20e6d90c29c3b1dcd50e4da7be5ce425ba6544e99f09c7ea624a73b55c56233cb0c91fd9a6b42c90ac3e93a51a2035f1bad50cb579f150d0189527c09dcc5dbc294570bba04accf8ced8f3ed0cf6f27b3b55bf83ce4a7182e0b6275bf6bae681bf868998870df93b73c3840f1ed88af219d97c8b6923db21da36a8dabd2275ccc789213e91a8396cce9a20948df2b419cd688c3035c6bdb65e0d6b67a31016f4c6c57b4a64fe00ec6ae05364ab7b62a3914c578fdbe5b04e6e625f3c5e02d1fa8169ed0bf1d5e4f7ae06ef75fd02797c86b7dcdd47d4576c4b6e96ef730cfd42c41f5d0ad48b52e0b09cf62fa52335f4ccd3558c87a3893afc2d645ad02e0decb0f037e70cb438cb9d243d73c90269a727f3721267eb533f79df9db356b48584ffea85cc3105e27243640dfedbc9f013512d08a131809afe427d2b8ae9c31f8e8dd1e3a0aa5bdf06e23bfa61df34a030c44da1a8c535fe6ac2c4b0871142c9a5da8fb645a848c99bb2aedc02319a07263fd1b035b62eb5a753c056165d0a7594033bf7c5ba25647b027825711d3c5abdad6e1724b90b80671c8b521d0ddd0f5245683a59733d134068048d96b2ff90c783ac820ec6cdbee00361c003670822a3fbee1b570a50bbc2139fba5c601bf990fea666071f42fa461e51231ad81c7082fa9c763ec7b675b36711672a3745a17696f00ccaa04fb7f2fe046a7f0df7a69529074337d28fea7ffb247e1f307c2f8e37d76abb9376c29d5532dfffa15185c9b71526d307cf17267323a897fb75fd0287825b644c6f2146645351bf031b15e7bfcbc48dea7667ddddd191cc0cbe0e676987f85b8316f4bef84381d9766824c1179e59ca6b7711d479106c6ee3f567830b1f78554e6f322ce62563385854d6b8f05eaa56eae3bf61e6e765713693fc306a10f071b70bf57c112939c23e7bf884031e29b86f86034f4010785f1400594ba704ec08a4e5c0f3f78f5f835098814f4e0d45091bbf0931a48871dedcf2fb3c7d787a847be57195f8bc79787ed6e7c01a1fe4f7b058afc9e13ee6b10c8d363deb87ccac05856cd3c1d3780b3a4e39673b113a70c8a13c21d2526816fb709a37e281971f1c82dd58e25b61dc210177b0f824e25c91786d71a345a7dd021acd0b8194f36ea85f3c63940a131ba3f8b7c122e48c2ff09e50d1e25b82f6e2390fe1ba14584b3074b0640a412b62fa19aabf57a06f040fbbe191e335b74adbe00f4bb489b0c1b6beb78ab316c3c3226979676e91ebaa5b31e27691f3233f02496728e6f900dcd684e101de12714e3455218a024db19acc9612d8b70c8b18f7dfacbdd1a4c6efed6df0c614f1978aa1dea634da5e4a94506d8172a1d392911e57bfc021fe43fb38d1675df1fa9ecfe95186ff77743d35aadf61730e1e2e97b4d994952f32439e0330c0cb54335cf48f1ce07ca626e140ea18c6d4d84e692a0bcb15bd14bd20003e868240839356d01f1e149626fed9a16fd845f1f89db7c1f81a9275565e2c019e8bbf8bc2c75f80f9729dc8a8f8d3ba241e12a374fc344a61446e4db22eaf2d7fa7904ed64ddb90ee88cf38e8fd4c2adb1bf4ac8888605bdf29a7e296c15c027bd25836c3c234589b60a9c761db5db891cee52aae5cadbf381f6b00e9c9f637197c7747c9e3b2275a173027f4aa86eb523e62bed270de7d0d43bd8b12faa934b1c0550a1b38e502811ba0c35b2b6f3266fe4269d7815f7b7f0861b15353b4990483996798040ceae6f510af1ecc552ddff7324d45576bd562e681f10f68e5f4419f5c729d47e16c12ad5d97b359eab224078000dbcd9371f4e8688881922e8525aa0bbd6437d2bac38c1a63ca59c73bc048b826c9f47132c31a5b910ea0825486e06e3eae71153698dfdbac953b56dd5a4d54a0caa9786c0d30af884f75a4d84091f2d376ed076f999aacaa5fed9f77cebcc863a13e63d70088c0b1b97f1d68adb974d607ea65825d56da9f06781eee7be843fc7b6b9f3673686c2b5b544a0517cd317a35c17751b8efe18ee576f9e6d5694e59a24bd9956169f8ea3c4cf6b76003a26d00fdd3d997b702152c81ffb8ef9251383fd383c0e29066554d0ced25f11e89f5809a4482e4f870d0433ffd0fcae6fa2b5bbb430e334d1df6a81fa92cb1c1f8115fb7a6a02b8470833fc003b28b5377147f2960d84bbe6a2f3b7a48d72015ce94f17257344f9a1d43e6cb267ff2a61cad91f6c8f012824c3c620d55ff0d28a5aa2067c35b844a19d3064cd62d34e8547c5ddc09ca0f2c750bdfd9d9590e1a19a9d4279d0788eeac56af30b58ef10666ca22e018123aae57c1677feedefe50fc4cf6f70f82f5141fe6af92218d40f3ab6c73bfab5d9cefcc30fe337abc793a7406c3daeb99a9103114232f0f6f242a71a676690cd996273d94bd94a4798d66b824a67edcc71e30a1e1e88877d1d254af2bf56059b2023f9998d789847a8a48c815fb742b1f218c58c731aac57ef3d64937522e5a7da250f95a9a3976178c422ec30e0de39d25647511a02f0afc6a147fcb813e35b3e3e80f827ee8f4b472e05d934d642ce1f3eb82c65babacafd6627fa51551edd63cb14c70969b642a038c0eb5b19de1afe522326b09b73a35f63f76eb018c3d2641053b283bec4017cc915bf2c33e491c776cc32964c98cfe608e1bf476679891f0f0762de8ddb5db38fcc3cb02f49adb9f5512211b2ebbae26b677c541682ad39c51a62e8632e7a76eaf3259de89f5443d789c626c5411d40acedb3eaf3c46f9c959998089c7074f0116fee8947ed8a57343d19c815d0c723556ca5a630a55dc50dee25b6105f1258b462bb7155be2b609dddfa011f577ff62ce4544809bab9e888db7b31c7bb0dc4c25507ef8ca80126c84dedfd094204c80db9cd00fe8a345071e4eb25d97e66aff0d8180c95417cc6ae5fe3c047da0e446c4199c66d0250e715a41cfd348d09dcd5f58ff4059d4d2cead818fb094ab2f11fdb76970f5ac15fc0318da8ab2e3ecf6ef50d6a2a72c68aab2897ae93f9ecb6a44a5da1c231694dbe29cffa3aca1ac132e220d67cd9ce72c0d345df80f5da88255a955c2cbe5ac5eeb91742f712ec8d7cc60982d04c3ae1db624ad7a5c5f1c90c32b8f36e7530470b3837b3b46ae1fee2377b0664d44cfe875af48b13f55f85567e020c8ac911354cb04391b6f3b0ac332a3c152738d4bf170c491ed8292321836b39f76c1b97fa6d50eddd48bb1f039d7d4091f6c3454afb9a1dbe22bebd406bdcbc7e704a31639a9189c74740dadb33900424febb0c175a900373ad469b9beaf3977e122071a0c047ed5c588f82b2d0fd9151192ef469bc922727a98c7c4741696ab2e9ad67622c8071cc926ab38723fc0c6775493d2797214b90994ae4e0076bbd214d75b0f51ba350762def311acc7d7f23f48040a805da8f7ab4f5c770f92d4385f55a3d999787ecaf85d3a6035900a5bf3a37acbce90569a2c69a624084db762246a2b05b458de6099ba732cadebb5eecd8004cb7134dce845c7440fad0a17ee18ffdf34c05ea39726671a8ef51933e2156287306866ed2068d71e61c13af8e4297c462a9c989e4bc4d52a00e14b9091286b06f7f843377a32e560bcbf141684456565fead48392ba3ea7beceb04a65f45c0a9175a0a4699f980e742047e93644da4c8009f5804613d2bfaf4ffe9664fd2c4d910f7eba490ca3c885bfa725359b0bc3178d4", 0x1000}, {&(0x7f0000000100)="ee2a7413e9c5948e75aeac43fb01a7d8b1e9732b130e10d0ae1a999bf0c8247250f0fead5c81f684272ba4c5f54ff6398503c33ad5c5643ec265577665c2", 0x3e}, {&(0x7f0000000140)="7ced29d768921492332772861b082e5ea48d4c5dedfa7b519fb976cee66be14d10569c145923590951d3d5b73dd2c89f3886de7052c5d212e414dfad0d347f", 0x3f}], 0x4, 0x1) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x6) getpriority(0x2, 0xffffffffffffffff) 1.186574281s ago: executing program 1 (id=82): keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) socket$kcm(0x10, 0x5, 0x0) close(0xffffffffffffffff) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xe6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0xfffffffffffffeac) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x1, 0x2) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f00000000c0)=0x200200) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)=0xfffffe00) read$FUSE(r6, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002100)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd779ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af0556ccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bf357d5196491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef6d3b4396878fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093d49b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418f7a2adf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6da78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291d0e917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8e1091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1067754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 261.045779ms ago: executing program 3 (id=83): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000080)={@empty, @empty, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@generic={0xfbfb, "9c6082d1ea320c096405492db068ea9f2ba4727a677d232804b39a4f13de248862fc30eb6fa68bb411cd9185fa80f642b175f6dbd1de382562da42e3f1363ea49cf4fdae3085a6536e232346f757f3868fad72538f7092ede9434e80fc9214de51b92b73b10ed81d"}}}, &(0x7f0000000140)={0x1, 0x3, [0xaec, 0xcb1, 0xc76, 0x9]}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x4, &(0x7f0000000000)='BBBB') syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') r4 = syz_usb_connect(0x1, 0x8d6, &(0x7f0000001400)={{0x12, 0x1, 0x300, 0x19, 0xaa, 0x4f, 0x0, 0x1435, 0x826, 0x6fb6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8c4, 0x4, 0x9, 0x6, 0xf0, 0x3, [{{0x9, 0x4, 0x37, 0x7, 0x3, 0xb3, 0x26, 0xe8, 0x4, [@hid_hid={0x9, 0x21, 0x9, 0x6}, @uac_as={[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x8, 0x3, 0x14, 0x5, "6d8e"}, @as_header={0x7, 0x24, 0x1, 0x12, 0xa2, 0x2}]}], [{{0x9, 0x5, 0xa, 0x3, 0x40, 0x1, 0x3, 0x0, [@generic={0xe4, 0x24, "17693c2dfc941fed0d85f58cc31fe615b876d22403553db8adc8b03715c6068813bd425218484391f34a2ee116aad08340b407189e51fa07a236a6b0a9e0ff4d0041a3b44fc3a2ba221d0af9cd63a86b84b9ee13d990d130dda921a59a9f38b7e3dbff2f6e77721ccf3acabd3b30d4b7f7544ee3021a18ce944cb8db086585cd7c05c04be6e2c93185fe38de497920d298cd14482ce23fd6f8bb2e260e7046eeb4f556c423c5f49d86221237b33624f35421bda9fead85275a813a5f6020acde5d82e16e3b1623822e2dbf55ad28d4b0faa7f9b6bb151023c7cebaa9fe5ce952f7e2"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0x8, 0x8c, 0x7, [@generic={0x5, 0x11, "aae3a6"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x1, 0x0, 0xd, [@generic={0xc2, 0x31, "54a2a71ee201c6fc1646e1dee2c11dd34bb2e74a5916b74c303a7826c41c8271aded44f9b3dbf8d12024da59d0d4686cb55fa94a5d3534f913add012d493cc36c678b6fe99b39242cc94b001a63efef78cb8ee052df903ac02817236e2f25a3b14a741d1d464cf21ec22687fabd0c000066589d1a125062e18a51fd75479ce1d1d606d3e397d3aa45d25c4c7262e20f5f23101fea51f6e00974844fe2785c2e32ba66579e38adac474c3da2490ea4a3a08f77e9cd6caa93a3194fdf2fa520c0c"}]}}]}}, {{0x9, 0x4, 0x8, 0xf9, 0x1, 0x82, 0x14, 0x84, 0x4e, [@hid_hid={0x9, 0x21, 0xad5, 0x98, 0x1, {0x22, 0x95d}}, @generic={0xb2, 0xd, "f71dfb943902141b25111df0c9c4a46b6a4be5a7ba671f6d779798f43bf2687301801740a1690de7824baf78e5435ef58d2a2d01fdef9d179cd50888172a71f547fbe5dfa61a661defbb7e242c31ce4eb273eda6db5e08279b9a554a84bb0917e1f6243516c39217500e823740bf07a47ff30a4f382723e0c3f1a83c564bf62098068a44092c614d0f792b84bf539cab31f7360cc2c7c472f3b18500f85f9cadb0ef577498ef82035602d8ec477fe400"}], [{{0x9, 0x5, 0x2, 0x2, 0x8, 0xe, 0xd0, 0x6, [@generic={0x50, 0x23, "016b98fbc19b340c6d5abf213a0fbf5129359aa804b4a7898a29d78a6cdda62fb89ea7d6e956273401c5554e8c64e5c91304eab41e88cc4aa8e70741c363f3ac12780f6414d30d1a00d4f874689f"}]}}]}}, {{0x9, 0x4, 0x8, 0x6, 0x2, 0xfa, 0x71, 0xa8, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0xfeff, 0x7}, [@extension_unit={0xa, 0x24, 0x8, 0x2, 0x5, 0xf0, "646d18"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x100, 0x3, 0x4, 0x9}, @mixer_unit={0x8, 0x24, 0x4, 0x1, 0x4, "50fed2"}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x100, 0x3, 0x9, 0x80e8, 0xf, 0x6}, @mixer_unit={0x7, 0x24, 0x4, 0x1, 0x9, "61c8"}, @extension_unit={0xa, 0x24, 0x8, 0x6, 0x9, 0xa, "aeeccf"}]}, @uac_as={[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x6, 0x0, "2a8d", "4ca8"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xc3, 0x1}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0x0, 0x81, "", "a3"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xe, 0x4, 0x40, 0x4, 'O', "b052"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0xe7, 0x3, 0xff, 0x8, "1184eaf096"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x538, 0x10, 0x3, "9fe49c3f787d81a7"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x20, 0x7f, 0x7, 0x2, [@generic={0xd9, 0x22, "fc37f29475fdbac10fda456428d3afb7b2e7ce8485cf50e2f02dd10ebb73e52afba8040a0576839824d51cba2c495b143eb7035a8ed0d6f953dfe306f3e5ec17370b4e5589afbbca861e79ff73b53681da3c812217d459eab30ce035be52d4d1e35bbf0ce204e5002fd112e8d43c0d1ff77fbf7b11c9b862ed5b1ed2542699e35659971a464f76688bfda5a6c3f4e0d34092e42b6974c3517dfdc419c40b2231733a197038a6a833b118477c5e1ee04f208c49547ee182fe140c793b4244a2e9319b5438576101441258e264fe6355f528647a17b08682"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x9}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x1, 0x4, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x7}]}}]}}, {{0x9, 0x4, 0xb0, 0x6, 0x5, 0xd2, 0x3a, 0x31, 0x7, [@hid_hid={0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0xdb}}, @uac_control={{0xa, 0x24, 0x1, 0x7beb, 0x85}, [@processing_unit={0xc, 0x24, 0x7, 0x4, 0x3, 0x75, "f22007c8b7"}]}], [{{0x9, 0x5, 0x4, 0x2b45f8e491ba0929, 0x218, 0x7, 0x8, 0x81, [@generic={0x5c, 0x9, "f234fdc2ecc2cbc5528abc71056e2710fa752733ec76e8f1e6eebdecee8876b3f18ea2118ec5a756037ecb3d001a062513662eb311039991e85020087ab47fa52a97e1c785807ab23faac83a327779557315b3a016293c66bd60"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x2, 0x86, 0x67, [@generic={0xa8, 0x30, "26929e4379a866d96619f5810c75c1b6f957e3d800a564a57daacca8693221dc1248d5c61588e9485980c99a5b62790cc8383b891131cf2c443c28d48ea2b932ea1100dcd52db6b6bf620aabc30d02b68f5f2b3a099a4f02b3116110df04d5113499c5348dd9f06860e94f2a55c81d2bf63319e69d729b6d6bac8018a1d368c54632c23626e4bd23bbce7b6cfc323eaf026b3370782244a602d3acd3455f59db1cdaabe685c1"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x5, 0x0, 0x6, [@generic={0xe9, 0xd, "f0eb7f6b6658f01c0aa3cf3da4bb6553ba4524d531aff6c9f653372e78ac395bb0a0d6d0269b044ee84d738b2704f96fa3e126f49039323fbc3926058db89561a393835440791105325008f69da7ce9e8e3de030a5078efb47126bf10a5acbf02a442185ea2e4c6b02d13d656f3be206e9fb587956d6649d49d75b7c75dde61b17d2ce58c0e302de5b3b6a9487e8fe45e9e3214496116366cea348b0fb7ad2ef5beabf3a1bb43a6ed55d2d8e19b85faa5bc63d8df1b11b4b87683677823049cbe5619fde65d67c5a34f85021ad07df6d2d9af195ceada3e6587614a11f09c8ee86838de460c666"}, @generic={0xc8, 0x1, "7a2c1172843f24f9f5a0053e588dfe7c508ec46094f74c781fcdb1c4723129c65a6716cdcde1da81d40e3fa0912967872ba6440196daa0d706c36c7a6a1bee942a419e5dc3bfaf11b84076ef8519ecac507222ac63f5ab4057532367d91690522649f4b48ccff5f9b72fca32d07c1e2181de39061b631d81e46e5dc50c07349731ad8a3216e106658196109a237d8fbd37e3890db129977e914a1421cf6eec4fdf4933bbe6688203fa05eddaae0d304fd7ab02d8a3510bd31a5f258721b1a0df776c05b767a3"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x8, 0x0, 0xf8, 0x9f, [@generic={0x32, 0x31, "f6dabd962d8fa59d59dcaf5a76b7a24faab959cba297e49dc3649b789bbb58cb82789d5bdb15619cda074124ecd41e24"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x7, 0xc, 0xd, [@generic={0xf2, 0xb, "7af1d5dc39f9b3239d1761f0dc366177e799fdb59338b73d45ed67d3b4d14b26361c8969ad2834d8845ceab3c1774312c95f1ae4bf11045aff07d68ce272dbc6030f38cb59e67737a58b3db8408f47d2845b58b2e5544ecf099bc12876fe6119097e9dea5bd73aca7019ae88044df373cc87fc607a88364b0de47755dccfde158c337eaae0061a2ccb16917b7c9009bb8e8aa296efb9d8e8be83a22f87a98ba35c55e7ae4ef075ff6f3c199c70cf1749de7a4b566fe7ebeaafda8015f420a7794fd33bafbd427dfebe689dca7ca9b4b661d10052fdd371d5c9497183e222f82218a3524df653c98d224ba1553eca7f4b"}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x7, 0xa, 0x6, 0x20, 0x3}, 0x42, &(0x7f0000000240)={0x5, 0xf, 0x42, 0x5, [@wireless={0xb, 0x10, 0x1, 0x0, 0x4, 0x3, 0x2, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x5, 0x8}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x6, 0xe10f, 0xf, [0xff00, 0x3f0f, 0xffc030]}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x81, 0x1, 0x81, 0xf000, 0xee, [0xc000]}]}, 0x1, [{0xfc, &(0x7f0000000340)=@string={0xfc, 0x3, "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"}}]}) syz_usb_control_io$uac1(r4, &(0x7f00000004c0)={0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="40316f00bce03725c2164814b4fabd3cb3c47f43e258ddd09d054d9c046cb9175b95ceb3b0a445105f650700fc1212aaec75bdb02d83299a9fdb97ed1ed5c64c7f45246cf0b93b75377971b800499db0f90c1c6787ff776554e17f14c62f91e8ff2b48710642f529533e9a94ab2089a99105201008"], &(0x7f0000000680)={0x0, 0x3, 0x67, @string={0x67, 0x3, "332d6097f97cf5d1447e861bb4ff51b4067257e8177b9a07260fe73be14d01ce4f803f57b648266cb81af1f7f1633ab8c4ee9d3bd9b221e5dac521cc245750aa361a3856792c8bb36edf307571b425b8ee674528a64830760e96781df68837a3aa24a18747"}}}, &(0x7f0000000ac0)={0x44, &(0x7f00000008c0)={0x40, 0x2a, 0xc5, "920f00e939f1df3da1d19e010697238d82c5dcf5d30ea2daeac7ea3e28f3808f0d9032d81ed22a222d5bfd00736dc9c9c214f645d8dd6f430d479e49b0b85bd657e97ff312dcd93449c5de91a819cbbad2763f1471526b953db7037efeee7e5f85a31178f1615ed8e811d9f19cacd6b922b74b10ab26af370be3c10810e2d334dc3999c20e242d807878143ba8cc4c5b99b7937aced24a871f1f5bea3bb1311671a187cb2e775b16d6b311e0068a9896c1a989937b949b0995e386501319727400c53bc0ed"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x6a}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0xf5}, &(0x7f0000000740)={0x20, 0x81, 0x2, "7294"}, &(0x7f00000009c0)={0x20, 0x82, 0x2, "9fc0"}, &(0x7f0000000a00)=ANY=[@ANYBLOB="01000000000000"], &(0x7f0000000a40)={0x20, 0x84, 0x4, "dd453a16"}, &(0x7f0000000a80)={0x20, 0x85, 0x3, "b77bbe"}}) 99.737084ms ago: executing program 1 (id=84): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') write$cgroup_int(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000080)={0x40000101, &(0x7f0000001e80)=[{0x0, 0x1000}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r4, 0x541c, &(0x7f0000000000)) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = getpid() syz_pidfd_open(r6, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x5, 0x9, 0xffffffff, 0x45, "ff000000000000000000000000000200"}) syz_open_pts(r5, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1c2) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) r9 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r9, &(0x7f0000ff1000/0x3000)=nil, 0x400c) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000080)=0x9) 0s ago: executing program 2 (id=85): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="64f30f00d83ef30f6fb5799e0f01c42e2e2ef30f093667663667676726660f383046380f090f18d90fc75c09baf80c66b8544b8d8766f6efeffc0c66b8f2ffffff66efbaf80c66b8c0669d8966efbafc0c66ed", 0x53}], 0x1, 0xa9, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async) shutdown(r2, 0x1) recvfrom(r2, &(0x7f0000000000)=""/116, 0xffffffdd, 0x734, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x10001, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) (rerun: 64) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.4' (ED25519) to the list of known hosts. [ 64.801026][ T30] audit: type=1400 audit(1758488174.385:62): avc: denied { mounton } for pid=5832 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.805412][ T5832] cgroup: Unknown subsys name 'net' [ 64.823940][ T30] audit: type=1400 audit(1758488174.385:63): avc: denied { mount } for pid=5832 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.851199][ T30] audit: type=1400 audit(1758488174.425:64): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.007206][ T5832] cgroup: Unknown subsys name 'cpuset' [ 65.015160][ T5832] cgroup: Unknown subsys name 'rlimit' [ 65.171774][ T30] audit: type=1400 audit(1758488174.755:65): avc: denied { setattr } for pid=5832 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.204150][ T30] audit: type=1400 audit(1758488174.755:66): avc: denied { create } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.229352][ T30] audit: type=1400 audit(1758488174.755:67): avc: denied { write } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.251389][ T30] audit: type=1400 audit(1758488174.755:68): avc: denied { read } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.272010][ T30] audit: type=1400 audit(1758488174.765:69): avc: denied { mounton } for pid=5832 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 65.298680][ T30] audit: type=1400 audit(1758488174.765:70): avc: denied { mount } for pid=5832 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 65.322507][ T30] audit: type=1400 audit(1758488174.815:71): avc: denied { read } for pid=5514 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 65.344837][ T5834] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 66.279225][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.994309][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 70.994324][ T30] audit: type=1400 audit(1758488180.575:78): avc: denied { create } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.022078][ T30] audit: type=1400 audit(1758488180.575:79): avc: denied { read write } for pid=5848 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 71.049879][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.056329][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.065981][ T30] audit: type=1400 audit(1758488180.575:80): avc: denied { open } for pid=5848 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 71.089832][ T30] audit: type=1400 audit(1758488180.595:81): avc: denied { ioctl } for pid=5850 comm="syz-executor" path="socket:[5146]" dev="sockfs" ino=5146 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 71.141430][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.155240][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.157476][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.162773][ T5862] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.170573][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.184922][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.192252][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.197461][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.199674][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.207668][ T5862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.214005][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.221921][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.229346][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.235484][ T5862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.248099][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.248252][ T5867] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.256471][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.263660][ T5862] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.269709][ T5864] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.284646][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.285632][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.291923][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.300212][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.306705][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.330976][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.337184][ T30] audit: type=1400 audit(1758488180.905:82): avc: denied { read } for pid=5849 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.392516][ T30] audit: type=1400 audit(1758488180.905:83): avc: denied { open } for pid=5850 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.415936][ T30] audit: type=1400 audit(1758488180.905:84): avc: denied { mounton } for pid=5850 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 71.716167][ T30] audit: type=1400 audit(1758488181.305:85): avc: denied { module_request } for pid=5850 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 71.833629][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 71.872988][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 71.916031][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 71.979949][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 72.040622][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 72.109101][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.116337][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.123803][ T5850] bridge_slave_0: entered allmulticast mode [ 72.131458][ T5850] bridge_slave_0: entered promiscuous mode [ 72.143732][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.151034][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.158182][ T5848] bridge_slave_0: entered allmulticast mode [ 72.165017][ T5848] bridge_slave_0: entered promiscuous mode [ 72.171636][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.178744][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.186024][ T5851] bridge_slave_0: entered allmulticast mode [ 72.193010][ T5851] bridge_slave_0: entered promiscuous mode [ 72.207618][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.214736][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.221910][ T5850] bridge_slave_1: entered allmulticast mode [ 72.229384][ T5850] bridge_slave_1: entered promiscuous mode [ 72.244348][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.252830][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.260014][ T5848] bridge_slave_1: entered allmulticast mode [ 72.267720][ T5848] bridge_slave_1: entered promiscuous mode [ 72.274058][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.281235][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.288508][ T5851] bridge_slave_1: entered allmulticast mode [ 72.295783][ T5851] bridge_slave_1: entered promiscuous mode [ 72.372008][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.383264][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.393337][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.400519][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.407790][ T5852] bridge_slave_0: entered allmulticast mode [ 72.414365][ T5852] bridge_slave_0: entered promiscuous mode [ 72.421522][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.428707][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.436241][ T5852] bridge_slave_1: entered allmulticast mode [ 72.442881][ T5852] bridge_slave_1: entered promiscuous mode [ 72.451226][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.466330][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.477884][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.502705][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.568725][ T5851] team0: Port device team_slave_0 added [ 72.577579][ T5848] team0: Port device team_slave_0 added [ 72.585291][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.602237][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.609558][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.616805][ T5849] bridge_slave_0: entered allmulticast mode [ 72.623431][ T5849] bridge_slave_0: entered promiscuous mode [ 72.631627][ T5851] team0: Port device team_slave_1 added [ 72.647938][ T5848] team0: Port device team_slave_1 added [ 72.656180][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.666688][ T5850] team0: Port device team_slave_0 added [ 72.680497][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.687869][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.695658][ T5849] bridge_slave_1: entered allmulticast mode [ 72.702271][ T5849] bridge_slave_1: entered promiscuous mode [ 72.725990][ T5850] team0: Port device team_slave_1 added [ 72.761737][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.768871][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.795082][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.814051][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.821748][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.848068][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.860447][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.867569][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.894187][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.906136][ T5852] team0: Port device team_slave_0 added [ 72.920750][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.927838][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.954043][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.982570][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.989532][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.016732][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.029378][ T5852] team0: Port device team_slave_1 added [ 73.046344][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.057717][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.068824][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.075804][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.101828][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.149540][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.156825][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.183186][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.195950][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.202922][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.229024][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.248522][ T5849] team0: Port device team_slave_0 added [ 73.268344][ T5851] hsr_slave_0: entered promiscuous mode [ 73.274448][ T5851] hsr_slave_1: entered promiscuous mode [ 73.296511][ T5849] team0: Port device team_slave_1 added [ 73.306390][ T5848] hsr_slave_0: entered promiscuous mode [ 73.312716][ T5848] hsr_slave_1: entered promiscuous mode [ 73.318727][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 73.324476][ T5848] Cannot create hsr debugfs directory [ 73.335427][ T50] Bluetooth: hci1: command tx timeout [ 73.341084][ T50] Bluetooth: hci0: command tx timeout [ 73.342491][ T5863] Bluetooth: hci3: command tx timeout [ 73.414820][ T50] Bluetooth: hci4: command tx timeout [ 73.420554][ T5863] Bluetooth: hci2: command tx timeout [ 73.437479][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.444425][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.471849][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.487986][ T5850] hsr_slave_0: entered promiscuous mode [ 73.494008][ T5850] hsr_slave_1: entered promiscuous mode [ 73.500065][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 73.506125][ T5850] Cannot create hsr debugfs directory [ 73.518411][ T5852] hsr_slave_0: entered promiscuous mode [ 73.524426][ T5852] hsr_slave_1: entered promiscuous mode [ 73.530475][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 73.536221][ T5852] Cannot create hsr debugfs directory [ 73.546376][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.553310][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.579852][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.736186][ T5849] hsr_slave_0: entered promiscuous mode [ 73.742288][ T5849] hsr_slave_1: entered promiscuous mode [ 73.748436][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 73.754160][ T5849] Cannot create hsr debugfs directory [ 73.959522][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.987250][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.007419][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.017553][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.061698][ T5848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.075728][ T5848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.096023][ T5848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.108530][ T5848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.167308][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.178067][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.188328][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.198746][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.284234][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.294544][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.312953][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.323114][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.383075][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.431810][ T5850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.441334][ T5850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.461050][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.467922][ T5850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.477385][ T5850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.490336][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.522093][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.532805][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.540112][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.557522][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.564656][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.584164][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.617707][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.624832][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.640510][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.663181][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.670315][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.683081][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.690193][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.699740][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.706837][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.795903][ T30] audit: type=1400 audit(1758488184.375:86): avc: denied { sys_module } for pid=5851 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 74.830478][ T5848] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.843538][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.865869][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.949162][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.973039][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.996209][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.009316][ T4376] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.016433][ T4376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.061792][ T4376] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.068938][ T4376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.113909][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.171646][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.178781][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.196784][ T5851] veth0_vlan: entered promiscuous mode [ 75.208148][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.228731][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.235851][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.280856][ T5851] veth1_vlan: entered promiscuous mode [ 75.343223][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.397865][ T5851] veth0_macvtap: entered promiscuous mode [ 75.411996][ T5851] veth1_macvtap: entered promiscuous mode [ 75.418606][ T5863] Bluetooth: hci3: command tx timeout [ 75.424006][ T5863] Bluetooth: hci0: command tx timeout [ 75.430479][ T50] Bluetooth: hci1: command tx timeout [ 75.471048][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.496376][ T5863] Bluetooth: hci2: command tx timeout [ 75.501802][ T5863] Bluetooth: hci4: command tx timeout [ 75.518208][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.526576][ T5848] veth0_vlan: entered promiscuous mode [ 75.579325][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.592431][ T5852] veth0_vlan: entered promiscuous mode [ 75.598759][ T66] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.610645][ T66] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.644880][ T66] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.673261][ T5852] veth1_vlan: entered promiscuous mode [ 75.683090][ T5848] veth1_vlan: entered promiscuous mode [ 75.696616][ T66] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.775348][ T5849] veth0_vlan: entered promiscuous mode [ 75.786551][ T5852] veth0_macvtap: entered promiscuous mode [ 75.798769][ T3579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.807158][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.816929][ T5848] veth0_macvtap: entered promiscuous mode [ 75.828652][ T5852] veth1_macvtap: entered promiscuous mode [ 75.839664][ T3579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.857990][ T5848] veth1_macvtap: entered promiscuous mode [ 75.874158][ T5849] veth1_vlan: entered promiscuous mode [ 75.933668][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.945960][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.948080][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.953875][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.982416][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.997887][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.007171][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.022835][ T30] audit: type=1400 audit(1758488185.605:87): avc: denied { mounton } for pid=5851 comm="syz-executor" path="/root/syzkaller.9gBnUU/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 76.073383][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.089309][ T30] audit: type=1400 audit(1758488185.645:88): avc: denied { mount } for pid=5851 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 76.125046][ T30] audit: type=1400 audit(1758488185.645:89): avc: denied { mounton } for pid=5851 comm="syz-executor" path="/root/syzkaller.9gBnUU/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.125995][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.158845][ T30] audit: type=1400 audit(1758488185.645:90): avc: denied { mount } for pid=5851 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 76.189041][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.210505][ T30] audit: type=1400 audit(1758488185.645:91): avc: denied { mounton } for pid=5851 comm="syz-executor" path="/root/syzkaller.9gBnUU/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 76.242127][ T30] audit: type=1400 audit(1758488185.665:92): avc: denied { mounton } for pid=5851 comm="syz-executor" path="/root/syzkaller.9gBnUU/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7045 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 76.246266][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.278886][ T30] audit: type=1400 audit(1758488185.675:93): avc: denied { unmount } for pid=5851 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.299659][ T30] audit: type=1400 audit(1758488185.705:94): avc: denied { mounton } for pid=5851 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 76.353670][ T30] audit: type=1400 audit(1758488185.705:95): avc: denied { mount } for pid=5851 comm="syz-executor" name="/" dev="gadgetfs" ino=7049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 76.390240][ T5849] veth0_macvtap: entered promiscuous mode [ 76.414670][ T3579] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.441049][ T30] audit: type=1400 audit(1758488185.705:96): avc: denied { mount } for pid=5851 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 76.477570][ T5849] veth1_macvtap: entered promiscuous mode [ 76.487477][ T3579] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.496474][ T3579] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.836810][ T5850] veth0_vlan: entered promiscuous mode [ 76.844973][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.869937][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.906856][ T3579] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.932209][ T5850] veth1_vlan: entered promiscuous mode [ 76.958974][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.996041][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.012796][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.022753][ T3579] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.049928][ T3579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.057908][ T3579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.078997][ T3473] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.091750][ T3473] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.123067][ T3473] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.180163][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.203885][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.216637][ T5850] veth0_macvtap: entered promiscuous mode [ 77.228853][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.237545][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.270133][ T5850] veth1_macvtap: entered promiscuous mode [ 77.289428][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.303506][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.403593][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.419611][ T3579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.439922][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.449034][ T3579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.494994][ T50] Bluetooth: hci1: command tx timeout [ 77.500467][ T5170] Bluetooth: hci3: command tx timeout [ 77.507306][ T5863] Bluetooth: hci0: command tx timeout [ 77.575152][ T5863] Bluetooth: hci4: command tx timeout [ 77.580640][ T50] Bluetooth: hci2: command tx timeout [ 77.614198][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.726226][ T5979] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=256 sclass=netlink_tcpdiag_socket pid=5979 comm=syz.1.2 [ 77.728583][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.756606][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.774927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.785100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.794257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.795403][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 77.811359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.901053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.042096][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.065903][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.081814][ T5981] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 78.103022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 78.205113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 78.432700][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.535327][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.587894][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.044710][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.587428][ T5863] Bluetooth: hci0: command tx timeout [ 79.599025][ T5863] Bluetooth: hci1: command tx timeout [ 79.605400][ T50] Bluetooth: hci3: command tx timeout [ 79.655412][ T50] Bluetooth: hci2: command tx timeout [ 79.664710][ T50] Bluetooth: hci4: command tx timeout [ 80.158762][ T6010] warning: `syz.3.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.604920][ T1206] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.756153][ T1206] usb 2-1: device descriptor read/64, error -71 [ 81.366260][ T9] cfg80211: failed to load regulatory.db [ 81.374733][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 81.374749][ T30] audit: type=1400 audit(1758488190.575:157): avc: denied { read } for pid=6021 comm="syz.0.16" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 81.444702][ T1206] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 81.464005][ T30] audit: type=1400 audit(1758488190.575:158): avc: denied { open } for pid=6021 comm="syz.0.16" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 81.490652][ T30] audit: type=1400 audit(1758488190.585:159): avc: denied { ioctl } for pid=6021 comm="syz.0.16" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 81.515601][ C0] vkms_vblank_simulate: vblank timer overrun [ 81.523800][ T30] audit: type=1400 audit(1758488190.635:160): avc: denied { setopt } for pid=6021 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.550999][ T30] audit: type=1400 audit(1758488190.635:161): avc: denied { bind } for pid=6021 comm="syz.0.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.570874][ T30] audit: type=1400 audit(1758488190.635:162): avc: denied { name_bind } for pid=6021 comm="syz.0.16" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 81.596112][ T30] audit: type=1400 audit(1758488190.635:163): avc: denied { node_bind } for pid=6021 comm="syz.0.16" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 81.669519][ T30] audit: type=1400 audit(1758488190.645:164): avc: denied { write } for pid=6021 comm="syz.0.16" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.702417][ T1206] usb 2-1: device descriptor read/64, error -71 [ 81.711271][ T30] audit: type=1400 audit(1758488190.645:165): avc: denied { connect } for pid=6021 comm="syz.0.16" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.737901][ T30] audit: type=1400 audit(1758488190.645:166): avc: denied { name_connect } for pid=6021 comm="syz.0.16" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 81.815837][ T1206] usb usb2-port1: attempt power cycle [ 81.874469][ T6036] FAULT_INJECTION: forcing a failure. [ 81.874469][ T6036] name failslab, interval 1, probability 0, space 0, times 0 [ 81.888678][ T6036] CPU: 0 UID: 0 PID: 6036 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) [ 81.888701][ T6036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 81.888711][ T6036] Call Trace: [ 81.888717][ T6036] [ 81.888723][ T6036] dump_stack_lvl+0x16c/0x1f0 [ 81.888746][ T6036] should_fail_ex+0x512/0x640 [ 81.888760][ T6036] ? fs_reclaim_acquire+0xae/0x150 [ 81.888781][ T6036] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 81.888799][ T6036] should_failslab+0xc2/0x120 [ 81.888812][ T6036] __kmalloc_noprof+0xd2/0x510 [ 81.888826][ T6036] tomoyo_realpath_from_path+0xc2/0x6e0 [ 81.888844][ T6036] ? tomoyo_profile+0x47/0x60 [ 81.888856][ T6036] tomoyo_path_number_perm+0x245/0x580 [ 81.888869][ T6036] ? tomoyo_path_number_perm+0x237/0x580 [ 81.888884][ T6036] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 81.888899][ T6036] ? find_held_lock+0x2b/0x80 [ 81.888924][ T6036] ? rcu_is_watching+0x12/0xc0 [ 81.888937][ T6036] ? irqentry_exit+0x3b/0x90 [ 81.888951][ T6036] ? lockdep_hardirqs_on+0x7c/0x110 [ 81.888965][ T6036] ? hook_file_ioctl_common+0x145/0x410 [ 81.888979][ T6036] ? __x64_sys_ioctl+0x94/0x210 [ 81.888996][ T6036] ? security_file_ioctl+0x18/0x240 [ 81.889013][ T6036] security_file_ioctl+0x9b/0x240 [ 81.889029][ T6036] __x64_sys_ioctl+0xb7/0x210 [ 81.889047][ T6036] do_syscall_64+0xcd/0x4e0 [ 81.889062][ T6036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.889073][ T6036] RIP: 0033:0x7fe997f8ec29 [ 81.889083][ T6036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.889093][ T6036] RSP: 002b:00007fe998e02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.889104][ T6036] RAX: ffffffffffffffda RBX: 00007fe9981d6090 RCX: 00007fe997f8ec29 [ 81.889110][ T6036] RDX: 0000200000000180 RSI: 00000000c028aa05 RDI: 0000000000000005 [ 81.889117][ T6036] RBP: 00007fe998e02090 R08: 0000000000000000 R09: 0000000000000000 [ 81.889123][ T6036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.889129][ T6036] R13: 00007fe9981d6128 R14: 00007fe9981d6090 R15: 00007ffced3813e8 [ 81.889142][ T6036] [ 81.889193][ T6036] ERROR: Out of memory at tomoyo_realpath_from_path. [ 82.074661][ T6000] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.175197][ T1206] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 82.197157][ T1206] usb 2-1: device descriptor read/8, error -71 [ 82.306679][ T6000] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 82.316280][ T6000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.324335][ T6000] usb 3-1: Product: syz [ 82.329025][ T6000] usb 3-1: Manufacturer: syz [ 82.333661][ T6000] usb 3-1: SerialNumber: syz [ 82.361867][ T6000] usb 3-1: config 0 descriptor?? [ 82.444824][ T1206] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 82.468021][ T1206] usb 2-1: device descriptor read/8, error -71 [ 82.587079][ T1206] usb usb2-port1: unable to enumerate USB device [ 82.594151][ T6000] usb 3-1: ignoring: probably an ADSL modem [ 83.047423][ T6000] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 83.066076][ T6000] usb 3-1: USB disconnect, device number 2 [ 83.090798][ T6047] SELinux: syz.4.24 (6047) set checkreqprot to 1. This is no longer supported. [ 84.812231][ T6062] mkiss: ax0: crc mode is auto. [ 85.113716][ T6079] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 85.561595][ T6087] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.604931][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.764700][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 85.780679][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.792491][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 85.807545][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 85.817437][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.833584][ T9] usb 4-1: config 0 descriptor?? [ 86.014957][ T6000] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 86.145676][ T6097] input: syz1 as /devices/virtual/input/input5 [ 86.164704][ T6000] usb 3-1: Using ep0 maxpacket: 16 [ 86.180433][ T6000] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 86.191519][ T6000] usb 3-1: config 0 has no interface number 0 [ 86.206936][ T6000] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 86.224777][ T6000] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 86.224804][ T5919] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.251029][ T6000] usb 3-1: config 0 interface 41 has no altsetting 0 [ 86.261237][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 86.263951][ T6000] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 86.281932][ T6000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.292213][ T6000] usb 3-1: Product: syz [ 86.301018][ T6000] usb 3-1: Manufacturer: syz [ 86.303886][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input6 [ 86.320660][ T6000] usb 3-1: SerialNumber: syz [ 86.345124][ T6000] usb 3-1: config 0 descriptor?? [ 86.351329][ T6096] Zero length message leads to an empty skb [ 86.353881][ T6092] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.360693][ T6096] syz_tun: entered allmulticast mode [ 86.370016][ T6092] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.370775][ T9] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 86.495196][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 86.521123][ T5919] usb 5-1: unable to get BOS descriptor or descriptor too short [ 86.582907][ T5919] usb 5-1: config 1 has an invalid interface number: 48 but max is 0 [ 86.604717][ T5919] usb 5-1: config 1 has no interface number 0 [ 86.614079][ T6092] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.635109][ T6092] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 86.646015][ T5919] usb 5-1: config 1 interface 48 altsetting 9 bulk endpoint 0xF has invalid maxpacket 64 [ 87.344822][ T5919] usb 5-1: config 1 interface 48 has no altsetting 0 [ 87.422399][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 87.432970][ T30] audit: type=1400 audit(1758488196.995:210): avc: denied { create } for pid=6104 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.480568][ T5919] usb 5-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=f3.9e [ 87.624736][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.642912][ T30] audit: type=1400 audit(1758488197.005:211): avc: denied { connect } for pid=6104 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.662320][ C0] vkms_vblank_simulate: vblank timer overrun [ 87.671980][ T5919] usb 5-1: Product: syz [ 87.676230][ T5919] usb 5-1: Manufacturer: syz [ 87.680851][ T5919] usb 5-1: SerialNumber: syz [ 87.687052][ T30] audit: type=1400 audit(1758488197.005:212): avc: denied { setopt } for pid=6104 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 87.707393][ T1206] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.707605][ T6094] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 87.799005][ T30] audit: type=1400 audit(1758488197.385:213): avc: denied { name_bind } for pid=6110 comm="syz.1.41" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 87.844194][ T6000] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 87.860676][ T6082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.869795][ T6082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.914700][ T1206] usb 1-1: Using ep0 maxpacket: 16 [ 87.922233][ T1206] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 87.930760][ T1206] usb 1-1: config 0 has no interface number 0 [ 87.938322][ T1206] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.943451][ T30] audit: type=1400 audit(1758488197.525:214): avc: denied { ioctl } for pid=6093 comm="syz.4.36" path="socket:[8926]" dev="sockfs" ino=8926 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 87.959369][ T1206] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.980353][ T5902] usb 4-1: USB disconnect, device number 2 [ 88.020245][ T1206] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 88.047539][ T30] audit: type=1400 audit(1758488197.595:215): avc: denied { sys_module } for pid=6093 comm="syz.4.36" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 88.057047][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.113118][ T1206] usb 1-1: config 0 descriptor?? [ 88.131452][ T30] audit: type=1400 audit(1758488197.715:216): avc: denied { create } for pid=6093 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 88.158860][ T30] audit: type=1400 audit(1758488197.735:217): avc: denied { bind } for pid=6093 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 88.177908][ C0] vkms_vblank_simulate: vblank timer overrun [ 88.184207][ T30] audit: type=1400 audit(1758488197.745:218): avc: denied { write } for pid=6093 comm="syz.4.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 88.339984][ T5919] ti_usb_3410_5052 5-1:1.48: TI USB 3410 1 port adapter converter detected [ 88.355542][ T5919] usb 5-1: USB disconnect, device number 2 [ 88.563801][ T30] audit: type=1400 audit(1758488198.145:219): avc: denied { create } for pid=6118 comm="syz.3.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 88.574845][ T50] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 88.617404][ T6121] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 88.624026][ T6121] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 88.633485][ T6121] vhci_hcd vhci_hcd.0: Device attached [ 88.868790][ T24] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 89.097075][ T6127] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 89.129757][ T6127] PKCS7: Only support pkcs7_signedData type [ 89.151401][ T6000] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 89.183483][ T6000] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 89.200878][ T6000] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 89.249851][ T6000] usb 3-1: USB disconnect, device number 3 [ 89.744626][ T6134] netlink: 40 bytes leftover after parsing attributes in process `syz.4.47'. [ 89.761069][ T6134] netlink: 40 bytes leftover after parsing attributes in process `syz.4.47'. [ 90.410349][ T6122] vhci_hcd: connection reset by peer [ 90.435923][ T1206] usbhid 1-1:0.1: can't add hid device: -71 [ 90.442004][ T1206] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 90.494782][ T48] vhci_hcd: stop threads [ 90.499667][ T48] vhci_hcd: release socket [ 90.543218][ T48] vhci_hcd: disconnect device [ 90.726366][ T1206] usb 1-1: USB disconnect, device number 2 [ 92.511271][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 92.511354][ T30] audit: type=1400 audit(1758488202.095:228): avc: denied { connect } for pid=6139 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.785367][ T50] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 92.793802][ T50] Bluetooth: hci2: Injecting HCI hardware error event [ 92.801593][ T50] Bluetooth: hci2: hardware error 0x00 [ 92.933548][ T30] audit: type=1400 audit(1758488202.505:229): avc: denied { getopt } for pid=6139 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 93.654182][ T30] audit: type=1400 audit(1758488203.215:230): avc: denied { create } for pid=6162 comm="syz.4.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 93.723629][ T6152] mmap: syz.0.49 (6152) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.580576][ T6161] netlink: 24 bytes leftover after parsing attributes in process `syz.0.49'. [ 94.624840][ T24] vhci_hcd: vhci_device speed not set [ 94.647512][ T5863] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 94.728802][ T30] audit: type=1326 audit(1758488204.305:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ab18ec29 code=0x7ffc0000 [ 94.752900][ T30] audit: type=1326 audit(1758488204.305:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ab18ec29 code=0x7ffc0000 [ 95.126038][ T30] audit: type=1326 audit(1758488204.305:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe7ab18ec29 code=0x7ffc0000 [ 95.155915][ T30] audit: type=1326 audit(1758488204.305:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ab18ec29 code=0x7ffc0000 [ 95.284799][ T30] audit: type=1326 audit(1758488204.305:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7ab18ec29 code=0x7ffc0000 [ 95.505176][ T30] audit: type=1326 audit(1758488204.315:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7ab18ec29 code=0x7ffc0000 [ 95.650798][ T6194] debugfs: '!' already exists in 'ieee80211' [ 95.665131][ T50] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 95.685099][ T30] audit: type=1326 audit(1758488204.315:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6176 comm="syz.1.58" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe7ab18ec29 code=0x7ffc0000 [ 95.782190][ T6185] loop6: detected capacity change from 0 to 63 [ 95.984733][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.044754][ T5858] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.053287][ T5858] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.061528][ T5858] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.069685][ T5858] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.079394][ T5858] Buffer I/O error on dev loop6, logical block 0, async page read [ 96.417263][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.750683][ T50] Bluetooth: hci3: command tx timeout [ 96.791086][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 96.801182][ T10] usb 3-1: config 1 has no interface number 0 [ 96.811649][ T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.822666][ T10] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 96.837467][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.904808][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.916288][ T10] usb 3-1: Product: syz [ 96.921946][ T10] usb 3-1: Manufacturer: syz [ 96.928748][ T10] usb 3-1: SerialNumber: syz [ 97.571789][ T6212] capability: warning: `syz.3.63' uses 32-bit capabilities (legacy support in use) [ 97.762964][ C0] wlan1: beacon TX faster than countdown (channel/color switch) completion [ 97.762964][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 97.992490][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 97.992506][ T30] audit: type=1400 audit(1758488207.575:283): avc: denied { connect } for pid=6206 comm="syz.0.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.028390][ T6213] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 98.052573][ T6198] syz.2.61 (6198): /proc/6198/oom_adj is deprecated, please use /proc/6198/oom_score_adj instead. [ 98.085315][ T30] audit: type=1400 audit(1758488207.615:284): avc: denied { ioctl } for pid=6206 comm="syz.0.64" path="socket:[9638]" dev="sockfs" ino=9638 ioctlcmd=0x48c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 98.125554][ T30] audit: type=1400 audit(1758488207.635:285): avc: denied { bind } for pid=6197 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.217170][ T30] audit: type=1400 audit(1758488207.635:286): avc: denied { read } for pid=6197 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.460077][ T10] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 98.468059][ T10] cdc_ncm 3-1:1.1: bind() failure [ 98.496689][ T10] usb 3-1: USB disconnect, device number 4 [ 98.502660][ T30] audit: type=1400 audit(1758488207.635:287): avc: denied { setopt } for pid=6197 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.695584][ T50] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 98.790170][ T50] Bluetooth: hci3: Injecting HCI hardware error event [ 98.811176][ T50] Bluetooth: hci3: hardware error 0x00 [ 99.032996][ T6228] FAULT_INJECTION: forcing a failure. [ 99.032996][ T6228] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.046331][ T6228] CPU: 1 UID: 0 PID: 6228 Comm: syz.4.68 Not tainted syzkaller #0 PREEMPT(full) [ 99.046357][ T6228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 99.046367][ T6228] Call Trace: [ 99.046373][ T6228] [ 99.046381][ T6228] dump_stack_lvl+0x16c/0x1f0 [ 99.046407][ T6228] should_fail_ex+0x512/0x640 [ 99.046433][ T6228] _copy_from_user+0x2e/0xd0 [ 99.046457][ T6228] get_timespec64+0x8b/0x240 [ 99.046483][ T6228] ? __pfx_get_timespec64+0x10/0x10 [ 99.046514][ T6228] futex2_setup_timeout+0xe6/0x2c0 [ 99.046541][ T6228] ? __pfx_futex2_setup_timeout+0x10/0x10 [ 99.046577][ T6228] __do_sys_futex_waitv+0xf9/0x2c0 [ 99.046593][ T6228] ? __pfx___do_sys_futex_waitv+0x10/0x10 [ 99.046624][ T6228] do_syscall_64+0xcd/0x4e0 [ 99.046648][ T6228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.046666][ T6228] RIP: 0033:0x7f7eb9b8ec29 [ 99.046680][ T6228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.046696][ T6228] RSP: 002b:00007f7ebaaae038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 99.046713][ T6228] RAX: ffffffffffffffda RBX: 00007f7eb9dd5fa0 RCX: 00007f7eb9b8ec29 [ 99.046724][ T6228] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001080 [ 99.046734][ T6228] RBP: 00007f7ebaaae090 R08: 0000000000000001 R09: 0000000000000000 [ 99.046744][ T6228] R10: 0000200000001100 R11: 0000000000000246 R12: 0000000000000002 [ 99.046753][ T6228] R13: 00007f7eb9dd6038 R14: 00007f7eb9dd5fa0 R15: 00007ffd543ba5b8 [ 99.046776][ T6228] [ 99.285751][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.154959][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 100.180499][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.199091][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 100.238954][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 100.269167][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.291518][ T10] usb 4-1: config 0 descriptor?? [ 101.024699][ T50] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 101.292547][ T6246] netlink: 20 bytes leftover after parsing attributes in process `syz.0.73'. [ 101.504993][ T6254] binder: 6244:6254 ioctl c018620c 2000000000c0 returned -1 [ 101.652226][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 101.691741][ T30] audit: type=1400 audit(1758488211.265:288): avc: denied { create } for pid=6248 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 101.760252][ T30] audit: type=1400 audit(1758488211.345:289): avc: denied { bind } for pid=6248 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 101.845945][ T9] usb 3-1: device descriptor read/64, error -71 [ 101.875583][ T30] audit: type=1400 audit(1758488211.345:290): avc: denied { write } for pid=6248 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 102.040769][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 102.122939][ T6265] netlink: 'syz.0.76': attribute type 1 has an invalid length. [ 102.133618][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 102.144156][ T6264] netlink: 'syz.0.76': attribute type 1 has an invalid length. [ 102.144707][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 102.153196][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 102.176833][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input9 [ 102.234045][ T10] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 102.347511][ T9] usb 3-1: device descriptor read/64, error -71 [ 102.553409][ T9] usb usb3-port1: attempt power cycle [ 102.895533][ T6273] trusted_key: encrypted_key: hex blob is missing [ 102.981456][ T30] audit: type=1400 audit(1758488212.525:291): avc: denied { ioctl } for pid=6275 comm="syz.0.80" path="socket:[9801]" dev="sockfs" ino=9801 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.133054][ T30] audit: type=1400 audit(1758488212.535:292): avc: denied { bind } for pid=6275 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 103.159109][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 103.167707][ T30] audit: type=1400 audit(1758488212.535:293): avc: denied { create } for pid=6275 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.209834][ T30] audit: type=1400 audit(1758488212.545:294): avc: denied { connect } for pid=6275 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.244554][ T9] usb 3-1: device descriptor read/8, error -71 [ 103.245599][ T30] audit: type=1400 audit(1758488212.545:295): avc: denied { write } for pid=6275 comm="syz.0.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.335099][ T6221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.343648][ T6221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.355921][ T10] usb 4-1: USB disconnect, device number 3 [ 103.374980][ T5936] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.103564][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 104.135163][ T5936] usb 5-1: Using ep0 maxpacket: 16 [ 104.144564][ T5936] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.158793][ T5936] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 104.168716][ T9] usb 3-1: device descriptor read/8, error -71 [ 104.168936][ T5936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.191814][ T5936] usb 5-1: config 0 descriptor?? [ 104.370538][ T9] usb usb3-port1: unable to enumerate USB device [ 104.395805][ T30] audit: type=1400 audit(1758488213.965:296): avc: denied { unmount } for pid=5848 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 104.614744][ T1206] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 104.680336][ T5936] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 104.872598][ C1] ================================================================== [ 104.880682][ C1] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0x1070/0x10a0 [ 104.888648][ C1] Read of size 1 at addr ffff88805a643fff by task kworker/1:4/5936 [ 104.896511][ C1] [ 104.898812][ C1] CPU: 1 UID: 0 PID: 5936 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 104.898828][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 104.898836][ C1] Workqueue: usb_hub_wq hub_event [ 104.898857][ C1] Call Trace: [ 104.898861][ C1] [ 104.898866][ C1] dump_stack_lvl+0x116/0x1f0 [ 104.898884][ C1] print_report+0xcd/0x630 [ 104.898898][ C1] ? __virt_addr_valid+0x81/0x610 [ 104.898914][ C1] ? __phys_addr+0xe8/0x180 [ 104.898942][ C1] ? mcp2221_raw_event+0x1070/0x10a0 [ 104.898959][ C1] kasan_report+0xe0/0x110 [ 104.898970][ C1] ? mcp2221_raw_event+0x1070/0x10a0 [ 104.898986][ C1] mcp2221_raw_event+0x1070/0x10a0 [ 104.899001][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 104.899015][ C1] __hid_input_report.constprop.0+0x314/0x450 [ 104.899031][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 104.899049][ C1] hid_irq_in+0x35e/0x870 [ 104.899071][ C1] __usb_hcd_giveback_urb+0x388/0x610 [ 104.899083][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 104.899093][ C1] dummy_timer+0x1814/0x3a30 [ 104.899112][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 104.899123][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 104.899135][ C1] ? mark_held_locks+0x49/0x80 [ 104.899154][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 104.899169][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 104.899180][ C1] __hrtimer_run_queues+0x202/0xad0 [ 104.899195][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 104.899207][ C1] ? read_tsc+0x9/0x20 [ 104.899223][ C1] hrtimer_run_softirq+0x17d/0x350 [ 104.899236][ C1] handle_softirqs+0x219/0x8e0 [ 104.899251][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 104.899264][ C1] __irq_exit_rcu+0x109/0x170 [ 104.899276][ C1] irq_exit_rcu+0x9/0x30 [ 104.899289][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 104.899302][ C1] [ 104.899305][ C1] [ 104.899309][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 104.899320][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 104.899333][ C1] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 6a 5f 00 f6 48 89 df e8 52 b3 00 f6 e8 4d 11 2c f6 fb bf 01 00 00 00 32 b0 f0 f5 65 8b 05 0b 6d 3f 08 85 c0 74 06 5b c3 cc cc cc cc [ 104.899343][ C1] RSP: 0018:ffffc90004a2e5a8 EFLAGS: 00000202 [ 104.899352][ C1] RAX: 000000000006d957 RBX: ffffc90004a2e738 RCX: 0000000000000007 [ 104.899358][ C1] RDX: 0000000000000000 RSI: ffffffff8de52cd1 RDI: 0000000000000001 [ 104.899365][ C1] RBP: ffffc90004a2e730 R08: 0000000000000001 R09: 0000000000000001 [ 104.899371][ C1] R10: ffffffff90ab7597 R11: 0000000000000000 R12: dffffc0000000000 [ 104.899377][ C1] R13: 0000000000000002 R14: ffffc90004a2e738 R15: ffff88802a668060 [ 104.899387][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 104.899399][ C1] __wait_for_common+0x1e3/0x4e0 [ 104.899412][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 104.899422][ C1] ? try_to_wake_up+0xa67/0x1870 [ 104.899434][ C1] ? __pfx___wait_for_common+0x10/0x10 [ 104.899447][ C1] ? __pfx_try_to_wake_up+0x10/0x10 [ 104.899459][ C1] ? devtmpfs_submit_req+0x94/0x100 [ 104.899476][ C1] devtmpfs_submit_req+0xa8/0x100 [ 104.899489][ C1] devtmpfs_create_node+0x18a/0x230 [ 104.899502][ C1] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 104.899516][ C1] ? up_write+0x1b2/0x520 [ 104.899529][ C1] ? kernfs_create_link+0x1bd/0x240 [ 104.899541][ C1] ? kernfs_put+0x35/0x60 [ 104.899556][ C1] ? sysfs_do_create_link_sd+0xbb/0x140 [ 104.899570][ C1] device_add+0x10bd/0x1aa0 [ 104.899585][ C1] ? __pfx_device_add+0x10/0x10 [ 104.899600][ C1] ? __pfx_exact_lock+0x10/0x10 [ 104.899613][ C1] ? kobject_get+0xbb/0x150 [ 104.899627][ C1] cdev_device_add+0xc2/0x1e0 [ 104.899640][ C1] i2cdev_attach_adapter+0x359/0x4c0 [ 104.899653][ C1] i2cdev_notifier_call+0x65/0x80 [ 104.899663][ C1] notifier_call_chain+0xb9/0x410 [ 104.899679][ C1] ? __pfx_i2cdev_notifier_call+0x10/0x10 [ 104.899691][ C1] blocking_notifier_call_chain+0x69/0xa0 [ 104.899707][ C1] bus_notify+0x56/0x70 [ 104.899719][ C1] device_add+0x10d3/0x1aa0 [ 104.899733][ C1] ? __pfx_device_add+0x10/0x10 [ 104.899747][ C1] ? find_held_lock+0x2b/0x80 [ 104.899759][ C1] ? mark_held_locks+0x49/0x80 [ 104.899774][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 104.899788][ C1] i2c_register_adapter+0x39e/0x1370 [ 104.899801][ C1] i2c_add_adapter+0x10a/0x1b0 [ 104.899813][ C1] devm_i2c_add_adapter+0x1b/0x90 [ 104.899825][ C1] mcp2221_probe+0x5f1/0xc50 [ 104.899840][ C1] ? __pfx_mcp2221_probe+0x10/0x10 [ 104.899855][ C1] hid_device_probe+0x360/0x720 [ 104.899867][ C1] ? __pfx_hid_device_probe+0x10/0x10 [ 104.899879][ C1] really_probe+0x23e/0xa90 [ 104.899892][ C1] __driver_probe_device+0x1de/0x440 [ 104.899906][ C1] driver_probe_device+0x4c/0x1b0 [ 104.899918][ C1] __device_attach_driver+0x1df/0x310 [ 104.899932][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 104.899944][ C1] bus_for_each_drv+0x156/0x1e0 [ 104.899954][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 104.899964][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.899977][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 104.899989][ C1] __device_attach+0x1e4/0x4b0 [ 104.900002][ C1] ? __pfx___device_attach+0x10/0x10 [ 104.900015][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 104.900027][ C1] bus_probe_device+0x17f/0x1c0 [ 104.900038][ C1] device_add+0x1148/0x1aa0 [ 104.900053][ C1] ? __pfx_device_add+0x10/0x10 [ 104.900076][ C1] ? debugfs_create_file_full+0x41/0x60 [ 104.900092][ C1] hid_add_device+0x373/0xa60 [ 104.900103][ C1] ? __pfx_hid_add_device+0x10/0x10 [ 104.900113][ C1] ? lockdep_init_map_type+0x5c/0x280 [ 104.900123][ C1] ? lockdep_init_map_type+0x5c/0x280 [ 104.900133][ C1] usbhid_probe+0xd38/0x13f0 [ 104.900149][ C1] usb_probe_interface+0x300/0xa40 [ 104.900167][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 104.900183][ C1] really_probe+0x23e/0xa90 [ 104.900196][ C1] __driver_probe_device+0x1de/0x440 [ 104.900209][ C1] driver_probe_device+0x4c/0x1b0 [ 104.900221][ C1] __device_attach_driver+0x1df/0x310 [ 104.900235][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 104.900247][ C1] bus_for_each_drv+0x156/0x1e0 [ 104.900257][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 104.900267][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.900279][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 104.900292][ C1] __device_attach+0x1e4/0x4b0 [ 104.900304][ C1] ? __pfx___device_attach+0x10/0x10 [ 104.900317][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 104.900329][ C1] bus_probe_device+0x17f/0x1c0 [ 104.900340][ C1] device_add+0x1148/0x1aa0 [ 104.900355][ C1] ? __pfx_device_add+0x10/0x10 [ 104.900369][ C1] ? mark_held_locks+0x49/0x80 [ 104.900386][ C1] usb_set_configuration+0x1187/0x1e20 [ 104.900403][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 104.900416][ C1] usb_generic_driver_probe+0xb1/0x110 [ 104.900429][ C1] usb_probe_device+0xec/0x3e0 [ 104.900443][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 104.900458][ C1] really_probe+0x23e/0xa90 [ 104.900470][ C1] __driver_probe_device+0x1de/0x440 [ 104.900482][ C1] ? usb_driver_applicable+0x1c7/0x220 [ 104.900499][ C1] driver_probe_device+0x4c/0x1b0 [ 104.900511][ C1] __device_attach_driver+0x1df/0x310 [ 104.900524][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 104.900537][ C1] bus_for_each_drv+0x156/0x1e0 [ 104.900547][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 104.900557][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 104.900569][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 104.900581][ C1] __device_attach+0x1e4/0x4b0 [ 104.900593][ C1] ? __pfx___device_attach+0x10/0x10 [ 104.900606][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 104.900618][ C1] bus_probe_device+0x17f/0x1c0 [ 104.900629][ C1] device_add+0x1148/0x1aa0 [ 104.900644][ C1] ? __pfx_device_add+0x10/0x10 [ 104.900658][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 104.900671][ C1] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 104.900689][ C1] usb_new_device+0xd07/0x1a60 [ 104.900703][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 104.900714][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 104.900728][ C1] ? mark_held_locks+0x49/0x80 [ 104.900744][ C1] hub_event+0x2f34/0x4fe0 [ 104.900762][ C1] ? __pfx_hub_event+0x10/0x10 [ 104.900776][ C1] ? assoc_array_insert+0x1520/0x3970 [ 104.900795][ C1] ? rcu_is_watching+0x12/0xc0 [ 104.900809][ C1] process_one_work+0x9cc/0x1b70 [ 104.900823][ C1] ? __pfx_hcd_resume_work+0x10/0x10 [ 104.900838][ C1] ? __pfx_process_one_work+0x10/0x10 [ 104.900851][ C1] ? assign_work+0x1a0/0x250 [ 104.900861][ C1] worker_thread+0x6c8/0xf10 [ 104.900874][ C1] ? __kthread_parkme+0x19e/0x250 [ 104.900889][ C1] ? __pfx_worker_thread+0x10/0x10 [ 104.900900][ C1] kthread+0x3c2/0x780 [ 104.900910][ C1] ? __pfx_kthread+0x10/0x10 [ 104.900920][ C1] ? rcu_is_watching+0x12/0xc0 [ 104.900933][ C1] ? __pfx_kthread+0x10/0x10 [ 104.900942][ C1] ret_from_fork+0x56a/0x730 [ 104.900952][ C1] ? __pfx_kthread+0x10/0x10 [ 104.900962][ C1] ret_from_fork_asm+0x1a/0x30 [ 104.900978][ C1] [ 104.900982][ C1] [ 105.772287][ C1] Allocated by task 5851: [ 105.776592][ C1] kasan_save_stack+0x33/0x60 [ 105.781252][ C1] kasan_save_track+0x14/0x30 [ 105.785908][ C1] __kasan_kmalloc+0xaa/0xb0 [ 105.790478][ C1] inetdev_init+0x66/0x5a0 [ 105.794892][ C1] inetdev_event+0xc5f/0x18a0 [ 105.799554][ C1] notifier_call_chain+0xb9/0x410 [ 105.804567][ C1] call_netdevice_notifiers_info+0xbe/0x140 [ 105.810450][ C1] register_netdevice+0x182e/0x2270 [ 105.815646][ C1] veth_newlink+0x30f/0xa00 [ 105.820129][ C1] rtnl_newlink+0xc42/0x2000 [ 105.824707][ C1] rtnetlink_rcv_msg+0x95e/0xe90 [ 105.829627][ C1] netlink_rcv_skb+0x158/0x420 [ 105.834383][ C1] netlink_unicast+0x5a7/0x870 [ 105.839150][ C1] netlink_sendmsg+0x8d1/0xdd0 [ 105.843911][ C1] __sys_sendto+0x4a3/0x520 [ 105.848413][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 105.853159][ C1] do_syscall_64+0xcd/0x4e0 [ 105.857664][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.863539][ C1] [ 105.865841][ C1] The buggy address belongs to the object at ffff88805a643c00 [ 105.865841][ C1] which belongs to the cache kmalloc-512 of size 512 [ 105.879869][ C1] The buggy address is located 511 bytes to the right of [ 105.879869][ C1] allocated 512-byte region [ffff88805a643c00, ffff88805a643e00) [ 105.894509][ C1] [ 105.896811][ C1] The buggy address belongs to the physical page: [ 105.903211][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5a640 [ 105.911964][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 105.920442][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 105.927962][ C1] page_type: f5(slab) [ 105.931923][ C1] raw: 00fff00000000040 ffff88801b841c80 dead000000000122 0000000000000000 [ 105.940486][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 105.949053][ C1] head: 00fff00000000040 ffff88801b841c80 dead000000000122 0000000000000000 [ 105.957700][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 105.966356][ C1] head: 00fff00000000002 ffffea0001699001 00000000ffffffff 00000000ffffffff [ 105.975006][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 105.983650][ C1] page dumped because: kasan: bad access detected [ 105.990035][ C1] page_owner tracks the page as allocated [ 105.995724][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5852, tgid 5852 (syz-executor), ts 72312312682, free_ts 16258357215 [ 106.017062][ C1] post_alloc_hook+0x1c0/0x230 [ 106.021816][ C1] get_page_from_freelist+0x132b/0x38e0 [ 106.027354][ C1] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 106.033228][ C1] alloc_pages_mpol+0x1fb/0x550 [ 106.038060][ C1] new_slab+0x247/0x330 [ 106.042200][ C1] ___slab_alloc+0xcf2/0x1750 [ 106.046867][ C1] __slab_alloc.constprop.0+0x56/0xb0 [ 106.052229][ C1] __kmalloc_cache_noprof+0xfb/0x3e0 [ 106.057501][ C1] __ipv6_dev_mc_inc+0x2f1/0xbc0 [ 106.062438][ C1] ipv6_add_dev+0xbb7/0x15f0 [ 106.067016][ C1] addrconf_notify+0x53e/0x19e0 [ 106.071850][ C1] notifier_call_chain+0xb9/0x410 [ 106.076887][ C1] call_netdevice_notifiers_info+0xbe/0x140 [ 106.082769][ C1] register_netdevice+0x182e/0x2270 [ 106.087956][ C1] veth_newlink+0x30f/0xa00 [ 106.092438][ C1] rtnl_newlink+0xc42/0x2000 [ 106.097017][ C1] page last free pid 1 tgid 1 stack trace: [ 106.102844][ C1] __free_frozen_pages+0x7d5/0x10f0 [ 106.108052][ C1] free_contig_range+0x183/0x4b0 [ 106.112978][ C1] destroy_args+0x794/0xc10 [ 106.117460][ C1] debug_vm_pgtable+0x1a32/0x3640 [ 106.122462][ C1] do_one_initcall+0x120/0x6e0 [ 106.127208][ C1] kernel_init_freeable+0x5c2/0x910 [ 106.132388][ C1] kernel_init+0x1c/0x2b0 [ 106.136702][ C1] ret_from_fork+0x56a/0x730 [ 106.141278][ C1] ret_from_fork_asm+0x1a/0x30 [ 106.146028][ C1] [ 106.148333][ C1] Memory state around the buggy address: [ 106.153947][ C1] ffff88805a643e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 106.162007][ C1] ffff88805a643f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 106.170056][ C1] >ffff88805a643f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 106.178100][ C1] ^ [ 106.186053][ C1] ffff88805a644000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 106.194095][ C1] ffff88805a644080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 106.202140][ C1] ================================================================== [ 106.210176][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 106.217362][ C1] CPU: 1 UID: 0 PID: 5936 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 106.226714][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 106.236749][ C1] Workqueue: usb_hub_wq hub_event [ 106.241766][ C1] Call Trace: [ 106.245024][ C1] [ 106.247849][ C1] dump_stack_lvl+0x3d/0x1f0 [ 106.252428][ C1] vpanic+0x6e8/0x7a0 [ 106.256398][ C1] ? __pfx_vpanic+0x10/0x10 [ 106.260887][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 106.265898][ C1] ? mcp2221_raw_event+0x1070/0x10a0 [ 106.271171][ C1] panic+0xca/0xd0 [ 106.274871][ C1] ? __pfx_panic+0x10/0x10 [ 106.279275][ C1] ? end_report+0x4c/0x170 [ 106.283673][ C1] ? rcu_is_watching+0x12/0xc0 [ 106.288423][ C1] ? lock_release+0x201/0x2f0 [ 106.293089][ C1] check_panic_on_warn+0xab/0xb0 [ 106.298007][ C1] end_report+0x107/0x170 [ 106.302320][ C1] kasan_report+0xee/0x110 [ 106.306719][ C1] ? mcp2221_raw_event+0x1070/0x10a0 [ 106.311994][ C1] mcp2221_raw_event+0x1070/0x10a0 [ 106.317091][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 106.322884][ C1] __hid_input_report.constprop.0+0x314/0x450 [ 106.328931][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 106.334380][ C1] hid_irq_in+0x35e/0x870 [ 106.338699][ C1] __usb_hcd_giveback_urb+0x388/0x610 [ 106.344071][ C1] usb_hcd_giveback_urb+0x39b/0x450 [ 106.349248][ C1] dummy_timer+0x1814/0x3a30 [ 106.353832][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 106.358752][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 106.363674][ C1] ? mark_held_locks+0x49/0x80 [ 106.368427][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 106.374217][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 106.379144][ C1] __hrtimer_run_queues+0x202/0xad0 [ 106.384331][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 106.390030][ C1] ? read_tsc+0x9/0x20 [ 106.394093][ C1] hrtimer_run_softirq+0x17d/0x350 [ 106.399188][ C1] handle_softirqs+0x219/0x8e0 [ 106.403953][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 106.409229][ C1] __irq_exit_rcu+0x109/0x170 [ 106.413900][ C1] irq_exit_rcu+0x9/0x30 [ 106.418127][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 106.423744][ C1] [ 106.426673][ C1] [ 106.429582][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 106.435548][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 106.441362][ C1] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 6a 5f 00 f6 48 89 df e8 52 b3 00 f6 e8 4d 11 2c f6 fb bf 01 00 00 00 32 b0 f0 f5 65 8b 05 0b 6d 3f 08 85 c0 74 06 5b c3 cc cc cc cc [ 106.460950][ C1] RSP: 0018:ffffc90004a2e5a8 EFLAGS: 00000202 [ 106.467000][ C1] RAX: 000000000006d957 RBX: ffffc90004a2e738 RCX: 0000000000000007 [ 106.474959][ C1] RDX: 0000000000000000 RSI: ffffffff8de52cd1 RDI: 0000000000000001 [ 106.482914][ C1] RBP: ffffc90004a2e730 R08: 0000000000000001 R09: 0000000000000001 [ 106.490869][ C1] R10: ffffffff90ab7597 R11: 0000000000000000 R12: dffffc0000000000 [ 106.498819][ C1] R13: 0000000000000002 R14: ffffc90004a2e738 R15: ffff88802a668060 [ 106.506775][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 106.511959][ C1] __wait_for_common+0x1e3/0x4e0 [ 106.516882][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 106.522232][ C1] ? try_to_wake_up+0xa67/0x1870 [ 106.527162][ C1] ? __pfx___wait_for_common+0x10/0x10 [ 106.532602][ C1] ? __pfx_try_to_wake_up+0x10/0x10 [ 106.537784][ C1] ? devtmpfs_submit_req+0x94/0x100 [ 106.542970][ C1] devtmpfs_submit_req+0xa8/0x100 [ 106.547978][ C1] devtmpfs_create_node+0x18a/0x230 [ 106.553162][ C1] ? __pfx_devtmpfs_create_node+0x10/0x10 [ 106.558863][ C1] ? up_write+0x1b2/0x520 [ 106.563196][ C1] ? kernfs_create_link+0x1bd/0x240 [ 106.568379][ C1] ? kernfs_put+0x35/0x60 [ 106.572697][ C1] ? sysfs_do_create_link_sd+0xbb/0x140 [ 106.578240][ C1] device_add+0x10bd/0x1aa0 [ 106.582732][ C1] ? __pfx_device_add+0x10/0x10 [ 106.587568][ C1] ? __pfx_exact_lock+0x10/0x10 [ 106.592404][ C1] ? kobject_get+0xbb/0x150 [ 106.596896][ C1] cdev_device_add+0xc2/0x1e0 [ 106.601559][ C1] i2cdev_attach_adapter+0x359/0x4c0 [ 106.606825][ C1] i2cdev_notifier_call+0x65/0x80 [ 106.611834][ C1] notifier_call_chain+0xb9/0x410 [ 106.616845][ C1] ? __pfx_i2cdev_notifier_call+0x10/0x10 [ 106.622547][ C1] blocking_notifier_call_chain+0x69/0xa0 [ 106.628257][ C1] bus_notify+0x56/0x70 [ 106.632408][ C1] device_add+0x10d3/0x1aa0 [ 106.636897][ C1] ? __pfx_device_add+0x10/0x10 [ 106.641734][ C1] ? find_held_lock+0x2b/0x80 [ 106.646397][ C1] ? mark_held_locks+0x49/0x80 [ 106.651146][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 106.656936][ C1] i2c_register_adapter+0x39e/0x1370 [ 106.662208][ C1] i2c_add_adapter+0x10a/0x1b0 [ 106.666953][ C1] devm_i2c_add_adapter+0x1b/0x90 [ 106.671964][ C1] mcp2221_probe+0x5f1/0xc50 [ 106.676555][ C1] ? __pfx_mcp2221_probe+0x10/0x10 [ 106.681657][ C1] hid_device_probe+0x360/0x720 [ 106.686490][ C1] ? __pfx_hid_device_probe+0x10/0x10 [ 106.691844][ C1] really_probe+0x23e/0xa90 [ 106.696332][ C1] __driver_probe_device+0x1de/0x440 [ 106.701599][ C1] driver_probe_device+0x4c/0x1b0 [ 106.706606][ C1] __device_attach_driver+0x1df/0x310 [ 106.711961][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 106.717834][ C1] bus_for_each_drv+0x156/0x1e0 [ 106.722665][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 106.728018][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.733201][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 106.738990][ C1] __device_attach+0x1e4/0x4b0 [ 106.743735][ C1] ? __pfx___device_attach+0x10/0x10 [ 106.749002][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 106.754185][ C1] bus_probe_device+0x17f/0x1c0 [ 106.759017][ C1] device_add+0x1148/0x1aa0 [ 106.763523][ C1] ? __pfx_device_add+0x10/0x10 [ 106.768358][ C1] ? debugfs_create_file_full+0x41/0x60 [ 106.773986][ C1] hid_add_device+0x373/0xa60 [ 106.778644][ C1] ? __pfx_hid_add_device+0x10/0x10 [ 106.783821][ C1] ? lockdep_init_map_type+0x5c/0x280 [ 106.789174][ C1] ? lockdep_init_map_type+0x5c/0x280 [ 106.794524][ C1] usbhid_probe+0xd38/0x13f0 [ 106.799103][ C1] usb_probe_interface+0x300/0xa40 [ 106.804215][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 106.809834][ C1] really_probe+0x23e/0xa90 [ 106.814324][ C1] __driver_probe_device+0x1de/0x440 [ 106.819594][ C1] driver_probe_device+0x4c/0x1b0 [ 106.824620][ C1] __device_attach_driver+0x1df/0x310 [ 106.829977][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 106.835855][ C1] bus_for_each_drv+0x156/0x1e0 [ 106.840684][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 106.846033][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.851220][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 106.857015][ C1] __device_attach+0x1e4/0x4b0 [ 106.861778][ C1] ? __pfx___device_attach+0x10/0x10 [ 106.867056][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 106.872239][ C1] bus_probe_device+0x17f/0x1c0 [ 106.877070][ C1] device_add+0x1148/0x1aa0 [ 106.881560][ C1] ? __pfx_device_add+0x10/0x10 [ 106.886396][ C1] ? mark_held_locks+0x49/0x80 [ 106.891150][ C1] usb_set_configuration+0x1187/0x1e20 [ 106.896596][ C1] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 106.902677][ C1] usb_generic_driver_probe+0xb1/0x110 [ 106.908119][ C1] usb_probe_device+0xec/0x3e0 [ 106.912866][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 106.918225][ C1] really_probe+0x23e/0xa90 [ 106.922721][ C1] __driver_probe_device+0x1de/0x440 [ 106.928009][ C1] ? usb_driver_applicable+0x1c7/0x220 [ 106.933474][ C1] driver_probe_device+0x4c/0x1b0 [ 106.938514][ C1] __device_attach_driver+0x1df/0x310 [ 106.943867][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 106.949741][ C1] bus_for_each_drv+0x156/0x1e0 [ 106.954572][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 106.959925][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 106.965115][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 106.970905][ C1] __device_attach+0x1e4/0x4b0 [ 106.975655][ C1] ? __pfx___device_attach+0x10/0x10 [ 106.980923][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 106.986107][ C1] bus_probe_device+0x17f/0x1c0 [ 106.990940][ C1] device_add+0x1148/0x1aa0 [ 106.995429][ C1] ? __pfx_device_add+0x10/0x10 [ 107.000262][ C1] ? usb_detect_static_quirks+0x335/0x3e0 [ 107.005969][ C1] ? __usb_get_extra_descriptor+0x158/0x1c0 [ 107.011854][ C1] usb_new_device+0xd07/0x1a60 [ 107.016614][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 107.021620][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 107.026803][ C1] ? mark_held_locks+0x49/0x80 [ 107.031563][ C1] hub_event+0x2f34/0x4fe0 [ 107.035974][ C1] ? __pfx_hub_event+0x10/0x10 [ 107.040720][ C1] ? assoc_array_insert+0x1520/0x3970 [ 107.046084][ C1] ? rcu_is_watching+0x12/0xc0 [ 107.050848][ C1] process_one_work+0x9cc/0x1b70 [ 107.055794][ C1] ? __pfx_hcd_resume_work+0x10/0x10 [ 107.061076][ C1] ? __pfx_process_one_work+0x10/0x10 [ 107.066437][ C1] ? assign_work+0x1a0/0x250 [ 107.071014][ C1] worker_thread+0x6c8/0xf10 [ 107.075590][ C1] ? __kthread_parkme+0x19e/0x250 [ 107.080601][ C1] ? __pfx_worker_thread+0x10/0x10 [ 107.085696][ C1] kthread+0x3c2/0x780 [ 107.089748][ C1] ? __pfx_kthread+0x10/0x10 [ 107.094338][ C1] ? rcu_is_watching+0x12/0xc0 [ 107.099090][ C1] ? __pfx_kthread+0x10/0x10 [ 107.103662][ C1] ret_from_fork+0x56a/0x730 [ 107.108247][ C1] ? __pfx_kthread+0x10/0x10 [ 107.112846][ C1] ret_from_fork_asm+0x1a/0x30 [ 107.117617][ C1] [ 107.120816][ C1] Kernel Offset: disabled [ 107.125122][ C1] Rebooting in 86400 seconds..