last executing test programs: 23m57.163179846s ago: executing program 32 (id=23): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$dvb_dvr(&(0x7f000005ce80), 0x0, 0x100) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r1) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf252b"], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x4800) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb00000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000002000000000000000000000000000000001000000000000000000000000000000000000001000000000000000a00000000000000000000000500000005000000080023"], 0x100}}, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) close(r5) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r7 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x41, 0x1ff) fcntl$setlease(r8, 0x400, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) unlink(&(0x7f00000001c0)='./file0\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) readv(r0, &(0x7f000005cfc0)=[{&(0x7f000005cec0)=""/136, 0x88}], 0x1) syz_open_dev$vbi(&(0x7f0000004880), 0x1, 0x2) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) 22m59.857734937s ago: executing program 33 (id=205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) landlock_create_ruleset(0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$sock(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {0x0}], 0x2}, 0x20000810) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x24048851}, 0x10) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) r9 = accept$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_buf(r9, 0x29, 0x2d, &(0x7f0000000180)=""/116, 0x0) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x6000000) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) 22m50.091155409s ago: executing program 34 (id=230): r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) write$eventfd(r0, &(0x7f0000000080)=0x20000006, 0x8) 21m17.77105671s ago: executing program 35 (id=445): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c000000090601040000000000000000960000090900020073797a30000000000800094000002fd9080009400000000205671b0a0001000700000008000940000000020900020073797a3200"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x20000040) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) (async) close(r0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000']) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004005) (async) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) io_uring_enter(r4, 0x2219, 0x34d3, 0x16, 0x0, 0x0) (async) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bind$rxrpc(r5, &(0x7f0000000140)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @mcast1, 0x1}}, 0x24) 19m6.931102198s ago: executing program 8 (id=840): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000100)) (fail_nth: 2) 19m5.482485395s ago: executing program 8 (id=844): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0xfffc, @rand_addr=0xac140001}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x55, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f80), 0x0, 0x4) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19m2.718644689s ago: executing program 8 (id=851): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x3, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18m57.929167411s ago: executing program 8 (id=863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000200)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xef`i\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000820000000000008007000000"], 0x183002) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0x78) r2 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x14a) r3 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000580)={{0x8, 0x3, 0x8, 0x5, 'syz0\x00', 0x1}, 0x2, 0x20000103, 0x800, r3, 0x5, 0x3, 'syz0\x00', &(0x7f00000003c0)=['K{&@().!\x00', '\x00', '\x8a-#\xad\x00', '}!]\xc6/\r-,\xf0\x00', '+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xef`i\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92'], 0x1a2}) renameat(r2, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') r4 = fanotify_init(0x1, 0x40000) r5 = dup(r0) fanotify_mark(r4, 0x1, 0x4800101b, r5, 0x0) syz_ublk_setup_queues(r5, 0x0, &(0x7f00000000c0)={0x0, 0x6e1b, 0x8, 0x2, 0x26e}, &(0x7f00000006c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfe7e, 0x2000, 0x2, 0x20a, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x70ee, 0x100, 0x1, 0xac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e97, 0x8002, 0x3, 0x388, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x84a8, 0x400, 0x2, 0x398, 0x0, r2}}], 0x4, &(0x7f0000001940)={0x2e, 0x40, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x0, 0xed3, 0x0, &(0x7f0000000940)=@buf_1k="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"}}, &(0x7f00000019c0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000480)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000020000026000400"}, {0x2, 0x18, "fe906d26efe39393fe08f73eabc57d7b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e464a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d180600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) syz_ublk_setup_queues(r6, 0x0, &(0x7f0000001a00)={0x0, 0x89e1, 0xb800, 0x1, 0x1e1, 0x0, r5}, &(0x7f0000001a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf272, 0x800, 0x0, 0x228, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2db3, 0x8, 0x3, 0x315, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd047, 0x4000, 0x2, 0x1df, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x12d4, 0x80000, 0x3, 0xf3}}], 0x4, &(0x7f0000002d00)={0x2e, 0x11, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x401}, 0x0, r7, '\x00', {0x4, 0x496, 0x0, &(0x7f0000001d00)=@buf_512="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"}}, &(0x7f0000002d80)) sendfile(r0, r1, &(0x7f00000001c0)=0x8, 0x4) 18m55.901691216s ago: executing program 8 (id=864): bpf$PROG_LOAD(0x5, 0x0, 0x0) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) 18m55.468946901s ago: executing program 8 (id=867): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) chdir(0x0) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r0, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010003000000000002000200", @ANYRES32=r0, @ANYBLOB="0400000000000000100002000000001020000000000000004414ca12e2e72f018d0d7c1148d8a2779d5ed0d377bd33c4aa2b07cbe1e9ab8f102a2189cccdc50b508d80efedd5ad952f0d4f4ea42d8b9868507f5886f318b3f046fd0f6c13b2f18385278040b0ed4ac4ba524fc3f6f241a1c94151e42df0ed0efc492b9407d042ae000b387861261e16e80a4d6d1514"], 0x2c, 0x3) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b80080009000000fffe08"], 0x184}}, 0x0) ftruncate(r1, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') creat(&(0x7f0000000040)='./file1\x00', 0x32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x1082) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edbe5a31a77f23addc89aee284d81aa61cf9b2f78b42341000000010000000001100000000904000003fe03010009cd8d1f000200001702058b1e2097963ff2c8a46930290228a3bfab69e1af16194feb1525ee502f0b3aea53c89c9b239202000000000000008bfcc3c1df37f3e6069c3189fe5648f63568ed2cc2"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18m39.862422602s ago: executing program 36 (id=867): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) chdir(0x0) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r0, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010003000000000002000200", @ANYRES32=r0, @ANYBLOB="0400000000000000100002000000001020000000000000004414ca12e2e72f018d0d7c1148d8a2779d5ed0d377bd33c4aa2b07cbe1e9ab8f102a2189cccdc50b508d80efedd5ad952f0d4f4ea42d8b9868507f5886f318b3f046fd0f6c13b2f18385278040b0ed4ac4ba524fc3f6f241a1c94151e42df0ed0efc492b9407d042ae000b387861261e16e80a4d6d1514"], 0x2c, 0x3) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="84010000", @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b80080009000000fffe08"], 0x184}}, 0x0) ftruncate(r1, 0x200c17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') creat(&(0x7f0000000040)='./file1\x00', 0x32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x1082) ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edbe5a31a77f23addc89aee284d81aa61cf9b2f78b42341000000010000000001100000000904000003fe03010009cd8d1f000200001702058b1e2097963ff2c8a46930290228a3bfab69e1af16194feb1525ee502f0b3aea53c89c9b239202000000000000008bfcc3c1df37f3e6069c3189fe5648f63568ed2cc2"], 0x0) syz_usb_control_io$uac1(r6, 0x0, &(0x7f00000009c0)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="40000f000000012721dcfe14c639a500ba17162716"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17m28.350529665s ago: executing program 1 (id=1003): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=r2, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000002240)="d7", 0x1, 0xfffffffffffffffe) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r1, 0x0, 0x25, 0xa, @void}, 0x10) 17m26.799387505s ago: executing program 1 (id=1008): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000540), 0xfff, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000380)={0x0, 0x0, '\x00', @bt={0x1ff, 0xc5, 0x2, 0xfffffff9, 0x8, 0x1, 0x20, 0x2}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f0000000440)={0x0, @ctrl={0x0, 0x0, @value64}}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0x5c, r9, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_DEVKEY={0x40, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x28, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x5c}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r12) sendmsg$NLBL_MGMT_C_ADD(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x3c, r13, 0x601, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r8, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x60, r13, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004}, 0x400c002) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x48000000, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x3}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x5, 0xf}]}}]}, 0x78}}, 0x0) 17m25.587210452s ago: executing program 1 (id=1010): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f00, 0xd, 0x0, &(0x7f00000007c0)="9f44948721919580684010a405", 0x0, 0x7ff, 0x0, 0x0, 0xe, 0x0, &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000402000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 17m23.340474495s ago: executing program 1 (id=1016): syz_usb_connect$uac2(0x3, 0xa2, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000300000020351210004000010203010902020904000021010120000924010700063000b2092407030300027f950b240606030900020004000c240303040406060381008007240802050100090401000001022000090401010101022000090501090002069980082501011b1c00000904020000010220000904020101010220000905820900020e0452082501043c43ce030000000000000000000000000000a8ad46e76185902732563a0c1b79cfee9ecf7ba72c9cab2d266af0913791ac7124e8040f1cc00c33bd9ab3e7903031ce00bd2bb3e1ca2325603237282714447bf821a80e96868132a2f6eac51205649488e651e804a171caf42b20bf36438ee81e8be2c4f25ab40fc0915b96ed2dd4e560362c65ea48ab90a8b3ce7af79f61169c32a9d31ec4803a0bfbcdb0b116f306bcab67aa4fd9f6ad4df3495ab810bfb67ea1dfdd5bfbd85a82e431a3b6ee25c039092772b822dd6f65698084d2d9c647df295171836a2561b3ae63ff9891619c4633d9598433388d369753"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x401, @empty, 0xffeffffb}, 0x1c) listen(r0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000001240)=""/106, 0x6a}, {&(0x7f0000000000)=""/149, 0x95}, {&(0x7f0000000300)=""/71, 0x47}], 0x4, 0x7, 0x20000000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) getsockname(r3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000380)={0x9, 0x4, 0x9, 0x8, 0x8, "e4a23875bb3745134714fd44527ac306e8c479"}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r4, 0x1, 0x2f, 0x0, &(0x7f0000000100)) 17m19.930388033s ago: executing program 1 (id=1024): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0xfffc, @rand_addr=0xac140001}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x4, &(0x7f00002d6000/0x3000)=nil, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x400000000007, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) r4 = syz_open_dev$video(&(0x7f0000000040), 0x10001, 0xc0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x282, 0x3, 0x32315258, 0x6, 0x0, 0x3, 0x1, 0xfeedcafa, 0x2, 0x1, 0x0, 0x5}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4090}, 0x4004) io_uring_setup(0x2a6a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r5, &(0x7f00000001c0)='p:s/p ./file0:0', 0xf) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) 17m14.174572974s ago: executing program 1 (id=1038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000060020000000455a12a00090026000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x9}]}, 0x1c}}, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x110, r0, 0xfedfe000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x7ff, 0x8, 0x6, 0x3, 0xb91}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x8205, 0x0, 0x21, r4}, &(0x7f00000001c0)=0x10) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000100)) 16m58.907105161s ago: executing program 37 (id=1038): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000003c80)="d800000019008111e0020f060d8107040a60000060020000000455a12a00090026000699e3ffffff14000500fe80817806000500000000000074d67f6f9400f7d1d9bbe94fa27108a007a240c77f01896034277ce06bbace8037cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a2366e4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad96267e004dcdf634c1f215ce3bb9ad809d50b69b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51f9ffffff000000000000000000f49956e4f98b53ced9802b", 0xd8}], 0x1}, 0x4008040) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@can_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_LIM_HOPS={0x5, 0xd, 0x9}]}, 0x1c}}, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x110, r0, 0xfedfe000) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x7ff, 0x8, 0x6, 0x3, 0xb91}, &(0x7f0000000140)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x8205, 0x0, 0x21, r4}, &(0x7f00000001c0)=0x10) getsockopt$sock_int(r0, 0x1, 0x2f, 0x0, &(0x7f0000000100)) 9m30.851012264s ago: executing program 2 (id=2394): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x1) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x8}) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x9) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000440)={@multicast1, @private=0xa010102, @multicast1}, 0xc) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(&(0x7f0000000000), 0x202, 0x40) socket$tipc(0x1e, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f00000000c0)={0x9, "183f3346fe8465c34135a799c14211e0643d93784f6b0d5655b1e20c30c67264c2eb1d2f89056d8124cc4cdbdd8517ffd2cd5d9416441fb28e6857455f2cd193"}) close_range(r3, 0xffffffffffffffff, 0x100000000000000) 9m30.59651267s ago: executing program 2 (id=2396): fcntl$lock(0xffffffffffffffff, 0x24, 0x0) socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x8ce, 0x0, 0x0, &(0x7f0000000080), &(0x7f0000000280)) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f00000003c0)="1dfd71d864192bb2e01c945aae35f1bd51ad8c64b9071fa0a870d49a6e01c42b5028df27c3af10b4ba540b149238d64aaca12eacdd5f6d824920e5f9f7adba3df8c68bd4ebac87aebc176fc3322970cc769cb6e9402c692bb1ae6d526f9a40d5ceca3d183e1b80623735b37406cb606a24721ff853cbd0fce590e88a4e4cb6ba6d06360afe3e0cb8cff746b72bbf8438477adaf0e89dcb2155c6eb102009587b99d48eddc10f8e821e38e56e1d7c9a5fbdfece64732d729b7acb350043d5ea", 0xbf}, {0x0}, {0x0}], 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) signalfd(r2, &(0x7f0000000340)={[0xabed2e56]}, 0x8) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x1000000}) r3 = io_uring_setup(0x694d, &(0x7f00000000c0)={0x0, 0x41f0b, 0x0, 0x2, 0x253}) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0xffffffff, 0x161902) socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x9e, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c00078008000640"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) 9m28.519304065s ago: executing program 2 (id=2400): r0 = openat$comedi(0xffffff9c, 0x0, 0x101401, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r3 = dup3(r1, r2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x6}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1, 0xffff}}, {{0xa, 0x0, 0x94, @remote}}}, 0x108) inotify_init1(0x800) r7 = openat(0xffffffffffffff9c, 0x0, 0x50440, 0x29) r8 = getpid() ptrace(0x18, r8) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x5, 0x300e, 0x8}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040095}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x7, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf5, 0x4, 0x8080ffa, 0x5, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x5, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x2000000f, 0x55, 0x8, 0x4008, 0x4, 0x100008, 0x6, 0x10, 0xee, 0x4, 0x7ffd]}) 9m28.214456328s ago: executing program 2 (id=2403): mmap(&(0x7f0000567000/0x2000)=nil, 0x2000, 0x0, 0x10010, 0xffffffffffffffff, 0x6ce4000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40002) fcntl$dupfd(r0, 0x0, r0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x58}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 9m27.205433441s ago: executing program 2 (id=2409): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x3, 0x0, 0x4, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x80000000010}, 0x60) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800120076000d0b"], 0x18}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0], 0x0, 0xaf, &(0x7f0000000380), 0x0, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x91, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x48, 0x2, 0x6, 0x405, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)={0x44, 0xa, 0x6, 0x5, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/i8042/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='i8042\x00', 0x6) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/events/msr/enable\x00', 0x1, 0x0) r5 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000180)=0x0) r7 = syz_clone(0x2c00a000, &(0x7f00000001c0)="ba1bc89ac03ed0149cff450808b8183f6d3d9409faf169b43b24d9dcbefa318b2d88754f917a083d6401282a91feedf13dec1d566624bce42fc4c91e4e762a71300ab072cbd0e5bbef2070868b05e9c414ebb700309058a4c423dcd52eec0707847d9ac332800f9a71c2b58245a6517663f957e5eb6575b8e4194855ca", 0x7d, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="fc1bcf83e9724075dad1697d967b63667b6c98dd34a60d4975501b6046c1579b2753d1489a04c0dfa69eddee15f99ac3a42e2b6436c03e65d60f5157c2075c4d8c673fda780cd790f6e10efed88832b1060fd54a32802e6b") tgkill(r6, r7, 0x21) migrate_pages(r5, 0xa, &(0x7f0000000080)=0x2, &(0x7f0000000140)=0x7) write(r4, &(0x7f0000000100)='1', 0x1) 9m24.734535169s ago: executing program 2 (id=2424): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf20000000000000070000000f0000000d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x4, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) 9m9.574573675s ago: executing program 38 (id=2424): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x4, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) 6m45.31437042s ago: executing program 4 (id=2937): socket(0xa, 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x0, 0xbd) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x18, 0x44, 0x107, 0x0, 0x25dfdbfc, {0x3, 0x7c}, [@nested={0x4, 0x145}]}, 0x18}}, 0xc000) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000040)={0x800, 0x2, 0x4, 0x0, 0x8000000000000000, 0x0, 0x3, 0x45}, &(0x7f0000000100)={0xfffffffffffffbff, 0x8001, 0x2c4, 0x9, 0xfd9f, 0x0, 0x4b18, 0x5}, &(0x7f0000000140)={0x7, 0x4, 0x7, 0x7, 0x8d1, 0x800, 0x7, 0x9}, &(0x7f0000000200)={r2, r3+60000000}, &(0x7f0000000280)={&(0x7f0000000240), 0x8}) 6m45.137219299s ago: executing program 4 (id=2939): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071104200000000001d400500000000004704000001ed00000f030000000000002c440000000000006b0afefe000000007303000000000000b500fdff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a107464ffffff7f00000000617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce963b0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket(0x10, 0x80000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/100, 0x64) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x7) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(0xffffffffffffffff, r3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)='\\', 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0x2, 0x20000000000000b, 0x1, 0x201, 0x3, 0x28, 0x4, 0x78d35fd38012d97d}) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 6m44.212029727s ago: executing program 4 (id=2943): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000c020000000000000000000001050000018000000000000000010000850200000000000000010000060000000400000000da"], 0x0, 0x52}, 0x20) 6m44.04265488s ago: executing program 4 (id=2946): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r3 = dup3(r1, r2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1, 0xffff}}, {{0xa, 0x0, 0x94, @remote}}}, 0x108) inotify_init1(0x800) r7 = openat(0xffffffffffffff9c, 0x0, 0x50440, 0x29) r8 = getpid() ptrace(0x18, r8) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x5, 0x300e, 0x8}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040095}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x7, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf5, 0x4, 0x8080ffa, 0x5, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x5, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x2000000f, 0x55, 0x8, 0x4008, 0x4, 0x100008, 0x6, 0x10, 0xee, 0x4, 0x7ffd]}) 6m43.728826164s ago: executing program 4 (id=2949): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x1e5) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000006", @ANYRES16=0x0, @ANYBLOB="010029bd7000fddbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00008000000600110002000000"], 0x44}, 0x1, 0x0, 0x0, 0x24000884}, 0x40010) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {0x0, 0x100000000000000}]}, 0x68) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r2, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214500002c00000000400600000a0000010a000002", 0x16}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@deltfilter={0x98, 0x2d, 0x800, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x9, 0x5}, {0x3, 0xf}, {0x1, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x81}, @TCA_CHAIN={0x8, 0xb, 0x10001}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @filter_kind_options=@f_flow={{0x9}, {0x28, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0xc4fd}, @TCA_FLOW_POLICE={0xc, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1771f}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xe1}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_flower={{0xb}, {0xfffffffffffffe2b, 0x2, [@TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}]}}]}, 0x98}}, 0x40844) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r10) 6m43.054038272s ago: executing program 4 (id=2953): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket(0x10, 0x80000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/100, 0x64) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x7) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(0xffffffffffffffff, r3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)='\\', 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0x2, 0x20000000000000b, 0x1, 0x201, 0x3, 0x28, 0x4, 0x78d35fd38012d97d}) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 6m27.944792027s ago: executing program 39 (id=2953): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket(0x10, 0x80000, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/100, 0x64) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x7) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(0xffffffffffffffff, r3) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000140)={r2, 0x2}, 0x8) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)='\\', 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0x2, 0x20000000000000b, 0x1, 0x201, 0x3, 0x28, 0x4, 0x78d35fd38012d97d}) ioctl$SNDRV_PCM_IOCTL_STATUS32(0xffffffffffffffff, 0x806c4120, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1m29.322417752s ago: executing program 5 (id=4013): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021207c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write$char_usb(r1, &(0x7f0000000000)="93", 0xf5) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) (async) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x40) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r8, 0x18000000000002a0, 0x42, 0xfffffffffffffec1, &(0x7f0000000500)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xfb, &(0x7f0000000000), &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e86278239ca2d8aeec7a25c43448bce8000000"}, 0x3d) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000000000)=@delchain={0x24, 0x65, 0x20, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x1}, {0x10, 0xc}, {0x8, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="a443fcd7770245fc989b50ea09817223dd9fac342f8f7c3d2cdcae3b14f82c974dc1", 0x22}], 0x1}, 0x6) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) (async) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r9, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r9, 0xf503, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r11, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) 1m28.271396482s ago: executing program 5 (id=4019): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xc, &(0x7f0000000140)={0xb, 0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r0, 0x5, &(0x7f0000000080)=0x1ff) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r3, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x3, 0x12) write$binfmt_script(r5, &(0x7f0000000300)={'#! ', './file0/file0', [{0x20, 'keyring\x00'}], 0xa, "c607d2d9aac4c03f10c5db9437673063645b4cf6ca6b69e549675032d1e1ecff8ce82c2a1bccb70fc1059e3fac2e0f98f8f8e7b939bab8eea8732070ed239e64455e20a7df7f85caf56ce3cec6144b8a2d60d24cff3b27922c40be19e439b62390b2e5e101d156ecdb7f7b0d8d6b819f8e3a8e7ab6b6aa7388b4736711e1277fc85c8a5b33"}, 0x9f) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) madvise(&(0x7f00001ae000/0x1000)=nil, 0x1000, 0xb) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000680)={0x48, 0x2, r7, 0x0, 0x0}) open(&(0x7f0000000100)='./file0/file0\x00', 0x10102, 0x31) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r7, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) ioctl$IOMMU_DESTROY$stdev(r6, 0x3b80, &(0x7f0000000180)={0x8, r8}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000080000000c0000000300000001"], 0x50) r9 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r9, &(0x7f0000002540)={0x2020}, 0x2020) 1m27.094311205s ago: executing program 5 (id=4029): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000053c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000005480)={0x0, 0x1dc, 0x3cdb, {0x0, 0x10000}}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) fstatfs(r2, &(0x7f0000000740)=""/220) sched_setaffinity(r1, 0x8, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002a40)=@newtfilter={0x34, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r5 = timerfd_create(0x0, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000601000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r6 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0x20, 0x6, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x3ffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) timerfd_settime(r5, 0x1, &(0x7f0000000100), 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xb}}}, 0x24}}, 0x2000400c) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r9 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="030300000000fcffffff0c00000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) syz_emit_ethernet(0x80, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd61fc0101004a2f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0c2088be0006000300000000000000000800000086dd080088be000000031c0885100100000000007b40080022eb000000022302234902000000000000030009b41b0800655800000003"], 0x0) close(r7) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r10) 1m25.69255309s ago: executing program 5 (id=4037): ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x4000, 0x41000, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, {0x30000, 0x60000, 0xb, 0x0, 0x0, 0x17, 0xf9, 0x6, 0x6, 0x0, 0x4, 0x6}, {0xeeef0000, 0x6000, 0x13, 0x5, 0x0, 0x0, 0x99, 0x0, 0x4, 0xe, 0x1, 0x6}, {0x30000, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x20, 0x4, 0x4}, {0x3004, 0x70000, 0x3, 0x0, 0x0, 0x80, 0x8, 0x20, 0x0, 0x6d, 0x1a}, {0xe000, 0x9000, 0x10, 0x0, 0x0, 0x9, 0x0, 0xfe, 0x0, 0x0, 0x84}, {0x4, 0x5000, 0xd, 0x4, 0x70, 0x0, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x100000, 0x0, 0xfb, 0x0, 0x2, 0x0, 0x2, 0x0, 0xa}, {0x70000, 0xffff}, {0x0, 0x7}, 0x3771459b4651a1c4, 0x0, 0x7000, 0x0, 0x0, 0x1, 0x900, [0xfffffffffffffffc, 0x0, 0x0, 0x40]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYRESDEC], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) (rerun: 32) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) setns(0xc9, 0x0) (async, rerun: 32) r4 = socket$phonet(0x23, 0x2, 0x1) (rerun: 32) ioctl$SIOCPNDELRESOURCE(r4, 0x89ee, &(0x7f0000000000)=0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ab7815f86bd9f048ffceca2cd3354e393e3b085ba1b519c34a344df6b12f65755c70c4cb6705c37a79cb65351816e14ec974bf7872863c5c05fdaad9bd6b4beda4367c6971a184"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000680)={'ip6gre0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x29, 0x7, 0xe, 0x8b, 0x18, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x7807, 0x8, 0x5}}) (async, rerun: 32) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async, rerun: 32) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2b05404, 0x0) (async, rerun: 32) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) (rerun: 64) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) (async) fcntl$lock(r7, 0x5, &(0x7f00000001c0)={0x1, 0x1, 0x5, 0xb5c}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @jmp={0x5, 0x1, 0x6, 0x6, 0x2, 0x1e, 0xffffffffffffffef}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x8}, @generic={0x7, 0x0, 0x9, 0x6, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x5ee, 0x0, &(0x7f0000000440), 0x41000, 0x0, '\x00', r6, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x4, 0x8, 0xfffffff9, 0x10000}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000740)=[r2], &(0x7f0000000780)=[{0x5, 0x2, 0x6, 0x1}, {0x4, 0x2, 0x3, 0xc}, {0x3, 0x1, 0x0, 0x6}, {0x0, 0x2, 0x0, 0xa}, {0x0, 0x1, 0x5}, {0x4, 0x3, 0x9, 0x7}], 0x10, 0xbd71}, 0x94) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a00)=ANY=[@ANYRES32=0x1, @ANYRES32=r5, @ANYBLOB='/\x00\x00\x00\b\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="e5b040de671f49e98797e3172c632d026e235fb11d1c3174095307c5e0b849ba0ef51fdddf9f6c0e8b9760888ec79aeb825f0be84b89a4a749cdbd8b754e28665ba038c3db447cd35132803682dfc5f4a9c2db815b52d3ddea97682515b9f2f8155f23124faed0abb98335770ebc518292c17865717f1d0bbf5bc0b289ed24daee69928cb695ea546c7ea8d2afcbf4fb820de35ca7b7ee5db38e476ef9e685c0bfcbc77657ffd8fcea7da2da3a7b", @ANYRES64=0x0], 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="084b4048bf7443bac7961d93ea013c93817a4bb0e9e3eec580c199afbcc530041f1fad6796c531f782a42908873d5f33dbcfab83a9026d15b8a5b9607a04e57e376e2063c7a874f2f6b0a4db8c6ca133b4adb189fb57b64f7c6f4697a2c36abcefc21a6eb133ac3fce43077f8e68e791f42e323d8bd5dda51bfdcbd8a0802b2bea3b70183f438e5e77a237d8e66c97fc838a2545afaea3a9d8c072330022712dbdfddcbf9e27a8868a2c122668030f423d79be35b9cb2cfacd5addb49adf638a891d11356f6340020be1acecf573233d03c2f7a8c81668e3423e88038b028c7ab9b4c4ebc7abd7b9d164", @ANYRES64=0x0], 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) 1m20.090508606s ago: executing program 5 (id=4042): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101401, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r3 = dup3(r1, r2, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x6}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000006000000000000000005"], 0x310) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1, 0xffff}}, {{0xa, 0x0, 0x94, @remote}}}, 0x108) inotify_init1(0x800) r7 = openat(0xffffffffffffff9c, 0x0, 0x50440, 0x29) r8 = getpid() ptrace(0x18, r8) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000080)={0x2, 0x5, 0x300e, 0x8}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x70bd2c, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0x200}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040095}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x7, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf5, 0x4, 0x8080ffa, 0x5, 0x0, 0x9, 0x0, 0x1000004, 0x1, 0x5, 0xfff7ffa8, 0x7ffffffd, 0x1ef, 0x1, 0x2000000f, 0x55, 0x8, 0x4008, 0x4, 0x100008, 0x6, 0x10, 0xee, 0x4, 0x7ffd, 0x4000000]}) 1m10.627411681s ago: executing program 5 (id=4067): epoll_create1(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(r1, 0x4038ae7a, &(0x7f0000000200)) r2 = socket$unix(0x1, 0x1, 0x0) close(r2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x3e000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000002d40)=0x1120003, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x18, r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r6, 0x29, 0x10, 0x0, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000ac0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}}) write$P9_RVERSION(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0020000000003950323030302e4c"], 0x15) write$P9_RATTACH(r8, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14) r10 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r10, &(0x7f0000002f40)={0x0, 0x0, 0x0}, 0x41) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) 1m10.077089778s ago: executing program 40 (id=4067): epoll_create1(0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(r1, 0x4038ae7a, &(0x7f0000000200)) r2 = socket$unix(0x1, 0x1, 0x0) close(r2) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x3e000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000002d40)=0x1120003, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x18, r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r6, 0x29, 0x10, 0x0, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000ac0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}}) write$P9_RVERSION(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff0020000000003950323030302e4c"], 0x15) write$P9_RATTACH(r8, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14) r10 = socket$l2tp6(0xa, 0x2, 0x73) recvmsg(r10, &(0x7f0000002f40)={0x0, 0x0, 0x0}, 0x41) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/handlers\x00', 0x0, 0x0) close(0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) 17.644308651s ago: executing program 0 (id=4241): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xa) setregid(r1, r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x20400, 0x2) mknodat$loop(r2, &(0x7f0000000200)='./file1/file0\x00', 0x20, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x22, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x2, 0x4a1, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0x2c7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x20000, 0x0, 0x334, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x40000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 15.911204808s ago: executing program 0 (id=4249): r0 = accept4$x25(0xffffffffffffffff, &(0x7f00000003c0)={0x9, @remote}, 0x0, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f00000000c0)={0x20}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x4, &(0x7f0000000180)=[{0x6, 0x2, 0x9, 0x6}, {0x6, 0x8, 0x0, 0xfffffffe}, {0xfbd3, 0x9, 0x1, 0x31cd}, {0x8, 0xda, 0x9, 0x3ff}]}) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @multicast1}, 0x10) fsetxattr(0xffffffffffffffff, &(0x7f0000003e80)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffa}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfffa) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) 14.777522567s ago: executing program 0 (id=4250): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='lo\x00', 0x10) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x3}], 0x1c) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x84, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x3639ca570d013f6e, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000005c0)={0x8, 0x70, 0x80000}, 0x20) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x8008af83, 0x0) 13.578530744s ago: executing program 7 (id=4252): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000000)=0xa) setregid(r1, r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x20400, 0x2) mknodat$loop(r2, &(0x7f0000000200)='./file1/file0\x00', 0x20, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000f6ffffff00000000fcffffff8500000030000000180100002020642500000000002020207b1af8ff00000000bfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x22, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x2, 0x4a1, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0x2c7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x20000, 0x0, 0x334, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x40000, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 12.393266457s ago: executing program 7 (id=4256): r0 = accept4$x25(0xffffffffffffffff, &(0x7f00000003c0)={0x9, @remote}, 0x0, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r0, 0x89e7, &(0x7f00000000c0)={0x20}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x4, &(0x7f0000000180)=[{0x6, 0x2, 0x9, 0x6}, {0x6, 0x8, 0x0, 0xfffffffe}, {0xfbd3, 0x9, 0x1, 0x31cd}, {0x8, 0xda, 0x9, 0x3ff}]}) ioctl$FAT_IOCTL_GET_VOLUME_ID(0xffffffffffffffff, 0x80047213, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @multicast1}, 0x10) fsetxattr(0xffffffffffffffff, &(0x7f0000003e80)=@known='user.incfs.metadata\x00', 0x0, 0x0, 0x3) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$can_j1939(0x1d, 0x2, 0x7) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000600)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x8, @private2, 0x5}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = syz_open_dev$mtd(&(0x7f00000001c0), 0x0, 0x100) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000440)={0x1ac, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x1}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x600088c0}, 0x40) ioctl$OTPGETREGIONCOUNT(r9, 0x40044d0e, 0x0) ioctl$GIO_UNIMAP(r8, 0x4b66, &(0x7f0000000200)={0xfffffffffffffcfd, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000380)={r7, 0x1}, &(0x7f00000000c0)) close_range(r5, 0xffffffffffffffff, 0x0) 11.2179498s ago: executing program 7 (id=4261): syz_usb_connect$uac2(0x5, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x86a, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xd, 0x0, 0x7, {0x8, 0xb, 0x0, 0x2, 0x1, 0x7, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x9, 0xc, 0x9, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x4, 0x1, {0x8, 0x25, 0x1, 0x80, 0x30, 0x7, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0x5, 0x5, {0x8, 0x25, 0x1, 0x80, 0xc, 0xf, 0x1}}}}}}}}]}}, 0x0) clock_settime(0x0, &(0x7f0000009ac0)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x5, 0x6, 0x4, @local, @private2, 0x20, 0x40, 0x0, 0x2}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x1, &(0x7f0000000200)=@raw=[@generic={0x10, 0xb, 0x1, 0xd, 0x282}], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000090000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40a081, 0x0) 10.14648248s ago: executing program 6 (id=4264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) socket(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x1, 0x141180) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r6, 0x81204101, &(0x7f0000000440)) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$getregs(0xc, r1, 0xfffffffffffffffd, &(0x7f0000000dc0)=""/4096) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r7, 0x0) recvmmsg(r7, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) 8.393527624s ago: executing program 6 (id=4265): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b000000f0000000000500000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 7.129380237s ago: executing program 7 (id=4269): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) (async) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x74, r2, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @loopback, 0x5}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004840}, 0x4048040) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x141081) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, 0x0, 0x0) (async) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x4, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4c800}, 0x0) (async) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r6 = io_uring_setup(0x34cf, &(0x7f0000000440)={0x0, 0x1539, 0x0, 0x1, 0x0, 0x0, r4}) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 6.950423772s ago: executing program 7 (id=4270): mount(0x0, &(0x7f0000000200)='proc\x00', 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x10040) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xfea8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001200add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 6.774307034s ago: executing program 6 (id=4273): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) sendto$inet(r0, &(0x7f0000000100)="a90eb30677197e060f49e9e9a4b82aa8c87c83", 0x13, 0x4048808, &(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="1b1b"]) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x3c, 0x29, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0x2}, {0x1, 0xfff1}, {0xf, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xe}}, @TCA_RATE={0x6, 0x5, {0x81, 0xb}}, @TCA_RATE={0x6, 0x5, {0x1, 0x10}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004044}, 0x40) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000440)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @val={0x3a, [0x30]}}}}]}) read$FUSE(r2, &(0x7f0000000d80)={0x2020}, 0x2020) 5.59580215s ago: executing program 0 (id=4274): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xc, &(0x7f0000000140)={0xb, 0x8}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000080)=0x1ff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r4, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000080)=0x3, 0x12) write$binfmt_script(r6, &(0x7f0000000300)={'#! ', './file0/file0', [{0x20, 'keyring\x00'}], 0xa, "c607d2d9aac4c03f10c5db9437673063645b4cf6ca6b69e549675032d1e1ecff8ce82c2a1bccb70fc1059e3fac2e0f98f8f8e7b939bab8eea8732070ed239e64455e20a7df7f85caf56ce3cec6144b8a2d60d24cff3b27922c40be19e439b62390b2e5e101d156ecdb7f7b0d8d6b819f8e3a8e7ab6b6aa7388b4736711e1277fc85c8a5b33"}, 0x9f) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) madvise(&(0x7f00001ae000/0x1000)=nil, 0x1000, 0xb) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000680)={0x48, 0x2, r8, 0x0, 0x0}) open(&(0x7f0000000100)='./file0/file0\x00', 0x10102, 0x31) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r8, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) ioctl$IOMMU_DESTROY$stdev(r7, 0x3b80, &(0x7f0000000180)={0x8, r9}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000080000000c0000000300000001"], 0x50) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r10, &(0x7f0000002540)={0x2020}, 0x2020) 4.578512959s ago: executing program 9 (id=4278): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) ioprio_set$pid(0x0, 0x0, 0x2007) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4.098255697s ago: executing program 7 (id=4279): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x5, 0x14, 0x64, &(0x7f00000000c0)="259a53f271a76d2686dd4c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24000080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000170a0103ff7fffffffffffff02"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x20008008) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='1,', 0x2) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="324f2649c1cd32e92b5f03973c000000030500000000000000000000ff03000000000000000000020c000200ffffff5a5fbf960e6e5088f913a8772567444cd7a067d39cd8380328d750a5aca5e2da28e3de384e7ac668f7f8c93e7f85598e"], 0x3c}, 0x1, 0x0, 0x0, 0x20048041}, 0x40000) ioprio_set$pid(0x2, 0x0, 0x0) r4 = fsopen(&(0x7f0000000020)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='xprtsec\x00', &(0x7f00000000e0)='tls\x00', 0x0) r5 = socket(0xf, 0x800, 0xff) setsockopt$inet6_tcp_int(r5, 0x6, 0x18, &(0x7f00000001c0), 0x4) r6 = syz_usb_connect$cdc_ecm(0x5, 0x62, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x50, 0x1, 0x1, 0x80, 0x20, 0x3, "", [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, 'j'}, {0x5, 0x24, 0x0, 0x77ac}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x7, 0x9b7b, 0x25}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}, @ncm={0x6, 0x24, 0x1a, 0x2c9d, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0xf, 0x0, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xa1, 0x0, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x62, 0x13, 0x8}}}}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x310, 0x4, 0x6, 0xd8, 0xff, 0x7f}, 0x135, &(0x7f00000006c0)={0x5, 0xf, 0x135, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0x44, 0x4, 0xfb, 0x40, 0x80}, @generic={0x58, 0x10, 0x3, "3208c7910eeb303a02f96736fa6b3a0f1db6be7fb8961676e47b813eeb48e93d9774a691bc41b10e70e729461380b6d5c3ca5bcbfb4aafdfa5fc6c39354a7f9418f27ffb313d9b6151f90712e48126cc974d796f7e"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "51bc5563e686379c1440311f2d22170b"}, @generic={0xaf, 0x10, 0x1, "252b21eee353ceb0c628bffba1195f8078103de5fc065ed41f74fcab53e9ef6bf23010947baa57e467f305c3fa8d924d3705c40c05ac666667990bbbd7968c9bacc3ad91962448d377d69caa9a6734905f189526ff75cf520fbe10063ffa6605a76f652f2b539225d98645efb401c8974cc145cb80a33c8ccb4a5df121e0c4129525727c4c07db09837fdf27122537fd76ab595a693f9ec9ad980cadc91736e297e544e37a1ece7b4643da76"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x4, 0xbd, 0xf213}]}, 0x4, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x401}}, {0xb1, &(0x7f0000000840)=@string={0xb1, 0x3, "542539b01a7ddfb079c97acd662043169a83d9935d5cdc7036cc7df8f78c981dd5575a2c6b929f5955d078c014aa05e680c18cdf58476e268a18aeadf9ee2a32f999e26dbc79253ad2113157493d27c0b431d15af70f05787d0d92d76e4f44e9344cf47b7fdff21fa0e2201d008621e9ca0d3eacbd005d61c964765eed8d6bd45446d1b5fed766ebea870e56760a2136d9adee41e5e8d75a432ec4b7c922465305bf848692767c278a6cb21f9c9cf7"}}, {0x47, &(0x7f0000000900)=@string={0x47, 0x3, "2b31b573bb9ef037908b716a6ed9198b2c852325fc0235adb8b5abf557963930c8c73c76f8654362194acf61c0b7baf1ec3a8e81bd78f7c14c686b6f1e14265d9f41821a74"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x40f}}]}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0xa0, 0x11cfa, 0x0, 0x8000008, 0x41000003, 0xb595da10, 0xfffffffd, 0x0, 0x7cce8c743ee810df}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r8, 0x40505330, &(0x7f0000000140)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r10 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r11 = fcntl$dupfd(r9, 0x406, r9) ioctl$MON_IOCX_GETX(r10, 0x4018920a, &(0x7f0000000140)={0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r11, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000b40)={0x14, &(0x7f0000000a40)={0x20, 0x22, 0x8a, {0x8a, 0x5, "111d631169eb1c7646e67435b4dc83d60196521aef0a41d85daf221466358f013faf91980b3bdb79c89f69512f95d87561b17b0c3cbffe43db60bf622d4212e1a92d2bd67dce0e732c4cb6925724e18ba03033971490ef5c53317c5e4e2dd136cb21d16135ad9f0c1437acd7a21617efc18efb3269cdabe3b030792a9e1de92e8433d4bee1f3e3d3"}}, &(0x7f0000000b00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c40)={0x1c, &(0x7f0000000b80)={0x20, 0x13, 0x2d, "796381b22796b8bd8c1cd3e652f78a4a9e7b298ef0d34c2b57738daa1a6d4ad8c24c980372680e2c350bd1a26a"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0xe8}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x80}}) ioprio_get$pid(0x1, 0x0) 4.056445499s ago: executing program 9 (id=4280): write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000001300)={0xe, 0x18, 0xfa00, @id_tos={0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1b}}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 3.895899308s ago: executing program 3 (id=4281): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x810, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7fff, 0x25, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x42, 0xfd}}}}}]}}]}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0}, &(0x7f00000022c0)=0xc) sendmmsg$unix(r3, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r2, r5}}}], 0x20, 0x4000}}], 0x1, 0x810) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8b34, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="0011280000002804de2a2317a42d999cbe38ab6f7e8aa852ed1fbe19c88a50150000000000a8"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000500)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) listen(0xffffffffffffffff, 0x6) getpeername(r3, &(0x7f0000000140)=@xdp, &(0x7f0000000100)=0xffffffffffffff14) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r7, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) 3.681454291s ago: executing program 6 (id=4282): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ffffffff0000000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0xe, 0x0, &(0x7f0000000880)='`\x00\x00\x00\x00\x00\x00/\x00\x00\x00\x00\x00\x00', 0x0, 0x1000, 0x0, 0x0, 0x300, 0x0, 0x0}, 0x4c) 3.430640948s ago: executing program 6 (id=4283): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b0000fffff00000000500000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 3.27967528s ago: executing program 6 (id=4284): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r1, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x100003, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd700000000000390000000820030016907a87174c105d56a06e9813e4b3fa88eb736a01db3eabaaa12c0956e1e92fd61ee1b388fd7dcec086f047f55110eedfbf96731f6b781104be8beeb095cc53d13517093e8f10246d54882a5a4f76400b8bf73174ed0256e9fb76f9fa13137d195e1bc56a2fdc38392b32ec4abdb8a78894b2f4107e8457ba12a06c8b3ff9cae3b165cf954658", @ANYRES32=r4, @ANYBLOB="18005a8014000080050002001c0000000500010048000000"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f00000036c0)={&(0x7f00000026c0)=[0x80000000, 0x4, 0xfffffae7, 0x8, 0xb49b, 0xb9, 0x8, 0x7, 0x8, 0xc, 0x5, 0x7fffffff, 0x8000, 0x40, 0xc, 0x3, 0x2, 0x7fffffff, 0x81, 0x800, 0x2, 0xffffffff, 0xcbff, 0xd, 0x0, 0x8, 0x1, 0x5, 0x1, 0x5, 0x0, 0x1, 0x200, 0xa, 0x100, 0xfffffff8, 0x7, 0x6, 0x0, 0x9, 0x0, 0x0, 0x9, 0xfffffff8, 0xde, 0x4, 0x7ff, 0x4, 0x101, 0x3c8eb758, 0x5, 0x0, 0x9, 0x1, 0x8, 0xd, 0xf, 0x1, 0x0, 0x2, 0xb3, 0x9, 0x5, 0x2, 0xfffffffe, 0x2, 0x3481, 0xf, 0x3ca, 0x40, 0x7fffffff, 0x1, 0x6, 0x5, 0x645c, 0xe367, 0xff, 0x1, 0x6, 0xb5, 0x7, 0xa, 0x6, 0x2, 0x4, 0x9, 0x80000001, 0x5, 0x8, 0x8, 0x0, 0x7, 0x0, 0x7fffffff, 0x1, 0x32b5c1bb, 0x1b5, 0x2, 0xa8, 0x2, 0x5, 0x163, 0x6, 0x3a, 0x7ff, 0xfffffff9, 0x9, 0x24, 0x9, 0x4, 0x3, 0xa5c, 0xfffffffb, 0x101, 0xd29, 0x5, 0x8, 0x401, 0x9, 0xfc, 0x9, 0x0, 0xffff, 0x120, 0x8, 0x7, 0x0, 0x3e0ccb75, 0x4c, 0x6, 0x1, 0xe, 0x7f, 0x0, 0xfffffff7, 0x1, 0x0, 0x115, 0x9, 0x41aeb496, 0xfffffff7, 0x6, 0x80000000, 0x2, 0x400, 0xfffffff0, 0x6, 0x485, 0x4, 0xd4e, 0x7, 0x0, 0x1, 0x1, 0x5, 0x6, 0x7fffffff, 0xc00, 0x4, 0x4, 0x6d, 0x5, 0x92, 0x7, 0x9, 0xfffff800, 0x9, 0x7, 0x8, 0x8a7, 0x2, 0x94, 0x6, 0x200, 0x4, 0x7, 0xe4, 0x80, 0x5, 0x0, 0x4, 0x8, 0x81, 0x7bcc, 0x0, 0x6, 0x1000, 0xd, 0x0, 0x0, 0x2, 0x5, 0x3, 0x8, 0x5, 0x100, 0x4, 0x58, 0x2, 0xe956, 0x5, 0x9, 0x0, 0xfdae, 0x8, 0x0, 0x7, 0x8001, 0x2, 0xa, 0x0, 0x8, 0x2, 0x7fff, 0xff, 0x8000, 0x10, 0x49, 0x0, 0x1, 0x55, 0x4, 0xc, 0x2, 0x8, 0xff1, 0xffffffc6, 0x1, 0x7, 0x3, 0x5, 0x7, 0x80000001, 0x10000, 0x83db, 0x2, 0xd, 0x1ff, 0x6, 0x0, 0x0, 0xb2, 0x61, 0x7, 0x80000001, 0xb9b, 0x4, 0x35, 0x8, 0x5, 0x7, 0x5, 0x0, 0x7, 0x9, 0x0, 0x4, 0x3, 0xffff, 0x5, 0xbfda, 0x3, 0x5, 0x0, 0x10001, 0x608, 0x0, 0x9, 0x6, 0x1, 0x63d, 0x6, 0xd92583, 0xa9, 0x2, 0x5, 0x6, 0x2, 0xffffffff, 0x9, 0xfffffc71, 0xfffffffe, 0xb, 0x1, 0x5, 0x9, 0x80, 0xfff, 0x2, 0x4, 0x2, 0x81, 0x3, 0x8, 0x682, 0x3, 0x5, 0x9f70, 0x0, 0x8, 0x0, 0x3, 0x3, 0x0, 0x8, 0x0, 0x7f, 0x9ecd, 0x5, 0xb3d, 0x3, 0x9, 0x5, 0xeea1, 0x0, 0xfffffffe, 0x9, 0x6, 0x0, 0x5, 0x101, 0xf5, 0x1, 0xfffffff0, 0xd121, 0x6, 0x4, 0xffffff00, 0x80000000, 0x5, 0xd, 0xf3c, 0x7fffffff, 0x1ff, 0x7, 0x94, 0x8001, 0x0, 0x2, 0x9, 0x6, 0x6, 0x8001, 0x6, 0x0, 0x8000, 0x6, 0x9, 0x4, 0x9d, 0x9, 0x80000001, 0x7, 0x7f8, 0xcb9c, 0x1, 0x6, 0xe, 0x400, 0x1, 0x6, 0x5, 0x51e, 0x7, 0xfffffffd, 0x7, 0x97f1, 0xb, 0x80000001, 0xaa, 0xffff81f5, 0x80, 0x8, 0x9, 0x8, 0x1, 0xffffffe3, 0x5086, 0x4, 0x8, 0x2, 0x8, 0x54d8, 0x1000, 0x7, 0x5848, 0x83, 0x2, 0x10001, 0x5, 0x65b97b8b, 0x1, 0x2, 0x400, 0x3, 0x5, 0x0, 0xa65, 0x280, 0x0, 0xf74, 0x3, 0x2, 0x3, 0x7, 0x400, 0x9, 0x2, 0xfffff122, 0x7fffffff, 0x8, 0x1, 0x1, 0x2, 0x1, 0x9, 0x8000, 0x7274, 0x8001, 0xffff46da, 0x469, 0x9, 0x6, 0x9, 0x3, 0xf, 0x0, 0x0, 0x8, 0x6, 0x3, 0x1, 0xfffffff8, 0x7df2, 0xe939, 0x7, 0x10, 0x6, 0x2, 0x1, 0x8, 0x1145, 0x7, 0xa, 0xe72, 0x2, 0x1, 0x40000, 0x9, 0xfffffffc, 0x5, 0x293400, 0x6c, 0x56, 0x9, 0xfffffff7, 0x80, 0x0, 0x9f, 0x2, 0x3, 0xfff, 0x10001, 0x2, 0x9, 0x9cd5, 0x8, 0x10001, 0x6, 0x6, 0xc02f, 0xc, 0xfffffffa, 0x0, 0x2, 0xa, 0x9, 0x6, 0x6, 0xffffffff, 0x3, 0x7, 0x439b, 0x0, 0x8, 0x8, 0x1, 0x15e, 0x9, 0xfffffffa, 0x800, 0x3, 0xe, 0xfffffe01, 0xfffffffb, 0xed2, 0x800, 0xb, 0x2, 0x6, 0x2, 0xa82c, 0x100, 0x5, 0x7ff, 0x8, 0x9, 0x7f, 0xd9, 0x7d, 0x8, 0x2, 0x1, 0x2, 0x9, 0x6, 0x9, 0x8efe, 0x8, 0x5, 0xc9, 0x2, 0x81, 0x6, 0x5, 0x4, 0x0, 0x9, 0x9, 0xfffffffd, 0x8, 0x34, 0x0, 0xe, 0x6, 0x10, 0xe62, 0x8, 0x8, 0x4, 0x0, 0x9, 0x830, 0x3, 0x0, 0x1b3, 0x0, 0x7, 0x8, 0x7, 0x7, 0x80, 0x8, 0x0, 0x80000000, 0xfffffff8, 0x5, 0x6, 0xfffffff8, 0x4a, 0x3a2, 0x5, 0x400, 0x612, 0x401, 0x200, 0x7, 0x8000, 0x9, 0x9, 0x800, 0xfff, 0x0, 0x8, 0x10001, 0x1, 0x10000, 0x1, 0xb10, 0x43, 0x2, 0x2, 0x1, 0x1, 0x7, 0x6, 0x40, 0x3, 0x800, 0x101, 0x0, 0x6d3a, 0x3, 0xffffffff, 0x1, 0xa59, 0x5, 0x3e6, 0x90000000, 0x101, 0x3, 0xbbd3, 0x4, 0x6, 0xfe1, 0x2, 0x8003, 0xe00, 0xfffe0000, 0x5, 0xfffffffb, 0x8001, 0x10001, 0xfa, 0xb, 0x6, 0xe4, 0x6, 0x2, 0x8, 0x1, 0x1ff, 0x84e, 0x30, 0x2, 0x7, 0x0, 0x7fff, 0x1, 0xfffffffa, 0x300, 0x12c, 0x4, 0xc, 0x6, 0x9, 0x7, 0x40, 0x0, 0xcc, 0x4e6, 0x80000000, 0x2, 0xc202, 0x4cfda994, 0x2, 0x5, 0xfffffbff, 0x9, 0xb, 0x200, 0xd3, 0x0, 0x2, 0x3, 0x8, 0x1, 0x7, 0x5, 0xffffffff, 0x6, 0x8, 0x80, 0x7, 0x1, 0x0, 0x874c, 0x7f, 0x1, 0x4, 0x5, 0x9, 0x26d2, 0x8, 0x5, 0x0, 0x10, 0x2, 0x8000, 0x101, 0x22, 0x0, 0x8, 0x5, 0xf75, 0x2, 0xce, 0x0, 0x5, 0x1d, 0x32d, 0x6, 0x8, 0x1951759c, 0x7, 0x4, 0x101, 0x2, 0x81, 0x9, 0xff, 0x8, 0x1ff, 0xaad3, 0x3, 0xc7, 0x2, 0x4, 0x296, 0x8000, 0x1, 0xfffffffe, 0xc9, 0x1000000, 0x9, 0x1, 0x3, 0x5, 0x4, 0x3, 0x10001, 0x3, 0x8, 0x3, 0x9, 0x3, 0x7, 0x9, 0x2, 0x25, 0x4, 0x6, 0xe, 0x6, 0x200, 0x1, 0x9, 0x6, 0x800, 0x5, 0xfffffffc, 0xfffffffa, 0xe6ba, 0x9, 0x8, 0x10000, 0x222eee1a, 0x4, 0x400000, 0x1000, 0xb9a3, 0x7, 0x1, 0xb0, 0x0, 0x0, 0x9, 0xc, 0x500, 0xf1b, 0x0, 0x8, 0x8, 0x6, 0x9, 0x8fd, 0x1, 0x0, 0x8c, 0xd25, 0xfffff001, 0x80000000, 0x5, 0x7ff, 0x4, 0x4, 0x6, 0x2, 0x1, 0x7, 0x9, 0x1, 0x8, 0x2, 0x6, 0x8, 0x4, 0x1, 0xfffffffe, 0x1, 0x3, 0x800, 0x5, 0x7, 0xff, 0x7, 0xc5aa, 0xc, 0x3, 0x7ff, 0xfffffc01, 0x6, 0x4, 0x4, 0x80, 0x4, 0x80000001, 0x80000000, 0xe, 0x0, 0x7, 0x0, 0x9, 0x1, 0x7, 0xa3, 0xfffffffd, 0x283e, 0x3, 0x5, 0x8, 0xb6, 0x4, 0x0, 0x1, 0x7fffffff, 0x1000, 0x4, 0x4, 0xb00d, 0x4, 0x8, 0xc25c, 0x3, 0xe, 0x9, 0x6, 0x9, 0x518d1433, 0x98, 0x0, 0x7, 0x3, 0x9, 0x9, 0x3, 0x6, 0x8, 0x100, 0x5, 0x2, 0x4, 0xa, 0x0, 0x0, 0xf4, 0x27e, 0x5, 0x557a23e2, 0x5, 0x7, 0xffffffc0, 0xc, 0xb11, 0x6b8d, 0x7, 0x1ff, 0x4, 0x80, 0xf022, 0x3, 0xffffffff, 0x3, 0x7, 0x80000001, 0x10001, 0x2, 0x8, 0xffffffc0, 0xe58, 0x9, 0x7, 0x9, 0x1, 0x6, 0x401, 0x401, 0x6, 0x2, 0xfffffffd, 0x4, 0x4, 0x5, 0xef3, 0x1000, 0x9, 0x5, 0x7, 0x1, 0x8, 0x8, 0x2, 0x8f0e, 0x1, 0x3, 0x860, 0xee4, 0x7f, 0x81, 0x5, 0x2, 0x3, 0x9, 0x1, 0x6, 0x5, 0x10, 0x2, 0x1, 0xff, 0xff, 0x6, 0xc, 0xb, 0x0, 0x7, 0x3, 0x8, 0x2, 0xf5, 0xfffffff9, 0x26ef, 0xffff95b8, 0x4, 0x76, 0x1, 0x0, 0xfff, 0x7, 0x374, 0x9, 0xff, 0x6, 0x7f, 0xffff, 0x52, 0xfffffff6, 0x9, 0x9, 0x3, 0x2, 0x7f, 0x9, 0x2, 0x1000, 0x3, 0xf5c, 0x1908, 0xc50, 0x800, 0x0, 0x7fff, 0xffff0000, 0x1ff, 0xc019, 0x6, 0x0, 0x2, 0x9, 0x400, 0x1f95e79d, 0x10000, 0xefe, 0x8, 0x0, 0x8, 0x6fe2, 0x3, 0x4, 0x7fff, 0x4, 0x4, 0x1, 0x6d2, 0x10000, 0x2, 0x9, 0x8, 0xe, 0xf6, 0x1, 0x8, 0x1, 0x1, 0x2, 0xffffffff, 0x2, 0x2, 0x1, 0x80000000, 0x6, 0x6, 0x92, 0x1, 0xf, 0x6, 0x40000000, 0x1, 0x4, 0xc10, 0xa349, 0xfffffe00, 0x0, 0xfffffff7, 0x5, 0x1, 0x2, 0x6, 0x1, 0x7, 0x4, 0x854, 0x1, 0x101], 0x1, 0x400, 0x7}) write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="d6f5fbcf8c5f6b1eab996ddbb1a3fa9e7faef2c7e9b975084ebb6f5557284549957db0e43ddd82283e9404df9f48beef3bbdd77a64dd1807932d9fc1530c25d99c0108e15f903702feb5de78597f9aa52ffbbaa5b0228712aba726a32334d84e12920ffc0f4553e561dc7b6570bcaca912b5e63022bbf50cdbee9d0cc9586939fe7d49ccbde680e7e0cd18997741457262cdba41de28c9e3a6e1fe79bd5c5c2459f4f619fc95346792b3f20155bbaaa9a07248026b6159c403bea11fa2b5e85ba3e189f96d08063e2d3fc85078655058cd151e6e60ed04bd487becfe0ec08c6af41bd54fe99c4b94c18fa34940161469afcd05e1c1cd5a98ba5f28d768fcec333f2cb041afc799c8eea8f460e58de122899d699da77dcb9655b52b93be558a36c317426b69e9240d73f87776a10bec23122eeb4dee2bb94c9fed02d69693935ca436bdc62cfb19aa3c7d2be9c561eca2", 0x150) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="20820300001090873a"], &(0x7f0000000300)=ANY=[@ANYBLOB="2083"], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x22, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x1000}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="8b7037b960c18c27782640b050e20d38a10000001800010029bd6900bfdbdf2507000000", @ANYRES32=r7, @ANYBLOB="80007f0a0a000200ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', r7, 0x0, 0x81}, 0x50) setrlimit(0x7, 0x0) socket(0x2b, 0x1, 0x1) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x4, 0x2}) r10 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r10, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r9}, &(0x7f0000000280), &(0x7f0000000240)=r8, 0xa00}, 0x20) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) 2.812943642s ago: executing program 9 (id=4285): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x40c8, &(0x7f0000000600)={0x0, 0x400f76e, 0x80, 0xfffffffd, 0x2, 0x0, r0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_RING_FDS(r1, 0x14, &(0x7f0000001780), 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x34, 0x18, 0x52f, 0x70bd2c, 0x25dfdbfe, {0x1d, 0x1, 0x4}, [@CGW_MOD_SET={0x15, 0x4, {{{0x3}, 0x7, 0x1, 0x0, 0x0, "766fd846e9a2cd66"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0x1, 0xffffffffffffffff, 0xfffffffffffffffc, 0x2}}]}, 0x34}}, 0x4c8c8) shutdown(r2, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00'}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_TABLE(r5, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000280)={r7, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x83}, 0x90) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={r7, @in={{0x2, 0x4e23, @multicast1}}, 0x3, 0x100}, &(0x7f0000000380)=0x90) socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={r8, 0x5}, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r9) 2.642490319s ago: executing program 0 (id=4286): getpgid(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x10, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x6) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000040)='ncpfs\x00', 0x1eec24, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x112, 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r2, &(0x7f0000000c00)='0x4', 0x3) connect$inet(r1, &(0x7f0000000800)={0x2, 0x1f90, @loopback}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000016001a491a010a00000000000000000a000000bc"], 0x18}}, 0x0) sendmsg(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000001840)}, 0x8084) r4 = accept(r0, 0x0, 0x0) shutdown(r4, 0x1) getpgid(0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) mount(0x0, 0x0, 0x0, 0x10, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet_tcp(0x2, 0x1, 0x6) (async) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) (async) listen(r0, 0x5) (async) socket$inet_tcp(0x2, 0x1, 0x6) (async) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000040)='ncpfs\x00', 0x1eec24, 0x0) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x112, 0x1, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) (async) write(r2, &(0x7f0000000c00)='0x4', 0x3) (async) connect$inet(r1, &(0x7f0000000800)={0x2, 0x1f90, @loopback}, 0x10) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000016001a491a010a00000000000000000a000000bc"], 0x18}}, 0x0) (async) sendmsg(r0, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000001840)}, 0x8084) (async) accept(r0, 0x0, 0x0) (async) shutdown(r4, 0x1) (async) 2.566378431s ago: executing program 9 (id=4287): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x82c9d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_usb_connect(0x0, 0x4f, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109023d0002000000000904"], 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r2) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00', 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, @mcast2, [0x0, 0xff000000, 0xffffffff, 0xff], [0xff, 0x47066fef753f41fe, 0xff000000, 0xff], 'veth1_to_hsr\x00', 'bond0\x00', {0xff}, {}, 0x87, 0x2, 0x0, 0xa}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) socket$unix(0x1, 0x5, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, 0x0) pwritev(r7, 0x0, 0x0, 0x2, 0x80) pwrite64(r7, 0x0, 0x0, 0xda8) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan1\x00'}) 1.760460988s ago: executing program 3 (id=4288): bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000002000200000000003f1ff8f3693dff9b7c87a397f70ba65eea7748a943d8e2c14f6321e99c5d8e7fef8985476a"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) capset(0x0, 0x0) ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") 1.721642591s ago: executing program 3 (id=4289): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket(0x204c577f390788e2, 0x3, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000007c0)={'sit0\x00', &(0x7f0000000780)={'ip_vti0\x00', 0x0, 0x40, 0x10, 0xbef9, 0xffffffff, {{0x5, 0x4, 0x1, 0x8, 0x14, 0x67, 0x0, 0x1, 0x4, 0x0, @multicast2, @rand_addr=0x64010101}}}}) 1.404230377s ago: executing program 0 (id=4290): recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=@dellinkprop={0x34, 0x6c, 0x1, 0x709d27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1a, 0x289c}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'netdevsim0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r1 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e1a, 0x8, @local, 0x9}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000000)=0x6, 0x4) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) ioctl$TCSETS(r3, 0x5402, &(0x7f0000000040)={0x17, 0x40000005, 0x4, 0x1, 0xa, "9591c289333bed641462d4304c00"}) 1.378810993s ago: executing program 3 (id=4291): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r1, 0x80045113, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f00, 0xd, 0x0, &(0x7f00000007c0)="9f44948721919580684010a405", 0x0, 0x7ff, 0x0, 0x0, 0xb, 0x0, &(0x7f0000000380)="8c5911c525f5cf4c4ecf20", 0x0, 0x0, 0xffffffff}, 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000001c0)={{0x80000000, 0x0, 0x1, [0x0, 0xf7df]}, {0x80000000, 0x0, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x181) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230fdff00000061134c0000000000bf2000000000000016001000071b48013d030100000000000402000000b00000bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 968.909293ms ago: executing program 9 (id=4292): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0x', 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x4, {{@in6=@mcast1, @in6=@private2, 0x0, 0x5, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6=@mcast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @user_kmaddress={0x2c, 0x13, {@in6=@local, @in=@multicast2}}]}, 0xcc}}, 0x0) 280.104347ms ago: executing program 3 (id=4293): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$int_in(r1, 0x5452, &(0x7f0000002480)=0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a, 0x0, 0x0, 0x1, [0x0, 0x401]}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000300)=@ipv4_newroute={0x34, 0x18, 0x1, 0x70bd2b, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x6, 0x300}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_XMIT={0xc, 0x3, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x6, 0x2, '\\\x00'}}}]}, 0x34}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0x0, 0xc}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044008}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r5) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3f5ff1ed0b3ea4dcc7315938cc05000000000000", @ANYRES16=r6, @ANYBLOB="010000000000000000000f0000002400078008000100010000000c00030000100000000000000c0004000020000000000000"], 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) close(r9) socket$inet(0x2, 0x3, 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 210.426015ms ago: executing program 9 (id=4294): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xc, &(0x7f0000000140)={0xb, 0x8}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000b80)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000080)=0x1ff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r5 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r4) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r4, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000080)=0x3, 0x12) write$binfmt_script(r6, &(0x7f0000000300)={'#! ', './file0/file0', [{0x20, 'keyring\x00'}], 0xa, "c607d2d9aac4c03f10c5db9437673063645b4cf6ca6b69e549675032d1e1ecff8ce82c2a1bccb70fc1059e3fac2e0f98f8f8e7b939bab8eea8732070ed239e64455e20a7df7f85caf56ce3cec6144b8a2d60d24cff3b27922c40be19e439b62390b2e5e101d156ecdb7f7b0d8d6b819f8e3a8e7ab6b6aa7388b4736711e1277fc85c8a5b33"}, 0x9f) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) madvise(&(0x7f00001ae000/0x1000)=nil, 0x1000, 0xb) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000680)={0x48, 0x2, r8, 0x0, 0x0}) open(&(0x7f0000000100)='./file0/file0\x00', 0x10102, 0x31) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r8, 0x0, &(0x7f0000000000/0x400000)=nil, 0x400000, 0x7ffffffe}) ioctl$IOMMU_DESTROY$stdev(r7, 0x3b80, &(0x7f0000000180)={0x8, r9}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000080000000c0000000300000001"], 0x50) r10 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00') read$FUSE(r10, &(0x7f0000002540)={0x2020}, 0x2020) 0s ago: executing program 3 (id=4295): syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08004500005c000040020511907800000000000000004e2400000048907803b7f8000000000000597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cbaf6af5116bf52dbb90d30ae25aab828a961858f6c338a29f34c53e0526788e16"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="38e0bed8e8ec219500d3718ca4cf9390a034b556360273e98600000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0x3, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f00001d3000/0x1000)=nil, 0x1000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="f0000000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200010000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xf0}}, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000440)="91cfdfefdb", 0x5}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000cc0)={&(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x160}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000000030000000000000000000000001000", @ANYRES32=0x0, @ANYBLOB="c04c0100000004003000128008000100687372002400028008000200", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0500070002000000050003000b0000001e506206c01ae7a37cc36f49c7a6a6cd19cf12241db951c7bf8cd86b7db7d35fe4df802553c07e408bc72bf6bfec577d78e486e08de0f65889fc9e343fb2ac3cb6c7e31367049d32e12d67642e2b2122fac5fe78ef7bc2835403a071deb8aa1a9149851da14cb2fc8562627bf488cf23781f26376a50cc7f8f7605066d411262d5a5"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x810) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r2) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) setregid(r9, r9) mkdirat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2100400, &(0x7f0000000a00)=ANY=[]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000002340)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): face number: 57 but max is 0 [ 1405.700238][T22609] dt2828 [ 1405.703155][T22609] dt2829 [ 1405.706058][T22609] dt21-ez [ 1405.709102][T22609] dt23-ez [ 1405.712094][T22609] dt24-ez [ 1405.715086][T22609] dt24-ez-pgl [ 1405.718466][T22609] comedi: valid board names for dt2817 driver are: [ 1405.724930][T22609] dt2817 [ 1405.727869][T22609] comedi: valid board names for dt2815 driver are: [ 1405.734333][T22609] dt2815 [ 1405.737245][T22609] comedi: valid board names for dt2814 driver are: [ 1405.743739][T22609] dt2814 [ 1405.746642][T22609] comedi: valid board names for dt2811 driver are: [ 1405.753131][T22609] dt2811-pgh [ 1405.756383][T22609] dt2811-pgl [ 1405.759758][T22609] comedi: valid board names for dt2801 driver are: [ 1405.766223][T22609] dt2801 [ 1405.769268][T22609] comedi: valid board names for das6402 driver are: [ 1405.776912][T22609] das6402-12 [ 1405.780199][T22609] das6402-16 [ 1405.783463][T22609] comedi: valid board names for das1800 driver are: [ 1405.790065][T22609] das-1701st [ 1405.793319][T22609] das-1701st-da [ 1405.796838][T22609] das-1702st [ 1405.800109][T22609] das-1702st-da [ 1405.803628][T22609] das-1702hr [ 1405.806879][T22609] das-1702hr-da [ 1405.810400][T22609] das-1701ao [ 1405.813652][T22609] das-1702ao [ 1405.816907][T22609] das-1801st [ 1405.820176][T22609] das-1801st-da [ 1405.823687][T22609] das-1802st [ 1405.826936][T22609] das-1802st-da [ 1405.830468][T22609] das-1802hr [ 1405.833724][T22609] das-1802hr-da [ 1405.837240][T22609] das-1801hc [ 1405.840698][T22609] das-1802hc [ 1405.843981][T22609] das-1801ao [ 1405.847239][T22609] das-1802ao [ 1405.850522][T22609] comedi: valid board names for das800 driver are: [ 1405.857336][T22609] das-800 [ 1405.860352][T22609] cio-das800 [ 1405.863603][T22609] das-801 [ 1405.866608][T22609] cio-das801 [ 1405.869989][T22609] das-802 [ 1405.872981][T22609] cio-das802 [ 1405.876236][T22609] cio-das802/16 [ 1405.880807][T22609] comedi: valid board names for isa-das08 driver are: [ 1405.887537][T22609] isa-das08 [ 1405.890731][T22609] das08-pgm [ 1405.893919][T22609] das08-pgh [ 1405.897082][T22609] das08-pgl [ 1405.900281][T22609] das08-aoh [ 1405.903447][T22609] das08-aol [ 1405.906610][T22609] das08-aom [ 1405.909786][T22609] das08/jr-ao [ 1405.913124][T22609] das08jr-16-ao [ 1405.916642][T22609] pc104-das08 [ 1405.919991][T22609] das08jr/16 [ 1405.923248][T22609] comedi: valid board names for das16m1 driver are: [ 1405.929808][T22609] das16m1 [ 1405.932797][T22609] comedi: valid board names for dac02 driver are: [ 1405.939197][T22609] dac02 [ 1405.942021][T22609] comedi: valid board names for rti802 driver are: [ 1405.948725][T22609] rti802 [ 1405.951633][T22609] comedi: valid board names for rti800 driver are: [ 1405.958119][T22609] rti800 [ 1405.961024][T22609] rti815 [ 1405.963938][T22609] comedi: valid board names for pcm3724 driver are: [ 1405.970513][T22609] pcm3724 [ 1405.973505][T22609] comedi: valid board names for pcl818 driver are: [ 1405.981052][T22609] pcl818l [ 1405.984053][T22609] pcl818h [ 1405.987052][T22609] pcl818hd [ 1405.990149][T22609] pcl818hg [ 1405.993224][T22609] pcl818 [ 1405.996127][T22609] pcl718 [ 1405.999067][T22609] pcm3718 [ 1406.002068][T22609] comedi: valid board names for pcl816 driver are: [ 1406.008552][T22609] pcl816 [ 1406.011464][T22609] pcl814b [ 1406.014461][T22609] comedi: valid board names for pcl812 driver are: [ 1406.020949][T22609] pcl812 [ 1406.023851][T22609] pcl812pg [ 1406.026926][T22609] acl8112pg [ 1406.030177][T22609] acl8112dg [ 1406.033342][T22609] acl8112hg [ 1406.036504][T22609] a821pgl [ 1406.039513][T22609] a821pglnda [ 1406.042764][T22609] a821pgh [ 1406.045752][T22609] a822pgl [ 1406.048763][T22609] a822pgh [ 1406.051754][T22609] a823pgl [ 1406.054751][T22609] a823pgh [ 1406.057766][T22609] pcl813 [ 1406.060670][T22609] pcl813b [ 1406.063667][T22609] acl8113 [ 1406.066657][T22609] iso813 [ 1406.069585][T22609] acl8216 [ 1406.072574][T22609] a826pg [ 1406.075477][T22609] comedi: valid board names for pcl730 driver are: [ 1406.081954][T22609] pcl730 [ 1406.085894][T22609] iso730 [ 1406.088835][T22609] acl7130 [ 1406.091824][T22609] pcm3730 [ 1406.094811][T22609] pcl725 [ 1406.097740][T22609] p8r8dio [ 1406.100731][T22609] acl7225b [ 1406.103816][T22609] p16r16dio [ 1406.106979][T22609] pcl733 [ 1406.109917][T22609] pcl734 [ 1406.112819][T22609] opmm-1616-xt [ 1406.116243][T22609] pearl-mm-p [ 1406.119510][T22609] ir104-pbf [ 1406.122676][T22609] comedi: valid board names for pcl726 driver are: [ 1406.129161][T22609] pcl726 [ 1406.132087][T22609] pcl727 [ 1406.134990][T22609] pcl728 [ 1406.137934][T22609] acl6126 [ 1406.140925][T22609] acl6128 [ 1406.143915][T22609] comedi: valid board names for pcl724 driver are: [ 1406.150412][T22609] pcl724 [ 1406.153323][T22609] pcl722 [ 1406.156228][T22609] pcl731 [ 1406.159167][T22609] acl7122 [ 1406.162157][T22609] acl7124 [ 1406.165148][T22609] pet48dio [ 1406.168633][T22609] pcmio48 [ 1406.171623][T22609] onyx-mm-dio [ 1406.174973][T22609] comedi: valid board names for pcl711 driver are: [ 1406.181455][T22609] pcl711 [ 1406.184370][T22609] pcl711b [ 1406.188021][T22609] acl8112hg [ 1406.191191][T22609] acl8112dg [ 1406.194354][T22609] comedi: valid board names for amplc_pc263 driver are: [ 1406.201734][T22609] pc263 [ 1406.204556][T22609] comedi: valid board names for amplc_pc236 driver are: [ 1406.211472][T22609] pc36at [ 1406.214377][T22609] comedi: valid board names for amplc_dio200 driver are: [ 1406.221389][T22609] pc212e [ 1406.224294][T22609] pc214e [ 1406.227196][T22609] pc215e [ 1406.230109][T22609] pc218e [ 1406.233013][T22609] pc272e [ 1406.235914][T22609] comedi: valid board names for comedi_parport driver are: [ 1406.243089][T22609] comedi_parport [ 1406.246690][T22609] comedi: valid board names for comedi_test driver are: [ 1406.253610][T22609] comedi_test [ 1406.256948][T22609] comedi: valid board names for comedi_bond driver are: [ 1406.263862][T22609] comedi_bond [ 1406.273141][ T5731] usb 7-1: device descriptor read/64, error -71 [ 1406.302203][T14072] usb 10-1: config 9 has no interface number 0 [ 1406.339996][T14072] usb 10-1: config 9 interface 57 has no altsetting 0 [ 1406.372494][T14072] usb 10-1: string descriptor 0 read error: -22 [ 1406.394933][T14072] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.418036][ T5731] usb usb7-port1: attempt power cycle [ 1406.527872][T14072] (null): keene_cmd_main failed (-71) [ 1406.548085][ T29] audit: type=1400 audit(1787381104.305:2064): avc: denied { create } for pid=22616 comm="syz.6.3929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1406.591830][T14072] video4linux radio48: keene_cmd_main failed (-71) [ 1406.636309][T22615] netlink: 'syz.0.3928': attribute type 15 has an invalid length. [ 1406.645956][T14072] radio-keene 10-1:9.57: V4L2 device registered as radio48 [ 1406.657191][ T29] audit: type=1400 audit(1787381104.345:2065): avc: denied { getopt } for pid=22616 comm="syz.6.3929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1406.694702][T14072] usb 10-1: USB disconnect, device number 74 [ 1406.726251][T22615] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3928'. [ 1406.771202][ T29] audit: type=1400 audit(1787381104.385:2066): avc: denied { write } for pid=22616 comm="syz.6.3929" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1406.921095][T22624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1406.999284][T22629] openvswitch: ovs-system: Dropping previously announced user features [ 1407.066582][ T29] audit: type=1400 audit(1787381104.815:2067): avc: denied { getopt } for pid=22630 comm="syz.0.3934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1407.928025][ T5731] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1408.121076][ T5731] usb 1-1: Using ep0 maxpacket: 8 [ 1408.149485][ T5731] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1408.198830][ T5731] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1408.258883][ T5731] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1408.302734][ T5731] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1408.351021][ T5731] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1408.401168][ T5731] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1408.455320][ T5731] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.466090][T22655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3942'. [ 1408.507101][T22655] ecryptfs: Unknown parameter 'ec|}' [ 1408.604504][T14072] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 1408.655879][T22659] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3942'. [ 1408.669238][ T29] audit: type=1400 audit(1787381106.425:2068): avc: denied { accept } for pid=22650 comm="syz.7.3932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1408.698034][ T5731] usb 1-1: GET_CAPABILITIES returned 1a [ 1408.704025][ T5731] usbtmc 1-1:16.0: can't read capabilities [ 1408.767660][T14072] usb 7-1: Using ep0 maxpacket: 32 [ 1408.773394][T14072] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1408.783662][T14072] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1408.794867][T14072] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1408.804856][T14072] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.815277][T14072] usb 7-1: config 0 descriptor?? [ 1409.028476][T22653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1409.039118][T22653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1409.204859][T22663] X.509: Couldn't decode AuthKeyIdentifier [ 1409.254557][T14072] koneplus 0003:1E7D:2D51.0086: unknown main item tag 0x0 [ 1409.343949][T14072] koneplus 0003:1E7D:2D51.0086: unknown main item tag 0x0 [ 1409.391277][T14072] koneplus 0003:1E7D:2D51.0086: unknown main item tag 0x0 [ 1409.415429][T14072] koneplus 0003:1E7D:2D51.0086: unknown main item tag 0x0 [ 1410.229501][T14072] koneplus 0003:1E7D:2D51.0086: unknown main item tag 0x0 [ 1410.300797][T14072] koneplus 0003:1E7D:2D51.0086: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.6-1/input0 [ 1410.403188][T14072] koneplus 0003:1E7D:2D51.0086: couldn't init struct koneplus_device [ 1410.460413][T14072] koneplus 0003:1E7D:2D51.0086: couldn't install mouse [ 1410.520250][T14072] koneplus 0003:1E7D:2D51.0086: probe with driver koneplus failed with error -71 [ 1410.567990][T14072] usb 7-1: USB disconnect, device number 121 [ 1412.070156][ T5731] usb 1-1: USB disconnect, device number 29 [ 1412.628346][T14989] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 1412.648365][T22710] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1413.257326][T22726] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1413.266381][T22726] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1413.289688][T22726] fuse: Bad value for 'fd' [ 1413.369480][ T29] audit: type=1326 audit(1787381111.125:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22706 comm="syz.7.3955" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe73599e0d9 code=0x7fc00000 [ 1414.022883][ T29] audit: type=1326 audit(1787381111.775:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22737 comm="syz.6.3965" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2fff9e0d9 code=0x0 [ 1414.375939][ T29] audit: type=1400 audit(1787381112.085:2071): avc: denied { append } for pid=22737 comm="syz.6.3965" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 1414.711573][ T10] usb 8-1: new full-speed USB device number 114 using dummy_hcd [ 1414.752092][ T29] audit: type=1400 audit(1787381112.505:2072): avc: denied { unmount } for pid=19487 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1414.775992][T22763] FAULT_INJECTION: forcing a failure. [ 1414.775992][T22763] name failslab, interval 1, probability 0, space 0, times 0 [ 1414.789950][T22763] CPU: 0 UID: 0 PID: 22763 Comm: syz.0.3971 Tainted: G L syzkaller #0 PREEMPT(full) [ 1414.789967][T22763] Tainted: [L]=SOFTLOCKUP [ 1414.789972][T22763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1414.789978][T22763] Call Trace: [ 1414.789982][T22763] [ 1414.789986][T22763] dump_stack_lvl+0x100/0x190 [ 1414.790005][T22763] should_fail_ex.cold+0x5/0xa [ 1414.790020][T22763] should_failslab+0xc2/0x120 [ 1414.790038][T22763] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1414.790054][T22763] ? alloc_empty_file+0x5b/0x1c0 [ 1414.790067][T22763] alloc_empty_file+0x5b/0x1c0 [ 1414.790079][T22763] path_openat+0xdb/0x2440 [ 1414.790097][T22763] ? __pfx_path_openat+0x10/0x10 [ 1414.790117][T22763] do_file_open+0x20e/0x430 [ 1414.790135][T22763] ? __pfx_do_file_open+0x10/0x10 [ 1414.790160][T22763] ? _raw_spin_unlock+0x28/0x50 [ 1414.790176][T22763] ? alloc_fd+0x471/0x7a0 [ 1414.790196][T22763] do_sys_openat2+0x10f/0x1e0 [ 1414.790207][T22763] ? __pfx_do_sys_openat2+0x10/0x10 [ 1414.790218][T22763] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1414.790236][T22763] ? __fget_files+0x21f/0x3d0 [ 1414.790256][T22763] __x64_sys_creat+0xcc/0x120 [ 1414.790267][T22763] ? __pfx___x64_sys_creat+0x10/0x10 [ 1414.790278][T22763] ? __pfx_ksys_write+0x10/0x10 [ 1414.790294][T22763] ? do_syscall_64+0xae/0x790 [ 1414.790311][T22763] do_syscall_64+0x123/0x790 [ 1414.790329][T22763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.790340][T22763] RIP: 0033:0x7fa072b9e0d9 [ 1414.790351][T22763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1414.790361][T22763] RSP: 002b:00007fa073a03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1414.790373][T22763] RAX: ffffffffffffffda RBX: 00007fa072e26090 RCX: 00007fa072b9e0d9 [ 1414.790380][T22763] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 1414.790386][T22763] RBP: 00007fa073a03090 R08: 0000000000000000 R09: 0000000000000000 [ 1414.790392][T22763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1414.790398][T22763] R13: 00007fa072e26128 R14: 00007fa072e26090 R15: 00007ffec20ad7e8 [ 1414.790412][T22763] [ 1415.087879][T14072] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1415.098726][ T10] usb 8-1: device descriptor read/64, error -71 [ 1415.247807][T14072] usb 6-1: Using ep0 maxpacket: 16 [ 1415.253456][T14072] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1415.273337][T14072] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1415.282069][T14072] usb 6-1: Product: syz [ 1415.301444][T14072] usb 6-1: Manufacturer: syz [ 1415.330634][T14072] usb 6-1: SerialNumber: syz [ 1415.338359][ T10] usb 8-1: new full-speed USB device number 115 using dummy_hcd [ 1415.362518][T14072] usb 6-1: config 0 descriptor?? [ 1415.468453][ T10] usb 8-1: device descriptor read/64, error -71 [ 1415.560893][ T29] audit: type=1400 audit(1787381113.315:2073): avc: denied { write } for pid=22780 comm="syz.9.3978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1415.622032][T15403] IPVS: starting estimator thread 0... [ 1415.628027][ T10] usb usb8-port1: attempt power cycle [ 1415.635959][T22781] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3978'. [ 1415.699011][T22791] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3978'. [ 1415.709767][T22788] IPVS: using max 78 ests per chain, 187200 per kthread [ 1415.734375][T22781] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1415.777215][T22791] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3978'. [ 1415.791230][T19195] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1415.809771][T22794] libceph: secret too big 79 [ 1415.817505][T22794] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3981'. [ 1415.890905][T14072] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1415.900314][T14072] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1415.916014][T14072] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1415.924116][T14072] usb 6-1: media controller created [ 1415.934649][T14072] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1415.951076][T19195] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1415.961187][T19195] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1415.972677][ T10] usb 8-1: new full-speed USB device number 116 using dummy_hcd [ 1415.981411][T19195] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.992540][T19195] usb 1-1: config 0 descriptor?? [ 1415.998147][ T10] usb 8-1: device descriptor read/8, error -71 [ 1416.007794][ T5794] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 1416.100266][ T29] audit: type=1400 audit(1787381113.855:2074): avc: denied { listen } for pid=22759 comm="syz.5.3970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1416.122194][ T5731] usb 7-1: new high-speed USB device number 122 using dummy_hcd [ 1416.167689][ T5794] usb 10-1: Using ep0 maxpacket: 8 [ 1416.174394][ T5794] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1416.182570][ T5794] usb 10-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 1416.199144][T14072] zl10353_read_register: readreg error (reg=127, ret==0) [ 1416.209669][T14072] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1416.217844][T14072] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1416.229133][ T5794] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.261033][ T10] usb 8-1: new full-speed USB device number 117 using dummy_hcd [ 1416.270659][T19195] usbhid 1-1:0.0: can't add hid device: -71 [ 1416.288331][ T5731] usb 7-1: Using ep0 maxpacket: 16 [ 1416.296583][ T5794] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1416.306885][T19195] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1416.319017][ T5731] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1416.334156][T19195] usb 1-1: USB disconnect, device number 30 [ 1416.338521][ T5794] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.353902][ T10] usb 8-1: device descriptor read/8, error -71 [ 1416.371548][ T5731] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 1416.384940][ T5794] usb 10-1: Product: syz [ 1416.389653][ T5731] usb 7-1: config 0 has no interface number 0 [ 1416.395862][ T5794] usb 10-1: Manufacturer: syz [ 1416.401575][ T5731] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1416.411881][ T5794] usb 10-1: SerialNumber: syz [ 1416.426070][ T5731] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1416.439167][ T5731] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.447260][ T5731] usb 7-1: Product: syz [ 1416.458984][ T5731] usb 7-1: Manufacturer: syz [ 1416.463614][ T5731] usb 7-1: SerialNumber: syz [ 1416.473550][ T10] usb usb8-port1: unable to enumerate USB device [ 1416.486780][ T5731] usb 7-1: config 0 descriptor?? [ 1416.492654][T22796] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 1416.500246][T22796] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 1416.638125][ T5794] usb 10-1: 0:1 : does not exist [ 1416.643588][ T5794] usb 10-1: unit 5 not found! [ 1416.649401][ T5794] usb 10-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 1416.664789][ T5794] usb 10-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 1416.696792][ T5794] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1416.712851][ T5794] usb 10-1: USB disconnect, device number 75 [ 1416.720296][T22796] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 1416.750473][T14989] Bluetooth: hci2: command 0x0406 tx timeout [ 1416.756553][T19195] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1416.768075][T20818] udevd[20818]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1416.787537][T22796] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 1416.846722][T14072] usb 6-1: USB disconnect, device number 109 [ 1416.871958][T14072] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1416.958057][T19195] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1416.968175][T19195] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1416.979364][T19195] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.991847][T19195] usb 1-1: config 0 descriptor?? [ 1417.010442][ T5731] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1417.221122][ T5731] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1417.234408][ T5731] asix 7-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1417.254751][ T5731] asix 7-1:0.34: probe with driver asix failed with error -61 [ 1417.405992][T22783] netlink: NAT attribute has 4 unknown bytes [ 1417.416838][T22783] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1418.192522][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1418.233650][ T29] audit: type=1400 audit(1787381115.985:2075): avc: denied { ioctl } for pid=22782 comm="syz.0.3980" path="/dev/binderfs/binder0" dev="binder" ino=22 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1418.401846][ T29] audit: type=1400 audit(1787381116.025:2076): avc: denied { set_context_mgr } for pid=22782 comm="syz.0.3980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1418.435437][T22802] binder: 22782:22802 ioctl c0306201 200000000640 returned -22 [ 1418.878179][T19195] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 1418.904839][T19195] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input38 [ 1419.224104][ T29] audit: type=1400 audit(1787381116.975:2077): avc: denied { bind } for pid=22821 comm="syz.5.3990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1419.253898][T19195] usb 1-1: USB disconnect, device number 31 [ 1419.260035][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1419.908799][T22825] cgroup2: Unknown parameter 'memory_hugetlpaccounting' [ 1420.121627][ T29] audit: type=1400 audit(1787381117.035:2078): avc: denied { map } for pid=22821 comm="syz.5.3990" path="socket:[94112]" dev="sockfs" ino=94112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1420.220862][ T5731] usb 7-1: USB disconnect, device number 122 [ 1420.262771][ T29] audit: type=1400 audit(1787381117.665:2079): avc: denied { mounton } for pid=22821 comm="syz.5.3990" path="/syzcgroup/cpu/syz5/cgroup.procs" dev="cgroup" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 1420.389371][T22830] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3992'. [ 1420.532011][ T29] audit: type=1400 audit(1787381118.285:2080): avc: denied { open } for pid=22829 comm="syz.9.3992" path="/dev/ptyr6" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1420.759942][ T29] audit: type=1400 audit(1787381118.455:2081): avc: denied { ioctl } for pid=22829 comm="syz.9.3992" path="/dev/ptyr6" dev="devtmpfs" ino=141 ioctlcmd=0x540b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1420.946809][T22845] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=22845 comm=syz.6.3995 [ 1420.985868][ T29] audit: type=1400 audit(1787381118.735:2082): avc: denied { shutdown } for pid=22848 comm="syz.7.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1421.030400][T22845] overlayfs: failed to resolve './bus': -2 [ 1421.159802][ T29] audit: type=1400 audit(1787381118.915:2083): avc: denied { connect } for pid=22848 comm="syz.7.3999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1422.151874][T22859] bridge0: port 3(syz_tun) entered blocking state [ 1422.207777][T22859] bridge0: port 3(syz_tun) entered disabled state [ 1422.259603][T22859] syz_tun: entered allmulticast mode [ 1423.262502][T22860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1423.295726][T22859] syz_tun: entered promiscuous mode [ 1423.439667][T22859] bridge0: port 3(syz_tun) entered blocking state [ 1423.446144][T22859] bridge0: port 3(syz_tun) entered forwarding state [ 1423.667929][T19195] usb 8-1: new high-speed USB device number 118 using dummy_hcd [ 1423.838410][T19195] usb 8-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1423.865769][T19195] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1423.887049][T22886] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1423.902835][T19195] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1423.924845][T19195] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 1423.938413][ T5731] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 1423.963247][T19195] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.993694][T19195] cxacru 8-1:1.0: usbatm_usb_probe: bind failed: -19! [ 1424.102587][ T5731] usb 10-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00 [ 1424.129185][ T5731] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1424.148840][ T5731] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1424.229490][ T5731] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.252958][T22894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4011'. [ 1424.263073][ T5731] usb 10-1: Product: syz [ 1424.277026][ T5731] usb 10-1: Manufacturer: syz [ 1424.294535][ T5731] usb 10-1: SerialNumber: syz [ 1424.312182][ T5731] ums-sddr09 10-1:1.0: USB Mass Storage device detected [ 1424.343316][ T5731] ums-sddr09 10-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 1424.343316][ T5731] Please send a copy of this message to and [ 1424.612342][ T29] audit: type=1400 audit(1787381122.365:2084): avc: denied { mounton } for pid=22907 comm="syz.0.4016" path="/179/file0" dev="tmpfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1424.638449][T22911] fuse: Bad value for 'group_id' [ 1424.643406][T22911] fuse: Bad value for 'group_id' [ 1424.707686][T19195] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1424.857648][T19195] usb 6-1: Using ep0 maxpacket: 8 [ 1424.863471][T19195] usb 6-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 1424.879024][T19195] usb 6-1: config 0 has an invalid interface number: 186 but max is 0 [ 1424.892395][T19195] usb 6-1: config 0 has no interface number 0 [ 1424.900104][ T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1424.909620][T19195] usb 6-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1424.921156][T19195] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 1424.935354][T19195] usb 6-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 1424.947385][T19195] usb 6-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1424.958754][T19195] usb 6-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1424.973690][T19195] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.985627][T19195] usb 6-1: Product: syz [ 1424.991653][T19195] usb 6-1: Manufacturer: syz [ 1424.996361][T19195] usb 6-1: SerialNumber: syz [ 1425.002592][T19195] usb 6-1: config 0 descriptor?? [ 1425.047691][ T10] usb 1-1: device descriptor read/64, error -71 [ 1425.137965][T22884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.147525][T22884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.215367][T19195] iowarrior 6-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 1425.287645][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1425.365040][ T5731] scsi host1: usb-storage 10-1:1.0 [ 1425.383457][ T5731] usb 10-1: USB disconnect, device number 76 [ 1425.427594][ T10] usb 1-1: device descriptor read/64, error -71 [ 1425.475419][T19195] usb 6-1: USB disconnect, device number 110 [ 1425.560575][ T10] usb usb1-port1: attempt power cycle [ 1425.804402][T22931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4023'. [ 1425.815604][T22931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4023'. [ 1425.942361][ T10] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1425.971256][ T10] usb 1-1: device descriptor read/8, error -71 [ 1426.012289][T22937] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1426.218115][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1426.258556][ T10] usb 1-1: device descriptor read/8, error -71 [ 1426.337950][ T5794] usb 8-1: USB disconnect, device number 118 [ 1426.389771][ T10] usb usb1-port1: unable to enumerate USB device [ 1426.508073][T22946] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 1426.646933][T22948] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 1427.037645][ T5794] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 1427.808645][T22962] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 1427.833559][ T5794] usb 10-1: Using ep0 maxpacket: 8 [ 1427.860215][ T5794] usb 10-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1427.925013][ T5794] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1428.013973][ T5794] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1428.075737][ T5794] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.139213][ T5794] usb 10-1: config 0 descriptor?? [ 1429.140295][ T29] audit: type=1400 audit(1787381125.965:2085): avc: denied { create } for pid=22970 comm="syz.5.4037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1431.172687][ T5794] usbhid 10-1:0.0: can't add hid device: -71 [ 1431.209307][ T29] audit: type=1400 audit(1787381125.965:2086): avc: denied { ioctl } for pid=22970 comm="syz.5.4037" path="socket:[94649]" dev="sockfs" ino=94649 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1431.858170][ T10] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1431.869188][ T5794] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1432.571029][ T5794] usb 10-1: USB disconnect, device number 77 [ 1432.686971][ T29] audit: type=1400 audit(1787381130.435:2087): avc: denied { name_bind } for pid=22981 comm="syz.9.4038" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 1432.741137][T22985] openvswitch: ovs-system: Dropping previously announced user features [ 1433.866789][ T29] audit: type=1400 audit(1787381131.605:2088): avc: denied { accept } for pid=22981 comm="syz.9.4038" lport=37135 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1433.902711][ T5731] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 1433.977289][ T29] audit: type=1400 audit(1787381131.645:2089): avc: denied { setopt } for pid=22981 comm="syz.9.4038" lport=37135 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1434.077978][ T5731] usb 7-1: Using ep0 maxpacket: 32 [ 1434.098257][ T5731] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1434.133061][ T5731] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 1434.161609][ T5731] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1434.321562][ T5731] usb 7-1: config 0 has no interface number 0 [ 1434.392406][ T5731] usb 7-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1434.512501][ T5731] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.562804][ T5731] usb 7-1: Product: syz [ 1434.600241][ T5731] usb 7-1: Manufacturer: syz [ 1434.643714][ T5731] usb 7-1: SerialNumber: syz [ 1434.694936][ T5731] usb 7-1: config 0 descriptor?? [ 1434.736401][ T5731] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 1434.809175][ T5731] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 1434.902946][T19916] Bluetooth: hci7: unexpected event for opcode 0x1003 [ 1434.949401][ T5731] radio-raremono 7-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1435.159718][ T5731] radio-raremono 7-1:0.35: raremono_cmd_main failed (-71) [ 1435.178442][T19313] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.245364][ T5731] radio-raremono 7-1:0.35: V4L2 device registered as radio48 [ 1435.363002][ T5731] usb 7-1: USB disconnect, device number 123 [ 1435.418791][ T5731] radio-raremono 7-1:0.35: Thanko's Raremono disconnected [ 1435.792129][T19313] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.021595][ T5731] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 1436.134801][T19313] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.227755][ T5731] usb 10-1: Using ep0 maxpacket: 8 [ 1436.257779][ T5731] usb 10-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1436.341917][ T5731] usb 10-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1436.421877][ T5731] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1436.466117][ T5731] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.482187][T19313] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.522132][ T5731] usb 10-1: config 0 descriptor?? [ 1436.747967][ T5794] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1436.949651][ T5794] usb 1-1: Using ep0 maxpacket: 16 [ 1436.980045][ T5794] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 1437.062750][ T5794] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.126065][ T5794] usb 1-1: Product: syz [ 1437.159363][ T5794] usb 1-1: Manufacturer: syz [ 1437.193312][ T5794] usb 1-1: SerialNumber: syz [ 1437.419099][T19313] bridge_slave_1: left allmulticast mode [ 1437.449499][ T5731] usbhid 10-1:0.0: can't add hid device: -71 [ 1437.485821][T19313] bridge_slave_1: left promiscuous mode [ 1437.503770][ T5731] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1437.525157][T19313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.534564][ T5794] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 1437.572699][ T5731] usb 10-1: USB disconnect, device number 78 [ 1437.695971][ T5794] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1438.537951][T23040] xt_hashlimit: size too large, truncated to 1048576 [ 1438.728224][T19313] bridge_slave_0: left allmulticast mode [ 1439.684520][T19916] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 1439.696303][T19916] Bluetooth: hci7: Injecting HCI hardware error event [ 1439.705162][T14989] Bluetooth: hci7: hardware error 0x00 [ 1439.793899][ T5794] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 1439.812866][T19313] bridge_slave_0: left promiscuous mode [ 1439.871090][T19313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.889906][ T5794] usb 1-1: media controller created [ 1439.996051][ T5794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1440.194474][ T5794] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1440.424382][ T5794] dvb_usb_gl861 1-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 1440.480931][ T29] audit: type=1400 audit(1787381138.235:2090): avc: denied { write } for pid=23032 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1440.551232][ T5794] usb 1-1: USB disconnect, device number 37 [ 1440.801454][ T29] audit: type=1400 audit(1787381138.555:2091): avc: denied { write } for pid=23061 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1440.916409][T19313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1441.015639][T19313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1441.075139][T19313] bond0 (unregistering): Released all slaves [ 1441.195716][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1441.264623][T19313] ovs-system: left promiscuous mode [ 1441.947755][T14989] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1442.226641][T23072] netlink: 14 bytes leftover after parsing attributes in process `syz.9.4062'. [ 1442.607828][T19195] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 1442.861444][T19195] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1442.906008][T19313] hsr_slave_0: left promiscuous mode [ 1442.940848][T19195] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1442.970784][T19313] hsr_slave_1: left promiscuous mode [ 1443.099249][T19195] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1443.166844][T19313] veth1_macvtap: left promiscuous mode [ 1443.187052][T19195] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1443.218881][T19313] veth0_macvtap: left promiscuous mode [ 1443.242618][T19195] usb 10-1: SerialNumber: syz [ 1443.259821][T19313] veth1_vlan: left promiscuous mode [ 1443.297551][T19313] veth0_vlan: left promiscuous mode [ 1443.398486][T14072] usb 8-1: new high-speed USB device number 119 using dummy_hcd [ 1443.493812][ T29] audit: type=1400 audit(1787381141.245:2092): avc: denied { write } for pid=23078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1443.608203][T14072] usb 8-1: Using ep0 maxpacket: 32 [ 1443.644406][T14072] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1443.716894][T14072] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 1443.817561][T14072] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.876502][ T29] audit: type=1400 audit(1787381141.625:2093): avc: denied { write } for pid=23100 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1443.913955][T14072] usb 8-1: config 0 has no interface number 0 [ 1443.941914][T14072] usb 8-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1444.057248][T14072] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.124142][T14072] usb 8-1: Product: syz [ 1444.169443][T14072] usb 8-1: Manufacturer: syz [ 1444.205378][T14072] usb 8-1: SerialNumber: syz [ 1444.240499][T19916] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1444.259135][T19916] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1444.267799][T19916] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1444.283872][T19916] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1444.293436][T19916] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1445.108335][T14072] usb 8-1: config 0 descriptor?? [ 1445.284087][T14072] radio-si470x 8-1:0.35: could not find interrupt in endpoint [ 1445.680253][T14072] radio-si470x 8-1:0.35: probe with driver radio-si470x failed with error -5 [ 1446.186653][T19313] team0 (unregistering): Port device team_slave_1 removed [ 1446.254052][T19313] team0 (unregistering): Port device team_slave_0 removed [ 1446.350810][T19916] Bluetooth: hci4: command tx timeout [ 1446.456455][T23086] ovs-system: entered promiscuous mode [ 1446.470216][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1446.490997][T14072] radio-raremono 8-1:0.35: this is not Thanko's Raremono. [ 1446.523247][T19195] usb 10-1: 0:2 : does not exist [ 1446.544388][T14072] usbhid 8-1:0.35: couldn't find an input interrupt endpoint [ 1446.620996][T14072] usb 8-1: USB disconnect, device number 119 [ 1446.669032][T19195] usb 10-1: USB disconnect, device number 79 [ 1446.821539][ T29] audit: type=1400 audit(1787381144.575:2094): avc: denied { accept } for pid=23118 comm="syz.9.4072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1446.976154][ T29] audit: type=1400 audit(1787381144.725:2095): avc: denied { ioctl } for pid=23125 comm="syz.0.4073" path="socket:[95271]" dev="sockfs" ino=95271 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1447.051302][T23128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4073'. [ 1447.120542][T23128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1447.179528][ T29] audit: type=1400 audit(1787381144.935:2096): avc: denied { bind } for pid=23125 comm="syz.0.4073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1447.289793][T23128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1448.265326][ T29] audit: type=1400 audit(1787381146.015:2097): avc: denied { write } for pid=23122 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1448.388301][ T2227] usb 8-1: new high-speed USB device number 120 using dummy_hcd [ 1448.428010][T19916] Bluetooth: hci4: command tx timeout [ 1448.491868][T23151] ovs-system: entered promiscuous mode [ 1448.537094][T14072] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1448.564323][ T29] audit: type=1400 audit(1787381146.315:2098): avc: denied { write } for pid=23156 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1448.592922][ T2227] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1448.630228][ T2227] usb 8-1: config index 0 descriptor too short (expected 151, got 72) [ 1448.662567][ T2227] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.662585][ T2227] usb 8-1: Product: syz [ 1448.662594][ T2227] usb 8-1: Manufacturer: syz [ 1448.662603][ T2227] usb 8-1: SerialNumber: syz [ 1448.714134][ T5260] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1448.757919][T14072] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 1448.773875][ T29] audit: type=1400 audit(1787381146.515:2099): avc: denied { firmware_load } for pid=2227 comm="kworker/0:3" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1448.789810][ T2227] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1448.794478][T23161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4078'. [ 1448.795350][T23161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4078'. [ 1448.872365][T23113] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1448.907882][T14072] usb 10-1: Using ep0 maxpacket: 32 [ 1448.910668][T14072] usb 10-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1448.913761][T14072] usb 10-1: config 0 has an invalid interface number: 35 but max is 0 [ 1448.913777][T14072] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1448.913788][T14072] usb 10-1: config 0 has no interface number 0 [ 1448.913807][T14072] usb 10-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1448.917476][T14072] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.917491][T14072] usb 10-1: Product: syz [ 1448.917529][T14072] usb 10-1: Manufacturer: syz [ 1448.917538][T14072] usb 10-1: SerialNumber: syz [ 1448.921120][T14072] usb 10-1: config 0 descriptor?? [ 1448.925055][T14072] radio-si470x 10-1:0.35: could not find interrupt in endpoint [ 1448.925086][T14072] radio-si470x 10-1:0.35: probe with driver radio-si470x failed with error -5 [ 1449.096589][ T29] audit: type=1400 audit(1787381146.845:2100): avc: denied { write } for pid=23136 comm="syz.7.4074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1449.142767][T14072] radio-raremono 10-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1449.223487][T23107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.223639][T23107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.223699][T23107] bridge_slave_0: entered allmulticast mode [ 1449.226552][T23107] bridge_slave_0: entered promiscuous mode [ 1449.230612][T23107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.230687][T23107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.230744][T23107] bridge_slave_1: entered allmulticast mode [ 1449.231785][T23107] bridge_slave_1: entered promiscuous mode [ 1449.297685][T23107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1449.303916][T23107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1449.317874][T23113] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1449.354026][T14072] radio-raremono 10-1:0.35: raremono_cmd_main failed (-71) [ 1449.354936][T14072] radio-raremono 10-1:0.35: V4L2 device registered as radio48 [ 1449.358070][T14072] usb 10-1: USB disconnect, device number 80 [ 1449.358474][T14072] radio-raremono 10-1:0.35: Thanko's Raremono disconnected [ 1449.378666][T17410] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1449.383053][T23107] team0: Port device team_slave_0 added [ 1449.403411][T23107] team0: Port device team_slave_1 added [ 1449.431108][ T29] audit: type=1400 audit(1787381147.185:2101): avc: denied { write } for pid=23167 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1449.465317][T23107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1449.465357][T23107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.465371][T23107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.466388][T23107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.466397][T23107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.466412][T23107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1449.470400][T23113] usb 1-1: Using ep0 maxpacket: 32 [ 1449.474385][T23113] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1449.479983][T23113] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1449.480004][T23113] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1449.480051][T23113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1449.481658][T23113] usb 1-1: config 0 descriptor?? [ 1449.612524][T23107] hsr_slave_0: entered promiscuous mode [ 1449.613123][T23107] hsr_slave_1: entered promiscuous mode [ 1449.613520][T23107] debugfs: 'hsr0' already exists in 'hsr' [ 1449.613532][T23107] Cannot create hsr debugfs directory [ 1449.648151][ T29] audit: type=1400 audit(1787381147.395:2102): avc: denied { write } for pid=23185 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1449.689020][T23172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1449.689268][T23172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1449.772068][ T5260] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1449.870926][ T2227] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 1449.871011][ T2227] ath9k_htc: Failed to initialize the device [ 1449.925809][T23113] koneplus 0003:1E7D:2D51.0087: unknown main item tag 0x0 [ 1449.925830][T23113] koneplus 0003:1E7D:2D51.0087: unknown main item tag 0x0 [ 1449.925843][T23113] koneplus 0003:1E7D:2D51.0087: unknown main item tag 0x0 [ 1449.925855][T23113] koneplus 0003:1E7D:2D51.0087: unknown main item tag 0x0 [ 1449.925868][T23113] koneplus 0003:1E7D:2D51.0087: unknown main item tag 0x0 [ 1449.927027][T23113] koneplus 0003:1E7D:2D51.0087: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 1449.978819][ T2227] usb 8-1: ath9k_htc: USB layer deinitialized [ 1450.136693][T23113] koneplus 0003:1E7D:2D51.0087: couldn't init struct koneplus_device [ 1450.136723][T23113] koneplus 0003:1E7D:2D51.0087: couldn't install mouse [ 1450.137743][T23113] koneplus 0003:1E7D:2D51.0087: probe with driver koneplus failed with error -71 [ 1450.145928][T23113] usb 1-1: USB disconnect, device number 38 [ 1450.239600][T23193] binder: 23192:23193 ioctl 4018620d 0 returned -22 [ 1450.248262][T23107] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.329958][T23193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1450.361971][ T29] audit: type=1400 audit(1787381148.115:2103): avc: denied { nlmsg_read } for pid=23192 comm="syz.9.4081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1450.399870][T23107] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.402954][T23137] ceph: No mds server is up or the cluster is laggy [ 1450.428464][T23113] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 1450.508054][T19916] Bluetooth: hci4: command tx timeout [ 1450.660509][T23113] usb 8-1: USB disconnect, device number 120 [ 1450.681344][T23107] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1450.840815][T23107] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1451.013108][T23198] netlink: 80 bytes leftover after parsing attributes in process `syz.7.4082'. [ 1451.794782][T23213] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 1452.005514][T23225] openvswitch: ovs-system: Dropping previously announced user features [ 1452.016722][T23227] jffs2: notice: (23227) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1452.019169][T23107] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1452.033093][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 1452.033105][ T29] audit: type=1400 audit(1787381149.785:2105): avc: denied { write } for pid=23226 comm="syz.9.4091" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1452.054565][T23107] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1452.054988][T23107] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1452.074964][T23107] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1452.075678][T23107] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1452.101457][T23107] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1452.102016][T23107] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1452.106781][T23107] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1452.156999][ T29] audit: type=1400 audit(1787381149.905:2106): avc: denied { write } for pid=23226 comm="syz.9.4091" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1452.230144][ T29] audit: type=1400 audit(1787381149.985:2107): avc: denied { remove_name } for pid=23226 comm="syz.9.4091" name="file2" dev="jffs2" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1452.255842][ T29] audit: type=1400 audit(1787381150.005:2108): avc: denied { unlink } for pid=23226 comm="syz.9.4091" name="file2" dev="jffs2" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1452.258435][T23113] usb 8-1: new high-speed USB device number 121 using dummy_hcd [ 1452.276765][T23107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1452.304075][T23107] 8021q: adding VLAN 0 to HW filter on device team0 [ 1452.318174][T19313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.318254][T19313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1452.321644][ T7723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.321691][ T7723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1452.335657][T23107] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1452.335673][T23107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1452.412192][T23113] usb 8-1: Using ep0 maxpacket: 32 [ 1452.414722][T23113] usb 8-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1452.422363][T23113] usb 8-1: config 0 has an invalid interface number: 35 but max is 0 [ 1452.422380][T23113] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.422391][T23113] usb 8-1: config 0 has no interface number 0 [ 1452.422410][T23113] usb 8-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1452.424371][T23113] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1452.424386][T23113] usb 8-1: Product: syz [ 1452.424395][T23113] usb 8-1: Manufacturer: syz [ 1452.424403][T23113] usb 8-1: SerialNumber: syz [ 1452.425710][T23113] usb 8-1: config 0 descriptor?? [ 1452.429579][T23113] radio-si470x 8-1:0.35: could not find interrupt in endpoint [ 1452.429611][T23113] radio-si470x 8-1:0.35: probe with driver radio-si470x failed with error -5 [ 1452.591020][T19916] Bluetooth: hci4: command tx timeout [ 1452.631951][T23113] radio-raremono 8-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1452.838900][T23113] radio-raremono 8-1:0.35: raremono_cmd_main failed (-71) [ 1452.839896][ T29] audit: type=1400 audit(1787381150.595:2109): avc: denied { setopt } for pid=23254 comm="syz.0.4093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1452.840053][T23113] radio-raremono 8-1:0.35: V4L2 device registered as radio48 [ 1452.844229][T23113] usb 8-1: USB disconnect, device number 121 [ 1452.844591][T23113] radio-raremono 8-1:0.35: Thanko's Raremono disconnected [ 1452.974248][T23107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1453.046944][T23262] Cannot find del_set index 4 as target [ 1453.050936][T23107] veth0_vlan: entered promiscuous mode [ 1453.060694][T23107] veth1_vlan: entered promiscuous mode [ 1453.114014][T23107] veth0_macvtap: entered promiscuous mode [ 1453.115990][T23107] veth1_macvtap: entered promiscuous mode [ 1453.156633][T23107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1453.172982][T23107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1453.283738][T15401] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.283770][T15401] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.283788][T15401] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.283806][T15401] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1453.457875][T23262] block nbd0: shutting down sockets [ 1453.850435][ T2227] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1453.997816][ T2227] usb 1-1: Using ep0 maxpacket: 32 [ 1454.017195][ T2227] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1454.038747][ T2227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1454.053969][ T29] audit: type=1400 audit(1787381151.805:2110): avc: denied { ioctl } for pid=23274 comm="syz.6.4097" path="socket:[96155]" dev="sockfs" ino=96155 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1454.083456][ T2227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1454.105623][ T2227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.144808][ T2227] usb 1-1: config 0 descriptor?? [ 1454.361810][T23271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1454.383464][T23271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1454.605257][ T2227] koneplus 0003:1E7D:2D51.0088: unknown main item tag 0x0 [ 1454.615606][ T2227] koneplus 0003:1E7D:2D51.0088: unknown main item tag 0x0 [ 1454.624817][ T2227] koneplus 0003:1E7D:2D51.0088: unknown main item tag 0x0 [ 1454.636565][ T2227] koneplus 0003:1E7D:2D51.0088: unknown main item tag 0x0 [ 1454.644045][T23113] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 1454.651996][ T2227] koneplus 0003:1E7D:2D51.0088: unknown main item tag 0x0 [ 1454.666594][ T2227] koneplus 0003:1E7D:2D51.0088: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 1454.808088][T23113] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1454.818334][ T2227] koneplus 0003:1E7D:2D51.0088: couldn't init struct koneplus_device [ 1454.834786][ T2227] koneplus 0003:1E7D:2D51.0088: couldn't install mouse [ 1454.842001][T23113] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1454.857077][ T2227] koneplus 0003:1E7D:2D51.0088: probe with driver koneplus failed with error -71 [ 1454.868733][T23113] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1454.884255][ T2227] usb 1-1: USB disconnect, device number 39 [ 1454.893456][T23113] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.911254][T23113] usb 7-1: Product: syz [ 1454.915543][T23113] usb 7-1: Manufacturer: syz [ 1454.921152][T23113] usb 7-1: SerialNumber: syz [ 1454.986620][T23227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1455.100883][T22642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1455.141475][T22642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1455.166723][T23113] usb 7-1: Invalid number of CPorts: 0 [ 1455.189255][T23113] es2_ap_driver 7-1:1.0: probe with driver es2_ap_driver failed with error -22 [ 1455.221856][T15403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1455.266457][T15403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1455.362777][T23288] bridge0: port 3(batadv1) entered blocking state [ 1455.396047][T23288] bridge0: port 3(batadv1) entered disabled state [ 1455.434231][T23288] batadv1: entered allmulticast mode [ 1455.474746][T23288] batadv1: entered promiscuous mode [ 1455.497427][T23287] binder: 23286:23287 ioctl 3b80 200000000300 returned -22 [ 1455.527136][ T29] audit: type=1400 audit(1787381153.275:2111): avc: denied { write } for pid=23286 comm="syz.7.4102" name="os_desc" dev="configfs" ino=9159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1455.575385][ T29] audit: type=1400 audit(1787381153.305:2112): avc: denied { write } for pid=23286 comm="syz.7.4102" name="os_desc" dev="configfs" ino=9159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1455.679257][T17410] usb 10-1: new full-speed USB device number 81 using dummy_hcd [ 1455.692317][T23113] usb 7-1: USB disconnect, device number 124 [ 1455.698408][ T2227] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1455.858605][T15401] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1455.868153][T15401] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1456.618602][T17410] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1456.629008][ T2227] usb 4-1: not running at top speed; connect to a high speed hub [ 1456.643990][ T2227] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1456.655940][T17410] usb 10-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1456.673363][ T2227] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1456.685737][T17410] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.794199][ T2227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.813767][T17410] aiptek 10-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 1456.867157][ T2227] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 1456.900058][T23310] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1456.909226][T23310] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1456.919933][ T2227] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 1456.941209][T23310] fuse: Bad value for 'fd' [ 1457.066260][T23318] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1457.087712][ T2227] usb 10-1: USB disconnect, device number 81 [ 1457.140764][T23292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4068'. [ 1457.164502][T23318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=23318 comm=syz.7.4110 [ 1457.432310][ T29] audit: type=1400 audit(1787381155.185:2113): avc: denied { read } for pid=23327 comm="syz.6.4113" name="mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1457.645628][ T29] audit: type=1400 audit(1787381155.215:2114): avc: denied { open } for pid=23327 comm="syz.6.4113" path="/dev/input/mice" dev="devtmpfs" ino=915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1457.715580][T17410] usb 4-1: USB disconnect, device number 21 [ 1457.761594][ T29] audit: type=1400 audit(1787381155.225:2115): avc: denied { ioctl } for pid=23327 comm="syz.6.4113" path="/dev/input/mice" dev="devtmpfs" ino=915 ioctlcmd=0x55cb scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1458.071678][ T29] audit: type=1400 audit(1787381155.375:2116): avc: denied { name_bind } for pid=23326 comm="syz.7.4112" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 1458.171672][ T29] audit: type=1400 audit(1787381155.575:2117): avc: denied { map } for pid=23335 comm="syz.6.4114" path="socket:[96609]" dev="sockfs" ino=96609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1458.351745][ T29] audit: type=1400 audit(1787381155.575:2118): avc: denied { read } for pid=23335 comm="syz.6.4114" path="socket:[96609]" dev="sockfs" ino=96609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1459.562363][ T29] audit: type=1400 audit(1787381155.735:2119): avc: denied { bind } for pid=23335 comm="syz.6.4114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1459.728172][T23345] loop2: detected capacity change from 0 to 2640 [ 1459.738925][T20818] buffer_io_error: 247 callbacks suppressed [ 1459.738935][T20818] Buffer I/O error on dev loop2, logical block 0, async page read [ 1459.768615][ T29] audit: type=1400 audit(1787381155.745:2120): avc: denied { listen } for pid=23335 comm="syz.6.4114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1459.807931][T23350] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1459.815883][T23350] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1459.871777][T23350] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1459.877776][T23350] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1459.895373][T23345] Buffer I/O error on dev loop2, logical block 0, lost async page write [ 1459.903978][T23345] Buffer I/O error on dev loop2, logical block 1, lost async page write [ 1459.912676][T23345] Buffer I/O error on dev loop2, logical block 2, lost async page write [ 1459.921394][T23345] Buffer I/O error on dev loop2, logical block 3, lost async page write [ 1459.930242][T23345] Buffer I/O error on dev loop2, logical block 4, lost async page write [ 1459.938611][T23345] Buffer I/O error on dev loop2, logical block 5, lost async page write [ 1459.947893][T23345] Buffer I/O error on dev loop2, logical block 6, lost async page write [ 1459.956991][T23345] Buffer I/O error on dev loop2, logical block 7, lost async page write [ 1459.967308][T23345] Buffer I/O error on dev loop2, logical block 8, lost async page write [ 1460.031574][T23350] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1460.084063][T23350] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1460.090285][T23350] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1460.100294][T23350] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1460.106230][T23350] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1460.118439][T23350] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1460.159153][ T29] audit: type=1400 audit(1787381157.235:2121): avc: denied { read } for pid=23349 comm="syz.9.4120" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1460.307035][ T29] audit: type=1400 audit(1787381157.235:2122): avc: denied { open } for pid=23349 comm="syz.9.4120" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1460.507737][ T2227] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1461.477712][ T2227] usb 4-1: Using ep0 maxpacket: 8 [ 1461.506037][ T2227] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1461.628456][T19916] Bluetooth: hci3: command 0x0406 tx timeout [ 1461.634742][ T2227] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1461.707430][ T2227] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1461.768630][ T2227] usb 4-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 1461.810008][T23389] futex_wake_op: syz.9.4126 tries to shift op by -1; fix this program [ 1462.258340][T19916] Bluetooth: hci2: command 0x0406 tx timeout [ 1462.264379][T14989] Bluetooth: hci1: command 0x0406 tx timeout [ 1462.270470][T19914] Bluetooth: hci4: command 0x0c1a tx timeout [ 1462.297363][ T2227] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 1462.801587][ T2227] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 1463.321372][ T2227] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1463.419906][ T2227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.474709][ T2227] usb 4-1: can't set config #16, error -71 [ 1463.480771][ T29] audit: type=1400 audit(1787381161.225:2123): avc: denied { write } for pid=23376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1463.571412][ T2227] usb 4-1: USB disconnect, device number 22 [ 1463.710793][T23391] Bluetooth: hci3: command 0x0406 tx timeout [ 1463.731283][T23398] digital: digital_start_poll: Unknown protocol [ 1464.176650][ T29] audit: type=1400 audit(1787381161.925:2124): avc: denied { write } for pid=23402 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1464.350036][ T5609] Bluetooth: hci4: command 0x0c1a tx timeout [ 1464.356064][T19916] Bluetooth: hci1: command 0x0406 tx timeout [ 1464.362166][T23391] Bluetooth: hci2: command 0x0406 tx timeout [ 1464.682666][T23413] binder: 23412:23413 ioctl c0306201 0 returned -14 [ 1464.880161][T23413] input: syz0 as /devices/virtual/input/input40 [ 1465.165232][ T29] audit: type=1400 audit(1787381162.915:2125): avc: denied { write } for pid=23410 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1465.318093][ T29] audit: type=1400 audit(1787381162.965:2126): avc: denied { bind } for pid=23421 comm="syz.9.4129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1465.455055][ T29] audit: type=1400 audit(1787381162.985:2127): avc: denied { listen } for pid=23421 comm="syz.9.4129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1465.477034][ T5731] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 1465.595798][ T29] audit: type=1400 audit(1787381162.985:2128): avc: denied { connect } for pid=23421 comm="syz.9.4129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1465.693733][ T5731] usb 1-1: not running at top speed; connect to a high speed hub [ 1465.747526][ T5731] usb 1-1: New USB device found, idVendor=0582, idProduct=0080, bcdDevice= 0.40 [ 1465.775321][ T29] audit: type=1400 audit(1787381162.995:2129): avc: denied { accept } for pid=23421 comm="syz.9.4129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1465.835987][ T5731] usb 1-1: config 1 has an invalid descriptor of length 146, skipping remainder of the config [ 1465.914605][ T5731] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1465.942469][ T29] audit: type=1400 audit(1787381163.135:2130): avc: denied { setopt } for pid=23421 comm="syz.9.4129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 1466.017847][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.029846][ T5731] usb 1-1: Product: 귊鑒ખ넙ᬂ氓걱駁灈㌷렶匲Ӆ깰ᣠ᫭⍜莁Š峵큄埻䥷㼩騺倆쵥䛵箱䘢ᢴ긊㔆䭅ûỷ靯晙븾 [ 1466.051994][ T29] audit: type=1400 audit(1787381163.165:2131): avc: denied { write } for pid=23430 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1466.092154][T23437] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4131'. [ 1466.428379][T23391] Bluetooth: hci2: command 0x0406 tx timeout [ 1466.434664][ T5609] Bluetooth: hci4: command 0x0c1a tx timeout [ 1466.943490][ T5731] usb 1-1: Manufacturer: ј [ 1467.050617][ T5731] usb 1-1: SerialNumber: 栘銷ᐤ祑灑筓丐┷蘱牊ᨸᠧ鐄欆⮠ሇ蕰닄ࣤ믏삉蚱뵷칯⮢퀌ꦨ쪰읈귵耉匣㮧潞ꃜ傕ᜁ灿並䕙爎蛳Ⴟ큣醫ᄡ磚醋켁拘暼阸儗샽堿㋙⪣縉跗┫省놢论臨ᦉ盃ﻝ๒爭奱＃闭鱹돻摣쐔⏄짎늸 [ 1467.646849][ T29] audit: type=1400 audit(1787381163.195:2132): avc: denied { mounton } for pid=23428 comm="syz.7.4134" path="/proc/560/task" dev="proc" ino=96902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1467.873374][T14072] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1467.881689][ T5609] Bluetooth: hci3: command 0x0406 tx timeout [ 1467.907488][T14072] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1468.154771][ T5731] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1468.184654][T23452] netlink: 'syz.6.4138': attribute type 21 has an invalid length. [ 1468.192552][T23452] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4138'. [ 1468.373833][ T5731] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 1468.392008][T23450] pim6reg: entered allmulticast mode [ 1468.397503][T23452] netlink: 'syz.6.4138': attribute type 5 has an invalid length. [ 1468.405256][T23452] netlink: 'syz.6.4138': attribute type 6 has an invalid length. [ 1468.413007][T23452] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4138'. [ 1468.422237][T23455] pim6reg: left allmulticast mode [ 1468.484266][T20818] udevd[20818]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1468.504488][ T5731] usb 1-1: USB disconnect, device number 40 [ 1468.659407][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1468.659418][ T29] audit: type=1400 audit(1787381166.415:2139): avc: denied { write } for pid=23470 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1469.508539][ T5731] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1469.690478][ T5731] usb 4-1: Using ep0 maxpacket: 8 [ 1469.725281][ T5731] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1469.786983][ T5731] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1469.847940][ T5731] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1469.889880][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.944148][ T5731] usb 4-1: config 0 descriptor?? [ 1471.033230][ T5609] Bluetooth: hci2: command 0x0406 tx timeout [ 1471.042765][T14072] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1471.066645][ T5731] pantherlord 0003:0810:0001.0089: unknown main item tag 0x0 [ 1471.082968][T14072] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1471.108211][T19195] usb 10-1: new full-speed USB device number 82 using dummy_hcd [ 1471.117163][ T5731] pantherlord 0003:0810:0001.0089: unknown main item tag 0x0 [ 1471.233008][ T29] audit: type=1400 audit(1787381168.985:2140): avc: denied { write } for pid=23482 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1471.263372][ T5731] pantherlord 0003:0810:0001.0089: unknown main item tag 0x0 [ 1471.315396][ T5731] pantherlord 0003:0810:0001.0089: unknown main item tag 0x0 [ 1471.362451][ T5731] pantherlord 0003:0810:0001.0089: unknown main item tag 0x0 [ 1471.370987][T19195] usb 10-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1471.424619][ T5731] pantherlord 0003:0810:0001.0089: bogus close delimiter [ 1471.438100][T19195] usb 10-1: config 0 has an invalid interface number: 31 but max is 0 [ 1471.477865][ T5731] pantherlord 0003:0810:0001.0089: item 0 0 2 10 parsing failed [ 1471.487149][T19195] usb 10-1: config 0 has an invalid descriptor of length 105, skipping remainder of the config [ 1471.513603][ T29] audit: type=1400 audit(1787381169.265:2141): avc: denied { write } for pid=23511 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1471.541827][ T5731] pantherlord 0003:0810:0001.0089: parse failed [ 1471.571001][T19195] usb 10-1: config 0 has no interface number 0 [ 1471.581687][ T5731] pantherlord 0003:0810:0001.0089: probe with driver pantherlord failed with error -22 [ 1471.598765][T23512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1471.646117][T19195] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.669922][ T5794] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 1471.682664][ T5731] usb 4-1: USB disconnect, device number 23 [ 1471.692420][T19195] usb 10-1: Product: syz [ 1471.718369][T19195] usb 10-1: Manufacturer: syz [ 1471.767560][T19195] usb 10-1: SerialNumber: syz [ 1471.817921][T19195] usb 10-1: config 0 descriptor?? [ 1471.847984][ T5794] usb 7-1: Using ep0 maxpacket: 16 [ 1471.865285][T19195] hub 10-1:0.31: bad descriptor, ignoring hub [ 1471.886361][ T5794] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1471.904416][T19195] hub 10-1:0.31: probe with driver hub failed with error -5 [ 1471.915550][ T5794] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 1471.948511][ T5794] usb 7-1: config 9 has an invalid interface number: 57 but max is 0 [ 1471.965409][ T5794] usb 7-1: config 9 has no interface number 0 [ 1471.995510][ T5794] usb 7-1: config 9 interface 57 has no altsetting 0 [ 1472.018298][ T5794] usb 7-1: string descriptor 0 read error: -22 [ 1472.033420][ T5794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.068818][T19195] uvcvideo 10-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1472.095900][T19195] uvcvideo 10-1:0.31: No valid video chain found. [ 1472.152160][T19195] usb 10-1: USB disconnect, device number 82 [ 1472.482650][T23527] libceph: secret too big 79 [ 1472.535422][T23527] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4152'. [ 1472.705472][ T5794] video4linux radio48: keene_cmd_set failed (-71) [ 1472.743605][ T5794] radio-keene 7-1:9.57: V4L2 device registered as radio48 [ 1472.764023][ T29] audit: type=1400 audit(1787381170.515:2142): avc: denied { create } for pid=23533 comm="syz.3.4153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1472.806131][ T5794] usb 7-1: USB disconnect, device number 125 [ 1472.949182][T23538] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4154'. [ 1473.694366][ T29] audit: type=1400 audit(1787381170.675:2143): avc: denied { write } for pid=23521 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1473.902879][ T29] audit: type=1400 audit(1787381171.435:2144): avc: denied { write } for pid=23533 comm="syz.3.4153" path="socket:[97392]" dev="sockfs" ino=97392 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1473.948414][ T5609] Bluetooth: hci1: command 0x0406 tx timeout [ 1473.965383][T14072] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1473.992147][T23553] veth0: entered promiscuous mode [ 1474.003461][T14072] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1474.045270][ T29] audit: type=1400 audit(1787381171.695:2145): avc: denied { write } for pid=23547 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1474.130364][ T5731] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1474.302801][ T29] audit: type=1400 audit(1787381172.055:2146): avc: denied { mounton } for pid=23556 comm="syz.9.4159" path="/" dev="autofs" ino=97466 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 1474.339890][ T5731] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1474.383961][T23557] ip6gre1: entered allmulticast mode [ 1474.390830][ T5731] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 64 [ 1474.423583][ T5731] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1474.449832][ T7723] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1474.483878][ T5731] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1474.496219][T23564] openvswitch: ovs-system: Dropping previously announced user features [ 1474.519915][ T5731] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.546415][ T5731] usb 1-1: Product: ㄫ玵麻㟰讐橱謙蔬┣˼괵떸陗〹쟈瘼旸扃䨙懏럀㫬膎碽쇷桌潫ᐞ崦䆟᪂ [ 1474.603440][ T5731] usb 1-1: Manufacturer: ╔뀹級냟쥹쵺⁦ᙃ莚鏙屝烜찶賷ᶘ埕ⱚ鉫妟큕쁸ꨔ솀䝘♮ᢊ궮㈪駹淢禼㨥ᇒ圱㵉쀧ㆴ嫑࿷砅ൽ힒佮䰴篴ῲᴠ蘀්갾½慝擉并跭푫䙔뗑퟾蟪嘎੶㘡귙䇮嫗⹃럄⋉卆뼅蚄皒❼沊ᾲ鲜 [ 1474.687768][T19195] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 1474.728535][ T5731] usb 1-1: SerialNumber: Џ [ 1474.733990][T23551] veth0: left promiscuous mode [ 1474.797875][T23538] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1474.854410][T23538] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1474.862432][T19195] usb 7-1: Using ep0 maxpacket: 32 [ 1474.873029][T19195] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 1474.916806][T19195] usb 7-1: config 0 has an invalid interface number: 35 but max is 0 [ 1474.949993][T19195] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.983645][T19195] usb 7-1: config 0 has no interface number 0 [ 1475.006804][T19195] usb 7-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1475.033099][ T29] audit: type=1400 audit(1787381172.785:2147): avc: denied { write } for pid=23569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1475.088000][ T5794] usb 8-1: new high-speed USB device number 122 using dummy_hcd [ 1475.112047][T19195] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1475.142196][T19195] usb 7-1: Product: syz [ 1475.171272][T19195] usb 7-1: Manufacturer: syz [ 1475.200530][T19195] usb 7-1: SerialNumber: syz [ 1475.225250][T19195] usb 7-1: config 0 descriptor?? [ 1475.250745][ T29] audit: type=1400 audit(1787381173.005:2148): avc: denied { write } for pid=23584 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1475.292487][T19195] radio-si470x 7-1:0.35: could not find interrupt in endpoint [ 1475.307906][ T5794] usb 8-1: Using ep0 maxpacket: 8 [ 1475.335653][ T5794] usb 8-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1475.345869][T19195] radio-si470x 7-1:0.35: probe with driver radio-si470x failed with error -5 [ 1475.381279][T23586] libceph: secret too big 79 [ 1475.387956][ T5794] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1475.436618][T23586] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4163'. [ 1475.463562][ T5794] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1475.486961][ T5794] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.509826][T19195] radio-raremono 7-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 1475.543853][ T5794] usb 8-1: config 0 descriptor?? [ 1475.716307][T19195] radio-raremono 7-1:0.35: raremono_cmd_main failed (-71) [ 1475.742479][T19195] radio-raremono 7-1:0.35: V4L2 device registered as radio48 [ 1475.773008][T19195] usb 7-1: USB disconnect, device number 126 [ 1475.783775][T23596] libceph: secret too big 79 [ 1475.810685][T19195] radio-raremono 7-1:0.35: Thanko's Raremono disconnected [ 1475.848317][T23596] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4165'. [ 1475.868605][T23113] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1476.030203][ T29] audit: type=1400 audit(1787381173.785:2149): avc: denied { write } for pid=23588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1476.058699][T23113] usb 4-1: Using ep0 maxpacket: 16 [ 1476.070879][ T5731] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 1476.083644][T23113] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1476.094065][ T5794] pantherlord 0003:0810:0001.008A: unknown main item tag 0x0 [ 1476.134200][ T5794] pantherlord 0003:0810:0001.008A: unknown main item tag 0x0 [ 1476.142049][T23113] usb 4-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 1476.157302][ T5731] usb 1-1: USB disconnect, device number 41 [ 1476.191771][ T5794] pantherlord 0003:0810:0001.008A: unknown main item tag 0x0 [ 1476.210903][T23113] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1476.245079][ T5794] pantherlord 0003:0810:0001.008A: unknown main item tag 0x0 [ 1476.261897][ T29] audit: type=1400 audit(1787381174.015:2150): avc: denied { write } for pid=23608 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1476.286296][T23113] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1476.311723][ T5794] pantherlord 0003:0810:0001.008A: unknown main item tag 0x0 [ 1476.344213][T23606] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 1476.360175][ T5794] pantherlord 0003:0810:0001.008A: bogus close delimiter [ 1476.373600][T23113] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1476.399417][ T5794] pantherlord 0003:0810:0001.008A: item 0 0 2 10 parsing failed [ 1476.426336][T23612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4167'. [ 1476.438632][ T5609] Bluetooth: hci4: command 0x0c1a tx timeout [ 1476.444742][T14072] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1476.461900][ T5794] pantherlord 0003:0810:0001.008A: parse failed [ 1476.473798][T23113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1476.486634][T14072] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1476.513328][ T5794] pantherlord 0003:0810:0001.008A: probe with driver pantherlord failed with error -22 [ 1476.526390][T23113] usb 4-1: Product: syz [ 1476.537146][ T29] audit: type=1400 audit(1787381174.295:2151): avc: denied { bind } for pid=23610 comm="syz.6.4167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1476.575520][T23113] usb 4-1: Manufacturer: syz [ 1476.605764][T23113] usb 4-1: SerialNumber: syz [ 1476.629360][T23113] usb 4-1: config 0 descriptor?? [ 1476.673662][ T29] audit: type=1400 audit(1787381174.295:2152): avc: denied { name_bind } for pid=23610 comm="syz.6.4167" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 1476.747381][ T5731] usb 8-1: USB disconnect, device number 122 [ 1476.857936][ T5794] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 1476.953797][T23113] appledisplay 4-1:0.0: Error while getting initial brightness: -110 [ 1477.005821][T23113] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -110 [ 1477.037895][ T5794] usb 7-1: Using ep0 maxpacket: 16 [ 1477.060285][ T5794] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1477.090259][T23592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1477.124064][ T5794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1477.184715][ T5794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1477.232894][ T5794] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1477.262923][T23642] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4173'. [ 1477.280310][T23592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1477.295436][ T5794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.326318][ T5794] usb 7-1: config 0 descriptor?? [ 1478.342423][ T5731] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 1478.350215][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1478.373326][ T5794] microsoft 0003:045E:07DA.008B: unknown main item tag 0x0 [ 1478.400442][ T5794] microsoft 0003:045E:07DA.008B: unknown main item tag 0x0 [ 1478.424697][ T5794] microsoft 0003:045E:07DA.008B: unknown main item tag 0x0 [ 1478.514355][ T5794] microsoft 0003:045E:07DA.008B: unknown main item tag 0x0 [ 1478.542070][ T5794] microsoft 0003:045E:07DA.008B: unknown main item tag 0x0 [ 1478.559143][ T5731] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1478.666048][ T5794] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.008B/input/input41 [ 1478.697917][ T5731] usb 10-1: config index 0 descriptor too short (expected 65151, got 157) [ 1478.725954][ T5731] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1478.745127][T23113] usb 4-1: USB disconnect, device number 24 [ 1478.764409][ T5794] microsoft 0003:045E:07DA.008B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 1478.803016][ T5731] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.827082][ T5731] usb 10-1: Product: syz [ 1478.838669][ T5731] usb 10-1: Manufacturer: syz [ 1478.860039][ T5731] usb 10-1: SerialNumber: syz [ 1478.912247][T14072] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1478.921695][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1478.942638][ T5794] usb 7-1: USB disconnect, device number 127 [ 1479.334167][ T5731] usb 10-1: USB disconnect, device number 83 [ 1479.418849][T23113] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1479.497405][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1479.497417][ T29] audit: type=1400 audit(1787381177.245:2157): avc: denied { map } for pid=23667 comm="syz.7.4181" path="/188/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1479.550203][ T29] audit: type=1400 audit(1787381177.285:2158): avc: denied { execute } for pid=23667 comm="syz.7.4181" path="/188/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=3650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 1479.591145][T17410] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1479.604944][ T29] audit: type=1400 audit(1787381177.355:2159): avc: denied { append } for pid=23669 comm="syz.7.4182" name="ptp0" dev="devtmpfs" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1479.628394][T23113] usb 1-1: Using ep0 maxpacket: 32 [ 1479.717905][T23113] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1479.753756][T23113] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1479.776697][T23113] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1479.788626][T17410] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1479.810446][T17410] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.828870][T23113] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.838613][T17410] usb 7-1: Product: syz [ 1479.847263][T17410] usb 7-1: Manufacturer: syz [ 1479.858928][T23113] usb 1-1: config 0 descriptor?? [ 1479.869987][T17410] usb 7-1: SerialNumber: syz [ 1479.908171][T17410] usb 7-1: config 0 descriptor?? [ 1480.031303][T14072] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 1480.061555][T14072] ath9k_htc: Failed to initialize the device [ 1480.091241][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1480.106673][ T5731] usb 10-1: ath9k_htc: USB layer deinitialized [ 1480.163270][T23662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1480.203820][T23662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1480.212229][T23664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1480.249034][T23681] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4187'. [ 1480.259085][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1480.271754][ T9] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1480.289577][T23664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1480.302996][ T9] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1480.333477][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1480.393312][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1480.451352][ T9] usb 4-1: config 0 descriptor?? [ 1480.486245][T23113] koneplus 0003:1E7D:2D51.008C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0 [ 1480.520142][ T29] audit: type=1400 audit(1787381178.275:2160): avc: denied { connect } for pid=23685 comm="syz.9.4189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1480.669870][T14072] usb 7-1: USB disconnect, device number 2 [ 1480.687497][T23113] koneplus 0003:1E7D:2D51.008C: couldn't init struct koneplus_device [ 1480.718098][T23113] koneplus 0003:1E7D:2D51.008C: couldn't install mouse [ 1480.749674][T23113] koneplus 0003:1E7D:2D51.008C: probe with driver koneplus failed with error -71 [ 1480.786015][T23113] usb 1-1: USB disconnect, device number 42 [ 1480.857750][T17410] usb 10-1: new full-speed USB device number 84 using dummy_hcd [ 1480.944526][ T9] pantherlord 0003:0810:0001.008D: bogus close delimiter [ 1480.954977][ T9] pantherlord 0003:0810:0001.008D: item 0 0 2 10 parsing failed [ 1480.963192][ T9] pantherlord 0003:0810:0001.008D: parse failed [ 1480.970494][ T9] pantherlord 0003:0810:0001.008D: probe with driver pantherlord failed with error -22 [ 1481.019328][T17410] usb 10-1: not running at top speed; connect to a high speed hub [ 1481.027338][T17410] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1481.045506][T17410] usb 10-1: config 1 interface 0 altsetting 160 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1481.069644][T17410] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1481.096469][T17410] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.114943][T17410] usb 10-1: Product: syz [ 1481.120960][T17410] usb 10-1: Manufacturer: 深Ԛ䳫犃ꓥ檫䡾廕끟擅焋坶䁬年醭䒮鐷젶ᕂ̴灷舛渻ꂾ⭫痯튆儺夳錄㩝 [ 1481.156503][T17410] usb 10-1: SerialNumber: syz [ 1481.449608][T23113] usb 4-1: USB disconnect, device number 25 [ 1481.544688][T23700] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1481.578133][T23700] overlayfs: failed to set xattr on upper [ 1481.592208][T17410] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 84 if 0 alt 160 proto 1 vid 0x04B8 pid 0x0202 [ 1481.608106][T23700] overlayfs: ...falling back to redirect_dir=nofollow. [ 1481.623016][T17410] usb 10-1: USB disconnect, device number 84 [ 1481.642775][T17410] usblp0: removed [ 1481.660460][ T29] audit: type=1400 audit(1787381179.415:2161): avc: denied { ioctl } for pid=23685 comm="syz.9.4189" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 1481.691177][T23700] overlayfs: ...falling back to index=off. [ 1481.807716][ T9] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1481.823715][ T29] audit: type=1400 audit(1787381179.575:2162): avc: denied { ioctl } for pid=23710 comm="syz.9.4196" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1482.733804][ T9] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1482.776917][ T9] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1482.834111][ T9] usb 7-1: config 0 has no interface number 0 [ 1482.855912][ T9] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1482.960059][ T9] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1483.016579][ T9] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 32768, setting to 64 [ 1483.054979][ T9] usb 7-1: New USB device strings: Mfr=0, Product=28, SerialNumber=3 [ 1483.864611][ T9] usb 7-1: Product: syz [ 1483.882106][ T9] usb 7-1: SerialNumber: syz [ 1483.906687][ T9] usb 7-1: config 0 descriptor?? [ 1483.923327][T23729] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4203'. [ 1483.945883][ T9] cm109 7-1:0.8: invalid payload size 64, expected 4 [ 1483.986113][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input42 [ 1484.360373][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1484.370317][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1484.377630][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1484.385060][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1484.392261][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1484.399714][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1484.406801][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1484.413915][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1484.420989][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1484.428164][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1484.436475][ T9] usb 7-1: USB disconnect, device number 3 [ 1484.442393][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1484.517451][ T9] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1484.577665][T23113] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1484.725757][ T29] audit: type=1400 audit(1787381182.475:2163): avc: denied { write } for pid=23751 comm="syz.9.4208" name="node" dev="configfs" ino=62713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1484.751556][T23113] usb 4-1: not running at top speed; connect to a high speed hub [ 1484.761546][T23113] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1484.770831][ T29] audit: type=1400 audit(1787381182.475:2164): avc: denied { create } for pid=23751 comm="syz.9.4208" name="mynode" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 1484.802956][T23113] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 59, changing to 4 [ 1484.824024][ T29] audit: type=1400 audit(1787381182.505:2165): avc: denied { read } for pid=23751 comm="syz.9.4208" name="ipv4_address" dev="configfs" ino=98178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 1484.849971][T23113] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 4 [ 1484.864792][T23113] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1484.880046][ T29] audit: type=1800 audit(1787381182.505:2166): pid=23752 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.4208" name="ipv4_address" dev="configfs" ino=98178 res=0 errno=0 [ 1484.903684][T23113] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.920681][T23113] usb 4-1: Product: 꺄ი괤ê㈂璉䣟됊櫎準鶳ꍟ鼮噈醬蛩껢皾빶 [ 1484.931570][T23113] usb 4-1: Manufacturer: Ảᐘ̌綷ᬹ邼䧡ϱ罆ᡪ喅ⷧ긫䝻駙贵矣賓䁢⾖˯弜㕃饱艁禜⋕焕痉ਂ᜹賫㳥鄵鉥ꋆ濞ዼ㣿ݦ綹욿 [ 1484.948206][ T29] audit: type=1800 audit(1787381182.505:2167): pid=23753 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.4208" name="ipv4_port" dev="configfs" ino=98179 res=0 errno=0 [ 1484.982199][T23113] usb 4-1: SerialNumber: 䰊 [ 1485.001748][ T29] audit: type=1800 audit(1787381182.515:2168): pid=23752 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.4208" name="num" dev="configfs" ino=98181 res=0 errno=0 [ 1485.088266][ T29] audit: type=1800 audit(1787381182.515:2169): pid=23752 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.9.4208" name="local" dev="configfs" ino=98182 res=0 errno=0 [ 1485.323505][T23745] nbd3: detected capacity change from 0 to 8 [ 1485.346680][T23773] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1485.357062][T23773] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1485.375968][T23773] fuse: Bad value for 'fd' [ 1485.416467][T23744] block nbd3: Cannot add socket to a running device [ 1485.491857][ C0] blk_print_req_error: 6 callbacks suppressed [ 1485.491870][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1485.507477][ C0] buffer_io_error: 247 callbacks suppressed [ 1485.507486][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1485.555114][T21372] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1485.568141][T21372] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1485.581525][T21372] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1485.594324][T21372] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1485.602250][T21372] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1485.611817][T21372] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1485.619631][T21372] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1485.629767][T21372] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1485.640030][T21372] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1485.649563][T21372] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1485.657665][T17410] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 1485.665166][T21372] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1485.674783][T21372] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1485.682617][T21372] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1485.694035][T21372] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1485.702504][T23745] block nbd3: shutting down sockets [ 1485.707857][T20695] ldm_validate_partition_table(): Disk read failed. [ 1485.716017][T23778] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4217'. [ 1485.742654][T21372] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1485.752449][T21372] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1485.760989][T21372] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1485.771384][T23777] binder: 23776:23777 ioctl 7a0 2000000001c0 returned -22 [ 1485.778537][T21372] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1485.786535][T20695] Dev nbd3: unable to read RDB block 0 [ 1485.811936][T20695] nbd3: unable to read partition table [ 1485.821059][T23777] binder: 23776:23777 ioctl c00864bf 200000000300 returned -22 [ 1485.839975][T20695] nbd3: partition table beyond EOD, truncated [ 1485.863827][T20695] ldm_validate_partition_table(): Disk read failed. [ 1485.892753][T23777] binder: 23776:23777 ioctl c0104811 200000000040 returned -22 [ 1485.904364][T20695] Dev nbd3: unable to read RDB block 0 [ 1485.914011][T17410] usb 7-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 1485.937795][ T29] audit: type=1400 audit(1787381183.685:2170): avc: denied { setopt } for pid=23787 comm="syz.7.4220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1485.962121][T20695] nbd3: unable to read partition table [ 1485.968186][T23777] 9p: Bad value for 'rfdno' [ 1485.986899][T17410] usb 7-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1486.008600][T20695] nbd3: partition table beyond EOD, truncated [ 1486.031466][ T4965] ldm_validate_partition_table(): Disk read failed. [ 1486.052410][T17410] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1486.080654][ T4965] Dev nbd3: unable to read RDB block 0 [ 1486.091785][T17410] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.111377][ T4965] nbd3: unable to read partition table [ 1486.133595][T17410] usb 7-1: config 0 descriptor?? [ 1486.138884][ T4965] nbd3: partition table beyond EOD, truncated [ 1486.166103][T23113] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1486.176678][ T4965] ldm_validate_partition_table(): Disk read failed. [ 1486.207564][ T4965] Dev nbd3: unable to read RDB block 0 [ 1486.223628][ T4965] nbd3: unable to read partition table [ 1486.247679][T14072] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1486.259965][ T4965] nbd3: partition table beyond EOD, truncated [ 1486.272401][T23113] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1486.330590][T23113] usb 4-1: USB disconnect, device number 26 [ 1486.408488][ T9] usb 8-1: new high-speed USB device number 123 using dummy_hcd [ 1486.427978][T14072] usb 1-1: Using ep0 maxpacket: 8 [ 1486.452562][T20727] udevd[20727]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1486.484501][T14072] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1486.587710][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1486.609307][T14072] usb 1-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 2.a8 [ 1486.631299][T17410] usbhid 7-1:0.0: can't add hid device: -71 [ 1486.646226][T17410] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1486.670643][T14072] usb 1-1: config 3 has an invalid interface number: 4 but max is 0 [ 1486.679103][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 1486.699274][ T9] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1486.714092][T17410] usb 7-1: USB disconnect, device number 4 [ 1486.722225][T14072] usb 1-1: config 3 has no interface number 0 [ 1486.735165][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1486.750344][T14072] usb 1-1: config 3 interface 4 has no altsetting 0 [ 1486.769833][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1486.787129][T14072] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.804505][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.813062][T14072] usb 1-1: Product: syz [ 1486.824454][T14072] usb 1-1: Manufacturer: syz [ 1486.836680][ T9] usb 8-1: config 0 descriptor?? [ 1486.845121][T14072] usb 1-1: SerialNumber: syz [ 1487.061403][T23791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1487.082665][T23791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1487.103427][T14072] apple-mfi-fastcharge 1-1: USB disconnect, device number 43 [ 1487.361746][ T9] hid_parser_main: 15 callbacks suppressed [ 1487.361760][ T9] koneplus 0003:1E7D:2D51.008E: unknown main item tag 0x0 [ 1487.410270][ T9] koneplus 0003:1E7D:2D51.008E: unknown main item tag 0x0 [ 1487.506202][ T9] koneplus 0003:1E7D:2D51.008E: unknown main item tag 0x0 [ 1487.520767][ T9] koneplus 0003:1E7D:2D51.008E: unknown main item tag 0x0 [ 1487.528433][ T9] koneplus 0003:1E7D:2D51.008E: unknown main item tag 0x0 [ 1487.543617][ T9] koneplus 0003:1E7D:2D51.008E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.7-1/input0 [ 1487.577027][ T9] koneplus 0003:1E7D:2D51.008E: couldn't init struct koneplus_device [ 1487.606493][ T9] koneplus 0003:1E7D:2D51.008E: couldn't install mouse [ 1487.653268][ T9] koneplus 0003:1E7D:2D51.008E: probe with driver koneplus failed with error -71 [ 1487.712936][ T9] usb 8-1: USB disconnect, device number 123 [ 1488.444839][T23823] syzkaller0: entered promiscuous mode [ 1488.488236][T23823] syzkaller0: entered allmulticast mode [ 1492.417561][ T29] audit: type=1400 audit(1787381190.165:2171): avc: denied { setopt } for pid=23833 comm="syz.7.4236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1492.733237][ T29] audit: type=1400 audit(1787381190.485:2172): avc: denied { map } for pid=23845 comm="syz.6.4239" path="/dev/nullb0" dev="devtmpfs" ino=694 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1493.189134][T14072] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 1496.045881][T23834] pim6reg: entered allmulticast mode [ 1496.135063][T14072] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1496.182998][T14072] usb 7-1: New USB device found, idVendor=0c70, idProduct=f00b, bcdDevice= 0.00 [ 1496.247253][T14072] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1497.061102][T14072] usb 7-1: can't read configurations, error -71 [ 1497.781904][T23113] usb 8-1: new high-speed USB device number 124 using dummy_hcd [ 1498.020565][T23113] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1498.057879][T23113] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.570247][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1498.593630][T23113] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1498.644224][T23113] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1498.713603][T23113] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 1498.757880][T23880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1498.766077][T23113] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 1498.777987][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1498.799371][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1498.826524][T23113] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 1498.858024][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1498.879295][T23113] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 1498.912393][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1498.935956][T23113] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 1498.989935][T23113] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 1499.007832][ T9] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1499.038274][ T9] usb 4-1: Product: syz [ 1499.043938][T23113] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1499.061832][ T9] usb 4-1: Manufacturer: syz [ 1499.099540][ T9] hub 4-1:4.0: USB hub found [ 1499.113019][T23113] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1499.156063][T23113] usb 8-1: config 1 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 14 [ 1499.573156][ T9] hub 4-1:4.0: 4 ports detected [ 1500.110040][ T9] hub 4-1:4.0: insufficient power available to use all downstream ports [ 1500.141189][T23113] usb 8-1: string descriptor 0 read error: -71 [ 1500.185010][T23113] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.261288][T23113] usb 8-1: can't set config #1, error -71 [ 1500.308760][T23113] usb 8-1: USB disconnect, device number 124 [ 1501.349237][T23113] libceph: connect (1)[c::]:6789 error -101 [ 1501.365929][T23910] libceph: secret too big 79 [ 1501.405617][ T9] usb 4-1: USB disconnect, device number 27 [ 1501.412973][T23113] libceph: mon0 (1)[c::]:6789 connect error [ 1501.433155][T23910] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4254'. [ 1501.484328][T14072] libceph: connect (1)[c::]:6789 error -101 [ 1501.590024][T23913] ceph: No mds server is up or the cluster is laggy [ 1501.596681][T23914] ceph: No mds server is up or the cluster is laggy [ 1501.615167][T14072] libceph: mon0 (1)[c::]:6789 connect error [ 1502.304860][T23113] libceph: connect (1)[c::]:6789 error -101 [ 1502.342767][T23113] libceph: mon0 (1)[c::]:6789 connect error [ 1502.541244][T23931] tmpfs: Unknown parameter 'sizx<%' [ 1502.546490][ T29] audit: type=1400 audit(1787381200.295:2173): avc: denied { mounton } for pid=23930 comm="syz.3.4258" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=158 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1502.587712][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1502.877666][ T9] usb 8-1: new high-speed USB device number 125 using dummy_hcd [ 1503.535417][ T29] audit: type=1400 audit(1787381201.285:2174): avc: denied { getopt } for pid=23939 comm="syz.9.4262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1503.657623][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1504.419271][ T9] usb 8-1: New USB device found, idVendor=086a, idProduct=0001, bcdDevice= 0.40 [ 1505.067539][ T29] audit: type=1400 audit(1787381201.705:2175): avc: denied { read write } for pid=23939 comm="syz.9.4262" name="uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1505.112943][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.142587][ T9] usb 8-1: Product: syz [ 1505.182315][ T9] usb 8-1: Manufacturer: syz [ 1505.187452][T23949] overlayfs: conflicting options: nfs_export=on,index=off [ 1505.204614][ T9] usb 8-1: SerialNumber: syz [ 1505.215570][ T29] audit: type=1400 audit(1787381201.705:2176): avc: denied { open } for pid=23939 comm="syz.9.4262" path="/dev/uhid" dev="devtmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1505.312356][ T29] audit: type=1400 audit(1787381202.795:2177): avc: denied { shutdown } for pid=23943 comm="syz.6.4264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1505.413353][ T29] audit: type=1400 audit(1787381202.795:2178): avc: denied { read } for pid=23943 comm="syz.6.4264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1505.458094][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1505.937765][ T9] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1506.082445][ T9] snd-usb-audio 8-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 1506.125453][ T9] usb 8-1: USB disconnect, device number 125 [ 1506.149820][ T10] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1506.177910][T20695] udevd[20695]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1506.246473][ T10] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1506.276733][ T10] usb 1-1: config 1 has no interface number 0 [ 1506.311810][ T10] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1506.360844][ T10] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1506.411474][ T10] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0x6E, changing to 0xE [ 1506.464128][ T10] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1506.526681][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.552478][ T10] usb 1-1: Product: syz [ 1506.572019][ T10] usb 1-1: Manufacturer: syz [ 1506.594908][ T10] usb 1-1: SerialNumber: syz [ 1506.640870][T23953] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1506.887421][ T10] usb 1-1: Error in usbnet_get_endpoints (-71) [ 1506.945885][ T10] usb 1-1: USB disconnect, device number 44 [ 1508.192615][T23970] SELinux: ebitmap: truncated map [ 1508.231044][T23970] SELinux: invalid class [ 1508.347958][T14072] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1509.139384][T23970] SELinux: failed to load policy [ 1509.630615][T14072] usb 7-1: Using ep0 maxpacket: 32 [ 1509.660922][T14072] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1509.677408][T23996] input: syz1 as /devices/virtual/input/input43 [ 1509.737630][T14072] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1509.770727][T24000] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4279'. [ 1509.785779][T14072] usb 7-1: config 0 has no interface number 0 [ 1509.815164][T14072] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.864670][T14072] usb 7-1: Product: syz [ 1509.889087][T14072] usb 7-1: Manufacturer: syz [ 1509.919184][T14072] usb 7-1: SerialNumber: syz [ 1509.948653][T14072] usb 7-1: config 0 descriptor?? [ 1509.976116][T14072] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1510.062541][T14072] usb 7-1: qt2_attach - failed to power on unit: -71 [ 1510.114302][T14072] quatech2 7-1:0.51: probe with driver quatech2 failed with error -71 [ 1510.122922][ T5794] usb 8-1: new high-speed USB device number 126 using dummy_hcd [ 1510.154965][T24005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1510.187727][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1510.201926][T14072] usb 7-1: USB disconnect, device number 7 [ 1510.330364][ T5794] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1510.379092][ T5794] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 64 [ 1510.389344][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 1510.416394][ T10] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1510.459967][ T5794] usb 8-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1510.494215][ T10] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1510.533668][ T5794] usb 8-1: config 1 interface 0 has no altsetting 0 [ 1510.557049][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1510.580871][ T5794] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.605828][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.621793][ T5794] usb 8-1: Product: ㄫ玵麻㟰讐橱謙蔬┣˼괵떸陗〹쟈瘼旸扃䨙懏럀㫬膎碽쇷桌潫ᐞ崦䆟᪂ [ 1510.670020][ T10] usb 4-1: config 0 descriptor?? [ 1510.701017][ T5794] usb 8-1: Manufacturer: ╔뀹級냟쥹쵺⁦ᙃ莚鏙屝烜찶賷ᶘ埕ⱚ鉫妟큕쁸ꨔ솀䝘♮ᢊ궮㈪駹淢禼㨥ᇒ圱㵉쀧ㆴ嫑࿷砅ൽ힒佮䰴篴ῲᴠ蘀්갾½慝擉并跭푫䙔뗑퟾蟪嘎੶㘡귙䇮嫗⹃럄⋉卆뼅蚄皒❼沊ᾲ鲜 [ 1510.800196][T14072] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1510.831726][ T5794] usb 8-1: SerialNumber: Џ [ 1510.860186][T24001] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1510.888063][T24001] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1510.969045][T14072] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1511.004221][T14072] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1511.057299][T14072] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.094239][T14072] usb 7-1: config 0 descriptor?? [ 1511.156883][ T10] pantherlord 0003:0810:0001.008F: unknown main item tag 0x0 [ 1511.198945][ T10] pantherlord 0003:0810:0001.008F: unknown main item tag 0x0 [ 1511.223044][ T29] audit: type=1400 audit(1787381208.975:2179): avc: denied { remount } for pid=24020 comm="syz.0.4286" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1511.261414][ T10] pantherlord 0003:0810:0001.008F: unknown main item tag 0x0 [ 1511.418739][T14072] usbhid 7-1:0.0: can't add hid device: -71 [ 1511.424863][ T10] pantherlord 0003:0810:0001.008F: unknown main item tag 0x0 [ 1511.448142][T14072] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1511.457268][ T10] pantherlord 0003:0810:0001.008F: unknown main item tag 0x0 [ 1511.481300][T14072] usb 7-1: USB disconnect, device number 8 [ 1511.496501][ T10] pantherlord 0003:0810:0001.008F: bogus close delimiter [ 1511.520725][ T10] pantherlord 0003:0810:0001.008F: item 0 0 2 10 parsing failed [ 1511.539867][ T10] pantherlord 0003:0810:0001.008F: parse failed [ 1511.554739][ T10] pantherlord 0003:0810:0001.008F: probe with driver pantherlord failed with error -22 [ 1511.579602][ T10] usb 4-1: USB disconnect, device number 28 [ 1511.635463][T24012] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4284'. [ 1511.644551][T23113] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 1511.798071][T23113] usb 10-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1511.808281][T23113] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.820988][T23113] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1511.831818][T23113] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.842267][T23113] usb 10-1: config 0 descriptor?? [ 1511.855432][T23113] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1511.977696][T14072] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1512.013249][T24040] device-mapper: ioctl: Unable to rename non-existent device, to j [ 1512.061581][T24024] bridge_slave_0: left allmulticast mode [ 1512.067267][T24024] bridge_slave_0: left promiscuous mode [ 1512.072972][T24024] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.083875][T24024] bridge_slave_1: left allmulticast mode [ 1512.090473][T24024] bridge_slave_1: left promiscuous mode [ 1512.096142][T24024] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.111817][T24024] bond0: (slave bond_slave_0): Releasing backup interface [ 1512.121433][T24024] bond0: (slave bond_slave_1): Releasing backup interface [ 1512.131841][T24024] team0: Port device team_slave_0 removed [ 1512.142040][T24024] team0: Port device team_slave_1 removed [ 1512.148879][T24024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1512.156279][T24024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1512.164522][T24024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1512.172226][T24024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1512.180686][T24024] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1512.222383][T14072] usb 7-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 1512.241591][T23113] spca561 10-1:0.0: probe with driver spca561 failed with error -22 [ 1512.271722][T14072] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1512.291565][T23113] usb 10-1: USB disconnect, device number 85 [ 1512.342843][T14072] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.393742][T14072] usb 7-1: config 0 descriptor?? [ 1512.415009][T24012] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1512.647645][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1513.459781][T24051] i2c i2c-0: delete_device: Extra parameters [ 1513.578406][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1513.613678][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1513.651702][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1513.691277][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.741337][ T10] spcp8x5 1-1:1.0: SPCP8x5 converter detected [ 1513.789486][ T10] usb 1-1: SPCP8x5 converter now attached to ttyUSB0 [ 1513.946567][T24057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1513.965901][ C0] ================================================================== [ 1513.973974][ C0] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 1513.981501][ C0] Read of size 1 at addr ffff888055a63912 by task modprobe/24072 [ 1513.989185][ C0] [ 1513.991495][ C0] CPU: 0 UID: 0 PID: 24072 Comm: modprobe Tainted: G L syzkaller #0 PREEMPT(full) [ 1513.991512][ C0] Tainted: [L]=SOFTLOCKUP [ 1513.991517][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1513.991523][ C0] Call Trace: [ 1513.991528][ C0] [ 1513.991533][ C0] dump_stack_lvl+0x100/0x190 [ 1513.991549][ C0] print_report+0x13d/0x4b0 [ 1513.991565][ C0] ? __virt_addr_valid+0x239/0x430 [ 1513.991582][ C0] ? find_endpoint+0x2a3/0x2c0 [ 1513.991593][ C0] kasan_report+0xdf/0x1c0 [ 1513.991604][ C0] ? find_endpoint+0x2a3/0x2c0 [ 1513.991618][ C0] find_endpoint+0x2a3/0x2c0 [ 1513.991631][ C0] dummy_timer+0x259e/0x3700 [ 1513.991650][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1513.991666][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1513.991680][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1513.991694][ C0] ? mark_held_locks+0x40/0x70 [ 1513.991709][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1513.991724][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1513.991738][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 1513.991753][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 1513.991766][ C0] handle_softirqs+0x1e6/0x9d0 [ 1513.991783][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1513.991799][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1513.991812][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1513.991826][ C0] __irq_exit_rcu+0x194/0x210 [ 1513.991841][ C0] irq_exit_rcu+0x9/0x30 [ 1513.991856][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1513.991872][ C0] [ 1513.991876][ C0] [ 1513.991880][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1513.991892][ C0] RIP: 0010:can_vma_merge_left+0xbe/0x5f0 [ 1513.991906][ C0] Code: ff 49 8d 7c 24 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 81 04 00 00 48 8d 7d 30 4d 8b 7c 24 08 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f [ 1513.991917][ C0] RSP: 0018:ffffc90004836ff0 EFLAGS: 00000246 [ 1513.991927][ C0] RAX: dffffc0000000000 RBX: 1ffff92000906dff RCX: 0000000000000000 [ 1513.991935][ C0] RDX: 1ffff1100f1d6391 RSI: ffffffff826c5475 RDI: ffffc90004837460 [ 1513.991942][ C0] RBP: ffffc90004837430 R08: 0000000000000007 R09: 0000000000000000 [ 1513.991948][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888078eb1c80 [ 1513.991955][ C0] R13: ffffc900048374b8 R14: ffffc90004837440 R15: 00005591fcd0d000 [ 1513.991964][ C0] ? can_vma_merge_left+0x95/0x5f0 [ 1513.991985][ C0] ? __pfx_can_vma_merge_left+0x10/0x10 [ 1513.991997][ C0] ? atime_needs_update+0x8b/0x760 [ 1513.992012][ C0] vma_merge_new_range+0x341/0xc00 [ 1513.992026][ C0] ? __pfx_vma_merge_new_range+0x10/0x10 [ 1513.992038][ C0] ? __pfx_ext4_file_mmap_prepare+0x10/0x10 [ 1513.992054][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1513.992072][ C0] __mmap_region+0xa7a/0x30b0 [ 1513.992085][ C0] ? __pfx___mmap_region+0x10/0x10 [ 1513.992097][ C0] ? __pfx_mt_validate_nulls+0x10/0x10 [ 1513.992112][ C0] ? mt_validate_nulls+0x1b3/0xa10 [ 1513.992124][ C0] ? __pfx_mt_validate_nulls+0x10/0x10 [ 1513.992137][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 1513.992165][ C0] mmap_region+0x3db/0x6d0 [ 1513.992178][ C0] ? __pfx_mmap_region+0x10/0x10 [ 1513.992191][ C0] ? shmem_mapping+0xd/0x50 [ 1513.992204][ C0] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 1513.992216][ C0] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1513.992227][ C0] ? security_mmap_addr+0x71/0x1e0 [ 1513.992238][ C0] ? __get_unmapped_area+0x255/0x3e0 [ 1513.992254][ C0] do_mmap+0x12c7/0x1c30 [ 1513.992270][ C0] ? __pfx_do_mmap+0x10/0x10 [ 1513.992286][ C0] ? __pfx___might_resched+0x10/0x10 [ 1513.992301][ C0] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 1513.992314][ C0] ? security_current_getlsmprop_subj+0x6e/0x130 [ 1513.992328][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 1513.992341][ C0] vm_mmap_pgoff+0x28d/0x470 [ 1513.992356][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1513.992373][ C0] vm_mmap+0x8e/0xc0 [ 1513.992387][ C0] elf_load+0x2b1/0x720 [ 1513.992403][ C0] load_elf_binary+0xf34/0x51a0 [ 1513.992421][ C0] ? __pfx_load_elf_binary+0x10/0x10 [ 1513.992436][ C0] ? find_held_lock+0x2b/0x80 [ 1513.992448][ C0] ? bprm_execve+0x8a2/0x1940 [ 1513.992461][ C0] ? bprm_execve+0x8a2/0x1940 [ 1513.992474][ C0] bprm_execve+0x8cd/0x1940 [ 1513.992489][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 1513.992502][ C0] ? copy_strings_kernel+0x152/0x190 [ 1513.992516][ C0] kernel_execve+0x31e/0x3a0 [ 1513.992530][ C0] call_usermodehelper_exec_async+0x239/0x4b0 [ 1513.992546][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 1513.992560][ C0] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 1513.992576][ C0] ret_from_fork+0x730/0xd60 [ 1513.992592][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1513.992608][ C0] ? rcu_is_watching+0x13/0xc0 [ 1513.992619][ C0] ? __switch_to+0x800/0x10f0 [ 1513.992632][ C0] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 1513.992648][ C0] ret_from_fork_asm+0x1a/0x30 [ 1513.992661][ C0] [ 1513.992666][ C0] [ 1514.469239][ C0] Allocated by task 9: [ 1514.473276][ C0] kasan_save_stack+0x30/0x50 [ 1514.477940][ C0] kasan_save_track+0x14/0x30 [ 1514.482599][ C0] __kasan_kmalloc+0xaa/0xb0 [ 1514.487161][ C0] __kmalloc_cache_noprof+0x2e7/0x6b0 [ 1514.492512][ C0] snd_mixer_oss_build_test+0x7a/0x380 [ 1514.497957][ C0] snd_mixer_oss_build_test_all+0x2b4/0x6e0 [ 1514.503827][ C0] snd_mixer_oss_build_input+0x139/0xd50 [ 1514.509440][ C0] snd_mixer_oss_notify_handler+0x48d/0x990 [ 1514.515316][ C0] snd_card_register+0x2af/0x760 [ 1514.520222][ C0] try_to_register_card+0x1d6/0x390 [ 1514.525394][ C0] usb_audio_probe+0xf71/0x3b10 [ 1514.530222][ C0] usb_probe_interface+0x303/0x8f0 [ 1514.535304][ C0] really_probe+0x241/0xa60 [ 1514.539780][ C0] __driver_probe_device+0x210/0x460 [ 1514.545037][ C0] driver_probe_device+0x4a/0x140 [ 1514.550036][ C0] __device_attach_driver+0x1df/0x320 [ 1514.555383][ C0] bus_for_each_drv+0x159/0x1e0 [ 1514.560212][ C0] __device_attach+0x1e4/0x4d0 [ 1514.564949][ C0] device_initial_probe+0xaf/0xd0 [ 1514.569951][ C0] bus_probe_device+0x64/0x160 [ 1514.574695][ C0] device_add+0x121d/0x1970 [ 1514.579167][ C0] usb_set_configuration+0xd97/0x1c60 [ 1514.584517][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 1514.589872][ C0] usb_probe_device+0xef/0x400 [ 1514.594604][ C0] really_probe+0x241/0xa60 [ 1514.599078][ C0] __driver_probe_device+0x210/0x460 [ 1514.604335][ C0] driver_probe_device+0x4a/0x140 [ 1514.609333][ C0] __device_attach_driver+0x1df/0x320 [ 1514.614678][ C0] bus_for_each_drv+0x159/0x1e0 [ 1514.619496][ C0] __device_attach+0x1e4/0x4d0 [ 1514.624232][ C0] device_initial_probe+0xaf/0xd0 [ 1514.629229][ C0] bus_probe_device+0x64/0x160 [ 1514.633973][ C0] device_add+0x121d/0x1970 [ 1514.638457][ C0] usb_new_device.part.0+0xcc2/0x1686 [ 1514.643810][ C0] hub_event.cold+0x1e3/0xe90 [ 1514.648468][ C0] process_one_work+0xac7/0x1b10 [ 1514.653388][ C0] worker_thread+0x5ef/0xe50 [ 1514.657949][ C0] kthread+0x373/0x450 [ 1514.662000][ C0] ret_from_fork+0x730/0xd60 [ 1514.666563][ C0] ret_from_fork_asm+0x1a/0x30 [ 1514.671293][ C0] [ 1514.673589][ C0] Freed by task 9: [ 1514.677284][ C0] kasan_save_stack+0x30/0x50 [ 1514.681935][ C0] kasan_save_track+0x14/0x30 [ 1514.686585][ C0] kasan_save_free_info+0x3b/0x70 [ 1514.691580][ C0] __kasan_slab_free+0x5f/0x80 [ 1514.696326][ C0] kfree+0x22b/0x6c0 [ 1514.700201][ C0] snd_mixer_oss_build_test+0x118/0x380 [ 1514.705731][ C0] snd_mixer_oss_build_test_all+0x2b4/0x6e0 [ 1514.711596][ C0] snd_mixer_oss_build_input+0x139/0xd50 [ 1514.717201][ C0] snd_mixer_oss_notify_handler+0x48d/0x990 [ 1514.723077][ C0] snd_card_register+0x2af/0x760 [ 1514.727993][ C0] try_to_register_card+0x1d6/0x390 [ 1514.733174][ C0] usb_audio_probe+0xf71/0x3b10 [ 1514.737999][ C0] usb_probe_interface+0x303/0x8f0 [ 1514.743081][ C0] really_probe+0x241/0xa60 [ 1514.747556][ C0] __driver_probe_device+0x210/0x460 [ 1514.752814][ C0] driver_probe_device+0x4a/0x140 [ 1514.757815][ C0] __device_attach_driver+0x1df/0x320 [ 1514.763159][ C0] bus_for_each_drv+0x159/0x1e0 [ 1514.767979][ C0] __device_attach+0x1e4/0x4d0 [ 1514.772728][ C0] device_initial_probe+0xaf/0xd0 [ 1514.777724][ C0] bus_probe_device+0x64/0x160 [ 1514.782469][ C0] device_add+0x121d/0x1970 [ 1514.786941][ C0] usb_set_configuration+0xd97/0x1c60 [ 1514.792282][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 1514.797638][ C0] usb_probe_device+0xef/0x400 [ 1514.802371][ C0] really_probe+0x241/0xa60 [ 1514.806849][ C0] __driver_probe_device+0x210/0x460 [ 1514.812106][ C0] driver_probe_device+0x4a/0x140 [ 1514.817102][ C0] __device_attach_driver+0x1df/0x320 [ 1514.822448][ C0] bus_for_each_drv+0x159/0x1e0 [ 1514.827278][ C0] __device_attach+0x1e4/0x4d0 [ 1514.832025][ C0] device_initial_probe+0xaf/0xd0 [ 1514.837024][ C0] bus_probe_device+0x64/0x160 [ 1514.841760][ C0] device_add+0x121d/0x1970 [ 1514.846231][ C0] usb_new_device.part.0+0xcc2/0x1686 [ 1514.851574][ C0] hub_event.cold+0x1e3/0xe90 [ 1514.856224][ C0] process_one_work+0xac7/0x1b10 [ 1514.861132][ C0] worker_thread+0x5ef/0xe50 [ 1514.865693][ C0] kthread+0x373/0x450 [ 1514.869735][ C0] ret_from_fork+0x730/0xd60 [ 1514.874307][ C0] ret_from_fork_asm+0x1a/0x30 [ 1514.879050][ C0] [ 1514.881350][ C0] The buggy address belongs to the object at ffff888055a63800 [ 1514.881350][ C0] which belongs to the cache kmalloc-512 of size 512 [ 1514.895380][ C0] The buggy address is located 274 bytes inside of [ 1514.895380][ C0] freed 512-byte region [ffff888055a63800, ffff888055a63a00) [ 1514.909140][ C0] [ 1514.911445][ C0] The buggy address belongs to the physical page: [ 1514.917835][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55a60 [ 1514.926571][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1514.935035][ C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1514.942553][ C0] page_type: f5(slab) [ 1514.946504][ C0] raw: 00fff00000000040 ffff88801c027c80 dead000000000100 dead000000000122 [ 1514.955054][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1514.963606][ C0] head: 00fff00000000040 ffff88801c027c80 dead000000000100 dead000000000122 [ 1514.972254][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1514.980900][ C0] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 1514.989542][ C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 1514.998184][ C0] page dumped because: kasan: bad access detected [ 1515.004562][ C0] page_owner tracks the page as allocated [ 1515.010244][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13, tgid 13 (kworker/u8:1), ts 69463228939 [ 1515.029405][ C0] post_alloc_hook+0xfd/0x120 [ 1515.034053][ C0] get_page_from_freelist+0x110d/0x35b0 [ 1515.039568][ C0] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 1515.045430][ C0] new_slab+0xa5/0x640 [ 1515.049479][ C0] refill_objects+0xe3/0x410 [ 1515.054040][ C0] __pcs_replace_empty_main+0x372/0x680 [ 1515.059563][ C0] __kmalloc_noprof+0x66b/0x820 [ 1515.064385][ C0] fib6_info_alloc+0x40/0x160 [ 1515.069032][ C0] ip6_route_info_create+0x14c/0xad0 [ 1515.074288][ C0] ip6_route_add+0x4b/0x1d0 [ 1515.078765][ C0] addrconf_add_mroute+0x1de/0x350 [ 1515.083845][ C0] addrconf_add_dev+0x14e/0x1a0 [ 1515.088663][ C0] addrconf_init_auto_addrs+0x10e/0x780 [ 1515.094187][ C0] addrconf_notify+0xa10/0x1ba0 [ 1515.099010][ C0] notifier_call_chain+0x99/0x3f0 [ 1515.104005][ C0] call_netdevice_notifiers_info+0xbe/0x110 [ 1515.109867][ C0] page last free pid 1 tgid 1 ts 18783716598 stack trace: [ 1515.116951][ C0] free_pages_prepare+0x586/0xe00 [ 1515.121957][ C0] __free_contig_range_common+0x14f/0x250 [ 1515.127666][ C0] destroy_args+0xa8/0x7a0 [ 1515.132077][ C0] debug_vm_pgtable+0x1d69/0x3490 [ 1515.137076][ C0] do_one_initcall+0x11c/0x6f0 [ 1515.141810][ C0] kernel_init_freeable+0x6ea/0x7b0 [ 1515.147076][ C0] kernel_init+0x21/0x1e0 [ 1515.151380][ C0] ret_from_fork+0x730/0xd60 [ 1515.155946][ C0] ret_from_fork_asm+0x1a/0x30 [ 1515.160692][ C0] [ 1515.162997][ C0] Memory state around the buggy address: [ 1515.168594][ C0] ffff888055a63800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1515.176622][ C0] ffff888055a63880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1515.184651][ C0] >ffff888055a63900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1515.192688][ C0] ^ [ 1515.197243][ C0] ffff888055a63980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1515.205282][ C0] ffff888055a63a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1515.213308][ C0] ================================================================== [ 1515.221346][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1515.228510][ C0] CPU: 0 UID: 0 PID: 24072 Comm: modprobe Tainted: G L syzkaller #0 PREEMPT(full) [ 1515.239250][ C0] Tainted: [L]=SOFTLOCKUP [ 1515.243552][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1515.253585][ C0] Call Trace: [ 1515.256843][ C0] [ 1515.259671][ C0] dump_stack_lvl+0x100/0x190 [ 1515.264331][ C0] vpanic+0x553/0x970 [ 1515.268282][ C0] ? __pfx_vpanic+0x10/0x10 [ 1515.272754][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1515.277751][ C0] ? find_endpoint+0x2a3/0x2c0 [ 1515.282486][ C0] panic+0xd1/0xe0 [ 1515.286180][ C0] ? __pfx_panic+0x10/0x10 [ 1515.290565][ C0] ? end_report.part.0+0x23/0x90 [ 1515.295477][ C0] ? rcu_is_watching+0x13/0xc0 [ 1515.300213][ C0] ? end_report.part.0+0x23/0x90 [ 1515.305124][ C0] check_panic_on_warn.cold+0x19/0x34 [ 1515.310466][ C0] end_report.part.0+0x3a/0x90 [ 1515.315205][ C0] kasan_report.cold+0xe/0x18 [ 1515.319864][ C0] ? find_endpoint+0x2a3/0x2c0 [ 1515.324609][ C0] find_endpoint+0x2a3/0x2c0 [ 1515.329170][ C0] dummy_timer+0x259e/0x3700 [ 1515.333737][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1515.339517][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 1515.345123][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1515.350034][ C0] ? mark_held_locks+0x40/0x70 [ 1515.354773][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1515.360553][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 1515.365464][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 1515.370644][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 1515.375728][ C0] handle_softirqs+0x1e6/0x9d0 [ 1515.380468][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1515.385727][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1515.390558][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 1515.396164][ C0] __irq_exit_rcu+0x194/0x210 [ 1515.400825][ C0] irq_exit_rcu+0x9/0x30 [ 1515.405042][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1515.410652][ C0] [ 1515.413555][ C0] [ 1515.416467][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1515.422428][ C0] RIP: 0010:can_vma_merge_left+0xbe/0x5f0 [ 1515.428118][ C0] Code: ff 49 8d 7c 24 08 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 81 04 00 00 48 8d 7d 30 4d 8b 7c 24 08 <48> b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f [ 1515.447702][ C0] RSP: 0018:ffffc90004836ff0 EFLAGS: 00000246 [ 1515.453749][ C0] RAX: dffffc0000000000 RBX: 1ffff92000906dff RCX: 0000000000000000 [ 1515.461692][ C0] RDX: 1ffff1100f1d6391 RSI: ffffffff826c5475 RDI: ffffc90004837460 [ 1515.469633][ C0] RBP: ffffc90004837430 R08: 0000000000000007 R09: 0000000000000000 [ 1515.477672][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888078eb1c80 [ 1515.485615][ C0] R13: ffffc900048374b8 R14: ffffc90004837440 R15: 00005591fcd0d000 [ 1515.493558][ C0] ? can_vma_merge_left+0x95/0x5f0 [ 1515.498651][ C0] ? __pfx_can_vma_merge_left+0x10/0x10 [ 1515.504169][ C0] ? atime_needs_update+0x8b/0x760 [ 1515.509264][ C0] vma_merge_new_range+0x341/0xc00 [ 1515.514348][ C0] ? __pfx_vma_merge_new_range+0x10/0x10 [ 1515.519962][ C0] ? __pfx_ext4_file_mmap_prepare+0x10/0x10 [ 1515.525829][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1515.531708][ C0] __mmap_region+0xa7a/0x30b0 [ 1515.536358][ C0] ? __pfx___mmap_region+0x10/0x10 [ 1515.541441][ C0] ? __pfx_mt_validate_nulls+0x10/0x10 [ 1515.546888][ C0] ? mt_validate_nulls+0x1b3/0xa10 [ 1515.551979][ C0] ? __pfx_mt_validate_nulls+0x10/0x10 [ 1515.557409][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 1515.562345][ C0] mmap_region+0x3db/0x6d0 [ 1515.566736][ C0] ? __pfx_mmap_region+0x10/0x10 [ 1515.571646][ C0] ? shmem_mapping+0xd/0x50 [ 1515.576134][ C0] ? __pfx_memfd_check_seals_mmap+0x10/0x10 [ 1515.581996][ C0] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1515.586816][ C0] ? security_mmap_addr+0x71/0x1e0 [ 1515.591905][ C0] ? __get_unmapped_area+0x255/0x3e0 [ 1515.597166][ C0] do_mmap+0x12c7/0x1c30 [ 1515.601384][ C0] ? __pfx_do_mmap+0x10/0x10 [ 1515.605949][ C0] ? __pfx___might_resched+0x10/0x10 [ 1515.611218][ C0] ? bpf_lsm_current_getlsmprop_subj+0x9/0x10 [ 1515.617267][ C0] ? security_current_getlsmprop_subj+0x6e/0x130 [ 1515.623576][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 1515.629179][ C0] vm_mmap_pgoff+0x28d/0x470 [ 1515.633752][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1515.638846][ C0] vm_mmap+0x8e/0xc0 [ 1515.642716][ C0] elf_load+0x2b1/0x720 [ 1515.646856][ C0] load_elf_binary+0xf34/0x51a0 [ 1515.651683][ C0] ? __pfx_load_elf_binary+0x10/0x10 [ 1515.656943][ C0] ? find_held_lock+0x2b/0x80 [ 1515.661592][ C0] ? bprm_execve+0x8a2/0x1940 [ 1515.666243][ C0] ? bprm_execve+0x8a2/0x1940 [ 1515.670904][ C0] bprm_execve+0x8cd/0x1940 [ 1515.675382][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 1515.680293][ C0] ? copy_strings_kernel+0x152/0x190 [ 1515.685551][ C0] kernel_execve+0x31e/0x3a0 [ 1515.690124][ C0] call_usermodehelper_exec_async+0x239/0x4b0 [ 1515.696173][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 1515.701344][ C0] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 1515.707913][ C0] ret_from_fork+0x730/0xd60 [ 1515.712481][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1515.717574][ C0] ? rcu_is_watching+0x13/0xc0 [ 1515.722319][ C0] ? __switch_to+0x800/0x10f0 [ 1515.726968][ C0] ? __pfx_call_usermodehelper_exec_async+0x10/0x10 [ 1515.733535][ C0] ret_from_fork_asm+0x1a/0x30 [ 1515.738272][ C0] [ 1515.741316][ C0] Kernel Offset: disabled [ 1515.745610][ C0] Rebooting in 86400 seconds..